last executing test programs: 3.21340352s ago: executing program 0 (id=6683): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x1fc}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000004a00010000000000000000000a00", @ANYBLOB="c387f644d082"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb7", 0x35}, {&(0x7f0000000040)="7d586d16062b1e1b9685b88189e0093982f6994b8df2fe56386ed999f1b34b06", 0x20}, {&(0x7f00000001c0)="a3de1613c49862f837", 0x9}], 0x3}, 0x24000008) 3.126196418s ago: executing program 0 (id=6684): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000080000000000000f0820030000008bf6060284b936f729d5476a04c4a0adfe4e39be6489b9182a2bbb47ae4a792012090006d10169a5909181eaf0204d2095e4162a58fc5236f246c7b14d41faeac55e3ba5653501a1f1a6cd53f25384a54d49ba0790a4f3a7ad75d1ba375d2f29204091c5dbe81b2ac1156e0f3c5363525722"], &(0x7f0000000040)=""/249, 0x26, 0xf9, 0x6}, 0x28) r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000009c0)="4ba70000fd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x40084) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'veth0_macvtap\x00', {}, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000080000000000000f0820030000008bf6060284b936f729d5476a04c4a0adfe4e39be6489b9182a2bbb47ae4a792012090006d10169a5909181eaf0204d2095e4162a58fc5236f246c7b14d41faeac55e3ba5653501a1f1a6cd53f25384a54d49ba0790a4f3a7ad75d1ba375d2f29204091c5dbe81b2ac1156e0f3c5363525722"], &(0x7f0000000040)=""/249, 0x26, 0xf9, 0x6}, 0x28) (async) socket$nl_generic(0x11, 0x3, 0x10) (async) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000009c0)="4ba70000fd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x40084) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'veth0_macvtap\x00', {}, 0x3}) (async) 2.984802365s ago: executing program 0 (id=6687): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x12, 0x1, {0x2, 0x100, 0x0, 0x401, 0x9, 0x80, 0xef, 0x2, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) 2.834027093s ago: executing program 0 (id=6691): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000e80040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$inet(r1, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x810) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x8e}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000000100000001c001280090001006970697027d6fc6015b652eea28f3b"], 0x3c}}, 0x20000000) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.5510228s ago: executing program 1 (id=6694): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newchain={0x2c, 0x64, 0x8, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xfff3, 0x1}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x10}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000000040)=0x18) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xf, 0xffff}, {0xe, 0xfffe}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x8, 0xc6, 0x4, 0xffff, 0x1, 0x6}}, {0x0, 0x2, [0xec, 0x3, 0x10, 0x4, 0xb, 0x4, 0x7, 0xee49, 0x0]}}, {{0x0, 0x1, {0xef, 0xb9, 0x70, 0x3, 0x0, 0x2, 0x80}}, {0x0, 0x2, [0x2]}}, {{0x0, 0x1, {0x6, 0x1, 0x1, 0x7ff, 0x2, 0x10000, 0x9}}, {0x0, 0x2, [0x7]}}, {{0x0, 0x1, {0x7, 0xf, 0x7, 0x5, 0x0, 0x6, 0x3}}, {0x0, 0x2, [0x9, 0x9, 0x949, 0x0, 0x3]}}]}]}, 0x2c}}, 0x890) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}, @TCA_U32_MARK={0x10, 0xa, {0x800, 0x8001}}]}}]}, 0x84}}, 0x20000000) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r15, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) socket$kcm(0x10, 0x2, 0x0) 2.292857707s ago: executing program 0 (id=6699): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) read$nci(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001900010000000000000000001c140000fe000001000000000c00120002000000", @ANYRES32=0x0, @ANYBLOB='-\'\b'], 0x28}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000002c0)=0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001080)='memory.events\x00', 0x275a, 0x0) 2.205854258s ago: executing program 4 (id=6701): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '-'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x77cf}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x891) r2 = socket$kcm(0x29, 0x7, 0x0) (async, rerun: 32) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8081}, 0x0) (rerun: 32) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000280)={@mcast1}, 0x14) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r5 = socket(0x21, 0x80000, 0x40) connect$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0xe6b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xd85}, 0xe) r6 = accept(r4, 0x0, &(0x7f0000000300)) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r5) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x42}}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00'}) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) socketpair(0x6, 0xa, 0x3, &(0x7f0000000540)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000006c0)={r8, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x10) (async, rerun: 32) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000700)={0xe, 0x13, 0x7, 0x3}, 0x8) (rerun: 32) close(r4) (async, rerun: 64) sendmsg$kcm(r9, &(0x7f0000000c00)={&(0x7f0000000740)=@l2tp={0x2, 0x0, @remote, 0x3}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000007c0)="6d94426ef002354c60c0ffc799dc793ea80675040477c60d6d88329c2de87c34247e977b736f9d10378dc6db147be021fb9a151648b1b5e8b9e00785d932dbf6698c42bcc8a604f91c44a69b0f134061255c2e6b75b4eaed217e63077b1618fa51f2fc1bba13f93ce8b819eb0fdaff096ba295051ac9f87a1b41e7ef07ff016ca37c92f4baac8640d196b23d8a4e7f171c2cd274e78326757475996f06247ecc1a260cf6c8ee0ac0dc570c4828138602c6e17cd6e7be2a8e1b7e6ea812b70c38541cddc017", 0xc5}, {&(0x7f00000008c0)="ed852e8fff", 0x5}, {&(0x7f0000000900)="9eaf2c7e769dafbd0f3bb528c1ee3028126d3b6aa00c3949e2b6e6727a5d8e32d75ee805767a8f7d3bce1431df626daa7177918e", 0x34}, {&(0x7f0000000940)="4d15dec89e17732ba2e7445405659d3918934205df180318e02245f51a49d5f8aaedd5e4e13f89bffdee0782907ba9c9abcef757a239fa6afff665862e8f6c75e619c41682c1279f2dfe9c327abaff07561af225e5b2e6766ca46d90cb3e0b9bedd78a2b94e9b56544928a50086f0a38aa2c52126d4055d1047a49b1dcd5d451261738515242abdb8aeee8755b9d434ff95ccb2ca44969ece5cc56dea5c1c319", 0xa0}], 0x4, &(0x7f0000000a40)=[{0x28, 0x88, 0xd, "704340535f443eb994d29e71ed8b9d024ebd252f9e"}, {0x88, 0x6, 0x80000001, "7be9269beedbeb2b779f4af17aa5ed027dfdd8e6a7b7a36fdbef4e0bb0e2fce7f0164f3d64761febae52cd75df6613ab7853cc3115e7f5f3005c46796547476b4925d2797f229615f539c532f2e5ec3e4039813ef1c717447fcafda09a15c847851466b2e63da05426b2c2a095fc585c449a8360a5fa7e"}, {0xe0, 0x3a, 0x5, "f930b7ec0cc2400a227def4c67171ab9bfc22b241e731a719542051809750a26597c65e98ac22a06c3780c1b7038f32e26e82177cd9f8f5ffa8e8bbc0b061fbe2a841ea2441630a43d01a13d6b3d03663cb88acb1142fbc2535aabb13a8425be62530c1e87861e98105bdf5259fc593e6e1e3ec3007434760854957d69ff0d1fa6178485b0858fd2dc311a0049129b64253d5b0348a371bfd8fecc6277f39748edcb366f8a01fc45d49eecbdc44723986678fd22b18fcea35d9d90a1c7f6c17444ccf32e471d3a069126894c"}], 0x190}, 0x40000) (rerun: 64) setsockopt$nfc_llcp_NFC_LLCP_RW(r9, 0x118, 0x0, &(0x7f0000000c40)=0x5, 0x4) (async) r10 = socket$qrtr(0x2a, 0x2, 0x0) listen(r10, 0x6) (async) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000c80), 0x101000, 0x0) ioctl$PPPIOCGNPMODE(r11, 0xc008744c, &(0x7f0000000cc0)={0x57}) ioctl$PPPIOCGNPMODE(r11, 0xc008744c, &(0x7f0000000d00)={0x2d, 0x2}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000d80)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x502, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20040800) 2.178582596s ago: executing program 1 (id=6703): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffe, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000001000010427da205ac342380c7c89f3a1", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c00028005001100"], 0x50}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000ed0000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x3, @loopback}}, 0x1e) connect$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x10, @broadcast}}, 0x1e) 2.021992358s ago: executing program 4 (id=6705): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x9}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x18, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f00800fee0050000000000002f77fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff23}, 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000600), &(0x7f0000000640)=r5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xf3ff}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 1.947598045s ago: executing program 2 (id=6707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x20, r6, 0x1, 0x40, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}]}]}, 0x20}}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r4, 0xb5}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000380)=0x84) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}}, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r11, &(0x7f00000001c0)={0x1d, r12}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0xd8, r10, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_OURS={0x48, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x3e, 0x5, "92bf90a95db0fd0bb1c6afe234ee8748dffcd6cc27d2e0b9ed8282af3ef40e993492b3c31cc9981ec00d1d69e52f59d12a6c941c2756a64fbd8a"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xff}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x48840}, 0x4000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x28}}, 0x0) r13 = socket(0x200000000000011, 0x2, 0x0) r14 = socket$inet6(0xa, 0x3, 0x3) bind$inet6(r14, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r15, @ANYBLOB="0a0001"], 0x48}}, 0x0) 1.501903017s ago: executing program 2 (id=6708): socket$netlink(0x10, 0x3, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x0, 0x1}, 0x2) pselect6(0x71, 0x0, &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 1.472372299s ago: executing program 3 (id=6709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000001100)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) (async) bind$packet(r1, &(0x7f0000001100)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000ac0)={0x3, 0x7}, 0x4) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x80) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x50, 0x2, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2d, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 1.417993794s ago: executing program 2 (id=6710): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x4a3, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000040)="c1", 0xfe41) poll(&(0x7f0000000180)=[{r1, 0x4}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.386689801s ago: executing program 1 (id=6711): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="184aa09b000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000019000000bca900000000000035090100980000009500000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r1], 0x108}}], 0x1, 0xc040) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r3, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 1.265691573s ago: executing program 3 (id=6712): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x14, 0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f00000000c0)={0x5, 0x1, 0x93c, 0xd, 0x7}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000300)) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f0000000340)) r5 = accept4(r0, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000400)=0x80, 0x80000) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000480)={@loopback, @initdev, 0x0}, &(0x7f00000004c0)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb0, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x400}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x4000) syz_emit_ethernet(0x21c, &(0x7f0000000640)={@empty, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "7aedf6", 0x1e6, 0x6, 0x1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@hopopts={0x3a, 0x25, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @pad1, @generic={0x3, 0x8d, "2e2370e5af2120dc4f872fab64862582731d886a56fed74df669b7fa46da513887497fb8c14acde07ea32b61336eb8621539e5a65bde58b3d9e644fd9546e6ead4e28994115dfbb283058ceab96bdbef8dcd3f1dd3842e1772a2ea4b52a70a1dfe395148269bc32e5f6e8d4829eb2287114a6d364f3fcfc099d70a5b19482bd66dd3bf7936ff3a4c2bbad44597"}, @generic={0x0, 0x8c, "c3da6c26d7d7cb799c1e9dff46acf6ff9d1d4a33baab9f091d5c6fe26b5ca201aea2bac4c3a18bb77027b2e847c9eaca7aa99323f22309510383a14e27f216ca5b61b30fd9d3a382b1aec9df3e6adaab5150572e4923c4c716c22c5bcf56cbf42c3c1027a29375570e58ba998cee75ae1989ef34aca6549f2b6f2c843b686fe1499340bd4bd340ed3f78b577"}, @jumbo={0xc2, 0x4, 0xbad9}]}], "ab0dfab1c9f1c261ef035c586015495230a40d42e48c890f1244d12c24642a9492a31c4479c61f25c3b4148fa703eac00fa3cd617f0e4f8e3b01832d2a798eb0e17872ec0102d025f0f0fd4fd09ef0804482e4ca6211aa031ea90a8e720930b09183bbb3b07150497e038c09611fa648a4a2fec998aaac1b177eb08809df100d51bfa60f0c81542ec0d5570a6b213ae6c7d710a05da4646ed2a8825691a52fd95044352c245ec667fc007f24ccd7"}}}}}, 0x0) close(r2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(r7, 0x1000, &(0x7f0000000880)="f3689e10af4a3d7820e8dba9972661bb7f1e3b187e77b997752bf585fa05b221a040f8e73c11e9ddf0c46c575a93c11ff782165e481895cc0d644cd8d85989da5bff0263810159775e6f6368cad2a7fa0a798c76403bb367ea37daf09490f5811bddb2c70838e8a120d23fb45e7640459f039bbe536870e59116eae9e9644e6589f7ece424c0680219ffbb6cb9c31bf3d06fa17b31d25f38a7971eaf096c895bd282f0d2709f76967c579e3d4583ae44318692964cd812249430cb08b67e31492ef153735532b7186e") r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r5) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000d80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a00)={0x338, r9, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x93}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x110}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x180e}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7e9a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4b3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3af}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x719}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x4008000}, 0x50) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000dc0)=0x60, 0x2) getsockname$l2tp(r5, &(0x7f0000000e00), &(0x7f0000000e40)=0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000f00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000f40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000f80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001000)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000001140)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x64, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000054) 1.26421426s ago: executing program 0 (id=6713): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x24000840) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r2 = socket$inet6(0xa, 0x3, 0x7b) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x80, 0x0, 0x0, 0xdffffffffffffffb, 0xffffffffffffffff, 0x9, 0x3}, {0x6, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x2, @in=@rand_addr=0x64010100, 0x3507, 0x4, 0x0, 0x0, 0x3, 0x0, 0x4}}, 0xe8) syz_emit_ethernet(0x76, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x9, 0x6, 'EAC', 0x8000, 0x0, 0x0, @private2, @private2, [@hopopts={0x89}], "98efd03a7e60b623"}}}}}}}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000)=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x6, 0x1, 0x0, 0x20000000) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0x220, 0xffffffff, 0x0, 0x220, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv6=@empty, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f28ea2ca9fc716fde1fee7674a328aa7bcfbed13dc86f31c65dc7a915265bc3d88a72adb0c599f2a26e2100dd13bc6fdfa7417e74728e727eabbdaa6a1417df59fd2c835a8d4ccf426f5c48189f906e6418782a682c10584c2465f4ea85799291480e20e9a07d7ae64e70f56409490135d19ba0a08941e41bd0dbac899ea88736b8aba0135517133c55cbefafc0495a9fbd3681cd11c03e5d76f79fe0906f0f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x16, &(0x7f0000000280)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xba, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x69b, 0x0, 0x0, 0x0, 0x200}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 1.183169403s ago: executing program 1 (id=6714): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x5, 0x9, 0xf2}, {0x6, 0x5, 0x80, 0x7f}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000380)="54f8d5ffa5c4f9ce05adc6de25f186e482f3ae919fb2", 0x0, 0x24000001, &(0x7f0000000480)={0x2, 0x4e22, @private=0xa010102}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xce}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r5, 0xf1aad47e89fb43b5, 0x0, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x34040840}, 0x4000) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x15c, r5, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x101}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x6c}}, 0x0) 1.074704499s ago: executing program 4 (id=6715): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x1fc}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) shutdown(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@deltclass={0x6c, 0x29, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0xfff3, 0x5}, {0x1, 0xd}}, [@tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @TCA_RATE={0x6, 0x5, {0x22, 0x4}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4004090) (async, rerun: 64) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async, rerun: 64) close(0x3) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x7f81, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r8, 0x8b32, &(0x7f0000000040)) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (rerun: 32) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) (async, rerun: 64) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) (rerun: 64) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 994.016088ms ago: executing program 3 (id=6716): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = getpid() ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000380)=r3) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611970000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x1adb9, 0x100c, 0x0, 0x7, 0x1}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071100f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 867.934085ms ago: executing program 1 (id=6717): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x400000000000016b, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd714100027d003b11"}]}}}}}}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @default]}, 0x48) listen(r0, 0x1ad72f7) accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4$netrom(r0, 0x0, 0x0, 0x80000) connect$netrom(r2, 0x0, 0x0) (async) connect$netrom(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$tipc(r3, &(0x7f00000000c0), &(0x7f0000000240)=0x10, 0x800) 837.439454ms ago: executing program 3 (id=6718): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x3, '\x00', 0x0, @sk_msg}, 0x94) 577.770376ms ago: executing program 3 (id=6719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x5, 0x6, 0x900, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x3af9d1000a3d1f29) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000000)={@multicast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffef}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0xc0a, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x28, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}}, 0x0) 515.725395ms ago: executing program 2 (id=6720): bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de3832", 0x9d}, {&(0x7f0000000480)}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2", 0x39}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6", 0xcb}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f17", 0x19}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) 458.367173ms ago: executing program 3 (id=6721): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffe, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000ed0000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x3, @loopback}}, 0x1e) connect$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x10, @broadcast}}, 0x1e) 457.922026ms ago: executing program 1 (id=6722): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{}, {0x35, 0x0, 0x5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=@newsa={0x1138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4}, {@in6=@empty, 0x0, 0xd4}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x1048, 0x3, {{'lzjh\x00'}, 0x8000, "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"}}]}, 0x1138}}, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r3, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000180)=""/146, 0x92}, {0x0}], 0x2, &(0x7f0000002780)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x2162, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c) sendto$inet6(r6, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x4890, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r5, 0x1, 0x0, 0xfffffffe, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) 370.633444ms ago: executing program 4 (id=6723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x3, 0x4) sendmmsg$unix(r2, &(0x7f0000001340)=[{{&(0x7f0000000440)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="100000000000000001000040410000003e4fdc57ee91c47d90261adaf158f244d2d3459234a6fa6e238a403cc415"], 0x10}}], 0x1, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010800000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480340001800e000100696d6d6564696174650000002000028004000280040002800c0002800500010034000000080001400000000d08000b40000000000900010073797a3000000000140000001100010000000000000000000000000a3d5d4bad0b19145f57157cf9deee8e10a4b27d50331c7b9e90dcf5f5f01c3ffe2c2e601e93d1e5ce89540e60057e3a"], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 266.651593ms ago: executing program 4 (id=6724): r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'ip_vti0\x00', {}, 0x6}) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50005}, 0x0) (async, rerun: 64) r1 = socket$kcm(0x29, 0x5, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf250701f2800c0004000bac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async, rerun: 32) ioctl$sock_netdev_private(r5, 0x89f2, &(0x7f0000000000)) (rerun: 32) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x0, @ANYRES16=r1], 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r6, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 32) r9 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) write$tun(r7, &(0x7f00000004c0)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x11, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x11, 0x0, @opaque="90e591f96b7f1ed769"}}}}}}}, 0x4b) (async, rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xffffffffffffff1b, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 249.135271ms ago: executing program 2 (id=6725): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}, {0x2d, 'net_cls'}, {0x2d, 'devices'}, {0x2d, 'io'}, {0x2b, 'net_prio'}, {0x0, 'freezer'}, {0x2d, 'net'}, {0x2b, 'net_cls'}, {0x2b, 'io'}, {0x2b, 'perf_event'}]}, 0x4c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 65.963529ms ago: executing program 4 (id=6726): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$SIOCAX25CTLCON(r6, 0x89e8, &(0x7f0000000080)={@default, @default, @null, 0x63, 0xffffffffffff0001, 0x7, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1b, 0xa}}) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_int(r11, 0x107, 0xe, &(0x7f0000000580)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x24000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000001000100", @ANYRES32=0x0, @ANYBLOB="1b8b020000000000200012800b00010067656e657665000010000280060005004e1f000004000600"], 0x40}}, 0x0) 0s ago: executing program 2 (id=6727): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="c4fb6624deedf49854bcb842df6f4966a1f84d5029bbe95d1e72bea5f6e4d00e2c7bf8e8faef5d94e761253a806ba0936daf7465d5b79156e5fd3256e8ec4216551b31fdbfc23f57fad5e04547c475fbbc26972147a2e495b3e38dc3b7f0b7ba69b327", @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r1], 0x3c}}, 0x0) close(r1) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x800, 0x4) kernel console output (not intermixed with test programs): alloon:0kB [ 630.925659][T26262] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 630.982519][T26262] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 631.021450][T26271] netlink: 576 bytes leftover after parsing attributes in process `syz.2.5522'. [ 631.031653][T26262] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 631.038744][T26262] Node 0 DMA32 free:1251792kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23484kB inactive_anon:0kB active_file:10808kB inactive_file:160336kB unevictable:1536kB writepending:172kB zspages:0kB present:3129332kB managed:2552580kB mlocked:0kB bounce:0kB free_pcp:38144kB local_pcp:16736kB free_cma:0kB [ 631.073479][T26262] lowmem_reserve[]: 0 0 0 0 0 [ 631.078562][T26262] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 631.108779][T26262] lowmem_reserve[]: 0 0 0 0 0 [ 631.113743][T26262] Node 1 Normal free:3920836kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:25464kB local_pcp:2760kB free_cma:0kB [ 631.181223][T26262] lowmem_reserve[]: 0 0 0 0 0 [ 631.187041][T26262] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15352kB [ 631.203421][T26262] Node 0 DMA32: 9392*4kB (UME) 6628*8kB (UME) 3201*16kB (UME) 268*32kB (UME) 630*64kB (UME) 293*128kB (UM) 532*256kB (UM) 441*512kB (U) 310*1024kB (UE) 150*2048kB (UME) 9*4096kB (UM) = 1251696kB [ 631.263431][T26262] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 631.292629][T26262] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 3*16kB (UM) 2*32kB (UM) 3*64kB (UM) 1*128kB (M) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 955*4096kB (UM) = 3920836kB [ 631.318382][T26262] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 631.335113][T26276] bond13: entered promiscuous mode [ 631.344278][T26277] tipc: Cannot configure node identity twice [ 631.357872][T26286] macvlan6: entered promiscuous mode [ 631.363280][T26286] macvlan6: entered allmulticast mode [ 631.369352][T26262] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 631.380088][T26262] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 631.393101][T26262] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 631.402708][T26262] 44205 total pagecache pages [ 631.407994][T26262] 0 pages in swap cache [ 631.412199][T26262] Free swap = 124996kB [ 631.416638][T26262] Total swap = 124996kB [ 631.420974][T26262] 2097051 pages RAM [ 631.424859][T26262] 0 pages HighMem/MovableOnly [ 631.429760][T26262] 427072 pages reserved [ 631.434595][T26262] 0 pages cma reserved [ 631.445547][T26286] bond13: (slave macvlan6): Opening slave failed [ 631.576608][T26293] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 631.606035][T26296] netlink: 'syz.1.5529': attribute type 1 has an invalid length. [ 631.653059][T26296] bond24: (slave gretap4): making interface the new active one [ 631.663514][T26296] bond24: (slave gretap4): Enslaving as an active interface with an up link [ 631.732999][T26300] tipc: Enabling of bearer rejected, failed to enable media [ 631.751367][T26300] vlan0: entered promiscuous mode [ 631.760366][T26300] bridge0: entered promiscuous mode [ 631.769464][T26300] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 633.071533][T26390] netlink: 'syz.3.5554': attribute type 20 has an invalid length. [ 633.087860][T26389] netlink: 'syz.2.5555': attribute type 6 has an invalid length. [ 633.133672][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 633.141771][ C1] lec:lec_tx_timeout: lec0 [ 633.147009][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 633.208218][T26395] IPv6: NLM_F_CREATE should be specified when creating new route [ 633.225666][T26390] netlink: 'syz.3.5554': attribute type 20 has an invalid length. [ 633.244578][T26390] __nla_validate_parse: 13 callbacks suppressed [ 633.244600][T26390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5554'. [ 633.473239][T26404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5548'. [ 633.773077][T26422] ip6t_srh: unknown srh invflags 4000 [ 633.898857][T26430] netlink: 'syz.2.5565': attribute type 1 has an invalid length. [ 633.934145][T26430] netlink: 'syz.2.5565': attribute type 11 has an invalid length. [ 633.961509][T26430] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5565'. [ 633.996591][T26441] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5569'. [ 634.039361][T26443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5566'. [ 634.054426][ T146] net_ratelimit: 34 callbacks suppressed [ 634.054451][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 634.104027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.112593][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.121317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.165766][T26443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 634.294042][ T6246] bond8: (slave bridge3): failed to get link speed/duplex [ 634.436209][T26459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5573'. [ 634.446696][T26459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5573'. [ 634.458776][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 634.596112][T26467] netlink: 'syz.1.5574': attribute type 21 has an invalid length. [ 634.606644][T26467] netlink: 'syz.1.5574': attribute type 22 has an invalid length. [ 634.614704][T26467] netlink: 'syz.1.5574': attribute type 23 has an invalid length. [ 634.622996][T26467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5574'. [ 634.632549][ T6231] bond8: (slave bridge3): failed to get link speed/duplex [ 634.659103][T26467] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5574'. [ 634.744027][ T6231] bond8: (slave bridge3): failed to get link speed/duplex [ 634.854217][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 634.984631][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 635.058640][T26490] validate_nla: 2 callbacks suppressed [ 635.058661][T26490] netlink: 'syz.3.5583': attribute type 58 has an invalid length. [ 635.097654][T26490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5583'. [ 635.220615][T26501] netlink: 'syz.1.5586': attribute type 10 has an invalid length. [ 635.577027][T26519] syzkaller1: entered allmulticast mode [ 635.678134][T26526] netlink: 'syz.3.5596': attribute type 15 has an invalid length. [ 635.695513][ T6231] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 768 - 0 [ 635.695952][T26526] netlink: 'syz.3.5596': attribute type 15 has an invalid length. [ 635.728148][ T6231] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 768 - 0 [ 635.741395][T26529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.762645][ T6231] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 768 - 0 [ 635.776491][ T6231] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 768 - 0 [ 635.934101][T26538] tipc: Enabling of bearer rejected, failed to enable media [ 635.959259][T26540] netlink: 'syz.2.5602': attribute type 7 has an invalid length. [ 635.971563][T26540] netlink: 'syz.2.5602': attribute type 8 has an invalid length. [ 636.048304][T26542] syzkaller0: entered promiscuous mode [ 636.063027][T26542] syzkaller0: entered allmulticast mode [ 636.412695][T26565] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 636.415540][T26566] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 636.550284][T26573] netlink: 'syz.0.5610': attribute type 1 has an invalid length. [ 636.636536][T26577] netlink: 'syz.3.5612': attribute type 13 has an invalid length. [ 636.869406][T26584] SET target dimension over the limit! [ 638.153762][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 638.161913][ C1] lec:lec_tx_timeout: lec0 [ 638.166645][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 638.877867][T26573] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 638.901997][T26577] veth0_macvtap: left promiscuous mode [ 638.917180][T26577] macvtap0: entered allmulticast mode [ 638.934692][T26577] macvtap0: refused to change device tx_queue_len [ 639.057586][T26615] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 639.073898][ T6231] net_ratelimit: 13 callbacks suppressed [ 639.073923][ T6231] bond8: (slave bridge3): failed to get link speed/duplex [ 639.212906][T26629] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 639.327347][ T6231] bond8: (slave bridge3): failed to get link speed/duplex [ 639.378450][T26638] __nla_validate_parse: 17 callbacks suppressed [ 639.378473][T26638] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5626'. [ 639.441411][T26636] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5625'. [ 639.454030][T26636] bridge0: entered allmulticast mode [ 639.461387][T21680] bond8: (slave bridge3): failed to get link speed/duplex [ 639.556139][T26646] syzkaller0: entered promiscuous mode [ 639.574359][T26646] syzkaller0: entered allmulticast mode [ 639.599675][T26654] rdma_rxe: rxe_newlink: failed to add bond0 [ 639.607888][T21680] bond8: (slave bridge3): failed to get link speed/duplex [ 639.754844][ T6243] bond8: (slave bridge3): failed to get link speed/duplex [ 639.799470][T26666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5633'. [ 639.863886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.872601][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.881212][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.044210][ T6243] bond8: (slave bridge3): failed to get link speed/duplex [ 640.067244][T26677] bridge_slave_1: Caught tx_queue_len zero misconfig [ 640.424259][T26683] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20004 [ 640.589027][T26699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5641'. [ 640.897439][T26709] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5645'. [ 642.715772][T26674] lo speed is unknown, defaulting to 1000 [ 642.903206][T26724] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 642.951574][T26722] xt_limit: Overflow, try lower: 604147548/4200216962 [ 642.960076][T26721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5650'. [ 642.970444][T26721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5650'. [ 643.094534][T26713] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 643.173652][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 643.182006][ C1] lec:lec_tx_timeout: lec0 [ 643.187590][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 643.267692][T26734] syz.1.5652: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 643.300937][T26734] CPU: 0 UID: 0 PID: 26734 Comm: syz.1.5652 Not tainted syzkaller #0 PREEMPT(full) [ 643.300968][T26734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 643.300981][T26734] Call Trace: [ 643.300990][T26734] [ 643.300999][T26734] dump_stack_lvl+0xe8/0x150 [ 643.301036][T26734] warn_alloc+0x249/0x340 [ 643.301065][T26734] ? stack_trace_save+0xa9/0x100 [ 643.301099][T26734] ? __pfx_warn_alloc+0x10/0x10 [ 643.301134][T26734] ? kasan_save_track+0x4f/0x80 [ 643.301156][T26734] ? kasan_save_track+0x3e/0x80 [ 643.301179][T26734] ? __kasan_kmalloc+0x93/0xb0 [ 643.301204][T26734] ? __kmalloc_cache_noprof+0x31c/0x660 [ 643.301228][T26734] ? xskq_create+0x56/0x170 [ 643.301255][T26734] ? xsk_setsockopt+0x54c/0x990 [ 643.301278][T26734] ? do_sock_setsockopt+0x17c/0x1b0 [ 643.301305][T26734] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 643.301331][T26734] ? do_syscall_64+0x14d/0xf80 [ 643.301366][T26734] __vmalloc_node_range_noprof+0x132/0x1730 [ 643.301428][T26734] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 643.301461][T26734] ? __kasan_kmalloc+0x93/0xb0 [ 643.301494][T26734] vmalloc_user_noprof+0xad/0xe0 [ 643.301519][T26734] ? xskq_create+0xbf/0x170 [ 643.301547][T26734] xskq_create+0xbf/0x170 [ 643.301578][T26734] xsk_init_queue+0x8a/0xe0 [ 643.301607][T26734] xsk_setsockopt+0x54c/0x990 [ 643.301636][T26734] ? __pfx_xsk_setsockopt+0x10/0x10 [ 643.301662][T26734] ? __pfx_aa_sk_perm+0x10/0x10 [ 643.301699][T26734] ? aa_sock_opt_perm+0xff/0x1a0 [ 643.301724][T26734] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 643.301748][T26734] ? __pfx_xsk_setsockopt+0x10/0x10 [ 643.301776][T26734] do_sock_setsockopt+0x17c/0x1b0 [ 643.301810][T26734] __x64_sys_setsockopt+0x13d/0x1b0 [ 643.301845][T26734] do_syscall_64+0x14d/0xf80 [ 643.301875][T26734] ? trace_irq_disable+0x3b/0x150 [ 643.301894][T26734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.301916][T26734] ? clear_bhb_loop+0x40/0x90 [ 643.301949][T26734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.301971][T26734] RIP: 0033:0x7ff94ed9c819 [ 643.301993][T26734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.302011][T26734] RSP: 002b:00007ff94fbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 643.302033][T26734] RAX: ffffffffffffffda RBX: 00007ff94f016090 RCX: 00007ff94ed9c819 [ 643.302049][T26734] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 643.302061][T26734] RBP: 00007ff94ee32c91 R08: 0000000000000004 R09: 0000000000000000 [ 643.302075][T26734] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.302095][T26734] R13: 00007ff94f016128 R14: 00007ff94f016090 R15: 00007ffcba73e548 [ 643.302132][T26734] [ 643.302431][T26734] Mem-Info: [ 643.391594][T26740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5654'. [ 643.409136][T26734] active_anon:5908 inactive_anon:0 isolated_anon:0 [ 643.409136][T26734] active_file:2830 inactive_file:40138 isolated_file:0 [ 643.409136][T26734] unevictable:768 dirty:90 writeback:0 [ 643.409136][T26734] slab_reclaimable:13175 slab_unreclaimable:122380 [ 643.409136][T26734] mapped:29399 shmem:1373 pagetables:1428 [ 643.409136][T26734] sec_pagetables:0 bounce:0 [ 643.409136][T26734] kernel_misc_reclaimable:0 [ 643.409136][T26734] free:1295820 free_pcp:14611 free_cma:0 [ 643.644921][T26734] Node 0 active_anon:23632kB inactive_anon:0kB active_file:11320kB inactive_file:160352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117596kB dirty:360kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15784kB pagetables:5564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 643.718477][T26734] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 643.769336][T26734] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 643.806943][T26734] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 643.816694][T26746] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5657'. [ 643.838944][T26734] Node 0 DMA32 free:1245988kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23632kB inactive_anon:0kB active_file:11320kB inactive_file:160352kB unevictable:1536kB writepending:360kB zspages:0kB present:3129332kB managed:2552580kB mlocked:0kB bounce:0kB free_pcp:34488kB local_pcp:20508kB free_cma:0kB [ 643.924111][T26734] lowmem_reserve[]: 0 0 0 0 0 [ 643.929181][T26734] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 644.026441][T26734] lowmem_reserve[]: 0 0 0 0 0 [ 644.061375][T26758] netlink: 264 bytes leftover after parsing attributes in process `syz.2.5659'. [ 644.070883][T26734] Node 1 Normal free:3921620kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24648kB local_pcp:21888kB free_cma:0kB [ 644.132477][T26756] net_ratelimit: 69 callbacks suppressed [ 644.132501][T26756] netlink: set zone limit has 4 unknown bytes [ 644.153787][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 644.173793][T26734] lowmem_reserve[]: 0 0 0 0 0 [ 644.178640][T26734] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15352kB [ 644.204982][T26734] Node 0 DMA32: 10895*4kB (UME) 6713*8kB (UME) 3058*16kB (UME) 152*32kB (M) 560*64kB (UM) 297*128kB (UM) 533*256kB (UM) 441*512kB (U) 310*1024kB (UE) 153*2048kB (UME) 7*4096kB (UM) = 1246628kB [ 644.225866][T26734] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 644.270670][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 644.301675][T26765] netlink: 'syz.2.5661': attribute type 4 has an invalid length. [ 644.323842][T26734] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 4*64kB (UM) 3*128kB (UM) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 3*2048kB (U) 955*4096kB (UM) = 3921620kB [ 644.383880][ T6249] bond8: (slave bridge3): failed to get link speed/duplex [ 644.413801][T26734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 644.443213][T26734] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 644.491270][T26734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 644.501936][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 644.534976][T26774] netlink: 'syz.2.5663': attribute type 1 has an invalid length. [ 644.535407][T26734] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 644.557175][T26772] netlink: 212152 bytes leftover after parsing attributes in process `syz.3.5662'. [ 644.623472][T26734] 44339 total pagecache pages [ 644.628502][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 644.653759][T26734] 0 pages in swap cache [ 644.659964][T26734] Free swap = 124996kB [ 644.674146][T26734] Total swap = 124996kB [ 644.681793][T26734] 2097051 pages RAM [ 644.685903][T26734] 0 pages HighMem/MovableOnly [ 644.690761][T26734] 427072 pages reserved [ 644.698872][T26734] 0 pages cma reserved [ 644.824694][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 644.841441][T26786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5667'. [ 644.851482][T26787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5665'. [ 644.851510][T26787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5665'. [ 644.901035][T26786] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5667'. [ 644.913533][T26786] netlink: 'syz.1.5667': attribute type 5 has an invalid length. [ 644.946653][T26792] netlink: 'syz.2.5668': attribute type 10 has an invalid length. [ 644.965344][ T6246] bond8: (slave bridge3): failed to get link speed/duplex [ 644.992547][T26792] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.000240][T26792] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.072101][T26798] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5670'. [ 645.074281][ T6246] bond8: (slave bridge3): failed to get link speed/duplex [ 645.125736][T26793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5667'. [ 645.177149][T26786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5667'. [ 645.203820][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 645.229464][T26803] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5672'. [ 645.252113][T26798] syzkaller0: entered promiscuous mode [ 645.257829][T26798] syzkaller0: entered allmulticast mode [ 645.436127][T26818] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5676'. [ 645.480138][T26818] bond0: entered promiscuous mode [ 645.486216][T26818] bridge_slave_1: entered promiscuous mode [ 645.494593][T26818] bond0: left promiscuous mode [ 645.508546][T26818] bridge_slave_1: left promiscuous mode [ 645.596758][T26821] bond12: entered promiscuous mode [ 645.602312][T26821] 8021q: adding VLAN 0 to HW filter on device bond12 [ 645.644645][T26828] bridge6: entered promiscuous mode [ 645.654624][T26828] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 645.676685][T26821] macvlan3: entered promiscuous mode [ 645.686566][T26821] macvlan3: entered allmulticast mode [ 645.702960][T26821] bond12: (slave macvlan3): Error -98 calling set_mac_address [ 645.999553][T26857] chnl_net:caif_netlink_parms(): no params data found [ 646.041311][T26850] syzkaller0: entered promiscuous mode [ 646.070804][T26850] syzkaller0: entered allmulticast mode [ 646.218381][T26871] siw: device registration error -23 [ 646.430727][T26886] set match dimension is over the limit! [ 646.666372][T26900] netlink: 'syz.0.5697': attribute type 58 has an invalid length. [ 647.224958][T26911] syzkaller0: entered promiscuous mode [ 647.254232][T26911] syzkaller0: entered allmulticast mode [ 647.862729][T26949] netlink: 'syz.3.5715': attribute type 1 has an invalid length. [ 647.950123][T26949] bond13: (slave veth3): Enslaving as an active interface with a down link [ 647.971922][T26949] 8021q: adding VLAN 0 to HW filter on device bond13 [ 647.979801][T26956] netlink: 'syz.1.5717': attribute type 10 has an invalid length. [ 648.194017][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 648.202163][ C1] lec:lec_tx_timeout: lec0 [ 648.207156][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 648.466637][T26987] gtp2: entered promiscuous mode [ 648.482675][T26987] gtp2: entered allmulticast mode [ 649.270354][T27029] SET target dimension over the limit! [ 649.275183][ T6249] net_ratelimit: 34 callbacks suppressed [ 649.275247][ T6249] bond8: (slave bridge3): failed to get link speed/duplex [ 649.433966][ T6249] bond8: (slave bridge3): failed to get link speed/duplex [ 649.559730][T21680] bond8: (slave bridge3): failed to get link speed/duplex [ 649.685452][ T6243] bond8: (slave bridge3): failed to get link speed/duplex [ 649.804356][T21680] bond8: (slave bridge3): failed to get link speed/duplex [ 649.896964][ T6243] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.912921][T27057] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 649.947625][ T6243] bond8: (slave bridge3): failed to get link speed/duplex [ 650.064194][ T6246] bond8: (slave bridge3): failed to get link speed/duplex [ 650.189506][ T6243] bond8: (slave bridge3): failed to get link speed/duplex [ 650.327041][ T6246] bond8: (slave bridge3): failed to get link speed/duplex [ 650.455601][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 650.633185][T27110] __nla_validate_parse: 22 callbacks suppressed [ 650.633216][T27110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5761'. [ 650.683533][T27110] hsr0: entered promiscuous mode [ 650.705244][T27110] macvlan6: entered allmulticast mode [ 650.724497][T27110] hsr0: entered allmulticast mode [ 650.739874][T27110] hsr_slave_0: entered allmulticast mode [ 650.764120][T27110] hsr_slave_1: entered allmulticast mode [ 650.921367][T27124] xt_time: unknown flags 0xf4 [ 651.184638][T27137] netlink: 'syz.0.5767': attribute type 4 has an invalid length. [ 651.193409][T27133] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5766'. [ 651.439328][T27145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.671161][T27157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5773'. [ 651.695799][T27154] netlink: 'syz.2.5771': attribute type 1 has an invalid length. [ 651.717308][T27154] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5771'. [ 651.736528][T27157] netlink: 'syz.3.5773': attribute type 10 has an invalid length. [ 651.763093][T27154] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5771'. [ 651.795339][T27154] netlink: 638 bytes leftover after parsing attributes in process `syz.2.5771'. [ 651.848935][T27170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5776'. [ 651.988411][T27178] netlink: 'syz.2.5779': attribute type 1 has an invalid length. [ 652.005670][T27178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5779'. [ 652.145301][T27184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5781'. [ 652.199263][T27187] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 652.370986][T27204] netlink: 'syz.1.5789': attribute type 8 has an invalid length. [ 652.522649][T27214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5792'. [ 653.213682][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 653.221797][ C1] lec:lec_tx_timeout: lec0 [ 653.230199][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 653.363008][T27237] 8021q: adding VLAN 0 to HW filter on device bond14 [ 653.373106][T27254] netlink: 'syz.3.5801': attribute type 64 has an invalid length. [ 653.386832][T27252] macvlan7: entered promiscuous mode [ 653.392326][T27252] macvlan7: entered allmulticast mode [ 653.489854][T27252] bond14: entered allmulticast mode [ 653.495511][T27252] bond14: entered promiscuous mode [ 653.501516][T27252] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 653.512036][T27252] team0: Port device macvlan7 added [ 654.315456][ T6243] net_ratelimit: 27 callbacks suppressed [ 654.315482][ T6243] bond8: (slave bridge3): failed to get link speed/duplex [ 654.325555][T27320] netlink: 'syz.1.5820': attribute type 1 has an invalid length. [ 654.464199][ T6243] bond8: (slave bridge3): failed to get link speed/duplex [ 654.574792][ T6243] bond8: (slave bridge3): failed to get link speed/duplex [ 654.870686][T27333] syzkaller0: entered promiscuous mode [ 654.881735][T27333] syzkaller0: entered allmulticast mode [ 654.938934][T21955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 654.958717][T21955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 654.968836][T21955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 654.978164][T21955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 654.986081][T21955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 655.141931][T27363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.151639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.784013][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.792561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.801155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.159852][T27380] __nla_validate_parse: 7 callbacks suppressed [ 656.159874][T27380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5831'. [ 657.064181][T21955] Bluetooth: hci3: command tx timeout [ 657.064291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.315253][ T6249] bond8: (slave bridge3): failed to get link speed/duplex [ 657.458444][ T6243] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.490938][T27387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 657.791361][ T6243] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.968979][ T6243] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.992320][T27416] netlink: 'syz.4.5843': attribute type 11 has an invalid length. [ 658.002354][T27416] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5843'. [ 658.055691][T27356] lo speed is unknown, defaulting to 1000 [ 658.224143][T27428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5846'. [ 658.233599][T27431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5846'. [ 658.253891][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 658.262029][ C1] lec:lec_tx_timeout: lec0 [ 658.267162][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 658.414405][T27433] syzkaller1: entered promiscuous mode [ 658.419974][T27433] syzkaller1: entered allmulticast mode [ 658.447735][T27436] syzkaller0: entered promiscuous mode [ 658.453488][T27436] syzkaller0: entered allmulticast mode [ 658.593325][T27441] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5847'. [ 658.791565][T27458] macsec1: entered promiscuous mode [ 658.895757][ T6243] erspan0: left allmulticast mode [ 658.923994][ T6243] erspan0: left promiscuous mode [ 658.937951][ T6243] bridge4: port 1(erspan0) entered disabled state [ 659.145508][T21955] Bluetooth: hci3: command tx timeout [ 659.264688][ T6243] tipc: Disabling bearer [ 659.480538][ T6243] bond22 (unregistering): (slave gretap3): Releasing backup interface [ 659.536710][ T6243] bond24 (unregistering): (slave gretap4): Releasing active interface [ 659.598508][ T6243] dvmrp8 (unregistering): left allmulticast mode [ 660.066704][ T6243]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.080882][ T6243]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.092589][ T6243]  (unregistering): (slave bridge_slave_1): Releasing backup interface [ 660.107432][ T6243]  (unregistering): Released all slaves [ 660.120931][ T6243] bond1 (unregistering): Released all slaves [ 660.135840][ T6243] bond2 (unregistering): Released all slaves [ 660.150976][ T6243] bond3 (unregistering): Released all slaves [ 660.166649][ T6243] bond4 (unregistering): Released all slaves [ 660.183396][ T6243] bond0 (unregistering): Released all slaves [ 660.203573][ T6243] bond5 (unregistering): Released all slaves [ 660.223164][ T6243] bond6 (unregistering): Released all slaves [ 660.247388][ T6243] bond7 (unregistering): Released all slaves [ 660.265836][ T6243] bond8 (unregistering): Released all slaves [ 660.281864][ T6243] bond9 (unregistering): Released all slaves [ 660.296716][ T6243] bond10 (unregistering): Released all slaves [ 660.311483][ T6243] bond11 (unregistering): Released all slaves [ 660.332138][ T6243] bond12 (unregistering): Released all slaves [ 660.351930][ T6243] bond13 (unregistering): Released all slaves [ 660.367096][ T6243] bond14 (unregistering): Released all slaves [ 660.381728][ T6243] bond15 (unregistering): Released all slaves [ 660.397324][ T6243] bond16 (unregistering): Released all slaves [ 660.411709][ T6243] bond17 (unregistering): Released all slaves [ 660.441921][ T6243] bond18 (unregistering): Released all slaves [ 660.457947][ T6243] bond19 (unregistering): Released all slaves [ 660.478535][ T6243] bond20 (unregistering): Released all slaves [ 660.498941][ T6243] bond21 (unregistering): Released all slaves [ 660.518226][ T6243] bond22 (unregistering): (slave bond23): Releasing backup interface [ 660.527717][ T6243] bond22 (unregistering): Released all slaves [ 660.542471][ T6243] bond23 (unregistering): Released all slaves [ 660.562182][ T6243] bond24 (unregistering): Released all slaves [ 660.604075][ T6231] net_ratelimit: 8 callbacks suppressed [ 660.604098][ T6231] bond8: (slave bridge3): failed to get link speed/duplex [ 660.619620][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 660.630337][T27498] tipc: Enabling of bearer rejected, failed to enable media [ 660.734145][ T6231] bond8: (slave bridge3): failed to get link speed/duplex [ 660.865469][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 660.907067][ T6243] 9: left promiscuous mode [ 661.013912][T27520] netlink: 'syz.4.5860': attribute type 8 has an invalid length. [ 661.018610][ T6243] tipc: Left network mode [ 661.092484][T27514] syzkaller0: entered promiscuous mode [ 661.105002][T27514] syzkaller0: entered allmulticast mode [ 661.142941][T27517] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 661.163217][T27517] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 661.209291][ T6231] bond8: (slave bridge3): failed to get link speed/duplex [ 661.223876][T21955] Bluetooth: hci3: command tx timeout [ 661.492601][T27539] SET target dimension over the limit! [ 661.588055][T27356] chnl_net:caif_netlink_parms(): no params data found [ 661.623914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.632423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.640907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.083940][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 662.145733][T27356] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.162437][T27356] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.180008][T27570] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5873'. [ 662.207900][T27356] bridge_slave_0: entered allmulticast mode [ 662.230429][T27356] bridge_slave_0: entered promiscuous mode [ 662.317781][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2 [ 662.341571][T27356] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.360922][T27356] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.374309][T27356] bridge_slave_1: entered allmulticast mode [ 662.406578][T27356] bridge_slave_1: entered promiscuous mode [ 662.504159][ T6231] bond8: (slave bridge3): failed to get link speed/duplex [ 662.567943][T27583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5877'. [ 662.626455][T27590] netlink: 'syz.2.5879': attribute type 9 has an invalid length. [ 662.661830][T27356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.747598][T27356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.775325][T27597] x_tables: unsorted underflow at hook 2 [ 662.781136][T27597] x_tables: unsorted underflow at hook 2 [ 663.003398][T27603] syzkaller1: entered promiscuous mode [ 663.011263][T27603] syzkaller1: entered allmulticast mode [ 663.109774][T27356] team0: Port device team_slave_0 added [ 663.126895][T27610] xt_hashlimit: size too large, truncated to 1048576 [ 663.259233][T27615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5886'. [ 663.273736][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 663.281808][ C1] lec:lec_tx_timeout: lec0 [ 663.287165][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 663.304579][T21955] Bluetooth: hci3: command tx timeout [ 663.444824][T27356] team0: Port device team_slave_1 added [ 663.505835][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.678976][ T6243] pim6reg (unregistering): left allmulticast mode [ 663.812325][T27642] netlink: 'syz.4.5892': attribute type 10 has an invalid length. [ 663.939433][ T6243] team0 (unregistering): Port device team_slave_1 removed [ 663.966378][ T6243] team0 (unregistering): Port device team_slave_0 removed [ 664.238065][T21677] smc: removing ib device syz2 [ 664.245369][T27621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5887'. [ 664.362574][T27638] veth1_macvtap: left promiscuous mode [ 664.374891][T27638] macsec0: entered promiscuous mode [ 664.380179][T27638] macsec0: entered allmulticast mode [ 664.462421][T27356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.500390][T27356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.584565][T27356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.620327][T27356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.633809][T27356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.691838][T27356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.773332][ T5491] 8021q: adding VLAN 0 to HW filter on device eth3 [ 664.993844][T27356] hsr_slave_0: entered promiscuous mode [ 665.020153][T27356] hsr_slave_1: entered promiscuous mode [ 665.034724][T27356] debugfs: 'hsr0' already exists in 'hsr' [ 665.049315][T27356] Cannot create hsr debugfs directory [ 665.285047][T27692] netlink: 'syz.4.5902': attribute type 16 has an invalid length. [ 665.293150][T27692] netlink: 'syz.4.5902': attribute type 17 has an invalid length. [ 665.310178][T27691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5903'. [ 665.712260][T27706] netlink: 816 bytes leftover after parsing attributes in process `syz.4.5905'. [ 666.137806][T27721] netlink: 'syz.4.5909': attribute type 3 has an invalid length. [ 666.191748][T27721] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5909'. [ 666.340060][T27721] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5909'. [ 666.352820][T27721] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5909'. [ 666.421537][ T6249] net_ratelimit: 8 callbacks suppressed [ 666.421561][ T6249] bond8: (slave bridge3): failed to get link speed/duplex [ 666.700619][T27744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.736320][T27744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.784742][T27750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.835800][T27750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.876549][T27750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.899914][T27754] netlink: 'syz.3.5917': attribute type 1 has an invalid length. [ 666.909532][T27744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5914'. [ 666.920837][T27750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.932038][T27744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.941118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.952884][T27750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.230678][T27757] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 667.269757][T27757] bond14: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 667.287404][T27757] bond14: (slave vxcan3): making interface the new active one [ 667.299027][T27757] bond14: (slave vxcan3): Enslaving as an active interface with an up link [ 667.407102][ T6243] IPVS: stop unused estimator thread 0... [ 667.770894][T27356] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 667.799561][T27790] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.5926'. [ 667.818205][T27356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 667.844963][T27356] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 667.859504][T27356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 667.868751][T27356] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 667.888140][T27356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 667.900178][T27356] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 667.922804][T27356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 667.926612][T27790] block nbd0: server does not support multiple connections per device. [ 667.957428][T27790] block nbd0: shutting down sockets [ 667.968482][T27798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5927'. [ 667.978213][T27797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5927'. [ 668.238636][T27356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.272042][T27356] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.314211][ T6243] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.321622][ T6243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.367524][ T6243] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.374914][ T6243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.042236][T27841] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5936'. [ 669.056922][T27356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.063976][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 669.064062][ C1] lec:lec_tx_timeout: lec0 [ 669.077196][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 669.094490][T27843] netlink: 5220 bytes leftover after parsing attributes in process `syz.2.5936'. [ 669.259171][T27844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5932'. [ 669.373286][T27356] veth0_vlan: entered promiscuous mode [ 669.408800][T27858] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5937'. [ 669.453080][T27356] veth1_vlan: entered promiscuous mode [ 669.459746][T27849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5937'. [ 669.561894][T27865] netlink: 'syz.0.5937': attribute type 29 has an invalid length. [ 669.608646][T27866] netlink: 'syz.0.5937': attribute type 29 has an invalid length. [ 669.635692][T27849] netlink: 'syz.0.5937': attribute type 29 has an invalid length. [ 669.683209][T27849] netlink: 'syz.0.5937': attribute type 29 has an invalid length. [ 669.746601][T27849] netlink: 'syz.0.5937': attribute type 29 has an invalid length. [ 669.765702][T27849] netlink: 'syz.0.5937': attribute type 29 has an invalid length. [ 669.798071][T27849] netlink: 'syz.0.5937': attribute type 29 has an invalid length. [ 669.845064][T27356] veth0_macvtap: entered promiscuous mode [ 669.871719][T27356] veth1_macvtap: entered promiscuous mode [ 669.911820][T27356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.952981][T27356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.972384][ T6246] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.002689][ T6246] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.026020][ T146] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.045890][ T146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.095878][T27879] netlink: 'syz.3.5944': attribute type 1 has an invalid length. [ 670.193245][T27879] 8021q: adding VLAN 0 to HW filter on device bond15 [ 670.294637][T27892] 8021q: VLANs not supported on gre0 [ 670.529854][T21680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.539424][T21680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.558030][T27905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5950'. [ 670.721335][ T6236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.732871][ T6236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.824913][ T6246] net_ratelimit: 61 callbacks suppressed [ 671.824939][ T6246] bond8: (slave bridge3): failed to get link speed/duplex [ 671.935301][T27948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5823'. [ 671.989278][ T6243] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.035925][ T146] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.053823][ T6236] bond8: (slave bridge3): failed to get link speed/duplex [ 672.091134][ T146] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.113849][ T146] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.194541][ T6236] bond8: (slave bridge3): failed to get link speed/duplex [ 672.304350][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 672.454179][ T6246] bond8: (slave bridge3): failed to get link speed/duplex [ 672.585094][ T6236] bond8: (slave bridge3): failed to get link speed/duplex [ 672.655952][T17205] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 672.683919][T17205] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 672.692696][T17205] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 672.706758][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 672.718552][T17205] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 672.734702][T17205] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 672.862597][T21680] bond8: (slave bridge3): failed to get link speed/duplex [ 672.994354][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 673.107829][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 673.525901][T21680] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.557382][T21680] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.749984][T28016] __nla_validate_parse: 2 callbacks suppressed [ 673.750008][T28016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5976'. [ 673.792041][T28016] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5976'. [ 673.802298][T21680] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.825254][T21680] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.035922][T21680] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.073698][T21680] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.086537][T28034] netlink: 'syz.4.5982': attribute type 10 has an invalid length. [ 674.104186][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 674.112378][ C1] lec:lec_tx_timeout: lec0 [ 674.117539][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 674.207577][T28031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5979'. [ 674.240454][T28038] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 674.284827][T28038] bond1: (slave lo): Enslaving as an active interface with an up link [ 674.309288][T28039] netlink: 'syz.3.5981': attribute type 5 has an invalid length. [ 674.398985][T28050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5983'. [ 674.806763][T28076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5988'. [ 674.824755][T17205] Bluetooth: hci5: command tx timeout [ 674.873976][T28070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5987'. [ 675.091521][T27979] chnl_net:caif_netlink_parms(): no params data found [ 675.160345][T28094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5992'. [ 675.235480][T28098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5992'. [ 675.297028][T21680] bridge_slave_1: left allmulticast mode [ 675.306532][T21680] bridge_slave_1: left promiscuous mode [ 675.312552][T21680] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.406241][T21680] bridge_slave_0: left allmulticast mode [ 675.412139][T21680] bridge_slave_0: left promiscuous mode [ 675.441913][T28105] Bluetooth: MGMT ver 1.23 [ 675.454856][T21680] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.739410][T21680] bond6 (unregistering): (slave vti0): Releasing backup interface [ 675.749897][T21680] vti0 (unregistering): left promiscuous mode [ 675.842620][T21680] bond1 (unregistering): (slave gretap1): Releasing active interface [ 675.888797][T21680] bond7 (unregistering): (slave geneve3): Releasing active interface [ 675.911428][T21680] bond2 (unregistering): (slave geneve2): Releasing active interface [ 675.941393][T21680] bridge0 (unregistering): left allmulticast mode [ 676.050086][T21680] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 676.058767][T21680] bridge3 (unregistering): left promiscuous mode [ 676.134020][ T6243] smc: removing ib device sy‡1 [ 676.139590][T21680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.152555][T21680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.167807][T21680] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 676.178399][T21680] bond0 (unregistering): Released all slaves [ 676.195566][T21680] bond1 (unregistering): Released all slaves [ 676.212352][T21680] bond2 (unregistering): Released all slaves [ 676.237243][T21680] bond3 (unregistering): Released all slaves [ 676.257432][T21680] bond4 (unregistering): Released all slaves [ 676.280254][T21680] bond5 (unregistering): Released all slaves [ 676.296450][T21680] bond6 (unregistering): Released all slaves [ 676.312528][T21680] bond7 (unregistering): Released all slaves [ 676.331626][T21680] bond8 (unregistering): Released all slaves [ 676.370266][T21680] bond9 (unregistering): Released all slaves [ 676.388830][T21680] bond10 (unregistering): Released all slaves [ 676.407836][T21680] bond11 (unregistering): Released all slaves [ 676.438815][T21680] bond12 (unregistering): Released all slaves [ 676.458877][T21680] bond13 (unregistering): Released all slaves [ 676.481265][T21680] bond14 (unregistering): left allmulticast mode [ 676.494161][T21680] bond14 (unregistering): left promiscuous mode [ 676.513095][T21680] team0: Port device macvlan7 removed [ 676.531106][T21680] bond14 (unregistering): Released all slaves [ 676.558566][T28107] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.565841][T28107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.572672][T28131] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5999'. [ 676.633833][T28115] netlink: 'syz.3.5995': attribute type 33 has an invalid length. [ 676.833846][T28139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6000'. [ 676.861031][T28142] sctp: [Deprecated]: syz.3.6002 (pid 28142) Use of struct sctp_assoc_value in delayed_ack socket option. [ 676.861031][T28142] Use struct sctp_sack_info instead [ 676.914264][T17205] Bluetooth: hci5: command tx timeout [ 677.068691][T13119] net_ratelimit: 10 callbacks suppressed [ 677.068712][T13119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.212899][ T6231] bond8: (slave bridge3): failed to get link speed/duplex [ 677.306651][T27979] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.334346][T27979] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.342009][T27979] bridge_slave_0: entered allmulticast mode [ 677.380691][T27979] bridge_slave_0: entered promiscuous mode [ 677.410538][T27979] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.429708][T27979] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.452007][T27979] bridge_slave_1: entered allmulticast mode [ 677.472254][T27979] bridge_slave_1: entered promiscuous mode [ 677.493897][ T6246] bond8: (slave bridge3): failed to get link speed/duplex [ 677.684626][T28172] netlink: 'syz.4.6010': attribute type 1 has an invalid length. [ 677.698428][T27979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.997140][T27979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.110251][T28180] bond10 (unregistering): Released all slaves [ 678.296445][ T6231] bond8: (slave bridge3): failed to get link speed/duplex [ 678.554244][ T6231] bond8: (slave bridge3): failed to get link speed/duplex [ 678.691423][T27979] team0: Port device team_slave_0 added [ 678.720555][T28211] xt_hashlimit: size too large, truncated to 1048576 [ 678.903853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.912414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.920995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.955519][T27979] team0: Port device team_slave_1 added [ 678.989086][T17205] Bluetooth: hci5: command tx timeout [ 679.008415][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 679.061969][T28220] __nla_validate_parse: 2 callbacks suppressed [ 679.061993][T28220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6018'. [ 679.133720][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 679.142096][ C1] lec:lec_tx_timeout: lec0 [ 679.147304][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 679.221330][T27979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.253772][T27979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.327851][T27979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.386557][T27979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.410832][T27979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.477376][T27979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.634003][T28243] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6024'. [ 679.710318][T28240] vlan3: entered allmulticast mode [ 679.746007][T28240] bond0: entered allmulticast mode [ 679.790559][T28250] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.6027'. [ 679.844829][T28243] bond0 (unregistering): Released all slaves [ 679.864116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.031898][T21680] : left promiscuous mode [ 680.157814][T27979] hsr_slave_0: entered promiscuous mode [ 680.198207][T27979] hsr_slave_1: entered promiscuous mode [ 680.222325][T28269] netlink: 'syz.4.6032': attribute type 63 has an invalid length. [ 680.229185][T27979] debugfs: 'hsr0' already exists in 'hsr' [ 680.255321][T27979] Cannot create hsr debugfs directory [ 680.277614][T28271] netlink: 'syz.4.6032': attribute type 63 has an invalid length. [ 680.289987][T21680] tipc: Disabling bearer [ 680.354326][T21680] tipc: Left network mode [ 680.359108][ T6243] bond8: (slave bridge3): failed to get link speed/duplex [ 680.577973][T28285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6036'. [ 680.612722][T28281] vlan2: entered promiscuous mode [ 680.618871][T28281] vlan2: entered allmulticast mode [ 680.619658][T21680] IPVS: stopping backup sync thread 23282 ... [ 680.643557][T28281] hsr_slave_1: entered allmulticast mode [ 680.692044][T28291] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 680.805915][T28292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6038'. [ 680.878030][T28298] xt_CT: You must specify a L4 protocol and not use inversions on it [ 680.899795][T28303] netlink: 'syz.1.6040': attribute type 12 has an invalid length. [ 680.925972][T28303] netlink: 'syz.1.6040': attribute type 29 has an invalid length. [ 680.935114][T28303] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6040'. [ 680.945258][T28292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6038'. [ 680.980352][T28303] netlink: 51 bytes leftover after parsing attributes in process `syz.1.6040'. [ 681.065371][T17205] Bluetooth: hci5: command tx timeout [ 681.140696][T28292] : entered promiscuous mode [ 681.199984][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2 [ 681.248170][T28312] delete_channel: no stack [ 681.351593][T28319] xt_TCPMSS: Only works on TCP SYN packets [ 681.357917][T28320] xt_TCPMSS: Only works on TCP SYN packets [ 681.658281][T28333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6048'. [ 681.980283][T28351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6052'. [ 682.012777][ T5968] IPVS: starting estimator thread 0... [ 682.130421][T28357] IPVS: using max 27 ests per chain, 64800 per kthread [ 682.189862][ T146] net_ratelimit: 3 callbacks suppressed [ 682.189885][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 682.466210][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 682.571365][T21680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.580565][T21680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.620961][T21680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.638950][T21680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.669749][T21680] hsr0: left allmulticast mode [ 682.704999][T21680] veth1_macvtap: left promiscuous mode [ 682.710661][T21680] veth1_vlan: left promiscuous mode [ 682.726597][T21680] veth0_vlan: left promiscuous mode [ 683.215813][T21680] team0 (unregistering): Port device team_slave_1 removed [ 683.233194][T21680] team0 (unregistering): Port device team_slave_0 removed [ 683.379124][T28385] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 683.384255][ T6249] bond8: (slave bridge3): failed to get link speed/duplex [ 683.533947][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 683.648668][T28409] ipt_REJECT: TCP_RESET invalid for non-tcp [ 683.657430][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 683.825901][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 683.928406][T27979] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 684.055790][T27979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 684.099934][T27979] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 684.127679][T27979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 684.159132][T27979] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 684.163792][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 684.174021][ C1] lec:lec_tx_timeout: lec0 [ 684.179034][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 684.239890][T27979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 684.274701][T27979] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 684.297183][T27979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 684.414100][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 684.517821][T21680] IPVS: stop unused estimator thread 0... [ 684.559274][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 684.704250][ T6246] bond8: (slave bridge3): failed to get link speed/duplex [ 684.799847][T27979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.875609][T28461] sctp: [Deprecated]: syz.3.6070 (pid 28461) Use of struct sctp_assoc_value in delayed_ack socket option. [ 684.875609][T28461] Use struct sctp_sack_info instead [ 684.879968][T27979] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.926934][T28463] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 684.968711][ T6246] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.976087][ T6246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.156206][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 685.216997][ T6246] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.224292][ T6246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.994328][T27979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.036240][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.066767][T27979] veth0_vlan: entered promiscuous mode [ 686.123507][T27979] veth1_vlan: entered promiscuous mode [ 686.252263][T27979] veth0_macvtap: entered promiscuous mode [ 686.293187][T27979] veth1_macvtap: entered promiscuous mode [ 686.406261][T28511] netlink: 'syz.1.6079': attribute type 10 has an invalid length. [ 686.437883][T27979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.478301][T27979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.552990][T28511] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 686.576519][T28515] __nla_validate_parse: 6 callbacks suppressed [ 686.576542][T28515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6080'. [ 686.578828][T28506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.634762][T21677] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.653730][T21677] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.689505][T21677] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.737967][T21677] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.928712][ T6243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.969078][ T6243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.055898][ T6246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.079450][ T6246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.185388][T28528] netlink: 'syz.3.6083': attribute type 12 has an invalid length. [ 687.223154][T28528] bond0: option primary_reselect: invalid value (255) [ 687.255550][T28528] bond0 (unregistering): Released all slaves [ 687.405729][T28534] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6085'. [ 687.453843][ T6231] net_ratelimit: 10 callbacks suppressed [ 687.453869][ T6231] bond8: (slave bridge3): failed to get link speed/duplex [ 687.615315][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 687.724348][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 687.856806][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 687.881707][T28554] tc_dump_action: action bad kind [ 687.983717][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 688.023959][T21955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 688.041666][T21955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 688.051298][T21955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 688.062996][T21955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 688.076208][T21955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 688.254074][ T6231] bond8: (slave bridge3): failed to get link speed/duplex [ 688.383803][ T6243] bond8: (slave bridge3): failed to get link speed/duplex [ 688.436506][T28572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6092'. [ 688.482312][T28562] chnl_net:caif_netlink_parms(): no params data found [ 688.672613][T28585] netlink: 'syz.0.6096': attribute type 1 has an invalid length. [ 688.783449][T28593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6099'. [ 688.857807][T28598] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6101'. [ 688.859605][T28593] bridge1: port 1(veth5) entered blocking state [ 688.877532][T28593] bridge1: port 1(veth5) entered disabled state [ 688.896397][T28593] veth5: entered allmulticast mode [ 688.923089][T28593] veth5: entered promiscuous mode [ 688.994446][T28600] bridge1: port 2(veth7) entered blocking state [ 689.001885][T28600] bridge1: port 2(veth7) entered disabled state [ 689.009704][T28600] veth7: entered allmulticast mode [ 689.018579][T28600] veth7: entered promiscuous mode [ 689.053812][ T6249] bond8: (slave bridge3): failed to get link speed/duplex [ 689.137726][T28562] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.147584][T28562] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.155031][T28562] bridge_slave_0: entered allmulticast mode [ 689.163944][T28562] bridge_slave_0: entered promiscuous mode [ 689.172823][T28562] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.180375][T28562] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.187823][T28562] bridge_slave_1: entered allmulticast mode [ 689.193813][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 689.193843][ C1] lec:lec_tx_timeout: lec0 [ 689.206855][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 689.215338][T28562] bridge_slave_1: entered promiscuous mode [ 689.270063][T28618] xt_hashlimit: size too large, truncated to 1048576 [ 689.279356][T28562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.289282][T28615] openvswitch: netlink: IPv4 tun info is not correct [ 689.298088][T28562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.369132][T28562] team0: Port device team_slave_0 added [ 689.379043][T28562] team0: Port device team_slave_1 added [ 689.459959][ T30] audit: type=1107 audit(1775842236.325:8): pid=28624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 689.480766][T28625] openvswitch: netlink: Key type 289 is out of range max 32 [ 689.481932][T28562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.526830][T28562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.591875][T28562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.638351][T28562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.652152][T28562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.686071][T28562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.722717][T28628] syzkaller1: entered promiscuous mode [ 689.885443][T28562] hsr_slave_0: entered promiscuous mode [ 689.893047][T28562] hsr_slave_1: entered promiscuous mode [ 689.900677][T28562] debugfs: 'hsr0' already exists in 'hsr' [ 689.906867][T28562] Cannot create hsr debugfs directory [ 690.086922][T28646] bond9 (unregistering): Released all slaves [ 690.106245][T17205] Bluetooth: hci2: command tx timeout [ 690.246724][T21677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.274077][T21677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.355102][T28660] netlink: 'syz.1.6119': attribute type 16 has an invalid length. [ 690.379019][T28660] netlink: 'syz.1.6119': attribute type 17 has an invalid length. [ 690.488343][T28665] netlink: 'syz.4.6122': attribute type 1 has an invalid length. [ 690.518081][T28665] netlink: 2096 bytes leftover after parsing attributes in process `syz.4.6122'. [ 690.528385][T28665] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6122'. [ 690.565500][T28562] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.585631][T28562] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 768 - 0 [ 690.606797][T28562] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.787182][T28562] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.797604][T28562] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 768 - 0 [ 690.826029][T28562] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.907308][T28669] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6124'. [ 690.917257][T28669] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6124'. [ 690.953590][T28669] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6124'. [ 690.977154][T28681] netlink: 'syz.2.6126': attribute type 9 has an invalid length. [ 691.042557][T28562] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.065574][T28562] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 768 - 0 [ 691.088621][T28562] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.154339][T28683] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 691.336326][T28562] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.349090][T28562] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 768 - 0 [ 691.376860][T28562] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.676909][T28707] IPVS: length: 239 != 24 [ 691.687347][T28707] IPVS: length: 239 != 24 [ 691.692281][T28707] IPVS: length: 239 != 24 [ 691.697345][T28707] IPVS: length: 239 != 24 [ 691.701996][T28707] IPVS: length: 239 != 24 [ 691.709605][T28707] IPVS: length: 239 != 24 [ 691.714592][T28707] IPVS: length: 239 != 24 [ 691.719107][T28707] IPVS: length: 239 != 24 [ 691.741168][T28707] IPVS: length: 239 != 24 [ 691.769476][T28707] IPVS: length: 239 != 24 [ 691.783860][T28707] IPVS: length: 239 != 24 [ 691.788304][T28707] IPVS: length: 239 != 24 [ 691.819311][T28707] IPVS: length: 239 != 24 [ 691.824964][T28707] IPVS: length: 239 != 24 [ 691.829623][T28707] IPVS: length: 239 != 24 [ 691.834852][T28707] IPVS: length: 239 != 24 [ 691.839532][T28707] IPVS: length: 239 != 24 [ 691.844498][T28707] IPVS: length: 239 != 24 [ 691.854821][T28707] IPVS: length: 239 != 24 [ 691.867332][T28707] IPVS: length: 239 != 24 [ 691.871895][T28710] tipc: Started in network mode [ 691.872003][T28710] tipc: Node identity 6a68b8a97222, cluster identity 4711 [ 691.872400][T28710] tipc: Enabled bearer , priority 0 [ 691.884328][T28707] IPVS: length: 239 != 24 [ 691.897578][T28707] IPVS: length: 239 != 24 [ 691.902218][T28707] IPVS: length: 239 != 24 [ 691.907699][T28707] IPVS: length: 239 != 24 [ 691.912318][T28707] IPVS: length: 239 != 24 [ 691.917260][T28707] IPVS: length: 239 != 24 [ 691.921869][T28707] IPVS: length: 239 != 24 [ 691.934546][T28707] IPVS: length: 239 != 24 [ 691.943859][T28715] syzkaller0: entered promiscuous mode [ 691.953931][T28707] IPVS: length: 239 != 24 [ 691.958866][T28707] IPVS: length: 239 != 24 [ 691.963439][T28715] syzkaller0: entered allmulticast mode [ 691.970243][T28707] IPVS: length: 239 != 24 [ 691.975125][T28707] IPVS: length: 239 != 24 [ 691.979727][T28707] IPVS: length: 239 != 24 [ 691.984771][T28707] IPVS: length: 239 != 24 [ 691.989397][T28707] IPVS: length: 239 != 24 [ 691.994280][T28707] IPVS: length: 239 != 24 [ 692.002140][T28562] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 692.005306][ C0] syzkaller0: tun_net_xmit 90 [ 692.011578][T28707] IPVS: length: 239 != 24 [ 692.014388][ C0] syzkaller0: tun_net_xmit 90 [ 692.024174][T28707] IPVS: length: 239 != 24 [ 692.035378][T28562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 692.043438][T28707] IPVS: length: 239 != 24 [ 692.073326][T28562] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 692.093767][T28707] IPVS: length: 239 != 24 [ 692.098205][T28707] IPVS: length: 239 != 24 [ 692.120510][T28562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 692.133755][T28707] IPVS: length: 239 != 24 [ 692.138194][T28707] IPVS: length: 239 != 24 [ 692.142692][T28707] IPVS: length: 239 != 24 [ 692.144764][ C0] syzkaller0: tun_net_xmit 90 [ 692.150913][T28562] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 692.152530][ C0] syzkaller0: tun_net_xmit 90 [ 692.168676][T28707] IPVS: length: 239 != 24 [ 692.174694][T28707] IPVS: length: 239 != 24 [ 692.182242][T28562] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 692.192558][T17205] Bluetooth: hci2: command tx timeout [ 692.199363][T28707] IPVS: length: 239 != 24 [ 692.205925][T28562] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 692.212791][T28707] IPVS: length: 239 != 24 [ 692.218134][T28707] IPVS: length: 239 != 24 [ 692.221358][T28562] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 692.233532][T28706] tipc: Resetting bearer [ 692.240802][T28707] IPVS: length: 239 != 24 [ 692.246402][T28707] IPVS: length: 239 != 24 [ 692.250922][T28707] IPVS: length: 239 != 24 [ 692.256014][T28707] IPVS: length: 239 != 24 [ 692.260535][T28707] IPVS: length: 239 != 24 [ 692.265365][T28707] IPVS: length: 239 != 24 [ 692.269883][T28707] IPVS: length: 239 != 24 [ 692.276021][T28707] IPVS: length: 239 != 24 [ 692.280517][T28707] IPVS: length: 239 != 24 [ 692.285564][T28707] IPVS: length: 239 != 24 [ 692.290095][T28707] IPVS: length: 239 != 24 [ 692.294784][T28707] IPVS: length: 239 != 24 [ 692.299215][T28707] IPVS: length: 239 != 24 [ 692.304137][T28707] IPVS: length: 239 != 24 [ 692.309750][T28707] IPVS: length: 239 != 24 [ 692.314501][T28707] IPVS: length: 239 != 24 [ 692.346301][T28706] tipc: Disabling bearer [ 692.624488][T28562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.667174][T28740] xt_hashlimit: size too large, truncated to 1048576 [ 692.674570][ T146] net_ratelimit: 8 callbacks suppressed [ 692.674592][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 692.757754][T28562] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.798876][T21680] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.806155][T21680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.877410][T28753] netlink: 'syz.4.6146': attribute type 1 has an invalid length. [ 692.891061][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.898769][ T6231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.995993][T28753] __nla_validate_parse: 1 callbacks suppressed [ 692.996016][T28753] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6146'. [ 693.095989][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 693.203796][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 693.314634][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 693.426820][T21680] bond8: (slave bridge3): failed to get link speed/duplex [ 693.506426][T28774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 693.563844][ T6231] bond8: (slave bridge3): failed to get link speed/duplex [ 693.652426][T28562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.694143][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 693.828407][T28562] veth0_vlan: entered promiscuous mode [ 693.888453][T28562] veth1_vlan: entered promiscuous mode [ 693.906216][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 693.980355][T28562] veth0_macvtap: entered promiscuous mode [ 694.032972][T28562] veth1_macvtap: entered promiscuous mode [ 694.039811][T28791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6158'. [ 694.055574][T28793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6159'. [ 694.129564][T28562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.170470][T28562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.214777][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 694.223661][ C1] lec:lec_tx_timeout: lec0 [ 694.228934][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 694.246122][ T6231] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.266161][T17205] Bluetooth: hci2: command tx timeout [ 694.289520][ T6231] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.314581][ T6231] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.342490][ T6231] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.366948][T21680] bond8: (slave bridge3): failed to get link speed/duplex [ 694.558413][ T6243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.567187][ T6243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.672725][ T6243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.683313][ T6243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.739353][T28819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6167'. [ 694.851516][T28823] vlan2: entered allmulticast mode [ 695.023063][T28838] netlink: 'syz.3.6172': attribute type 1 has an invalid length. [ 695.040481][T28838] netlink: 'syz.3.6172': attribute type 1 has an invalid length. [ 695.115264][T28841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 695.176864][T28843] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6174'. [ 695.209322][T28847] syzkaller1: entered promiscuous mode [ 695.220675][T28847] syzkaller1: entered allmulticast mode [ 695.251525][T28847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6175'. [ 695.286160][T28854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6177'. [ 695.340739][T28854] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 695.351213][T28854] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 695.364659][T28854] team0: Failed to send options change via netlink (err -105) [ 695.372287][T28854] team0: Port device batadv1 added [ 695.485625][T28859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6178'. [ 695.537522][T28863] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6179'. [ 695.557311][T28863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6179'. [ 695.829314][T28876] netlink: 'syz.3.6184': attribute type 1 has an invalid length. [ 695.916742][T28878] netlink: 'syz.0.6185': attribute type 1 has an invalid length. [ 696.036559][T28878] bond9: (slave gretap2): making interface the new active one [ 696.046155][T28878] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 696.119617][T28891] netlink: 'syz.1.6187': attribute type 2 has an invalid length. [ 696.120779][T28890] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 696.290994][T28899] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.306295][T28899] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.345487][T17205] Bluetooth: hci2: command tx timeout [ 696.357756][T28906] netlink: 'syz.1.6192': attribute type 16 has an invalid length. [ 696.405449][T28906] netlink: 'syz.1.6192': attribute type 17 has an invalid length. [ 696.825530][ T2157] IPVS: starting estimator thread 0... [ 696.896671][T28932] netlink: 'syz.1.6200': attribute type 6 has an invalid length. [ 696.923934][T28927] IPVS: using max 29 ests per chain, 69600 per kthread [ 697.667976][T28966] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 697.746854][ T6243] net_ratelimit: 25 callbacks suppressed [ 697.746878][ T6243] bond8: (slave bridge3): failed to get link speed/duplex [ 698.213923][ T6243] bond8: (slave bridge3): failed to get link speed/duplex [ 698.311262][T29017] xt_CONNSECMARK: invalid mode: 0 [ 698.319389][T29020] xt_policy: output policy not valid in PREROUTING and INPUT [ 698.453420][T29027] netlink: 'syz.0.6225': attribute type 1 has an invalid length. [ 698.647361][T29040] __nla_validate_parse: 11 callbacks suppressed [ 698.647384][T29040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6225'. [ 698.702192][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 698.756915][T29020] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6224'. [ 698.873493][T29029] syzkaller0: entered promiscuous mode [ 698.889734][T29029] syzkaller0: entered allmulticast mode [ 699.183731][T21680] bond8: (slave bridge3): failed to get link speed/duplex [ 699.243707][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 699.251834][ C1] lec:lec_tx_timeout: lec0 [ 699.256499][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 699.293743][T21680] bond8: (slave bridge3): failed to get link speed/duplex [ 699.413802][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 699.528284][T29067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6234'. [ 699.537606][ T6243] bond8: (slave bridge3): failed to get link speed/duplex [ 699.663792][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 699.774559][T21677] bond8: (slave bridge3): failed to get link speed/duplex [ 699.817330][T29075] netlink: 'syz.2.6238': attribute type 1 has an invalid length. [ 699.931327][T29075] bond1: (slave gretap1): making interface the new active one [ 699.940162][T29075] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 699.959578][ T146] bond8: (slave bridge3): failed to get link speed/duplex [ 700.731042][T29110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6246'. [ 700.778524][T29107] bond2: option min_links: invalid value (18446744073709551614) [ 700.799679][T29107] bond2: option min_links: allowed values 0 - 2147483647 [ 700.824179][T29107] bond2 (unregistering): Released all slaves [ 700.951653][T29115] syzkaller1: entered promiscuous mode [ 700.957815][T29115] syzkaller1: entered allmulticast mode [ 700.974385][T29115] IPVS: set_ctl: invalid protocol: 103 100.1.1.0:20004 [ 701.306279][T29128] netlink: 'syz.1.6252': attribute type 1 has an invalid length. [ 701.319910][T29128] netlink: 'syz.1.6252': attribute type 2 has an invalid length. [ 701.344084][T29128] netlink: 'syz.1.6252': attribute type 1 has an invalid length. [ 701.351899][T29128] netlink: 'syz.1.6252': attribute type 3 has an invalid length. [ 701.395743][T29128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6252'. [ 701.428265][T29135] x_tables: unsorted entry at hook 3 [ 701.440864][T29132] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 701.465873][T29132] team0: Device macvlan2 is already an upper device of the team interface [ 701.563562][T29135] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 701.582782][T29135] bond2 (unregistering): Released all slaves [ 701.859265][T29155] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 701.886778][T29155] bond1 (unregistering): Released all slaves [ 702.216546][T29171] netlink: 'syz.2.6261': attribute type 2 has an invalid length. [ 702.392611][T29178] tipc: Enabling of bearer rejected, failed to enable media [ 702.429965][T29178] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6264'. [ 702.524841][T29186] netlink: 4624 bytes leftover after parsing attributes in process `syz.2.6267'. [ 702.574941][T21955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 702.587189][T21955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 702.598486][T21955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 702.609522][T21955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 702.620483][T21955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 702.793855][T21680] net_ratelimit: 19 callbacks suppressed [ 702.793879][T21680] bond8: (slave bridge3): failed to get link speed/duplex [ 702.830990][T29194] syzkaller0: entered promiscuous mode [ 702.844169][T29194] syzkaller0: entered allmulticast mode [ 702.884419][T29194] tc action pedit 'at' offset 257 out of bounds [ 702.891279][T29194] tc action pedit 'at' offset 257 out of bounds [ 702.897653][T29194] tc action pedit 'at' offset 257 out of bounds [ 702.904094][T29194] tc action pedit 'at' offset 257 out of bounds [ 702.910382][T29194] tc action pedit 'at' offset 257 out of bounds [ 702.916739][T29194] tc action pedit 'at' offset 257 out of bounds [ 702.923030][T29194] tc action pedit 'at' offset 257 out of bounds [ 702.929570][T29194] tc action pedit 'at' offset 257 out of bounds [ 702.936010][T29194] tc action pedit 'at' offset 257 out of bounds [ 702.942387][T29194] tc action pedit 'at' offset 257 out of bounds [ 702.948796][T29194] 0: reclassify loop, rule prio 0, protocol 800 [ 703.008390][T29200] geneve4: entered promiscuous mode [ 703.014026][T29200] geneve4: entered allmulticast mode [ 703.073161][ T6231] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 19999 - 0 [ 703.088713][ T6231] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 19999 - 0 [ 703.144066][ T6246] bond8: (slave bridge3): failed to get link speed/duplex [ 703.164810][ T6231] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 19999 - 0 [ 703.211863][ T6231] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 19999 - 0 [ 703.354155][T29223] netlink: 'syz.1.6277': attribute type 1 has an invalid length. [ 703.406546][T29226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6277'. [ 703.418463][T21677] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.432081][T21677] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.557909][T21677] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.592258][T21677] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.650909][ T6243] bond8: (slave bridge3): failed to get link speed/duplex [ 703.765079][T21677] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.791299][T21677] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.804714][T29236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6281'. [ 703.888322][T29241] tipc: Enabling not permitted [ 703.905244][ T30] audit: type=1800 audit(1775842250.775:9): pid=29244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6283" name="memory.events" dev="tmpfs" ino=416 res=0 errno=0 [ 703.905735][T29241] tipc: Enabling of bearer rejected, failed to enable media [ 704.006102][ T30] audit: type=1804 audit(1775842250.875:10): pid=29245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6283" name="/newroot/76/memory.events" dev="tmpfs" ino=416 res=1 errno=0 [ 704.065463][T21677] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.098526][T21677] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.213800][ T6243] bond8: (slave bridge3): failed to get link speed/duplex [ 704.229171][T29259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6287'. [ 704.263756][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 704.271859][ C1] lec:lec_tx_timeout: lec0 [ 704.277885][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 704.312293][T29187] chnl_net:caif_netlink_parms(): no params data found [ 704.403830][T29265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6288'. [ 704.501156][T29265] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.6288'. [ 704.514744][T29265] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 704.623872][ T6231] bond8: (slave bridge3): failed to get link speed/duplex [ 704.665254][T21955] Bluetooth: hci4: command tx timeout [ 704.680292][T29187] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.687954][T29187] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.697058][T29187] bridge_slave_0: entered allmulticast mode [ 704.705290][T29187] bridge_slave_0: entered promiscuous mode [ 704.715182][T29187] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.722922][T29187] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.742902][T29187] bridge_slave_1: entered allmulticast mode [ 704.761078][T29187] bridge_slave_1: entered promiscuous mode [ 704.853935][T29276] IPVS: set_ctl: invalid protocol: 103 100.1.1.0:20004 [ 704.910855][T29269] syzkaller1: entered promiscuous mode [ 704.934042][T29269] syzkaller1: entered allmulticast mode [ 704.945590][T21677] bridge_slave_1: left allmulticast mode [ 704.959392][T21677] bridge_slave_1: left promiscuous mode [ 704.982351][T21677] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.038325][T21677] bridge_slave_0: left allmulticast mode [ 705.056731][T21677] bridge_slave_0: left promiscuous mode [ 705.077330][T21677] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.739933][T21677] bond9 (unregistering): (slave gretap2): Releasing active interface [ 705.918473][T21677] bond8 (unregistering): (slave bridge3): Removing an active aggregator [ 705.929341][T21677] bond8 (unregistering): (slave bridge3): Releasing backup interface [ 705.938456][T21677] bond8 (unregistering): (slave bridge3): the permanent HWaddr of slave - a6:bb:93:03:21:d4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 705.959202][T21677] bridge3 (unregistering): left promiscuous mode [ 705.967061][T21677] bridge3 (unregistering): left allmulticast mode [ 706.018484][T21677] bond8 (unregistering): (slave bridge4): Releasing backup interface [ 706.028832][T21677] bridge4 (unregistering): left promiscuous mode [ 706.035774][T21677] bridge4 (unregistering): left allmulticast mode [ 706.249352][T21677] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.260429][T21677] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.271726][T21677] .` (unregistering): Released all slaves [ 706.283341][T21677] bond0 (unregistering): Released all slaves [ 706.299264][T21677] bond1 (unregistering): Released all slaves [ 706.315442][T21677] bond2 (unregistering): Released all slaves [ 706.339877][T21677] bond3 (unregistering): Released all slaves [ 706.355733][T21677] bond4 (unregistering): Released all slaves [ 706.370887][T21677] bond5 (unregistering): Released all slaves [ 706.388000][T21677] bond6 (unregistering): Released all slaves [ 706.406574][T21677] bond7 (unregistering): Released all slaves [ 706.421785][T21677] bond8 (unregistering): Released all slaves [ 706.438993][T21677] bond9 (unregistering): Released all slaves [ 706.459961][T29187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.540215][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 706.606622][T29187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.685515][T29327] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6297'. [ 706.745500][T21955] Bluetooth: hci4: command tx timeout [ 706.801556][T29330] mac80211_hwsim hwsim41 wlan1: Caught tx_queue_len zero misconfig [ 706.844846][T29187] team0: Port device team_slave_0 added [ 706.886194][T29187] team0: Port device team_slave_1 added [ 707.002377][T29187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.035373][T29340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6302'. [ 707.060471][T29187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.089227][T29187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.102956][T29187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.110244][T29187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.152979][T29187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.176321][T29340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6302'. [ 707.318725][T21677] hsr_slave_0: left promiscuous mode [ 707.331483][T21677] hsr_slave_1: left promiscuous mode [ 707.339012][T21677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.352197][T21677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.367458][T21677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.375324][T21677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.391974][T21677] veth1_macvtap: left promiscuous mode [ 707.397917][T21677] veth1_vlan: left promiscuous mode [ 707.403180][T21677] veth0_vlan: left promiscuous mode [ 707.612965][T21677] pim6reg527 (unregistering): left allmulticast mode [ 707.800269][T21677] team0 (unregistering): Port device team_slave_1 removed [ 707.822882][T21677] team0 (unregistering): Port device team_slave_0 removed [ 708.076816][T29187] hsr_slave_0: entered promiscuous mode [ 708.083429][T29187] hsr_slave_1: entered promiscuous mode [ 708.091561][T29187] debugfs: 'hsr0' already exists in 'hsr' [ 708.098440][T29187] Cannot create hsr debugfs directory [ 708.410227][T29381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.513337][T29386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6313'. [ 708.825052][T21955] Bluetooth: hci4: command tx timeout [ 708.860979][T21677] IPVS: stop unused estimator thread 0... [ 708.870149][T29401] netlink: 'syz.3.6316': attribute type 1 has an invalid length. [ 708.975760][T29409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6319'. [ 709.026706][T29414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6319'. [ 709.079234][T29418] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6319'. [ 709.091413][T29401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 709.109363][T29418] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6319'. [ 709.120488][T29419] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6316'. [ 709.162596][T29405] bond1: (slave veth5): Enslaving as an active interface with a down link [ 709.251097][T29413] bond1: (slave dummy0): making interface the new active one [ 709.309260][T29413] dummy0: entered promiscuous mode [ 709.321123][T29413] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 709.361757][T29419] bond1: (slave dummy0): Releasing active interface [ 709.369619][T29419] dummy0 (unregistering): left promiscuous mode [ 709.511860][T29427] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6322'. [ 709.920587][T29450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6326'. [ 709.954888][T29187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 709.998590][T29187] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 710.047256][T29187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 710.103630][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 710.111737][ C1] lec:lec_tx_timeout: lec0 [ 710.116764][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 710.167646][T29187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 710.195094][T29445] netlink: 'syz.4.6326': attribute type 10 has an invalid length. [ 710.203972][T29187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 710.242941][T29187] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 710.270937][T29445] bridge_slave_1: left allmulticast mode [ 710.304321][T29187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 710.317953][T29187] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 710.475777][T29480] netlink: 1120 bytes leftover after parsing attributes in process `syz.4.6331'. [ 710.552018][T29187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.634032][T29486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6333'. [ 710.679194][T29486] netlink: 'syz.3.6333': attribute type 1 has an invalid length. [ 710.698588][T29486] netlink: 'syz.3.6333': attribute type 2 has an invalid length. [ 710.727186][T29187] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.799613][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.806895][ T6231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.859522][T29491] netlink: 'syz.2.6334': attribute type 1 has an invalid length. [ 710.876413][T29484] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6332'. [ 710.902836][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.910118][ T6231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.919485][T21955] Bluetooth: hci4: command tx timeout [ 711.007904][T29491] bond2: entered promiscuous mode [ 711.013873][T29491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 711.105384][T29491] bond2: (slave bridge1): making interface the new active one [ 711.113164][T29491] bridge1: entered promiscuous mode [ 711.121452][T29491] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 711.344961][T29518] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 711.362090][T29514] xt_CT: You must specify a L4 protocol and not use inversions on it [ 711.536641][T29532] Cannot find add_set index 0 as target [ 711.756952][T29187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.977498][T29187] veth0_vlan: entered promiscuous mode [ 711.995976][T29545] netlink: 'syz.2.6347': attribute type 17 has an invalid length. [ 712.017997][T29548] netlink: 'syz.4.6348': attribute type 1 has an invalid length. [ 712.027741][T29187] veth1_vlan: entered promiscuous mode [ 712.047128][T29545] gretap0: entered promiscuous mode [ 712.073859][T29548] netlink: 'syz.4.6348': attribute type 3 has an invalid length. [ 712.084843][T29545] gretap0: left promiscuous mode [ 712.476798][T29187] veth0_macvtap: entered promiscuous mode [ 712.502919][T29187] veth1_macvtap: entered promiscuous mode [ 712.522967][T29565] syzkaller0: entered promiscuous mode [ 712.529682][T29565] syzkaller0: entered allmulticast mode [ 712.579881][T29187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.685644][T29187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.741432][T29573] netlink: set zone limit has 4 unknown bytes [ 712.758847][ T6249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.791269][ T6249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.856189][ T6249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.899099][ T6249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.210575][T29595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.219661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.228405][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.268737][ T6226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.282629][T29595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.286407][ T6226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.292327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.384441][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.517172][ T6226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.543052][ T6226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.045204][T29614] tipc: Invalid UDP bearer configuration [ 714.045259][T29614] tipc: Enabling of bearer rejected, failed to enable media [ 714.213371][T29634] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 714.229043][T29630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.238073][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.265782][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.553550][T29651] __nla_validate_parse: 8 callbacks suppressed [ 714.553574][T29651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6371'. [ 714.925671][T29672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6375'. [ 715.123627][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 715.131698][ C1] lec:lec_tx_timeout: lec0 [ 715.136855][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 715.293995][T29694] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6377'. [ 715.313771][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.466108][ T7984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.870483][T29720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6387'. [ 716.352397][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.425508][ T7984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.750602][T29763] netlink: 'syz.1.6398': attribute type 1 has an invalid length. [ 716.963401][T17205] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 716.982406][T17205] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 717.002291][T17205] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 717.013883][T17205] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 717.022772][T17205] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 717.089479][ T5968] IPVS: starting estimator thread 0... [ 717.194161][T29778] IPVS: using max 29 ests per chain, 69600 per kthread [ 717.257667][T29783] netlink: 'syz.1.6399': attribute type 29 has an invalid length. [ 717.299334][T29786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.309475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.512806][T29790] netlink: 'syz.1.6399': attribute type 29 has an invalid length. [ 718.166085][T29770] chnl_net:caif_netlink_parms(): no params data found [ 718.167557][T29829] netlink: 'syz.0.6412': attribute type 1 has an invalid length. [ 718.268620][T29834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6411'. [ 718.400230][T29838] macvtap1: entered allmulticast mode [ 718.415008][T29838] veth0_macvtap: entered allmulticast mode [ 718.727495][T29770] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.758973][T29770] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.794526][T29770] bridge_slave_0: entered allmulticast mode [ 718.820175][T29770] bridge_slave_0: entered promiscuous mode [ 719.058889][T29859] bond2: option resend_igmp: invalid value (32767) [ 719.105186][T21955] Bluetooth: hci0: command tx timeout [ 719.113834][T29859] bond2: option resend_igmp: allowed values 0 - 255 [ 719.128310][T29859] bond2 (unregistering): Released all slaves [ 719.213471][T29770] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.225088][T29770] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.236192][T29770] bridge_slave_1: entered allmulticast mode [ 719.255754][T29880] netlink: 'syz.2.6424': attribute type 17 has an invalid length. [ 719.265460][T29880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6424'. [ 719.276423][T29770] bridge_slave_1: entered promiscuous mode [ 719.367233][T29880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6424'. [ 719.457942][T29770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.474996][ T2157] net_ratelimit: 5 callbacks suppressed [ 719.475019][ T2157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.491625][T29770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.739212][T29770] team0: Port device team_slave_0 added [ 719.777055][T29770] team0: Port device team_slave_1 added [ 719.923918][T29770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.931734][T29770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.994835][T29770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.034017][T29770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.066714][T29770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.130899][T29916] xt_TCPMSS: Only works on TCP SYN packets [ 720.141214][T29770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.153640][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 720.162090][ C1] lec:lec_tx_timeout: lec0 [ 720.167735][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 720.400335][T29770] hsr_slave_0: entered promiscuous mode [ 720.407665][T29770] hsr_slave_1: entered promiscuous mode [ 720.414782][T29770] debugfs: 'hsr0' already exists in 'hsr' [ 720.420586][T29770] Cannot create hsr debugfs directory [ 720.505493][ T2157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.634610][T29770] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.646099][T29770] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 720.657709][T29770] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 720.705327][T29898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 720.830264][T29770] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.842062][T29770] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 720.852486][T29770] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 720.941846][T29770] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.956528][T29942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.965818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.990182][T29770] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 721.014945][T29770] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 721.064287][ T7984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.137240][T29770] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.148651][T21955] Bluetooth: hci0: command tx timeout [ 721.155372][T29770] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 721.167546][T29770] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 721.279642][T29952] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6439'. [ 721.319082][T29956] x_tables: duplicate underflow at hook 1 [ 721.355976][T29954] veth3: entered allmulticast mode [ 721.386562][T29954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.407160][T29954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.427105][T29954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.438104][T29954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.449923][T29954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.582949][T29770] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 721.614717][T29770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 721.622846][T29770] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 721.630163][T29964] netlink: 34 bytes leftover after parsing attributes in process `syz.3.6443'. [ 721.648012][T29770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 721.660568][T29770] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 721.720825][T29770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 721.752076][T29770] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 721.776090][T29770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 721.786857][T29972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6448'. [ 721.974363][T29770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.014479][T29770] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.042763][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.050027][ T6231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.131073][ T6246] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.138400][ T6246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.154985][T29997] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6453'. [ 722.386106][T30007] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 722.735823][T29770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.883392][T30041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6465'. [ 722.894752][T30041] netlink: 'syz.0.6465': attribute type 1 has an invalid length. [ 723.111666][T30057] syzkaller0: entered promiscuous mode [ 723.126153][T30057] syzkaller0: entered allmulticast mode [ 723.225627][T21955] Bluetooth: hci0: command tx timeout [ 723.288428][T29770] veth0_vlan: entered promiscuous mode [ 723.304780][T29770] veth1_vlan: entered promiscuous mode [ 723.350296][T29770] veth0_macvtap: entered promiscuous mode [ 723.366801][T29770] veth1_macvtap: entered promiscuous mode [ 723.400618][T30070] delete_channel: no stack [ 723.405993][T29770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.430109][T29770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.449831][ T6249] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.466991][ T6249] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.477329][ T6249] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.498866][ T6249] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.664683][ T7989] net_ratelimit: 6 callbacks suppressed [ 724.664705][ T7989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.077212][ T7979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.183787][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 725.192051][ C1] lec:lec_tx_timeout: lec0 [ 725.196755][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 725.304021][T21955] Bluetooth: hci0: command tx timeout [ 725.706248][ T7979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.715356][ T7989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.766325][T30034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.909660][ T6226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.953419][ T6226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.091652][ T6226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.110767][ T6226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.234343][T30099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6478'. [ 726.556015][T30114] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6488'. [ 726.645937][T30123] H: renamed from dummy0 (while UP) [ 726.709230][T30129] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6489'. [ 726.745282][T30133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6491'. [ 726.746515][ T7989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.761701][T30133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6491'. [ 726.875146][T30137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6492'. [ 726.953427][T30145] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 727.144640][ T7979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.329840][T30168] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6500'. [ 727.490111][T30174] ip6t_REJECT: ECHOREPLY is not supported [ 727.500192][T30174] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000 [ 727.520164][T30174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6501'. [ 727.570601][T30179] vlan2: entered promiscuous mode [ 727.585881][T30179] bridge0: entered promiscuous mode [ 727.784155][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.912111][T30196] xt_time: unknown flags 0xf4 [ 728.039839][T30204] openvswitch: netlink: Flow actions attr not present in new flow. [ 728.232420][T30215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6510'. [ 728.266747][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.823931][ T2157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.864038][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.203694][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 730.211861][ C1] lec:lec_tx_timeout: lec0 [ 730.216915][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 730.521946][T30179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 730.696145][T30219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.704689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.904555][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.001432][T30251] netlink: 'syz.1.6521': attribute type 11 has an invalid length. [ 731.016061][T30249] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6522'. [ 731.017317][T30251] netlink: 'syz.1.6521': attribute type 11 has an invalid length. [ 731.035876][T30249] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6522'. [ 731.096183][T30252] netlink: 'syz.0.6520': attribute type 4 has an invalid length. [ 731.131758][T30249] netlink: 'syz.2.6522': attribute type 1 has an invalid length. [ 731.201062][T30254] bond0: (slave gre0): refused to change device type [ 731.306161][ T7979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.520697][T30266] syzkaller0: entered promiscuous mode [ 731.551504][T30266] syzkaller0: entered allmulticast mode [ 731.678824][T30286] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 731.727587][T30286] __nla_validate_parse: 2 callbacks suppressed [ 731.727613][T30286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6531'. [ 731.775087][T30286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6531'. [ 731.963046][T30303] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6535'. [ 731.986577][T30296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6533'. [ 732.146690][T30298] netlink: 'syz.1.6535': attribute type 10 has an invalid length. [ 732.160008][T30298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.171397][T30298] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 732.182366][T30298] netlink: 'syz.1.6535': attribute type 10 has an invalid length. [ 732.194501][T30298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6535'. [ 732.210146][T30298] batadv0: entered promiscuous mode [ 732.221182][T30298] batadv0: entered allmulticast mode [ 732.256128][T30298] bond0: (slave batadv0): Releasing backup interface [ 732.289391][T30298] bridge0: port 3(batadv0) entered blocking state [ 732.298661][T30298] bridge0: port 3(batadv0) entered disabled state [ 732.374070][ T6231] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 732.384522][ T6231] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 732.399095][T30322] netlink: 'syz.3.6539': attribute type 12 has an invalid length. [ 732.544341][T30326] openvswitch: netlink: IPv4 tun info is not correct [ 732.819150][T30334] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6544'. [ 732.872702][T30337] xt_hashlimit: size too large, truncated to 1048576 [ 732.880577][T30335] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6544'. [ 733.247060][T30358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6549'. [ 733.273548][T30364] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6551'. [ 733.347871][T30364] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6551'. [ 733.761535][T30392] netlink: 'syz.2.6556': attribute type 1 has an invalid length. [ 733.773125][T30392] netlink: 'syz.2.6556': attribute type 2 has an invalid length. [ 733.786891][T30394] netlink: 'syz.3.6557': attribute type 14 has an invalid length. [ 733.807967][T30394] netlink: 'syz.3.6557': attribute type 13 has an invalid length. [ 733.823780][T30392] netlink: 'syz.2.6556': attribute type 1 has an invalid length. [ 734.222877][T30417] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 734.545122][T30429] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.552910][T30429] bridge0: port 1(1¾x9ÿ) entered disabled state [ 734.628023][T30429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.642169][T30429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.772381][T30429] veth0_macvtap: left allmulticast mode [ 734.782432][T30429] macvtap1: left allmulticast mode [ 734.788854][T30429] vlan2: left promiscuous mode [ 734.793921][T30429] bridge0: left promiscuous mode [ 734.837509][T21677] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.867847][T21677] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.883805][T21677] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.892784][T21677] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.223759][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 735.231845][ C1] lec:lec_tx_timeout: lec0 [ 735.236491][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 735.276583][T30468] syzkaller0: entered promiscuous mode [ 735.682921][T30489] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 735.692509][T30489] syzkaller1: entered promiscuous mode [ 735.698838][T30489] syzkaller1: entered allmulticast mode [ 736.337012][ T5491] veth0_vlan: left promiscuous mode [ 736.426617][ T5491] veth0_vlan: entered promiscuous mode [ 736.931525][T30562] SET target dimension over the limit! [ 737.036965][T30569] __nla_validate_parse: 16 callbacks suppressed [ 737.036991][T30569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6598'. [ 737.154833][T30576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 737.162240][T30576] IPv6: NLM_F_CREATE should be set when creating new route [ 737.239364][T30573] bond0: entered promiscuous mode [ 737.253890][T30573] bond_slave_0: entered promiscuous mode [ 737.260172][T30573] bond_slave_1: entered promiscuous mode [ 737.277232][T30573] mac80211_hwsim hwsim61 wlan1: entered promiscuous mode [ 737.583991][T30596] ieee802154 phy1 wpan1: encryption failed: -22 [ 737.661022][T30600] pim6reg: entered allmulticast mode [ 737.682345][T30600] pim6reg: left allmulticast mode [ 737.833840][T30607] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6606'. [ 738.314100][T30641] validate_nla: 2 callbacks suppressed [ 738.314122][T30641] netlink: 'syz.2.6617': attribute type 1 has an invalid length. [ 738.353829][T30641] netlink: 'syz.2.6617': attribute type 7 has an invalid length. [ 738.361642][T30641] netlink: 'syz.2.6617': attribute type 8 has an invalid length. [ 738.381587][T30643] netlink: 'syz.0.6616': attribute type 1 has an invalid length. [ 738.394437][T30641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6617'. [ 738.554440][T30643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 738.603827][T30646] pim6reg: entered allmulticast mode [ 738.901872][T30672] xt_limit: Overflow, try lower: 271964/0 [ 739.170688][T30698] syzkaller0: entered promiscuous mode [ 739.177579][T30698] syzkaller0: entered allmulticast mode [ 739.500235][T30717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6642'. [ 739.554128][T30720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6643'. [ 739.564605][T30720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6643'. [ 739.660972][T30723] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 739.672462][T30723] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 739.681038][T30723] gretap1: entered promiscuous mode [ 739.686617][T30723] gretap1: entered allmulticast mode [ 739.695269][T30726] syzkaller0: entered promiscuous mode [ 739.712468][T30726] syzkaller0: entered allmulticast mode [ 739.790383][T30733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6646'. [ 739.800592][T30733] netlink: 'syz.1.6646': attribute type 7 has an invalid length. [ 739.809207][T30733] netlink: 'syz.1.6646': attribute type 8 has an invalid length. [ 739.817884][T30733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6646'. [ 739.940666][T30735] netlink: 'syz.1.6647': attribute type 1 has an invalid length. [ 740.074400][T30735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 740.192078][T30751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6652'. [ 740.243661][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 740.251892][ C1] lec:lec_tx_timeout: lec0 [ 740.256671][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 741.066591][T30792] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.6662'. [ 741.523644][T30827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.534519][T30827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.582404][T30827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.594892][T30827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.638320][T30827] bridge0: port 3(batadv0) entered disabled state [ 741.807403][T30833] syzkaller0: entered promiscuous mode [ 742.198252][T30853] sock: sock_set_timeout: `syz.2.6677' (pid 30853) tries to set negative timeout [ 744.708677][T30915] __nla_validate_parse: 1 callbacks suppressed [ 744.708701][T30915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6688'. [ 744.863040][T30924] openvswitch: netlink: IP tunnel dst address not specified [ 744.925014][T30934] syzkaller1: entered promiscuous mode [ 744.930781][T30934] syzkaller1: entered allmulticast mode [ 745.097142][T30932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6694'. [ 745.118235][T30942] netlink: 'syz.2.6696': attribute type 21 has an invalid length. [ 745.177690][T30942] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6696'. [ 745.208339][T30937] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 745.230277][T30937] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 745.231309][T30948] xt_ecn: cannot match TCP bits for non-tcp packets [ 745.263681][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 745.271849][ C1] lec:lec_tx_timeout: lec0 [ 745.276563][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 745.701511][T30981] tipc: Started in network mode [ 745.712392][T30981] tipc: Node identity 401, cluster identity 4711 [ 745.720118][T30981] tipc: Node number set to 1025 [ 745.768976][T30985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6706'. [ 745.857842][T30985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6706'. [ 746.207458][T30994] netlink: 'syz.3.6709': attribute type 1 has an invalid length. [ 746.224806][T30994] netlink: 'syz.3.6709': attribute type 1 has an invalid length. [ 746.693445][T31013] syzkaller0: entered promiscuous mode [ 746.709841][T31013] syzkaller0: entered allmulticast mode [ 747.381654][T31051] 8021q: VLANs not supported on ip_vti0 [ 747.474127][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.558694][T31061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6726'. [ 747.678193][T31061] ------------[ cut here ]------------ [ 747.685529][T31061] !rwb [ 747.685562][T31061] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x18a/0x220, CPU#1: syz.4.6726/31061 [ 747.699443][T31061] Modules linked in: [ 747.705277][T31061] CPU: 1 UID: 0 PID: 31061 Comm: syz.4.6726 Not tainted syzkaller #0 PREEMPT(full) [ 747.716196][T31061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 747.727053][T31061] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 747.733655][T31061] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 9d b7 24 fd eb 18 e8 96 b7 24 fd eb 0d e8 8f b7 24 fd 4c 89 ff e8 b7 ee 82 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 747.754051][T31061] RSP: 0018:ffffc9000694ee30 EFLAGS: 00010282 [ 747.760185][T31061] RAX: 8227a44081d87500 RBX: 1ffff1100f611584 RCX: 0000000000000046 [ 747.768511][T31061] RDX: 0000000000000006 RSI: ffffffff8defc636 RDI: ffffffff8c27d580 [ 747.776726][T31061] RBP: dffffc0000000000 R08: ffffffff9011deb7 R09: 1ffffffff2023bd6 [ 747.785176][T31061] R10: dffffc0000000000 R11: fffffbfff2023bd7 R12: ffff88807b08ac20 [ 747.793248][T31061] R13: 0000000000000000 R14: ffff88802a281000 R15: ffff88807b08ac00 [ 747.801533][T31061] FS: 00007f83b48e36c0(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 747.812105][T31061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 747.820044][T31061] CR2: 00007f26f7902000 CR3: 0000000078c0e000 CR4: 00000000003526f0 [ 747.828192][T31061] Call Trace: [ 747.831610][T31061] [ 747.834663][T31061] blk_register_queue+0x382/0x430 [ 747.839768][T31061] __add_disk+0x677/0xd50 [ 747.844437][T31061] ? down_read+0x272/0x2e0 [ 747.849015][T31061] add_disk_fwnode+0xfb/0x480 [ 747.853853][T31061] nbd_dev_add+0x72c/0xb50 [ 747.858426][T31061] ? __pfx_nbd_dev_add+0x10/0x10 [ 747.863542][T31061] ? bpf_lsm_capable+0x9/0x20 [ 747.868657][T31061] ? security_capable+0x7e/0x2c0 [ 747.873751][T31061] ? radix_tree_lookup+0x25c/0x290 [ 747.878942][T31061] nbd_genl_connect+0x962/0x1cf0 [ 747.884103][T31061] ? __pfx_nbd_genl_connect+0x10/0x10 [ 747.889566][T31061] ? rcu_is_watching+0x15/0xb0 [ 747.894451][T31061] ? trace_kmalloc+0x2a/0x110 [ 747.899229][T31061] ? __nla_parse+0x40/0x60 [ 747.903816][T31061] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 747.911505][T31061] genl_family_rcv_msg_doit+0x22a/0x330 [ 747.918134][T31061] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 747.924392][T31061] ? __lock_acquire+0x6b5/0x2cf0 [ 747.929420][T31061] genl_rcv_msg+0x61c/0x7a0 [ 747.934108][T31061] ? __pfx_genl_rcv_msg+0x10/0x10 [ 747.939295][T31061] ? __pfx_nbd_genl_connect+0x10/0x10 [ 747.944970][T31061] ? __lock_acquire+0x6b5/0x2cf0 [ 747.950085][T31061] netlink_rcv_skb+0x232/0x4b0 [ 747.954987][T31061] ? __pfx_genl_rcv_msg+0x10/0x10 [ 747.960086][T31061] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 747.965525][T31061] ? down_read+0x272/0x2e0 [ 747.970005][T31061] ? genl_rcv+0xd/0x40 [ 747.974219][T31061] genl_rcv+0x28/0x40 [ 747.978270][T31061] netlink_unicast+0x80f/0x9b0 [ 747.983102][T31061] ? __pfx_netlink_unicast+0x10/0x10 [ 747.988526][T31061] ? netlink_sendmsg+0x650/0xb40 [ 747.993534][T31061] ? skb_put+0x11b/0x210 [ 747.997992][T31061] netlink_sendmsg+0x813/0xb40 [ 748.002873][T31061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.008319][T31061] ? aa_sock_msg_perm+0xf1/0x1b0 [ 748.014701][T31061] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 748.021052][T31061] ____sys_sendmsg+0x972/0x9f0 [ 748.025984][T31061] ? futex_unqueue+0x211/0x240 [ 748.030862][T31061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 748.036424][T31061] ? import_iovec+0x73/0xa0 [ 748.041102][T31061] ___sys_sendmsg+0x2a5/0x360 [ 748.045978][T31061] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.051439][T31061] ? futex_wait+0x29a/0x380 [ 748.056107][T31061] ? __fget_files+0x2a/0x420 [ 748.060764][T31061] ? __fget_files+0x3a0/0x420 [ 748.065612][T31061] __x64_sys_sendmsg+0x1bd/0x2a0 [ 748.070630][T31061] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 748.076264][T31061] ? rcu_is_watching+0x15/0xb0 [ 748.081307][T31061] do_syscall_64+0x14d/0xf80 [ 748.086161][T31061] ? trace_irq_disable+0x3b/0x150 [ 748.091259][T31061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.097577][T31061] ? clear_bhb_loop+0x40/0x90 [ 748.102326][T31061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.109301][T31061] RIP: 0033:0x7f83b399c819 [ 748.115474][T31061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.136529][T31061] RSP: 002b:00007f83b48e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.145332][T31061] RAX: ffffffffffffffda RBX: 00007f83b3c15fa0 RCX: 00007f83b399c819 [ 748.153397][T31061] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 748.161589][T31061] RBP: 00007f83b3a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 748.169699][T31061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.177868][T31061] R13: 00007f83b3c16038 R14: 00007f83b3c15fa0 R15: 00007fff3e075068 [ 748.187287][T31061] [ 748.190409][T31061] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 748.197744][T31061] CPU: 1 UID: 0 PID: 31061 Comm: syz.4.6726 Not tainted syzkaller #0 PREEMPT(full) [ 748.207161][T31061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 748.217271][T31061] Call Trace: [ 748.220602][T31061] [ 748.223580][T31061] vpanic+0x56c/0xa60 [ 748.227631][T31061] ? __pfx__printk+0x10/0x10 [ 748.232275][T31061] ? __pfx_vpanic+0x10/0x10 [ 748.236841][T31061] ? is_bpf_text_address+0x292/0x2b0 [ 748.242190][T31061] ? is_bpf_text_address+0x26/0x2b0 [ 748.247505][T31061] panic+0xc5/0xd0 [ 748.251297][T31061] ? __pfx_panic+0x10/0x10 [ 748.255796][T31061] __warn+0x315/0x4f0 [ 748.259985][T31061] ? wbt_init_enable_default+0x18a/0x220 [ 748.265775][T31061] ? wbt_init_enable_default+0x18a/0x220 [ 748.271473][T31061] __report_bug+0x29a/0x540 [ 748.276038][T31061] ? netlink_rcv_skb+0x232/0x4b0 [ 748.281033][T31061] ? genl_rcv+0x28/0x40 [ 748.285252][T31061] ? netlink_unicast+0x80f/0x9b0 [ 748.290259][T31061] ? wbt_init_enable_default+0x18a/0x220 [ 748.295969][T31061] ? __pfx___report_bug+0x10/0x10 [ 748.301088][T31061] ? wbt_init_enable_default+0x18a/0x220 [ 748.306786][T31061] report_bug+0x16a/0x220 [ 748.311354][T31061] ? wbt_init_enable_default+0x18a/0x220 [ 748.317206][T31061] ? wbt_init_enable_default+0x18c/0x220 [ 748.323051][T31061] handle_bug+0x9c/0x200 [ 748.327333][T31061] exc_invalid_op+0x1a/0x50 [ 748.331877][T31061] asm_exc_invalid_op+0x1a/0x20 [ 748.336778][T31061] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 748.343074][T31061] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 9d b7 24 fd eb 18 e8 96 b7 24 fd eb 0d e8 8f b7 24 fd 4c 89 ff e8 b7 ee 82 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 748.362904][T31061] RSP: 0018:ffffc9000694ee30 EFLAGS: 00010282 [ 748.369039][T31061] RAX: 8227a44081d87500 RBX: 1ffff1100f611584 RCX: 0000000000000046 [ 748.377133][T31061] RDX: 0000000000000006 RSI: ffffffff8defc636 RDI: ffffffff8c27d580 [ 748.385135][T31061] RBP: dffffc0000000000 R08: ffffffff9011deb7 R09: 1ffffffff2023bd6 [ 748.393149][T31061] R10: dffffc0000000000 R11: fffffbfff2023bd7 R12: ffff88807b08ac20 [ 748.401164][T31061] R13: 0000000000000000 R14: ffff88802a281000 R15: ffff88807b08ac00 [ 748.409202][T31061] blk_register_queue+0x382/0x430 [ 748.414385][T31061] __add_disk+0x677/0xd50 [ 748.418779][T31061] ? down_read+0x272/0x2e0 [ 748.423226][T31061] add_disk_fwnode+0xfb/0x480 [ 748.428062][T31061] nbd_dev_add+0x72c/0xb50 [ 748.432525][T31061] ? __pfx_nbd_dev_add+0x10/0x10 [ 748.437600][T31061] ? bpf_lsm_capable+0x9/0x20 [ 748.442314][T31061] ? security_capable+0x7e/0x2c0 [ 748.447282][T31061] ? radix_tree_lookup+0x25c/0x290 [ 748.452517][T31061] nbd_genl_connect+0x962/0x1cf0 [ 748.457496][T31061] ? __pfx_nbd_genl_connect+0x10/0x10 [ 748.462945][T31061] ? rcu_is_watching+0x15/0xb0 [ 748.467746][T31061] ? trace_kmalloc+0x2a/0x110 [ 748.472461][T31061] ? __nla_parse+0x40/0x60 [ 748.476914][T31061] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 748.483456][T31061] genl_family_rcv_msg_doit+0x22a/0x330 [ 748.489040][T31061] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 748.495250][T31061] ? __lock_acquire+0x6b5/0x2cf0 [ 748.500221][T31061] genl_rcv_msg+0x61c/0x7a0 [ 748.504777][T31061] ? __pfx_genl_rcv_msg+0x10/0x10 [ 748.509926][T31061] ? __pfx_nbd_genl_connect+0x10/0x10 [ 748.515332][T31061] ? __lock_acquire+0x6b5/0x2cf0 [ 748.520324][T31061] netlink_rcv_skb+0x232/0x4b0 [ 748.525219][T31061] ? __pfx_genl_rcv_msg+0x10/0x10 [ 748.530282][T31061] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 748.535611][T31061] ? down_read+0x272/0x2e0 [ 748.540058][T31061] ? genl_rcv+0xd/0x40 [ 748.544177][T31061] genl_rcv+0x28/0x40 [ 748.548231][T31061] netlink_unicast+0x80f/0x9b0 [ 748.553051][T31061] ? __pfx_netlink_unicast+0x10/0x10 [ 748.558397][T31061] ? netlink_sendmsg+0x650/0xb40 [ 748.563391][T31061] ? skb_put+0x11b/0x210 [ 748.567683][T31061] netlink_sendmsg+0x813/0xb40 [ 748.572516][T31061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.577857][T31061] ? aa_sock_msg_perm+0xf1/0x1b0 [ 748.582846][T31061] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 748.588255][T31061] ____sys_sendmsg+0x972/0x9f0 [ 748.593062][T31061] ? futex_unqueue+0x211/0x240 [ 748.597888][T31061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 748.603216][T31061] ? import_iovec+0x73/0xa0 [ 748.607844][T31061] ___sys_sendmsg+0x2a5/0x360 [ 748.612655][T31061] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.617893][T31061] ? futex_wait+0x29a/0x380 [ 748.622464][T31061] ? __fget_files+0x2a/0x420 [ 748.627092][T31061] ? __fget_files+0x3a0/0x420 [ 748.631810][T31061] __x64_sys_sendmsg+0x1bd/0x2a0 [ 748.636787][T31061] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 748.642294][T31061] ? rcu_is_watching+0x15/0xb0 [ 748.647119][T31061] do_syscall_64+0x14d/0xf80 [ 748.651745][T31061] ? trace_irq_disable+0x3b/0x150 [ 748.656796][T31061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.663162][T31061] ? clear_bhb_loop+0x40/0x90 [ 748.667892][T31061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.673819][T31061] RIP: 0033:0x7f83b399c819 [ 748.678268][T31061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.697990][T31061] RSP: 002b:00007f83b48e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.706532][T31061] RAX: ffffffffffffffda RBX: 00007f83b3c15fa0 RCX: 00007f83b399c819 [ 748.714558][T31061] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 748.722562][T31061] RBP: 00007f83b3a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 748.730583][T31061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.738597][T31061] R13: 00007f83b3c16038 R14: 00007f83b3c15fa0 R15: 00007fff3e075068 [ 748.746625][T31061] [ 748.750363][T31061] Kernel Offset: disabled [ 748.754706][T31061] Rebooting in 86400 seconds..