last executing test programs: 5.361319339s ago: executing program 1 (id=2393): sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)=@tcp6}, 0x98) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@local, @dev={0xac, 0x14, 0x14, 0x28}, 0xfffe, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x3, 0x0, 0x80, 0x4f04}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4040) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)=@tcp6}, 0x98) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@local, @dev={0xac, 0x14, 0x14, 0x28}, 0xfffe, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x3, 0x0, 0x80, 0x4f04}, 0x3c) (async) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 5.177555474s ago: executing program 1 (id=2396): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4040041) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001fc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)={0x20, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x80d4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, &(0x7f00000004c0)='N', 0x0}, 0x50) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) 4.726532227s ago: executing program 1 (id=2407): socket$inet(0x10, 0x3, 0x0) (async) r0 = socket$inet(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000000)=@tcp6, 0x3}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 4.582572596s ago: executing program 1 (id=2411): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x1, 0x5}) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000007c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000840)=0xc) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendto(r6, &(0x7f0000000080)="88f9317ca4e80fa9d9756cf2273b202efeb8685a7abf42d874dcec697db65d8dbe5b1131768253400ed630cc73830ab9f47702b4dfb1a0286513b1043cf68283e7a2726ed92d5b3fcdfc5a08f108e7903f26ebb70a41ad00a147a636b979a45a5e1c888ca94cc95c53c7a032869d9bc2a964db54e3ca1849c76004acda8fce7e17c39006b53d33ee28b7eaed5b145983a1ef41a22463be7fa935336c91a29e0b858fc2e4d03e9dc7210e99acb0d65156f319d1a4dd9d1c357481db37bde152c74e3a0350651580f1caa317647207d14f8b80ab3c27579bfc", 0xd8, 0x0, &(0x7f0000000180)=@can, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000200)={0x0, 0x7, 0x0, 0x8, 0xc00000}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f00000002c0)=r8) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000300)={r8, r9, r10}, 0xc) ioctl$sock_FIOGETOWN(r11, 0x8903, &(0x7f0000000880)=0x0) r13 = getgid() r14 = socket$inet6_udplite(0xa, 0x2, 0x88) r15 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r16 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r20 = syz_open_procfs$namespace(r18, &(0x7f0000001780)='ns/ipc\x00') r21 = getpid() sendmmsg$unix(r17, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, r13}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r18, @ANYRES32=0x0, @ANYBLOB="824312bab3146d281852688b4a326952cf3a9ac85bfef1aaf04ac657816e299d0bc92bf4b65d39f48570dff4f871693c326993532c6eca9499f7190ef58f4caedc95d8603fdd8c0dccb001155dc0a3c28195ec09c7ba42edb871d007e18699c7e941373ac3eb78a52b79a3a0e784aa47929449e5e83e71cc228508a0777efc39b01b8071d44ef659ff54c6fb7fcda7cce4638f9b068f3bb4cd12d99574614c0ff95eb028ca4a9c39d04d1cfa83d0c3ccf906ad68a1eed6f6b87f6876ea3c40dad2de5383829f493d37c0e166db19d3db36d87371be9290782623e00458a719817b593bf0d3efd7579f5bbb5bcd98", @ANYBLOB="000000001c000000ce930eb2963f3684020000007838c7111258dcd739191a7ebb20b420b3d2dc62bc5718b8b037f978f78e3dae606d02ef6ed630acec30686bd9d558e3e0b9330615720943ce42195e8cc3a9292464a5bee4cf1e9bbca3b424feddba86e5e6058411ef4d058d159034a717230862307fa7df890451432b58d196792288415e", @ANYRES32=r21, @ANYRES32=r19, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r20, @ANYRES32], 0x58, 0x800}}], 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000a00)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f00000004c0)="c89e1544fdfe416acf8a7efae80958319c9f0a66d040106f98631c13a370b6333f6998bb7b83843dfe0a4a91537bdeae3b4046259eb0e0e405e0dca0a283db30df4b05cb840df8128f008edbd2e021da29e111c1d7a90846f21daf02e3ba473930fb646f0cf8f2944e71a9eaecf4062c87e58a757bb451c7e66c84c91da06e804d2dc41e3af32de3d26c348ef8f80ba7a95c15b7e2d0386e5aea1e67f195c63fbb4b60af73418bd39269150f481ac22d2434a06948e9e07f076c0c53753a243ebb0b0e1817ae8ca9df123960d71247cb7d35009c5d4742c5a90d86531f9a81a92a9135aa", 0xe4}, {&(0x7f0000000600)="a1843ca4a97ae4171aaf92f6f1c27e48f885efa9f233dca7a7bfe35be47cce8c7704806ae172dcdbba490950445a2f6e0e85e52226126c1d822411c9eb52c505d29a100843", 0x45}, {&(0x7f0000000680)="14b6eb1e9155a13d02a72ed0e81abce1baa4c3d2ae79d6e25cb9217f90574d1adefd943182a7bb6eea346af4228785b1bd389ba2e1a537a00961dcc9a2660ecacaff0f1d16", 0x45}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000000000000000100000001000000", @ANYRES64=r3, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r10, @ANYBLOB="0000000011000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0x0, @ANYRESDEC=r18, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r14, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r19, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x118, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r22, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, r22}) 4.205473709s ago: executing program 1 (id=2415): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000002c0)={0x35, 0x48, '\x00', 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32) r1 = socket(0x2d, 0x2, 0x0) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x90001006}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4) 4.050889876s ago: executing program 1 (id=2418): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x224}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004010}, 0x8000) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000031401002abd7000ffdbdf00090002007379873100000000080041007278650014003300626f6e643000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) 2.762575005s ago: executing program 4 (id=2437): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061112800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x80800) accept4$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0x80000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f0000001100)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa86dd60ff00f500500600fe8000000000000000000000000000aafe8000000000000000000000000000aa2b0000096600000089040402fb688100ff0100000000000000000000000000012001000000000000000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800000009000"/20], 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x128, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xe8, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x0, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xfffffffffffffdb7}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x128}}, 0x0) 2.153504086s ago: executing program 4 (id=2441): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f00000001c0)="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", 0x16e) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @loopback, 0xa}, 0x1c) 2.086403199s ago: executing program 3 (id=2442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030020000000000000000000000005000100070000000900020073797a32000000cf5248518caee964dafd8589b037e66cdd14000000000010000300686173683a69702c6d6163000500040000afc5f72c746de25d1da4001419"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 2.055303482s ago: executing program 4 (id=2443): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, &(0x7f00000000c0), 0x8) sendmmsg$inet6(r0, &(0x7f0000002e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfffffff3, @loopback, 0x2}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000000140)="0daad8ed79cf1e617bbaa73867312a6d6b6658c7a6a6d0792bdbf173c0a1f216552d3ac7624e6fec6048ef77c3dccf5cdb0c05690d1721449cb598c2864be0b36ecbf4ad52de0761c7dbc16bcd98e6eca243851ccdd92a9216094cfe16128ffebb319e0637aca28542ccd2f122386ec0250459a0940b52e4f394572d81786075a9d98134f4679cb7ed77ae", 0x8b}, {&(0x7f0000000280)="ecd73b03f7d0a185d2ddefcd64913946274d10dd4dca14160ea8998677e3e877333da568d123f1c05fd110ef2d0450d75f221fe12e387d14999f53dde1ba6b477330a5755aba2e8ddbfd6df87bbf2f1ac54bbd350ca8565a32d87fae213a20edaab6400fc4ff791053070275fb6d8d5c579da522780ff6b1caadfb6e108ed37c16c6afc194be2272b24876dc7515dcf8b8599a3d4090bd84e036d4a2f1d38ae136204fda9fbd3ee10eb01451ce3e5ccba22e532e12", 0xb5}, {&(0x7f0000000340)="ee23fa89ff8991f9c2724015deaafaacde375f45dad3e62a92e79eba894d076d7ea41b75a2f4a3e94636ab318cf7a96157fbb583c0d7472759dbcad4988b846fead188ed36251fb06ef74bbce580fe8df84466a9c90d69b19183a7595ad86607cd1f284c2fb29a3cd8a4e6ad5effa868fe6b9ad7d7274896486a1749146609d6ca378985167a9267842405998c6f4606f62a2005f6f8b2fe877cf1f97b39738bb14a9b354347b36c3cad8c6ee5053c33e27acc35f18a8cf8d2f682a1a76d3a6f537bd800f0", 0xc5}, {&(0x7f0000000440)="0d3160f67bf58f5654d0a3789f6c4bf9a99452e984e748bb0aac2359b18aa23a041498119e8a0d270e3f", 0x2a}, {&(0x7f0000000480)="3c6e855833c91a0946f89733077eb53f07d4f229ac379b8f6f56585d8cf4891fb912fc85cf1c19035779190d59f2077d42051198fd4ef68230f3d8e7aa800ce9639595ff9b64e6f9ef45184db743a5fb84b3168335e8cf3da6a2a5b3878721afbd71ff64dcc23f6a385f05efc01f271597a5509e34c62c7628b2919ae329754b45c42a3b94d585b395ab4bee40376cc9f960b6566e6e70e9a9725cbbbdcce1b397f2f2dc2dfd86ce80d6e3bee3a2cf32b2ae9fd5c27fe8c91c", 0xb9}, {&(0x7f0000000540)="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", 0x1000}], 0x6}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000015c0)="a34c80c8ca4c0bbc", 0x8}, {&(0x7f0000001600)="6c90d2f836e085c96263a1e46f84951d9124a5cecf57b7df3f44f0dcf237fc007ec904ce0947549c4f47fdedf87706053181f61c37de2f4f9ad872e99bd77a97687fd07526628a70a50159e899e8da33d309cea242a10cb5148b2a4a659d874bcde83457bd41befed4254c195331f2133aba0d086ee3b1a1362ddec513a156735c73711ce948834297f2a4405e4e9c9980a23a87c605f248205257abcce6e5f4eb2131964a3a1e4ec97b14cd655e27122575140e823a086e170ee2dc40a4232d10f0f32e25d49146d59e9f6a5c05e4f27b7343ae73d1ce9c2fa82f85eda9680d8e86b124e2fa6c5b055008dd00635edeb9f93c", 0xf3}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="aca9a330b459ce8a1a87a8f88a22b1239c251feb460ec2b25f19ffcc69bfae2808812cc8232aac723c64cb7869e7ad3d199c8d82999e20b149c3cdac3be012896f9da1443035c5fb5be273357b4972bc403cfbef051a34823427c8947e6bc5bc63891be2a10b5fadc4cbeaa95f3066003b3d589cfce124ad8d4b3a048a86bacbdacc889f6a6e7049eb587ad91c5c8abf6983e703a54b34b8afebcf61", 0x9c}, {&(0x7f00000027c0)}, {&(0x7f0000002800)="f91d2737", 0x4}, {&(0x7f0000002840)="cd4dfe3b011ea946fdc27b4e696f69f32fe0e4bc0ff27ee344f92a34133a557f168cf7ce537bf01b929698983790915d70e7b0b833", 0x35}, {&(0x7f0000002880)="83d9240b2f22f5", 0x7}, {&(0x7f00000028c0)="e2615772c1c8d43bce9510fe017fad04f1a2575372ebcedbdc0b9ad495b2b4e101fb43adf344d5ea316907675b09f3ecef960e0c4f10d21088b77ccad023bc7816c9f5a203", 0x45}], 0x9, &(0x7f0000002a00)=[@rthdrdstopts={{0xa0, 0x29, 0x37, {0x2c, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @generic={0x4, 0x7e, "6dcddd59a8264f87089f1f7b8202ea9cfa5fccbcc3adc37453764f64732118ab98791dc979ede9c8568e8207eb532687727eee0cb1a010a943bb1b36f141ab21e678d62fdda358c272cd5e7e3cab9d9792155da178c83414c592139a5bbe410e1eaec5c86a3ba249df5700c82a2aafe60f48b861cdb948bf12fde8b56b53"}]}}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002ac0)="1632b1d5d28e3698fb2017101e74ede08760d56ec2b1d7ebfb87ffc997936337683d08f56015ee182e7108064c05d43aa7c735ed703443828a43e3057e1ded3f2d7f7c612852a2e9355fef92bb8838f1cdb1198bbff2ef51dacc8e9dfe5a77fd4cb0bc2553bf7f1a3e57e88c5547333232cf1cd4d758101983808785c12d800e62a068038199f7b2fd217cdac428ef1b4c03c3fc31acd0d3d5508c0424a35756df75d15f997262", 0xa7}, {&(0x7f0000002b80)="d377c4984687882816f2498256a63198c562eb3df657f45fdd2946d13db5d512f3f4e4b3251110f02dc85f13128eb302a6f879054a", 0x35}], 0x2, &(0x7f0000002c00)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x32, 0x6, 0x1, 0x33, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @rthdr={{0x88, 0x29, 0x39, {0x6c, 0xe, 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x29}, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private2, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x67, 0x10, 0x2, 0x52, 0x0, [@loopback, @remote, @mcast1, @loopback, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x8}, @loopback]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x16, 0x7, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x40}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @pad1, @ra={0x5, 0x2, 0x1}]}}}], 0x208}}], 0x3, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) 1.888611023s ago: executing program 3 (id=2444): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$NS_GET_PARENT(r2, 0x8004b709, 0x0) sendmmsg$inet6(r1, &(0x7f0000000d40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)}, {&(0x7f0000000380)="03a10691df6c68fe9e6c2bb219f9c301e7af3b3931e61cca3e2fc82a4b6eb0bdbca1535b5e5079c66f12187ab087687e12451eb5e491c4224faeae5a9f46999e325186c43bb59729a542e53051f89e1a0df2c926428c06bdf4481b421b2a5fe3b93dad4c6fc50205a26bb70f1fba630e7a8e5290fe70c1dcb206c345d5dd0c87f4a6cc50a8b250e3ff76538b9005760b71585ecd4f3a5c22ce2b6879fc81641092bdf23f51dec692b8", 0xa9}, {0x0}], 0x3}}], 0x2, 0x1405c891) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, 0x0, &(0x7f0000000280)) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000300)={'tunl0\x00', {0x2, 0x0, @multicast2}}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r10, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x21, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r11, 0x0, 0x486, 0x0, 0x0) 1.241538134s ago: executing program 2 (id=2450): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080), 0x4) listen(r1, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$kcm(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000005, 0x13, r4, 0x6a4d7000) getsockopt(r3, 0x111, 0x1, 0x0, &(0x7f0000000080)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 1.131486924s ago: executing program 2 (id=2452): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x2000400c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x8000) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async) write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000980)={0x1f, 0x1}, 0x6) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000040)=0xffffff01, 0x4) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0xffffffff000) (async) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.074473418s ago: executing program 4 (id=2453): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESDEC=r0], 0x84}}, 0x0) 943.377795ms ago: executing program 3 (id=2455): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89b0, &(0x7f0000000080)={'ip_vti0\x00', 0x100}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000500)=@ethtool_rx_ntuple={0x35, {0x2, @udp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x17}, @loopback, 0x4e24, 0x4e23, 0xfc}, @sctp_ip4_spec={@empty, @multicast2, 0x4e22, 0x4e24, 0x9}, 0x0, 0x4, 0x6, 0x1, 0xffffffffffffffff}}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000401}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa8, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x28044000}, 0x20040800) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)=0x2) bind$ax25(r6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25ded9f7, {0x0, 0x0, 0x0, 0x0, 0x2813, 0x2c21}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) 907.266782ms ago: executing program 0 (id=2456): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e24, 0x3, 'dh\x00', 0x12, 0x80000001, 0x22}, 0x2c) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) 899.274134ms ago: executing program 2 (id=2457): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="06000000000000000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100070000000000030200"/24], 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600050a000008001c00", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b40)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@local}, @in=@multicast2, {@in6=@mcast2, @in6=@private2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@offload={0xc}]}, 0x134}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf251c0000000e0001006e657464657673698894ce1c0f0002006e657464657673696d30000008000b000000000090bf030e11a0a539879408d1910a0823e5e76f4b3224fddd63cb2c2300db3788d1e93d6bfa97e0"], 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4850) 725.360599ms ago: executing program 0 (id=2458): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) (rerun: 32) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r5, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 723.789456ms ago: executing program 2 (id=2459): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) writev(r0, &(0x7f00000034c0)=[{&(0x7f0000001400)="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", 0x101}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r1}) r4 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x20, 0x0, 0x7, {[@cipso={0x86, 0xe, 0xffffffffffffffff, [{0x2, 0x8, "055800001501"}]}]}}}], 0x20}}], 0x1, 0x804) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbdf253a0000000c009900100000007100000015005b00d04c6e91bddb0491b7ba675dc3e153ef8d0000000600650008000000060065008000000006006500fdff000006006500ff030000"], 0x58}, 0x1, 0x0, 0x0, 0x8011}, 0x21e7d0d14dfd810b) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000901010000000000000000030000030800054000000016140002000600034000020000060003400001000008000540000000190c00048008000140000000026000020006000340000200001400018008000100ac1e010108000200ac1414bb060003400007000006000340000000001400018008000100ffffffff08000200ac1e010106000340000400001400018008000100ac1414aa080800034000000005"], 0xb4}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000001540)=ANY=[@ANYBLOB="d004000020fbb84f693c96845c55a0cf3beaf9e065533ea1c2fac447cf0dfd0c752c75a3c1efc54c", @ANYRES16=r2, @ANYBLOB="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"], 0x4d0}, 0x1, 0x0, 0x0, 0x40}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x12) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x2000000026fe, 0x0, 0x1}}, 0x40) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) socket$rds(0x15, 0x5, 0x0) 714.019612ms ago: executing program 4 (id=2460): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x5c}}, 0x4000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x5c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x13}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x9005}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x13}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 671.216607ms ago: executing program 3 (id=2461): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xb0}}, 0x1) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r3, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) 569.288979ms ago: executing program 0 (id=2462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8880) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000002c0)={&(0x7f0000000240)=""/89, 0x59}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="f1bf29177000fcdfdf2517"], 0x6b}, 0x1, 0x0, 0x0, 0x44000}, 0x240080a4) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r1) 560.398163ms ago: executing program 4 (id=2463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r2 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="000088b5aaaabb08004519001400650000012f9078ac14142100000000"], 0x26) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) (async) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @multicast}, 0x10) (async) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000080)={r8, 0x1, 0x6, @multicast}, 0x10) (async, rerun: 64) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) (async) read$nci(r6, 0x0, 0x30) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) (async) sendmsg$kcm(r3, &(0x7f0000000a80)={&(0x7f0000000180)=@nfc={0x27, r11, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)="c16fe86661", 0x5}, {&(0x7f00000002c0)="14b6514c2b8d14beed821df154a214bc09756b2a851e677e6f39905a35e337e065360ef878d04a4b6f8c73dd0904a1775164b70749c794700e150a71fe0b26be92b9afc9e0bcfc63ddcb7cff4bb976f684852a3440", 0x55}, {&(0x7f0000000480)="95a10907f9f94cb7bed49d98cd7a41e3ea4a8a40c16d7adfbee745f011b5ca787e79ce3acc7c1e8a4719400b23350ad63fcc741fa11173a8c745318517f1c41f8a67a4356fb6e7e4e1cf6d02b7b023523666b7ba8ff9fd7dc8ed7f0bd331c9a2ddb8bb8a33aec1aee699d235c7b99f48f3e8ac4eeb24c787cd22eb225f08afa7167ce047d9f9c12fb1841c8333ed007df0bd43a5a97adb7a1c31430a72c985d177f38e77c67ae02021988c0240e18384c4d2c5fb", 0xb4}, {&(0x7f0000000540)="1ee4bae051541a644abe27e2", 0xc}, {&(0x7f0000000600)="d122a763260d9ead221ea19d87686a9b0db539a89b475da7aa7bb0fda6117e4c9157683fd6665be20f012c76fc4521a284e56f89a49d404a219e81b936dad882a6319423c1ceb46e8ff9", 0x4a}, {&(0x7f0000000bc0)="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", 0x165}, {&(0x7f0000000780)="6d1f5a25c0ee06befb73c3dc5679c0b9e8d07115dc5e6ad5f8999bc1d5cf2b55090f219eab8a7dec3eafa7004e46ed1cecfe325dbb0d6222c0b08b27d2591539bcb549730a06e8fb58a999f7c92c7c097d11931f8fb0dc06bca4ffa6faa9b495050d6a766ca850ab12dfd19ea4774034bb52a9c7b5d11c24bc3d9c93dbabb516648f0fcd9c51b80753", 0x89}, {&(0x7f0000000840)="844fe2bab961d2b5d2ff42c26bbaf36c457a92a6efe4966b501db241cb2071a5296716da52f62668f92eb8ef821ebf15159e4dec90a04306d536d32db6b9dd6722da1b313ced7ea86f2c80253c6cacbadf5e7b7836b0ac81ec2a27d6a128dcdfc12196022372a38314cc1f561b5662726fd0a3b285585adb9b40e033075003d03777ea945be513e99d8668e6df1d0b4fdf965a433dada336105e4f77f3dc547b1229e98f9fc73603cc7bd54e0ee612ce0eecf40f3a", 0xb5}], 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="4000000000000000ff0000000800000000bfb46db2ef8589537a52c0e86f5e240f8b0baa888f65b15361eb2c2da4443bf4d63486c7a050442af6dda603936d587800000000000000840000000600000079d6177dd8c91cfbd364bc0cb2f632103c9348e66bf95ce638cf7f8586b3fd540862ecbc65de1cc245e951f30185390e14edfac7c6a212b7851708128d3f8fa8ba426ed3e211a3fdae6aa111aaf388ed50ea1ff2b0d4fdd35062aa9b49264c1b95121bff8a2384b06e130df3ff68a504177b77001800000000000000010100000500000015cc000000000000"], 0xd0}, 0x4040801) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008cc0041007278650014003300767863616e3100"/57], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x8}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x4}, 0x2) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xfff1}, {0xffe0, 0xffff}, {0x1, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 519.823326ms ago: executing program 0 (id=2464): r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) r5 = accept(r3, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x6) (async) setsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r5}, 0x20) (async) recvmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@nat={'nat\x00', 0x670, 0x5, 0x470, 0x0, 0x258, 0xffffffff, 0x258, 0x120, 0x3d8, 0x3d8, 0xffffffff, 0x3d8, 0x3d8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0xe8, 0x120, 0x48, {}, [@common=@set={{0x40}, {{0x0, [0xc, 0x3, 0x1, 0x0, 0x2, 0x4], 0x3, 0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x108, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_virt_wifi\x00', {0xff}, 'vlan0\x00', {0xff}, 0x0, 0x10}}, @common=@ah={{0x30}, {[0x97, 0x5], 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0xffff, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xffffff00, 0x0, 'batadv_slave_1\x00', 'dummy0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @private=0xa010100, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 413.244982ms ago: executing program 2 (id=2465): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0xffffffffffffffed}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0xb4, 0x0, 0x400, 0x70bd2a, 0x9, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x5a8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3ff}, {0x8, 0xb, 0x8000}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x100}, 0x60081) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f00000000c0)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r2, 0x10940, 0x27025}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40048d4}, 0x40000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x68, r4, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x6, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x4095) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240"], 0xc4}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000040)={r8, 0x2, 0x10}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r8, 0xc}, 0x8) 412.682405ms ago: executing program 0 (id=2466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0xffffffff, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x100000001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f00000019c0)='}+{#],$}:\x00', 0xa) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r4, 0x215eb000) r6 = socket(0x14, 0x3, 0x2000004) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x42030028, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="60000000090601040000000000000000010000044c0008800c000780060005404e2300000c00078008000840000000800c000780060004404e2100000c00078005001a00000000000c00078008000940000000230a40fffffff844b2e3cfb2c511ecffb3eaadb9d9eff0469c7acf15c96c31fa659c4ef598e6f0b482cd778c8ac6"], 0x60}, 0x1, 0x0, 0x0, 0x4000840}, 0x4008000) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xe0000000}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x400448c9, &(0x7f00000000c0)={'wlan0\x00', 0x1}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r9) sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r10, 0x6ff, 0x0, 0x25dfdbfc, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="25e25def67d402f459002191d0e14b"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004080) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000480)={@initdev, @remote}, &(0x7f00000004c0)=0xc) (async) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) 233.979856ms ago: executing program 3 (id=2467): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090a010400000000000000000000000008000a40001000000900020073797a31000000000900010073797a31000000000800054000000021080003400000004008000f"], 0x74}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r4}, 0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 178.858662ms ago: executing program 2 (id=2468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 1.340342ms ago: executing program 3 (id=2469): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x4}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) unshare(0x40000000) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000240)={0x0, r1, r0, 0x7, 0x80000001, '\x00', {0xff, 0x623b, 0x5, 0x3, 0x2, 0x4, 0x80000000, 0x80000001, {0x2, 0x8}, {0x0, 0x1}, {0x88, 0x40}, 0x5, 0x4, 0x3b7, 0x7fffffff, 0x4, 0x1, 0x4, 0x3ff, 0x8, 0x3800, '\x00', 0x2, 0x83, 0x1ff, 0x5}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000048000400000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/17, 0x11}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}}], 0x2, 0x40, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140000003b000100dbdf25040017800000000000"], 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) r7 = syz_init_net_socket$ax25(0x3, 0x7, 0xc3) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000300)) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd7, '\x00', @remote}}}}}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000200)=r10, 0x4) getsockopt$sock_buf(r9, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r11, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000011}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x6}, @IFLA_LINK={0x8}, @IFLA_MAP={0x24, 0xe, {0x7f, 0x6, 0x9, 0x9, 0xfe}}]}, 0x54}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) 0s ago: executing program 0 (id=2470): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@delqdisc={0x34, 0x25, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x10, 0x4}, {0xfff2, 0xf}, {0xfff1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x19}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x48000000}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000380)=0x28) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) r5 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, 0x5) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): k: 'syz.1.354': attribute type 1 has an invalid length. [ 130.070788][ T7382] nbd0: detected capacity change from 0 to 63 [ 130.093524][ T7399] netlink: 'syz.0.359': attribute type 1 has an invalid length. [ 130.104287][ T5146] block nbd0: Receive control failed (result -32) [ 130.104287][ T5832] block nbd0: Receive control failed (result -32) [ 130.123330][ T5847] block nbd0: Dead connection, failed to find a fallback [ 130.132311][ T5847] block nbd0: shutting down sockets [ 130.138299][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.150879][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 130.159053][ T5847] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.183090][ T5847] Buffer I/O error on dev nbd0, logical block 1, async page read [ 130.197842][ T5847] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.225772][ T5847] Buffer I/O error on dev nbd0, logical block 2, async page read [ 130.244183][ T5847] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.275944][ T5847] Buffer I/O error on dev nbd0, logical block 3, async page read [ 130.291564][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.342955][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 130.359629][ T5847] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.383322][ T5847] Buffer I/O error on dev nbd0, logical block 1, async page read [ 130.399701][ T5847] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.420802][ T5847] Buffer I/O error on dev nbd0, logical block 2, async page read [ 130.456555][ T5847] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.501879][ T5847] Buffer I/O error on dev nbd0, logical block 3, async page read [ 130.518850][ T7423] 8021q: VLANs not supported on lo [ 130.538910][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.572018][ T7423] raw_sendmsg: syz.3.367 forgot to set AF_INET. Fix it! [ 130.581497][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 130.602934][ T7423] netlink: 'syz.3.367': attribute type 5 has an invalid length. [ 130.619940][ T5847] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.636636][ T5847] Buffer I/O error on dev nbd0, logical block 1, async page read [ 130.645781][ T5847] ldm_validate_partition_table(): Disk read failed. [ 130.657612][ T5847] Dev nbd0: unable to read RDB block 0 [ 130.665327][ T5847] nbd0: unable to read partition table [ 130.678259][ T5847] ldm_validate_partition_table(): Disk read failed. [ 130.686038][ T5847] Dev nbd0: unable to read RDB block 0 [ 130.692650][ T5847] nbd0: unable to read partition table [ 131.189631][ T10] IPVS: starting estimator thread 0... [ 131.299634][ T7442] IPVS: using max 30 ests per chain, 72000 per kthread [ 131.707552][ T7464] __nla_validate_parse: 10 callbacks suppressed [ 131.707573][ T7464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.377'. [ 131.796716][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 131.905656][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.379'. [ 131.943759][ T7467] : entered promiscuous mode [ 132.070336][ T7472] syzkaller0: entered promiscuous mode [ 132.080636][ T7472] syzkaller0: entered allmulticast mode [ 132.871329][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.878440][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.297754][ T7524] netlink: 184 bytes leftover after parsing attributes in process `syz.4.394'. [ 133.342707][ T7524] netlink: 'syz.4.394': attribute type 1 has an invalid length. [ 133.488075][ T7531] netlink: 'syz.4.394': attribute type 1 has an invalid length. [ 133.525829][ T7531] netlink: 'syz.4.394': attribute type 2 has an invalid length. [ 133.553159][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 133.567726][ T7537] netlink: 'syz.2.397': attribute type 21 has an invalid length. [ 133.694101][ T7537] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 133.718288][ T7544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.399'. [ 133.736611][ T7537] bond3 (unregistering): Released all slaves [ 133.788778][ T7544] netlink: 'syz.4.399': attribute type 6 has an invalid length. [ 133.843193][ T7530] "syz.0.396" (7530) uses obsolete ecb(arc4) skcipher [ 133.956675][ T7549] x9: renamed from bridge_slave_0 (while UP) [ 134.063181][ T7556] nftables ruleset with unbound chain [ 134.343831][ T7536] batman_adv: batadv0: Adding interface: dummy0 [ 134.357859][ T7536] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.389992][ T7536] batman_adv: batadv0: Interface activated: dummy0 [ 134.416480][ T7540] batadv0: mtu less than device minimum [ 134.438146][ T7540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.450709][ T7540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.462568][ T7540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.474464][ T7540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.486313][ T7540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.498145][ T7540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.510113][ T7540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.521948][ T7540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.533799][ T7540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.721659][ T7575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.411'. [ 134.843188][ T7579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.412'. [ 134.927405][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 135.263081][ T7606] netlink: 'syz.0.419': attribute type 8 has an invalid length. [ 135.382946][ T7603] syzkaller0: entered allmulticast mode [ 136.024663][ T7600] netlink: 48 bytes leftover after parsing attributes in process `syz.1.418'. [ 136.821463][ T7677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.435'. [ 136.830918][ T7677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.435'. [ 138.800309][ T7623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.895657][ T7685] netlink: 256 bytes leftover after parsing attributes in process `syz.3.438'. [ 139.391776][ T7721] xt_bpf: check failed: parse error [ 139.479834][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 139.491475][ T7723] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 139.724500][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.454'. [ 139.770591][ T7732] mac80211_hwsim hwsim10 : renamed from wlan1 (while UP) [ 139.963671][ T7747] net_ratelimit: 13 callbacks suppressed [ 139.963692][ T7747] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 140.171069][ T7754] veth3: entered allmulticast mode [ 140.191832][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'. [ 140.192909][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 140.242125][ T7759] netlink: 'syz.3.461': attribute type 5 has an invalid length. [ 140.292819][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.461'. [ 140.353480][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.464'. [ 140.414246][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 140.414522][ T3577] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.423322][ T7759] netlink: 'syz.3.461': attribute type 5 has an invalid length. [ 140.486532][ T3577] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.526809][ T3577] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.557807][ T3577] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.881783][ T7789] delete_channel: no stack [ 141.091563][ T7803] netlink: 'syz.0.476': attribute type 1 has an invalid length. [ 141.173312][ T390] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.185712][ T7806] netlink: 'syz.1.478': attribute type 21 has an invalid length. [ 141.218779][ T7803] bond3: (slave vxcan7): The slave device specified does not support setting the MAC address [ 141.230907][ T7803] bond3: (slave vxcan7): Error -95 calling set_mac_address [ 141.359350][ T7811] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 141.603308][ T7832] netlink: 'syz.0.484': attribute type 3 has an invalid length. [ 141.894308][ T7851] netlink: 'syz.1.489': attribute type 1 has an invalid length. [ 141.942130][ T7851] bond1: entered promiscuous mode [ 141.947652][ T7851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.270473][ T7867] netlink: zone id is out of range [ 142.295688][ T7867] netlink: zone id is out of range [ 142.303624][ T7863] __nla_validate_parse: 11 callbacks suppressed [ 142.303643][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 142.327244][ T7867] netlink: zone id is out of range [ 142.347139][ T7867] netlink: zone id is out of range [ 142.353765][ T7867] netlink: zone id is out of range [ 142.363444][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.492'. [ 142.373359][ T7867] netlink: zone id is out of range [ 142.395232][ T7867] netlink: zone id is out of range [ 142.402505][ T7867] netlink: zone id is out of range [ 142.409890][ T7867] netlink: zone id is out of range [ 142.429159][ T7874] netlink: 'syz.4.493': attribute type 1 has an invalid length. [ 142.442234][ T7874] netlink: 224 bytes leftover after parsing attributes in process `syz.4.493'. [ 142.462079][ T7864] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 142.502487][ T7864] team0: Port device batadv1 added [ 142.736378][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.744739][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.800821][ T7891] syzkaller0: entered promiscuous mode [ 143.005000][ T7902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.502'. [ 143.040884][ T7902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.502'. [ 143.057227][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 143.124616][ T7905] unsupported nlmsg_type 40 [ 143.154041][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 143.486730][ T7921] netlink: 'syz.4.507': attribute type 21 has an invalid length. [ 143.533486][ T7921] netlink: 152 bytes leftover after parsing attributes in process `syz.4.507'. [ 143.584425][ T7928] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 143.807611][ T7940] netlink: 72 bytes leftover after parsing attributes in process `syz.0.510'. [ 143.874146][ T7940] netlink: 72 bytes leftover after parsing attributes in process `syz.0.510'. [ 144.222505][ T7965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.230450][ T7965] IPv6: NLM_F_CREATE should be set when creating new route [ 144.237729][ T7965] IPv6: NLM_F_CREATE should be set when creating new route [ 144.245047][ T7965] IPv6: NLM_F_CREATE should be set when creating new route [ 144.287303][ T7968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.019973][ T5830] net_ratelimit: 56 callbacks suppressed [ 145.019992][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.034811][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.226536][ T8015] netlink: 'syz.1.528': attribute type 8 has an invalid length. [ 145.337603][ T5832] Bluetooth: hci4: link tx timeout [ 145.349101][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.655217][ T8034] netlink: 'syz.4.533': attribute type 4 has an invalid length. [ 146.079741][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.088146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.184874][ T8061] ip6gre0: Master is either lo or non-ether device [ 146.530431][ T8070] netlink: 'syz.1.544': attribute type 2 has an invalid length. [ 146.702697][ T8070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.074630][ T8095] netlink: 'syz.1.550': attribute type 29 has an invalid length. [ 147.224234][ T8108] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 147.289979][ T8108] bond4: entered promiscuous mode [ 147.296577][ T8108] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.349265][ T8108] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.360331][ T8108] bond4: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 147.402010][ T8122] __nla_validate_parse: 10 callbacks suppressed [ 147.402034][ T8122] netlink: 72 bytes leftover after parsing attributes in process `syz.4.555'. [ 147.425958][ T5146] Bluetooth: hci4: command 0x0406 tx timeout [ 147.445542][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 147.468054][ T8108] bond4: (slave ip6tnl1): Setting fail_over_mac to active for active-backup mode [ 147.491863][ T8108] bond4: (slave ip6tnl1): making interface the new active one [ 147.501084][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'. [ 147.527597][ T8108] ip6tnl1: entered promiscuous mode [ 147.535955][ T8108] bond4: (slave ip6tnl1): Enslaving as an active interface with an up link [ 147.799944][ T8126] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.811926][ T8126] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.908852][ T8126] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.932435][ T8126] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.135518][ T8148] Unsupported ieee802154 address type: 0 [ 148.187058][ T8126] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.205543][ T8126] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.720218][ T8126] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.730937][ T8126] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.748773][ T8159] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.567'. [ 149.349827][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 150.305750][ T8168] veth0: entered promiscuous mode [ 150.316879][ T8169] veth0: left promiscuous mode [ 150.656292][ T8184] netlink: 100 bytes leftover after parsing attributes in process `syz.2.573'. [ 150.706798][ T8184] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 150.755396][ T8187] netem: change failed [ 150.907160][ T8190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'. [ 151.266859][ T8213] syzkaller0: entered promiscuous mode [ 151.280869][ T8213] syzkaller0: entered allmulticast mode [ 151.341938][ T8213] netlink: 'syz.3.581': attribute type 21 has an invalid length. [ 151.369719][ T8213] netlink: 132 bytes leftover after parsing attributes in process `syz.3.581'. [ 151.393980][ T8218] netlink: 88 bytes leftover after parsing attributes in process `syz.2.583'. [ 151.614542][ T8227] tipc: Failed to remove unknown binding: 66,0,0/0:3524906808/3524906809 [ 151.652902][ T8227] tipc: Failed to remove unknown binding: 66,0,0/0:3524906808/3524906809 [ 151.734467][ T797] IPVS: starting estimator thread 0... [ 151.849211][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.589'. [ 151.869633][ T8236] IPVS: using max 31 ests per chain, 74400 per kthread [ 152.213932][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 153.132456][ T8290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.158891][ T8295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.301495][ T8305] netlink: 'syz.4.601': attribute type 2 has an invalid length. [ 153.318181][ T8305] netlink: 'syz.4.601': attribute type 2 has an invalid length. [ 153.479881][ T8313] __nla_validate_parse: 1 callbacks suppressed [ 153.479902][ T8313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.604'. [ 153.558782][ T8316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.738384][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'. [ 153.928893][ T8330] syzkaller0: entered allmulticast mode [ 153.985778][ T8330] syzkaller0 (unregistering): left allmulticast mode [ 154.007161][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 154.127519][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 154.154203][ T8332] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 154.155399][ T8348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.209850][ T8332] bond2: (slave lo): Enslaving as an active interface with an up link [ 154.233927][ T8332] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 154.284011][ T8343] netlink: 44 bytes leftover after parsing attributes in process `syz.0.612'. [ 154.318810][ T8343] sock: sock_set_timeout: `syz.0.612' (pid 8343) tries to set negative timeout [ 154.559751][ T8362] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.617'. [ 154.789817][ T8378] netlink: 256 bytes leftover after parsing attributes in process `syz.0.620'. [ 154.838194][ T8380] netlink: 48 bytes leftover after parsing attributes in process `syz.4.621'. [ 154.905831][ T8378] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 155.000976][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 155.033531][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 155.055914][ T8391] netlink: 'syz.2.624': attribute type 3 has an invalid length. [ 155.473235][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.631'. [ 155.522351][ T8421] netlink: 'syz.2.632': attribute type 21 has an invalid length. [ 155.664669][ T8430] openvswitch: netlink: IP tunnel dst address not specified [ 155.964414][ T5490] 8021q: adding VLAN 0 to HW filter on device eth3 [ 156.003843][ T8445] SET target dimension over the limit! [ 156.049153][ T8445] netlink: 'syz.2.638': attribute type 9 has an invalid length. [ 156.564180][ T8473] netlink: 'syz.2.646': attribute type 25 has an invalid length. [ 156.588271][ T8473] netlink: 'syz.2.646': attribute type 28 has an invalid length. [ 156.941394][ T8488] syzkaller0: entered promiscuous mode [ 156.963005][ T8488] syzkaller0: entered allmulticast mode [ 157.015463][ T8496] IPVS: sync thread started: state = MASTER, mcast_ifn = team0, syncid = 1, id = 0 [ 157.138138][ T8504] netlink: 'syz.1.654': attribute type 2 has an invalid length. [ 157.148264][ T8504] netlink: 'syz.1.654': attribute type 1 has an invalid length. [ 157.171783][ T8504] netlink: 'syz.1.654': attribute type 2 has an invalid length. [ 157.236473][ T8504] netlink: 'syz.1.654': attribute type 1 has an invalid length. [ 157.554422][ T5490] 8021q: adding VLAN 0 to HW filter on device eth4 [ 157.731998][ T8527] netlink: 'syz.4.660': attribute type 11 has an invalid length. [ 158.041250][ T8536] syzkaller0: entered promiscuous mode [ 158.100084][ T8536] 0: reclassify loop, rule prio 0, protocol 800 [ 158.616200][ T8562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.623561][ T8562] IPv6: NLM_F_CREATE should be set when creating new route [ 158.647518][ T8562] lo: entered allmulticast mode [ 158.667586][ T8562] tunl0: entered allmulticast mode [ 158.686963][ T8562] gre0: entered allmulticast mode [ 158.705590][ T8562] gretap0: entered allmulticast mode [ 158.715482][ T8562] erspan0: entered allmulticast mode [ 158.725360][ T8562] ip_vti0: entered allmulticast mode [ 158.734811][ T8562] ip6_vti0: entered allmulticast mode [ 158.752710][ T8562] sit0: entered allmulticast mode [ 158.775343][ T8562] ip6tnl0: entered allmulticast mode [ 158.787882][ T8562] ip6gre0: entered allmulticast mode [ 158.800699][ T8562] syz_tun: entered allmulticast mode [ 158.820063][ T8562] ip6gretap0: entered allmulticast mode [ 158.830763][ T8562] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.838633][ T8562] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.848116][ T8562] bridge0: entered allmulticast mode [ 158.857472][ T8562] vcan0: entered allmulticast mode [ 158.878658][ T8562] bond0: entered allmulticast mode [ 158.887091][ T8562] bond_slave_0: entered allmulticast mode [ 158.916812][ T8562] bond_slave_1: entered allmulticast mode [ 158.934068][ T8562] team0: entered allmulticast mode [ 158.940193][ T8562] team_slave_0: entered allmulticast mode [ 158.946121][ T8562] team_slave_1: entered allmulticast mode [ 158.956158][ T8562] dummy0: entered allmulticast mode [ 158.974311][ T8562] nlmon0: entered allmulticast mode [ 158.984022][ T8562] caif0: entered allmulticast mode [ 159.003134][ T8562] batadv0: entered allmulticast mode [ 159.030736][ T8562] vxcan0: entered allmulticast mode [ 159.044509][ T8562] vxcan1: entered allmulticast mode [ 159.059621][ T8562] veth1: entered allmulticast mode [ 159.076027][ T8562] wg0: entered allmulticast mode [ 159.086881][ T8562] wg1: entered allmulticast mode [ 159.096233][ T8562] wg2: entered allmulticast mode [ 159.112902][ T8562] veth0_to_bridge: entered allmulticast mode [ 159.128781][ T8562] veth1_to_bridge: entered allmulticast mode [ 159.140933][ T8562] veth0_to_bond: entered allmulticast mode [ 159.148160][ T8562] veth1_to_bond: entered allmulticast mode [ 159.157497][ T8562] veth0_to_team: entered allmulticast mode [ 159.168605][ T8562] veth1_to_team: entered allmulticast mode [ 159.179034][ T8562] veth0_to_batadv: entered allmulticast mode [ 159.188359][ T8562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.197212][ T8562] batadv_slave_0: entered allmulticast mode [ 159.208733][ T8562] veth1_to_batadv: entered allmulticast mode [ 159.218933][ T8562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.228289][ T8562] batadv_slave_1: entered allmulticast mode [ 159.237737][ T8562] xfrm0: entered allmulticast mode [ 159.246569][ T8562] veth0_to_hsr: entered allmulticast mode [ 159.256447][ T8562] hsr_slave_0: entered allmulticast mode [ 159.264400][ T8562] veth1_to_hsr: entered allmulticast mode [ 159.274743][ T8562] hsr0: entered allmulticast mode [ 159.282233][ T8562] veth1_virt_wifi: entered allmulticast mode [ 159.291686][ T8562] veth0_virt_wifi: entered allmulticast mode [ 159.300311][ T8562] virt_wifi0: entered allmulticast mode [ 159.308243][ T8562] veth1_vlan: entered allmulticast mode [ 159.317370][ T8562] veth0_vlan: entered allmulticast mode [ 159.324737][ T8562] vlan0: entered allmulticast mode [ 159.330838][ T8562] vlan1: entered allmulticast mode [ 159.336463][ T8562] macvlan0: entered allmulticast mode [ 159.345312][ T8562] macvlan1: entered allmulticast mode [ 159.353345][ T8562] ipvlan0: entered allmulticast mode [ 159.358825][ T8562] ipvlan1: entered allmulticast mode [ 159.364755][ T8562] veth1_macvtap: entered allmulticast mode [ 159.374012][ T8562] veth0_macvtap: entered allmulticast mode [ 159.383559][ T8562] macvtap0: entered allmulticast mode [ 159.392541][ T8562] macsec0: entered allmulticast mode [ 159.402196][ T8562] geneve0: entered allmulticast mode [ 159.414318][ T8562] geneve1: entered allmulticast mode [ 159.423519][ T8562] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 159.433378][ T8562] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 159.442540][ T8562] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 159.456054][ T8562] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 159.467791][ T8562] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 159.483740][ T8562] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 159.498912][ T8562] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 159.508084][ T8562] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 159.521096][ T8562] vxlan0: entered allmulticast mode [ 159.527698][ T8562] bond1: entered allmulticast mode [ 159.534276][ T8562] bridge1: entered allmulticast mode [ 159.541413][ T8562] bridge2: entered allmulticast mode [ 159.548516][ T8562] batadv1: entered allmulticast mode [ 159.555244][ T8562] bridge3: entered allmulticast mode [ 159.562898][ T8562] macvlan2: entered allmulticast mode [ 159.605291][ T8580] __nla_validate_parse: 11 callbacks suppressed [ 159.605349][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.675'. [ 159.709821][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 159.749257][ T155] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.774896][ T8595] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 159.787451][ T8593] netlink: 152 bytes leftover after parsing attributes in process `syz.3.677'. [ 159.797665][ T155] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.829567][ T155] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.862414][ T155] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.933380][ T155] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.974085][ T155] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.015369][ T155] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.273023][ T8616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.679'. [ 160.292077][ T8616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.679'. [ 160.327541][ T155] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.381632][ T8610] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 160.392385][ T8615] syzkaller0: entered promiscuous mode [ 160.404831][ T8615] syzkaller0: entered allmulticast mode [ 160.995315][ T8652] netlink: 72 bytes leftover after parsing attributes in process `syz.3.692'. [ 161.066996][ T8657] netlink: 224 bytes leftover after parsing attributes in process `syz.2.694'. [ 161.615184][ T8666] netlink: 'syz.2.697': attribute type 2 has an invalid length. [ 161.623276][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'. [ 161.673444][ T8690] xt_hashlimit: size too large, truncated to 1048576 [ 161.727673][ T8691] xt_hashlimit: size too large, truncated to 1048576 [ 161.919347][ T8696] netlink: 7 bytes leftover after parsing attributes in process `syz.0.707'. [ 161.999420][ T8696] erspan0: entered promiscuous mode [ 162.214430][ T8714] netlink: 'syz.2.710': attribute type 1 has an invalid length. [ 162.252546][ T8714] netlink: 224 bytes leftover after parsing attributes in process `syz.2.710'. [ 162.563383][ T8733] xt_l2tp: unknown flags: 10 [ 162.995916][ T8747] syzkaller0: entered promiscuous mode [ 163.001593][ T8747] syzkaller0: entered allmulticast mode [ 163.010787][ T8747] tc action pedit 'at' offset 257 out of bounds [ 163.551563][ T8765] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 163.634830][ T8765] bond2 (unregistering): Released all slaves [ 163.642775][ T8775] IPVS: Scheduler module ip_vs_sip not found [ 163.749262][ T8765] syzkaller0: entered promiscuous mode [ 163.779104][ T8765] syzkaller0: entered allmulticast mode [ 163.966451][ T8792] netlink: 'syz.0.732': attribute type 4 has an invalid length. [ 164.619658][ T8830] netlink: 'syz.3.743': attribute type 1 has an invalid length. [ 164.629230][ T8825] bridge0: port 3(batadv0) entered disabled state [ 164.641262][ T8825] bridge_slave_1: left allmulticast mode [ 164.652774][ T8825] bridge_slave_1: left promiscuous mode [ 164.658712][ T8825] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.669419][ T8825] bridge_slave_0: left allmulticast mode [ 164.675405][ T8825] bridge_slave_0: left promiscuous mode [ 164.683147][ T8825] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.786206][ T8830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.808426][ T8839] bond2: (slave geneve2): making interface the new active one [ 164.819229][ T8839] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 164.902515][ T8836] vlan2: entered allmulticast mode [ 164.927720][ T8836] bond2: entered allmulticast mode [ 164.940400][ T8836] geneve2: entered allmulticast mode [ 165.069830][ T8848] netlink: 'syz.1.746': attribute type 10 has an invalid length. [ 165.084575][ T8848] bond0: (slave wlan1): Releasing backup interface [ 165.454983][ T8864] __nla_validate_parse: 4 callbacks suppressed [ 165.455006][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.751'. [ 165.525381][ T8878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.755'. [ 165.545389][ T8880] syzkaller1: entered promiscuous mode [ 165.575366][ T8880] syzkaller1: entered allmulticast mode [ 165.586429][ T8878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.755'. [ 165.692850][ T8883] netlink: 'syz.0.756': attribute type 1 has an invalid length. [ 165.813447][ T8886] vlan3: entered allmulticast mode [ 165.818638][ T8886] bond0: entered allmulticast mode [ 165.857169][ T8886] bond_slave_0: entered allmulticast mode [ 165.874838][ T8886] bond_slave_1: entered allmulticast mode [ 166.134898][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.765'. [ 166.200989][ T8921] netlink: 84 bytes leftover after parsing attributes in process `syz.2.767'. [ 166.447631][ T8937] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.771'. [ 166.456847][ T8939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.772'. [ 166.687741][ T8950] SET target dimension over the limit! [ 168.279822][ T8988] openvswitch: netlink: Message has -2 unknown bytes. [ 168.816134][ T9015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.792'. [ 168.835855][ T9023] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 169.027861][ T9034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.795'. [ 169.043659][ T9034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.795'. [ 169.258771][ T9046] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 169.565293][ T9069] xt_hashlimit: invalid interval [ 170.664139][ T9137] netlink: 'syz.4.811': attribute type 4 has an invalid length. [ 170.689637][ T9137] netlink: 'syz.4.811': attribute type 1 has an invalid length. [ 170.718249][ T9137] __nla_validate_parse: 11 callbacks suppressed [ 170.718272][ T9137] netlink: 228 bytes leftover after parsing attributes in process `syz.4.811'. [ 170.735319][ T9141] netlink: 'syz.1.810': attribute type 8 has an invalid length. [ 170.761413][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 171.321680][ T9168] syzkaller1: entered promiscuous mode [ 171.357838][ T9168] syzkaller1: entered allmulticast mode [ 171.722342][ T9195] netlink: 'syz.0.824': attribute type 1 has an invalid length. [ 171.724909][ T9192] netlink: 'syz.2.822': attribute type 1 has an invalid length. [ 171.787534][ T9195] bond5: entered promiscuous mode [ 171.795164][ T9195] 8021q: adding VLAN 0 to HW filter on device bond5 [ 171.927699][ T9199] bond5: (slave bridge3): making interface the new active one [ 171.958388][ T9199] bridge3: entered promiscuous mode [ 171.964994][ T9199] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 172.052179][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.815'. [ 172.816072][ T9242] netlink: 'syz.4.832': attribute type 10 has an invalid length. [ 172.863240][ T9242] veth0_vlan: left promiscuous mode [ 172.915494][ T9242] veth0_vlan: entered promiscuous mode [ 172.972530][ T9242] team0: Device veth0_vlan failed to register rx_handler [ 173.022871][ T9262] netlink: 'syz.0.835': attribute type 11 has an invalid length. [ 173.044143][ T9262] netlink: 'syz.0.835': attribute type 4 has an invalid length. [ 173.062938][ T9262] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.835'. [ 173.303523][ T9268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.837'. [ 173.335873][ T9273] netlink: 'syz.0.839': attribute type 1 has an invalid length. [ 173.349720][ T9271] netlink: 'syz.0.839': attribute type 1 has an invalid length. [ 173.423134][ T9283] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 173.488123][ T9283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.495449][ T9283] IPv6: NLM_F_CREATE should be set when creating new route [ 173.645734][ T9278] bond3: (slave veth3): Enslaving as an active interface with a down link [ 173.738001][ T9290] bond3: (slave veth5): Enslaving as an active interface with a down link [ 173.766528][ T9304] netlink: 14 bytes leftover after parsing attributes in process `syz.0.843'. [ 173.788717][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'. [ 173.864217][ T9301] vlan3: entered allmulticast mode [ 173.890489][ T9301] bond0: entered allmulticast mode [ 174.040562][ T9304] bond0 (unregistering): Released all slaves [ 174.234072][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.847'. [ 174.467296][ T9335] syzkaller0: entered promiscuous mode [ 174.476681][ T9335] syzkaller0: entered allmulticast mode [ 174.484579][ T9340] netlink: 16 bytes leftover after parsing attributes in process `syz.4.851'. [ 175.675733][ T9343] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.684065][ T9343] bridge_slave_1: left allmulticast mode [ 175.691741][ T9343] bridge_slave_1: left promiscuous mode [ 175.698054][ T9343] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.709696][ T9343] bridge_slave_1: entered allmulticast mode [ 175.716203][ T9343] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 176.920996][ T9313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.074941][ T9375] netlink: 68 bytes leftover after parsing attributes in process `syz.2.856'. [ 177.172658][ T9382] validate_nla: 2 callbacks suppressed [ 177.172678][ T9382] netlink: 'syz.2.856': attribute type 1 has an invalid length. [ 177.227357][ T9387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.859'. [ 177.407491][ T797] IPVS: starting estimator thread 0... [ 177.509820][ T9403] IPVS: using max 27 ests per chain, 64800 per kthread [ 177.921359][ T9428] bond3: option all_slaves_active: invalid value (222) [ 177.952555][ T9428] bond3 (unregistering): Released all slaves [ 178.001624][ T9438] netlink: 'syz.4.869': attribute type 5 has an invalid length. [ 178.163826][ T9442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.328388][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.874'. [ 178.564257][ T9460] bond4: Unable to set up delay as MII monitoring is disabled [ 178.647965][ T9460] bond4 (unregistering): Released all slaves [ 178.870460][ T9464] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 178.963672][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 179.216076][ T9494] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 179.349235][ T9492] netlink: 'syz.4.884': attribute type 10 has an invalid length. [ 179.390809][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'. [ 179.502953][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 179.531663][ T9492] dummy0: left allmulticast mode [ 179.540086][ T9492] dummy0: entered allmulticast mode [ 179.548076][ T9492] team0: Port device dummy0 added [ 179.592531][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 179.789257][ T9530] netlink: 48 bytes leftover after parsing attributes in process `syz.0.892'. [ 179.801717][ T9530] netlink: 48 bytes leftover after parsing attributes in process `syz.0.892'. [ 179.890378][ T9531] syzkaller0: entered allmulticast mode [ 179.903574][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 180.011020][ T9531] team0: Port device team_slave_0 removed [ 180.067960][ T9542] netlink: 'syz.0.897': attribute type 19 has an invalid length. [ 180.120001][ T9541] syzkaller0: entered promiscuous mode [ 180.125675][ T9541] syzkaller0: entered allmulticast mode [ 180.176928][ T9542] netlink: 'syz.0.897': attribute type 19 has an invalid length. [ 180.334692][ T9559] "syz.4.899" (9559) uses obsolete ecb(arc4) skcipher [ 180.714350][ T9572] netlink: 'syz.4.904': attribute type 4 has an invalid length. [ 180.770560][ T9577] syzkaller0: entered promiscuous mode [ 180.794336][ T9577] syzkaller0: entered allmulticast mode [ 180.805588][ T9582] netlink: 'syz.1.908': attribute type 1 has an invalid length. [ 181.073467][ T9588] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 181.084245][ T9592] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.093648][ T35] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 181.221565][ T9117] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 181.293911][ T9604] syzkaller0: entered promiscuous mode [ 181.300448][ T9604] syzkaller0: entered allmulticast mode [ 181.307820][ T9603] tipc: Started in network mode [ 181.313548][ T9603] tipc: Node identity 86020b44171e, cluster identity 4711 [ 181.362079][ T9603] tipc: Enabled bearer , priority 0 [ 181.388145][ T9604] tipc: Resetting bearer [ 181.431140][ T9610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.459349][ T9604] tipc: Resetting bearer [ 181.516647][ T9604] tipc: Disabling bearer [ 181.617880][ T9627] netlink: 'syz.0.920': attribute type 83 has an invalid length. [ 181.747661][ T9624] xfrm1: entered allmulticast mode [ 181.993660][ T9645] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 182.099806][ T9646] netlink: 'syz.3.926': attribute type 1 has an invalid length. [ 182.148371][ T9652] __nla_validate_parse: 10 callbacks suppressed [ 182.148391][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz.0.929'. [ 182.207593][ T9649] veth5: entered allmulticast mode [ 182.255298][ T9657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.930'. [ 182.650914][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'. [ 182.764979][ T9686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.937'. [ 182.779861][ T9686] tipc: Invalid UDP bearer configuration [ 182.779923][ T9686] tipc: Enabling of bearer rejected, failed to enable media [ 182.815840][ T9698] xt_l2tp: missing protocol rule (udp|l2tpip) [ 182.944040][ T9704] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.944'. [ 182.982196][ T9707] sch_fq: defrate 0 ignored. [ 184.213387][ T9726] syzkaller0: entered promiscuous mode [ 184.222799][ T9726] syzkaller0: entered allmulticast mode [ 184.353859][ T9728] erspan0: entered allmulticast mode [ 185.643379][ T9694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.653623][ T9716] netlink: 244 bytes leftover after parsing attributes in process `syz.2.947'. [ 185.853792][ T9743] netlink: 52 bytes leftover after parsing attributes in process `syz.0.956'. [ 185.927960][ T9746] netlink: 'syz.2.955': attribute type 21 has an invalid length. [ 185.960009][ T9740] netlink: 44 bytes leftover after parsing attributes in process `syz.1.953'. [ 186.009529][ T9759] netlink: 'syz.4.958': attribute type 9 has an invalid length. [ 186.337101][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.963'. [ 186.397270][ T9773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.953472][ T9808] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 187.132080][ T9819] netlink: 'syz.4.972': attribute type 9 has an invalid length. [ 187.134981][ T9808] gretap0: entered promiscuous mode [ 187.182765][ T9808] vlan3: entered promiscuous mode [ 187.400850][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.973'. [ 187.523584][ T9841] macvlan0: left allmulticast mode [ 187.531486][ T9841] netlink: 'syz.4.978': attribute type 2 has an invalid length. [ 187.723145][ T9849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.980'. [ 187.775577][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 187.909701][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.984'. [ 187.953559][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'. [ 187.978172][ T9868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.986'. [ 187.997218][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.984'. [ 188.009795][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.986'. [ 188.148538][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.984'. [ 188.576928][ T9893] syzkaller0: entered allmulticast mode [ 188.602695][ T9893] syzkaller0 (unregistering): left allmulticast mode [ 188.696898][ T9903] syzkaller1: entered promiscuous mode [ 188.715425][ T9903] syzkaller1: entered allmulticast mode [ 188.821116][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 189.003841][ T9911] bond3: entered allmulticast mode [ 189.016052][ T9914] ip6_vti0: entered promiscuous mode [ 189.074537][ T9919] bridge2: entered promiscuous mode [ 189.080007][ T9919] bridge2: entered allmulticast mode [ 189.663374][ T9936] bond7: entered promiscuous mode [ 189.997555][ T9946] netlink: 'syz.2.1010': attribute type 1 has an invalid length. [ 190.239362][ T9969] netlink: 'syz.2.1016': attribute type 6 has an invalid length. [ 190.289630][ T9969] netlink: 'syz.2.1016': attribute type 5 has an invalid length. [ 190.413862][ T9975] syzkaller0: entered promiscuous mode [ 190.419419][ T9975] syzkaller0: entered allmulticast mode [ 191.270368][T10024] netlink: 'syz.2.1031': attribute type 8 has an invalid length. [ 191.307944][T10025] bridge0: Caught tx_queue_len zero misconfig [ 191.334963][T10024] bond0: entered promiscuous mode [ 191.344128][T10024] bond_slave_0: entered promiscuous mode [ 191.350701][T10024] bond_slave_1: entered promiscuous mode [ 191.358785][T10024] bond0: left promiscuous mode [ 191.365159][T10024] bond_slave_0: left promiscuous mode [ 191.376811][T10024] bond_slave_1: left promiscuous mode [ 191.709102][T10053] lo: Caught tx_queue_len zero misconfig [ 192.074672][T10061] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 192.882462][T10101] __nla_validate_parse: 14 callbacks suppressed [ 192.882484][T10101] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1053'. [ 192.955987][T10103] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1054'. [ 192.965946][T10101] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1053'. [ 192.966981][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1055'. [ 192.993086][T10110] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1056'. [ 193.033932][T10110] bridge: RTM_NEWNEIGH with invalid ether address [ 193.072692][T10101] tipc: Started in network mode [ 193.080665][T10101] tipc: Node identity ac14140f, cluster identity 4711 [ 193.088261][T10101] tipc: New replicast peer: 255.255.255.255 [ 193.108447][T10101] tipc: Enabled bearer , priority 10 [ 193.304267][T10124] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1062'. [ 193.358177][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1062'. [ 193.381085][T10124] netlink: 'syz.3.1062': attribute type 1 has an invalid length. [ 193.405339][T10124] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1062'. [ 193.422478][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 193.679197][T10140] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1065'. [ 193.717516][T10142] netlink: 'syz.3.1066': attribute type 1 has an invalid length. [ 193.742933][T10146] netlink: 'syz.0.1067': attribute type 4 has an invalid length. [ 193.928304][T10147] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 193.992196][T10147] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 194.078409][T10142] macvlan2: entered promiscuous mode [ 194.087250][T10142] macvlan2: entered allmulticast mode [ 194.105081][T10142] bond4: entered promiscuous mode [ 194.113166][T10142] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 194.127529][T10142] bond4: left promiscuous mode [ 194.269027][ T10] tipc: Node number set to 2886997007 [ 194.314865][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.324271][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.452037][T10173] netlink: Unknown conntrack attr (0) [ 194.569564][T10182] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 194.624744][T10188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.668285][T10189] netlink: 'syz.4.1072': attribute type 1 has an invalid length. [ 194.805294][T10197] netlink: 'syz.1.1075': attribute type 10 has an invalid length. [ 194.852351][T10197] team0: Device vxcan1 is of different type [ 195.682628][T10252] netlink: 'syz.2.1088': attribute type 10 has an invalid length. [ 195.883444][ T5830] IPVS: starting estimator thread 0... [ 195.981154][T10265] IPVS: using max 27 ests per chain, 64800 per kthread [ 196.093943][T10278] sctp: [Deprecated]: syz.0.1096 (pid 10278) Use of int in max_burst socket option deprecated. [ 196.093943][T10278] Use struct sctp_assoc_value instead [ 196.319977][T10288] netlink: 'syz.3.1098': attribute type 6 has an invalid length. [ 196.361037][T10288] netlink: 'syz.3.1098': attribute type 5 has an invalid length. [ 196.915934][T10313] 8021q: adding VLAN 0 to HW filter on device bond4 [ 196.927057][T10320] netlink: 'syz.1.1102': attribute type 29 has an invalid length. [ 197.065561][T10313] bond4: entered promiscuous mode [ 197.094105][T10313] bond4: entered allmulticast mode [ 197.130877][T10313] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.161941][T10313] team0: Port device bond4 added [ 197.206633][T10320] vxcan3: entered promiscuous mode [ 197.282192][T10331] netlink: 'syz.4.1105': attribute type 39 has an invalid length. [ 197.330313][T10331] hsr_slave_1 (unregistering): left promiscuous mode [ 197.361483][T10336] sctp: [Deprecated]: syz.4.1105 (pid 10336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.361483][T10336] Use struct sctp_sack_info instead [ 197.515173][T10338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.825773][T10311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.849679][T10382] netlink: 'syz.3.1112': attribute type 10 has an invalid length. [ 199.858549][T10382] __nla_validate_parse: 20 callbacks suppressed [ 199.858571][T10382] netlink: 396 bytes leftover after parsing attributes in process `syz.3.1112'. [ 200.224341][T10415] dummy0: left allmulticast mode [ 200.245710][T10415] team0: Port device dummy0 removed [ 200.260230][T10415] bridge_slave_0: left promiscuous mode [ 200.302659][T10415] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.337372][T10415] bridge_slave_1: left promiscuous mode [ 200.348544][T10415] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.385225][T10415] bond0: (slave bond_slave_0): Releasing backup interface [ 200.405561][T10415] bond0: (slave bond_slave_1): Releasing backup interface [ 200.417879][T10415] team0: Port device team_slave_0 removed [ 200.449744][T10415] team0: Port device team_slave_1 removed [ 200.456091][T10415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.478336][T10415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.493431][T10415] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 200.673145][T10429] lo: left allmulticast mode [ 200.688490][T10429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.765135][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1121'. [ 201.231811][T10456] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1126'. [ 201.321211][T10465] xt_hashlimit: size too large, truncated to 1048576 [ 201.469563][T10455] sctp: [Deprecated]: syz.0.1127 (pid 10455) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.469563][T10455] Use struct sctp_sack_info instead [ 201.570232][T10464] xt_hashlimit: size too large, truncated to 1048576 [ 201.846656][T10483] openvswitch: netlink: IP tunnel dst address not specified [ 201.862387][T10479] netlink: 'syz.4.1131': attribute type 72 has an invalid length. [ 202.002225][T10491] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 202.058612][T10496] netlink: 'syz.1.1135': attribute type 2 has an invalid length. [ 202.104248][T10496] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1135'. [ 202.609242][T10524] netlink: 'syz.1.1143': attribute type 1 has an invalid length. [ 202.660288][T10530] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 202.684703][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'. [ 202.767250][T10524] 8021q: adding VLAN 0 to HW filter on device bond5 [ 202.887320][T10541] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1146'. [ 202.917136][T10532] bond5: (slave veth9): Enslaving as an active interface with a down link [ 202.954145][T10532] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1143'. [ 202.992083][T10530] 8021q: adding VLAN 0 to HW filter on device bond8 [ 203.037797][T10524] bond5: (slave dummy0): making interface the new active one [ 203.076170][T10524] dummy0: entered promiscuous mode [ 203.090960][T10524] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 203.175154][T10532] bond5: (slave dummy0): Releasing active interface [ 203.185213][T10532] dummy0 (unregistering): left promiscuous mode [ 203.225378][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'. [ 203.549745][T10571] netlink: 'syz.3.1151': attribute type 1 has an invalid length. [ 203.564409][T10571] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1151'. [ 203.806550][T10588] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1156'. [ 205.335803][T10668] __nla_validate_parse: 10 callbacks suppressed [ 205.335825][T10668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1177'. [ 205.378529][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'. [ 205.452708][T10674] syzkaller1: entered promiscuous mode [ 205.458262][T10674] syzkaller1: entered allmulticast mode [ 205.792376][T10682] pim6reg: entered allmulticast mode [ 205.824384][T10691] sctp: [Deprecated]: syz.1.1181 (pid 10691) Use of int in maxseg socket option. [ 205.824384][T10691] Use struct sctp_assoc_value instead [ 205.843879][T10689] pim6reg: left allmulticast mode [ 205.912883][T10687] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 206.006574][T10700] syz_tun: refused to change device tx_queue_len [ 206.443134][T10722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1191'. [ 206.475225][T10726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1190'. [ 207.271449][T10778] netlink: 592 bytes leftover after parsing attributes in process `syz.3.1204'. [ 207.337393][T10775] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1202'. [ 207.515531][T10790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1208'. [ 207.575991][T10797] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1210'. [ 207.629085][T10781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.847090][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1214'. [ 207.882319][T10817] x_tables: duplicate underflow at hook 1 [ 207.890253][T10818] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 208.186948][T10834] block nbd1: Unsupported socket: should be TCP or UNIX. [ 208.324223][T10841] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 208.351271][T10842] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 208.359748][T10841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.431597][T10842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.458296][T10841] netlink: 'syz.4.1224': attribute type 30 has an invalid length. [ 208.514853][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1228'. [ 208.526683][T10841] bond2: option arp_missed_max: invalid value (0) [ 208.533550][T10841] bond2: option arp_missed_max: allowed values 1 - 255 [ 208.542700][T10841] bond2 (unregistering): Released all slaves [ 208.572177][T10862] vlan4: entered promiscuous mode [ 208.577322][T10862] gretap0: entered promiscuous mode [ 208.584259][ T9121] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 211.460719][T10851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.745416][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 211.745458][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 211.751738][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 211.765023][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 211.892573][T10910] syzkaller1: entered promiscuous mode [ 211.909314][T10910] syzkaller1: entered allmulticast mode [ 212.077742][T10923] __nla_validate_parse: 3 callbacks suppressed [ 212.077765][T10923] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1245'. [ 212.307691][T10935] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 212.753766][T10961] ip6tnl0: Caught tx_queue_len zero misconfig [ 212.920979][T10970] netlink: 'syz.2.1259': attribute type 1 has an invalid length. [ 212.966243][T10970] 8021q: adding VLAN 0 to HW filter on device bond5 [ 213.078017][T10983] syzkaller0: entered promiscuous mode [ 213.112377][T10983] syzkaller0: entered allmulticast mode [ 213.470656][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 214.469172][T11063] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1280'. [ 214.599923][T11055] syzkaller1: entered promiscuous mode [ 214.605848][T11055] syzkaller1: entered allmulticast mode [ 214.624060][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.902366][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.977589][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.032311][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.170177][T11091] s5: renamed from vlan1 [ 215.361279][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1290'. [ 215.664008][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.740438][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.803001][T11125] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1295'. [ 215.812233][T11125] openvswitch: netlink: Key type 31 is not supported [ 215.819811][T11125] netdevsim netdevsim1 : renamed from netdevsim0 [ 215.962382][T11127] bond2: entered allmulticast mode [ 216.039986][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.049056][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1297'. [ 216.061136][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.071536][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.105095][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1297'. [ 216.127941][T11127] bridge5: entered promiscuous mode [ 216.133449][T11127] bridge5: entered allmulticast mode [ 216.161488][T11127] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 216.176890][T11142] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1299'. [ 216.440854][T11150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'. [ 216.461094][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'. [ 216.556897][T11160] xt_l2tp: missing protocol rule (udp|l2tpip) [ 217.125334][T11191] pimreg: entered allmulticast mode [ 217.136624][T11193] netlink: 'syz.2.1309': attribute type 6 has an invalid length. [ 217.310759][T11196] __nla_validate_parse: 2 callbacks suppressed [ 217.310780][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 217.892697][T11233] netlink: 'syz.0.1320': attribute type 1 has an invalid length. [ 217.964911][T11225] veth7: entered promiscuous mode [ 217.982693][T11225] veth7: entered allmulticast mode [ 218.264139][T11255] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1325'. [ 218.831098][T11283] syzkaller0: entered promiscuous mode [ 218.846243][T11283] syzkaller0: entered allmulticast mode [ 219.553046][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 219.579666][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 219.821681][ T5923] net_ratelimit: 8 callbacks suppressed [ 219.821700][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.837153][T11342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1345'. [ 219.899974][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.909006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.918003][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.932490][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.942470][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.950978][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.959103][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.967253][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.977658][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.382082][T11368] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 220.463052][T11373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1352'. [ 220.492815][T11368] bond3: (slave lo): Enslaving as an active interface with an up link [ 220.740280][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1358'. [ 220.990070][T11406] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1361'. [ 221.014659][T11410] netlink: 'syz.3.1362': attribute type 1 has an invalid length. [ 221.033455][T11410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1362'. [ 221.049723][T11406] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1361'. [ 221.054765][T11410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1362'. [ 221.328206][T11430] --map-set only usable from mangle table [ 222.021300][T11462] bond4 (unregistering): Released all slaves [ 222.442935][T11486] __nla_validate_parse: 7 callbacks suppressed [ 222.442960][T11486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1384'. [ 222.580257][T11486] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1384'. [ 222.603820][T11486] netlink: 'syz.0.1384': attribute type 1 has an invalid length. [ 222.613439][T11488] netlink: 'syz.3.1385': attribute type 1 has an invalid length. [ 222.826391][T11502] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1392'. [ 223.735478][T11542] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1403'. [ 223.765244][T11542] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1403'. [ 223.900232][T11552] xt_hashlimit: size too large, truncated to 1048576 [ 223.933166][T11556] IPVS: length: 211 != 24 [ 224.060421][T11563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1410'. [ 224.224187][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 224.404599][T11577] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1413'. [ 224.558085][T11580] netlink: 'syz.2.1415': attribute type 21 has an invalid length. [ 224.825988][T11586] lo: entered promiscuous mode [ 224.831174][T11586] net_ratelimit: 20 callbacks suppressed [ 224.831192][T11586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.860171][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.869311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.885958][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.894464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.931575][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.940395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.969700][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.978187][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.987080][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.012960][T11598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1419'. [ 225.053826][T11598] netlink: 'syz.2.1419': attribute type 7 has an invalid length. [ 225.074599][T11598] netlink: 'syz.2.1419': attribute type 8 has an invalid length. [ 225.096074][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1419'. [ 225.786883][T11631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.015060][T11648] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 226.028961][T11648] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 226.038167][T11648] gretap1: entered promiscuous mode [ 226.069692][T11648] gretap1: entered allmulticast mode [ 226.264994][T11659] netlink: 'syz.1.1440': attribute type 1 has an invalid length. [ 226.298628][T11659] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 226.387371][T11663] IPv6: sit1: Disabled Multicast RS [ 226.413543][T11663] sit1: entered allmulticast mode [ 226.555855][T11669] tipc: Started in network mode [ 226.571391][T11669] tipc: Node identity 4ea0be794793, cluster identity 4711 [ 226.578816][T11669] tipc: Enabled bearer , priority 0 [ 226.625093][T11675] team_slave_0: entered allmulticast mode [ 226.735804][T11669] macvtap1: entered allmulticast mode [ 226.758422][T11669] veth0_macvtap: entered allmulticast mode [ 226.824532][T11668] tipc: Disabling bearer [ 226.860582][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 227.366259][T11718] netlink: 'syz.1.1458': attribute type 24 has an invalid length. [ 227.567377][T11725] __nla_validate_parse: 12 callbacks suppressed [ 227.567401][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1461'. [ 228.750912][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1478'. [ 228.762747][T11788] netlink: 1748 bytes leftover after parsing attributes in process `syz.4.1478'. [ 228.942347][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1480'. [ 228.983033][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1480'. [ 228.984511][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1480'. [ 229.088145][T11801] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1482'. [ 229.325448][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 229.351793][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 229.428995][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1489'. [ 229.516722][ T9111] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.564135][ T9111] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.573247][ T9111] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.604128][ T9111] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.844279][T11849] bond0: Caught tx_queue_len zero misconfig [ 229.921010][T11855] netlink: 'syz.4.1496': attribute type 11 has an invalid length. [ 229.939598][T11855] netlink: 'syz.4.1496': attribute type 11 has an invalid length. [ 230.039098][T11855] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 230.063936][T11855] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 230.220570][ T24] net_ratelimit: 527 callbacks suppressed [ 230.220594][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.356625][T11874] x_tables: duplicate underflow at hook 1 [ 230.363794][T11875] openvswitch: netlink: Missing valid actions attribute. [ 230.372091][T11875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.554356][T11885] tipc: Enabling of bearer rejected, failed to enable media [ 230.676501][T11890] mac80211_hwsim hwsim16 wlan1: Caught tx_queue_len zero misconfig [ 230.698723][T11891] netlink: 'syz.2.1508': attribute type 1 has an invalid length. [ 230.850956][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.244326][T11929] xt_l2tp: v2 doesn't support IP mode [ 231.264670][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.556275][T11938] bond5: Removing last ns target with arp_interval on [ 231.864456][T11961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.970906][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.219995][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.304112][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.423079][T11993] netlink: 'syz.4.1537': attribute type 1 has an invalid length. [ 232.905656][T12014] syz_tun: refused to change device tx_queue_len [ 232.923190][T12016] __nla_validate_parse: 12 callbacks suppressed [ 232.923209][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1543'. [ 233.020695][T12024] netlink: 'syz.1.1546': attribute type 1 has an invalid length. [ 233.079920][ T9123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.261510][T12030] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 233.271933][T12030] bond5 (unregistering): Released all slaves [ 233.313772][T12034] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1549'. [ 233.647935][T12057] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1558'. [ 233.698658][T12061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1557'. [ 233.898094][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'. [ 234.181274][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 234.191766][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 234.314533][T12090] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1570'. [ 234.683861][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1575'. [ 234.693320][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1575'. [ 234.703347][T12115] netlink: 'syz.2.1575': attribute type 14 has an invalid length. [ 234.712772][T12115] netlink: 'syz.2.1575': attribute type 13 has an invalid length. [ 234.805894][T12118] netlink: 'syz.2.1576': attribute type 8 has an invalid length. [ 235.260721][ T5880] net_ratelimit: 3 callbacks suppressed [ 235.260755][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.279305][T12142] netlink: 'syz.1.1583': attribute type 21 has an invalid length. [ 235.293139][T12144] netlink: 'syz.2.1582': attribute type 1 has an invalid length. [ 235.332275][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.421587][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.473516][T12149] hsr_slave_0 (unregistering): left promiscuous mode [ 235.585922][T12153] macvlan0: entered promiscuous mode [ 235.767945][T12163] batadv0: Caught tx_queue_len zero misconfig [ 236.061841][T12172] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 236.403526][T12197] tipc: Enabled bearer , priority 10 [ 236.460427][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.485718][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.745674][T12224] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 236.776012][T12226] macvtap1: entered promiscuous mode [ 236.782371][T12226] macvtap1: entered allmulticast mode [ 236.788011][T12226] veth1_vlan: entered allmulticast mode [ 236.808487][T12231] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 236.838311][T12230] macvtap2: entered promiscuous mode [ 236.843907][T12230] macvtap2: entered allmulticast mode [ 237.151728][T12254] netlink: 'syz.1.1608': attribute type 3 has an invalid length. [ 237.176559][T12254] netlink: 'syz.1.1608': attribute type 3 has an invalid length. [ 237.551518][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.611019][ T9123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.918876][T12297] sctp: [Deprecated]: syz.1.1622 (pid 12297) Use of int in max_burst socket option deprecated. [ 237.918876][T12297] Use struct sctp_assoc_value instead [ 238.042022][T12301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.093044][T12307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.107928][T12306] __nla_validate_parse: 12 callbacks suppressed [ 238.107949][T12306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1627'. [ 238.300769][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.319232][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1630'. [ 238.331795][T12316] netlink: 'syz.3.1630': attribute type 5 has an invalid length. [ 238.340318][T12316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1630'. [ 238.368030][T12316] geneve3: entered promiscuous mode [ 238.374180][T12316] geneve3: entered allmulticast mode [ 238.694826][T12328] netlink: 'syz.3.1634': attribute type 11 has an invalid length. [ 238.722600][T12328] netlink: 'syz.3.1634': attribute type 4 has an invalid length. [ 238.731343][T12328] netlink: 199768 bytes leftover after parsing attributes in process `syz.3.1634'. [ 238.759318][T12331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1633'. [ 238.792120][T12336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'. [ 238.815881][T12327] delete_channel: no stack [ 238.835159][T12336] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1635'. [ 238.845796][T12336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'. [ 239.158738][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1642'. [ 239.241168][T12360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1642'. [ 239.272631][T12351] netlink: 'syz.0.1639': attribute type 1 has an invalid length. [ 239.286982][T12360] netlink: 'syz.3.1642': attribute type 9 has an invalid length. [ 239.296742][T12351] netlink: 'syz.0.1639': attribute type 1 has an invalid length. [ 239.331911][T12366] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 239.354482][T12366] NCSI netlink: No device for ifindex 0 [ 239.912488][T12396] bond6 (unregistering): Released all slaves [ 239.946983][T12399] netlink: 'syz.4.1656': attribute type 13 has an invalid length. [ 240.376175][T12422] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 240.391859][ T10] net_ratelimit: 7 callbacks suppressed [ 240.391880][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.421126][T12422] bond7 (unregistering): Released all slaves [ 240.700379][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.934325][T12450] dummy0: Caught tx_queue_len zero misconfig [ 240.963227][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.088029][T12458] ieee802154 phy1 wpan1: encryption failed: -22 [ 241.120516][T12463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.340418][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.741479][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.829904][T12499] x_tables: duplicate underflow at hook 2 [ 242.110791][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.317165][T12535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.348395][T12532] xt_socket: unknown flags 0x50 [ 242.393002][T12535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.429281][T12536] bond7: entered promiscuous mode [ 242.437570][T12541] openvswitch: netlink: Message has 16 unknown bytes. [ 242.457188][T12536] bond7: entered allmulticast mode [ 242.767327][T12562] netlink: 'syz.2.1695': attribute type 28 has an invalid length. [ 242.781538][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.240563][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.253274][T12579] __nla_validate_parse: 15 callbacks suppressed [ 243.253293][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 243.269528][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 243.499340][T12583] sctp: [Deprecated]: syz.3.1704 (pid 12583) Use of int in max_burst socket option deprecated. [ 243.499340][T12583] Use struct sctp_assoc_value instead [ 244.134427][T12625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1712'. [ 244.968009][T12667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1723'. [ 245.296215][T12684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1728'. [ 245.366104][T12688] xt_nat: multiple ranges no longer supported [ 245.527718][ T9121] net_ratelimit: 198 callbacks suppressed [ 245.527742][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.771639][T12707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1736'. [ 245.782104][T12707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1736'. [ 245.820611][T12711] xt_connbytes: Forcing CT accounting to be enabled [ 245.904337][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.650339][ T9123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.940281][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.424010][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.759837][ T9123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.860897][T12666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.981529][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.137290][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1743'. [ 248.269824][T12738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1744'. [ 248.374354][T12751] pim6reg: entered allmulticast mode [ 248.413743][T12758] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1749'. [ 248.497357][T12758] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1749'. [ 248.737226][T12776] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1754'. [ 248.775584][T12776] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 248.871544][ T9123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.996816][T12790] sctp: [Deprecated]: syz.2.1758 (pid 12790) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.996816][T12790] Use struct sctp_sack_info instead [ 249.028223][T12792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1761'. [ 249.028696][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.214627][T12801] veth0: entered promiscuous mode [ 249.228714][T12802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1759'. [ 249.267627][T12802] tipc: Invalid UDP bearer configuration [ 249.267691][T12802] tipc: Enabling of bearer rejected, failed to enable media [ 249.283762][T12800] veth0: left promiscuous mode [ 249.516017][T12820] h: entered promiscuous mode [ 249.566809][T12828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1768'. [ 249.617822][T12828] netlink: 'syz.4.1768': attribute type 11 has an invalid length. [ 249.626218][T12828] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1768'. [ 249.744614][T12838] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.1770'. [ 249.877128][T12842] netlink: 'syz.3.1771': attribute type 1 has an invalid length. [ 250.018742][T12853] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1774'. [ 250.621092][ T10] net_ratelimit: 5 callbacks suppressed [ 250.621113][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.699132][T12897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.733210][T12897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.743425][T12897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.832720][T12897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.890065][T12897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.898590][T12897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.907109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.965360][T12908] netlink: 'syz.1.1787': attribute type 15 has an invalid length. [ 250.968905][T12903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.023132][T12903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.215207][T12923] netlink: 'syz.1.1790': attribute type 7 has an invalid length. [ 251.601323][T12938] netlink: 'syz.4.1793': attribute type 2 has an invalid length. [ 252.065149][T12968] sctp: [Deprecated]: syz.2.1802 (pid 12968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.065149][T12968] Use struct sctp_sack_info instead [ 252.550093][T12995] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 252.564308][T12995] bond7 (unregistering): Released all slaves [ 253.290763][T13035] syzkaller0: entered promiscuous mode [ 253.303203][T13035] syzkaller0: entered allmulticast mode [ 253.331357][T13035] __nla_validate_parse: 7 callbacks suppressed [ 253.331379][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'. [ 253.397045][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'. [ 253.420798][T13045] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 253.712972][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1820'. [ 253.739390][T13054] pim6reg: entered allmulticast mode [ 253.961892][T13069] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1824'. [ 254.548213][T13099] bond5: Removing last arp target with arp_interval on [ 254.743042][T13111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 254.762374][T13111] netlink: 'syz.2.1837': attribute type 18 has an invalid length. [ 254.782818][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'. [ 254.805146][T13111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 254.822721][T13111] netlink: 'syz.2.1837': attribute type 18 has an invalid length. [ 254.832419][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'. [ 254.948278][T13124] nbd: illegal input index 2958377 [ 255.174144][T13140] syzkaller0: entered promiscuous mode [ 255.196390][T13140] syzkaller0: entered allmulticast mode [ 255.264104][ T58] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xca [ 255.276800][T13142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.337586][T13146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.390693][T13154] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1847'. [ 255.592433][T13160] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1850'. [ 255.657202][T13162] gre1: entered promiscuous mode [ 255.779991][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.826212][T13171] net_ratelimit: 308 callbacks suppressed [ 255.826234][T13171] openvswitch: netlink: Message has 212 unknown bytes. [ 255.880062][T13172] openvswitch: netlink: Message has 212 unknown bytes. [ 256.204956][T13195] x_tables: duplicate underflow at hook 2 [ 256.426356][T13207] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 256.448280][T13207] bond7 (unregistering): Released all slaves [ 257.230371][T13261] bond0: left allmulticast mode [ 257.236740][T13261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.140456][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 259.803744][T13232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.052422][T13289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.063091][T13289] 8021q: VLANs not supported on ip6_vti0 [ 260.081013][T13288] __nla_validate_parse: 14 callbacks suppressed [ 260.081033][T13288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1894'. [ 260.182623][T13296] : entered promiscuous mode [ 260.342867][T13308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1899'. [ 260.366862][T13308] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 260.613885][T13328] netlink: 'syz.0.1906': attribute type 1 has an invalid length. [ 260.631401][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1906'. [ 260.655684][T13335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.690178][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1906'. [ 260.820560][T13342] ip6tnl0: Caught tx_queue_len zero misconfig [ 260.985266][T13350] syzkaller0: entered promiscuous mode [ 261.005982][T13350] syzkaller0: entered allmulticast mode [ 261.785522][T13352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.966504][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1925'. [ 261.999668][T13388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1924'. [ 262.041632][T13399] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 262.291504][T13405] xt_hashlimit: size too large, truncated to 1048576 [ 262.642966][T13421] syzkaller1: entered promiscuous mode [ 262.657749][T13421] syzkaller1: entered allmulticast mode [ 262.681215][T13427] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1935'. [ 262.810399][T13434] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1936'. [ 263.723540][T13492] netlink: 'syz.2.1951': attribute type 1 has an invalid length. [ 263.732555][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1949'. [ 263.771877][T13493] bond8: entered promiscuous mode [ 263.787422][T13493] 8021q: adding VLAN 0 to HW filter on device bond8 [ 263.853065][T13505] openvswitch: netlink: Multiple metadata blocks provided [ 263.925579][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1953'. [ 264.000744][T13507] bridge0: entered promiscuous mode [ 264.006899][T13507] macsec1: entered promiscuous mode [ 264.044291][T13507] macsec1: entered allmulticast mode [ 264.050121][T13507] bridge0: entered allmulticast mode [ 264.070371][T13507] bridge0: port 1(macsec1) entered blocking state [ 264.076946][T13507] bridge0: port 1(macsec1) entered disabled state [ 264.102416][T13507] bridge0: left allmulticast mode [ 264.107890][T13507] bridge0: left promiscuous mode [ 264.440091][T13523] netlink: 'syz.2.1958': attribute type 21 has an invalid length. [ 266.666817][T13486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.689981][T13538] netlink: 'syz.1.1962': attribute type 3 has an invalid length. [ 266.709783][T13538] netlink: 'syz.1.1962': attribute type 1 has an invalid length. [ 266.717597][T13538] __nla_validate_parse: 3 callbacks suppressed [ 266.717616][T13538] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1962'. [ 266.826820][T13540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1963'. [ 266.883721][T13544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1966'. [ 266.962828][T13551] netlink: 'syz.1.1967': attribute type 29 has an invalid length. [ 266.996732][T13551] netlink: 'syz.1.1967': attribute type 29 has an invalid length. [ 267.127351][T13567] 8021q: VLANs not supported on caif0 [ 267.151640][T13567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 267.264176][T13573] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1973'. [ 267.299318][T13573] lo: Caught tx_queue_len zero misconfig [ 267.315494][T13573] netem: change failed [ 267.336693][T13577] syzkaller1: left promiscuous mode [ 267.342384][T13577] syzkaller1: left allmulticast mode [ 267.504654][T13583] sctp: [Deprecated]: syz.4.1975 (pid 13583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.504654][T13583] Use struct sctp_sack_info instead [ 267.588234][T13583] sctp: [Deprecated]: syz.4.1975 (pid 13583) Use of int in maxseg socket option. [ 267.588234][T13583] Use struct sctp_assoc_value instead [ 267.696154][T13592] netlink: 'syz.1.1977': attribute type 10 has an invalid length. [ 267.715978][T13592] netdevsim netdevsim1 : left promiscuous mode [ 267.727613][T13592] 8021q: adding VLAN 0 to HW filter on device  [ 267.740927][T13592] bond0: (slave ): Enslaving as an active interface with an up link [ 267.880618][T13603] netlink: 'syz.4.1981': attribute type 1 has an invalid length. [ 267.893018][T13603] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1981'. [ 267.951671][T13603] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1981'. [ 267.999946][T13603] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1981'. [ 268.057755][T13611] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1984'. [ 268.116759][T13613] netlink: 'syz.1.1985': attribute type 11 has an invalid length. [ 268.150589][T13615] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 317.185317][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.119009][T13667] netlink: 'syz.3.1996': attribute type 9 has an invalid length. [ 322.134323][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1996'. [ 322.172263][T13661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 322.556309][T13675] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 322.765019][T13681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2003'. [ 322.799737][T13681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2003'. [ 323.391065][T13708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2009'. [ 323.414222][T13708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2009'. [ 323.600261][T13720] netlink: 'syz.2.2014': attribute type 2 has an invalid length. [ 323.623611][T13720] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2014'. [ 323.895372][T13737] netlink: 'syz.1.2020': attribute type 1 has an invalid length. [ 323.906349][T13735] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 323.941850][T13737] 8021q: adding VLAN 0 to HW filter on device bond9 [ 323.957558][T13735] vlan0: entered promiscuous mode [ 323.963945][T13735] bridge0: entered promiscuous mode [ 323.966816][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'. [ 323.999552][T13741] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2020'. [ 324.186234][T13749] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2021'. [ 324.196884][T13749] openvswitch: netlink: Missing key (keys=40, expected=100) [ 324.338770][T13752] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 324.364020][T13755] netlink: 'syz.2.2025': attribute type 1 has an invalid length. [ 324.393722][T13755] netlink: 'syz.2.2025': attribute type 13 has an invalid length. [ 324.404289][T13755] netlink: 'syz.2.2025': attribute type 58 has an invalid length. [ 324.706669][T13769] syz.3.2028: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 324.769594][T13769] CPU: 1 UID: 0 PID: 13769 Comm: syz.3.2028 Not tainted syzkaller #0 PREEMPT(full) [ 324.769628][T13769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 324.769651][T13769] Call Trace: [ 324.769660][T13769] [ 324.769670][T13769] dump_stack_lvl+0xe8/0x150 [ 324.769710][T13769] warn_alloc+0x249/0x340 [ 324.769739][T13769] ? stack_trace_save+0xa9/0x100 [ 324.769767][T13769] ? __pfx_warn_alloc+0x10/0x10 [ 324.769802][T13769] ? kasan_save_track+0x4f/0x80 [ 324.769825][T13769] ? kasan_save_track+0x3e/0x80 [ 324.769848][T13769] ? __kasan_kmalloc+0x93/0xb0 [ 324.769872][T13769] ? __kmalloc_cache_noprof+0x31c/0x660 [ 324.769904][T13769] ? xskq_create+0x56/0x170 [ 324.769932][T13769] ? xsk_setsockopt+0x54c/0x990 [ 324.769955][T13769] ? do_sock_setsockopt+0x17c/0x1b0 [ 324.769983][T13769] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 324.770011][T13769] ? do_syscall_64+0x14d/0xf80 [ 324.770047][T13769] __vmalloc_node_range_noprof+0x132/0x1730 [ 324.770108][T13769] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 324.770142][T13769] ? __kasan_kmalloc+0x93/0xb0 [ 324.770175][T13769] vmalloc_user_noprof+0xad/0xe0 [ 324.770201][T13769] ? xskq_create+0xbf/0x170 [ 324.770229][T13769] xskq_create+0xbf/0x170 [ 324.770260][T13769] xsk_init_queue+0x8a/0xe0 [ 324.770290][T13769] xsk_setsockopt+0x54c/0x990 [ 324.770320][T13769] ? __pfx_xsk_setsockopt+0x10/0x10 [ 324.770346][T13769] ? __pfx_aa_sk_perm+0x10/0x10 [ 324.770384][T13769] ? aa_sock_opt_perm+0xff/0x1a0 [ 324.770409][T13769] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 324.770443][T13769] ? __pfx_xsk_setsockopt+0x10/0x10 [ 324.770472][T13769] do_sock_setsockopt+0x17c/0x1b0 [ 324.770507][T13769] __x64_sys_setsockopt+0x13d/0x1b0 [ 324.770544][T13769] do_syscall_64+0x14d/0xf80 [ 324.770576][T13769] ? trace_irq_disable+0x3b/0x150 [ 324.770596][T13769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.770619][T13769] ? clear_bhb_loop+0x40/0x90 [ 324.770647][T13769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.770669][T13769] RIP: 0033:0x7f0abcf9c819 [ 324.770696][T13769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.770715][T13769] RSP: 002b:00007f0abdf42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 324.770739][T13769] RAX: ffffffffffffffda RBX: 00007f0abd215fa0 RCX: 00007f0abcf9c819 [ 324.770756][T13769] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 324.770770][T13769] RBP: 00007f0abd032c91 R08: 0000000000000004 R09: 0000000000000000 [ 324.770783][T13769] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.770797][T13769] R13: 00007f0abd216038 R14: 00007f0abd215fa0 R15: 00007ffeedf89b98 [ 324.770834][T13769] [ 324.770848][T13769] Mem-Info: [ 325.062459][T13769] active_anon:6136 inactive_anon:0 isolated_anon:0 [ 325.062459][T13769] active_file:2629 inactive_file:40002 isolated_file:0 [ 325.062459][T13769] unevictable:768 dirty:37 writeback:0 [ 325.062459][T13769] slab_reclaimable:11159 slab_unreclaimable:107754 [ 325.062459][T13769] mapped:29076 shmem:1366 pagetables:1345 [ 325.062459][T13769] sec_pagetables:0 bounce:0 [ 325.062459][T13769] kernel_misc_reclaimable:0 [ 325.062459][T13769] free:1306573 free_pcp:13232 free_cma:0 [ 325.109640][T13769] Node 0 active_anon:24544kB inactive_anon:0kB active_file:10516kB inactive_file:159800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116304kB dirty:148kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13652kB pagetables:5148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 325.141902][T13769] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 325.173935][T13769] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 325.219536][T13769] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 325.230146][T13769] Node 0 DMA32 free:1273552kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24744kB inactive_anon:0kB active_file:10516kB inactive_file:159800kB unevictable:1536kB writepending:148kB zspages:0kB present:3129332kB managed:2552580kB mlocked:0kB bounce:0kB free_pcp:55052kB local_pcp:33752kB free_cma:0kB [ 325.289802][T13769] lowmem_reserve[]: 0 0 0 0 0 [ 325.314999][T13769] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 325.397221][T13769] lowmem_reserve[]: 0 0 0 0 0 [ 325.409903][T13769] Node 1 Normal free:3937980kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 325.528203][T13769] lowmem_reserve[]: 0 0 0 0 0 [ 325.559309][T13769] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 325.614186][T13769] Node 0 DMA32: 5908*4kB (UME) 3864*8kB (UME) 1748*16kB (UME) 679*32kB (UME) 155*64kB (UME) 78*128kB (UME) 90*256kB (UME) 157*512kB (UM) 135*1024kB (UM) 78*2048kB (UM) 188*4096kB (UM) = 1295600kB [ 325.655585][T13769] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 325.734145][T13769] Node 1 Normal: 1*4kB (U) 1*8kB (M) 13*16kB (UM) 17*32kB (UM) 9*64kB (UM) 7*128kB (UM) 2*256kB (M) 4*512kB (UM) 1*1024kB (M) 0*2048kB 960*4096kB (M) = 3937980kB [ 325.768608][T13795] bond10 (unregistering): Released all slaves [ 325.775685][T13769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 325.804707][T13769] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 325.830668][T13769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 325.847182][T13769] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 325.867169][T13769] 43993 total pagecache pages [ 325.891953][T13769] 0 pages in swap cache [ 325.911921][T13769] Free swap = 124996kB [ 325.916177][T13769] Total swap = 124996kB [ 325.923852][T13769] 2097051 pages RAM [ 325.928973][T13769] 0 pages HighMem/MovableOnly [ 325.935189][T13769] 427072 pages reserved [ 325.939946][T13769] 0 pages cma reserved [ 325.987130][T13807] veth0: entered promiscuous mode [ 325.998425][T13808] netlink: 'syz.4.2039': attribute type 5 has an invalid length. [ 326.006487][T13809] netlink: 'syz.4.2039': attribute type 5 has an invalid length. [ 326.037407][T13805] veth0: left promiscuous mode [ 326.127476][T13816] ipt_REJECT: TCP_RESET invalid for non-tcp [ 326.320912][T13829] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 326.486099][T13843] netlink: 'syz.1.2051': attribute type 1 has an invalid length. [ 326.505150][T13843] netlink: 'syz.1.2051': attribute type 29 has an invalid length. [ 326.747365][T13858] syzkaller1: entered promiscuous mode [ 326.753084][T13858] syzkaller1: entered allmulticast mode [ 326.760344][T13858] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 326.772919][T13860] veth0: entered promiscuous mode [ 326.779210][T13857] veth0: left promiscuous mode [ 326.903204][T13869] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20132 [ 327.116006][T13892] ipt_ECN: cannot use operation on non-tcp rule [ 327.228557][T13896] bridge0: port 1(gretap0) entered blocking state [ 327.247353][T13896] bridge0: port 1(gretap0) entered disabled state [ 327.273829][T13896] gretap0: entered allmulticast mode [ 327.310991][T13896] bridge0: port 1(gretap0) entered blocking state [ 327.317655][T13896] bridge0: port 1(gretap0) entered forwarding state [ 327.348922][T13906] __nla_validate_parse: 19 callbacks suppressed [ 327.348946][T13906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2071'. [ 327.460397][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'. [ 327.469339][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2067'. [ 327.501372][T13897] validate_nla: 3 callbacks suppressed [ 327.501396][T13897] netlink: 'syz.0.2067': attribute type 12 has an invalid length. [ 327.539997][T13897] netlink: 'syz.0.2067': attribute type 11 has an invalid length. [ 327.900418][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 328.074502][T13954] netlink: 'syz.4.2085': attribute type 61 has an invalid length. [ 328.084392][T13953] netlink: 'syz.0.2084': attribute type 1 has an invalid length. [ 328.092852][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'. [ 328.192640][T13962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2088'. [ 328.204560][T13960] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2087'. [ 328.370212][T13968] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2092'. [ 328.426032][T13974] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2093'. [ 328.538140][T13980] veth1_virt_wifi: left allmulticast mode [ 328.551210][T13983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.605575][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2098'. [ 328.785909][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2100'. [ 329.221956][T14024] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.325105][T14040] C: renamed from lo (while UP) [ 329.351308][T14040] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 330.140357][T14086] netlink: 'syz.0.2129': attribute type 1 has an invalid length. [ 330.193626][T14086] bond9: entered promiscuous mode [ 330.218786][T14086] 8021q: adding VLAN 0 to HW filter on device bond9 [ 330.303799][T14081] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 330.318882][T14081] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 330.329866][T14081] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 330.603344][T14108] netlink: 'syz.2.2138': attribute type 1 has an invalid length. [ 330.750690][T14122] netlink: 'syz.1.2142': attribute type 1 has an invalid length. [ 330.971873][T14144] erspan0: entered promiscuous mode [ 330.977260][T14145] netlink: 'syz.4.2146': attribute type 1 has an invalid length. [ 330.991428][T14149] nbd: must specify an index to disconnect [ 331.235796][T14167] netlink: 'syz.0.2153': attribute type 1 has an invalid length. [ 331.382874][T14170] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 331.395635][T14170] bond10: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 331.415060][T14170] bond10: (slave ip6gre1): making interface the new active one [ 331.428125][T14170] bond10: (slave ip6gre1): Enslaving as an active interface with an up link [ 331.487186][T14185] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 331.705532][T14192] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 332.187917][T14228] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 332.243734][T14228] netlink: 'syz.3.2168': attribute type 10 has an invalid length. [ 332.322279][T14226] syzkaller0: entered promiscuous mode [ 332.327865][T14226] syzkaller0: entered allmulticast mode [ 332.361001][T14226] TC_ACT_REPEAT abuse ? [ 332.527810][T14246] validate_nla: 1 callbacks suppressed [ 332.527831][T14246] netlink: 'syz.0.2171': attribute type 1 has an invalid length. [ 332.809946][T14269] netlink: 'syz.4.2175': attribute type 3 has an invalid length. [ 333.000517][T14282] netlink: 'syz.3.2179': attribute type 3 has an invalid length. [ 333.032071][T14282] __nla_validate_parse: 18 callbacks suppressed [ 333.032092][T14282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2179'. [ 333.120045][T14293] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2177'. [ 333.142961][T14282] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.2179'. [ 333.183320][T14282] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.2179'. [ 333.230087][T14282] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.2179'. [ 333.278249][T14282] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.2179'. [ 333.329901][T14282] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.2179'. [ 333.383614][T14282] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.2179'. [ 333.411517][T14302] netlink: 'syz.2.2181': attribute type 1 has an invalid length. [ 333.420366][T14282] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.2179'. [ 333.450141][T14282] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.2179'. [ 333.464776][T14300] netlink: 'syz.4.2180': attribute type 4 has an invalid length. [ 333.960976][T14331] netlink: 'syz.2.2187': attribute type 16 has an invalid length. [ 334.026455][T14331] netlink: 'syz.2.2187': attribute type 17 has an invalid length. [ 334.262073][T14331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.782534][T14365] openvswitch: netlink: IP tunnel dst address not specified [ 335.326478][T14396] netlink: 'syz.2.2205': attribute type 2 has an invalid length. [ 335.395955][ T29] audit: type=1800 audit(1775958508.704:2): pid=14398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2206" name="memory.events" dev="tmpfs" ino=2444 res=0 errno=0 [ 335.443643][T14398] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 335.497966][ T29] audit: type=1804 audit(1775958508.754:3): pid=14398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2206" name="/newroot/474/memory.events" dev="tmpfs" ino=2444 res=1 errno=0 [ 335.748454][T14416] syzkaller0: entered promiscuous mode [ 335.764668][T14416] syzkaller0: entered allmulticast mode [ 336.158772][T14444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.175350][T14451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.185178][T14453] netlink: 'syz.4.2219': attribute type 1 has an invalid length. [ 336.256064][T14457] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 336.280117][T14457] bond11 (unregistering): Released all slaves [ 336.447201][T14466] ieee802154 phy1 wpan1: encryption failed: -22 [ 336.550608][T14469] bond11: entered promiscuous mode [ 336.588020][T14469] macvlan2: entered promiscuous mode [ 336.596061][T14469] macvlan2: entered allmulticast mode [ 336.602936][T14469] bond11: (slave macvlan2): Opening slave failed [ 336.804259][T14488] netlink: 'syz.1.2230': attribute type 1 has an invalid length. [ 337.291803][T14512] veth0: entered promiscuous mode [ 337.314085][T14501] veth0: left promiscuous mode [ 337.537374][T14515] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 337.574471][T14515] bond6 (unregistering): Released all slaves [ 337.862105][T14541] netlink: 'syz.4.2240': attribute type 64 has an invalid length. [ 338.131900][T14555] __nla_validate_parse: 70 callbacks suppressed [ 338.131922][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 338.223189][T14571] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2248'. [ 338.258149][T14571] netlink: 'syz.0.2248': attribute type 178 has an invalid length. [ 338.483858][T14590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2249'. [ 338.553115][T14600] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2249'. [ 338.737022][T14608] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 338.819220][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2255'. [ 338.830869][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2255'. [ 338.847783][T14609] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 338.883464][T14609] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 338.915284][T14609] gretap2: entered promiscuous mode [ 338.951237][T14609] gretap2: entered allmulticast mode [ 338.992186][T14631] veth0_to_bond: mtu less than device minimum [ 339.107002][T14631] 8021q: VLANs not supported on ip6_vti0 [ 339.207229][T14644] netlink: 'syz.4.2263': attribute type 8 has an invalid length. [ 339.893811][T14693] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2272'. [ 339.911223][T14693] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2272'. [ 339.934641][T14693] netlink: 'syz.1.2272': attribute type 6 has an invalid length. [ 339.953366][T14693] netlink: 'syz.1.2272': attribute type 5 has an invalid length. [ 339.961419][T14693] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2272'. [ 340.014301][T14693] netlink: 'syz.1.2272': attribute type 32 has an invalid length. [ 340.070198][T14693] netlink: 776 bytes leftover after parsing attributes in process `syz.1.2272'. [ 340.174000][T14709] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 340.354722][T14718] netlink: 'syz.2.2279': attribute type 10 has an invalid length. [ 340.385217][T14718] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 340.466185][T14718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.483012][T14718] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 340.656798][T14743] netlink: 'syz.4.2286': attribute type 3 has an invalid length. [ 340.699973][T14743] netlink: 'syz.4.2286': attribute type 3 has an invalid length. [ 341.635551][T14814] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 341.682935][T14814] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 341.694263][T14814] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 341.825127][T14823] netlink: 'syz.1.2308': attribute type 3 has an invalid length. [ 342.037083][ T5896] hid (null): bogus close delimiter [ 342.043774][ T5896] hid (null): invalid report_size 36247 [ 342.050653][ T5896] hid (null): report_id 0 is invalid [ 342.056144][ T5896] hid (null): invalid report_size 1210156629 [ 342.064982][T14834] 8021q: adding VLAN 0 to HW filter on device bond11 [ 342.077569][ T5896] hid-generic 0005:000F:03FF.0001: bogus close delimiter [ 342.108247][ T5896] hid-generic 0005:000F:03FF.0001: item 0 0 2 10 parsing failed [ 342.146905][ T5896] hid-generic 0005:000F:03FF.0001: probe with driver hid-generic failed with error -22 [ 342.208393][T14844] bond11: (slave geneve3): making interface the new active one [ 342.285690][T14844] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 342.313907][T14843] syzkaller1: entered promiscuous mode [ 342.331659][T14843] syzkaller1: entered allmulticast mode [ 342.352880][T14859] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 342.528003][T14865] team0: Device C is loopback device. Loopback devices can't be added as a team port [ 342.563006][T14865] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 342.764212][T14884] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 343.036574][T14901] validate_nla: 2 callbacks suppressed [ 343.036596][T14901] netlink: 'syz.2.2326': attribute type 1 has an invalid length. [ 343.379724][T14917] netlink: 'syz.2.2332': attribute type 1 has an invalid length. [ 343.407961][T14917] __nla_validate_parse: 13 callbacks suppressed [ 343.407985][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2332'. [ 344.025121][T14966] netlink: zone id is out of range [ 344.046904][T14962] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2341'. [ 344.070200][T14966] netlink: del zone limit has 4 unknown bytes [ 344.111941][T14969] netlink: 'syz.3.2343': attribute type 1 has an invalid length. [ 344.337250][T14977] xt_addrtype: ipv6 does not support BROADCAST matching [ 344.591894][T14990] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 344.729143][T14999] netlink: 'syz.4.2351': attribute type 3 has an invalid length. [ 344.953040][T15009] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2355'. [ 344.992217][T15009] IPv6: NLM_F_REPLACE set, but no existing node found! [ 345.007600][T15009] IPv6: NLM_F_REPLACE set, but no existing node found! [ 345.212667][T15024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.223713][T15026] netlink: 'syz.0.2361': attribute type 7 has an invalid length. [ 345.231773][T15026] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2361'. [ 345.389331][T15037] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20001 [ 345.423178][T15044] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 4, id = 0 [ 345.640007][T15050] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2366'. [ 346.166410][T15089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2375'. [ 346.237965][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2375'. [ 346.503804][T15102] netlink: 816 bytes leftover after parsing attributes in process `syz.3.2377'. [ 346.702471][T15111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2379'. [ 346.811705][T15114] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2379'. [ 347.061637][T15132] can: request_module (can-proto-0) failed. [ 347.226656][T15143] netlink: 'syz.1.2386': attribute type 10 has an invalid length. [ 347.750775][T15168] xt_TCPMSS: Only works on TCP SYN packets [ 347.812370][T15175] vlan0: entered allmulticast mode [ 347.818498][T15174] netlink: 'syz.1.2396': attribute type 1 has an invalid length. [ 347.862467][T15178] x_tables: duplicate underflow at hook 1 [ 348.554777][T15225] macvlan0: left promiscuous mode [ 348.598748][T15225] netlink: 'syz.2.2413': attribute type 2 has an invalid length. [ 348.640979][T15223] __nla_validate_parse: 3 callbacks suppressed [ 348.641000][T15223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2412'. [ 348.816648][T15236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.069917][T15254] bond0: entered promiscuous mode [ 349.075193][T15254] bond_slave_0: entered promiscuous mode [ 349.081647][T15254] bond_slave_1: entered promiscuous mode [ 349.087610][T15254] netdevsim netdevsim1 : entered promiscuous mode [ 349.120693][T15261] netlink: 'syz.2.2420': attribute type 1 has an invalid length. [ 349.131472][T15261] netlink: 'syz.2.2420': attribute type 2 has an invalid length. [ 349.139261][T15261] netlink: 'syz.2.2420': attribute type 2 has an invalid length. [ 349.174118][T15254] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 349.194783][T15264] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 349.196221][T15261] netlink: 'syz.2.2420': attribute type 1 has an invalid length. [ 349.228301][T15261] netlink: 'syz.2.2420': attribute type 1 has an invalid length. [ 349.238505][T15254] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 349.246851][T15261] netlink: 'syz.2.2420': attribute type 1 has an invalid length. [ 349.293211][T15254] bond0: left promiscuous mode [ 349.303086][T15254] bond_slave_0: left promiscuous mode [ 349.325932][T15254] bond_slave_1: left promiscuous mode [ 349.361707][T15254] netdevsim netdevsim1 : left promiscuous mode [ 349.379208][T15272] IPVS: length: 38 != 8 [ 349.449092][T15278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2427'. [ 349.507132][T15283] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 349.577645][T15286] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2429'. [ 349.654469][T15290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2431'. [ 349.810965][T15250] infiniband sy1: set active [ 349.823390][T15250] infiniband sy1: added bond0 [ 349.948731][T15303] bond6: option all_slaves_active: invalid value (222) [ 349.957817][T15250] RDS/IB: sy1: added [ 349.983761][T15250] smc: adding ib device sy1 with port count 1 [ 350.000256][T15250] smc: ib device sy1 port 1 has no pnetid [ 350.042205][T15303] bond6 (unregistering): Released all slaves [ 350.078666][T15308] syz.2.2436: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 350.154399][T15308] CPU: 1 UID: 0 PID: 15308 Comm: syz.2.2436 Not tainted syzkaller #0 PREEMPT(full) [ 350.154430][T15308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 350.154444][T15308] Call Trace: [ 350.154453][T15308] [ 350.154461][T15308] dump_stack_lvl+0xe8/0x150 [ 350.154501][T15308] warn_alloc+0x249/0x340 [ 350.154532][T15308] ? stack_trace_save+0xa9/0x100 [ 350.154561][T15308] ? __pfx_warn_alloc+0x10/0x10 [ 350.154596][T15308] ? kasan_save_track+0x4f/0x80 [ 350.154619][T15308] ? kasan_save_track+0x3e/0x80 [ 350.154642][T15308] ? __kasan_kmalloc+0x93/0xb0 [ 350.154666][T15308] ? __kmalloc_cache_noprof+0x31c/0x660 [ 350.154689][T15308] ? xskq_create+0x56/0x170 [ 350.154715][T15308] ? xsk_setsockopt+0x54c/0x990 [ 350.154737][T15308] ? do_sock_setsockopt+0x17c/0x1b0 [ 350.154764][T15308] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 350.154789][T15308] ? do_syscall_64+0x14d/0xf80 [ 350.154822][T15308] __vmalloc_node_range_noprof+0x132/0x1730 [ 350.154881][T15308] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 350.154912][T15308] ? __kasan_kmalloc+0x93/0xb0 [ 350.154943][T15308] vmalloc_user_noprof+0xad/0xe0 [ 350.154967][T15308] ? xskq_create+0xbf/0x170 [ 350.154994][T15308] xskq_create+0xbf/0x170 [ 350.155023][T15308] xsk_init_queue+0x8a/0xe0 [ 350.155051][T15308] xsk_setsockopt+0x54c/0x990 [ 350.155078][T15308] ? __pfx_xsk_setsockopt+0x10/0x10 [ 350.155110][T15308] ? __pfx_aa_sk_perm+0x10/0x10 [ 350.155144][T15308] ? aa_sock_opt_perm+0xff/0x1a0 [ 350.155168][T15308] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 350.155193][T15308] ? __pfx_xsk_setsockopt+0x10/0x10 [ 350.155218][T15308] do_sock_setsockopt+0x17c/0x1b0 [ 350.155250][T15308] __x64_sys_setsockopt+0x13d/0x1b0 [ 350.155283][T15308] do_syscall_64+0x14d/0xf80 [ 350.155311][T15308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.155332][T15308] ? clear_bhb_loop+0x40/0x90 [ 350.155358][T15308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.155380][T15308] RIP: 0033:0x7fdc78f9c819 [ 350.155401][T15308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.155421][T15308] RSP: 002b:00007fdc79d71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 350.155445][T15308] RAX: ffffffffffffffda RBX: 00007fdc79216090 RCX: 00007fdc78f9c819 [ 350.155462][T15308] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 350.155475][T15308] RBP: 00007fdc79032c91 R08: 0000000000000004 R09: 0000000000000000 [ 350.155489][T15308] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.155503][T15308] R13: 00007fdc79216128 R14: 00007fdc79216090 R15: 00007ffd003f6678 [ 350.155539][T15308] [ 350.155548][T15308] Mem-Info: [ 350.443409][T15308] active_anon:6248 inactive_anon:0 isolated_anon:0 [ 350.443409][T15308] active_file:2629 inactive_file:40013 isolated_file:0 [ 350.443409][T15308] unevictable:768 dirty:85 writeback:0 [ 350.443409][T15308] slab_reclaimable:12168 slab_unreclaimable:105559 [ 350.443409][T15308] mapped:29182 shmem:1363 pagetables:1387 [ 350.443409][T15308] sec_pagetables:0 bounce:0 [ 350.443409][T15308] kernel_misc_reclaimable:0 [ 350.443409][T15308] free:1317431 free_pcp:9469 free_cma:0 [ 350.513341][T15317] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2437'. [ 350.522973][T15308] Node 0 active_anon:25092kB inactive_anon:0kB active_file:10516kB inactive_file:159844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116728kB dirty:340kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14412kB pagetables:5516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 350.567295][T15308] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 350.599045][T15308] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.634164][T15308] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 350.643515][T15308] Node 0 DMA32 free:1316256kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24992kB inactive_anon:0kB active_file:10516kB inactive_file:159844kB unevictable:1536kB writepending:340kB zspages:0kB present:3129332kB managed:2552580kB mlocked:0kB bounce:0kB free_pcp:37916kB local_pcp:18772kB free_cma:0kB [ 350.691848][T15308] lowmem_reserve[]: 0 0 0 0 0 [ 350.696742][T15308] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 350.752355][T15308] lowmem_reserve[]: 0 0 0 0 0 [ 350.757278][T15308] Node 1 Normal free:3937980kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.794635][T15308] lowmem_reserve[]: 0 0 0 0 0 [ 350.800491][T15308] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 350.884892][T15308] Node 0 DMA32: 5214*4kB (UME) 3117*8kB (UME) 1590*16kB (UME) 880*32kB (UM) 226*64kB (UM) 95*128kB (UM) 96*256kB (UM) 164*512kB (U) 142*1024kB (UME) 81*2048kB (UME) 188*4096kB (UM) = 1315904kB [ 350.915950][T15326] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2442'. [ 350.925306][T15308] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 350.957269][T15328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2439'. [ 350.974800][T15308] Node 1 Normal: 1*4kB (U) 1*8kB (M) 13*16kB (UM) 17*32kB (UM) 9*64kB (UM) 7*128kB (UM) 2*256kB (M) 4*512kB (UM) 1*1024kB (M) 0*2048kB 960*4096kB (M) = 3937980kB [ 351.008701][T15330] netlink: 'syz.0.2439': attribute type 4 has an invalid length. [ 351.038354][T15308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.038396][T15330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2439'. [ 351.067443][T15308] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.077316][T15308] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.092825][T15308] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.103625][T15308] 44001 total pagecache pages [ 351.108358][T15308] 0 pages in swap cache [ 351.113761][T15308] Free swap = 124996kB [ 351.118047][T15308] Total swap = 124996kB [ 351.125373][T15308] 2097051 pages RAM [ 351.129696][T15308] 0 pages HighMem/MovableOnly [ 351.135585][T15308] 427072 pages reserved [ 351.147074][T15308] 0 pages cma reserved [ 351.172012][T15332] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 351.292204][T15339] netlink: 'syz.2.2445': attribute type 21 has an invalid length. [ 351.881126][T15367] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2453'. [ 352.017472][T15367] bond6 (unregistering): Released all slaves [ 352.122487][T15377] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 352.151316][T15377] team0: Device macvlan3 is already an upper device of the team interface [ 352.482915][T15402] Cannot find set identified by id 0 to match [ 352.535358][T15400] bond6: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 352.614467][T15400] bond6: (slave C): Enslaving as an active interface with an up link [ 352.640184][T15400] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 352.689941][T15413] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 352.915525][T15431] netlink: 'syz.2.2468': attribute type 8 has an invalid length. [ 353.038211][T15437] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 353.050181][T15437] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 353.058630][T15437] CPU: 1 UID: 0 PID: 15437 Comm: syz.3.2469 Not tainted syzkaller #0 PREEMPT(full) [ 353.068052][T15437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 353.078256][T15437] RIP: 0010:memcpy_sglist+0x420/0x730 [ 353.083694][T15437] Code: e8 55 b4 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 67 af 52 fd 4c 89 f3 eb 07 e8 5d af 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 353.103524][T15437] RSP: 0018:ffffc9000dd77698 EFLAGS: 00010202 [ 353.109656][T15437] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 353.117655][T15437] RDX: ffffc9000ee95000 RSI: 0000000000000237 RDI: 0000000000000238 [ 353.125656][T15437] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 353.133658][T15437] R10: dffffc0000000000 R11: ffffed100ebe7e9a R12: 0000000000000007 [ 353.141683][T15437] R13: ffff888041e26ec0 R14: ffff88802a7240a0 R15: 0000000000000008 [ 353.149690][T15437] FS: 00007f0abdf216c0(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 353.158723][T15437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.165348][T15437] CR2: 0000200000001d00 CR3: 000000007d822000 CR4: 00000000003526f0 [ 353.173353][T15437] Call Trace: [ 353.176655][T15437] [ 353.179613][T15437] aead_recvmsg+0x719/0x1030 [ 353.184260][T15437] ? __pfx_aead_recvmsg+0x10/0x10 [ 353.189311][T15437] ? __pfx_aead_recvmsg+0x10/0x10 [ 353.194400][T15437] sock_recvmsg_nosec+0x10c/0x140 [ 353.199477][T15437] ____sys_recvmsg+0x3e3/0x4a0 [ 353.204288][T15437] ? __pfx_____sys_recvmsg+0x10/0x10 [ 353.209612][T15437] ? import_iovec+0x73/0xa0 [ 353.214146][T15437] ___sys_recvmsg+0x215/0x590 [ 353.218946][T15437] ? __lock_acquire+0x6b5/0x2cf0 [ 353.223912][T15437] ? __pfx____sys_recvmsg+0x10/0x10 [ 353.229238][T15437] do_recvmmsg+0x334/0x800 [ 353.233689][T15437] ? __pfx_do_recvmmsg+0x10/0x10 [ 353.238663][T15437] ? __pfx_do_futex+0x10/0x10 [ 353.243375][T15437] __x64_sys_recvmmsg+0x198/0x250 [ 353.248436][T15437] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 353.254038][T15437] do_syscall_64+0x14d/0xf80 [ 353.258664][T15437] ? trace_irq_disable+0x3b/0x150 [ 353.263706][T15437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.269881][T15437] ? clear_bhb_loop+0x40/0x90 [ 353.274588][T15437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.280505][T15437] RIP: 0033:0x7f0abcf9c819 [ 353.284963][T15437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.304604][T15437] RSP: 002b:00007f0abdf21028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 353.313080][T15437] RAX: ffffffffffffffda RBX: 00007f0abd216090 RCX: 00007f0abcf9c819 [ 353.321084][T15437] RDX: 0000000000000002 RSI: 0000200000001d00 RDI: 0000000000000006 [ 353.329079][T15437] RBP: 00007f0abd032c91 R08: 0000000000000000 R09: 0000000000000000 [ 353.337334][T15437] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 353.345332][T15437] R13: 00007f0abd216128 R14: 00007f0abd216090 R15: 00007ffeedf89b98 [ 353.353365][T15437] [ 353.356429][T15437] Modules linked in: [ 353.361651][T15437] ---[ end trace 0000000000000000 ]--- [ 353.381690][T15437] RIP: 0010:memcpy_sglist+0x420/0x730 [ 353.387170][T15437] Code: e8 55 b4 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 67 af 52 fd 4c 89 f3 eb 07 e8 5d af 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 353.422935][T15437] RSP: 0018:ffffc9000dd77698 EFLAGS: 00010202 [ 353.440196][T15437] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 353.448418][T15437] RDX: ffffc9000ee95000 RSI: 0000000000000237 RDI: 0000000000000238 [ 353.456564][T15437] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 353.465109][T15437] R10: dffffc0000000000 R11: ffffed100ebe7e9a R12: 0000000000000007 [ 353.475294][T15437] R13: ffff888041e26ec0 R14: ffff88802a7240a0 R15: 0000000000000008 [ 353.483463][T15437] FS: 00007f0abdf216c0(0000) GS:ffff888125454000(0000) knlGS:0000000000000000 [ 353.499582][T15437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.502886][T15439] xt_hashlimit: size too large, truncated to 1048576 [ 353.506454][T15437] CR2: 0000001b30d22ff8 CR3: 000000007d822000 CR4: 00000000003526f0 [ 353.521764][T15437] Kernel panic - not syncing: Fatal exception [ 353.528489][T15437] Kernel Offset: disabled [ 353.532827][T15437] Rebooting in 86400 seconds..