last executing test programs: 4.912878883s ago: executing program 3 (id=9222): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8f}]}, @NFT_MSG_NEWSETELEM={0xe0, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xb8, 0x3, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x8c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8400000000000000}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x164}}, 0x4004040) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0d0200000000000071113900000000008510000002000000850000004c00000095000000000000009500a5050000e500"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005080007006e6174"], 0xf0}, 0x1, 0x0, 0x0, 0x48000}, 0x20040080) 4.65179606s ago: executing program 3 (id=9228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e65766500002000028014000700fe8000000000000000000000000000bb080001000100000004001a80140014007465616d300000000000000000000000080004"], 0x78}}, 0x0) 4.500560432s ago: executing program 3 (id=9232): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x10}, {0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1, {[0x1d, 0x7fffffff, 0x9, 0x3, 0x6, 0xfffffff8, 0x2, 0x4]}}, 0x5c) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x3, 0x101, 0x9, 0x2}, 0x10) (async, rerun: 64) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) (rerun: 64) 4.316984754s ago: executing program 3 (id=9235): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000dcdf251700000008000300", @ANYRES32=r5, @ANYBLOB="1800308014000400403a050c5baee20400f2b6d713459a7a"], 0x34}}, 0x4000000) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000080)={0x5c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048044}, 0x20004014) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000002680)=@mangle={'mangle\x00', 0x2, 0x6, 0x778, 0x0, 0x478, 0x2a0, 0x1b0, 0x388, 0x6a8, 0x6a8, 0x6a8, 0x6a8, 0x6a8, 0x6, 0x0, {[{{@ipv6={@mcast1, @mcast1, [], [0x0, 0xff000000], 'team0\x00', 'vlan1\x00', {}, {}, 0x11}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x5c, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [0x0, 0xff], [0x0, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xff]}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x4e20, 0x0, 0xfffd], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0xfd, 0xfd]}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xe8, 0x48000000}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x4, @ipv6=@private0, 0x4e23}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1c}, @mcast1, [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xff], 'veth0_vlan\x00', 'veth1_to_bond\x00', {0x9865820c52afa8d5}, {0xff}, 0x84, 0x1, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x9, 0x0, 0x0, [@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x814) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000ffdbdf250700000014000200fe80000000000000000000000000004208000400ac1414bb"], 0x44}, 0x1, 0x0, 0x0, 0x24080850}, 0xc010) 4.130990187s ago: executing program 3 (id=9238): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x7, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x5, 0x3}]}]}, 0xfc}}, 0x20000088) (async) r5 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.839511264s ago: executing program 3 (id=9240): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4000080) bind$packet(r7, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0xb}, @local, r10}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x9, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x4000800) 2.512765486s ago: executing program 2 (id=9254): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket(0xb, 0x3, 0xfffffffd) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="a0000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00000000000000007800128008000100736974006c000280060012004e24000005000a00000000000500040000000000061011004e20000014000b00fc315fe85b1a000000000000000000000000000001060011004e220000050009002900000006004b2c600a242f34d6fb8fc40e000100000008000c008900000014000b00fe8000"/141], 0xa0}}, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0x1d, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000040), 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x1}, 0x8) 2.448803097s ago: executing program 2 (id=9255): socket(0xa, 0x5, 0x0) (async) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301410000000000950000004d000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r1}, 0x94) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000000)=@id, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x2000000}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="ac", 0x34000, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000080)="ac", 0x34000, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) 2.246554307s ago: executing program 1 (id=9259): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000210a011d29ca1e668192a400020000000c00034000000000000000000900020073797a3200000000090001"], 0x38}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYBLOB], 0x48}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = gettid() (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfbfffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc40}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x47, 0x700, 0x7907, 0x8000, {{0x1e, 0x4, 0x2, 0x3, 0x78, 0x68, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@cipso={0x86, 0x3b, 0x1, [{0x1, 0xc, "2ed097faa705902dae86"}, {0x6, 0x12, "bb2691c92fba9c433199abe7d45ffca5"}, {0x6, 0xc, "fc490d45c2f776b7fb00"}, {0x7, 0x5, "5fb1f1"}, {0x0, 0x3, 'C'}, {0x0, 0x3, "80"}]}, @timestamp={0x44, 0x20, 0x6c, 0x0, 0xd, [0x1, 0x6, 0x10001, 0x916, 0x4312700a, 0x31, 0x2]}, @end, @timestamp={0x44, 0x8, 0x96, 0x0, 0xf, [0x75]}]}}}}}) (async, rerun: 64) r8 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r11, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, r11, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0xfffffffffffffce6, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000000000034000dc"}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@mpls_delroute={0x5c, 0x19, 0xb, 0x70bd29, 0x25dfdbfb, {0x1c, 0x20, 0x0, 0x43, 0xfd, 0x2, 0xfe, 0xa, 0x1000}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8, 0x4, r7}, @RTA_VIA={0x14, 0x12, {0x26, "cc1c9e6f9b305012074380d77406"}}, @RTA_TTL_PROPAGATE={0x5}, @RTA_DST={0x8, 0x1, {0x4da, 0x0, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0xc, 0x0, 0xa2, r12}}]}, 0x5c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000818}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1404, 0x200, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x8001) 2.101526601s ago: executing program 1 (id=9261): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xc}, &(0x7f00000000c0)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000000}, 0x4000044) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540", @ANYRESOCT=r2], 0x74}, 0x1, 0x0, 0x0, 0x10000042}, 0x20000014) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = accept$inet(r3, 0x0, &(0x7f0000000000)) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @private}, &(0x7f00000001c0)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r4, 0x25, 0x2, @val=@target_btf_id=0xffffffffffffffff}, 0x14) close(r1) 1.904848224s ago: executing program 4 (id=9263): writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000003c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) (async) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000003c0)=r2, 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) 1.882033095s ago: executing program 1 (id=9264): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0xfe, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRESDEC=r1, @ANYBLOB="20000100", @ANYBLOB="477d6bbb5b1bf3a86fb051c91acc18539589d9f174ba9bd2fa0c6d7e67ec884367556e030fa6362a35822f8dd5e6c7cc1907ef2e896c7881c0edb71a8be84a6a3aa808cadf130c09abee05248019a8ebc2e47943d31882bbb8b82c1be440ea97bdeb3866c386d1f4585103a6a28bc3d1de36fbab7a739720843ee03216b349a8eb6728c546cad2adc370ac1152e06c9ff43df13b6d9c7955c4d989b6c2df9cff"], 0x38}, 0x1, 0x0, 0x0, 0x3}, 0x4000) 1.677202699s ago: executing program 4 (id=9266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="a644", 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4) shutdown(r0, 0x1) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="48bcd8000417027bea5a0368a614584687bc56b80fbd0acc86c059a7b80fb84fae449c4ecd9b3caa6e7a180600000000000000d7269472047aa7e56948cbeb3c01152add798d12613211dacc73f9d642a40fea3528ecf5f1b8521dc6e06f01f99618afcef936d4a41ca9f267db6e34bfcd48de3cdca8b3cba2531b6665e16ba796f6a52600e65742f1dc369f811350f92f4c7b614e87d860a667810ce0a2a3026e21f9eedc4855254fa77d54c98bed9487a595f577ae044148fd5889ecec1e0b704050d4b0ef502ba9a701cb07eb7f573a5c991d2a8b03e82ed3", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500870000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r0, &(0x7f00000002c0)="a644", 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4) (async) shutdown(r0, 0x1) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="48bcd8000417027bea5a0368a614584687bc56b80fbd0acc86c059a7b80fb84fae449c4ecd9b3caa6e7a180600000000000000d7269472047aa7e56948cbeb3c01152add798d12613211dacc73f9d642a40fea3528ecf5f1b8521dc6e06f01f99618afcef936d4a41ca9f267db6e34bfcd48de3cdca8b3cba2531b6665e16ba796f6a52600e65742f1dc369f811350f92f4c7b614e87d860a667810ce0a2a3026e21f9eedc4855254fa77d54c98bed9487a595f577ae044148fd5889ecec1e0b704050d4b0ef502ba9a701cb07eb7f573a5c991d2a8b03e82ed3", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500870000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) 1.676720714s ago: executing program 1 (id=9267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x2b0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x268, 0x4, 0x0, 0x1, [{0x254, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x244, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_BITWISE_DATA={0x230, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4a, 0x1, "5c99657014cddfeda506da3ce9520dd30dbf8ca64add393c1c44bfdc217cd96434064592db58274424cddab3e1395b91cd60122c961d00ba4416328733b587c7d0af9d3068d9"}, @NFTA_DATA_VALUE={0xc7, 0x1, "71bcb5bcac41c13daebcca9eaabe21c590c7d93837c286bf5196c6fcd8e9eab490c9f54808ed88292a8185eb6d98c18c887217628276090ffbefeac528ffb634fc3e5d1a32fc162ad38fd4e0e4c8d087149b7d46b1cdc246dbc811672479e22d432c4034c9826b8157caaa05e410f3131e6fc4240707b0764a68d10fc6c6caa6a935e12f45662ac3b7e01520d3d6a296e7da13e5dcd172408c22638676fbe786f13b02768151effdde5d33d437c4c5d6887941f625ae721bfff96db5804d4d1cc0aa54"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x61, 0x1, "20a0295437a49cc0149d451119cdbea3f2a773ad36f68d30b60565413b9f3c76d4979c9d970c4de99a8203547e523c0557c9ce04819e99011d1319d7edf47c88b5590dba597d85c41fd386a24ab38dbd4af3a3e73f60fc55814ba7329b"}, @NFTA_DATA_VALUE={0x9b, 0x1, "ce506d6c6462514618378a848bf63f9bf207956d93193a45aac8eae996aeb99073a533e4b080e4c0e5ab0c181e8258663eadb445922410a779e9491b033684b2c95d76645d542bbce463405d483f5fa3f92bea48cc255281e5972d79bb956433ecacfd0089c89bfb944e7cd714de478b1aa45f251ef57e2f8a7ccf13a24e6dc1377d6f3eb8b57999183293975faf9406709163d476000e"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}]}], {0x14}}, 0x2d8}}, 0x0) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000840)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r4, 0x1, 0x4c, 0x0, &(0x7f0000000300)) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.662426994s ago: executing program 0 (id=9268): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000004c0)={0x1, 0x2, "ff9edf", 0x6c, 0x2}) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000004c0)={0x1, 0x2, "ff9edf", 0x6c, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@netkit}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r1, 0x4) 1.592829157s ago: executing program 0 (id=9269): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x1000000, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x32}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r2, r0, 0x5}, 0x50) syz_init_net_socket$ax25(0x3, 0x5, 0x1) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1.413143683s ago: executing program 4 (id=9270): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fadbdf250900000008000300", @ANYRES32=r5, @ANYBLOB="0500080007000000510596cc4f56a7d208ee20a491aabe2df545c17cae15b7bc1ad209a9eb4ea6d32cfaebe3b62c252b3730562c8935cd2cf54656e3c8baa9ed65a551db20eb83b390e7ee15df6248eee70787d73847f48604fc52da5ec5c6dedad00ccb0462ba7342f72e11f59d6b7feea15b803933298c87ee04ed5f2096cb88c45412f38e5db6878b15"], 0x24}, 0x1, 0x0, 0x0, 0x2000c8e5}, 0x240048c4) (async) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) (async) close(r6) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a971f12e3a0000000000000001000000024000007f0000010204"], 0x110) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x4, 0x2, 0xffff, 0x8, 0x7fff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6dff000000000000791008000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) r7 = socket$kcm(0x21, 0x2, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, 0x0, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000010480)={0x0, 0x0, &(0x7f0000010440)={&(0x7f00000102c0)=ANY=[@ANYBLOB="1c0000000101030000000000000000000a0000000600124000030000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x88c0) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000006480)={0x1c, 0x27, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1}, 0x0) 1.411394638s ago: executing program 0 (id=9271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x58}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@private0, @in=@loopback, 0x4e23, 0x0, 0x4e23, 0x8, 0xa, 0x80, 0x20, 0x33, r2, r3}, {0x8, 0x6, 0xd4, 0x7, 0x3, 0x7, 0x6, 0x7}, {0x4, 0x7fff, 0x0, 0x5102}, 0x6, 0x0, 0x1, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4d5, 0x3c}, 0x2, @in=@local, 0x0, 0x3, 0x1, 0xf8, 0x9, 0x5, 0x480}}, 0xe8) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) getsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f00000002c0), &(0x7f0000000380)=0x4) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x84, @empty, 0x4e23, 0x3, 'none\x00', 0xf, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x81, 0x0}, 0x4e21, 0x3, 'nq\x00', 0x4, 0x81, 0x3}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x8, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) close(r5) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x4) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}}) sendto$inet6(r1, 0x0, 0x0, 0x2e1ade69cff0047b, &(0x7f0000000300)={0xa, 0x4e25, 0x8, @remote}, 0x1c) 1.408740869s ago: executing program 2 (id=9272): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="61159f00000000006113500000000000bf5000000000000004000000080000003d03010000000000250500000000000069163e0000000000bf07000000000000450607000fff0720670600003f000000160300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e273827017826251ed834f2af97787f696649a462e7ee4bcf800000000000000000000004000bc00f679629709e75b99f9632b6ce78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1fff5f1be1969a1ba791ad46d800000000c7f26a0337302f3341eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf48903d3fc78700d429a2d4c8b6d803eb83eecfe4c700000000a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d4a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798a9c2dca871073f6bd61940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec000000000000000000000000c6427829b65ee55eef70520871b2a26df69559b5a06ad06d3d0183ae3b317478fff42cc48b461c56baea65a667000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.300766105s ago: executing program 4 (id=9273): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (async) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={r1, 0x2}, 0x8) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x17c, 0x32, 0x1, 0x70bd2a, 0x25dfdbfe, {0x19}, [@nested={0xfb, 0xeb, 0x0, 0x1, [@generic="6c92b10b2cbcaed80098b785b689148aaea64c2b49cb197adf362d97ddc8df3e2583bb3d248249c0873ad9466af0394027b101133f4ed43f1d99745b386c0a43feb722f0dcfbd95dba3bfb8bdfe0fb759ccb768499340486c475ae0bf6dcf65d55c57f186c37f44c09a08c731f0ec9f046ed7d5ee6ef47de7e1e6f94e7e6770e83a085d0c11552e58c9e86bfe0ae4dc5082ba516587cce044fa2f82ada97ccf39e485cf16e5753de8e98afeff0c971983a21e9ebb69982a8878b706b1e24b1700d095ff522084777fd9805fb14b506c563a82093d1db7eec3a6bd9b8e2edc34950dda6f36f78952e160f1eb686b27fd0aa9301", @nested={0x4, 0xef}]}, @typed={0x14, 0xac, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x8, 0xa7, 0x0, 0x1, [@nested={0x4, 0x127}]}, @typed={0xc, 0xad, 0x0, 0x0, @u64=0x2}, @nested={0x42, 0xd5, 0x0, 0x1, [@nested={0x4, 0x24}, @generic="8bf4c69b2a6541ffbcc77d1b853b07413023605321c2375c44ee022a396c2080ac1b1b495b867083ca3b", @typed={0x9, 0xb2, 0x0, 0x0, @str='+*-#\x00'}, @nested={0x4, 0xe3}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0xea4353c275ee1bd}, 0x2004000) 1.242656731s ago: executing program 2 (id=9274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x4, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) 1.101210171s ago: executing program 4 (id=9275): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 1.100767494s ago: executing program 0 (id=9276): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40082}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff0000000108000700263a2f2f140002"], 0x44}, 0x1, 0x1000000}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r7, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r7, 0x110, 0x3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x50}}, 0x4000080) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 418.226037ms ago: executing program 0 (id=9277): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3ff}, &(0x7f0000000080)=0x8) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0x10, r5}, 0x18) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r4, 0x6, 0x8, 0x9, 0x0, 0xd}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x0) 396.51627ms ago: executing program 2 (id=9278): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)={0x1c, r1, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000864000480600001800a0001006d617463680000046f000280340003007dd86dc9b7ffffc7961e64e816e2fa144f7707e5f7f6cbd498a6b1affd1a3a7027bb2a1535664f6c1793c8ab258d7f100e0001006d756c7469706f727400000008000240000000010900020073797a32000000000900010073797a3000000000140000001100010000000000000000000900000a"], 0xb8}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r4, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1818000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 289.011881ms ago: executing program 1 (id=9279): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x44}}, 0x0) select(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x54, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="010026bd7000fedbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff000008001400", @ANYRES32=0x0, @ANYBLOB="0500130101000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00042bbd7000fbdbcdfeffffffffffff5d0001000200000000000064620008005d000000000008005d000100000008005d0001000000228aa2e35534f0c73cd19ce8ac9b7ff0b356c8c1cf2b8241c7883a10beaf82aedd8dba898930eda0e1f9c44cd453f8d64e179b709ae93ebf875d5ffe5251"], 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x8020) 204.134263ms ago: executing program 4 (id=9280): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c200000200ffffffff0407060001080006040002fdffffffffffac1414bbbbbbbbbbbbbb7f00fbe8df5d88d5874f0ef78babe00001"], 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x24, r4, 0xef59bbf9fc938c49, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40008) (async) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x24, r4, 0xef59bbf9fc938c49, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40008) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc044}, 0x40000) socket$netlink(0x10, 0x3, 0x15) (async) r5 = socket$netlink(0x10, 0x3, 0x15) socket$netlink(0x10, 0x3, 0x19) (async) r6 = socket$netlink(0x10, 0x3, 0x19) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r9, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x4000040) sendmsg$nl_route(r6, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@bridge_newvlan={0x78, 0x70, 0x200, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x5}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0xfffff2b0}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x8}}]}, 0x78}}, 0x811) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) recvmmsg(r5, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x004', @ANYRES16=r2, @ANYBLOB="000426bd7000fedbdf25080000000800320074000000080031005b03000005002e000100000008000b000100000008003a0003000000050038000100000008003c000900000008003b0000010000"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x805) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000022020050003c80000000000080002000a01010008000100ac1414aa08000300", @ANYRES32], 0x60}}, 0x0) 149.842297ms ago: executing program 2 (id=9281): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @mcast1, 0xa}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r9, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x576, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r10, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 591.403µs ago: executing program 1 (id=9282): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$tipc(0x1e, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x845) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r2, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) sendmsg$AUDIT_ADD_RULE(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000780)={0x420, 0x3f3, 0x200, 0x70bd29, 0x25dfdbfe, {0x10, 0x1, 0xe, [0xff, 0xf1e, 0x8, 0x8, 0x8001, 0x80000000, 0x5, 0x4, 0xffffffff, 0xdd, 0x0, 0x8, 0x3, 0x7, 0x7fffffff, 0x2, 0x0, 0x2, 0x0, 0x4, 0xfffffff7, 0x9, 0x3, 0xffffffff, 0x8, 0x1, 0x1, 0x4, 0x1, 0x40, 0x83, 0x3, 0x625, 0x1, 0xc, 0x80000000, 0x1, 0x28c, 0x100, 0xfffffff7, 0x7, 0x9, 0x3, 0xb, 0xcc, 0x2, 0x4, 0x5, 0x1, 0x1, 0x10, 0x5, 0xff, 0x6e7b, 0x4, 0x3a60, 0x4, 0xffffffff, 0x5, 0x42, 0x2, 0x58, 0x9d, 0x82], [0x3, 0xc, 0x7fffffff, 0x2, 0x9593, 0x9, 0x8, 0x101, 0x8000, 0x2, 0xffffffff, 0x8b1e, 0x3, 0x7f, 0x2000000, 0x3b9, 0x40, 0xd942, 0x8, 0x4, 0x8, 0x4, 0x5, 0x8, 0x69a4, 0xfffffff7, 0x99a9, 0xe, 0x2, 0xb0, 0x4, 0x6, 0x101, 0x3, 0x2, 0x455, 0x3, 0x0, 0xc, 0x4, 0x3c1, 0x1, 0x3c, 0x6, 0x8, 0x5, 0x9, 0x0, 0x3, 0x2, 0xa, 0x7ff, 0x1d, 0x9, 0x0, 0x0, 0x9, 0x6, 0x5, 0x4, 0x8, 0x7, 0x8, 0xe4], [0x1000, 0x1000, 0x407f, 0xff, 0xc, 0x0, 0x9, 0xa1, 0x3, 0x10, 0x61, 0x1, 0x8, 0x40, 0x200, 0x0, 0x4, 0x10000, 0x1, 0x0, 0x0, 0xffffff88, 0x10001, 0xe37, 0x8d36619, 0x0, 0x10000, 0x10, 0x8, 0x7fffffff, 0xc, 0x8, 0x8, 0x6, 0x9, 0x5, 0x1200000, 0xdea4, 0xfffffffa, 0x1, 0x7f, 0x1, 0x10000, 0x3, 0xfff, 0x40, 0x7, 0x1, 0x9, 0xffffffff, 0x8, 0x0, 0x8, 0x8001, 0x0, 0x3, 0x2, 0x0, 0x2, 0x9, 0x8000, 0xfffffffe, 0x7ff, 0x5], [0x9e1, 0x495c9240, 0x8, 0x4, 0x6, 0x81, 0x800, 0x401, 0x5, 0x1, 0x6ec, 0x80000001, 0x6, 0x2, 0x2, 0x9, 0x0, 0x4, 0x7, 0x800, 0x7fffffff, 0xbcca, 0x1800, 0x3, 0x8, 0x8, 0x400, 0x10001, 0x7, 0x6, 0x5, 0x3, 0x9, 0xfda, 0x6, 0xffffffff, 0x4, 0x1, 0x4, 0x5, 0x0, 0x1, 0x7, 0x3, 0x8, 0x400, 0x4, 0x7, 0x8, 0x2, 0x53c1, 0xe1, 0x9, 0x6d2, 0xa3e, 0x5, 0x8e, 0x81, 0x7c86f38d, 0x0, 0x6, 0x0, 0x10001, 0x3ff]}, ["", "", "", "", "", "", "", ""]}, 0x420}, 0x1, 0x0, 0x0, 0x4002810}, 0x20000000) 0s ago: executing program 0 (id=9283): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000020000001400018005000200"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0x2710}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x25, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_fd={0x18, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x93, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xd, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)=[{0x4, 0x3, 0x10, 0x4}, {0x4, 0x1, 0xf, 0x4}, {0x5, 0x3, 0x6}, {0x2, 0x5, 0x6, 0x2}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='kvm_test_age_hva\x00', r8, 0x0, 0x30}, 0x18) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000000000000850000001d00000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0xa4, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_MASTER={0x0, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x21}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xa4}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', r11, 0x4, 0xf4, 0x4, 0x7, 0x28, @loopback, @mcast1, 0x7800, 0x8000, 0xffffff67}}) kernel console output (not intermixed with test programs): 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 650.651567][T27113] RSP: 002b:00007ffe29450250 EFLAGS: 00010293 [ 650.651586][T27113] RAX: 0000000000000000 RBX: 0000000000000213 RCX: 00007f8668bc2005 [ 650.651601][T27113] RDX: 00007ffe29450290 RSI: 0000000000000000 RDI: 0000000000000000 [ 650.651614][T27113] RBP: 00007ffe294502fc R08: 0000000000000000 R09: 0000000000000000 [ 650.651627][T27113] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 650.651640][T27113] R13: 00000000000927c0 R14: 000000000009e82e R15: 00007ffe29450350 [ 650.651673][T27113] [ 650.652846][T27113] memory: usage 306420kB, limit 307200kB, failcnt 469 [ 650.912068][T30231] netlink: 'syz.2.6943': attribute type 1 has an invalid length. [ 651.013885][T30231] netlink: 'syz.2.6943': attribute type 2 has an invalid length. [ 651.153389][T27113] memory+swap: usage 273092kB, limit 9007199254740988kB, failcnt 0 [ 651.191812][T27113] kmem: usage 270220kB, limit 9007199254740988kB, failcnt 0 [ 651.225038][T27113] Memory cgroup stats for /syz3: [ 651.225516][T27113] cache 0 [ 651.266510][T27113] rss 0 [ 651.271855][T27113] rss_huge 0 [ 651.289620][T27113] shmem 0 [ 651.292595][T27113] mapped_file 0 [ 651.319962][T27113] dirty 0 [ 651.322938][T27113] writeback 0 [ 651.358496][T27113] workingset_refault_anon 0 [ 651.376316][T27113] workingset_refault_file 0 [ 651.394858][T27113] swap 217088 [ 651.401647][T27113] swapcached 0 [ 651.434558][T27113] pgpgin 98267 [ 651.487254][T27113] pgpgout 98267 [ 651.522038][T27113] pgfault 221590 [ 651.522763][T30257] netlink: 'syz.4.6951': attribute type 1 has an invalid length. [ 651.525617][T27113] pgmajfault 2 [ 651.585776][T30257] 8021q: adding VLAN 0 to HW filter on device bond3 [ 651.588382][T27113] inactive_anon 0 [ 651.607068][T30257] vlan2: entered allmulticast mode [ 651.612489][T30257] bond3: entered allmulticast mode [ 651.631702][T30257] bond3: (slave gretap0): making interface the new active one [ 651.636924][T27113] active_anon 0 [ 651.639336][T30257] gretap0: entered allmulticast mode [ 651.649688][T30257] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 651.662712][T27113] inactive_file 0 [ 651.680200][T27113] active_file 0 [ 651.712592][T27113] unevictable 0 [ 651.722850][T27113] hierarchical_memory_limit 314572800 [ 651.741538][T27113] hierarchical_memsw_limit 9223372036854771712 [ 651.750730][T27113] total_cache 0 [ 651.757541][T27113] total_rss 0 [ 651.761067][T27113] total_rss_huge 0 [ 651.764848][T27113] total_shmem 0 [ 651.769659][T27113] total_mapped_file 0 [ 651.775610][T27113] total_dirty 0 [ 651.779544][T27113] total_writeback 0 [ 651.783451][T27113] total_workingset_refault_anon 0 [ 651.815116][T27113] total_workingset_refault_file 0 [ 651.820904][T27113] total_swap 217088 [ 651.855233][T27113] total_swapcached 0 [ 651.878342][T27113] total_pgpgin 98270 [ 651.891127][T27113] total_pgpgout 98270 [ 651.911783][T27113] total_pgfault 221608 [ 651.931372][T27113] total_pgmajfault 2 [ 651.951424][T27113] total_inactive_anon 0 [ 651.970371][T27113] total_active_anon 0 [ 651.989878][T27113] total_inactive_file 0 [ 652.007819][T27113] total_active_file 0 [ 652.025389][T27113] total_unevictable 0 [ 652.041341][T27113] anon_cost 0 [ 652.049132][T27113] file_cost 0 [ 652.055776][T27113] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6910,pid=30135,uid=0 [ 652.075354][T27113] Memory cgroup out of memory: Killed process 30136 (syz.3.6910) total-vm:102092kB, anon-rss:1140kB, file-rss:22624kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 652.396857][T30298] netlink: 'syz.0.6963': attribute type 21 has an invalid length. [ 653.276664][T30348] netlink: 'syz.2.6974': attribute type 11 has an invalid length. [ 653.415863][T30350] __nla_validate_parse: 9 callbacks suppressed [ 653.415883][T30350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6975'. [ 653.491655][T30332] infiniband sy: set down [ 653.496222][T30332] infiniband sy: added bond_slave_0 [ 653.506519][T30350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6975'. [ 653.614525][T30332] RDS/IB: sy: added [ 653.624215][T30350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6975'. [ 653.641399][T30332] smc: adding ib device sy with port count 1 [ 653.647604][T30332] smc: ib device sy port 1 has no pnetid [ 653.676899][T30350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6975'. [ 653.938345][T30373] netlink: 'syz.1.6980': attribute type 11 has an invalid length. [ 653.969143][T30372] netlink: 'syz.1.6980': attribute type 11 has an invalid length. [ 654.189680][ T33] oom_reaper: reaped process 30136 (syz.3.6910), now anon-rss:0kB, file-rss:21556kB, shmem-rss:0kB [ 654.261945][T30385] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000 [ 654.604147][T30408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6988'. [ 654.613567][T30408] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 654.781252][T30419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6992'. [ 654.811089][T30419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6992'. [ 654.827742][T30419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6992'. [ 654.837988][T30419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6992'. [ 655.082815][T30433] sctp: [Deprecated]: syz.3.6997 (pid 30433) Use of struct sctp_assoc_value in delayed_ack socket option. [ 655.082815][T30433] Use struct sctp_sack_info instead [ 655.251040][T30443] netlink: 'syz.1.6999': attribute type 21 has an invalid length. [ 655.264805][T30439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6998'. [ 655.465740][T30451] macvtap1: entered promiscuous mode [ 655.472292][T30451] macvtap1: entered allmulticast mode [ 655.487271][T30451] veth1_vlan: entered allmulticast mode [ 655.497548][T30449] netlink: 'syz.1.7001': attribute type 1 has an invalid length. [ 655.517522][T30451] macvtap2: entered promiscuous mode [ 655.525303][T30449] nbd: nbd1 already in use [ 655.531045][T30451] macvtap2: entered allmulticast mode [ 655.574937][T30418] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 655.598363][T30418] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 655.735770][T30461] syzkaller0: entered promiscuous mode [ 655.741772][T30461] syzkaller0: entered allmulticast mode [ 656.161725][T30495] syzkaller1: entered promiscuous mode [ 656.184866][T30495] syzkaller1: entered allmulticast mode [ 656.468656][T30513] netlink: 'syz.0.7016': attribute type 9 has an invalid length. [ 656.991742][T30539] netlink: 'syz.2.7022': attribute type 1 has an invalid length. [ 657.427933][T30556] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 657.627842][T30565] netlink: 'syz.1.7032': attribute type 63 has an invalid length. [ 658.031816][T30583] batman_adv: batadv0: Adding interface: veth5 [ 658.046517][T30583] batman_adv: batadv0: The MTU of interface veth5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.114199][T30583] batman_adv: batadv0: Interface activated: veth5 [ 658.436255][T30616] __nla_validate_parse: 10 callbacks suppressed [ 658.436275][T30616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7042'. [ 658.669558][T30630] netlink: 'syz.3.7045': attribute type 4 has an invalid length. [ 658.697604][T30628] netlink: 'syz.3.7045': attribute type 4 has an invalid length. [ 658.709479][T30627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7045'. [ 658.716074][T30633] syzkaller0: entered promiscuous mode [ 658.730715][T30633] syzkaller0: entered allmulticast mode [ 658.740714][T30635] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7048'. [ 658.743577][T30633] netlink: 488 bytes leftover after parsing attributes in process `syz.2.7046'. [ 658.786020][T30635] netlink: 35 bytes leftover after parsing attributes in process `syz.1.7048'. [ 658.792581][T30637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7048'. [ 658.815807][T30637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7048'. [ 658.859170][T30635] netlink: 'syz.1.7048': attribute type 5 has an invalid length. [ 658.889533][T30635] netlink: 'syz.1.7048': attribute type 6 has an invalid length. [ 658.913431][T30635] netlink: 35 bytes leftover after parsing attributes in process `syz.1.7048'. [ 659.218690][T30649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7051'. [ 659.286995][T30656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7051'. [ 659.472686][T30661] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 659.972478][T30686] netlink: 'syz.1.7062': attribute type 10 has an invalid length. [ 659.972490][T30687] mac80211_hwsim hwsim69 wlan1: left allmulticast mode [ 659.978685][T30687] mac80211_hwsim hwsim69 wlan1: entered allmulticast mode [ 660.020045][T30687] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 660.045153][T30692] macvlan0: entered promiscuous mode [ 660.055241][T30692] macvlan0: left allmulticast mode [ 660.062826][T30691] smc: net device gre0 applied user defined pnetid SYZ1 [ 660.075909][T30691] smc: net device gre0 erased user defined pnetid SYZ1 [ 660.827897][T30723] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 661.147886][T30746] dvmrp0: entered allmulticast mode [ 661.176194][T30749] validate_nla: 1 callbacks suppressed [ 661.176213][T30749] netlink: 'syz.4.7082': attribute type 10 has an invalid length. [ 661.420323][T30760] netlink: 'syz.0.7086': attribute type 29 has an invalid length. [ 661.452310][T30760] netlink: 'syz.0.7086': attribute type 29 has an invalid length. [ 661.587185][T30766] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 662.325545][T30805] ipvlan2: entered promiscuous mode [ 662.765963][T30837] veth0: entered promiscuous mode [ 662.862461][T30836] veth0: left promiscuous mode [ 662.892681][T30840] bond0: entered promiscuous mode [ 662.910831][T30847] netlink: 'syz.0.7111': attribute type 21 has an invalid length. [ 662.920103][T30840] bond_slave_0: entered promiscuous mode [ 662.929286][T30840] batadv0: entered promiscuous mode [ 662.947946][T30840] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 662.958701][T30840] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 662.970556][T30840] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 663.157917][T30863] ip6gre1: entered allmulticast mode [ 663.177594][T30863] xt_l2tp: wrong L2TP version: 0 [ 663.183160][T30859] netlink: 'syz.1.7115': attribute type 4 has an invalid length. [ 663.281894][T30872] netlink: 'syz.0.7118': attribute type 30 has an invalid length. [ 663.292874][T30872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 663.334206][T30877] netlink: 'syz.4.7121': attribute type 1 has an invalid length. [ 663.345409][T30876] x_tables: duplicate underflow at hook 1 [ 663.352938][T30877] netlink: 'syz.4.7121': attribute type 58 has an invalid length. [ 663.361878][T30878] xt_l2tp: invalid flags combination: 0 [ 663.383635][T30879] netlink: 'syz.3.7119': attribute type 21 has an invalid length. [ 663.383635][T30878] netlink: 'syz.3.7119': attribute type 21 has an invalid length. [ 663.530546][T30892] __nla_validate_parse: 19 callbacks suppressed [ 663.530566][T30892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7126'. [ 663.534626][ T5844] Bluetooth: hci0: command 0x0c20 tx timeout [ 663.554344][T30893] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7126'. [ 663.603372][T30892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7126'. [ 663.650794][T30895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 663.660504][T30892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7126'. [ 663.683564][T30893] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7126'. [ 663.723244][T30895] bond1: (slave veth5): Enslaving as an active interface with a down link [ 663.747850][T30892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7126'. [ 663.774969][T30909] bond1: (slave veth0_to_bond): making interface the new active one [ 663.791611][T30893] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7126'. [ 663.795355][T30909] veth0_to_bond: entered promiscuous mode [ 663.813622][T30909] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 663.828807][T30892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7126'. [ 663.864096][T30893] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7126'. [ 663.873891][T30911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7131'. [ 663.902034][T30895] bond1: entered promiscuous mode [ 663.910960][T30895] bond1: entered allmulticast mode [ 663.918141][T30895] veth0_to_bond: entered allmulticast mode [ 664.149227][T30927] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 664.193973][T30935] wg1 speed is unknown, defaulting to 1000 [ 664.222999][T30935] wg1 speed is unknown, defaulting to 1000 [ 664.233812][T30935] wg1 speed is unknown, defaulting to 1000 [ 664.289876][T30935] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 664.326329][T30935] wg1 speed is unknown, defaulting to 1000 [ 664.348139][T30937] tipc: Enabling of bearer rejected, failed to enable media [ 664.365485][T30935] wg1 speed is unknown, defaulting to 1000 [ 664.388800][T30935] wg1 speed is unknown, defaulting to 1000 [ 664.458461][T30935] wg1 speed is unknown, defaulting to 1000 [ 664.481131][T30935] wg1 speed is unknown, defaulting to 1000 [ 664.510385][T30935] wg1 speed is unknown, defaulting to 1000 [ 664.521394][T30935] wg1 speed is unknown, defaulting to 1000 [ 664.538724][T30935] wg1 speed is unknown, defaulting to 1000 [ 664.546352][T30935] wg1 speed is unknown, defaulting to 1000 [ 664.876133][T30982] syzkaller0: entered promiscuous mode [ 664.881860][T30982] syzkaller0: entered allmulticast mode [ 664.895485][T30980] xt_hashlimit: size too large, truncated to 1048576 [ 664.950498][T30985] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 665.808843][T31045] pim6reg1: entered promiscuous mode [ 665.814493][T31045] pim6reg1: entered allmulticast mode [ 665.932222][T31048] Cannot find add_set index 65532 as target [ 665.949723][T31054] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 665.974874][T31048] IPVS: set_ctl: invalid protocol: 98 172.30.0.1:20002 [ 665.992740][T31059] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 666.029514][T28716] IPVS: starting estimator thread 0... [ 666.116822][T31066] IPVS: using max 31 ests per chain, 74400 per kthread [ 666.507566][T31107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.604749][T31116] openvswitch: netlink: Actions may not be safe on all matching packets [ 666.882829][T31132] veth0_macvtap: left promiscuous mode [ 666.981440][T31137] pim6reg: left allmulticast mode [ 667.191099][T31147] ipt_ECN: cannot use operation on non-tcp rule [ 667.472216][T31162] validate_nla: 135 callbacks suppressed [ 667.472235][T31162] netlink: 'syz.4.7208': attribute type 3 has an invalid length. [ 667.691077][T31180] netlink: 'syz.2.7215': attribute type 2 has an invalid length. [ 667.727401][T31184] netlink: 'syz.2.7215': attribute type 2 has an invalid length. [ 668.701912][T31253] __nla_validate_parse: 147 callbacks suppressed [ 668.701933][T31253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7231'. [ 668.779669][T31256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7233'. [ 668.839797][T31263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7235'. [ 668.919539][T31263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7235'. [ 669.022297][T31277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7241'. [ 669.041429][T31274] syzkaller1: entered promiscuous mode [ 669.049783][T31274] syzkaller1: entered allmulticast mode [ 669.097378][T31286] netlink: 216 bytes leftover after parsing attributes in process `syz.2.7243'. [ 669.109426][T31286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7243'. [ 669.124213][T31284] syzkaller0: entered promiscuous mode [ 669.132245][T31284] syzkaller0: entered allmulticast mode [ 669.232770][T31288] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7244'. [ 669.254182][T31292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7246'. [ 669.335583][T31295] netlink: 'syz.3.7247': attribute type 1 has an invalid length. [ 669.381641][T31299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7248'. [ 669.424153][T31299] bond0: entered promiscuous mode [ 669.435720][T31299] bond_slave_0: entered promiscuous mode [ 669.457428][T31299] bond_slave_1: entered promiscuous mode [ 669.482846][T31307] sctp: [Deprecated]: syz.2.7248 (pid 31307) Use of int in max_burst socket option. [ 669.482846][T31307] Use struct sctp_assoc_value instead [ 669.505694][T31299] mac80211_hwsim hwsim75 wlan1: entered promiscuous mode [ 669.517992][T31299] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 669.535267][T31299] bond0: left promiscuous mode [ 669.553077][T31299] bond_slave_0: left promiscuous mode [ 669.560362][T31299] bond_slave_1: left promiscuous mode [ 669.566153][T31299] mac80211_hwsim hwsim75 wlan1: left promiscuous mode [ 669.568230][T31314] netlink: 'syz.3.7251': attribute type 16 has an invalid length. [ 669.574504][T31299] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 669.590809][T31314] netlink: 'syz.3.7251': attribute type 3 has an invalid length. [ 669.857317][ T31] audit: type=1800 audit(1767427900.433:11): pid=31312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7250" name="memory.events" dev="tmpfs" ino=1507 res=0 errno=0 [ 670.879817][T31398] netlink: 'syz.3.7274': attribute type 12 has an invalid length. [ 670.895490][T31405] team0: Cannot enslave team device to itself [ 670.943962][T31403] ip6gretap1: entered allmulticast mode [ 670.954253][T31403] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 670.984508][T31404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 671.004187][T31407] netlink: 'syz.3.7278': attribute type 3 has an invalid length. [ 671.012908][T31407] netlink: 'syz.3.7278': attribute type 1 has an invalid length. [ 671.103314][T31404] syzkaller0: entered promiscuous mode [ 671.117373][T31404] syzkaller0: entered allmulticast mode [ 672.748514][T31439] netlink: 'syz.2.7288': attribute type 5 has an invalid length. [ 672.841581][T31444] netlink: 'syz.0.7290': attribute type 1 has an invalid length. [ 672.884493][T31448] netlink: 'syz.2.7292': attribute type 1 has an invalid length. [ 672.900266][T31445] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.979599][T31453] gretap3: entered promiscuous mode [ 673.006153][T31447] lo: left promiscuous mode [ 673.011358][T31447] tunl0: left allmulticast mode [ 673.025831][T31447] gre0: left allmulticast mode [ 673.046148][T31447] gretap0: left allmulticast mode [ 673.055259][T31447] erspan0: left allmulticast mode [ 673.061305][T31447] ip_vti0: left allmulticast mode [ 673.067474][T31447] ip6_vti0: left allmulticast mode [ 673.072822][T31447] sit0: left allmulticast mode [ 673.077948][T31447] ip6tnl0: left allmulticast mode [ 673.083180][T31447] ip6gre0: left allmulticast mode [ 673.088908][T31447] syz_tun: left allmulticast mode [ 673.094505][T31447] ip6gretap0: left allmulticast mode [ 673.100778][T31447] bridge0: left allmulticast mode [ 673.107430][T31447] bond0: left allmulticast mode [ 673.119779][T31468] netlink: 'syz.2.7296': attribute type 4 has an invalid length. [ 673.130105][T31447] mac80211_hwsim hwsim69 wlan1: left allmulticast mode [ 673.137890][T31447] ip6gretap1: left allmulticast mode [ 673.143811][T31447] team0: left allmulticast mode [ 673.149567][T31447] dummy0: left allmulticast mode [ 673.154668][T31447] nlmon0: left allmulticast mode [ 673.166860][T31447] caif0: left allmulticast mode [ 673.172654][T31447] vxcan0: left allmulticast mode [ 673.179302][T31447] vxcan1: left allmulticast mode [ 673.184488][T31447] veth0: left allmulticast mode [ 673.187935][T31472] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 673.190623][T31447] veth1: left allmulticast mode [ 673.202247][T31447] wg0: left allmulticast mode [ 673.217760][T31447] wg1: left allmulticast mode [ 673.222915][T31447] veth0_to_bridge: left allmulticast mode [ 673.229577][T31447] veth1_to_bridge: left allmulticast mode [ 673.235718][T31447] veth0_to_bond: left allmulticast mode [ 673.242585][T31447] bond_slave_0: left allmulticast mode [ 673.248542][T31447] veth1_to_bond: left allmulticast mode [ 673.254491][T31447] bond_slave_1: left allmulticast mode [ 673.263551][T31447] veth0_to_team: left allmulticast mode [ 673.271203][T31447] team_slave_0: left allmulticast mode [ 673.278287][T31447] veth1_to_team: left allmulticast mode [ 673.284289][T31447] team_slave_1: left allmulticast mode [ 673.291944][T31447] veth0_to_batadv: left allmulticast mode [ 673.298333][T31447] batadv_slave_0: left allmulticast mode [ 673.304320][T31447] veth1_to_batadv: left allmulticast mode [ 673.311877][T31447] batadv_slave_1: left allmulticast mode [ 673.318021][T31447] xfrm0: left allmulticast mode [ 673.323327][T31447] veth0_to_hsr: left allmulticast mode [ 673.329438][T31447] veth1_to_hsr: left allmulticast mode [ 673.335325][T31447] hsr0: left allmulticast mode [ 673.341194][T31447] hsr_slave_0: left allmulticast mode [ 673.346856][T31447] hsr_slave_1: left allmulticast mode [ 673.352481][T31447] veth1_virt_wifi: left allmulticast mode [ 673.358673][T31447] veth0_virt_wifi: left allmulticast mode [ 673.364639][T31447] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 673.374392][T31447] veth1_vlan: left allmulticast mode [ 673.380285][T31447] vlan0: left allmulticast mode [ 673.385447][T31447] vlan1: left allmulticast mode [ 673.391287][T31447] macvlan0: left promiscuous mode [ 673.399722][T31447] macvlan1: left allmulticast mode [ 673.405081][T31447] ipvlan0: left allmulticast mode [ 673.410726][T31447] ipvlan1: left allmulticast mode [ 673.415841][T31447] veth0_vlan: left allmulticast mode [ 673.421566][T31447] geneve0: left allmulticast mode [ 673.427214][T31447] geneve1: left allmulticast mode [ 673.432365][T31447] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 673.439723][T31447] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 673.447243][T31447] netdevsim netdevsim1 netdevsim2: left allmulticast mode [ 673.454455][T31447] mac80211_hwsim hwsim68 wlan0: left allmulticast mode [ 673.472851][T31447] batman_adv: batadv0: Interface deactivated: veth3 [ 673.484876][T31447] gtp0: left promiscuous mode [ 673.490188][T31447] gtp0: left allmulticast mode [ 673.540098][T21145] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.621688][T31445] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.677960][T21145] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.732671][T31487] __nla_validate_parse: 16 callbacks suppressed [ 673.732692][T31487] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7299'. [ 673.831224][T24772] hid-generic 0005:04F3:5505.0004: item fetching failed at offset 0/1 [ 673.844681][T24772] hid-generic 0005:04F3:5505.0004: probe with driver hid-generic failed with error -22 [ 673.958960][T31502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7304'. [ 674.089382][T31517] pim6reg1: entered promiscuous mode [ 674.106561][T31517] pim6reg1: entered allmulticast mode [ 674.254773][T31529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.279703][T31529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7313'. [ 674.293483][T31529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7313'. [ 674.296058][T31530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7312'. [ 674.429108][T31538] netlink: 'syz.3.7316': attribute type 2 has an invalid length. [ 674.509371][T31544] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 674.577772][T31547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7319'. [ 674.800024][T31563] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7322'. [ 674.830885][T31563] syzkaller1: entered promiscuous mode [ 674.849800][T31563] syzkaller1: entered allmulticast mode [ 675.068371][T31575] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7324'. [ 675.374201][T31595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7330'. [ 675.425721][T31599] pimreg3: entered allmulticast mode [ 675.431403][T31598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7331'. [ 675.720311][T31618] xt_bpf: check failed: parse error [ 676.308123][T31637] netlink: 'syz.4.7341': attribute type 1 has an invalid length. [ 676.402075][T31623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.434416][T31623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.461198][T31623] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 676.479546][T31623] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 676.492217][T31623] bond0 (unregistering): Released all slaves [ 676.533857][T31629] xfrm1: entered promiscuous mode [ 676.539318][T31629] xfrm1: entered allmulticast mode [ 676.594006][T31644] bond4: (slave bridge4): making interface the new active one [ 676.602520][T31644] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 676.754597][T31645] syzkaller0: entered promiscuous mode [ 676.769024][T31645] syzkaller0: entered allmulticast mode [ 678.891073][T31714] __nla_validate_parse: 8 callbacks suppressed [ 678.891095][T31714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7357'. [ 678.963699][T31716] Cannot find add_set index 2 as target [ 679.007212][T31714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7357'. [ 679.039175][T31724] bridge0: port 3(batadv1) entered blocking state [ 679.046878][T31724] bridge0: port 3(batadv1) entered disabled state [ 679.054864][T31724] batadv1: entered allmulticast mode [ 679.063206][T31724] batadv1: entered promiscuous mode [ 679.072975][T31721] bpq0: entered allmulticast mode [ 679.108710][T31726] bridge0: port 4(batadv2) entered blocking state [ 679.129624][T31726] bridge0: port 4(batadv2) entered disabled state [ 679.138454][T31726] batadv2: entered allmulticast mode [ 679.145819][T31726] batadv2: entered promiscuous mode [ 679.281118][T31739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7364'. [ 679.292646][T31714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.533543][T31753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7370'. [ 679.536646][ T3552] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 679.552348][ T3552] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 679.586794][ T66] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 679.596081][ T66] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 679.607451][T31753] netlink: 'syz.4.7370': attribute type 2 has an invalid length. [ 679.700184][T31757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7372'. [ 679.809364][T31767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7374'. [ 679.911570][T31773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7379'. [ 679.915377][T31769] netlink: 'syz.0.7376': attribute type 83 has an invalid length. [ 679.928805][T31771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7377'. [ 680.125538][T31787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7384'. [ 680.304518][T31801] netlink: 'syz.3.7386': attribute type 9 has an invalid length. [ 680.355625][T31801] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 680.480162][T31816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7391'. [ 680.594282][T31828] tipc: Cannot configure node identity twice [ 680.755762][T31844] netlink: 'syz.3.7401': attribute type 15 has an invalid length. [ 680.787734][T31844] netlink: 'syz.3.7401': attribute type 15 has an invalid length. [ 680.883512][T31855] ip6tnl3: entered promiscuous mode [ 681.243857][T31885] netlink: 'syz.1.7413': attribute type 1 has an invalid length. [ 681.304906][T31888] netlink: 'syz.4.7414': attribute type 2 has an invalid length. [ 681.398960][T31896] batadv0: mtu greater than device maximum [ 681.604803][T31904] ip6gre1: entered promiscuous mode [ 681.735628][T31911] sctp: [Deprecated]: syz.1.7423 (pid 31911) Use of struct sctp_assoc_value in delayed_ack socket option. [ 681.735628][T31911] Use struct sctp_sack_info instead [ 681.755351][T31912] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 681.783890][T31912] veth0: entered promiscuous mode [ 681.784872][T31916] netlink: 'syz.0.7425': attribute type 1 has an invalid length. [ 681.878699][T31916] bond6: (slave gretap4): making interface the new active one [ 681.888301][T31916] bond6: (slave gretap4): Enslaving as an active interface with an up link [ 681.982608][T31909] veth0: left promiscuous mode [ 682.187890][T31928] IPVS: Unknown mcast interface: ip6erspan0 [ 682.203192][T31928] bridge0: port 3(batadv1) entered blocking state [ 682.215100][T31928] bridge0: port 3(batadv1) entered disabled state [ 682.222580][T31928] batadv1: entered allmulticast mode [ 682.231002][T31928] batadv1: entered promiscuous mode [ 682.407587][T31949] team_slave_0: entered promiscuous mode [ 682.413528][T31949] team_slave_0: entered allmulticast mode [ 682.642656][T31977] x_tables: duplicate underflow at hook 1 [ 682.696593][ T6212] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 682.705922][ T6212] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 683.522880][T32002] xt_hashlimit: size too large, truncated to 1048576 [ 683.587867][T32010] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 683.617718][T32013] netem: invalid attributes len -24 [ 683.623213][T32013] netem: change failed [ 683.776725][T32015] syzkaller0: entered promiscuous mode [ 683.785009][T32015] syzkaller0: entered allmulticast mode [ 684.010126][T32036] __nla_validate_parse: 24 callbacks suppressed [ 684.010145][T32036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7458'. [ 684.012851][T32038] xt_ecn: cannot match TCP bits for non-tcp packets [ 684.039792][T32034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7458'. [ 684.067328][T32034] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 684.126251][T32040] netlink: 'syz.0.7460': attribute type 5 has an invalid length. [ 684.150415][T32046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7459'. [ 684.407289][T32066] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7466'. [ 684.474180][T32071] syz.1.7469: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 684.493833][T32071] CPU: 0 UID: 0 PID: 32071 Comm: syz.1.7469 Not tainted syzkaller #0 PREEMPT(full) [ 684.493862][T32071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 684.493875][T32071] Call Trace: [ 684.493883][T32071] [ 684.493892][T32071] dump_stack_lvl+0xe8/0x150 [ 684.493923][T32071] warn_alloc+0x214/0x310 [ 684.493947][T32071] ? stack_trace_save+0x9c/0xe0 [ 684.493980][T32071] ? __pfx_warn_alloc+0x10/0x10 [ 684.494008][T32071] ? kasan_save_track+0x4f/0x80 [ 684.494026][T32071] ? kasan_save_track+0x3e/0x80 [ 684.494043][T32071] ? __kasan_kmalloc+0x93/0xb0 [ 684.494062][T32071] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 684.494080][T32071] ? xskq_create+0x56/0x170 [ 684.494108][T32071] ? xsk_setsockopt+0x4dc/0x8d0 [ 684.494133][T32071] ? do_sock_setsockopt+0x17c/0x1b0 [ 684.494152][T32071] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 684.494173][T32071] ? do_syscall_64+0xec/0xf80 [ 684.494205][T32071] __vmalloc_node_range_noprof+0x134/0x16a0 [ 684.494258][T32071] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 684.494285][T32071] ? __kasan_kmalloc+0x93/0xb0 [ 684.494313][T32071] vmalloc_user_noprof+0xad/0xf0 [ 684.494334][T32071] ? xskq_create+0xbf/0x170 [ 684.494363][T32071] xskq_create+0xbf/0x170 [ 684.494392][T32071] xsk_init_queue+0xb0/0x110 [ 684.494423][T32071] xsk_setsockopt+0x4dc/0x8d0 [ 684.494450][T32071] ? __pfx_xsk_setsockopt+0x10/0x10 [ 684.494478][T32071] ? __pfx_aa_sk_perm+0x10/0x10 [ 684.494503][T32071] ? aa_sock_opt_perm+0xff/0x1a0 [ 684.494530][T32071] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 684.494547][T32071] ? __pfx_xsk_setsockopt+0x10/0x10 [ 684.494575][T32071] do_sock_setsockopt+0x17c/0x1b0 [ 684.494602][T32071] __x64_sys_setsockopt+0x13f/0x1b0 [ 684.494630][T32071] do_syscall_64+0xec/0xf80 [ 684.494651][T32071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.494669][T32071] ? trace_irq_disable+0x37/0x100 [ 684.494694][T32071] ? clear_bhb_loop+0x60/0xb0 [ 684.494717][T32071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.494735][T32071] RIP: 0033:0x7ff2e918f749 [ 684.494754][T32071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.494772][T32071] RSP: 002b:00007ff2ea0d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 684.494794][T32071] RAX: ffffffffffffffda RBX: 00007ff2e93e5fa0 RCX: 00007ff2e918f749 [ 684.494809][T32071] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 684.494821][T32071] RBP: 00007ff2e9213f91 R08: 0000000000000004 R09: 0000000000000000 [ 684.494834][T32071] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.494847][T32071] R13: 00007ff2e93e6038 R14: 00007ff2e93e5fa0 R15: 00007ffffe922298 [ 684.494881][T32071] [ 684.765475][T32071] Mem-Info: [ 684.768671][T32071] active_anon:3957 inactive_anon:0 isolated_anon:0 [ 684.768671][T32071] active_file:3020 inactive_file:40107 isolated_file:0 [ 684.768671][T32071] unevictable:768 dirty:75 writeback:0 [ 684.768671][T32071] slab_reclaimable:13704 slab_unreclaimable:133319 [ 684.768671][T32071] mapped:29071 shmem:1358 pagetables:1507 [ 684.768671][T32071] sec_pagetables:0 bounce:0 [ 684.768671][T32071] kernel_misc_reclaimable:0 [ 684.768671][T32071] free:1283539 free_pcp:14240 free_cma:0 [ 684.814817][T32071] Node 0 active_anon:15828kB inactive_anon:0kB active_file:12080kB inactive_file:160224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87612kB dirty:300kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15836kB pagetables:5864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 684.847114][T32071] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28672kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 684.877973][T32071] Node 0 DMA free:11264kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 684.909223][T32071] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 684.915023][T32071] Node 0 DMA32 free:1304968kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15828kB inactive_anon:0kB active_file:12080kB inactive_file:160224kB unevictable:1536kB writepending:300kB zspages:0kB present:3129332kB managed:2559516kB mlocked:0kB bounce:0kB free_pcp:38348kB local_pcp:19484kB free_cma:0kB [ 684.949010][T32071] lowmem_reserve[]: 0 0 1 1 1 [ 684.953786][T32071] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 684.953950][T32077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.984227][T32071] lowmem_reserve[]: 0 0 0 0 0 [ 685.004229][T32071] Node 1 Normal free:3817924kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18896kB local_pcp:11584kB free_cma:0kB [ 685.037653][T32071] lowmem_reserve[]: 0 0 0 0 0 [ 685.042406][T32071] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 685.056270][T32071] Node 0 DMA32: 10706*4kB (UME) 7166*8kB (UME) 3163*16kB (UME) 655*32kB (UME) 1052*64kB (UME) 797*128kB (UME) 709*256kB (UME) 564*512kB (UM) 346*1024kB (UME) 48*2048kB (UM) 10*4096kB (UM) = 1304904kB [ 685.077063][T32071] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 685.088773][T32071] Node 1 Normal: 187*4kB (UE) 49*8kB (UME) 41*16kB (UME) 124*32kB (UME) 29*64kB (UME) 10*128kB (UME) 5*256kB (UME) 5*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 928*4096kB (M) = 3817924kB [ 685.137460][T32071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 685.172223][T32081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7471'. [ 685.195837][T32071] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 685.247633][T32083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7472'. [ 685.273627][T32071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 685.304018][T32094] netlink: 'syz.3.7475': attribute type 1 has an invalid length. [ 685.312204][T32089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7472'. [ 685.337701][T32071] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 685.378135][T32083] bond7: entered promiscuous mode [ 685.381600][T32071] 44482 total pagecache pages [ 685.399918][T32083] bond7: entered allmulticast mode [ 685.407528][T32083] 8021q: adding VLAN 0 to HW filter on device bond7 [ 685.418173][T32071] 0 pages in swap cache [ 685.422353][T32071] Free swap = 124996kB [ 685.448134][T32083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7472'. [ 685.451450][T32071] Total swap = 124996kB [ 685.466574][T32071] 2097051 pages RAM [ 685.470524][T32071] 0 pages HighMem/MovableOnly [ 685.475258][T32071] 425082 pages reserved [ 685.481405][T32071] 0 pages cma reserved [ 685.563788][T32107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7476'. [ 685.657712][T32083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7472'. [ 686.450406][T32176] ip6gre2: entered allmulticast mode [ 686.537243][T32183] siw: device registration error -23 [ 686.660335][T32196] netlink: 'syz.3.7504': attribute type 1 has an invalid length. [ 686.668697][T32196] netlink: 'syz.3.7504': attribute type 2 has an invalid length. [ 686.950548][T32218] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 686.970721][T32218] bond0 (unregistering): Released all slaves [ 687.183741][T32238] pim6reg: entered allmulticast mode [ 687.284403][T32245] lo: entered promiscuous mode [ 687.291919][T32245] tunl0: entered promiscuous mode [ 687.302239][T32245] gre0: entered promiscuous mode [ 687.307755][T32245] gretap0: entered promiscuous mode [ 687.313445][T32245] erspan0: entered promiscuous mode [ 687.318757][T32245] erspan0: left allmulticast mode [ 687.324295][T32245] ip_vti0: entered promiscuous mode [ 687.499854][T32258] ip6gre1: entered allmulticast mode [ 687.945383][T32287] netlink: 'syz.3.7532': attribute type 4 has an invalid length. [ 688.595290][T32322] IPVS: length: 4096 != 8 [ 689.159186][T32346] xt_TPROXY: Can be used only with -p tcp or -p udp [ 689.198336][T32348] __nla_validate_parse: 20 callbacks suppressed [ 689.198355][T32348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7551'. [ 689.225590][T32349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7551'. [ 689.333472][T32360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7554'. [ 689.350499][T32362] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 689.357001][T32362] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 689.367387][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 689.398147][T32357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7553'. [ 689.403916][T32362] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 689.413474][T32362] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 689.433294][T32362] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 689.439794][T32362] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 689.453638][T32362] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 689.460152][T32362] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 689.468641][T32362] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 689.475069][T32362] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 689.672516][T32375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7557'. [ 690.210770][T32410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7570'. [ 690.221620][T32412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7569'. [ 690.565485][T32402] wg1 speed is unknown, defaulting to 1000 [ 690.831448][T32441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7576'. [ 690.925038][T32441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7576'. [ 691.285672][T32469] netlink: 'syz.3.7586': attribute type 2 has an invalid length. [ 691.411749][T32482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7588'. [ 691.734982][T32493] syzkaller1: entered allmulticast mode [ 691.750586][T32494] netlink: 'syz.4.7595': attribute type 1 has an invalid length. [ 691.799032][T32498] netlink: 'syz.2.7594': attribute type 83 has an invalid length. [ 691.827706][T32494] bond5: entered promiscuous mode [ 691.837005][T32494] 8021q: adding VLAN 0 to HW filter on device bond5 [ 691.920610][T32494] bond5: (slave bridge5): making interface the new active one [ 691.955152][T32494] bridge5: entered promiscuous mode [ 691.963380][T32494] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 692.443636][T32537] syzkaller1: entered promiscuous mode [ 692.468175][T32537] syzkaller1: entered allmulticast mode [ 693.304951][T32603] netlink: 'syz.2.7629': attribute type 11 has an invalid length. [ 693.470067][T32618] nbd: must specify a device to reconfigure [ 693.476687][T32617] nbd: must specify a device to reconfigure [ 693.802319][T32634] block nbd7: Unsupported socket: should be TCP or UNIX. [ 694.076714][T32641] netlink: 'syz.0.7641': attribute type 11 has an invalid length. [ 694.121359][T32651] macvtap0: entered promiscuous mode [ 694.173988][T32651] macvtap0: entered allmulticast mode [ 694.208814][T32651] veth1_vlan: entered allmulticast mode [ 694.280175][T32666] set match dimension is over the limit! [ 694.299160][T32655] macvtap1: entered promiscuous mode [ 694.304694][T32655] macvtap1: entered allmulticast mode [ 694.363175][T32669] __nla_validate_parse: 17 callbacks suppressed [ 694.363194][T32669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7646'. [ 694.527718][T32687] net_ratelimit: 123 callbacks suppressed [ 694.527735][T32687] openvswitch: netlink: Invalid VLAN frame [ 694.532785][T32689] sctp: [Deprecated]: syz.0.7652 (pid 32689) Use of int in maxseg socket option. [ 694.532785][T32689] Use struct sctp_assoc_value instead [ 694.621146][T32696] netlink: 'syz.0.7655': attribute type 178 has an invalid length. [ 694.962381][T32728] netlink: 'syz.0.7660': attribute type 160 has an invalid length. [ 695.016852][T32728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7660'. [ 695.111060][T32737] netem: change failed [ 695.194200][T32741] syzkaller0: mtu greater than device maximum [ 695.390288][T32755] netlink: 'syz.2.7671': attribute type 1 has an invalid length. [ 696.930847][ T306] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7676'. [ 697.126137][ T317] netlink: 'syz.4.7679': attribute type 1 has an invalid length. [ 697.178311][ T323] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003 [ 697.237254][ T329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7684'. [ 697.390093][ T339] tipc: Enabling of bearer rejected, failed to enable media [ 697.418167][ T341] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7686'. [ 697.859404][ T375] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7693'. [ 697.897576][ T372] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7693'. [ 698.052392][ T393] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 698.312279][ T419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7707'. [ 698.590932][ T449] siw: device registration error -23 [ 698.826751][ T462] netlink: 'syz.0.7716': attribute type 1 has an invalid length. [ 698.853479][ T465] SET target dimension over the limit! [ 698.896890][ T462] 8021q: adding VLAN 0 to HW filter on device bond8 [ 698.945436][ T469] bond8: (slave geneve4): making interface the new active one [ 698.959318][ T469] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 698.971930][T10013] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 698.986294][ T472] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7718'. [ 699.002258][T10013] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 699.038492][T10013] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 699.055545][T10013] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 699.169356][ T477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7720'. [ 699.701898][ T511] __nla_validate_parse: 2 callbacks suppressed [ 699.701916][ T511] netlink: 332 bytes leftover after parsing attributes in process `syz.4.7727'. [ 699.720955][ T512] netlink: 332 bytes leftover after parsing attributes in process `syz.4.7727'. [ 699.851497][ T527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7733'. [ 699.864155][ T525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7731'. [ 699.872396][ T519] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 699.873157][ T525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7731'. [ 699.892750][ T529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7730'. [ 699.894558][ T519] bond5 (unregistering): Released all slaves [ 699.915355][ T529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7730'. [ 700.096846][ T535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7734'. [ 700.168770][ T535] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 700.176509][ T535] syzkaller1: Linktype set failed because interface is up [ 700.196779][T24775] syzkaller1: tun_net_xmit 90 [ 700.483863][ T557] netlink: 'syz.4.7739': attribute type 1 has an invalid length. [ 700.496677][ T557] netlink: 212 bytes leftover after parsing attributes in process `syz.4.7739'. [ 700.530795][ T557] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7739'. [ 700.772760][ T573] netlink: 'syz.2.7744': attribute type 1 has an invalid length. [ 700.792395][ T573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.942413][ T522] wg1 speed is unknown, defaulting to 1000 [ 701.118130][ T595] netlink: 'syz.1.7749': attribute type 2 has an invalid length. [ 701.223446][ T603] Unsupported ieee802154 address type: 0 [ 701.236987][ T604] Unsupported ieee802154 address type: 0 [ 701.254059][ T603] netlink: 'syz.4.7752': attribute type 12 has an invalid length. [ 701.351354][ T6539] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.374483][ T6539] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.400603][ T6539] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.442601][ T6539] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.803788][ T633] netlink: 'syz.4.7762': attribute type 19 has an invalid length. [ 702.191079][ T669] Bluetooth: MGMT ver 1.23 [ 702.882384][ T723] netlink: 'syz.3.7790': attribute type 1 has an invalid length. [ 702.893918][ T723] nbd: must specify at least one socket [ 702.932439][ T726] vlan0: entered promiscuous mode [ 702.946552][ T726] bridge0: entered promiscuous mode [ 702.988052][T10013] tipc: Subscription rejected, illegal request [ 703.239164][ T741] bond0: option lp_interval: invalid value (0) [ 703.245540][ T741] bond0: option lp_interval: allowed values 1 - 2147483647 [ 703.262688][ T741] bond0 (unregistering): Released all slaves [ 703.362191][ T755] netlink: 'syz.4.7800': attribute type 4 has an invalid length. [ 703.408896][ T755] netlink: 'syz.4.7800': attribute type 4 has an invalid length. [ 703.501715][ T766] sit0: entered promiscuous mode [ 703.614568][ T771] can: request_module (can-proto-0) failed. [ 703.641710][ T779] netlink: 'syz.0.7807': attribute type 1 has an invalid length. [ 703.642835][ T774] bond5: entered promiscuous mode [ 703.654875][ T774] bond5: entered allmulticast mode [ 703.657056][ T779] netlink: 'syz.0.7807': attribute type 3 has an invalid length. [ 703.661332][ T774] 8021q: adding VLAN 0 to HW filter on device bond5 [ 703.679200][ T779] IPVS: Error connecting to the multicast addr [ 703.686385][ T779] netlink: 'syz.0.7807': attribute type 6 has an invalid length. [ 703.835249][ T795] netlink: zone id is out of range [ 703.841821][ T795] netlink: zone id is out of range [ 703.852133][ T795] netlink: zone id is out of range [ 703.857589][ T795] netlink: zone id is out of range [ 703.862968][ T795] netlink: zone id is out of range [ 703.868533][ T795] netlink: zone id is out of range [ 703.878957][ T795] netlink: zone id is out of range [ 703.884714][ T795] netlink: set zone limit has 4 unknown bytes [ 704.249562][ T5844] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 704.256801][ T5838] Bluetooth: hci2: command 0x0405 tx timeout [ 704.497927][ T826] team0: Device gtp1 is up. Set it down before adding it as a team port [ 704.578047][ T819] wg1 speed is unknown, defaulting to 1000 [ 704.885825][ T848] sctp: [Deprecated]: syz.4.7823 (pid 848) Use of int in max_burst socket option deprecated. [ 704.885825][ T848] Use struct sctp_assoc_value instead [ 705.108409][ T852] __nla_validate_parse: 122 callbacks suppressed [ 705.108428][ T852] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.7825'. [ 705.136020][ T856] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7826'. [ 705.796021][ T888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7838'. [ 705.812861][ T890] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 705.823941][ T893] sctp: [Deprecated]: syz.0.7839 (pid 893) Use of int in maxseg socket option. [ 705.823941][ T893] Use struct sctp_assoc_value instead [ 705.830322][ T888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7838'. [ 705.980721][ T888] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7838'. [ 706.025318][ T901] tipc: Enabling of bearer rejected, failed to enable media [ 706.038015][ T901] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.7841'. [ 706.200471][ T916] tipc: Started in network mode [ 706.205629][ T916] tipc: Node identity ac14140f, cluster identity 4711 [ 706.213305][ T916] tipc: New replicast peer: 255.255.255.255 [ 706.233394][ T916] tipc: Enabled bearer , priority 10 [ 706.265270][ T921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7845'. [ 706.279920][ T920] syzkaller1: entered promiscuous mode [ 706.289627][ T920] syzkaller1: entered allmulticast mode [ 706.618822][ T940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7851'. [ 706.641104][ T946] xfrm2: entered allmulticast mode [ 706.752635][ T950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7854'. [ 707.017025][ T976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7859'. [ 707.350545][ T5947] tipc: Node number set to 2886997007 [ 707.735620][ T990] syzkaller0: entered promiscuous mode [ 707.741433][ T990] syzkaller0: entered allmulticast mode [ 708.760415][ T1064] syzkaller0: entered promiscuous mode [ 708.775883][ T1064] syzkaller0: entered allmulticast mode [ 708.845356][ T1068] hsr_slave_0 (unregistering): left promiscuous mode [ 708.966236][ T1085] syzkaller0: entered promiscuous mode [ 708.972784][ T1085] syzkaller0: entered allmulticast mode [ 709.179564][ T1101] netlink: 'syz.1.7892': attribute type 12 has an invalid length. [ 709.288518][ T1102] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 709.331452][ T1102] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 709.352467][ T1102] gretap2: entered promiscuous mode [ 709.376893][ T1102] gretap2: entered allmulticast mode [ 710.099808][ T1162] netlink: 'syz.0.7907': attribute type 1 has an invalid length. [ 710.216019][ T1169] __nla_validate_parse: 6 callbacks suppressed [ 710.216037][ T1169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7908'. [ 710.372851][ T1184] IPVS: length: 239 != 24 [ 710.559998][ T1200] tipc: New replicast peer: 255.255.255.255 [ 710.569318][ T1200] tipc: Enabled bearer , priority 10 [ 710.586570][ T1200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7914'. [ 710.813445][ T1212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7919'. [ 710.941085][ T1223] ip6erspan0: entered promiscuous mode [ 710.947284][ T1223] ip6erspan0: entered allmulticast mode [ 710.971715][ T1228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7925'. [ 711.028787][ T1230] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 711.225165][ T1246] bond3: invalid ARP target 0.0.0.0 specified for addition [ 711.233152][ T1246] bond3: option arp_ip_target: invalid value (0) [ 711.243255][ T1246] bond3 (unregistering): Released all slaves [ 711.328064][ T1249] bond6 (unregistering): Released all slaves [ 711.391290][ T1255] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7933'. [ 711.452039][ T1259] sctp: [Deprecated]: syz.2.7934 (pid 1259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 711.452039][ T1259] Use struct sctp_sack_info instead [ 711.644207][ T1275] netlink: 'syz.3.7938': attribute type 1 has an invalid length. [ 711.662311][ T1276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7938'. [ 711.748786][T24775] tipc: Node number set to 135296474 [ 711.750643][ T1276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7938'. [ 711.810424][ T1275] netlink: 'syz.3.7938': attribute type 1 has an invalid length. [ 711.855125][ T1280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7939'. [ 711.889908][ T1280] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.7939'. [ 711.902062][ T1275] netlink: 'syz.3.7938': attribute type 1 has an invalid length. [ 711.918170][ T1276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7938'. [ 711.961312][ T1275] netlink: 'syz.3.7938': attribute type 1 has an invalid length. [ 712.004408][ T1275] netlink: 'syz.3.7938': attribute type 1 has an invalid length. [ 712.020272][ T1275] netlink: 'syz.3.7938': attribute type 1 has an invalid length. [ 712.034585][ T1275] netlink: 'syz.3.7938': attribute type 1 has an invalid length. [ 712.046077][ T1275] netlink: 'syz.3.7938': attribute type 1 has an invalid length. [ 712.303135][ T1317] hsr_slave_1 (unregistering): left promiscuous mode [ 712.555157][ T1347] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 712.558052][ T1346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 712.582543][ T1344] sit0: left promiscuous mode [ 712.613562][ T1344] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 712.770405][T24775] hid-generic 0005:04F3:5505.0005: item fetching failed at offset 0/1 [ 712.813711][T24775] hid-generic 0005:04F3:5505.0005: probe with driver hid-generic failed with error -22 [ 713.405356][ T1407] vlan2: entered promiscuous mode [ 713.436802][ T1407] bridge0: entered promiscuous mode [ 713.960298][ T1447] sctp: [Deprecated]: syz.4.7980 (pid 1447) Use of int in maxseg socket option. [ 713.960298][ T1447] Use struct sctp_assoc_value instead [ 714.003055][ T1373] wg1 speed is unknown, defaulting to 1000 [ 714.285950][ T1469] siw: device registration error -23 [ 715.052441][ T1510] validate_nla: 59 callbacks suppressed [ 715.052460][ T1510] netlink: 'syz.3.7999': attribute type 8 has an invalid length. [ 715.198903][ T1518] gtp0: entered promiscuous mode [ 715.204770][ T1520] netlink: 'syz.1.8002': attribute type 16 has an invalid length. [ 715.222397][ T1518] gtp0: entered allmulticast mode [ 715.229291][ T1520] netlink: 'syz.1.8002': attribute type 17 has an invalid length. [ 715.246190][ T1524] gtp1: entered promiscuous mode [ 715.251583][ T1524] gtp1: entered allmulticast mode [ 715.264419][ T1530] __nla_validate_parse: 70 callbacks suppressed [ 715.264437][ T1530] netlink: 348 bytes leftover after parsing attributes in process `syz.2.8005'. [ 715.295702][ T1520] erspan0: entered promiscuous mode [ 715.383344][ T1520] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.407264][ T1535] xt_TPROXY: Can be used only with -p tcp or -p udp [ 715.431340][ T1520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 715.746892][ T1559] bond7: Removing last arp target with arp_interval on [ 716.163913][ T1608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8021'. [ 716.221362][ T1608] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8021'. [ 716.556027][ T1621] ipt_ECN: cannot use operation on non-tcp rule [ 716.583299][ T1618] ipt_ECN: cannot use operation on non-tcp rule [ 716.627326][ T1624] netlink: 'syz.0.8025': attribute type 1 has an invalid length. [ 716.724598][ T1624] bond11: entered promiscuous mode [ 716.736760][ T1624] bond11: entered allmulticast mode [ 716.742371][ T1624] 8021q: adding VLAN 0 to HW filter on device bond11 [ 716.748276][ T1629] netlink: 'syz.1.8028': attribute type 1 has an invalid length. [ 716.765782][ T1629] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8028'. [ 716.826710][ T1627] macvlan2: entered promiscuous mode [ 716.850677][ T1627] macvlan2: entered allmulticast mode [ 716.859323][ T1627] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 717.039484][ T1643] xt_addrtype: ipv6 does not support BROADCAST matching [ 717.211969][ T1652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8036'. [ 717.430441][ T1668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8041'. [ 717.664669][ T1689] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8049'. [ 717.687963][ T1690] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8049'. [ 717.716300][ T1693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8047'. [ 717.872529][ T1690] netlink: 212372 bytes leftover after parsing attributes in process `syz.4.8049'. [ 718.115746][ T1716] netlink: 'syz.4.8056': attribute type 21 has an invalid length. [ 718.147202][ T1719] sctp: [Deprecated]: syz.3.8057 (pid 1719) Use of int in maxseg socket option. [ 718.147202][ T1719] Use struct sctp_assoc_value instead [ 718.170770][ T1716] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 718.252652][ T1716] bond8 (unregistering): Released all slaves [ 718.485498][ T1721] netlink: 'syz.3.8058': attribute type 29 has an invalid length. [ 718.505155][ T1721] netlink: 'syz.3.8058': attribute type 29 has an invalid length. [ 718.629516][ T1741] netlink: 'syz.1.8065': attribute type 11 has an invalid length. [ 718.859141][ T1758] "syz.2.8071" (1758) uses obsolete ecb(arc4) skcipher [ 718.877131][ T1760] "syz.2.8071" (1760) uses obsolete ecb(arc4) skcipher [ 719.429901][ T1780] syzkaller0: entered promiscuous mode [ 719.435433][ T1780] syzkaller0: entered allmulticast mode [ 719.470547][ T1780] syzkaller0: tun_net_xmit 14 [ 719.494365][ T1787] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20002 [ 719.700996][ T1802] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 720.090625][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 720.144532][ T1824] vcan1: entered promiscuous mode [ 720.153977][ T1824] vcan1: entered allmulticast mode [ 720.570528][ T1855] __nla_validate_parse: 5 callbacks suppressed [ 720.570547][ T1855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8101'. [ 720.583310][ T1856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8100'. [ 720.656107][ T1858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8097'. [ 720.900359][ T1879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8106'. [ 720.913738][ T1879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8106'. [ 720.924454][ T1879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8106'. [ 720.933947][ T1879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8106'. [ 720.943482][ T1879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8106'. [ 720.953380][ T1879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8106'. [ 721.136056][ T1886] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 721.175883][ T1893] netlink: 'syz.2.8111': attribute type 1 has an invalid length. [ 721.221296][ T1895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8112'. [ 721.266039][ T1893] bond7: (slave gretap1): making interface the new active one [ 721.286368][ T1893] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 721.297205][ T5947] syzkaller1: tun_net_xmit 90 [ 721.305352][ T1898] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 721.312942][ T1898] syzkaller1: Linktype set failed because interface is up [ 721.384461][ T1087] syzkaller1: tun_net_xmit 86 [ 721.808897][ T1937] syzkaller0: entered promiscuous mode [ 721.814412][ T1937] syzkaller0: entered allmulticast mode [ 721.873240][ T1944] netlink: 'syz.0.8126': attribute type 11 has an invalid length. [ 722.264091][ T1959] netlink: 'syz.3.8130': attribute type 1 has an invalid length. [ 722.272430][ T1959] netlink: 'syz.3.8130': attribute type 2 has an invalid length. [ 722.282172][ T1934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.363678][ T1962] "syz.3.8131" (1962) uses obsolete ecb(arc4) skcipher [ 722.399539][ T1939] wg1 speed is unknown, defaulting to 1000 [ 722.671707][ T1967] netlink: 'syz.3.8132': attribute type 2 has an invalid length. [ 722.825280][ T1971] bond4: option all_slaves_active: invalid value (222) [ 722.914477][ T1971] bond4 (unregistering): Released all slaves [ 722.984048][ T1985] netlink: 'syz.1.8136': attribute type 1 has an invalid length. [ 723.541585][ T1996] netlink: Conntrack attr has 4 unknown bytes [ 723.603936][ T1996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 723.649409][ T2001] netlink: 'syz.4.8144': attribute type 12 has an invalid length. [ 723.690592][ T2001] netlink: 'syz.4.8144': attribute type 29 has an invalid length. [ 724.118692][ T2023] syzkaller0: entered promiscuous mode [ 724.124329][ T2023] syzkaller0: entered allmulticast mode [ 724.548468][ T2066] siw: device registration error -23 [ 724.602703][ T2074] netlink: 'syz.1.8159': attribute type 8 has an invalid length. [ 724.620973][ T2074] bond0: entered promiscuous mode [ 724.626216][ T2074] bond0: entered allmulticast mode [ 724.652593][ T2074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.940639][ T2093] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 725.009662][T21136] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.027146][T21136] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.070678][T21136] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.082513][T21136] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.142927][ T31] audit: type=1107 audit(1767427955.713:12): pid=2106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='&$Cw@ [ 741.696856][ T3141] __nla_validate_parse: 12 callbacks suppressed [ 741.696876][ T3141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8435'. [ 741.708993][ T3143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8436'. [ 741.742615][ T3143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8436'. [ 742.079163][ T5844] Bluetooth: hci2: link tx timeout [ 742.085765][ T5844] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 742.114547][ T3172] validate_nla: 1 callbacks suppressed [ 742.114566][ T3172] netlink: 'syz.3.8443': attribute type 6 has an invalid length. [ 742.385997][ T3192] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8448'. [ 742.430336][ T3196] netlink: 'syz.2.8451': attribute type 1 has an invalid length. [ 742.524531][ T3196] 8021q: adding VLAN 0 to HW filter on device bond10 [ 742.534175][ T3196] bond9: (slave bond10): making interface the new active one [ 742.543330][ T3208] netlink: 'syz.3.8453': attribute type 11 has an invalid length. [ 742.543664][ T3196] bond9: (slave bond10): Enslaving as an active interface with an up link [ 742.610310][ T3196] delete_channel: no stack [ 742.615903][ T3196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8451'. [ 742.627800][ T3196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8451'. [ 742.637824][ T3196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8451'. [ 742.647158][ T3196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8451'. [ 742.659572][ T3212] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8454'. [ 742.782282][ T3221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8455'. [ 742.806758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.815149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.823528][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.831888][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.840256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.848646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.857016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.865366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.982652][T24772] IPVS: starting estimator thread 0... [ 743.077618][ T3232] IPVS: using max 32 ests per chain, 76800 per kthread [ 743.381847][ T3257] IPVS: length: 155 != 24 [ 743.632363][ T3273] netlink: 'syz.4.8474': attribute type 7 has an invalid length. [ 743.654179][ T3273] netlink: 'syz.4.8474': attribute type 8 has an invalid length. [ 744.167498][ T5844] Bluetooth: hci2: command 0x0405 tx timeout [ 744.539433][ T3343] netlink: 'syz.3.8494': attribute type 4 has an invalid length. [ 744.693261][ T3347] syzkaller0: entered promiscuous mode [ 744.719186][ T3347] syzkaller0: entered allmulticast mode [ 744.809709][ T3355] netlink: 'syz.0.8498': attribute type 6 has an invalid length. [ 744.821476][ T3352] bond11: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 744.871101][ T3352] bond11 (unregistering): Released all slaves [ 745.221312][ T3374] tipc: Failed to remove unknown binding: 66,0,0/0:3320346772/3320346773 [ 745.255188][ T3374] tipc: Failed to remove unknown binding: 66,0,0/0:3320346772/3320346773 [ 745.754336][ T3552] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.773721][ T3552] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.793289][ T3552] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.824256][ T3552] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.901984][ T3441] syzkaller1: entered promiscuous mode [ 745.909072][ T3441] syzkaller1: entered allmulticast mode [ 746.009171][ T3441] syzkaller0: entered promiscuous mode [ 746.014685][ T3441] syzkaller0: entered allmulticast mode [ 746.042848][ T3458] xt_addrtype: ipv6 does not support BROADCAST matching [ 747.701922][ T3450] tipc: Started in network mode [ 747.707271][ T3450] tipc: Node identity 2eb1aa7ad90b, cluster identity 4711 [ 747.714524][ T3450] tipc: Enabled bearer , priority 0 [ 747.722085][ T3460] syzkaller0: entered promiscuous mode [ 747.728321][ T3460] syzkaller0: entered allmulticast mode [ 747.736259][ T3465] __nla_validate_parse: 13 callbacks suppressed [ 747.736278][ T3465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8525'. [ 747.755858][ T3470] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 747.779122][ T3472] netlink: 'syz.2.8527': attribute type 4 has an invalid length. [ 747.845290][ T3478] tipc: Resetting bearer [ 747.861742][ T3449] tipc: Resetting bearer [ 747.903073][ T3449] tipc: Disabling bearer [ 748.145235][ T3507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8537'. [ 748.182817][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8536'. [ 748.231053][ T3511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8536'. [ 748.241398][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8536'. [ 748.251858][ T3513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8539'. [ 748.264463][ T3511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8536'. [ 748.626613][ T3536] netlink: 'syz.4.8544': attribute type 21 has an invalid length. [ 750.426607][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8544'. [ 750.574510][ T3576] netlink: 'syz.1.8551': attribute type 1 has an invalid length. [ 750.583312][ T3577] netlink: 'syz.1.8551': attribute type 1 has an invalid length. [ 750.612395][ T3578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8552'. [ 750.769503][ T3591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8555'. [ 750.901077][ T3598] netlink: 'syz.4.8558': attribute type 1 has an invalid length. [ 750.954165][ T3604] netlink: 'syz.4.8558': attribute type 21 has an invalid length. [ 752.718545][ T3757] xt_TPROXY: Can be used only with -p tcp or -p udp [ 752.793751][ T3759] __nla_validate_parse: 8 callbacks suppressed [ 752.793770][ T3759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8600'. [ 752.829993][ T3759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8600'. [ 753.017797][ T3774] vlan0: entered promiscuous mode [ 753.052228][ T3775] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 753.083085][ T3777] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8606'. [ 753.655076][ T3809] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8616'. [ 753.727832][ T3817] netlink: 'syz.0.8617': attribute type 4 has an invalid length. [ 753.741676][ T3817] netlink: 240 bytes leftover after parsing attributes in process `syz.0.8617'. [ 753.755913][ T3817] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8617'. [ 753.864807][ T3827] sctp: [Deprecated]: syz.4.8622 (pid 3827) Use of int in maxseg socket option. [ 753.864807][ T3827] Use struct sctp_assoc_value instead [ 754.011078][ T3833] syzkaller1: entered promiscuous mode [ 754.019031][ T3833] syzkaller1: entered allmulticast mode [ 754.252364][ T3851] netlink: 'syz.4.8628': attribute type 9 has an invalid length. [ 754.283076][ T3855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8629'. [ 754.302569][ T3855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8629'. [ 754.644381][ T3874] syzkaller0: entered promiscuous mode [ 754.650295][ T3874] syzkaller0: entered allmulticast mode [ 755.037299][ T3903] syzkaller1: entered promiscuous mode [ 755.050384][ T3903] syzkaller1: entered allmulticast mode [ 755.097711][ T3903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8643'. [ 755.109232][ T3903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8643'. [ 755.624071][ T3937] policy can only be matched on NF_INET_PRE_ROUTING [ 755.624093][ T3937] unable to load match [ 755.689463][ T3945] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 755.973347][ T3964] netlink: 'syz.1.8665': attribute type 7 has an invalid length. [ 756.085137][ T3970] netlink: 'syz.2.8664': attribute type 7 has an invalid length. [ 756.291450][ T3979] team0: Device ip6gre2 is of different type [ 756.526096][ T3958] wg1 speed is unknown, defaulting to 1000 [ 757.296149][ T4030] netlink: 'syz.0.8686': attribute type 21 has an invalid length. [ 757.500135][ T4048] x_tables: duplicate underflow at hook 2 [ 757.607716][ T4054] can: request_module (can-proto-4) failed. [ 757.768191][ T4070] netlink: 'syz.3.8699': attribute type 1 has an invalid length. [ 757.770360][ T4072] batadv_slave_1: entered promiscuous mode [ 757.800942][ T4071] batadv_slave_1: left promiscuous mode [ 757.820296][ T4070] bond4: (slave gretap1): making interface the new active one [ 757.833601][ T4070] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 757.952304][ T4081] tipc: Enabled bearer , priority 0 [ 757.961415][ T4083] net_ratelimit: 14 callbacks suppressed [ 757.961435][ T4083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 757.992183][ T4081] syzkaller0: entered promiscuous mode [ 757.997955][ T4081] syzkaller0: entered allmulticast mode [ 758.010196][ T4081] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 758.031643][ T4085] __nla_validate_parse: 31 callbacks suppressed [ 758.031662][ T4085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8704'. [ 758.040514][ T4081] tipc: Resetting bearer [ 758.070323][ T4080] tipc: Resetting bearer [ 758.091432][ T4080] tipc: Disabling bearer [ 758.274496][ T4097] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8709'. [ 758.284187][ T4097] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8709'. [ 758.525250][ T4110] IPVS: set_ctl: invalid protocol: 20551 0.0.0.0:0 [ 758.625016][ T4117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8713'. [ 758.647434][ T4124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8715'. [ 758.672281][ T4117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8713'. [ 758.717710][ T4124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8715'. [ 758.741410][ T4126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8713'. [ 758.801671][ T4126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8713'. [ 758.809886][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8719'. [ 759.077238][ T4148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.094607][ T4150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.228367][ T4160] wlan0 speed is unknown, defaulting to 1000 [ 759.293354][ T4160] wlan0 speed is unknown, defaulting to 1000 [ 759.300590][ T4160] wlan0 speed is unknown, defaulting to 1000 [ 759.319863][ T4160] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 759.402686][ T4160] wlan0 speed is unknown, defaulting to 1000 [ 759.421821][ T4160] wlan0 speed is unknown, defaulting to 1000 [ 759.443541][ T4160] wlan0 speed is unknown, defaulting to 1000 [ 759.462584][ T4160] wlan0 speed is unknown, defaulting to 1000 [ 759.487331][ T4160] wlan0 speed is unknown, defaulting to 1000 [ 759.505508][ T4160] wlan0 speed is unknown, defaulting to 1000 [ 759.549116][ T4160] wlan0 speed is unknown, defaulting to 1000 [ 759.566044][ T4160] wlan0 speed is unknown, defaulting to 1000 [ 759.576936][ T4160] wlan0 speed is unknown, defaulting to 1000 [ 759.627945][ T4173] sctp: [Deprecated]: syz.0.8732 (pid 4173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 759.627945][ T4173] Use struct sctp_sack_info instead [ 759.738648][ T4176] xt_hashlimit: overflow, try lower: 3/0 [ 759.895211][ T4185] netlink: 'syz.4.8737': attribute type 32 has an invalid length. [ 759.988229][ T4185] bond0: Setting coupled_control to off (0) [ 759.994466][ T4188] tipc: Enabling of bearer rejected, media not registered [ 760.242003][ T4207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 760.251623][ T4214] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 760.382921][ T4221] Cannot find set identified by id 0 to match [ 760.565469][ T4228] bond7: entered promiscuous mode [ 760.570810][ T4228] bond7: entered allmulticast mode [ 760.577082][ T4228] 8021q: adding VLAN 0 to HW filter on device bond7 [ 760.595371][ T4230] bond7: (slave macvlan2): Opening slave failed [ 760.671493][ T4246] bpq0: left allmulticast mode [ 760.763883][ T4251] netlink: 'syz.2.8752': attribute type 10 has an invalid length. [ 760.800520][ T4251] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 761.064407][ T4274] bond8: entered promiscuous mode [ 761.070584][ T4274] bond8: entered allmulticast mode [ 761.076303][ T4274] 8021q: adding VLAN 0 to HW filter on device bond8 [ 761.112871][ T4288] netlink: 'syz.0.8762': attribute type 3 has an invalid length. [ 761.254217][ T4295] xt_l2tp: v2 doesn't support IP mode [ 761.293758][ T4295] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20004 [ 761.422472][ T4310] netlink: 'syz.1.8768': attribute type 1 has an invalid length. [ 761.505424][ T4316] : entered promiscuous mode [ 761.522333][ T4318] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 761.714133][ T4345] netlink: 'syz.4.8778': attribute type 1 has an invalid length. [ 763.250541][ T4428] veth1_vlan: left allmulticast mode [ 763.604896][T21134] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.636476][T21134] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.654909][T21134] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.654934][ T5906] wlan0 speed is unknown, defaulting to 1000 [ 763.664065][T21134] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.732411][ T5906] syz0: Port: 1 Link DOWN [ 763.739627][T21134] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.750561][T21134] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.769806][ T4456] __nla_validate_parse: 21 callbacks suppressed [ 763.769822][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8806'. [ 763.798355][T21134] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.808879][T21134] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.908159][ T4470] netlink: 184 bytes leftover after parsing attributes in process `syz.1.8810'. [ 763.929780][ T4470] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8810'. [ 763.960700][ T4456] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8806'. [ 764.258615][ T4491] tipc: Enabled bearer , priority 0 [ 764.282099][ T4491] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 764.374464][ T4480] tipc: Disabling bearer [ 764.413082][ T4500] syzkaller0: entered promiscuous mode [ 764.425226][ T4500] syzkaller0: entered allmulticast mode [ 764.835178][ T4529] pim6reg: entered allmulticast mode [ 764.848813][ T4529] pim6reg: left allmulticast mode [ 764.890576][ T4531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8828'. [ 764.901428][ T4533] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8826'. [ 764.913445][ T4531] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8828'. [ 764.939103][ T4528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8826'. [ 765.014781][ T4539] set match dimension is over the limit! [ 765.144863][ T4552] netlink: 'syz.2.8836': attribute type 1 has an invalid length. [ 765.153366][ T4552] netlink: 228 bytes leftover after parsing attributes in process `syz.2.8836'. [ 765.277320][ T4557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8838'. [ 765.446238][ T4568] bond15: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 765.475471][ T4575] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 765.494869][ T4568] bond15 (unregistering): Released all slaves [ 765.685012][ T4590] syzkaller0: entered promiscuous mode [ 765.698490][ T4590] syzkaller0: entered allmulticast mode [ 765.861364][ T4602] netlink: 'syz.2.8850': attribute type 1 has an invalid length. [ 766.189416][ T4625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 766.549828][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 766.563939][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 766.572386][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 766.582893][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 766.590777][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 767.251864][ T4665] netlink: 'syz.1.8869': attribute type 10 has an invalid length. [ 767.280424][ T4663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 767.397110][ T4639] wg1 speed is unknown, defaulting to 1000 [ 767.406208][ T4639] wlan0 speed is unknown, defaulting to 1000 [ 767.582354][ T4682] veth0: entered promiscuous mode [ 767.700549][ T4696] nbd: couldn't find a device at index 0 [ 767.719325][ T4683] veth0 (unregistering): left promiscuous mode [ 767.837093][ T4688] tipc: Enabling of bearer rejected, media not registered [ 767.885563][ T4703] sctp: [Deprecated]: syz.4.8882 (pid 4703) Use of int in maxseg socket option. [ 767.885563][ T4703] Use struct sctp_assoc_value instead [ 767.910893][ T4699] syzkaller1: entered promiscuous mode [ 767.916742][ T4699] syzkaller1: entered allmulticast mode [ 767.999150][ T4704] veth0: entered promiscuous mode [ 768.021318][ T4639] chnl_net:caif_netlink_parms(): no params data found [ 768.044750][ T4704] veth0: left promiscuous mode [ 768.064406][ T4708] syz_tun: entered promiscuous mode [ 768.080588][ T4708] syz_tun: left promiscuous mode [ 768.425727][ T4739] netlink: 'syz.1.8892': attribute type 1 has an invalid length. [ 768.504761][ T4639] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.523629][ T4639] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.543421][ T4639] bridge_slave_0: entered allmulticast mode [ 768.558358][ T4639] bridge_slave_0: entered promiscuous mode [ 768.578699][ T4639] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.585905][ T4639] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.595610][ T4639] bridge_slave_1: entered allmulticast mode [ 768.608483][ T4639] bridge_slave_1: entered promiscuous mode [ 768.616036][ T4750] netlink: 'syz.2.8894': attribute type 2 has an invalid length. [ 768.647288][ T5838] Bluetooth: hci1: command tx timeout [ 768.717695][ T4639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.760487][ T4639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.801893][ T4765] __nla_validate_parse: 85 callbacks suppressed [ 768.801912][ T4765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8896'. [ 768.895657][ T4639] team0: Port device team_slave_0 added [ 768.921116][ T4639] team0: Port device team_slave_1 added [ 768.946982][ T4770] v: renamed from dummy0 (while UP) [ 769.099614][ T4639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.118375][ T4639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.153268][ T4639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.174907][ T4786] netlink: 'syz.4.8902': attribute type 1 has an invalid length. [ 769.185279][ T4639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.192639][ T4639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.236539][ T4639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.288489][ T4785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8904'. [ 769.532186][ T4785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.631617][ T4639] hsr_slave_0: entered promiscuous mode [ 769.642707][ T4639] hsr_slave_1: entered promiscuous mode [ 769.651269][ T4639] debugfs: 'hsr0' already exists in 'hsr' [ 769.666565][ T4639] Cannot create hsr debugfs directory [ 769.961348][ T4823] macvtap2: entered promiscuous mode [ 769.968852][ T4823] macvtap2: entered allmulticast mode [ 770.040241][ T4639] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.071573][ T4829] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 770.096898][ T4639] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 770.118110][ T4639] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 770.227562][ T4834] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 770.240230][ T4639] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.252670][ T4639] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 770.286642][ T4639] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 770.354167][ T4639] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.364152][ T4639] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 770.374056][ T4639] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 770.405671][ T4849] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 770.484193][ T4639] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.497010][ T4639] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 770.507333][ T4639] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 770.651585][ T4856] netlink: 248 bytes leftover after parsing attributes in process `syz.1.8923'. [ 770.727719][ T5838] Bluetooth: hci1: command tx timeout [ 770.743484][ T4866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8925'. [ 770.760279][ T4863] syzkaller0: entered promiscuous mode [ 770.766176][ T4863] syzkaller0: entered allmulticast mode [ 770.997598][ T4639] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 771.013767][ T4639] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 771.052045][ T4639] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 771.087873][ T4639] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 771.264262][ T4902] tipc: Started in network mode [ 771.276745][ T4902] tipc: Node identity 5691b072635f, cluster identity 4711 [ 771.284263][ T4902] tipc: Enabled bearer , priority 0 [ 771.295125][ T4903] tipc: Enabling of bearer rejected, already enabled [ 771.306269][ T4902] syzkaller0: entered promiscuous mode [ 771.311994][ T4902] syzkaller0: entered allmulticast mode [ 771.321962][ T4903] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 771.366861][ T4908] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 771.397246][ T4908] tipc: Resetting bearer [ 771.441655][ T4901] tipc: Resetting bearer [ 771.497695][ T4901] tipc: Disabling bearer [ 771.544168][ T4917] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 771.565100][ T4639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.613328][ T4639] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.644658][ T3687] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.651874][ T3687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.698187][ T3687] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.705338][ T3687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.753697][ T4928] netlink: 'syz.1.8941': attribute type 1 has an invalid length. [ 771.758635][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8942'. [ 771.762119][ T4930] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 771.781751][ T4928] netlink: 280 bytes leftover after parsing attributes in process `syz.1.8941'. [ 771.807214][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8942'. [ 771.921854][ T4935] netlink: 'syz.4.8944': attribute type 4 has an invalid length. [ 771.957831][ T4935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8944'. [ 772.107093][ T4946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8947'. [ 772.147765][ T4946] syzkaller0: entered promiscuous mode [ 772.153381][ T4946] syzkaller0: entered allmulticast mode [ 772.227477][ T4639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.238644][ T4951] syzkaller0: entered promiscuous mode [ 772.244145][ T4951] syzkaller0: entered allmulticast mode [ 772.265219][ T4953] netlink: 'syz.3.8948': attribute type 1 has an invalid length. [ 772.278818][ T4953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8948'. [ 772.366219][ T4639] veth0_vlan: entered promiscuous mode [ 772.396285][ T4639] veth1_vlan: entered promiscuous mode [ 772.440285][ T4639] veth0_macvtap: entered promiscuous mode [ 772.447154][ T4955] nbd7: detected capacity change from 0 to 127 [ 772.455567][ T5838] block nbd7: Receive control failed (result -32) [ 772.459195][ T4639] veth1_macvtap: entered promiscuous mode [ 772.511527][ T4639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.548918][ T4639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.598461][ T3687] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.619080][ T3687] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.639610][ T3687] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.660147][ T3687] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.817511][ T5838] Bluetooth: hci1: command tx timeout [ 772.826075][T21135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.839716][T21135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.904686][T10017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.949289][T10017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.031988][ T4975] syzkaller0: entered promiscuous mode [ 773.051719][ T4975] syzkaller0: entered allmulticast mode [ 773.225151][ T4996] netlink: 'syz.3.8960': attribute type 1 has an invalid length. [ 773.466255][ T5013] tipc: Enabled bearer , priority 2 [ 773.489271][ T5013] netlink: 'syz.2.8964': attribute type 2 has an invalid length. [ 773.500090][ T5013] netlink: 'syz.2.8964': attribute type 11 has an invalid length. [ 773.862133][ T5036] __nla_validate_parse: 5 callbacks suppressed [ 773.862156][ T5036] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8971'. [ 774.052122][ T5048] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8975'. [ 774.079537][ T5055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8979'. [ 774.096124][ T5057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8979'. [ 774.105865][ T5055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8979'. [ 774.215762][ T5058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.225385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.503458][ T5087] netlink: 'syz.1.8985': attribute type 1 has an invalid length. [ 774.602074][ T5087] 8021q: adding VLAN 0 to HW filter on device bond10 [ 774.675926][ T5090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8987'. [ 774.725895][ T5083] bond10: (slave gretap4): making interface the new active one [ 774.750216][ T5083] bond10: (slave gretap4): Enslaving as an active interface with an up link [ 774.900712][ T5844] Bluetooth: hci1: command tx timeout [ 775.097579][ T5126] bond0: entered promiscuous mode [ 775.111942][ T5126] bond0: entered allmulticast mode [ 775.121013][ T5126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.330475][ T5150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9003'. [ 775.395710][ T5155] veth1_macvtap: left promiscuous mode [ 775.402573][ T5155] macsec0: entered promiscuous mode [ 775.410219][ T5155] macsec0: entered allmulticast mode [ 775.424822][ T5155] veth1_macvtap: entered promiscuous mode [ 775.431208][ T5155] veth1_macvtap: entered allmulticast mode [ 775.437314][ T5155] macsec0: left promiscuous mode [ 775.442479][ T5155] macsec0: left allmulticast mode [ 775.447876][ T5155] veth1_macvtap: left allmulticast mode [ 776.051448][ T5197] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 776.145755][ T5202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9019'. [ 776.201501][ T5207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9019'. [ 776.227615][ T5202] xfrm1: entered promiscuous mode [ 776.232692][ T5202] xfrm1: entered allmulticast mode [ 776.248306][ T6212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.258461][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.272147][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.385507][ T5221] sctp: [Deprecated]: syz.2.9027 (pid 5221) Use of struct sctp_assoc_value in delayed_ack socket option. [ 776.385507][ T5221] Use struct sctp_sack_info instead [ 776.415519][ T5223] pim6reg1: entered promiscuous mode [ 776.421521][ T5223] pim6reg1: entered allmulticast mode [ 776.586671][ T5228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.595617][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.674924][ T5242] netlink: 'syz.1.9030': attribute type 11 has an invalid length. [ 776.969290][ T5844] Bluetooth: hci1: command 0x0405 tx timeout [ 777.011530][ T5269] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.9041'. [ 777.287178][T28716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.447960][ T6212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.458786][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.469711][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.528129][ T3681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.536755][ T3681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.544859][ T6212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.553415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.561805][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.569967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.954059][ T5314] syzkaller0: entered promiscuous mode [ 777.961377][ T5314] syzkaller0: entered allmulticast mode [ 778.081739][ T5321] IPv6: sit1: Disabled Multicast RS [ 778.089354][ T5321] sit1: entered allmulticast mode [ 778.232574][ T5294] delete_channel: no stack [ 778.775194][ T5352] netlink: 'syz.0.9064': attribute type 1 has an invalid length. [ 778.813820][ T5356] netlink: 'syz.2.9065': attribute type 11 has an invalid length. [ 778.822698][ T5356] netlink: 'syz.2.9065': attribute type 11 has an invalid length. [ 778.892708][ T5325] wg1 speed is unknown, defaulting to 1000 [ 778.921961][ T5325] wlan0 speed is unknown, defaulting to 1000 [ 779.046119][ T5367] block nbd2: NBD_DISCONNECT [ 779.057087][ T5367] block nbd2: Send disconnect failed -32 [ 779.062775][ T5367] block nbd2: shutting down sockets [ 779.131933][ T5368] netlink: 'syz.2.9069': attribute type 1 has an invalid length. [ 779.140267][ T5368] __nla_validate_parse: 13 callbacks suppressed [ 779.140286][ T5368] netlink: 228 bytes leftover after parsing attributes in process `syz.2.9069'. [ 779.175386][ T5368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9069'. [ 779.235845][ T5367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9069'. [ 779.249687][ T5374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9069'. [ 779.289582][ T5379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9072'. [ 779.311903][ T5385] netlink: 'syz.3.9074': attribute type 3 has an invalid length. [ 779.361311][ T5379] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9072'. [ 779.387755][ T5385] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9074'. [ 779.411510][ T5385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9074'. [ 779.431474][ T5385] netlink: 31 bytes leftover after parsing attributes in process `syz.3.9074'. [ 779.471085][ T5392] netlink: 'syz.4.9075': attribute type 10 has an invalid length. [ 779.484042][ T5382] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9073'. [ 779.493887][ T5385] netlink: 'syz.3.9074': attribute type 3 has an invalid length. [ 779.723776][T18517] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.756989][T18517] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.765912][T18517] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.887491][T18517] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.373977][ T5441] netlink: 'syz.0.9090': attribute type 2 has an invalid length. [ 780.733721][ T5457] netlink: 'syz.1.9094': attribute type 2 has an invalid length. [ 780.763980][ T5457] 9: entered promiscuous mode [ 781.195002][ T5502] sctp: [Deprecated]: syz.0.9105 (pid 5502) Use of int in max_burst socket option. [ 781.195002][ T5502] Use struct sctp_assoc_value instead [ 781.487208][ T5520] netlink: 'syz.3.9111': attribute type 7 has an invalid length. [ 781.618528][ T5530] sctp: [Deprecated]: syz.2.9116 (pid 5530) Use of int in maxseg socket option. [ 781.618528][ T5530] Use struct sctp_assoc_value instead [ 781.694178][ T5527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 781.815319][ T5533] bond1: (slave gretap1): making interface the new active one [ 781.833317][ T5543] delete_channel: no stack [ 781.840500][ T5533] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 782.209494][ T5579] bond8: (slave gretap2): making interface the new active one [ 782.218112][ T5579] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 782.238210][ T5582] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 782.757083][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 782.768076][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 782.777662][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 782.789720][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 782.801276][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 783.048199][T28716] net_ratelimit: 46 callbacks suppressed [ 783.048220][T28716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.288235][T18517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.296428][T18517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.304525][T21148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.312657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.320779][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.328892][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.366129][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.375303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.661935][ T5612] wg1 speed is unknown, defaulting to 1000 [ 783.671233][ T5612] wlan0 speed is unknown, defaulting to 1000 [ 784.086634][T28716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.087520][ T5679] tipc: Enabled bearer , priority 0 [ 784.169327][ T5612] chnl_net:caif_netlink_parms(): no params data found [ 784.227568][ T5677] tipc: Disabling bearer [ 784.492422][ T5703] __nla_validate_parse: 62 callbacks suppressed [ 784.492441][ T5703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9165'. [ 784.601739][ T5712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9169'. [ 784.664086][ T5713] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.9171'. [ 784.697359][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.704817][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.713099][ T5720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9169'. [ 784.717059][ T5612] bridge_slave_0: entered allmulticast mode [ 784.723208][ T5720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9169'. [ 784.768348][ T5612] bridge_slave_0: entered promiscuous mode [ 784.842718][ T5720] gretap2: entered promiscuous mode [ 784.848682][ T5720] gretap2: entered allmulticast mode [ 784.862793][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.876617][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.884001][ T5612] bridge_slave_1: entered allmulticast mode [ 784.892515][ T5612] bridge_slave_1: entered promiscuous mode [ 784.896759][ T5838] Bluetooth: hci4: command tx timeout [ 785.040981][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.084149][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.119014][ T5741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9179'. [ 785.227863][ T5749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9180'. [ 785.263888][ T5612] team0: Port device team_slave_0 added [ 785.308504][ T5612] team0: Port device team_slave_1 added [ 785.398635][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.416589][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.497430][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.514744][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.523980][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.560326][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.610479][ T5761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9184'. [ 785.688029][ T5612] hsr_slave_0: entered promiscuous mode [ 785.704189][ T5612] hsr_slave_1: entered promiscuous mode [ 785.718280][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 785.732951][ T5612] Cannot create hsr debugfs directory [ 785.741870][ T5782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9189'. [ 785.938775][ T5784] syzkaller0: entered promiscuous mode [ 785.944262][ T5784] syzkaller0: entered allmulticast mode [ 785.973225][ T5789] IPv6: Can't replace route, no match found [ 786.235457][ T5612] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.264670][ T5806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9197'. [ 786.406329][ T5612] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.515932][ T5612] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.588299][ T5612] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.880610][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 786.916816][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 786.934526][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 786.962071][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 786.976632][ T5838] Bluetooth: hci4: command tx timeout [ 786.983686][ T5843] IPVS: Scheduler module ip_vs_sip not found [ 787.340807][ T5881] team_slave_0: entered promiscuous mode [ 787.346571][ T5881] team_slave_1: entered promiscuous mode [ 787.358040][ T5881] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 787.384563][ T5891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.415451][ T5881] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 787.450254][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.490787][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.505782][ T3681] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.512978][ T3681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.549389][ T3681] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.556581][ T3681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.584561][ T5908] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 787.862759][ T5924] syzkaller1: entered promiscuous mode [ 787.875035][ T5924] syzkaller1: entered allmulticast mode [ 787.963380][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.054666][ T5612] veth0_vlan: entered promiscuous mode [ 788.094276][ T5612] veth1_vlan: entered promiscuous mode [ 788.146901][ T5612] veth0_macvtap: entered promiscuous mode [ 788.247389][ T5612] veth1_macvtap: entered promiscuous mode [ 788.316241][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.349620][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.387429][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.410387][ T106] net_ratelimit: 8 callbacks suppressed [ 788.410408][ T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.424114][ T3431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.434120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.447220][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.455964][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.465459][ T5960] validate_nla: 4 callbacks suppressed [ 788.465477][ T5960] netlink: 'syz.2.9236': attribute type 19 has an invalid length. [ 788.483330][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.690447][T18517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.706441][T18517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.800309][T21134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.808663][T21134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.812195][ T5974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.048783][ T5838] Bluetooth: hci4: command tx timeout [ 789.054723][T21145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.063611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.072450][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.080802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.450539][T28716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.508380][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.516196][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.599007][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 789.610962][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 789.619606][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 789.628414][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 789.636227][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 789.818554][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.832441][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.934172][T21145] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.031439][ T6018] __nla_validate_parse: 11 callbacks suppressed [ 790.031459][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9248'. [ 790.057373][ T3687] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.090023][ T3687] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.142430][ T6025] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9250'. [ 790.192505][ T3687] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.382750][ T6040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.423253][ T6040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.520546][ T6049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9258'. [ 790.802655][ T3681] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.850194][ T3681] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.894468][ T3681] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.907176][ T6062] netlink: 'syz.4.9263': attribute type 21 has an invalid length. [ 790.915022][ T6062] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9263'. [ 790.944710][ T6064] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9264'. [ 790.957287][ T3681] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.135683][ T5844] Bluetooth: hci4: command tx timeout [ 791.371087][ T5906] IPVS: starting estimator thread 0... [ 791.501459][ T6100] IPVS: using max 37 ests per chain, 88800 per kthread [ 791.588603][T21134] bond4 (unregistering): (slave gretap1): Releasing active interface [ 791.686991][ T5844] Bluetooth: hci5: command tx timeout [ 792.047486][T21134] bond0 (unregistering): Released all slaves [ 792.154446][T21134] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 792.164113][T21134] bond1 (unregistering): Released all slaves [ 792.177789][T21134] bond2 (unregistering): Released all slaves [ 792.190156][T21134] bond3 (unregistering): Released all slaves [ 792.204373][T21134] bond4 (unregistering): Released all slaves [ 792.218620][T21134] bond5 (unregistering): Released all slaves [ 792.244418][T21134] bond6 (unregistering): Released all slaves [ 792.266271][ T6005] wg1 speed is unknown, defaulting to 1000 [ 792.300287][ T6117] dvmrp6: entered allmulticast mode [ 792.403205][ T6005] wlan0 speed is unknown, defaulting to 1000 [ 792.421295][ T6122] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9278'. [ 792.430705][ T6122] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9278'. [ 792.673006][T21134] : left promiscuous mode [ 792.730366][ T6133] tipc: Cannot configure node identity twice [ 792.750568][ T6132] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9280'. [ 792.774766][ T6139] ------------[ cut here ]------------ [ 792.780596][ T6139] WARNING: net/mac80211/tx.c:6303 at ieee80211_tx_skb_tid+0x3b4/0x470, CPU#1: syz.2.9281/6139 [ 792.790921][ T6139] Modules linked in: [ 792.795249][ T6139] CPU: 1 UID: 0 PID: 6139 Comm: syz.2.9281 Not tainted syzkaller #0 PREEMPT(full) [ 792.797772][ T6142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9282'. [ 792.804608][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 792.823691][ T6139] RIP: 0010:ieee80211_tx_skb_tid+0x3b4/0x470 [ 792.824363][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9283'. [ 792.829724][ T6139] Code: 67 c5 f6 e9 b1 fe ff ff e8 49 27 e8 f6 90 0f 0b 90 e9 e2 fe ff ff e8 3b 27 e8 f6 90 0f 0b 90 e9 2a fe ff ff e8 2d 27 e8 f6 90 <0f> 0b 90 e8 c4 e1 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 792.829749][ T6139] RSP: 0018:ffffc90004e97478 EFLAGS: 00010283 [ 792.829771][ T6139] RAX: ffffffff8ad8d093 RBX: ffffffff8ad8cd0f RCX: 0000000000080000 [ 792.829789][ T6139] RDX: ffffc900102c7000 RSI: 0000000000002e6d RDI: 0000000000002e6e [ 792.829803][ T6139] RBP: 00000000ffffffff R08: ffffffff8ad8cd0f R09: ffffffff8df41aa0 [ 792.829819][ T6139] R10: dffffc0000000000 R11: ffffed100c31827e R12: ffff88804a8e8d80 [ 792.829837][ T6139] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 792.829852][ T6139] FS: 00007fc3fd6a36c0(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 792.829871][ T6139] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 792.829886][ T6139] CR2: 000055557223d808 CR3: 000000004e680000 CR4: 00000000003526f0 [ 792.829906][ T6139] Call Trace: [ 792.829915][ T6139] [ 792.829931][ T6139] mesh_plink_frame_tx+0x734/0xc10 [ 792.829976][ T6139] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 792.923817][ T6146] netlink: 'syz.2.9281': attribute type 4 has an invalid length. [ 792.928252][ T6139] ? ieee80211_mps_set_sta_local_pm+0xb1/0x310 [ 792.928300][ T6139] mesh_plink_deactivate+0x18e/0x2f0 [ 792.928345][ T6139] mesh_sta_cleanup+0x42/0x150 [ 792.928372][ T6139] cleanup_single_sta+0x40f/0x660 [ 792.928404][ T6139] __sta_info_flush+0x5e4/0x710 [ 792.928448][ T6139] ? __pfx___sta_info_flush+0x10/0x10 [ 792.928493][ T6139] ieee80211_do_stop+0x397/0x1f70 [ 792.928530][ T6139] ? trace_contention_end+0x39/0x100 [ 792.928560][ T6139] ? __mutex_lock+0x335/0x1350 [ 792.928595][ T6139] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 792.928659][ T6139] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 792.928699][ T6139] ieee80211_stop+0x1b1/0x240 [ 792.928730][ T6139] ? __pfx_ieee80211_stop+0x10/0x10 [ 792.928764][ T6139] __dev_close_many+0x344/0x6b0 [ 792.928795][ T6139] ? __pfx___dev_close_many+0x10/0x10 [ 792.928822][ T6139] ? __local_bh_enable_ip+0xd0/0x130 [ 792.928849][ T6139] __dev_change_flags+0x2be/0x680 [ 793.041834][ T6139] ? __mutex_lock+0x5bb/0x1350 [ 793.046669][ T6139] ? __pfx___dev_change_flags+0x10/0x10 [ 793.052242][ T6139] ? full_name_hash+0x92/0xe0 [ 793.056989][ T6139] netif_change_flags+0x88/0x1a0 [ 793.061958][ T6139] dev_change_flags+0x130/0x260 [ 793.066868][ T6139] dev_ioctl+0x7b4/0x1150 [ 793.071224][ T6139] sock_do_ioctl+0x22c/0x300 [ 793.075847][ T6139] ? __pfx_sock_do_ioctl+0x10/0x10 [ 793.081025][ T6139] ? do_futex+0x333/0x420 [ 793.085394][ T6139] sock_ioctl+0x576/0x790 [ 793.089792][ T6139] ? __pfx_sock_ioctl+0x10/0x10 [ 793.094664][ T6139] ? __fget_files+0x2a/0x420 [ 793.099309][ T6139] ? __fget_files+0x3a0/0x420 [ 793.104011][ T6139] ? __fget_files+0x2a/0x420 [ 793.108666][ T6139] ? bpf_lsm_file_ioctl+0x9/0x20 [ 793.113627][ T6139] ? __pfx_sock_ioctl+0x10/0x10 [ 793.118532][ T6139] __se_sys_ioctl+0xfc/0x170 [ 793.123146][ T6139] do_syscall_64+0xec/0xf80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 793.127700][ T6139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.133776][ T6139] ? trace_irq_disable+0x37/0x100 [ 793.138864][ T6139] ? clear_bhb_loop+0x60/0xb0 [ 793.143564][ T6139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.149523][ T6139] RIP: 0033:0x7fc3fc78f749 [ 793.153952][ T6139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 793.173605][ T6139] RSP: 002b:00007fc3fd6a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 793.182099][ T6139] RAX: ffffffffffffffda RBX: 00007fc3fc9e6090 RCX: 00007fc3fc78f749 [ 793.190131][ T6139] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 793.198176][ T6139] RBP: 00007fc3fc813f91 R08: 0000000000000000 R09: 0000000000000000 [ 793.206168][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.214182][ T6139] R13: 00007fc3fc9e6128 R14: 00007fc3fc9e6090 R15: 00007ffe34bcfbb8 [ 793.222246][ T6139] [ 793.225279][ T6139] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 793.232561][ T6139] CPU: 1 UID: 0 PID: 6139 Comm: syz.2.9281 Not tainted syzkaller #0 PREEMPT(full) [ 793.242004][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 793.252052][ T6139] Call Trace: [ 793.255321][ T6139] [ 793.258240][ T6139] vpanic+0x1e0/0x670 [ 793.262212][ T6139] panic+0xb9/0xc0 [ 793.265918][ T6139] ? __pfx_panic+0x10/0x10 [ 793.270329][ T6139] __warn+0x317/0x4b0 [ 793.274296][ T6139] ? ieee80211_tx_skb_tid+0x3b4/0x470 [ 793.279651][ T6139] ? ieee80211_tx_skb_tid+0x3b4/0x470 [ 793.285014][ T6139] __report_bug+0x288/0x500 [ 793.289504][ T6139] ? ieee80211_tx_skb_tid+0x3b4/0x470 [ 793.294871][ T6139] ? __pfx___report_bug+0x10/0x10 [ 793.299880][ T6139] ? __lock_acquire+0x6b6/0x2cf0 [ 793.304818][ T6139] ? ieee80211_tx_skb_tid+0x3b4/0x470 [ 793.310175][ T6139] report_bug+0x16a/0x220 [ 793.314488][ T6139] ? ieee80211_tx_skb_tid+0x3b4/0x470 [ 793.319855][ T6139] ? ieee80211_tx_skb_tid+0x3b6/0x470 [ 793.325211][ T6139] handle_bug+0x98/0x200 [ 793.329443][ T6139] exc_invalid_op+0x1a/0x50 [ 793.333946][ T6139] asm_exc_invalid_op+0x1a/0x20 [ 793.338783][ T6139] RIP: 0010:ieee80211_tx_skb_tid+0x3b4/0x470 [ 793.344750][ T6139] Code: 67 c5 f6 e9 b1 fe ff ff e8 49 27 e8 f6 90 0f 0b 90 e9 e2 fe ff ff e8 3b 27 e8 f6 90 0f 0b 90 e9 2a fe ff ff e8 2d 27 e8 f6 90 <0f> 0b 90 e8 c4 e1 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 793.364346][ T6139] RSP: 0018:ffffc90004e97478 EFLAGS: 00010283 [ 793.370408][ T6139] RAX: ffffffff8ad8d093 RBX: ffffffff8ad8cd0f RCX: 0000000000080000 [ 793.378369][ T6139] RDX: ffffc900102c7000 RSI: 0000000000002e6d RDI: 0000000000002e6e [ 793.386325][ T6139] RBP: 00000000ffffffff R08: ffffffff8ad8cd0f R09: ffffffff8df41aa0 [ 793.394280][ T6139] R10: dffffc0000000000 R11: ffffed100c31827e R12: ffff88804a8e8d80 [ 793.402246][ T6139] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 793.410210][ T6139] ? ieee80211_tx_skb_tid+0x2f/0x470 [ 793.415487][ T6139] ? ieee80211_tx_skb_tid+0x2f/0x470 [ 793.420757][ T6139] ? ieee80211_tx_skb_tid+0x3b3/0x470 [ 793.426121][ T6139] ? ieee80211_tx_skb_tid+0x3b3/0x470 [ 793.431477][ T6139] mesh_plink_frame_tx+0x734/0xc10 [ 793.436600][ T6139] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 793.442244][ T6139] ? ieee80211_mps_set_sta_local_pm+0xb1/0x310 [ 793.448392][ T6139] mesh_plink_deactivate+0x18e/0x2f0 [ 793.453672][ T6139] mesh_sta_cleanup+0x42/0x150 [ 793.458423][ T6139] cleanup_single_sta+0x40f/0x660 [ 793.463468][ T6139] __sta_info_flush+0x5e4/0x710 [ 793.468341][ T6139] ? __pfx___sta_info_flush+0x10/0x10 [ 793.473714][ T6139] ieee80211_do_stop+0x397/0x1f70 [ 793.478730][ T6139] ? trace_contention_end+0x39/0x100 [ 793.484000][ T6139] ? __mutex_lock+0x335/0x1350 [ 793.488763][ T6139] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 793.494236][ T6139] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 793.500044][ T6139] ieee80211_stop+0x1b1/0x240 [ 793.504716][ T6139] ? __pfx_ieee80211_stop+0x10/0x10 [ 793.509904][ T6139] __dev_close_many+0x344/0x6b0 [ 793.514745][ T6139] ? __pfx___dev_close_many+0x10/0x10 [ 793.520099][ T6139] ? __local_bh_enable_ip+0xd0/0x130 [ 793.525370][ T6139] __dev_change_flags+0x2be/0x680 [ 793.530382][ T6139] ? __mutex_lock+0x5bb/0x1350 [ 793.535145][ T6139] ? __pfx___dev_change_flags+0x10/0x10 [ 793.540675][ T6139] ? full_name_hash+0x92/0xe0 [ 793.545338][ T6139] netif_change_flags+0x88/0x1a0 [ 793.550260][ T6139] dev_change_flags+0x130/0x260 [ 793.555127][ T6139] dev_ioctl+0x7b4/0x1150 [ 793.559444][ T6139] sock_do_ioctl+0x22c/0x300 [ 793.564024][ T6139] ? __pfx_sock_do_ioctl+0x10/0x10 [ 793.569121][ T6139] ? do_futex+0x333/0x420 [ 793.573442][ T6139] sock_ioctl+0x576/0x790 [ 793.577758][ T6139] ? __pfx_sock_ioctl+0x10/0x10 [ 793.582593][ T6139] ? __fget_files+0x2a/0x420 [ 793.587165][ T6139] ? __fget_files+0x3a0/0x420 [ 793.591824][ T6139] ? __fget_files+0x2a/0x420 [ 793.596409][ T6139] ? bpf_lsm_file_ioctl+0x9/0x20 [ 793.601359][ T6139] ? __pfx_sock_ioctl+0x10/0x10 [ 793.606210][ T6139] __se_sys_ioctl+0xfc/0x170 [ 793.610798][ T6139] do_syscall_64+0xec/0xf80 [ 793.615394][ T6139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.621458][ T6139] ? trace_irq_disable+0x37/0x100 [ 793.626481][ T6139] ? clear_bhb_loop+0x60/0xb0 [ 793.631166][ T6139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.637045][ T6139] RIP: 0033:0x7fc3fc78f749 [ 793.641460][ T6139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 793.661060][ T6139] RSP: 002b:00007fc3fd6a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 793.669465][ T6139] RAX: ffffffffffffffda RBX: 00007fc3fc9e6090 RCX: 00007fc3fc78f749 [ 793.677429][ T6139] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 793.685399][ T6139] RBP: 00007fc3fc813f91 R08: 0000000000000000 R09: 0000000000000000 [ 793.693377][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.701335][ T6139] R13: 00007fc3fc9e6128 R14: 00007fc3fc9e6090 R15: 00007ffe34bcfbb8 [ 793.709382][ T6139] [ 793.712902][ T6139] Kernel Offset: disabled [ 793.717214][ T6139] Rebooting in 86400 seconds..