last executing test programs: 22.18610938s ago: executing program 2 (id=5474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005a000d03000000000000000004000080080002fb80cff802910f20bfb7c4dcc7a93390bc156b32777974658edc248ffad1b3f9b5d6017f05f34a47676d7c698de5d66e1bf13ae2865fad850752fda9ae8539c33bd8237de7cf4692442b48cd1d78ae2d"], 0x1c}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}}, 0x10) 21.851971492s ago: executing program 2 (id=5475): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000008095"], &(0x7f00000008c0)='GPL\x00', 0x9, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xca, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="08000800000106000400070048004517010f00660000401190780a010102ac1414124e264e2000fb9078210800006a93a1fc83e4f238476807abb04c5de64f202dedfda213623a58586f0eeaf60d610fef1bf2f3953a5b2ae076c68b71aebe7cab5d436af11cf84d4efb99a12381e7117ce20a07004fd760aa2f69863bd91ea9714566cabb4b515a9d5e64440cb20bec2c6c279c38228cc9d5ded5c28fe1f1029eb4982204fa9b06b52e856c95c397fdaba7cba87ea757b6b3f397c0fcbb4774b50cbc6cb6dbc913495f23607754acab1fda6a1cb5ca1cf553936e6bf6c4741a720531ad3968b8b9937f36084ff28b7b6370cb8358eaba6c336433983d682c42f09b17239f92bd62a71f86bd73e1fb12aeed7163cb5d5d20233aec7f16b66b277a98138749bf16edac91806ded8f8c"], 0x11d) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a0001ff80000000000000000a00000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x400c050}, 0x40) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000000c0), 0x4) unshare(0x6a040000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x4e22, 0x3, 'rr\x00', 0x28, 0x5, 0x72}, 0x2c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r5, @ANYBLOB="0100000000000000000067000000080001001f00000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000630000000800c30003000000a000c500f0b784c7852752cef16cd351a3fca6763e14b2c954ca20b4d0d222bbfada267683e018a9ff1a6f6d3cb6ea6848ea6945a04a78827cc1f3a91d325739b04c409c83f81f017135ec7f9418946dd235cff7c9e0f21b72a2ce5344de78ad3848f8b75c406fc1d7a16ee7917494f14c29c2a3b55255c390c08df7c138cf88cf83c9bbb398f3f390f6fb36e670e3e6a6473ed6632693f31100000000000000"], 0xd8}}, 0x20000000) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa0100fe, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x6, @loopback, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x20000000) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r10, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 21.008244014s ago: executing program 2 (id=5478): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003e00070100000000fcdbdf25047c000004000000140001800674405c57e0a99819f2ca68aa335d"], 0x2c}}, 0x0) 20.566616793s ago: executing program 2 (id=5481): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}}, 0x2008040) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ff1608001540000000000800048004000280140005800f000100"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 19.987097813s ago: executing program 2 (id=5482): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108) close(r3) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYRES32=r2, @ANYRES64=r1, @ANYBLOB="f1bf00634e7d3dd8d0efb2a1b9b5a0df758069eb0a47e1f26a5f623239e365c4648ee757cf83364d0fd436aeb3f4c1e1f5e0489d2cc7323fd7506165974fa2eec6f15dff61b6439c213f4ec306df72b2fbfd490259efc7903aa67aa6236abfc6ce054c58e9c7f120a8bfaab929dcc48e5ebe008c211c1b0b1d0e3c61139b03f855a5154195fd526dae106ed04e651a4186926c95887529", @ANYRESOCT=r5], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, r8, 0x301, 0x0, 0x0, {0x2b}}, 0x14}, 0x1, 0x0, 0x0, 0x20002041}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0009000800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 17.354443775s ago: executing program 2 (id=5488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x80c1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x48, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0xc050) close(0x3) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x27, &(0x7f0000000140)=ANY=[@ANYBLOB="3e693200edf8aaab63f876a76c0cee145e4c67651dcaac"], 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$kcm(0xa, 0xa, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x4, 0x2, 0x6a8}}, 0x44) unshare(0x2010100) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 13.120639671s ago: executing program 1 (id=5500): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)=',,),$-]\\-\x00', 0x132402, &(0x7f0000000040)={@_ha_fsid={[0x1, 0x5]}, {0x1, 0x0, 0x9, 0x1}}, 0x7ff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x299}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x6a, "7d09d7cbf89341b26aca61fab3aea38e4e0c5855ccbfe6d566a2977ad27314769246f9a680c6f9c9d69b3ab5980fd92109052860664edb1791f490f7eab066259095b826054ec0eca3c19198701da1400b49230e66de236576f324bde1f1557e1ee1cabc8bbdc1479b0c"}, &(0x7f00000001c0)=0x72) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={r1, 0x800, 0x30, 0x6, 0x3}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r2}, &(0x7f00000002c0)=0x8) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000300)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = accept4$nfc_llcp(r0, &(0x7f00000004c0), &(0x7f0000000540)=0x60, 0x80000) getpeername(r6, &(0x7f0000000580)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000600)=0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000640)={r3}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000006c0)={0x6, 0x201, 0x9, 0xc00000, r1}, &(0x7f0000000700)=0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r8, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x6100400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20014}, 0x30) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r0, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bind$packet(r0, &(0x7f0000000940)={0x11, 0x10, r10, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@fallback=r5, 0x13, 0x1, 0x7fffffff, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)={@fallback=r6, r0, 0x22, 0x8, 0x0, @void, @value=r0, @void, @void, r12}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000b40)={r7, 0x5}, 0x8) setsockopt$kcm_KCM_RECV_DISABLE(r11, 0x119, 0x1, &(0x7f0000000b80)=0x80000000, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000bc0)={0x0, @aes256, 0x0, @desc1}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r11, 0x89f9, &(0x7f0000000c40)={'sit0\x00', &(0x7f0000000c00)={@mcast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1e, 0x17}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r0) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000d00), r8) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r13, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9d1c}]}, 0x2c}}, 0x20080800) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r14, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x74, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:var_auth_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x400c1) sendmsg$kcm(r11, &(0x7f0000001840)={&(0x7f0000000f40)=@x25, 0x80, &(0x7f0000001180)=[{&(0x7f0000000fc0)="e430e981d1c84aefda20849a299ee0ccce527681b3ffd0173a18c81470a1896fe102c4cf35e51d614fa029b64070076932bf94a6f9ab9a5e49ef68adfd84a1d6ed1a5cdee093ea9b13a94debddae252693ce33a515c1a2fe610365eac82a43fb1305c927409931ade56ba77d94479c2d60dff0e23f105a52a30413", 0x7b}, {&(0x7f0000001040)="3c2875c6a12b6967077c26ec52ac27303d3386cdc01d3f39ee15c1cfc5f770da5222d59ea75f9901178b2384596914e6092dcc6e0d5cfb71812f2f8b4aca76b3988944a619aa8a1351c7df89540cf9217f2389b8472e9c83398705561a767e6f26e1b68b8147fe06139a62217c6542", 0x6f}, {&(0x7f00000010c0)="a96086d0a592e48b7e24647df4a69b64ea83f55117ba94348a8200c99894559989aa21973667f4e0774a59cf7777c34c633eb43718a28fc80cc67dfac53a259096fee5af304b1b0a5dad19cec58451d11ec1c20d472ea2cfd0162b78b2678216ef977d7a307c77a6522ad28617b678eab047e727e4dc864523cc24ed46b34e0b47c02a785b797bd8519db48d0c066e6b9e", 0x91}], 0x3, &(0x7f00000011c0)=[{0xe8, 0x10c, 0x7f, "1c638f4943e5c86bb62bd1126a97444b69da2242035e56b8b7efab0e784e5da5258af838b197eb38880b085186e35e07f3f07b14cbdca7be844ba38c62151dbaa6b2c473ddeb3022c84454b38cf0bf19f59fda8de61329d0e910b9a2133d5461fd17543738bcc810704a1cca824ff8fceafa2cecba21dfdc8c3ab011b80ca73f09d25427415f4e82f2b7ea2a09fac9157caa31672f29355230b620efd78a4703eb9238aafd924a5e47c72d7c4372d4d94eb1473ad6b75773248cd0917ed49bc20bdd54803c1beab0013a07e26647d9194f437b6c51c7d7"}, {0xc8, 0x11, 0xfff, "f3c05eebe0948fd0232f0e0c8f605d79daca787b53f4fe1470a12b32203143ad6cbb7af052b88ec92c6029daf3b7b04e2b5ced32b4496451f8a638cbea612b7c20a407c34081e132a6227e1885e5bebba51d1d3e68cdcfa735b166d44146034aceb8cff0bb21f487cb0129b648230db9409aca3edd4af88187395ab0dc582e8df04fb5d82040c462dc78b2e4b3fafe2edf5abd15312557534996f15d55f85b7c5b1c466ba9523fd339565e2552ca1c231c06cab4"}, {0xc8, 0x10c, 0x8, "ffe3b86d8543abd0a0dd01a5630b8e01f1a6d20c1f0eafa153c4be26a4f9a47fe196d2b9fb1cd567cb27357b02c9eddac672890abe1cb349958fa16b11687050b7385ce49c21a73b73e844e785f15ee13cb57c0087dbe6a6cfb460b92ef3bbbfab79833878924a19794fe58e63ed406860e57c3dd2a668042011df1cf7a754243428f47e87bfb9ccffdc3ba8ed20f2ce3db2c243702cb18635303eeee3a891e15f3a94f7bbd1cb75d43d13d32b9d6b5454"}, {0x90, 0x86, 0x5, "a61ab77a71914fa56d900fecd2db2bd6580a3ef237e07646f59e3c2da8da2df5f8504574704738c304f0f4f5cc364e7319cb048e90010737ec7c9fd0c6c3fe73da37978c8cc9cc96552dbb8a42f03ff9c408a55628de8fd42f7ffabd1d470e1fa1e39eaccd51f498d7a81018dce0412342d3bf2fedb3e959400e6a33c0"}, {0x100, 0x3a, 0x6, "515d5b62c0ce2e88dcf119e6b30e4ae623add44cf8d38e08426d07e6503a90ebb6d7ea0aceb92a25f91dbde022982782a7a30c027827f511f6989fa07abc554bbbdec4832379cfb6ba19823173202f51c1405658604cfa7309ef5a3a040d730fc5ca8a44de3e064cceae01c0314f46ae4389aca3c6c12309b984f9deb4ea58177e585914b225ea680745339a159913e5ee724293f559445b3ec9f99855fdb5afc26ee463594002363e5490422817297f25e47bc1ce5f05bc3cd9becf2acc451436752057001eae503366257ddc7fa5b696f21e67bba323adbe07d436839ca40554d64e07b4386b74993f1a08e99760"}, {0xf8, 0x102, 0x7ff, "4bf47e9db4bc22a141745bdf2cd8e4fe3a8becc9c4c0f13a5d0724dabd8ace97ecf3d21dfa87767293729ccd33882303d9a04b57655381ff1f85d0831700bf8f46ebe0b4dbcc3d33ad6d89906662add0fc8416defc872fc6096aa86a2e97f7cfff32fafc15f790f4b7128e40b632b468de727d9fbd283f196fd3412b46b42f947efd03f5afb3639a8cbfbe68782eedacee5c3baa11e37e3595bc9f45dd3644f8f6de86c5c46c23a28081d802d53d9d038d9011cf812496abf73784de6e8b92ca659884a224629d4b130be460d967ef30baf48d013a1d52810d767ec4c907add7b6cc82"}, {0x40, 0x110, 0x1, "ebb13fb5acc9914341827e2834aa30bcba0daf6241ad9b503720b419a0a558327b9b80e5532c6a1a538ce96540e7"}, {0x108, 0x0, 0x4, "804a342b9d01e9e363e0f7767cc7029cf44494baa1913eb0d134f154cd3922ff766b5ddf60a91256d730ad432f4421c345fffdcd4aa2b07481e3cc37819d052f59e39187d89931471fb1de820d7de01fc3cbdced8aa09682233a9bb919026855951349e729fd672564720fb61625869d52bf6613b3b5d05f11ce8e26abb28765efa802580e8c56fff7b9756b160ed78604c37c02cd7c4b0bc597d7089a0320944baedb8a363dd0ad1c8d53fbb4de33e6ad0f4011d42fee195e61cee4a54ca480927766333261e6cb0f3b48ed4fe068dca70815ba54d6ed3af7e54994b3617854b126e5d86936e06f114a50d8796a2cc135b3e18279a661"}], 0x648}, 0x2004401c) 12.807997428s ago: executing program 1 (id=5501): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000240)={0x1, 0x2}, 0x8) sendmmsg$sock(r0, &(0x7f0000002c00)=[{{&(0x7f0000000500)=@hci={0x1f, 0xdd86, 0x4}, 0x80, 0x0}}], 0x1, 0x8854) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2102, &(0x7f00000042c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800040000000000000000000000f0426110b48b7aaf006f0a00009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 12.305641272s ago: executing program 1 (id=5503): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0xfffffffe, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1, 0x803, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvmmsg(r4, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, 0x0, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x5, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010320000000000000000c0000000800040001"], 0x1c}}, 0x4000000) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x88, r8, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x43, 0x2a, [@mesh_id={0x72, 0x6}, @preq={0x82, 0x30, {{0x1}, 0x6, 0x1, 0xff, @broadcast, 0x3ff, @void, 0x7, 0x8, 0x2, [{{0x1, 0x0, 0x1}, @broadcast, 0xfff}, {{0x1, 0x0, 0x1}, @device_a, 0x2}]}}, @supported_rates={0x1, 0x3, [{0x9, 0x1}, {0x48, 0x1}, {0x1, 0x1}]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x200400c0}, 0x80) 10.69478274s ago: executing program 1 (id=5510): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00') ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000340)={r0, &(0x7f0000000000)='\x00', 0x2500, &(0x7f0000000040)={@align=0xffffffff, {0x2, 0x100, 0x8, 0xfffffffffffffffd}}, 0x206e, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000300)=0x7}) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000003c0)={0x5, &(0x7f0000000380)=[{0x0, 0x8, 0x9}, {0x5, 0x3, 0x6, 0x4}, {0x1, 0x1, 0xe0, 0x9}, {0x3, 0xb, 0x3, 0x5}, {0x3940, 0x9, 0xff, 0xfffffffb}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x101, 0x1ff}}) unshare(0x6a040000) syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaabaaaaaaaadf000040000008004f0000500000000000069078ac1e0001ac141411830f75ac1414bbe0000002ffffffff4410050300000000000000000000000086060000000100000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r3 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000940)={'pim6reg\x00', 0x0}) sendmsg$nl_route(r3, 0x0, 0x50) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ec0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000880) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x4, 0x6, 0x4, 0x2, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0xfffffffffffffffe, 0x8, 0x0, 0x40}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000500)=ANY=[@ANYRES64=r1], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x11, '\x00', r5, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x11) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000009340)=""/4101, 0x1005}, {&(0x7f0000000340)=""/245, 0xf5}], 0x2}, 0x1}], 0x1, 0x2000, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) connect$bt_rfcomm(r1, &(0x7f00000004c0)={0x1f, @any, 0x2}, 0xa) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x800452d3, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000000080)=0xf9c, 0xffffffffffffff70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.356127888s ago: executing program 0 (id=5524): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f00000003c0)="975c", &(0x7f0000001140)=""/4096, &(0x7f0000000300), &(0x7f00000001c0), 0x5, r3}, 0x38) 4.046495032s ago: executing program 0 (id=5525): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x60, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x5) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x15}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}]}, 0x34}}, 0x400c0c0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)={0x14, r4, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x80}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.041717207s ago: executing program 3 (id=5526): r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x17aa139e}]}]}], {0x14}}, 0xac}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r6, &(0x7f0000000240)="d3", 0x1, 0x81, &(0x7f0000000280)={0xa, 0x4e24, 0x8, @remote, 0x7}, 0x1c) socket$netlink(0x10, 0x3, 0xe) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000005200010000000000000000001c00000004000100"], 0x18}}, 0x0) (async) setsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f0000000040)=0x9, 0x4) sendmsg$nl_generic(r5, &(0x7f0000003600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003640)=ANY=[@ANYBLOB="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"], 0x3118}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000080) close(r4) (async) close(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) (async) sendmsg$inet(r8, &(0x7f0000001580)={0x0, 0xfffffffffffffe49, &(0x7f0000001280)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669473f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da2b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b9900"/3251, 0xcb3}, {&(0x7f0000001000)="e4cc98ee53"}, {&(0x7f0000001080)="b37464749fbb4d78151bf6eb18a83ddbabdb634d6bf01e30b9df7bdd56ff9701658ed883d591415ab830c185f4ea6f1ddab429085d7c39243f476b8916756300ffee30c7f5052903b3e45d35f0c60f99f80187b7ea867dae8ea3aaa3748d122ad23cdce351ff7d842537b7f495fa2d1a88e83fa00889dfd0c53e59c543f4fd378a99e32eeebefe060fc56293cbda739295ae2e7a3896ccf6f2e52711079c3a0cadc26d01ee1adc324bc425acb2635e1883ad6bfa5b51972fc08ce05122"}, {&(0x7f0000001180)="2232839cf5785ac9814bc08b7fba172a05d7d1b901b26faa11947c7e05a77843b457da365428a665b6fbd61546aeb6a11748596056d024f61f33abd3898e516b22dc7191aef22a5cf2a80f1a71d53e5a204687a573ab74c9efe1bdd9ba96d2bdf7aa6e9424e782a0fe79b0b3e8615f6e56463e7189d22c0475a2349eb4b97f9fbb33c23e0d677d95e71cc883c80519ad4f289588315f1af09eb861ad3295c6bf2fe7e4166ed2e1ab977a339d6b50437eae3e84da70148b24300be4c2350463831065bb"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @multicast1}}}], 0x20}, 0x0) 3.462852425s ago: executing program 3 (id=5527): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x0, 0x56, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) recvfrom$inet6(r1, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fcdbdf2501000000280007800c00018808000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00060000000000000000000c0002"], 0x54}, 0x1, 0x0, 0x0, 0x44884}, 0x400c000) sendto$inet6(r5, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket(0x400000000010, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) vmsplice(r8, &(0x7f0000000800)=[{&(0x7f0000000000)='YQ', 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x4) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48000000100037040400"/20, @ANYBLOB="b24e276dda857b93568a7510e75263053b55223273478e93718849595b4c67c656c6bc2a10df9e0f3143d043c43e3c285ba44f08332c0d67a4bb635cc5ca3a5d2be5f38c0c88a7bd06a9454c2c25bc90dbe67f89c92f03119af5c6af12bf351cd841a4eba4473e2cf5301faab733d09e1410de03bf9619aa4238e08a3f5e9c25f355793d7cec4ed5743f84a7ff54396ff4133b3621a40ce1bdd632327c601416f83fd9fdc04d78d96c6066faf8c22ab00d8d27c43bbcafe7d967498c327c4892d9300b45650ceb7d3340412f05816a84e71fba588a5e92db494256c625044c5f118a25", @ANYBLOB="830405000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r9], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.880082484s ago: executing program 0 (id=5528): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731315806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendto$inet(r2, &(0x7f0000000100)="1ce0", 0x2, 0x0, &(0x7f0000001100)={0x2, 0x4e23, @private}, 0x10) recvmmsg(r2, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000120, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731315806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendto$inet(r2, &(0x7f0000000100)="1ce0", 0x2, 0x0, &(0x7f0000001100)={0x2, 0x4e23, @private}, 0x10) (async) recvmmsg(r2, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000120, 0x0) (async) 2.707715512s ago: executing program 3 (id=5529): syz_emit_ethernet(0xed, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0xb7, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000020000026000400"}, {0x2, 0x1, "fe906d26efe3"}, {0xe, 0x7, "171af0056cb419d6c938da4958f22f98398fd982795bc647bdb438986099d9bc56682dc148ac9648c35c495c518c86c2e47081cfe560180b8668af9ff5"}]}}}}}}, 0x0) socket(0x11, 0x2, 0xffc) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000000)="22464cac61c9f8ac150937a069cb40e1a42eff71d04e15401550be8ae06be14a04189d64a6d5f83ba5f30ec5c41589e98ac6b26e40d84e9ad7a51cd66c87993b1266f87f4a5556d39636040f389aacde3194062f4c401c31b4ca282b123b0c191d4741be94d40030df593c3178c28a49978f11a062962f0aa0a033e17eb46fabc71fca7f93c0290ffe8c89fcee13d7dcc918c7dffa452684c01098d18daa7f2ea990dece682efb82b2798d95b05fd0a47390aa7dec730077628d08f05118c331cb2d21c20b46dd84bc727a2033806ffa1f0747d6f11686349bef6930d983d1e2a6d599df230d90825de20f8a232ee34cc54eeda1afeb12e54a161d", 0xfb, 0x2404c040, &(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0x10) socketpair(0x3, 0x1, 0x0, &(0x7f0000000100)) 2.534855314s ago: executing program 4 (id=5530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'ip6gretap0\x00', 0x20}) r1 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0xbf1, 0x0, 0xffff7ffffffffffa, 0x8}, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000400)={{0x10001, 0xc}, 0x100, './file0\x00'}) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000340)=@req3={0x1001, 0x9, 0x0, 0xf, 0xb, 0x0, 0xfffffffc}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100)={r7, 0x7}, &(0x7f0000000140)=0x8) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r4) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000beb120031b26f11a41c7000000"], 0x24}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000007c0)=0xfffffbfd, 0x4) r9 = socket$kcm(0x2, 0x3, 0x2) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000080000000000a400800000000000", @ANYRES32=0x0, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000008000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=r10, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300010000000000fcffff0707000000", @ANYRES32=r12, @ANYBLOB="000000000000000014001a80100004800c000a80"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000", @ANYRES32=r10, @ANYBLOB='\b\x00'/20, @ANYRES32=r12, @ANYRES32=r14, @ANYBLOB="0500000000000000010000000500"/28], 0x50) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 1.846935286s ago: executing program 32 (id=5488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x80c1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x48, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0xc050) close(0x3) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x27, &(0x7f0000000140)=ANY=[@ANYBLOB="3e693200edf8aaab63f876a76c0cee145e4c67651dcaac"], 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$kcm(0xa, 0xa, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x4, 0x2, 0x6a8}}, 0x44) unshare(0x2010100) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.821972459s ago: executing program 3 (id=5532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xe70c}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20006000}, 0x850) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0xea, 0x440, 0x0, 0x90, 0x0, 0x8}, 0x9c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.815434249s ago: executing program 0 (id=5533): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) close(0x4) socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000d10ffc)=0x7d10, 0xd) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x26}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000080800044000000001"], 0xdc}}, 0x0) r8 = socket(0x2b, 0x80801, 0x1) listen(r8, 0x8) setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000140)=0x18, 0x4) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r6, 0xc9233000) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x40b, 0x9, 0xfffffffe}) write$bt_hci(r9, &(0x7f0000000080)=ANY=[], 0x6) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES8=r5], 0x32600) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000400)={0x80000001, 0xfffffffffffffffa, 0x80, 0x8, 0x9, 0x4}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 1.422571375s ago: executing program 4 (id=5534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (rerun: 32) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x28) (async) r6 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) (async, rerun: 64) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000"], 0x18, 0x500}}], 0x2, 0x0) (async, rerun: 64) mmap(&(0x7f0000a5d000/0x4000)=nil, 0x4000, 0xd, 0x13, r0, 0xb0267000) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0xc6e9f000) mmap(&(0x7f0000131000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xffffe000) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000c, 0x6e073, 0xffffffffffffffff, 0x0) 1.217280568s ago: executing program 0 (id=5535): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003400128009000100626f6e640000000024000280050001000400000008001e0000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000ed03014000000000000000000000000a14000000fa03"], 0x28}}, 0x0) 1.159197527s ago: executing program 4 (id=5536): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x3, 0x0, 0x0, 0xf, 0x0, 0x7}]}, {0x0, [0x4f, 0x0, 0x30]}}, &(0x7f00000006c0)=""/262, 0x29, 0x106, 0x9}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0xd, 0x8}, 0xc) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0x13, &(0x7f0000000480)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0xc0, 0x6, 0x3, 0x5, 0x1}], &(0x7f0000000540)='GPL\x00', 0x1, 0xf3, &(0x7f0000000580)=""/243, 0x0, 0x2, '\x00', r3, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x200}, 0x10, 0xb717, 0xffffffffffffffff, 0x9, &(0x7f0000000800)=[r1, r1, 0x1, r1, r2, r4], &(0x7f0000000840)=[{0x5, 0x3, 0x3, 0x5}, {0x1, 0x4, 0x4, 0x8}, {0x0, 0x3, 0x1, 0x9}, {0x4, 0x4, 0x8, 0x7}, {0x2, 0x3, 0x6, 0xa}, {0x4, 0x4, 0xc}, {0x5, 0x1, 0x8, 0x2}, {0x1, 0x5, 0x2, 0x1}, {0x3, 0x5, 0x5, 0x7}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x13, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe0f, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @generic={0x7, 0x3, 0x4, 0xfffa, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', r3, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c09000000000000b7020000000000007b2af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 862.843192ms ago: executing program 1 (id=5537): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xff, '\x00', 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) (async) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, 0x0) (async) close(0x3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @empty, 0xa}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r3, &(0x7f0000000240)="88", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @local}, 0x43bc}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 469.700368ms ago: executing program 4 (id=5538): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x300}, 0x90) 435.394851ms ago: executing program 3 (id=5539): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe5, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001f40)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 295.703407ms ago: executing program 4 (id=5540): syz_emit_ethernet(0x5e, &(0x7f0000002280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000000280000fc00005f1d2d16b8fae4396589fc52be8000010000000000000000000001ff0200000000000000000000000000010104040280380600fc020000000000000000000000000001fc01"], 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x1b6412fac4306811) 76.887212ms ago: executing program 1 (id=5541): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r2, 0x0, 0x404884d) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffccf}, 0x40000060) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) connect(r3, &(0x7f0000000140)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x75, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) socketpair(0x2, 0xe, 0x1, &(0x7f0000000080)) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffc, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x3c8, 0x9, 0x1, 0x95ce, 0x8}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000100)={@private2, 0x1c, r7}) socketpair(0x2c, 0x800, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$caif_stream(0x25, 0x1, 0x5) r9 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r9, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800) sendmsg$kcm(r9, &(0x7f0000000580)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}}, 0x80, 0x0}, 0x20000804) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f00000001c0)={0x3, 0x5, 0x9, 0x2, r12}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f00000000c0)={r12, 0x1, 0x4, 0xfffff6bd}, 0x10) 76.430001ms ago: executing program 0 (id=5542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r4) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r5, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_int(r7, 0x0, 0xa, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r4) (async) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r5, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) setsockopt$inet_int(r7, 0x0, 0xa, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x8000) (async) 69.124217ms ago: executing program 4 (id=5543): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000000)=""/254, 0x26, 0xfe, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x40000102) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x8004) 0s ago: executing program 3 (id=5544): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001780)={0x0, @in6={{0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, 0x2, 0x5, 0x63, 0x30, 0x33, 0x7, 0x8}, 0x9c) kernel console output (not intermixed with test programs): tributes in process `syz.3.3917'. [ 635.424030][ T35] net_ratelimit: 4 callbacks suppressed [ 635.424051][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.441015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.611716][T21906] netlink: 'syz.3.3922': attribute type 1 has an invalid length. [ 635.739059][T21906] bond10: entered promiscuous mode [ 635.753163][T21906] 8021q: adding VLAN 0 to HW filter on device bond10 [ 635.971706][T21906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3922'. [ 635.982211][T21922] netlink: 'syz.1.3926': attribute type 4 has an invalid length. [ 635.996560][T21922] netlink: 'syz.1.3926': attribute type 4 has an invalid length. [ 636.031829][T21926] netlink: 'syz.2.3927': attribute type 1 has an invalid length. [ 636.093020][T21926] 8021q: adding VLAN 0 to HW filter on device bond4 [ 636.343031][T21942] netlink: 'syz.0.3932': attribute type 1 has an invalid length. [ 636.479996][T21942] bond6: entered promiscuous mode [ 636.519986][T21942] 8021q: adding VLAN 0 to HW filter on device bond6 [ 636.605209][T21945] 8021q: adding VLAN 0 to HW filter on device bond6 [ 636.618562][T21945] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 636.630777][T21945] bond6: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 636.688036][T21955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.702636][T21945] bond6: (slave vcan0): making interface the new active one [ 636.710927][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.719924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.728963][T21945] vcan0: entered promiscuous mode [ 636.730645][T21955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.744151][T21945] bond6: (slave vcan0): Enslaving as an active interface with an up link [ 636.773318][T21955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.795863][T21955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.838621][T21955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.855452][T21955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.005607][T21974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3937'. [ 637.232202][T21985] netlink: 'syz.0.3941': attribute type 1 has an invalid length. [ 637.301430][T21985] 8021q: adding VLAN 0 to HW filter on device bond7 [ 637.391367][T21989] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 637.428150][T21989] bond8 (unregistering): Released all slaves [ 637.639065][T22003] ipip0: entered promiscuous mode [ 637.692694][ T47] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.721335][ T47] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.775480][ T47] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.793087][ T47] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.858543][T22018] tipc: Started in network mode [ 637.870793][T22018] tipc: Node identity 86eac8e24556, cluster identity 4711 [ 637.880266][T22018] tipc: Enabled bearer , priority 0 [ 637.890185][T22018] syzkaller0: entered promiscuous mode [ 637.897364][T22018] syzkaller0: entered allmulticast mode [ 637.948489][T22018] tipc: Resetting bearer [ 637.958794][T22024] bridge0: port 5(veth0_to_bridge) entered blocking state [ 637.968943][T22024] bridge0: port 5(veth0_to_bridge) entered disabled state [ 637.970191][T22026] ipt_rpfilter: unknown options [ 637.982644][T22024] veth0_to_bridge: entered allmulticast mode [ 638.002878][T22024] veth0_to_bridge: entered promiscuous mode [ 638.025048][T22016] tipc: Resetting bearer [ 638.060507][T22016] tipc: Disabling bearer [ 638.259980][T22034] netlink: 'syz.3.3954': attribute type 6 has an invalid length. [ 638.278255][T22032] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.295469][T22032] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.348549][T22037] netlink: 'syz.0.3955': attribute type 4 has an invalid length. [ 638.377772][T22037] geneve1: Caught tx_queue_len zero misconfig [ 638.813594][T22054] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 638.965329][T22070] __nla_validate_parse: 8 callbacks suppressed [ 638.965350][T22070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3965'. [ 639.145308][T22083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3969'. [ 639.173506][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 639.181652][ C1] lec:lec_tx_timeout: lec0 [ 639.187158][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 639.267185][T22092] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3970'. [ 639.358325][T22082] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3970'. [ 639.607233][T22109] netlink: 'syz.1.3977': attribute type 1 has an invalid length. [ 639.639828][T22111] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3976'. [ 639.749520][T22119] netlink: 'syz.3.3978': attribute type 1 has an invalid length. [ 639.797191][T22114] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 639.843083][T22114] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 639.941738][T22109] bond2: (slave gretap1): making interface the new active one [ 639.952207][T22109] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 640.029458][T22121] macvlan2: entered promiscuous mode [ 640.035575][T22121] macvlan2: entered allmulticast mode [ 640.041964][T22121] bond2: entered promiscuous mode [ 640.047926][T22121] gretap1: entered promiscuous mode [ 640.056847][T22121] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 640.076894][T22121] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 640.095822][T22121] bond2: left promiscuous mode [ 640.100738][T22121] gretap1: left promiscuous mode [ 640.295775][T22122] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 640.308523][T22122] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 640.421128][T22115] bond11: (slave gretap2): making interface the new active one [ 640.452925][T22115] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 640.546916][T18564] net_ratelimit: 7 callbacks suppressed [ 640.546936][T18564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.561312][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.843105][T22146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3984'. [ 640.909144][T22146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3984'. [ 641.041959][T22139] team_slave_0: entered promiscuous mode [ 641.055545][T22139] team_slave_0: entered allmulticast mode [ 641.908022][T22192] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3994'. [ 641.984861][T18470] Bluetooth: hci1: command 0x0406 tx timeout [ 642.155794][T22203] netlink: 'syz.2.3996': attribute type 21 has an invalid length. [ 642.167416][T22203] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3996'. [ 642.179149][T22203] netlink: 'syz.2.3996': attribute type 1 has an invalid length. [ 642.463614][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 642.616640][T22221] ip6t_srh: unknown srh invflags BA61 [ 642.638989][T22221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4002'. [ 642.658021][T22221] netlink: 'syz.2.4002': attribute type 1 has an invalid length. [ 642.977790][T22226] vti0: entered promiscuous mode [ 642.983064][T22226] vti0: entered allmulticast mode [ 643.745228][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.754091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.839129][T22247] bond12: entered allmulticast mode [ 643.895979][T22257] netlink: 'syz.4.4012': attribute type 1 has an invalid length. [ 644.118794][T22262] __nla_validate_parse: 1 callbacks suppressed [ 644.118816][T22262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4012'. [ 644.193715][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 644.201872][ C1] lec:lec_tx_timeout: lec0 [ 644.206617][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 644.220310][T22264] xt_hashlimit: size too large, truncated to 1048576 [ 644.323169][T22257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 644.417832][T22257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 644.798055][T22259] bond1: (slave veth5): Enslaving as an active interface with a down link [ 644.868719][T22262] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 645.068998][T22284] macvlan0: entered allmulticast mode [ 645.074769][T22284] veth1_vlan: entered allmulticast mode [ 645.081884][T22284] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 645.099890][T22283] netlink: 'syz.4.4017': attribute type 1 has an invalid length. [ 645.192751][T22290] netlink: 'syz.2.4021': attribute type 10 has an invalid length. [ 645.223151][T22283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 645.289508][T22290] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.355563][T22290] bond0: (slave team0): Enslaving as an active interface with an up link [ 645.664269][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.673127][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.906303][T22302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.314935][T22300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.355135][T22300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.674516][T22300] virt_wifi0: left promiscuous mode [ 646.787224][T18564] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.805849][T18564] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.891021][T18564] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.920158][T18564] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.104081][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 647.327625][T22342] vlan2: entered allmulticast mode [ 647.356476][T22342] bond0: entered allmulticast mode [ 647.365402][T22332] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4027'. [ 647.377908][T22342] bond_slave_0: entered allmulticast mode [ 647.386900][T22342] bond_slave_1: entered allmulticast mode [ 647.447700][T22332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.458222][T22332] bond_slave_0: left allmulticast mode [ 647.467344][T22332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.478499][T22332] bond_slave_1: left allmulticast mode [ 647.486047][T22332] bond0 (unregistering): Released all slaves [ 647.573093][T22345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4030'. [ 647.584911][ T7913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.608390][T22345] tipc: Invalid UDP bearer configuration [ 647.608453][T22345] tipc: Enabling of bearer rejected, failed to enable media [ 647.656618][T22350] netlink: 'syz.2.4031': attribute type 1 has an invalid length. [ 648.308279][T22363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4036'. [ 648.417159][T22369] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4038'. [ 648.658056][T22387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4043'. [ 648.674611][T22387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.730489][T22387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.972390][T22410] netlink: 'syz.2.4046': attribute type 64 has an invalid length. [ 649.163282][T22414] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 649.213628][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 649.221758][ C1] lec:lec_tx_timeout: lec0 [ 649.226777][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 649.291885][T22428] netlink: 'syz.2.4050': attribute type 1 has an invalid length. [ 649.332258][T22428] netlink: 'syz.2.4050': attribute type 4 has an invalid length. [ 649.347464][T22428] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4050'. [ 649.382595][T22428] netlink: 'syz.2.4050': attribute type 1 has an invalid length. [ 649.391800][T22428] netlink: 'syz.2.4050': attribute type 4 has an invalid length. [ 649.400620][T22428] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4050'. [ 649.417832][T22419] syzkaller0: entered promiscuous mode [ 649.425234][T22419] syzkaller0: entered allmulticast mode [ 650.784257][ T7932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.792687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.436055][T18564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.444799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.460482][T22481] macvlan0: entered promiscuous mode [ 653.481446][T22481] gretap0: entered promiscuous mode [ 653.512814][T22481] gretap0: left promiscuous mode [ 653.614207][T22480] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4063'. [ 653.735745][T22495] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4067'. [ 653.755431][T22496] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4066'. [ 654.233809][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 654.241903][ C1] lec:lec_tx_timeout: lec0 [ 654.246743][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 654.697256][T22521] IPVS: set_ctl: invalid protocol: 46 172.30.0.3:20002 [ 655.021350][T22508] sctp: [Deprecated]: syz.0.4071 (pid 22508) Use of int in max_burst socket option. [ 655.021350][T22508] Use struct sctp_assoc_value instead [ 656.032794][T22566] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4083'. [ 656.045960][T22566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4083'. [ 656.902333][T22594] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 656.926931][T22600] sctp: [Deprecated]: syz.4.4093 (pid 22600) Use of int in max_burst socket option. [ 656.926931][T22600] Use struct sctp_assoc_value instead [ 657.158465][T22616] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4098'. [ 657.185347][ T7930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.193620][ T7930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.202875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.291163][T22624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4099'. [ 657.344465][T18470] Bluetooth: hci0: command 0x0406 tx timeout [ 657.405831][T22622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4097'. [ 657.472639][T22622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4097'. [ 657.577711][T22622] gtp1: entered promiscuous mode [ 657.587016][T22622] gtp1: entered allmulticast mode [ 657.687279][T22638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4103'. [ 657.853304][ T7940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.862120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.015053][T22645] netlink: 844 bytes leftover after parsing attributes in process `syz.2.4105'. [ 658.034996][T22646] netlink: 844 bytes leftover after parsing attributes in process `syz.2.4105'. [ 658.038957][T22650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4107'. [ 658.093218][T22653] xt_TPROXY: Can be used only with -p tcp or -p udp [ 658.243190][T22661] netlink: 'syz.2.4110': attribute type 12 has an invalid length. [ 658.348043][T22667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.753352][T22681] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.761053][T22681] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.796917][T22681] batman_adv: batadv0: Interface deactivated: dummy0 [ 658.936514][T22681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.959509][T22681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.122242][T22691] lo: Caught tx_queue_len zero misconfig [ 659.133266][T18564] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.144915][T18564] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.160753][T18564] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.170286][T18564] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.425875][ T7940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.463173][T22718] netlink: 'syz.2.4122': attribute type 4 has an invalid length. [ 659.736268][T22725] bond3: entered allmulticast mode [ 659.789911][T22725] 8021q: adding VLAN 0 to HW filter on device bond3 [ 659.845016][T22706] sctp: [Deprecated]: syz.2.4122 (pid 22706) Use of int in maxseg socket option. [ 659.845016][T22706] Use struct sctp_assoc_value instead [ 660.063474][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 660.071792][ C1] lec:lec_tx_timeout: lec0 [ 660.077066][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 660.385768][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.395555][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.404952][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.445737][T22745] syzkaller0: entered promiscuous mode [ 660.462153][T22745] syzkaller0: entered allmulticast mode [ 660.538954][T22770] Cannot find add_set index 1 as target [ 660.544996][T22771] Cannot find add_set index 1 as target [ 662.553648][ T7940] net_ratelimit: 3 callbacks suppressed [ 662.553670][ T7940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.957425][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.966140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.589100][ T7940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.948765][T22783] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 663.951534][T22787] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 664.188682][T22801] __nla_validate_parse: 13 callbacks suppressed [ 664.188708][T22801] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4139'. [ 664.224441][ T7930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.340884][T22811] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 664.578151][T22818] pim6reg: entered allmulticast mode [ 664.624788][ T7932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.790702][T22838] netlink: 'syz.4.4147': attribute type 1 has an invalid length. [ 664.808550][T22840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4148'. [ 664.845539][T22840] macvtap1: entered promiscuous mode [ 664.857623][T22840] erspan0: entered promiscuous mode [ 664.865248][ T7932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.871891][T22840] macvtap1: entered allmulticast mode [ 664.875667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.890093][T22844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4148'. [ 664.907346][T22840] erspan0: entered allmulticast mode [ 664.936578][T22848] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4148'. [ 665.059452][T22853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.072824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.083429][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 665.091603][ C1] lec:lec_tx_timeout: lec0 [ 665.096260][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 665.217373][T22843] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 665.258885][T22843] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 665.271639][T22838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4147'. [ 665.297935][T22844] erspan0: left allmulticast mode [ 665.303038][T22844] erspan0: left promiscuous mode [ 665.370050][T22838] bond4: (slave bridge4): Enslaving as an active interface with a down link [ 665.417738][T22846] ip6gretap2: entered promiscuous mode [ 665.428504][T22846] ip6gretap2: entered allmulticast mode [ 665.457417][T22846] bond4: (slave ip6gretap2): making interface the new active one [ 665.478080][T22846] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 665.715953][T22871] lo: Caught tx_queue_len zero misconfig [ 666.466374][T22894] Bluetooth: MGMT ver 1.23 [ 666.625436][T22899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4164'. [ 666.681420][T22907] SET target dimension over the limit! [ 666.698240][T22908] tipc: Failed to remove unknown binding: 66,0,0/0:3181450468/3181450469 [ 666.737200][T22908] tipc: Failed to remove unknown binding: 66,0,0/0:3181450468/3181450469 [ 667.207815][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4177'. [ 667.211690][T22934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4175'. [ 667.749224][ T7940] net_ratelimit: 12 callbacks suppressed [ 667.749262][ T7940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.962434][T22969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4184'. [ 668.477627][T23000] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4189'. [ 668.705055][T18567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.716877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.786384][ T7932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.227308][T23031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.625594][T23054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4200'. [ 669.690011][T23056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4202'. [ 669.690267][T23059] xt_nfacct: accounting object `syz0' does not exist [ 669.700854][T23045] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.713940][T23045] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.011589][T23075] netlink: 'syz.0.4205': attribute type 15 has an invalid length. [ 670.012731][T23045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.029219][T23075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4205'. [ 670.063241][T23045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.103741][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 670.111894][ C1] lec:lec_tx_timeout: lec0 [ 670.162421][T23045] veth1_vlan: left allmulticast mode [ 670.330329][T23051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4201'. [ 670.366922][T18566] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.399780][T18566] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.446297][T18566] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 670.475490][T18566] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.487712][T23088] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4206'. [ 670.516501][T18566] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.562299][T18566] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 670.582187][T18566] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.619598][T18566] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.635192][T18567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.649162][ T7913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.697342][T18566] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 670.731878][T18566] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.758049][T18566] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.777291][T18566] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 670.807446][T23110] block nbd0: server does not support multiple connections per device. [ 670.824341][T23110] block nbd0: shutting down sockets [ 670.824864][T23107] ip6gretap3: entered promiscuous mode [ 670.836022][T23107] ip6gretap3: entered allmulticast mode [ 670.874936][T23090] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 670.904972][T23121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4211'. [ 671.106548][T23127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4212'. [ 671.164618][T23127] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4212'. [ 671.201602][T23133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4215'. [ 671.348582][T23135] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4216'. [ 671.408878][T23142] syzkaller0: entered promiscuous mode [ 671.422414][T23142] syzkaller0: entered allmulticast mode [ 671.761787][T23159] vlan2 (unregistering): left allmulticast mode [ 671.773365][T23159] dummy0 (unregistering): left allmulticast mode [ 671.782109][T23159] vlan2 (unregistering): left promiscuous mode [ 671.792066][T23159] dummy0 (unregistering): left promiscuous mode [ 671.799568][T23159] bridge0: port 3(vlan2) entered disabled state [ 671.904612][ T7932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.915170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.937739][T18568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.843081][T23212] gretap2: entered allmulticast mode [ 672.971741][T23221] netlink: 'syz.4.4239': attribute type 1 has an invalid length. [ 673.014338][T23221] netlink: 'syz.4.4239': attribute type 2 has an invalid length. [ 673.059669][T23221] netlink: 'syz.4.4239': attribute type 1 has an invalid length. [ 673.142096][T23228] bond5 (unregistering): Released all slaves [ 673.758047][T23262] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 673.785880][T23262] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 673.821023][T23268] net_ratelimit: 1 callbacks suppressed [ 673.821044][T23268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 673.828203][T23273] netlink: 'syz.1.4253': attribute type 1 has an invalid length. [ 673.869170][T23264] can: request_module (can-proto-0) failed. [ 673.870047][T23272] netlink: 'syz.0.4251': attribute type 12 has an invalid length. [ 674.119681][ C1] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 72 [ 674.468962][T18568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.477897][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.881870][T23331] IPVS: length: 132 != 8 [ 674.912997][T23333] pimreg: entered allmulticast mode [ 675.033352][T23338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.131211][T23349] __nla_validate_parse: 30 callbacks suppressed [ 675.131234][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'. [ 675.162641][T23345] netlink: 'syz.4.4271': attribute type 13 has an invalid length. [ 675.170082][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'. [ 675.174849][T23345] netlink: 'syz.4.4271': attribute type 17 has an invalid length. [ 675.196968][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'. [ 675.210693][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'. [ 675.229908][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'. [ 675.239308][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'. [ 675.248421][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'. [ 675.258464][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'. [ 675.267979][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'. [ 675.277260][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'. [ 675.572646][T23345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 675.831200][T23377] netlink: 'syz.2.4283': attribute type 5 has an invalid length. [ 676.025648][T23389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.287977][T23409] netlink: 'syz.0.4293': attribute type 14 has an invalid length. [ 676.299773][T23409] netlink: 'syz.0.4293': attribute type 11 has an invalid length. [ 676.390787][T18567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.049417][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.058162][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.219976][T23453] netlink: 'syz.3.4306': attribute type 1 has an invalid length. [ 677.229415][T23447] geneve2: entered promiscuous mode [ 677.316524][T23453] 8021q: adding VLAN 0 to HW filter on device bond13 [ 677.337769][T23458] bond13: entered allmulticast mode [ 677.479762][T23453] bond13: (slave ip6gretap2): making interface the new active one [ 677.504971][T23453] ip6gretap2: entered allmulticast mode [ 677.514413][T23453] bond13: (slave ip6gretap2): Enslaving as an active interface with an up link [ 677.612304][T23453] syzkaller0: entered promiscuous mode [ 677.631562][T23453] syzkaller0: entered allmulticast mode [ 677.743953][T23475] tipc: Started in network mode [ 677.749053][T23475] tipc: Node identity ac14140f, cluster identity 4711 [ 677.756638][T23475] tipc: New replicast peer: 255.255.255.255 [ 677.775072][T23475] tipc: Enabled bearer , priority 26 [ 677.825989][T18470] Bluetooth: hci3: command 0x0405 tx timeout [ 678.076754][T23487] vlan0: entered promiscuous mode [ 678.438146][T23507] netlink: 'syz.2.4319': attribute type 2 has an invalid length. [ 678.547137][T23514] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 678.806745][T23528] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 678.821798][T23499] bridge0: port 3(syz_tun) entered disabled state [ 678.855503][T23499] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.863026][T23499] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.209525][T23499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.709198][T23502] bond0: (slave team0): Releasing backup interface [ 679.734437][T23502] bridge_slave_0: left allmulticast mode [ 679.752605][T23502] bridge_slave_0: left promiscuous mode [ 679.764762][T23502] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.785103][T23502] bridge_slave_1: left allmulticast mode [ 679.800073][T23502] bridge_slave_1: left promiscuous mode [ 679.813832][T23502] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.846053][T23502] bond0: (slave bond_slave_0): Releasing backup interface [ 679.863217][T23502] bond0: (slave bond_slave_1): Releasing backup interface [ 679.887566][T23502] team0: Port device team_slave_0 removed [ 679.897865][T23502] team0: Port device team_slave_1 removed [ 679.905668][T23502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.915506][T23502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.926433][T23502] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 679.978763][T23526] ÿ: renamed from bond_slave_0 [ 679.987375][T23534] netlink: 'syz.4.4323': attribute type 9 has an invalid length. [ 679.999897][ T5921] tipc: Node number set to 2886997007 [ 680.025893][ T6676] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.047280][ T6676] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.069174][ T6676] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.086737][ T6676] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.141372][ T6676] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.153659][ T6676] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.170891][ T6676] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.199253][ T6676] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.226583][T23536] __nla_validate_parse: 86 callbacks suppressed [ 680.226605][T23536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4324'. [ 680.263927][T23536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4324'. [ 680.300655][ T29] audit: type=1804 audit(1777138022.534:10): pid=23544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4327" name="/newroot/216/memory.events" dev="tmpfs" ino=1128 res=1 errno=0 [ 680.353068][ T29] audit: type=1800 audit(1777138022.534:11): pid=23544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4327" name="memory.events" dev="tmpfs" ino=1128 res=0 errno=0 [ 680.361451][T23547] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 680.560560][T23556] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4332'. [ 680.735151][T23565] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4334'. [ 680.779828][T23565] unsupported nlmsg_type 40 [ 680.799936][T23567] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4334'. [ 680.842226][T23570] tipc: Enabled bearer , priority 0 [ 680.872600][T23575] geneve3: entered promiscuous mode [ 680.881296][ T6676] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.890325][ T6676] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.904877][ T6676] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.921761][ T6676] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.934072][T23572] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4336'. [ 681.118410][T23584] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4340'. [ 681.176098][T23589] netlink: 'syz.2.4341': attribute type 39 has an invalid length. [ 681.197713][T23584] scsi_nl_rcv_msg: discarding partial skb [ 681.265615][T23592] IPv6: Can't replace route, no match found [ 681.507171][T23604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4346'. [ 681.517377][T23604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4346'. [ 681.722317][T23613] IPVS: set_ctl: invalid protocol: 41 100.1.1.0:20004 [ 681.988281][T23636] netlink: 'syz.1.4355': attribute type 11 has an invalid length. [ 682.001351][T23636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4355'. [ 682.018886][T23636] netlink: 'syz.1.4355': attribute type 11 has an invalid length. [ 682.866110][T23683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.845403][T23621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 685.416734][T23702] syzkaller1: entered promiscuous mode [ 685.429599][T23702] syzkaller1: entered allmulticast mode [ 685.436344][T23720] __nla_validate_parse: 7 callbacks suppressed [ 685.436363][T23720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4378'. [ 685.465158][T23723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4380'. [ 685.476458][T23725] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4379'. [ 685.477263][T23720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4378'. [ 685.531035][T23728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4380'. [ 685.784927][T23744] netlink: 'syz.2.4384': attribute type 1 has an invalid length. [ 685.809737][T23744] 8021q: adding VLAN 0 to HW filter on device bond6 [ 685.830067][T23744] bond6: (slave gretap1): making interface the new active one [ 685.838685][T23744] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967286. macoff=82 [ 685.851921][T23744] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 685.993066][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 686.001130][ T1314] clip:clip_start_xmit: skb_dst(skb) == NULL [ 686.220001][T23750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4386'. [ 686.231275][T23750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4386'. [ 688.108061][T23701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 688.327031][T23759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4389'. [ 688.356998][T23759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4389'. [ 688.432755][T23765] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.4392'. [ 688.511438][T23759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.522713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.574826][T23759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.583299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.592670][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.613909][T23759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.622385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.659533][T23759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.668807][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.687807][T23759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.710125][T23767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.770199][T23767] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.438740][T23807] ipt_ECN: cannot use operation on non-tcp rule [ 689.517852][T23804] syzkaller1: entered promiscuous mode [ 689.540059][T23804] syzkaller1: entered allmulticast mode [ 689.657111][T23813] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 689.681799][T23813] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 689.930906][T23777] netlink: 'syz.3.4394': attribute type 1 has an invalid length. [ 690.031205][T23821] Unsupported ieee802154 address type: 0 [ 690.075445][T23817] bond14: entered promiscuous mode [ 690.087115][T23817] bond14: entered allmulticast mode [ 690.092960][T23817] 8021q: adding VLAN 0 to HW filter on device bond14 [ 690.133040][T23777] bridge4: entered promiscuous mode [ 690.149363][T23777] bridge4: entered allmulticast mode [ 690.165128][T23777] bond14: (slave bridge4): Enslaving as a backup interface with an up link [ 690.352097][T23817] bridge5: entered promiscuous mode [ 690.424777][T23817] bridge5: entered allmulticast mode [ 690.439073][T23817] bond14: (slave bridge5): Enslaving as a backup interface with a down link [ 690.712515][T23833] dummy0: entered promiscuous mode [ 690.795237][T23835] __nla_validate_parse: 20 callbacks suppressed [ 690.795261][T23835] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4408'. [ 690.988024][T23832] dummy0: left promiscuous mode [ 691.023456][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 691.031691][ C1] lec:lec_tx_timeout: lec0 [ 691.349624][T23844] batadv_slave_0: Caught tx_queue_len zero misconfig [ 692.030009][T23880] block nbd2: not configured, cannot reconfigure [ 692.188531][T23870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.552978][T23900] netlink: 'syz.4.4423': attribute type 3 has an invalid length. [ 692.617187][T23861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4415'. [ 692.668540][T23901] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.4415'. [ 693.035419][T23925] xt_limit: Overflow, try lower: 268435456/134217728 [ 693.057361][T23925] netlink: 'syz.2.4432': attribute type 10 has an invalid length. [ 693.089413][T23925] veth0_vlan: left promiscuous mode [ 693.107837][T23925] veth0_vlan: entered promiscuous mode [ 693.148086][T23925] team0: Device veth0_vlan failed to register rx_handler [ 693.156965][T23922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4431'. [ 693.222851][T23928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4433'. [ 693.278406][ T5855] block nbd0: Receive control failed (result -1) [ 693.397769][T23931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4433'. [ 693.635702][T18567] net_ratelimit: 1757 callbacks suppressed [ 693.635726][T18567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.653093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.019843][T23940] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4436'. [ 694.459148][T23957] netlink: 'syz.4.4439': attribute type 1 has an invalid length. [ 694.482142][T23957] netlink: 'syz.4.4439': attribute type 2 has an invalid length. [ 694.507611][T23957] netlink: 'syz.4.4439': attribute type 1 has an invalid length. [ 694.527465][T23957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4439'. [ 694.565281][T23962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4444'. [ 694.660880][T23966] team_slave_1: Caught tx_queue_len zero misconfig [ 694.819461][T18568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.828104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.886624][T23966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4446'. [ 695.618875][T15785] lec:lec_start_xmit: lec0:No lecd attached [ 695.884219][T24026] __nla_validate_parse: 3 callbacks suppressed [ 695.884240][T24026] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4463'. [ 695.915389][T24026] netlink: 'syz.1.4463': attribute type 1 has an invalid length. [ 695.923582][T24026] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4463'. [ 695.984972][T18567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.993768][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.081676][T24026] bond0 (unregistering): Released all slaves [ 696.098502][T24039] netlink: 'syz.2.4466': attribute type 1 has an invalid length. [ 696.198182][T24054] netlink: 'syz.3.4469': attribute type 1 has an invalid length. [ 696.241876][T24039] 8021q: adding VLAN 0 to HW filter on device bond7 [ 696.347188][T24061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4470'. [ 696.377920][T24063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4472'. [ 696.389334][T24063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4472'. [ 696.566847][T24072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4473'. [ 696.868388][T24087] batman_adv: batadv0: Adding interface: vlan2 [ 696.899995][T24087] batman_adv: batadv0: The MTU of interface vlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.951570][T24095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.963285][T24087] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 697.114573][T18568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.123724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.300934][T24111] netlink: 'syz.4.4486': attribute type 21 has an invalid length. [ 697.329015][T24111] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4486'. [ 697.340656][T24109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4485'. [ 697.351314][T24109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4485'. [ 697.372311][T24115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4487'. [ 697.397950][T24115] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 697.467677][T24119] netlink: 'syz.1.4488': attribute type 1 has an invalid length. [ 697.609144][T24124] can: request_module (can-proto-0) failed. [ 698.034770][T24119] bond0: entered promiscuous mode [ 698.056052][T24119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.095798][T24139] netlink: 'syz.2.4492': attribute type 4 has an invalid length. [ 698.149057][T24141] netlink: 'syz.2.4492': attribute type 4 has an invalid length. [ 698.914879][ T5921] net_ratelimit: 1 callbacks suppressed [ 698.914901][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.365646][T18567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.374787][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.954417][T24197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.965039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.063732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.074636][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.483766][ T6676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.492367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.023796][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5400 ms [ 701.032024][ C1] lec:lec_tx_timeout: lec0 [ 701.153310][T24232] __nla_validate_parse: 7 callbacks suppressed [ 701.153331][T24232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4515'. [ 701.161439][T24227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4514'. [ 701.182124][T24227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4514'. [ 701.194509][T24231] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4516'. [ 701.227486][T24238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4515'. [ 701.396996][T24244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 701.398036][T24245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4518'. [ 701.945547][T24270] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4523'. [ 702.001409][T24270] netlink: 77 bytes leftover after parsing attributes in process `syz.4.4523'. [ 702.006861][T24278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4525'. [ 702.049168][T23401] udevd[23401]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 702.117174][T24270] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4523'. [ 702.639576][T24302] netlink: 'syz.4.4531': attribute type 1 has an invalid length. [ 702.873288][T24315] tipc: Enabling of bearer rejected, already enabled [ 702.975033][T24315] tipc: Resetting bearer [ 703.137397][T24326] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20004 [ 703.367707][T24330] syzkaller0: entered promiscuous mode [ 703.374602][T24330] syzkaller0: entered allmulticast mode [ 705.002925][T18567] net_ratelimit: 7 callbacks suppressed [ 705.002943][T18567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.017825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.173780][T18567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.182436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.345188][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.353747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.607740][T24348] vlan2: entered allmulticast mode [ 707.613064][T24348] bridge_slave_0: entered allmulticast mode [ 707.620665][T24348] batman_adv: batadv0: Adding interface: vlan2 [ 707.628327][T24348] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.654563][T24348] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 707.899368][T24399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.910837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.112285][T24407] wg1: entered allmulticast mode [ 708.355989][T24413] syzkaller0: entered promiscuous mode [ 708.380213][T24413] __nla_validate_parse: 11 callbacks suppressed [ 708.380237][T24413] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4563'. [ 708.484353][T18567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.492773][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.627504][T24422] netlink: 'syz.3.4567': attribute type 8 has an invalid length. [ 708.654343][T24422] sch_fq: defrate 0 ignored. [ 708.701238][T24430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4569'. [ 708.818519][T24436] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4570'. [ 709.448505][T24472] ipt_rpfilter: unknown options [ 709.856104][T24489] syzkaller0: entered promiscuous mode [ 709.868379][T24489] syzkaller0: entered allmulticast mode [ 709.992154][T24493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4589'. [ 710.028299][T24493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4589'. [ 710.052231][T24493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4589'. [ 710.142297][T24493] netlink: 'syz.4.4589': attribute type 10 has an invalid length. [ 710.172978][T24493] team0: Port device veth1 added [ 710.362161][T24502] netlink: 'syz.2.4591': attribute type 13 has an invalid length. [ 710.408616][T24502] netlink: 'syz.2.4591': attribute type 17 has an invalid length. [ 710.466494][T24506] netlink: 'syz.4.4594': attribute type 6 has an invalid length. [ 710.735419][T24515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4595'. [ 710.753936][T24515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4595'. [ 710.834168][ T7928] net_ratelimit: 2 callbacks suppressed [ 710.834184][ T7928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.870743][T24502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.880640][T24502] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.890164][T24502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 711.142803][T24521] netlink: 'syz.2.4596': attribute type 5 has an invalid length. [ 711.168385][T24521] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.4596'. [ 711.303711][ T7928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.332198][T24530] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4599'. [ 711.372755][T24526] xt_hashlimit: size too large, truncated to 1048576 [ 711.478941][T24535] xt_hashlimit: size too large, truncated to 1048576 [ 711.526712][T24535] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 712.291221][T24560] openvswitch: netlink: Message has 4 unknown bytes. [ 712.321353][T24560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 712.346718][T24561] vlan0: entered promiscuous mode [ 713.041261][T24587] sctp: [Deprecated]: syz.0.4611 (pid 24587) Use of int in maxseg socket option. [ 713.041261][T24587] Use struct sctp_assoc_value instead [ 713.172475][T24590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.182842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.376635][T24605] FAULT_INJECTION: forcing a failure. [ 713.376635][T24605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.391350][T24599] __nla_validate_parse: 4 callbacks suppressed [ 713.391383][T24599] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4616'. [ 713.408848][T24605] CPU: 0 UID: 0 PID: 24605 Comm: syz.2.4618 Not tainted syzkaller #0 PREEMPT(full) [ 713.408877][T24605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 713.408889][T24605] Call Trace: [ 713.408898][T24605] [ 713.408907][T24605] dump_stack_lvl+0xe8/0x150 [ 713.408947][T24605] should_fail_ex+0x412/0x560 [ 713.408987][T24605] _copy_from_user+0x2d/0xb0 [ 713.409012][T24605] do_sock_getsockopt+0x200/0x7e0 [ 713.409043][T24605] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 713.409084][T24605] ? __fget_files+0x3a0/0x420 [ 713.409104][T24605] ? __fget_files+0x2a/0x420 [ 713.409132][T24605] __x64_sys_getsockopt+0x1a4/0x240 [ 713.409162][T24605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.409185][T24605] do_syscall_64+0x15f/0xf80 [ 713.409218][T24605] ? trace_irq_disable+0x3b/0x140 [ 713.409245][T24605] ? clear_bhb_loop+0x40/0x90 [ 713.409270][T24605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.409289][T24605] RIP: 0033:0x7f6ffb39cdd9 [ 713.409309][T24605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.409325][T24605] RSP: 002b:00007f6ffc2e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 713.409347][T24605] RAX: ffffffffffffffda RBX: 00007f6ffb615fa0 RCX: 00007f6ffb39cdd9 [ 713.409360][T24605] RDX: 000000000000003f RSI: 0000000000000001 RDI: 0000000000000003 [ 713.409380][T24605] RBP: 00007f6ffc2e6090 R08: 0000200000000040 R09: 0000000000000000 [ 713.409392][T24605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.409403][T24605] R13: 00007f6ffb616038 R14: 00007f6ffb615fa0 R15: 00007ffebb1b04c8 [ 713.409436][T24605] [ 713.474055][T24599] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4616'. [ 713.628025][T24599] netlink: 'syz.1.4616': attribute type 5 has an invalid length. [ 713.674011][T24599] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4616'. [ 713.900071][T24625] netlink: 'syz.3.4624': attribute type 5 has an invalid length. [ 713.920494][T24624] netlink: 'syz.3.4624': attribute type 5 has an invalid length. [ 713.923206][T24618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4621'. [ 713.930997][T24624] team0: entered allmulticast mode [ 713.944796][T24624] team_slave_0: entered allmulticast mode [ 713.952139][T24624] team_slave_1: entered allmulticast mode [ 713.969172][T24624] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.990914][T24618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4621'. [ 714.054972][T24625] netlink: 'syz.3.4624': attribute type 44 has an invalid length. [ 714.094351][T24625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4624'. [ 714.314565][T24642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4626'. [ 714.526890][T24655] netlink: 'syz.4.4633': attribute type 1 has an invalid length. [ 714.538793][T24656] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.4632'. [ 714.549388][T24652] 8021q: VLANs not supported on ip6_vti0 [ 714.617023][T24659] netlink: 'syz.3.4634': attribute type 13 has an invalid length. [ 714.691404][T24663] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 714.765139][T24665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4634'. [ 714.827860][T24671] netlink: 'syz.2.4638': attribute type 1 has an invalid length. [ 715.011013][T24687] netlink: 'syz.1.4642': attribute type 8 has an invalid length. [ 715.190810][T24703] SET target dimension over the limit! [ 715.332287][T24710] netlink: 324 bytes leftover after parsing attributes in process `syz.1.4649'. [ 715.347437][T24710] x_tables: duplicate underflow at hook 1 [ 715.445915][T24713] ip6gre2: entered promiscuous mode [ 715.456917][T24713] ip6gre2: entered allmulticast mode [ 716.440480][T24767] netlink: 'syz.1.4664': attribute type 1 has an invalid length. [ 716.462527][T24767] netlink: 'syz.1.4664': attribute type 1 has an invalid length. [ 716.657843][T24774] netlink: 'syz.3.4667': attribute type 4 has an invalid length. [ 716.747522][T24773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 717.118244][T24804] FAULT_INJECTION: forcing a failure. [ 717.118244][T24804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.160481][T24804] CPU: 0 UID: 0 PID: 24804 Comm: syz.1.4675 Not tainted syzkaller #0 PREEMPT(full) [ 717.160509][T24804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 717.160521][T24804] Call Trace: [ 717.160528][T24804] [ 717.160536][T24804] dump_stack_lvl+0xe8/0x150 [ 717.160573][T24804] should_fail_ex+0x412/0x560 [ 717.160609][T24804] _copy_to_user+0x31/0xb0 [ 717.160634][T24804] simple_read_from_buffer+0xe1/0x170 [ 717.160660][T24804] proc_fail_nth_read+0x1bb/0x230 [ 717.160688][T24804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 717.160715][T24804] ? rw_verify_area+0x2a6/0x4d0 [ 717.160740][T24804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 717.160763][T24804] vfs_read+0x20c/0xa70 [ 717.160792][T24804] ? __pfx___mutex_lock+0x10/0x10 [ 717.160821][T24804] ? __pfx_vfs_read+0x10/0x10 [ 717.160846][T24804] ? __fget_files+0x2a/0x420 [ 717.160870][T24804] ? __fget_files+0x3a0/0x420 [ 717.160888][T24804] ? __fget_files+0x2a/0x420 [ 717.160918][T24804] ksys_read+0x150/0x270 [ 717.160944][T24804] ? __pfx_ksys_read+0x10/0x10 [ 717.160964][T24804] ? fput+0xa0/0xd0 [ 717.160991][T24804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.161011][T24804] do_syscall_64+0x15f/0xf80 [ 717.161036][T24804] ? trace_irq_disable+0x3b/0x140 [ 717.161061][T24804] ? clear_bhb_loop+0x40/0x90 [ 717.161086][T24804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.161105][T24804] RIP: 0033:0x7fc78475d60e [ 717.161124][T24804] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 717.161141][T24804] RSP: 002b:00007fc78563ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 717.161163][T24804] RAX: ffffffffffffffda RBX: 00007fc7856406c0 RCX: 00007fc78475d60e [ 717.161177][T24804] RDX: 000000000000000f RSI: 00007fc7856400a0 RDI: 0000000000000004 [ 717.161189][T24804] RBP: 00007fc785640090 R08: 0000000000000000 R09: 0000000000000000 [ 717.161200][T24804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.161211][T24804] R13: 00007fc784a16038 R14: 00007fc784a15fa0 R15: 00007ffd5e7c6e88 [ 717.161243][T24804] [ 717.435529][T24812] atomic_op ffff88807daa3198 conn xmit_atomic 0000000000000000 [ 717.459494][T24809] ip6tnl0: Caught tx_queue_len zero misconfig [ 717.733184][T24817] bond3: Unable to set down delay as MII monitoring is disabled [ 717.780582][T24817] bond3 (unregistering): Released all slaves [ 717.870973][T24829] pim6reg1: entered promiscuous mode [ 717.881543][T24829] pim6reg1: entered allmulticast mode [ 718.109706][T24838] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 718.117282][T24842] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 718.195132][T24838] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 718.709199][T24863] 8021q: adding VLAN 0 to HW filter on device bond3 [ 718.732086][T24866] __nla_validate_parse: 13 callbacks suppressed [ 718.732106][T24866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4688'. [ 718.739450][T24863] team0: Port device bond3 added [ 719.659209][T24911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4704'. [ 719.893284][T24916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4705'. [ 719.929247][T24885] smbdirect: ib_dev[syz1] renamed to [syz2] [ 720.256893][T24927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4709'. [ 720.322692][T24927] tipc: New replicast peer: 255.255.255.255 [ 720.337698][T24927] tipc: Enabled bearer , priority 26 [ 720.421271][T24934] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4712'. [ 720.760471][T24947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.941369][T24953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4717'. [ 720.981804][T24953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4717'. [ 720.982236][T24949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.012089][T24956] xt_CT: No such helper "snmp" [ 721.015236][T24953] netlink: 'syz.3.4717': attribute type 5 has an invalid length. [ 721.032699][T24957] xt_CT: No such helper "snmp" [ 721.107884][T24953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4717'. [ 721.139390][T24953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4717'. [ 721.142779][T24949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.159189][T24953] netlink: 'syz.3.4717': attribute type 5 has an invalid length. [ 721.198058][T24949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.208958][T18564] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.220848][T18564] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.266669][T24962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4719'. [ 721.308793][T24933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.338044][T24933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.355647][T24933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.368390][T18564] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.380140][T24933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.389739][T18564] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.400036][T24961] delete_channel: no stack [ 721.414014][T24938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.429709][T24938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.450335][T24938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.472243][ T7928] tipc: Node number set to 3283929314 [ 721.755269][T24978] netlink: 'syz.4.4724': attribute type 33 has an invalid length. [ 721.812906][T24982] netlink: 'syz.4.4724': attribute type 33 has an invalid length. [ 721.893009][T24976] hsr_slave_1 (unregistering): left promiscuous mode [ 722.085744][T24995] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.269204][T24995] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.367422][T25006] netlink: 'syz.1.4731': attribute type 1 has an invalid length. [ 722.408728][T24995] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.561506][T24995] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.564130][T25010] netlink: 'syz.2.4730': attribute type 21 has an invalid length. [ 722.603957][T25010] IPv6: NLM_F_CREATE should be specified when creating new route [ 722.622175][T25010] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 722.629532][T25010] IPv6: NLM_F_CREATE should be set when creating new route [ 722.636885][T25010] IPv6: NLM_F_CREATE should be set when creating new route [ 722.644186][T25010] IPv6: NLM_F_CREATE should be set when creating new route [ 722.778949][T25012] netlink: 'syz.2.4730': attribute type 21 has an invalid length. [ 722.811480][T25012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 722.979220][T18566] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.033687][T18566] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.071224][T18564] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.149167][T18568] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.240304][T25032] netlink: 'syz.0.4737': attribute type 1 has an invalid length. [ 723.308876][T25032] 8021q: adding VLAN 0 to HW filter on device bond8 [ 723.459006][T25042] netlink: 'syz.3.4741': attribute type 5 has an invalid length. [ 723.607163][ T5855] block nbd2: Receive control failed (result -32) [ 723.765327][T25059] netlink: 'syz.0.4745': attribute type 4 has an invalid length. [ 724.432180][T25086] __nla_validate_parse: 7 callbacks suppressed [ 724.432201][T25086] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4753'. [ 724.643243][T25094] x_tables: duplicate entry at hook 3 [ 724.774816][T25101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4757'. [ 724.947931][T25115] Cannot find add_set index 1 as target [ 728.493676][T25131] net_ratelimit: 178 callbacks suppressed [ 728.493699][T25131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.508336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.658232][T25138] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4767'. [ 728.670992][T25127] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 728.692266][T25127] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 728.705700][T25139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4766'. [ 728.723568][T25127] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 728.765340][T25127] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 729.217185][T25147] sctp: [Deprecated]: syz.4.4769 (pid 25147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 729.217185][T25147] Use struct sctp_sack_info instead [ 729.221964][T25155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4771'. [ 729.244518][T25155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4771'. [ 729.337434][ T35] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.361156][ T35] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.400059][ T35] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.482495][T25161] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4773'. [ 729.495059][T25162] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4773'. [ 729.510865][ T35] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.653341][T25166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.670726][T25176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4778'. [ 729.705289][T25177] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 729.950253][T25185] validate_nla: 2 callbacks suppressed [ 729.950274][T25185] netlink: 'syz.4.4780': attribute type 39 has an invalid length. [ 730.042979][T25191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.076860][T25185] syz_tun (unregistering): left allmulticast mode [ 730.107394][T25185] syz_tun (unregistering): left promiscuous mode [ 730.141602][T25185] bridge0: port 3(syz_tun) entered disabled state [ 730.646461][T25230] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4796'. [ 730.702350][T25235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4799'. [ 731.404839][T25271] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 731.768444][T25294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4816'. [ 731.836410][T25297] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4814'. [ 731.969837][T25299] bond15: option lacp_active: invalid value (8) [ 731.979955][T25299] bond15 (unregistering): Released all slaves [ 732.588268][T25319] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4822'. [ 732.690364][T25322] netlink: 'syz.0.4823': attribute type 1 has an invalid length. [ 732.780171][T25325] netlink: 'syz.3.4824': attribute type 21 has an invalid length. [ 732.789787][T25322] 8021q: adding VLAN 0 to HW filter on device bond9 [ 732.804821][T25325] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4824'. [ 732.821416][T25327] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 732.839924][T25329] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4824'. [ 732.859501][T25325] netlink: 'syz.3.4824': attribute type 4 has an invalid length. [ 732.867821][T25325] netlink: 'syz.3.4824': attribute type 5 has an invalid length. [ 732.878531][T25322] bond9: entered promiscuous mode [ 732.884320][T25322] bond9: entered allmulticast mode [ 734.028508][T25357] pim6reg: entered allmulticast mode [ 734.101275][T25359] netlink: 'syz.4.4835': attribute type 1 has an invalid length. [ 734.752171][T25395] __nla_validate_parse: 5 callbacks suppressed [ 734.752193][T25395] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4846'. [ 734.777445][T25395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4846'. [ 734.798530][T25395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4846'. [ 735.067337][T25407] netlink: 'syz.3.4848': attribute type 6 has an invalid length. [ 735.182326][T25410] IPVS: set_ctl: invalid protocol: 187 172.20.20.187:20004 [ 735.418586][T25420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.531600][T25428] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4855'. [ 735.819353][T25439] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4859'. [ 735.846462][ T29] audit: type=1804 audit(1777138078.084:12): pid=25442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4860" name="/newroot/360/cgroup.controllers" dev="tmpfs" ino=1853 res=1 errno=0 [ 735.911363][T25440] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4858'. [ 735.921200][T25434] xt_CT: No such helper "syz1" [ 735.939520][ T29] audit: type=1800 audit(1777138078.114:13): pid=25442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4860" name="cgroup.controllers" dev="tmpfs" ino=1853 res=0 errno=0 [ 736.930096][T25464] xt_TCPMSS: Only works on TCP SYN packets [ 736.949879][T25470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4867'. [ 737.633060][T25488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4867'. [ 738.988248][T25498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4874'. [ 739.270960][T25509] netlink: 'syz.4.4877': attribute type 1 has an invalid length. [ 739.341865][T25509] 8021q: adding VLAN 0 to HW filter on device bond7 [ 739.363041][T25511] vlan3: entered allmulticast mode [ 739.369280][T25511] bond7: entered allmulticast mode [ 739.445709][T25517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4880'. [ 739.675743][T25529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 739.843759][ T7925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.901928][T25533] tipc: Resetting bearer [ 740.234239][T25481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 740.541343][T25547] __nla_validate_parse: 2 callbacks suppressed [ 740.541366][T25547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4885'. [ 740.581422][T25547] netlink: 'syz.1.4885': attribute type 26 has an invalid length. [ 740.602763][T25547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4885'. [ 740.783692][ T7925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.007440][T25565] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 741.072501][T25554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.081495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.584953][T25593] tipc: Enabling of bearer rejected, already enabled [ 741.924366][T25611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4904'. [ 741.944215][T25612] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4903'. [ 741.979458][T25612] netlink: 'syz.0.4903': attribute type 10 has an invalid length. [ 741.980959][T25611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4904'. [ 742.003232][T25612] dummy0: left allmulticast mode [ 742.022411][T25612] dummy0: left promiscuous mode [ 742.041406][T25612] bridge0: port 4(dummy0) entered disabled state [ 742.042154][T25617] netlink: 'syz.0.4903': attribute type 10 has an invalid length. [ 742.096844][T25612] team0: Port device dummy0 added [ 742.201624][T25617] team0: Port device dummy0 removed [ 742.253822][T25621] geneve3: entered promiscuous mode [ 742.259485][T25621] geneve3: entered allmulticast mode [ 742.388589][T25628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4907'. [ 742.442461][T25630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4907'. [ 742.496118][T25635] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4907'. [ 742.570357][T25635] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4907'. [ 742.621229][T25628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4907'. [ 742.676692][T25640] veth0_macvtap: Caught tx_queue_len zero misconfig [ 742.908054][T25649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.919660][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.944491][T25649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.035184][T25640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.046917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.080797][T25640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.156402][T25653] bond15: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 743.176214][T25653] bond15 (unregistering): Released all slaves [ 743.224811][T25656] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 743.899083][T25694] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 743.906410][T25694] syzkaller1: linktype set to 825 [ 744.150998][T25705] .70·: renamed from hsr0 [ 744.177553][T25705] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 744.196481][T25705] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 744.202064][T25711] netlink: 'syz.1.4932': attribute type 1 has an invalid length. [ 744.221455][T25705] .70·: entered allmulticast mode [ 744.243251][T25705] hsr_slave_0: entered allmulticast mode [ 744.253209][T25711] netlink: 'syz.1.4932': attribute type 2 has an invalid length. [ 744.273162][T25705] hsr_slave_1: entered allmulticast mode [ 744.282470][T25711] netlink: 'syz.1.4932': attribute type 1 has an invalid length. [ 744.298140][T25711] netlink: 'syz.1.4932': attribute type 3 has an invalid length. [ 744.346395][T25714] xt_hashlimit: size too large, truncated to 1048576 [ 744.671020][T25741] --map-set only usable from mangle table [ 745.203211][T25748] syzkaller0: entered promiscuous mode [ 745.221846][T25748] syzkaller0: entered allmulticast mode [ 745.647749][T25770] __nla_validate_parse: 11 callbacks suppressed [ 745.647771][T25770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4947'. [ 745.664460][T25766] bond0: entered promiscuous mode [ 745.695492][T25766] bond_slave_0: entered promiscuous mode [ 745.696481][T25773] netlink: 'syz.0.4948': attribute type 1 has an invalid length. [ 745.711828][T25773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4948'. [ 745.717721][T25766] bond_slave_1: entered promiscuous mode [ 745.725646][T25773] netlink: 'syz.0.4948': attribute type 1 has an invalid length. [ 745.748252][T25766] batadv0: entered promiscuous mode [ 745.769943][T25766] debugfs: 'hsr0' already exists in 'hsr' [ 745.795158][T25766] Cannot create hsr debugfs directory [ 745.811827][T25766] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 745.861127][T25786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4951'. [ 745.871966][T25786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4951'. [ 745.874745][T25766] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 745.896539][T25787] netlink: 268 bytes leftover after parsing attributes in process `syz.1.4949'. [ 745.917484][T25787] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4949'. [ 745.920701][T25766] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 745.937018][T25766] bond0: left promiscuous mode [ 745.941876][T25766] bond_slave_0: left promiscuous mode [ 745.948448][T25766] bond_slave_1: left promiscuous mode [ 745.958126][T25787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4949'. [ 745.969984][T25766] batadv0: left promiscuous mode [ 746.125240][T25791] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4952'. [ 746.365621][ T6665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.393947][ T6665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.417965][T25812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4959'. [ 746.455063][T25812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4959'. [ 746.837701][T25824] bridge0: left promiscuous mode [ 746.870449][T25824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.880811][T25824] team0: left allmulticast mode [ 746.887456][T25824] team_slave_0: left allmulticast mode [ 746.893224][T25824] team_slave_1: left allmulticast mode [ 746.901166][T25824] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.917395][T25824] batman_adv: batadv0: Interface activated: dummy0 [ 746.926671][T25824] net_ratelimit: 7 callbacks suppressed [ 746.926691][T25824] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 746.961899][T25831] netlink: 'syz.1.4964': attribute type 27 has an invalid length. [ 747.021301][T25831] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.045290][T25831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 747.437085][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 747.445198][ T1314] clip:clip_start_xmit: skb_dst(skb) == NULL [ 747.530921][T25854] netlink: 'syz.0.4972': attribute type 1 has an invalid length. [ 747.681152][T25854] bond11: entered promiscuous mode [ 747.690645][T25854] 8021q: adding VLAN 0 to HW filter on device bond11 [ 747.712482][T25856] syzkaller0: entered promiscuous mode [ 747.733937][T25856] syzkaller0: entered allmulticast mode [ 747.918092][T25856] tc_dump_action: action bad kind [ 748.525256][T25900] tipc: Enabling of bearer rejected, failed to enable media [ 748.535092][T25898] netlink: 'syz.2.4982': attribute type 10 has an invalid length. [ 748.558214][ T6665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.569242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.578780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.587506][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.591643][T25908] sctp: [Deprecated]: syz.3.4985 (pid 25908) Use of struct sctp_assoc_value in delayed_ack socket option. [ 748.591643][T25908] Use struct sctp_sack_info instead [ 748.599905][T25898] team0: Device wg1 is of different type [ 748.639118][T25909] sctp: [Deprecated]: syz.3.4985 (pid 25909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 748.639118][T25909] Use struct sctp_sack_info instead [ 749.255407][T25939] bond0: entered promiscuous mode [ 749.262427][T25939] batadv_slave_0: entered promiscuous mode [ 749.329732][T25942] x_tables: duplicate underflow at hook 1 [ 749.843305][T25960] syzkaller0: entered promiscuous mode [ 749.854224][T25960] syzkaller0: entered allmulticast mode [ 749.860135][T25966] netlink: 'syz.0.4998': attribute type 1 has an invalid length. [ 750.125594][T25976] macsec2: entered promiscuous mode [ 750.141440][T25976] macsec2: entered allmulticast mode [ 750.708354][T26020] team_slave_1: Caught tx_queue_len zero misconfig [ 750.872121][T26030] netlink: 'syz.1.5021': attribute type 1 has an invalid length. [ 750.937031][T26028] pim6reg: entered allmulticast mode [ 751.046340][T26038] IPVS: length: 226 != 24 [ 751.253030][T26055] __nla_validate_parse: 19 callbacks suppressed [ 751.253052][T26055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5022'. [ 752.053048][T26028] pim6reg: left allmulticast mode [ 752.351484][T26061] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 752.408383][T26061] bond8 (unregistering): Released all slaves [ 752.559603][T26080] netlink: 'syz.0.5031': attribute type 21 has an invalid length. [ 752.581419][T26082] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5032'. [ 752.586933][T26080] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5031'. [ 752.818680][T26090] tipc: Enabling of bearer rejected, already enabled [ 753.026178][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 753.034440][ C1] lec:lec_tx_timeout: lec0 [ 753.057060][T26097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5036'. [ 753.089226][T26097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5036'. [ 753.282617][T26104] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5038'. [ 753.361965][T26106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5037'. [ 753.786150][T26117] veth11: entered allmulticast mode [ 753.854452][T26117] bond12: (slave veth11): Enslaving as an active interface with an up link [ 753.907612][T26120] bond12 (unregistering): (slave veth11): Releasing backup interface [ 753.930406][T26120] bond12 (unregistering): Released all slaves [ 754.004522][T26129] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5042'. [ 754.140589][T26129] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5042'. [ 754.151245][T26134] netlink: 'syz.4.5044': attribute type 1 has an invalid length. [ 754.251564][T26134] 8021q: adding VLAN 0 to HW filter on device bond8 [ 754.265283][T26137] bond8: option mode: unable to set because the bond device is up [ 754.447361][T26144] rdma_rxe: rxe_newlink: failed to add gre0 [ 754.631029][T26146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5049'. [ 754.924933][T26173] netlink: 'syz.4.5054': attribute type 1 has an invalid length. [ 754.957126][T26174] netlink: 'syz.4.5054': attribute type 1 has an invalid length. [ 755.083125][T26174] netlink: 'syz.4.5054': attribute type 1 has an invalid length. [ 755.708373][T26210] sctp: [Deprecated]: syz.1.5061 (pid 26210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 755.708373][T26210] Use struct sctp_sack_info instead [ 755.837222][T26216] netlink: 'syz.0.5063': attribute type 17 has an invalid length. [ 755.928509][T26216] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.947064][T26216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 756.081305][T26227] 8021q: adding VLAN 0 to HW filter on device bond5 [ 756.119414][T26227] bond5 (unregistering): Released all slaves [ 756.215250][T26231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.376154][T26236] netlink: 'syz.1.5067': attribute type 1 has an invalid length. [ 756.411838][T26235] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 756.434452][T26235] bond8: (slave lo): Enslaving as an active interface with an up link [ 756.470899][T26235] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 756.479903][T26199] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 756.613686][T26236] 8021q: adding VLAN 0 to HW filter on device bond5 [ 756.869824][T26263] team0: entered allmulticast mode [ 756.888138][T26263] team_slave_1: entered allmulticast mode [ 756.901606][T26263] batadv1: entered allmulticast mode [ 756.908289][T26262] __nla_validate_parse: 46 callbacks suppressed [ 756.908309][T26262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5076'. [ 756.927171][T26263] veth1: entered allmulticast mode [ 756.935060][T26262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5076'. [ 757.379910][T26284] sch_fq: defrate 4294967293 ignored. [ 757.427714][T26287] netlink: get zone limit has 4 unknown bytes [ 757.538380][T26294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5080'. [ 757.664521][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 757.860775][T26313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5087'. [ 758.212257][T26325] netlink: 332 bytes leftover after parsing attributes in process `syz.4.5089'. [ 758.342171][T26326] syzkaller0: entered promiscuous mode [ 758.418084][T26326] syzkaller0: entered allmulticast mode [ 759.360128][T26346] pim6reg: left allmulticast mode [ 759.695651][T26360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5099'. [ 759.740120][T26360] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 759.765983][T26360] bond9 (unregistering): Released all slaves [ 759.980838][T26368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.990741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.053948][T26372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5104'. [ 760.054899][T26368] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5102'. [ 760.076744][T26372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5104'. [ 760.100132][T26368] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5102'. [ 760.125806][T26368] netlink: 'syz.2.5102': attribute type 5 has an invalid length. [ 760.379207][T26383] netlink: 'syz.4.5107': attribute type 3 has an invalid length. [ 760.570904][T15785] lec:lec_start_xmit: lec0:No lecd attached [ 760.639979][T26386] syzkaller0: entered promiscuous mode [ 760.658879][T26386] syzkaller0: entered allmulticast mode [ 760.987248][T26405] .70·X: renamed from hsr0 [ 761.023217][T26405] .70·X: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 761.061389][T26405] A link change request failed with some changes committed already. Interface .70·X may have been left with an inconsistent configuration, please check. [ 761.125946][T26409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 761.371578][T26411] bond9: option arp_all_targets: invalid value (129) [ 761.395166][T26411] bond9 (unregistering): Released all slaves [ 761.566147][T26423] netlink: 'syz.0.5118': attribute type 14 has an invalid length. [ 761.575508][T26423] netlink: 'syz.0.5118': attribute type 13 has an invalid length. [ 762.565907][T26455] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 762.619924][T26455] __nla_validate_parse: 12 callbacks suppressed [ 762.619949][T26455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5127'. [ 762.662844][T26455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5127'. [ 762.899507][T26472] netlink: 'syz.2.5133': attribute type 12 has an invalid length. [ 762.924117][T26472] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5133'. [ 762.958010][T26474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5134'. [ 763.093183][T26472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 763.110971][T26474] bond15: entered promiscuous mode [ 763.135495][T26474] 8021q: adding VLAN 0 to HW filter on device bond15 [ 763.338132][T26475] 8021q: adding VLAN 0 to HW filter on device bond16 [ 763.389814][T26475] bond16: entered promiscuous mode [ 763.415651][T26475] bond15: (slave bond16): Enslaving as an active interface with an up link [ 763.479249][T26482] syzkaller1: entered promiscuous mode [ 763.499415][T26482] syzkaller1: entered allmulticast mode [ 763.652622][T26490] netlink: 'syz.3.5136': attribute type 1 has an invalid length. [ 763.684013][T26490] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5136'. [ 763.714536][T26490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5136'. [ 763.846336][T26494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 763.894631][T26496] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5139'. [ 763.925909][T26496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5139'. [ 764.742914][T26536] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5149'. [ 764.841236][T26542] IPVS: set_ctl: invalid protocol: 33 172.20.20.66:20003 [ 765.007585][T26544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5151'. [ 765.071315][T26546] sctp: [Deprecated]: syz.3.5151 (pid 26546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 765.071315][T26546] Use struct sctp_sack_info instead [ 765.285074][T26550] netlink: 'syz.3.5153': attribute type 4 has an invalid length. [ 765.295402][T26551] netlink: 'syz.2.5152': attribute type 13 has an invalid length. [ 766.063617][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5490 ms [ 766.071770][ C1] lec:lec_tx_timeout: lec0 [ 766.359716][T26594] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 766.638202][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.668645][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.272351][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.301883][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.351605][T26621] netlink: 'syz.1.5171': attribute type 11 has an invalid length. [ 767.500115][T26602] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.818202][T26602] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.016839][T26602] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.055459][T26633] __nla_validate_parse: 14 callbacks suppressed [ 768.055483][T26633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5174'. [ 768.236327][T26633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5174'. [ 768.249838][T26633] netlink: 'syz.1.5174': attribute type 7 has an invalid length. [ 768.259315][T26633] netlink: 'syz.1.5174': attribute type 8 has an invalid length. [ 768.268123][T26633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5174'. [ 768.278622][T26625] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5172'. [ 768.297429][T26602] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.327139][T26624] lec:lec_atm_close: lec0: Shut down! [ 768.813055][ T6661] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.882962][T26645] netlink: 'syz.3.5178': attribute type 10 has an invalid length. [ 768.896806][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.961027][T26645] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.097330][ T6661] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.135294][T26649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5180'. [ 769.166509][ T6661] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.600284][T26669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5188'. [ 770.170709][T26681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.180014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.194486][T26681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.205265][ T6674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.233493][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.713154][T26688] netlink: 'syz.1.5193': attribute type 4 has an invalid length. [ 770.727305][T26689] netlink: 'syz.3.5194': attribute type 1 has an invalid length. [ 770.734333][T26688] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5193'. [ 770.759531][T26689] netlink: 'syz.3.5194': attribute type 2 has an invalid length. [ 770.788402][T26689] netlink: 'syz.3.5194': attribute type 2 has an invalid length. [ 770.856298][T26689] netlink: 'syz.3.5194': attribute type 2 has an invalid length. [ 770.878702][T26676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.891156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.930226][T26689] netlink: 'syz.3.5194': attribute type 1 has an invalid length. [ 770.985466][T26689] netlink: 'syz.3.5194': attribute type 2 has an invalid length. [ 771.331444][T26700] Bluetooth: MGMT ver 1.23 [ 771.533065][T26696] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5196'. [ 771.590311][T26696] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5196'. [ 771.900643][T26713] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5199'. [ 772.687180][T26729] vlan2: entered promiscuous mode [ 772.712848][T26729] bridge0: entered promiscuous mode [ 773.176137][T26744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5208'. [ 773.485786][T26756] IPVS: set_ctl: invalid protocol: 136 172.30.0.4:20005 [ 773.495678][T26748] syzkaller0: entered promiscuous mode [ 773.514439][T26748] syzkaller0: entered allmulticast mode [ 773.523167][T26753] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 774.063529][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 774.072639][ C1] lec:lec_tx_timeout: lec0 [ 774.519737][T26795] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5219'. [ 774.980212][T26806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5222'. [ 775.067666][T26807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5223'. [ 775.709287][T26831] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5229'. [ 775.766298][T26831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5229'. [ 775.828764][T26831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5229'. [ 776.641794][T26856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5237'. [ 777.043697][T26857] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.191609][T26863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5239'. [ 777.209495][T26863] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5239'. [ 777.220150][T26863] tipc: Invalid UDP bearer configuration [ 777.220207][T26863] tipc: Enabling of bearer rejected, failed to enable media [ 777.575053][T26857] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.766357][T26857] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.024447][T26857] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.846510][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.958716][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.012603][T26919] __nla_validate_parse: 1 callbacks suppressed [ 779.012626][T26919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5253'. [ 779.075254][T26921] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 779.075254][T26921] Please contact the netfilter-devel mailing list or update your nftables rules. [ 779.097098][ T6676] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.222319][ T6676] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.237133][T26927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5256'. [ 779.252666][T26927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5256'. [ 779.598388][T26943] validate_nla: 3 callbacks suppressed [ 779.598411][T26943] netlink: 'syz.2.5261': attribute type 21 has an invalid length. [ 779.652105][T26943] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5261'. [ 779.674703][T26943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5261'. [ 779.710082][T26941] netlink: 'syz.3.5262': attribute type 10 has an invalid length. [ 779.751860][T26941] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5262'. [ 779.849640][T26952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5263'. [ 779.892619][T26952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5263'. [ 780.054611][T26960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5265'. [ 780.544001][T26968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5268'. [ 781.694556][T27009] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 782.150122][T27023] netlink: 'syz.4.5283': attribute type 21 has an invalid length. [ 782.175323][T27023] netlink: 'syz.4.5283': attribute type 5 has an invalid length. [ 782.207932][T27023] netlink: 'syz.4.5283': attribute type 6 has an invalid length. [ 782.685785][T27033] netlink: 'syz.2.5286': attribute type 1 has an invalid length. [ 784.323257][T27078] __nla_validate_parse: 7 callbacks suppressed [ 784.323282][T27078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5294'. [ 784.345544][T27078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5294'. [ 784.889958][T27088] syzkaller0: entered promiscuous mode [ 784.934393][T27088] syzkaller0: entered allmulticast mode [ 784.986771][T27088] tc action pedit offset -536870912 out of bounds [ 784.996624][T27088] tc action pedit offset -536870912 out of bounds [ 785.003121][T27088] tc action pedit offset -536870912 out of bounds [ 785.009664][T27088] tc action pedit offset -536870912 out of bounds [ 785.016169][T27088] tc action pedit offset -536870912 out of bounds [ 785.022626][T27088] tc action pedit offset -536870912 out of bounds [ 785.029139][T27088] tc action pedit offset -536870912 out of bounds [ 785.035633][T27088] tc action pedit offset -536870912 out of bounds [ 785.042305][T27088] tc action pedit offset -536870912 out of bounds [ 785.048851][T27088] tc action pedit offset -536870912 out of bounds [ 785.055454][T27088] TC_ACT_REPEAT abuse ? [ 786.160913][T27121] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5300'. [ 786.292080][T27121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5300'. [ 786.312222][T27124] netlink: 'syz.2.5301': attribute type 11 has an invalid length. [ 786.844541][T27133] bond0: (slave ipvlan0): Device is not bonding slave [ 786.865124][T27133] bond0: option active_slave: invalid value (ipvlan0) [ 786.941248][T27133] IPVS: stopping backup sync thread 25177 ... [ 787.009185][T27138] syzkaller1: entered promiscuous mode [ 787.016189][T27138] syzkaller1: entered allmulticast mode [ 787.028228][T27140] netlink: 'syz.3.5306': attribute type 4 has an invalid length. [ 787.615215][T27154] netlink: 'syz.2.5310': attribute type 2 has an invalid length. [ 787.630727][T27154] netlink: 'syz.2.5310': attribute type 2 has an invalid length. [ 787.785346][T27156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5312'. [ 788.039760][T27163] syzkaller0: entered promiscuous mode [ 788.060459][T27163] syzkaller0: entered allmulticast mode [ 788.240829][T27174] netlink: 'syz.2.5316': attribute type 1 has an invalid length. [ 788.283133][T27174] netlink: 'syz.2.5316': attribute type 13 has an invalid length. [ 788.319312][T27174] netlink: 'syz.2.5316': attribute type 17 has an invalid length. [ 788.410645][T27174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 789.040038][T27197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5320'. [ 789.061327][T27199] syzkaller1: entered promiscuous mode [ 789.084747][T27199] syzkaller1: entered allmulticast mode [ 789.498570][T27203] wg1: entered promiscuous mode [ 790.084432][T27218] netlink: 'syz.2.5326': attribute type 83 has an invalid length. [ 790.131876][T27218] syzkaller1: entered allmulticast mode [ 790.305380][T27226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5329'. [ 790.354417][T27226] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5329'. [ 790.556548][T27232] netlink: 'syz.4.5332': attribute type 1 has an invalid length. [ 790.588000][T27232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.830888][T27242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5333'. [ 791.004880][T27245] macsec1: entered promiscuous mode [ 791.030506][T27245] bridge6: entered promiscuous mode [ 791.075966][T27245] macsec1: entered allmulticast mode [ 791.097747][T27245] bridge6: entered allmulticast mode [ 791.126095][T27245] bridge6: port 1(macsec1) entered blocking state [ 791.151524][T27245] bridge6: port 1(macsec1) entered disabled state [ 791.194499][T27245] bridge6: left allmulticast mode [ 791.266092][ T5845] bridge6: left promiscuous mode [ 791.341395][T27248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 791.349662][T27253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5337'. [ 791.412277][T27255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5337'. [ 791.575552][T27261] ªªªªª: renamed from virt_wifi0 [ 791.616967][T27261] netlink: 5608 bytes leftover after parsing attributes in process `syz.0.5338'. [ 791.643277][T27264] macsec0: entered allmulticast mode [ 791.661627][T27264] veth1_macvtap: entered allmulticast mode [ 791.676875][T27264] macsec0: left allmulticast mode [ 791.699112][T27264] veth1_macvtap: left allmulticast mode [ 791.719928][T27264] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5341'. [ 791.751343][T27264] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5341'. [ 791.790872][T27264] netlink: 'syz.2.5341': attribute type 5 has an invalid length. [ 791.863116][T27264] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5341'. [ 792.721403][T27294] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5349'. [ 792.784887][T27296] team0: entered allmulticast mode [ 792.792446][T27296] bond3: entered allmulticast mode [ 793.414318][T27315] netlink: 'syz.4.5354': attribute type 13 has an invalid length. [ 793.824778][T27322] 8021q: adding VLAN 0 to HW filter on device bond9 [ 794.083121][T27325] 8021q: adding VLAN 0 to HW filter on device bond10 [ 794.136630][T27325] bond9: (slave bond10): Enslaving as an active interface with an up link [ 794.342867][T27326] bond9 (unregistering): (slave bond10): Releasing backup interface [ 794.356109][T27322] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 794.423216][T27326] bond9 (unregistering): Released all slaves [ 794.525307][T27330] RDS: rds_bind could not find a transport for 0:0:900:0:9500::, load rds_tcp or rds_rdma? [ 795.155576][T27346] x_tables: duplicate underflow at hook 4 [ 795.189296][T27346] netlink: 'syz.4.5361': attribute type 6 has an invalid length. [ 795.472167][T27343] siw: device registration error -23 [ 795.629564][T27355] netlink: 'syz.1.5363': attribute type 11 has an invalid length. [ 795.652870][T27355] netlink: 'syz.1.5363': attribute type 23 has an invalid length. [ 795.662826][T27355] __nla_validate_parse: 10 callbacks suppressed [ 795.662847][T27355] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5363'. [ 795.726195][T27354] team0: left allmulticast mode [ 795.745106][T27354] team_slave_1: left allmulticast mode [ 795.764233][T27354] batadv1: left allmulticast mode [ 795.788861][T27354] veth1: left allmulticast mode [ 795.814890][T27358] netlink: 'syz.3.5364': attribute type 1 has an invalid length. [ 795.829134][T27354] team_slave_0: left promiscuous mode [ 795.842185][T27354] team_slave_0: left allmulticast mode [ 795.879030][T27354] .70·: left allmulticast mode [ 795.885576][T27354] hsr_slave_0: left allmulticast mode [ 795.892451][T27354] hsr_slave_1: left allmulticast mode [ 795.927906][T27354] vlan0: left promiscuous mode [ 795.950841][T27354] team1: left promiscuous mode [ 795.958154][T27354] team1: left allmulticast mode [ 795.966120][T27354] team2: left promiscuous mode [ 795.973104][T27354] team2: left allmulticast mode [ 795.981848][T27354] ip6tnl1: left allmulticast mode [ 795.992825][T27354] gtp0: left promiscuous mode [ 796.000597][T27354] gtp0: left allmulticast mode [ 796.011010][T27354] ipip0: left promiscuous mode [ 796.027533][T27354] bond3: left allmulticast mode [ 796.035230][T27354] ip6gretap2: left promiscuous mode [ 796.041379][T27354] ip6gretap2: left allmulticast mode [ 796.047888][T27354] ip6gretap3: left promiscuous mode [ 796.056103][T27354] ip6gretap3: left allmulticast mode [ 796.105154][T27354] ip6gre2: left promiscuous mode [ 796.120332][T27354] ip6gre2: left allmulticast mode [ 796.173021][T27354] vlan3: left allmulticast mode [ 796.185642][T27354] bond7: left allmulticast mode [ 796.204316][T27354] geneve3: left promiscuous mode [ 796.214277][T27354] geneve3: left allmulticast mode [ 796.377617][T27358] bond17: entered promiscuous mode [ 796.384542][T27358] 8021q: adding VLAN 0 to HW filter on device bond17 [ 796.424774][T27360] bond17: (slave bridge7): making interface the new active one [ 796.436405][T27360] bridge7: entered promiscuous mode [ 796.444534][T27360] bond17: (slave bridge7): Enslaving as an active interface with an up link [ 796.477406][T18565] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.599497][T27363] delete_channel: no stack [ 796.604333][T18565] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.604495][T18565] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.642859][T18565] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.715806][T27366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5366'. [ 796.739604][T27365] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5366'. [ 797.101325][T27381] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5372'. [ 797.257084][T27383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5371'. [ 797.625881][T27396] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.898340][T27396] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.092630][T27396] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.270237][T27396] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.477968][T18565] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.542785][ T47] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.605628][ T1114] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.638708][T27425] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5383'. [ 799.212093][T18565] bond10 (unregistering): (slave ip6gretap1): Releasing active interface [ 799.268937][T27433] netlink: 'syz.2.5385': attribute type 10 has an invalid length. [ 800.191813][T18565] bond10 (unregistering): (slave bridge3): Releasing active interface [ 800.428335][T18565] bond1 (unregistering): Released all slaves [ 800.451415][T18565] bond2 (unregistering): Released all slaves [ 800.482732][T18565] bond3 (unregistering): Released all slaves [ 800.510493][T18565] bond4 (unregistering): (slave veth3): Releasing active interface [ 800.521772][T18565] bond4 (unregistering): (slave batadv1): Releasing active interface [ 800.538562][T18565] bond4 (unregistering): Released all slaves [ 800.561780][T18565] bond5 (unregistering): Released all slaves [ 800.587021][T18565] bond6 (unregistering): Released all slaves [ 800.616257][T18565] bond8 (unregistering): Released all slaves [ 800.641959][T18565] bond7 (unregistering): Released all slaves [ 800.671119][T18565] bond9 (unregistering): Released all slaves [ 800.696321][T18565] bond10 (unregistering): Released all slaves [ 800.728848][T18565] bond11 (unregistering): Released all slaves [ 800.750226][T18565] bond0 (unregistering): Released all slaves [ 800.782269][T18565] bond12 (unregistering): Released all slaves [ 800.809819][T18565] bond13 (unregistering): Released all slaves [ 800.832713][T18565] bond14 (unregistering): Released all slaves [ 800.868321][T18565] bond15 (unregistering): Released all slaves [ 800.890278][T18565] bond16 (unregistering): Released all slaves [ 800.919450][T18565] bond18 (unregistering): Released all slaves [ 801.012574][ T47] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.035591][T27433] vxcan1: entered allmulticast mode [ 801.044006][T27433] team0: Device vxcan1 is of different type [ 801.812612][T18565] tipc: Disabling bearer [ 801.865734][T27477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5389'. [ 801.887522][T18565] tipc: Left network mode [ 801.932856][T27483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5389'. [ 802.049492][T27467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5389'. [ 803.325350][T27490] sctp: [Deprecated]: syz.4.5393 (pid 27490) Use of struct sctp_assoc_value in delayed_ack socket option. [ 803.325350][T27490] Use struct sctp_sack_info instead [ 803.876156][T27514] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 804.005956][ T7928] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 804.135204][ T7928] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 804.635581][ T13] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 804.967564][T27554] netlink: 'syz.1.5406': attribute type 22 has an invalid length. [ 804.968140][T27555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5407'. [ 805.002270][T27554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5406'. [ 805.132641][T27561] netlink: 'syz.4.5409': attribute type 11 has an invalid length. [ 805.179337][T27561] netlink: 'syz.4.5409': attribute type 11 has an invalid length. [ 805.190699][T27561] netlink: 204 bytes leftover after parsing attributes in process `syz.4.5409'. [ 805.310708][T27564] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 805.509563][T27574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5410'. [ 805.670749][ T47] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 805.710232][ T47] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 805.871755][T27579] syzkaller0: entered promiscuous mode [ 805.897062][T27579] syzkaller0: entered allmulticast mode [ 806.545765][ T5896] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 806.795442][T18565] hsr_slave_0: left promiscuous mode [ 806.810181][T18565] hsr_slave_1: left promiscuous mode [ 807.556744][T18565] team0 (unregistering): Port device wg1 removed [ 807.897790][T27555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 808.500553][T27618] netlink: 'syz.0.5416': attribute type 49 has an invalid length. [ 808.887812][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 808.896858][ T1314] clip:clip_start_xmit: skb_dst(skb) == NULL [ 809.746273][T18565] IPVS: stop unused estimator thread 0... [ 809.980024][T27660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5427'. [ 809.989516][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 810.204642][T27660] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5427'. [ 810.346803][T27673] netlink: 'syz.0.5431': attribute type 1 has an invalid length. [ 810.377866][T27673] netlink: 'syz.0.5431': attribute type 4 has an invalid length. [ 810.404183][T27673] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5431'. [ 810.435189][T27674] netlink: 'syz.0.5431': attribute type 1 has an invalid length. [ 810.455720][T27674] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.5431'. [ 810.836842][T27681] netlink: 'syz.1.5433': attribute type 1 has an invalid length. [ 810.888866][T27681] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5433'. [ 810.966063][T27692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5433'. [ 812.517988][T27720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5438'. [ 812.534273][T27720] nbd: must specify at least one socket [ 813.189234][T27731] tipc: Enabling of bearer rejected, already enabled [ 813.454798][T27737] SET target dimension over the limit! [ 813.587023][T27741] netlink: 'syz.4.5443': attribute type 21 has an invalid length. [ 813.594254][T27737] erspan0: entered promiscuous mode [ 813.609534][T27741] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5443'. [ 813.657540][T27741] netlink: 'syz.4.5443': attribute type 5 has an invalid length. [ 813.674928][T27741] netlink: 'syz.4.5443': attribute type 6 has an invalid length. [ 813.689077][T27741] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5443'. [ 813.893054][T27745] tap0: tun_chr_ioctl cmd 1074812118 [ 814.063646][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5170 ms [ 814.072890][ C1] lec:lec_tx_timeout: lec0 [ 814.147085][T27758] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.5448'. [ 814.172948][T27758] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 815.104581][T27786] syzkaller0: entered promiscuous mode [ 815.120765][T27786] syzkaller0: entered allmulticast mode [ 815.400088][T27794] bond9: entered promiscuous mode [ 815.421418][T27794] 8021q: adding VLAN 0 to HW filter on device bond9 [ 816.117470][T27826] __nla_validate_parse: 3 callbacks suppressed [ 816.117493][T27826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5462'. [ 816.201570][T27828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5462'. [ 816.212247][T27829] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5463'. [ 816.236571][T27829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5463'. [ 816.288661][T27829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5463'. [ 816.650521][T27842] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5467'. [ 816.685299][T27842] syzkaller0: entered promiscuous mode [ 816.705275][T27842] syzkaller0: entered allmulticast mode [ 817.314090][ T5505] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 817.939361][T27880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5475'. [ 818.145062][T27856] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5470'. [ 819.108067][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 819.335023][T27910] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5481'. [ 819.866281][T27917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5482'. [ 820.018984][T27919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.772162][T18565] bond3 (unregistering): (slave gretap1): Releasing active interface [ 820.847549][T18565] bond10 (unregistering): (slave gre2): Releasing backup interface [ 820.856763][T18565] gre2 (unregistering): left promiscuous mode [ 820.913261][T18565] bond4 (unregistering): (slave geneve2): Releasing active interface [ 821.290550][T18565] team0: Port device bridge3 removed [ 821.470511][T18565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.488648][T18565] bond0 (unregistering): (slave team0): Releasing backup interface [ 821.512784][T18565] bond0 (unregistering): Released all slaves [ 821.536463][T18565] bond1 (unregistering): Released all slaves [ 821.566709][T18565] team0: Port device bond2 removed [ 821.574722][T18565] bond2 (unregistering): Released all slaves [ 821.608910][T18565] bond3 (unregistering): Released all slaves [ 821.640810][T18565] bond4 (unregistering): Released all slaves [ 821.671191][T18565] bond5 (unregistering): Released all slaves [ 821.702185][T18565] bond6 (unregistering): Released all slaves [ 821.728873][T18565] bond7 (unregistering): Released all slaves [ 821.752121][T18565] bond8 (unregistering): Released all slaves [ 821.784600][T18565] bond9 (unregistering): Released all slaves [ 821.814882][T18565] bond10 (unregistering): Released all slaves [ 821.837217][T18565] bond11 (unregistering): Released all slaves [ 821.865915][T18565] bond12 (unregistering): Released all slaves [ 821.889559][T18565] bond13 (unregistering): Released all slaves [ 822.032629][T27924] netlink: 'syz.0.5483': attribute type 12 has an invalid length. [ 822.150788][T18565] tipc: Disabling bearer [ 822.230328][T27949] netlink: 'syz.1.5487': attribute type 3 has an invalid length. [ 822.241722][T18565] tipc: Left network mode [ 822.282479][T27949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5487'. [ 822.810605][T27954] netlink: 'syz.2.5488': attribute type 33 has an invalid length. [ 822.870094][T27954] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5488'. [ 822.934873][T27954] `: renamed from team0 (while UP) [ 823.151401][T27964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.348219][T27964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.411526][T27964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.618631][T27964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.661034][T27964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.728054][T27964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.811695][T27954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.872543][T27954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.925110][T27954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.302367][T27984] team0: Port device veth1 removed [ 824.348155][T27984] bridge_slave_0: left allmulticast mode [ 824.393947][T27984] bridge_slave_0: left promiscuous mode [ 824.446500][T27984] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.605259][T27967] netlink: 15162 bytes leftover after parsing attributes in process `syz.0.5493'. [ 824.999318][T28002] nbd: nbd1 already in use [ 825.017525][T28002] nbd: must specify an index to disconnect [ 825.517030][T27984] bridge_slave_1: left allmulticast mode [ 825.542463][T27984] bridge_slave_1: left promiscuous mode [ 825.562416][T27984] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.614672][T27984] bond0: (slave bond_slave_0): Releasing backup interface [ 825.634647][T27984] bond0: (slave bond_slave_1): Releasing backup interface [ 825.651642][T27984] team0: Port device team_slave_0 removed [ 825.685142][T27984] team0: Port device team_slave_1 removed [ 825.691653][T27984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.708927][T27984] net_ratelimit: 134 callbacks suppressed [ 825.708948][T27984] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 825.876989][T27995] netlink: 'syz.1.5497': attribute type 3 has an invalid length. [ 826.387265][T15785] lec:lec_start_xmit: lec0:No lecd attached [ 826.450912][T28024] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 827.390820][T28046] netlink: 'syz.1.5503': attribute type 1 has an invalid length. [ 827.794988][T28046] 8021q: adding VLAN 0 to HW filter on device bond6 [ 827.932791][T28050] bond6: (slave geneve2): making interface the new active one [ 827.963661][T28050] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 827.975620][T28053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5504'. [ 828.046178][T28060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 828.117388][T18568] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.156508][T18568] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.175314][T18568] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.218208][T28055] rdma_rxe: rxe_newlink: failed to add gre0 [ 828.303083][T18568] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.818027][T18565] hsr_slave_0: left promiscuous mode [ 829.861099][T18565] hsr_slave_1: left promiscuous mode [ 829.892133][T18565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.950431][T18565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.554803][T18565] team0 (unregistering): Port device 76žÿ removed [ 831.621138][T18565] team0 (unregistering): Port device team_slave_0 removed [ 831.655983][T18566] smc: removing ib device !yz! [ 832.063784][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5670 ms [ 832.073310][ C1] lec:lec_tx_timeout: lec0 [ 832.434332][T18566] smbdirect: ib_dev[!yz!] removed [ 832.802230][T28127] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5514'. [ 832.848280][T28129] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5515'. [ 832.873593][T28129] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5515'. [ 833.924270][T28140] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 836.436902][T28190] nbd: socks must be embedded in a SOCK_ITEM attr [ 836.476971][T28190] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5527'. [ 836.531080][T28190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5527'. [ 837.023625][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 837.199793][T28210] netlink: 'syz.0.5528': attribute type 1 has an invalid length. [ 837.264458][T28210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.048346][T28222] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5533'. [ 838.632046][T18470] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 838.652547][T18470] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 838.674215][T18470] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 838.692782][T18470] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 838.707361][T28238] netlink: 'syz.0.5535': attribute type 30 has an invalid length. [ 838.719924][T18470] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 838.797421][T28238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5535'. [ 839.087053][T28238] bond12: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 839.150286][T28238] bond12 (unregistering): Released all slaves [ 839.589471][ C1] ------------[ cut here ]------------ [ 839.597039][ C1] ODEBUG: free active (active state 0) object: ffff88807eb2a490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 839.612194][ C1] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#1: syz-executor/28233 [ 839.624570][ C1] Modules linked in: [ 839.630660][ C1] CPU: 1 UID: 0 PID: 28233 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 839.637177][T28265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5542'. [ 839.641497][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 839.661967][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 839.669389][ C1] Code: 89 44 24 20 e8 f7 bf 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 a5 28 8c 48 c7 c2 20 ab 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 839.673261][T28267] tipc: Resetting bearer [ 839.691965][ C1] RSP: 0018:ffffc90000a08b48 EFLAGS: 00010246 [ 839.703997][ C1] RAX: ffffffff8a9f6db0 RBX: ffffffff9a7346b0 RCX: 0000000000000000 [ 839.712922][ C1] RDX: ffffffff8c28ab20 RSI: ffffffff8c28a5a0 RDI: ffffffff903e6a40 [ 839.723663][ C1] RBP: ffffffff8bcf39a0 R08: ffff88807eb2a490 R09: ffffffff8bcf4d00 [ 839.733100][ C1] R10: dffffc0000000000 R11: ffffffff81b236d0 R12: ffff88807eb2a600 [ 839.742435][ C1] R13: ffffffff903e6a40 R14: ffff88807eb2a000 R15: ffff88807eb2a490 [ 839.751780][ C1] FS: 000055557dd3d500(0000) GS:ffff888125313000(0000) knlGS:0000000000000000 [ 839.762170][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 839.770118][ C1] CR2: 00007fc78484f0d1 CR3: 0000000048f6a000 CR4: 00000000003526f0 [ 839.779345][ C1] Call Trace: [ 839.781892][T28266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5543'. [ 839.783101][ C1] [ 839.796012][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 839.802580][ C1] kfree+0x13e/0x640 [ 839.807222][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 839.813379][ C1] rose_timer_expiry+0x4cb/0x600 [ 839.819142][ C1] ? call_timer_fn+0x178/0x5e0 [ 839.824782][ C1] call_timer_fn+0x192/0x5e0 [ 839.830192][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 839.836550][ C1] ? call_timer_fn+0xd4/0x5e0 [ 839.841991][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 839.848016][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 839.854103][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 839.860706][ C1] __run_timer_base+0x652/0x8b0 [ 839.866399][ C1] ? ktime_get+0x45/0x220 [ 839.871432][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 839.877940][ C1] run_timer_softirq+0xb7/0x170 [ 839.883608][ C1] handle_softirqs+0x22a/0x840 [ 839.889235][ C1] ? __irq_exit_rcu+0xca/0x220 [ 839.894843][ C1] __irq_exit_rcu+0xca/0x220 [ 839.903094][ C1] irq_exit_rcu+0x9/0x30 [ 839.908246][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 839.915552][ C1] [ 839.919032][ C1] [ 839.922506][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 839.929481][ C1] RIP: 0010:unwind_next_frame+0x4dc/0x2550 [ 839.936233][ C1] Code: 8b 7c 24 50 48 bd 00 00 00 00 00 fc ff df 4c 8b 6c 24 20 0f 84 86 16 00 00 e9 03 02 00 00 49 89 d5 48 89 d5 48 89 d8 48 29 e8 <48> 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 [ 839.958849][ C1] RSP: 0018:ffffc90005d4f1f8 EFLAGS: 00000212 [ 839.966694][ C1] RAX: 000000000000002c RBX: ffffffff904f2d60 RCX: 0000000080000000 [ 839.975888][ C1] RDX: ffffffff904f2d34 RSI: ffffffff90cd529c RDI: ffffffff8c289f00 [ 839.985064][ C1] RBP: ffffffff904f2d34 R08: 000000000000000c R09: ffffffff8e95cce0 [ 839.994259][ C1] R10: ffffc90005d4f318 R11: ffffffff81b105c0 R12: ffffffff81b10558 [ 840.003453][ C1] R13: ffffffff904f2d34 R14: ffffc90005d4f2c8 R15: 000000000000b105 [ 840.012690][ C1] ? stack_trace_save+0xa8/0x100 [ 840.018580][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 840.025851][ C1] ? unwind_next_frame+0xd5/0x2550 [ 840.031839][ C1] ? unwind_next_frame+0xa6/0x2550 [ 840.037918][ C1] ? __unwind_start+0x5b8/0x760 [ 840.043523][ C1] ? stack_trace_save+0xa9/0x100 [ 840.049349][ C1] ? stack_trace_save+0xa9/0x100 [ 840.055087][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 840.062206][ C1] arch_stack_walk+0x11b/0x150 [ 840.067748][ C1] ? stack_trace_save+0xa9/0x100 [ 840.073563][ C1] ? __kernfs_new_node+0xea/0x970 [ 840.079472][ C1] stack_trace_save+0xa9/0x100 [ 840.085134][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 840.091459][ C1] ? stack_depot_save_flags+0x33/0x810 [ 840.098535][ C1] ? __kernfs_new_node+0xea/0x970 [ 840.104339][ C1] ? __kernfs_new_node+0xea/0x970 [ 840.110215][ C1] kasan_save_track+0x3e/0x80 [ 840.115800][ C1] __kasan_slab_alloc+0x6c/0x80 [ 840.121505][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 840.128120][ C1] ? __kernfs_new_node+0xea/0x970 [ 840.133989][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 840.140544][ C1] __kernfs_new_node+0xea/0x970 [ 840.146194][ C1] ? __pfx___kernfs_new_node+0x10/0x10 [ 840.152675][ C1] ? kernfs_root+0x1c/0x230 [ 840.158309][ C1] ? kernfs_root+0x1c/0x230 [ 840.163613][ C1] ? kernfs_root+0x1c/0x230 [ 840.168893][ C1] ? kernfs_root+0x1c/0x230 [ 840.174140][ C1] kernfs_new_node+0x102/0x210 [ 840.179712][ C1] __kernfs_create_file+0x4b/0x2e0 [ 840.185681][ C1] sysfs_add_file_mode_ns+0x238/0x300 [ 840.192128][ C1] sysfs_merge_group+0x183/0x320 [ 840.197954][ C1] ? __pfx_sysfs_merge_group+0x10/0x10 [ 840.204278][ C1] ? device_add_attrs+0x55d/0x5b0 [ 840.210147][ C1] ? __pfx_device_add_attrs+0x10/0x10 [ 840.216414][ C1] dpm_sysfs_add+0xd2/0x270 [ 840.221651][ C1] device_add+0x4d8/0xbb0 [ 840.226757][ C1] ? rdma_init_coredev+0xee/0x1a0 [ 840.232665][ C1] add_one_compat_dev+0x41d/0x650 [ 840.238588][ C1] ? down_read+0x270/0x2e0 [ 840.244424][ C1] rdma_dev_init_net+0x243/0x2f0 [ 840.250122][ C1] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 840.256453][ C1] ? __kmalloc_noprof+0x37d/0x760 [ 840.262350][ C1] ops_init+0x35c/0x5c0 [ 840.267293][ C1] setup_net+0x118/0x340 [ 840.272217][ C1] ? __pfx_setup_net+0x10/0x10 [ 840.277788][ C1] ? preinit_net+0x492/0x7b0 [ 840.283166][ C1] copy_net_ns+0x50e/0x730 [ 840.288406][ C1] create_new_namespaces+0x3e7/0x6a0 [ 840.294468][ C1] ? security_capable+0x7e/0x2c0 [ 840.300224][ C1] unshare_nsproxy_namespaces+0x149/0x190 [ 840.306949][ C1] ksys_unshare+0x57d/0x9f0 [ 840.312157][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 840.318421][ C1] ? lockdep_softirqs_on+0x11d/0x180 [ 840.324810][ C1] ? handle_softirqs+0x715/0x840 [ 840.330651][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.338436][ C1] __x64_sys_unshare+0x38/0x50 [ 840.344068][ C1] do_syscall_64+0x15f/0xf80 [ 840.349559][ C1] ? clear_bhb_loop+0x40/0x90 [ 840.355454][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.362267][ C1] RIP: 0033:0x7fe0f879e0a7 [ 840.367409][ C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.389761][ C1] RSP: 002b:00007ffffc7bc9a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 840.399467][ C1] RAX: ffffffffffffffda RBX: 00007fe0f8a15f40 RCX: 00007fe0f879e0a7 [ 840.408722][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 840.417979][ C1] RBP: 00007fe0f8a167b8 R08: 0000000000000000 R09: 0000000000000000 [ 840.427214][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 840.436546][ C1] R13: 0000000000000003 R14: 00007ffffc7bcbe8 R15: 0000000000000000 [ 840.445847][ C1] [ 840.448921][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 840.456231][ C1] CPU: 1 UID: 0 PID: 28233 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 840.465906][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 840.476378][ C1] Call Trace: [ 840.479714][ C1] [ 840.482625][ C1] vpanic+0x56c/0xa60 [ 840.486654][ C1] ? __pfx__printk+0x10/0x10 [ 840.491398][ C1] ? __pfx_vpanic+0x10/0x10 [ 840.496021][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 840.501358][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 840.506726][ C1] panic+0xc5/0xd0 [ 840.510504][ C1] ? __pfx_panic+0x10/0x10 [ 840.514981][ C1] __warn+0x315/0x4c0 [ 840.519012][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 840.524784][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 840.530570][ C1] __report_bug+0x29a/0x540 [ 840.535122][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 840.540886][ C1] ? __pfx___report_bug+0x10/0x10 [ 840.545969][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 840.551222][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 840.557080][ C1] report_bug_entry+0x19a/0x290 [ 840.561975][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 840.568118][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 840.573888][ C1] handle_bug+0xce/0x200 [ 840.578258][ C1] exc_invalid_op+0x1a/0x50 [ 840.582805][ C1] asm_exc_invalid_op+0x1a/0x20 [ 840.587697][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 840.594158][ C1] Code: 89 44 24 20 e8 f7 bf 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 a5 28 8c 48 c7 c2 20 ab 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 840.613818][ C1] RSP: 0018:ffffc90000a08b48 EFLAGS: 00010246 [ 840.620022][ C1] RAX: ffffffff8a9f6db0 RBX: ffffffff9a7346b0 RCX: 0000000000000000 [ 840.628045][ C1] RDX: ffffffff8c28ab20 RSI: ffffffff8c28a5a0 RDI: ffffffff903e6a40 [ 840.636057][ C1] RBP: ffffffff8bcf39a0 R08: ffff88807eb2a490 R09: ffffffff8bcf4d00 [ 840.644073][ C1] R10: dffffc0000000000 R11: ffffffff81b236d0 R12: ffff88807eb2a600 [ 840.652081][ C1] R13: ffffffff903e6a40 R14: ffff88807eb2a000 R15: ffff88807eb2a490 [ 840.660270][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 840.665783][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 840.671496][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 840.677236][ C1] kfree+0x13e/0x640 [ 840.681205][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 840.686370][ C1] rose_timer_expiry+0x4cb/0x600 [ 840.691348][ C1] ? call_timer_fn+0x178/0x5e0 [ 840.696457][ C1] call_timer_fn+0x192/0x5e0 [ 840.701098][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 840.706605][ C1] ? call_timer_fn+0xd4/0x5e0 [ 840.711350][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 840.716520][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 840.721867][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 840.727465][ C1] __run_timer_base+0x652/0x8b0 [ 840.732366][ C1] ? ktime_get+0x45/0x220 [ 840.736766][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 840.742219][ C1] run_timer_softirq+0xb7/0x170 [ 840.747127][ C1] handle_softirqs+0x22a/0x840 [ 840.751955][ C1] ? __irq_exit_rcu+0xca/0x220 [ 840.756778][ C1] __irq_exit_rcu+0xca/0x220 [ 840.761519][ C1] irq_exit_rcu+0x9/0x30 [ 840.765813][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 840.771579][ C1] [ 840.774556][ C1] [ 840.777543][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 840.783566][ C1] RIP: 0010:unwind_next_frame+0x4dc/0x2550 [ 840.789408][ C1] Code: 8b 7c 24 50 48 bd 00 00 00 00 00 fc ff df 4c 8b 6c 24 20 0f 84 86 16 00 00 e9 03 02 00 00 49 89 d5 48 89 d5 48 89 d8 48 29 e8 <48> 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 [ 840.809074][ C1] RSP: 0018:ffffc90005d4f1f8 EFLAGS: 00000212 [ 840.815199][ C1] RAX: 000000000000002c RBX: ffffffff904f2d60 RCX: 0000000080000000 [ 840.823256][ C1] RDX: ffffffff904f2d34 RSI: ffffffff90cd529c RDI: ffffffff8c289f00 [ 840.831270][ C1] RBP: ffffffff904f2d34 R08: 000000000000000c R09: ffffffff8e95cce0 [ 840.839287][ C1] R10: ffffc90005d4f318 R11: ffffffff81b105c0 R12: ffffffff81b10558 [ 840.847473][ C1] R13: ffffffff904f2d34 R14: ffffc90005d4f2c8 R15: 000000000000b105 [ 840.855662][ C1] ? stack_trace_save+0xa8/0x100 [ 840.860660][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 840.867011][ C1] ? unwind_next_frame+0xd5/0x2550 [ 840.872189][ C1] ? unwind_next_frame+0xa6/0x2550 [ 840.877436][ C1] ? __unwind_start+0x5b8/0x760 [ 840.882324][ C1] ? stack_trace_save+0xa9/0x100 [ 840.887408][ C1] ? stack_trace_save+0xa9/0x100 [ 840.892435][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 840.898654][ C1] arch_stack_walk+0x11b/0x150 [ 840.903477][ C1] ? stack_trace_save+0xa9/0x100 [ 840.908548][ C1] ? __kernfs_new_node+0xea/0x970 [ 840.913616][ C1] stack_trace_save+0xa9/0x100 [ 840.918456][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 840.923861][ C1] ? stack_depot_save_flags+0x33/0x810 [ 840.929448][ C1] ? __kernfs_new_node+0xea/0x970 [ 840.934485][ C1] ? __kernfs_new_node+0xea/0x970 [ 840.939692][ C1] kasan_save_track+0x3e/0x80 [ 840.944450][ C1] __kasan_slab_alloc+0x6c/0x80 [ 840.949416][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 840.954917][ C1] ? __kernfs_new_node+0xea/0x970 [ 840.960144][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 840.965869][ C1] __kernfs_new_node+0xea/0x970 [ 840.970724][ C1] ? __pfx___kernfs_new_node+0x10/0x10 [ 840.976274][ C1] ? kernfs_root+0x1c/0x230 [ 840.980969][ C1] ? kernfs_root+0x1c/0x230 [ 840.985575][ C1] ? kernfs_root+0x1c/0x230 [ 840.990104][ C1] ? kernfs_root+0x1c/0x230 [ 840.994615][ C1] kernfs_new_node+0x102/0x210 [ 840.999388][ C1] __kernfs_create_file+0x4b/0x2e0 [ 841.004507][ C1] sysfs_add_file_mode_ns+0x238/0x300 [ 841.009893][ C1] sysfs_merge_group+0x183/0x320 [ 841.014913][ C1] ? __pfx_sysfs_merge_group+0x10/0x10 [ 841.020371][ C1] ? device_add_attrs+0x55d/0x5b0 [ 841.025504][ C1] ? __pfx_device_add_attrs+0x10/0x10 [ 841.031442][ C1] dpm_sysfs_add+0xd2/0x270 [ 841.035970][ C1] device_add+0x4d8/0xbb0 [ 841.040397][ C1] ? rdma_init_coredev+0xee/0x1a0 [ 841.045444][ C1] add_one_compat_dev+0x41d/0x650 [ 841.050477][ C1] ? down_read+0x270/0x2e0 [ 841.054921][ C1] rdma_dev_init_net+0x243/0x2f0 [ 841.059963][ C1] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 841.065424][ C1] ? __kmalloc_noprof+0x37d/0x760 [ 841.070459][ C1] ops_init+0x35c/0x5c0 [ 841.074622][ C1] setup_net+0x118/0x340 [ 841.078932][ C1] ? __pfx_setup_net+0x10/0x10 [ 841.083724][ C1] ? preinit_net+0x492/0x7b0 [ 841.088374][ C1] copy_net_ns+0x50e/0x730 [ 841.092814][ C1] create_new_namespaces+0x3e7/0x6a0 [ 841.098480][ C1] ? security_capable+0x7e/0x2c0 [ 841.103449][ C1] unshare_nsproxy_namespaces+0x149/0x190 [ 841.109226][ C1] ksys_unshare+0x57d/0x9f0 [ 841.113948][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 841.119110][ C1] ? lockdep_softirqs_on+0x11d/0x180 [ 841.124418][ C1] ? handle_softirqs+0x715/0x840 [ 841.129373][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.135447][ C1] __x64_sys_unshare+0x38/0x50 [ 841.140231][ C1] do_syscall_64+0x15f/0xf80 [ 841.144823][ C1] ? clear_bhb_loop+0x40/0x90 [ 841.149516][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.155495][ C1] RIP: 0033:0x7fe0f879e0a7 [ 841.159922][ C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.179553][ C1] RSP: 002b:00007ffffc7bc9a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 841.188157][ C1] RAX: ffffffffffffffda RBX: 00007fe0f8a15f40 RCX: 00007fe0f879e0a7 [ 841.196135][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 841.204130][ C1] RBP: 00007fe0f8a167b8 R08: 0000000000000000 R09: 0000000000000000 [ 841.212105][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 841.220073][ C1] R13: 0000000000000003 R14: 00007ffffc7bcbe8 R15: 0000000000000000 [ 841.228059][ C1] [ 841.231383][ C1] Kernel Offset: disabled [ 841.235733][ C1] Rebooting in 86400 seconds..