last executing test programs: 3m5.998227995s ago: executing program 1 (id=1300): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x2e, 0x30]}}, 0x0, 0x28}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYBLOB, @ANYBLOB="080003"], 0x78}}, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000001680), 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000300)={0x3, {{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x0, 0x5, [{{0xa, 0x4e24, 0x401, @mcast2, 0xfff}}, {{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x6c000000}}, {{0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}}, {{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x840}}, {{0xa, 0x4e20, 0x7f, @local, 0x3}}]}, 0x310) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYRESHEX, @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1c}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x3800000, {0xe4, 0x0, 0x2, 0xe3b}}}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x881}, 0x400c080) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_delneigh={0x2c, 0x1e, 0x1, 0x70bd2a, 0x4, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_MAC={0xa, 0x1, @multicast}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) 3m5.761696437s ago: executing program 1 (id=1303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRES16=r3, @ANYRES8=r2, @ANYRES16=0x0], 0x8) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000180)="82", 0x1}, {&(0x7f0000000680)='T5&', 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r3, &(0x7f0000000300), 0x16, 0x3b3a, 0x0, 0xfffffffffffffdfd) getsockopt$inet_tcp_int(r2, 0x6, 0x3, 0x0, &(0x7f0000004cc0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x2, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x59) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f00000002c0)={r8, r5, 0x8, 0x1, &(0x7f0000000280)='_', 0x3, 0x1, 0x5, 0x8, 0xfffc, 0x2, 0x9, 'syz1\x00'}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x3d, 0x0, 0x1}, {}, {0x6}]}, 0x10) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r10, 0x0) getsockopt$ax25_int(r9, 0x101, 0xc, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000004a4fcc1dede219f98c8060c712989cd431f17d20deab3b27de1dcdf4496ab3ec037f8bf15a8ffc1c5c23fb6ce2ce8794e1c5963c8312724083108ca7b9bc8d7b2647dd855a0188c3ab6a488d9fc20884808e00869c9632cab6d1a73dae1358f11da954bb0c536d273d45220cdb0a85bad67dd697980e9464f9f72ca493c7183b0d0dbb29369993366f08f7f9e3df5b9bf11f0dc7b2dc5419edf54b6edfe1ae6a9c4c", @ANYRES16=r1, @ANYBLOB="05000000000002dcdf250600000008000300", @ANYRES32=r4, @ANYRESHEX=r3], 0x24}}, 0x0) r11 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r12 = socket$inet(0x2, 0x80001, 0x84) listen(r12, 0x2f) listen(r12, 0xaca) getsockopt$ax25_int(r11, 0x101, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 3m5.533798947s ago: executing program 1 (id=1307): r0 = socket(0x11, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000d80)={&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd4}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000840)='6', 0x1}], 0x1, 0x0, 0x0, 0x240080c5}, 0x4044090) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x2}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05000000000000000000077400060800020000000000080003"], 0x30}, 0x1, 0xffffffff00000003, 0x0, 0x4000001}, 0x0) bind$packet(r0, &(0x7f0000000280)={0x11, 0xd, r3, 0x1, 0xe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000006}, 0x0) 3m5.129588764s ago: executing program 1 (id=1311): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r3, &(0x7f0000000040), &(0x7f0000000140)=0x12, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m5.007922775s ago: executing program 1 (id=1313): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000006c0)=0x6, 0x4) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001200)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x80) 3m4.856817453s ago: executing program 1 (id=1316): socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000002c0)) 2m49.720993683s ago: executing program 32 (id=1316): socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000002c0)) 2m44.156770683s ago: executing program 0 (id=1545): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) r2 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x100, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x44}}, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) (async) getsockopt(r8, 0x111, 0x1, 0x0, &(0x7f0000000080)) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r9, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r10, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7ff, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_MEASUREMENTS={0xc, 0x111, 0x0, 0x1, {0x8, 0x5, 0x0, 0x1, [{0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c0}, 0x40) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 2m42.830946317s ago: executing program 0 (id=1548): syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa8fa2608d7a9988a2450000140000000000009078ac1414aaffff2112"], 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00040000000000000800001000000000000000000600000000000000"], 0x48) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2, 0x9, 0x8, 0x0, 0x3, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x18}}, 0x8c40) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x1008000, 0x7fffffff, 0x8000, 0x6, 0x0, 0x1}, 0x1c) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f00000003c0)={0x7, 0x8, [0x0, 0x4, 0x10, 0x2], &(0x7f0000000280)=[0x0]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000001818200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000000)="e39070965e3bb7a696e7e1da15da7107f53ce09f12a68b6af9bea07b7ec3eea3d46f0f9e52897c078f00a123d47972c63cd3618e45e229a2bc0dc3532f3b10d023938ecd89ad33e3168080ecd60e1ba2791937fada03f04088cf9949e21bb47ae1a9bc02957e305df66f62853d15847bb65eb61316947b7ee3eb4161e3387dff1d04b57a87d757cd7d912e3ad7996f828983", &(0x7f00000000c0)=""/22}, 0x20) 2m42.566605522s ago: executing program 0 (id=1553): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r5, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000012c0)={{r2, &(0x7f0000001080)='^![\x00', 0x60002, &(0x7f00000010c0)={@align=0x10000, {0x3, 0x3, 0x6, 0x8000000000000001}}, 0x6, &(0x7f0000001100)={@_ha_fsid}, &(0x7f0000001140)=0x7}, {[0x7, 0x9, 0x357f, 0x2]}, 0xfffffff8, 0xdb, &(0x7f00000011c0)=""/219}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001380), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000013c0)={@rand_addr, @local, 0x0}, &(0x7f0000001400)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000001500)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x68, r7, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r5, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0xc804) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES64=r9], 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) 2m42.441132135s ago: executing program 0 (id=1555): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0x70}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000440)={0x1, 0x6}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0xff, 0x80, 0x0, 0x42, @loopback, @empty, 0x1, 0x7, 0x9, 0xb6ff}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)={0x58, r7, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4d}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008884}, 0x20000001) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000680)) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r9 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) poll(&(0x7f0000000100)=[{r1, 0x200}, {r3, 0x280}, {r9, 0x4000}], 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES16=r7], 0xe8}}, 0x0) 2m42.128089255s ago: executing program 0 (id=1557): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000040)={0x5, 0x4}) (async) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000040)={0x5, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 2m41.97636964s ago: executing program 0 (id=1560): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket(0x2a, 0x2, 0x0) r5 = epoll_create1(0x80000) r6 = socket(0x1, 0x80802, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x8}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x1a000201d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0x0, 0x2000000}) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @empty}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 2m26.122071479s ago: executing program 33 (id=1560): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket(0x2a, 0x2, 0x0) r5 = epoll_create1(0x80000) r6 = socket(0x1, 0x80802, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x8}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x1a000201d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0x0, 0x2000000}) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @empty}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 3.802280692s ago: executing program 2 (id=2808): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, r1, 0xb01}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000003c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)={0xa8, r3, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40080}, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r9) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401000000000000000000280002"], 0x38}}, 0x0) 3.629353963s ago: executing program 2 (id=2813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000d80)=""/151, 0x0, 0xa6, 0x80, 0x5d3}, 0x28) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='/dev/net/tun\x00', 0xd) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff0200000000000000000000000000010420"], 0xfdef) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000040)=0x1) 3.21639287s ago: executing program 4 (id=2821): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x1c, r3, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}}, 0x0) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2a, 0x25df5bfb, {0x0, 0x0, 0x0, r6, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x2000a100) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x400c000) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"/294], 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_FLOW_PLIMIT={0x8}]}}]}, 0x48}}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x448, 0xc0, 0xc0, 0x278, 0xc0, 0x190, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010101, @local, 0x0, 0x0, 'wg0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x7, 0x1100, 0x11]}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x1, 0x4, 0x1}, {0x8, 0x100000000}, {0xe}, 0x3}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 3.16625694s ago: executing program 2 (id=2822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f00000006c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='syzkaller\x00'}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x38, r6, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x38}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000040)={0x30, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff8}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x240488d0}, 0x0) 3.051302778s ago: executing program 2 (id=2823): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22000092}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x10f) getsockopt(r0, 0x1, 0x27, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) unshare(0x20000400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) 3.047543395s ago: executing program 5 (id=2824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddaf0200000000000000d2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a630900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async, rerun: 32) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) (async, rerun: 32) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006880)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}, [{0x8, 0xb, 0xc0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 3.007222657s ago: executing program 6 (id=2825): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000001500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000001600)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x277963f4935cfbf9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000007f4972f020187efb0d9f7a40000000000000000800000850000007500000095009ba000000000"], 0x0, 0xc8ed, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c000180060001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.81799386s ago: executing program 6 (id=2828): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x11, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x240400c4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000200)={0x5, 0x3, 0x6, 0x8, 0x100}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200bdfd28000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0x44}], 0x1}, 0x0) r5 = socket$isdn(0x22, 0x3, 0x24) bind$isdn(r5, &(0x7f0000000040)={0x22, 0x9, 0x7, 0x60, 0x10}, 0x6) 2.658367622s ago: executing program 5 (id=2830): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x3b8, 0x36, 0x1, 0x70bd2d, 0x0, "", [@nested={0x3a7, 0x20, 0x0, 0x1, [@nested={0x18f, 0xc6, 0x0, 0x1, [@generic="e95bf0c2917406fd478aa17fb61584cf667dea87b2a7bff2759a16597c59c546bcb6252d5d01f698a4d40c8e9620bd6670c94178672007a05ccbc22cec0d13ae619be2bcbe1fa214ebb06094cf8fc24b4d5b667b07d91eeba46f2402514ae3bdfa667a84931dbb58a8718df0ceadba311103f526b7a977b5dcb2e2031c201f7bdfd110b7250c1228ff8267edc203ac527acfeea20acbedc2c792702399df8cea6229ba03f85c4efa9cca63ee454209c7192a9f5aa2eae3cba4c75c476e1657d0bbdd41e91b5a26a404fff88b9f3fbf", @typed={0xc, 0x16, 0x0, 0x0, @u64=0x6}, @typed={0xc, 0xf1, 0x0, 0x0, @u64=0xfc5c}, @typed={0xa1, 0x146, 0x0, 0x0, @binary="646609f952983a6a43fa7dc5a68983535f088775264b02453754667de072940fd931fd4ecf4d66c900740447eede5cb83000d6b1be934ace50b0202179192062d9565942bcab3b29798dbc97ca8e75f81ae10f5ce2c368fcc5c04a4af5f3feadd4013022615d672a924a64cd07f3260d5a0ee3cd0e8bdfa2a2be103f286ada08b342c788e7f0df087d0c4d892ce6af7e137a170c18481836e3502e535b"}]}, @generic="03b2b242f8c762d187a6852402a2c22160fd08cf61bc87c3158ca503f693d5fda534b375397d94e7", @generic="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", @generic="c6f7c5b183f7d0af47c5916b9f7e9017db195533c508ee7ad2c777e1eaf08d4b92281ead73ccbf53c3d41fb4d13dfa94f7c6ff516316f6170e9739a40ec3ac4b628c875b5b611834dad89811b2b747c3d36c2a0a3a30d908bd13fdd53ed8869babfb5cb1d290684d2cec34c5e7d358893ab00aa5388b083775405ddb0d7b013991de022c00f024a51999d48f1f7c01b9d46406b900a0037a91a2393784ff82194712f19dd145bce5a08a827ecdca9eccc2d28f9f8f3976d16bd15cea091f358d2f63bededc8669c5d3f2df1bcef588607dd5fff02dfb7efaf8b919441a91411bf133675e7ee458c9ea47a5dc571f2e"]}]}, 0x3b8}], 0x1, 0x0, 0x0, 0xc001}, 0x0) 2.561867092s ago: executing program 5 (id=2831): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000200)={0x1f, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendto$inet6(r1, &(0x7f0000000240)="fdcc88a9f6bd751ea452d072e420e48d6f6ba88308a99a84269e4cdf5a7f82d520ef2ba9f3d15f56657ce30537dd61512cd55d6af667e70dab9337429114ad20c7e3b2a10f6dbe41aa8ef9a2b065577ff33a0307ecf94bfb49a2648bba489e570a8435c44484df08fa702676c7b0e9f1664bf34dc9f3a855e8af4370553089ddd4388ab413d54bd2e5b54be6f9ae3ed0db0b934cbc8cee3e05853be103d9d256f13630ab8970de9b3fea60a4a9f2df3e7e5b1c8a30ebd7e58f500d6911ffff96552bbdb43659a218b941a0bb9a56a6d132f1297c430c82a900474a7a431e5f8dcadd67112b9b8d29a2c5b7a49d9cf3dc5d", 0xf1, 0x4040810, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) shutdown(r2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FREE_EOFBLOCKS(r3, 0x8080583a, &(0x7f0000000140)={0x4, 0x3, 0x3, 0x2, 0x81}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r0, 0x1, 0x0, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x30}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 2.514622624s ago: executing program 4 (id=2832): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x19, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8004) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) 2.499753394s ago: executing program 6 (id=2833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) (async) r2 = socket$nl_crypto(0x10, 0x3, 0x15) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000040), &(0x7f00000000c0)=0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000007c0), &(0x7f0000000800)=0x4) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="e0000000100009050000000000000000b1ff2e5c5360538c5698b6b7f39c417223b4d07456d68ee6758887d396e5c839d5a9000080afc7872d3c4a648166b916526af53872845d1f1ac1df1d4db700301c32882813fb5aad2faf74aaeeb870af1ed5a0fd551829fcd1dcccc26cf6a064e1c271394e2ef9ba127e7a8091b7ae725cf193b9cf29aa4de9082491d489819b", @ANYRESOCT=0x0], 0xe0}], 0x1}, 0x4004080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2b}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000201010100000000000000000300000408f71a40000000050800034000000002"], 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x80) (rerun: 32) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x1) 2.458044235s ago: executing program 3 (id=2834): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7, 0x0, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @null, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @default, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r2}, 0x20) r4 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000180), &(0x7f0000000280)=@tcp6=r4}, 0x20) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f00000000c0), 0x4) 2.285656844s ago: executing program 3 (id=2835): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x6, 0xbaa, 0x10}, 0x48) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005080007006e6174"], 0xf0}, 0x1, 0x0, 0x0, 0x48000}, 0x20040080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001a007987b2facd5abb91dee29fed163727aea54cc3d10cf97ef8121bb1656bee4869d62e3406000000647db21c4a4fcd2490f509fbc31bbc9786f9bea393896f4dafe45e933b2eb1"], 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 815.239071ms ago: executing program 4 (id=2836): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 791.265095ms ago: executing program 5 (id=2837): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="f755843804000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x1a, &(0x7f0000000440)=@raw=[@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f0000000540)=""/208, 0x41000, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000140)=[{0x3, 0x3, 0x5, 0x4}, {0x1, 0x2, 0x9, 0x2}, {0x1, 0x3, 0xc, 0x6}, {0x1, 0x5, 0xf}], 0x10, 0xe6b}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@ifindex, 0x12, 0x1, 0x81, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@map=r0, r3, 0x22, 0x4, 0x0, @void, @value=r5, @void, @void, r4}, 0x20) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x25, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 742.386212ms ago: executing program 3 (id=2838): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}, {0x0, 0x2}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4, 0x4}]}}, 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x44, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) syz_emit_ethernet(0x6e, &(0x7f0000000600)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @local, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @empty, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0xd, 0x0, [{0x0, 0x7, "4289b015b1"}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}, {0x0, 0x2}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4, 0x4}]}}, 0x0, 0x56}, 0x20) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x44, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async) syz_emit_ethernet(0x6e, &(0x7f0000000600)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @local, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @empty, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0xd, 0x0, [{0x0, 0x7, "4289b015b1"}]}]}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd000071187c0000000000c3640000f10000007b0a00fe00000000850000002e00000079af0000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) (async) 735.195574ms ago: executing program 6 (id=2839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async) r5 = epoll_create1(0x80000) (async) r6 = socket(0xa, 0x3, 0x2) (async) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0xa000000d}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x10000001}) (async) shutdown(r6, 0x0) (async, rerun: 32) r8 = epoll_create1(0x80000) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000140)={0x60000008}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d8a7af04", @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) (async) close(r1) 632.129518ms ago: executing program 5 (id=2840): syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x1000, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1902"}, {0x2, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0x2, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 625.519811ms ago: executing program 3 (id=2841): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x4}, 0x1c) (async) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x4}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="a0"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300), 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x50, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffffffff, 0x10}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x71}, 0x4004) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a080, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a080, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000003c0)={'team_slave_0\x00'}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000340)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, 0x1c) 549.994837ms ago: executing program 2 (id=2842): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x3, 0x0, &(0x7f0000000080)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x180000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x7e}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 489.993641ms ago: executing program 5 (id=2843): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$caif_seqpacket(0x25, 0x5, 0x1) (rerun: 64) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000240"], 0x10c}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0ce000", @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf250700000008000100000000000a0004007770616e300000000c00060003000000030000000800050002000000080005000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x40) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r4, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) (async) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) recvmsg(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000004700)=""/4087, 0xff7}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f0000000080)=""/54, 0x36}], 0x7}, 0x32120) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl(r5, 0x8b1a, &(0x7f0000000040)) (async) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="bc000000100400000000000000dbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c00028005002b0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 483.464571ms ago: executing program 4 (id=2844): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0xd, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4400}, 0x890) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x41}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8094}, 0x4044011) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@loopback, @remote, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x1, 0xabf4, 0x36, @loopback, @private2, 0x8, 0x40, 0x4, 0x6}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0xad, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vxcan1\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000740)={0x0}, &(0x7f0000000780)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x20, 0x8, 0x7ff, 0xb, {{0x17, 0x4, 0x1, 0x9, 0x5c, 0x67, 0x0, 0x33, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x64010101, {[@ssrr={0x89, 0x17, 0xf4, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x18}, @rand_addr=0x64010102, @broadcast]}, @ssrr={0x89, 0x7, 0xb8, [@multicast2]}, @lsrr={0x83, 0x23, 0x6, [@dev={0xac, 0x14, 0x14, 0x3f}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}]}, @ssrr={0x89, 0x7, 0x10, [@local]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000880)={'wg0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000008c0)={0x0, @multicast1, @broadcast}, &(0x7f0000000900)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)=@RTM_DELMDB={0x138, 0x55, 0x400, 0x70bd29, 0x25dfdbfc, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2d4aa79dd1328fff, 0x2, {@ip4=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x2, 0x4, {@ip4=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x4, {@ip4=@rand_addr=0x64010102, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x2, {@ip4=@multicast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x1, 0x3, {@ip4=@dev={0xac, 0x14, 0x14, 0x18}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x2, 0x1, {@ip4=@rand_addr=0x64010100, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0xb4a02cb5e7716df0, 0x3, {@ip4=@dev={0xac, 0x14, 0x14, 0x26}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x2, 0x3, {@ip4=@remote}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8841}, 0x0) r10 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreq(r10, 0x0, 0x24, &(0x7f0000000b00)={@rand_addr, @private}, &(0x7f0000000b40)=0x8) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000b80)={{0xa, 0x4e22, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, {0xa, 0x4e20, 0x1, @local, 0xb}, 0x1, {[0x81, 0xffffff00, 0x7, 0x4, 0x3, 0x8, 0xc, 0xd2]}}, 0x5c) sendmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="9a5811cbb42f12d7325832695546102825d17e562831232202bbbd4ec4bdadf2ea6471481b4c77a4af065d4baa6a2aaeeb92a3c5850b0bce188030356bc1fb495f1da3921fd25c38026f26076d0be546addf8edd906839f6ba4843881ad992", 0x5f}, {&(0x7f0000000c80)="f3f4bd5ab8a34e6d382ec5db257c6b855190ff837fe1bfa4cf236d0359d622c08bdd78dd1793beef6b2cc8463be49c23839dae230c5f20071b542b6d42936aaf198903b7c642c41a432e30489f6b2ce8a1e2ec7b8b7a100baf24cf01995b69052ecc8f518dd6fd4185ddd7f067afca1da9c0088bb937d8bfcc17c5e3ec755bb66d18411c17ed974b7a6b96f93016c330a7fe28f93eb9a72fe2b3222340b1bd33521a04792ad0e013232a2eb55cdd60f626b392def7b87cdd5ae57dd602dc66534aabf42933faadcf0f48c36ca1ce", 0xce}, {&(0x7f0000000d80)="6f201c2703fe755f14d354c60a277a9feed0b1556d2cb21f1c3a99f046d5e32558e32a641201fece02bcdea5aa472e9725079dbd617eac93bc519d9199c7337cd2fac1c1087d69e08e97efde9663", 0x4e}, {&(0x7f0000000e00)="c90ad9cc25e2b0d081a048547be1f71a7602ad324ce728040f87f299183976bd81bdd5c52e90652916b67a8e59b9fce775c517f97822295fb5fbdd6b1d22974b6ffda692b1d9edb787049c7e1922aefb47186e060379999ab6d4c16dd6822710d88250468e2971c1ec75b3a59682b554e6911d9e5051584c67d06fc215232e392841866cd1f54352dda8fb53e331bc8d2f30c2fb05d1aadb815450e3a2c7b28b", 0xa0}], 0x4, &(0x7f0000000f00)=[{0xa8, 0x104, 0x0, "5d2929c4c41c82fa83c503db53646f5ccfe2b0e74ca195083f86239e35d61a9e9f708ab2aa2f9d645c43ffed6df98a9fe6aed988f501966b33672449cc07cb7bc685c0572bbfbf1c3bfb5879fe907cfe397b981e7266710fdbb58bf8c29dc928069061abd4d9f24c55181c927de9a8711e7416ecd33ab0a272ef9610f5ce9f79a7170625bbb38f0e71198003a8c31a5c4d"}], 0xa8}}], 0x1, 0x4) r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r11, 0x10c, 0x6, &(0x7f0000001000), &(0x7f0000001040)=0x4) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r12, 0x89e2, &(0x7f0000001080)) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)=@getnexthop={0x28, 0x6a, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NHA_OIF={0x8, 0x5, r6}, @NHA_MASTER={0x8, 0xa, 0x8e}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004080}, 0x4000) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r14, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x28, r15, 0x100, 0x5, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x59, 0x80}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x0) recvfrom(r0, &(0x7f0000001340)=""/128, 0x80, 0x40006001, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r13, 0x8983, &(0x7f00000013c0)={0x0, 'veth0_to_bridge\x00', {}, 0x5}) write$tun(r10, &(0x7f0000001400)={@val={0x0, 0x88a2}, @void, @x25={0x1, 0xa, 0x1, "062cec223351fbb1ab519a20385854b957ec3acb47ef363e050d20f0542f5f12298a2af641fd90e856db7da36d918dbdb6d96a64b452a70b429ea663e86b5fbfaf0d63a63a70ff4c42e7516f1695be787c801adc53d1244a62a2386e37faa669ae1141c4ca723e1ae17546c184d237aa7be39ae1a52eba517b9a085a6004e3fbe5aaa675154cab496336336a04b583abb7730578ae0e3d5d479ab8801a34d63d17c31ab0850adaaee88a0efd55d02f12fbbb63c872dad165f8c17def6ec0f382f3af34c1872de6"}}, 0xce) 418.467971ms ago: executing program 6 (id=2845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xffff) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x1, 0x7fff}, 0xc) bind$qrtr(0xffffffffffffffff, &(0x7f0000001000)={0x2a, 0x1, 0x7fff}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x80000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(r7) epoll_create1(0x80000) write$cgroup_int(r7, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x6, 0xffffffef, 0x7fffffff, 0xffffffff, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r8 = socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'bond_slave_0\x00', @multicast}) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000200)='wg2\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xc, 0x4}, {0xfff4, 0x9}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0xd923be9e9f23a660}, 0x20040054) 414.833616ms ago: executing program 3 (id=2846): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_APDU={0x5, 0x19, 'O'}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffffffffff9f, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}]}}]}, 0x50}}, 0x4040004) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000010000000000026c000000000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmmsg$inet6(r4, &(0x7f0000002a40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x4, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@hoplimit={{0x10, 0x29, 0x34, 0x5af}}], 0x10}}], 0x1, 0x4000) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) 334.775917ms ago: executing program 4 (id=2847): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x9, 'vlan1\x00'}) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf250ad800800c0002"], 0x114}], 0x1}, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x6) socketpair(0x22, 0x2, 0x4, &(0x7f0000005fc0)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000013000000fc0100080000000000000000ea2fa43c000000100000000005000500000000000a00000000000000000000000000000000000000000000000000000001000000080012000200020000000002000000001000330402"], 0xa0}}, 0x0) 326.387665ms ago: executing program 2 (id=2848): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1400390015000100000000000000000005000000acc5285c85716412097b099560273566df566c128f260e8d8c5c9ee06efdb3b39dd5543c606d09d0b9af80404d3d7486ba19ba2b2bed0b46340942fde1c1181395a4f6858db889cb0319cfa291326d5b6724af6a90c77e3dc4a2a97817aca37ca65022e09daaa9f36f07534ccf98e424329e2d80cba682fdaac94305515418cdf6a8ab0a9b392e0bf8245ba8ef90713daeaefe003faa0df1ea3606f7f01b16662469b1acf83b330a8076833c1160d348327f36ef10afd0487e095f467ab089ee8e887f0c79"], 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001"], 0x70}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000600)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x880, 0x2c, 0xd27, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r10, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xa}}, @filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffd, 0xbea9, 0x8, 0x87, 0x9, 0xb, 0x0, 0x9, 0x0, 0x8001, 0x0, 0x80, 0x6, 0x0, 0xde, 0x7, 0xf6aa, 0x5, 0x9, 0x3ff, 0x7233, 0x8, 0xa26a, 0x6, 0xffff, 0x0, 0x4, 0x9, 0x8, 0x7fffffff, 0x8000, 0x0, 0x3, 0x0, 0x0, 0x3, 0x68f7, 0x400, 0x7fffffff, 0x9, 0x1ff, 0x624a, 0x5, 0xf9, 0x9, 0x5, 0x81, 0x400, 0x8, 0x800, 0x7ff, 0xffff, 0x5, 0xfffffff7, 0x8000, 0xb19, 0x6, 0xc7, 0x9, 0x0, 0x8, 0x0, 0x6, 0x0, 0x200, 0x5, 0x1, 0x3, 0x3, 0x101, 0x5, 0x8001, 0x4719, 0x2, 0x1, 0x1d79, 0x6, 0x5, 0x8000, 0x3, 0x2, 0x9, 0x45dd, 0x0, 0x4, 0x1, 0xc, 0x6, 0x3, 0x1, 0x9, 0x81, 0xfffffffe, 0x6, 0x4647, 0xe0e5, 0x800, 0x5, 0x8, 0x2, 0x5, 0x2, 0x3, 0x1, 0xffff8001, 0x8, 0x1, 0x7fffffff, 0x83d8, 0x8000, 0x3, 0x101, 0x8000, 0x0, 0x3ff, 0x6e3, 0x52, 0x7fff, 0x4, 0x9, 0x7, 0xfffffff5, 0x40, 0x101, 0x5, 0x5, 0x80000000, 0x1, 0xffffffff, 0x1, 0x0, 0xfffffffc, 0xfffffffb, 0x2, 0x8, 0x8000000, 0x1, 0x4, 0x9, 0x7, 0x4, 0xd, 0x9, 0xfffffffa, 0x8, 0xfffffff2, 0x0, 0x2651, 0x800, 0xc319, 0x1, 0x0, 0x80000001, 0x6, 0x8, 0x6, 0x400, 0x4, 0x3ff, 0x501b5b55, 0x7fffffff, 0x2, 0x1, 0x3, 0x7ae, 0x2, 0x9, 0xb, 0xfff, 0x8, 0x101, 0x8000, 0x8, 0x2, 0x9, 0xe2c9, 0x1, 0x0, 0x1005, 0x0, 0x7, 0x2, 0x1f, 0x0, 0xf, 0xc, 0x1, 0x84f, 0x8, 0x94f7, 0x7, 0x5, 0xec38f52e, 0x7, 0x4, 0xc, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7fff, 0xff, 0x9, 0xfffffffc, 0x1ff, 0x3, 0x4, 0x6, 0x8, 0x100, 0x26e2, 0x800, 0x39, 0x3, 0x4, 0x3, 0x7, 0x8000, 0x800, 0x6, 0x0, 0x0, 0xc4, 0x8, 0x6, 0x3, 0x302, 0x1, 0x195, 0x543f, 0x7, 0x4, 0x1, 0x7, 0x81, 0x7, 0x9, 0x40, 0x101, 0x7f, 0x2, 0x2, 0x81, 0xfffffff9, 0x4, 0x1f6, 0xe9a, 0x0, 0x0, 0xdf85, 0xf, 0x4, 0x23, 0x6c, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x6, 0xfffffff7, 0x0, 0xc7f5, {0xe, 0x0, 0xdfb, 0x7, 0xc, 0x7aefe6b8}, {0x1, 0x0, 0x3, 0xd, 0x1, 0x9}, 0x9, 0x4, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x4, 0xffffffff, 0x9, 0x4, 0x9, 0x2, 0x40, 0x308, 0x1, 0x1000000, 0xffffff74, 0x1, 0x80, 0xe, 0x3, 0x3, 0x1, 0x6, 0x7ff, 0x5, 0x380, 0x7, 0x9, 0xc, 0xa70, 0x3, 0x5c05, 0x1, 0x3, 0x0, 0x4, 0x1, 0x57, 0x39800000, 0x8, 0x0, 0x9, 0xff, 0x1ff, 0x7, 0x3, 0x9, 0x6, 0xa94, 0x8, 0x5, 0x80, 0x0, 0x100, 0xebf, 0x69, 0x1ff, 0xcda2, 0x401, 0xfffffffc, 0x5ed755fb, 0x318d, 0x101, 0x8, 0x6, 0x3d75, 0xe48e, 0x1, 0x80000001, 0x9b, 0xffffff07, 0xfffffffe, 0x5, 0x0, 0x7, 0x7, 0x8, 0x3, 0x8, 0x6, 0x1, 0x1000, 0x1, 0x1f, 0x9, 0x8000, 0x6, 0x1, 0xaef, 0x9, 0x7f, 0x3, 0x6, 0x5, 0x0, 0x0, 0xccdd, 0xe0b, 0x6, 0x3, 0x8, 0x2, 0x4, 0x3f7, 0x4, 0x101, 0x3, 0x2, 0x3, 0x6, 0x8, 0x0, 0x2dbb9dea, 0x6, 0x80000001, 0x0, 0x3ff, 0x0, 0x0, 0x9, 0x4, 0x9, 0x1, 0x4, 0xad71, 0x39, 0x8, 0x4, 0xb, 0xd, 0x9, 0x1, 0x10000, 0xf0, 0xfffffffb, 0x5, 0x2fc3, 0x5, 0xb, 0xc4, 0x1ff, 0x80000001, 0x0, 0x5, 0x70000, 0xd85, 0x1603, 0xfffffffc, 0x40, 0x3ff, 0x8000, 0xbae, 0x1, 0x2, 0x1ff, 0x7ac7, 0x8, 0xc8, 0x53, 0xfffffe00, 0x7fffffff, 0x1000, 0x0, 0x3, 0x3, 0x9, 0x0, 0x8, 0x1ff, 0x9, 0x23, 0x7, 0x7ff, 0x0, 0x0, 0x2, 0x5, 0x101, 0x2, 0x3, 0x5, 0x9e, 0x9, 0x0, 0x7, 0xc1, 0x5, 0x9, 0x4, 0x7, 0xfffffff2, 0x81, 0x3, 0x1, 0x2, 0x0, 0x1, 0x9, 0x2, 0x13e3, 0x180000, 0x9, 0x0, 0xfff, 0x1fb0, 0x4ae, 0x80, 0xc, 0xb1, 0x2, 0x3, 0x8, 0x2, 0x6, 0x1, 0x200, 0x98e0, 0x3, 0x2, 0x0, 0xfffffffe, 0x8de0, 0x5, 0xfffffffe, 0x1, 0x4, 0x4, 0xec, 0x9, 0x6, 0x6, 0x0, 0x19, 0x9, 0x7e, 0x7, 0x5, 0x1, 0x9, 0xc, 0x1, 0x5, 0xffff, 0x2, 0x8, 0x9, 0x1, 0x5, 0x4, 0x58, 0x7f, 0x223, 0x7, 0x8000, 0x5, 0x2, 0x1ff, 0x2, 0x7, 0x8]}]}]}}]}, 0x880}}, 0x24000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x5, 0x9, 0x50, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x80, 0x3, 0x10}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb8, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0xd0}, 0x380088d1) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x10}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000380)={r0, &(0x7f00000000c0)='\x00', 0x0, &(0x7f0000000140)={@_ha_fsid={[0x2, 0x4]}, {0x6, 0x2, 0x0, 0x4}}, 0xd16, &(0x7f0000000240), &(0x7f0000000340)=0x21}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x3, 0x4, 0x7, 0x10011, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r13}, 0x50) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r14, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xac}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 109.78753ms ago: executing program 4 (id=2849): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9, 0x2, 0x1fc, 0x1, 0x9, 0x1}, 0xffffff9a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_mreq(r2, 0x0, 0x7, &(0x7f0000000000)={@loopback, @local}, 0x8) recvmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x102}], 0x1, 0x45833af92e4b38bf, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12) sendfile(r3, r1, 0x0, 0xf03a0005) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 95.491346ms ago: executing program 6 (id=2850): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0xfe}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic="b0"]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0xfe}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic="b0"]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async) 0s ago: executing program 3 (id=2851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) sendto$packet(0xffffffffffffffff, &(0x7f00000008c0)="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", 0x1000, 0x41, &(0x7f0000000080)={0x11, 0xd, r1, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) kernel console output (not intermixed with test programs): 194.413009][ T9167] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.471110][ T9167] Buffer I/O error on dev nbd0, logical block 3, async page read [ 194.490016][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.500674][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.554811][ T9167] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.575213][ T9167] Buffer I/O error on dev nbd0, logical block 0, async page read [ 194.587174][ T9212] netlink: 'syz.4.933': attribute type 27 has an invalid length. [ 194.595748][ T9167] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.606017][ T9211] netlink: 'syz.4.933': attribute type 3 has an invalid length. [ 194.615569][ T9167] Buffer I/O error on dev nbd0, logical block 1, async page read [ 194.623969][ T9211] netlink: 'syz.4.933': attribute type 1 has an invalid length. [ 194.632554][ T9167] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.642594][ T9211] netlink: 212 bytes leftover after parsing attributes in process `syz.4.933'. [ 194.652897][ T9167] Buffer I/O error on dev nbd0, logical block 2, async page read [ 194.661208][ T9211] NCSI netlink: No device for ifindex 813332851 [ 194.673585][ T9167] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.713551][ T9167] Buffer I/O error on dev nbd0, logical block 3, async page read [ 194.721459][ T9167] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.743860][ T9217] erspan0: entered promiscuous mode [ 194.756359][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 194.790174][ T9167] Buffer I/O error on dev nbd0, logical block 0, async page read [ 194.809150][ T9167] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.845786][ T9167] Buffer I/O error on dev nbd0, logical block 1, async page read [ 194.865898][ T9167] ldm_validate_partition_table(): Disk read failed. [ 194.882548][ T9167] Dev nbd0: unable to read RDB block 0 [ 194.893069][ T9224] netlink: 208 bytes leftover after parsing attributes in process `syz.2.938'. [ 194.907452][ T9167] nbd0: unable to read partition table [ 194.925318][ T9167] ldm_validate_partition_table(): Disk read failed. [ 194.942722][ T9167] Dev nbd0: unable to read RDB block 0 [ 194.953003][ T9167] nbd0: unable to read partition table [ 195.000129][ T9227] bridge2: entered promiscuous mode [ 195.017649][ T9233] netlink: 'syz.3.936': attribute type 4 has an invalid length. [ 195.035236][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.043609][ T9227] bridge2: entered allmulticast mode [ 195.065298][ T9233] netlink: 224 bytes leftover after parsing attributes in process `syz.3.936'. [ 195.230367][ T9244] raw_sendmsg: syz.2.941 forgot to set AF_INET. Fix it! [ 195.609341][ T9276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.950'. [ 195.815961][ T9282] tipc: Enabled bearer , priority 11 [ 195.827996][ T9285] tipc: Enabling of bearer rejected, already enabled [ 195.994611][ T9295] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 196.072952][ T9297] syzkaller0: entered allmulticast mode [ 196.085793][ T9297] syzkaller0: entered promiscuous mode [ 196.091015][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.877110][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 196.897377][ T9321] tipc: Started in network mode [ 196.902390][ T9321] tipc: Node identity 9e5ff8dc0f5d, cluster identity 4711 [ 196.912385][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 196.930889][ T9321] tipc: Enabled bearer , priority 0 [ 196.952833][ T9327] syzkaller0: entered promiscuous mode [ 196.960246][ T9327] syzkaller0: entered allmulticast mode [ 196.979433][ T796] tipc: Node number set to 633984370 [ 197.059178][ T9324] syzkaller0: entered promiscuous mode [ 197.070521][ T9324] syzkaller0: entered allmulticast mode [ 197.081720][ T9324] tipc: Resetting bearer [ 197.099127][ T9321] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 197.111712][ T9321] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 197.129512][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.513109][ T9340] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 197.556428][ T9347] xt_socket: unknown flags 0xe4 [ 197.616387][ T9320] tipc: Resetting bearer [ 197.661873][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.974'. [ 197.681047][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.974'. [ 197.763531][ T9357] netlink: 165 bytes leftover after parsing attributes in process `syz.4.975'. [ 197.785661][ T9357] netlink: ct family unspecified [ 199.168164][ T9320] tipc: Disabling bearer [ 199.193852][ T5935] page_pool_release_retry() stalled pool shutdown: id 70, 1 inflight 60 sec [ 199.206942][ T9373] tipc: Invalid UDP bearer configuration [ 199.206980][ T9373] tipc: Enabling of bearer rejected, failed to enable media [ 199.221473][ T796] tipc: Node number set to 2432891100 [ 199.274036][ T29] page_pool_release_retry() stalled pool shutdown: id 71, 1 inflight 60 sec [ 199.450296][ T9397] netlink: 'syz.1.985': attribute type 29 has an invalid length. [ 199.456788][ T9407] SET target dimension over the limit! [ 199.479015][ T9394] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20000 [ 199.529146][ T9409] netlink: 'syz.1.985': attribute type 29 has an invalid length. [ 199.671524][ T9419] __nla_validate_parse: 5 callbacks suppressed [ 199.671543][ T9419] netlink: 92 bytes leftover after parsing attributes in process `syz.2.989'. [ 199.729534][ T9419] netlink: 'syz.2.989': attribute type 1 has an invalid length. [ 199.784554][ T9422] netlink: 92 bytes leftover after parsing attributes in process `syz.2.989'. [ 199.794077][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 199.823836][ T9422] netlink: 'syz.2.989': attribute type 1 has an invalid length. [ 199.921330][ T9428] bond5: Unable to set up delay as MII monitoring is disabled [ 199.946477][ T9428] bond5 (unregistering): Released all slaves [ 199.996453][ T9434] veth1_macvtap: left promiscuous mode [ 200.008894][ T9434] macsec0: entered promiscuous mode [ 200.023055][ T9434] macsec0: entered allmulticast mode [ 200.091308][ T9438] : entered promiscuous mode [ 200.111735][ T9441] veth1_macvtap: entered promiscuous mode [ 200.131965][ T9441] veth1_macvtap: entered allmulticast mode [ 200.138975][ T9441] macsec0: left promiscuous mode [ 200.151781][ T9441] macsec0: left allmulticast mode [ 200.158331][ T9441] veth1_macvtap: left allmulticast mode [ 200.203088][ T9453] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.995'. [ 200.238138][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'. [ 200.315565][ T9459] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 200.324810][ T9461] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 200.346268][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 200.396233][ T9460] hsr_slave_0: left promiscuous mode [ 200.414005][ T9460] hsr_slave_1: left promiscuous mode [ 200.521150][ T24] IPVS: starting estimator thread 0... [ 200.613608][ T9468] IPVS: using max 25 ests per chain, 60000 per kthread [ 200.761260][ T9485] netlink: 'syz.4.1007': attribute type 21 has an invalid length. [ 200.769822][ T9485] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.778238][ T9485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.785536][ T9485] IPv6: NLM_F_CREATE should be set when creating new route [ 200.792892][ T9485] IPv6: NLM_F_CREATE should be set when creating new route [ 200.800208][ T9485] IPv6: NLM_F_CREATE should be set when creating new route [ 200.812868][ T9482] netlink: 'syz.0.1008': attribute type 2 has an invalid length. [ 200.854475][ T9489] netlink: 'syz.4.1007': attribute type 21 has an invalid length. [ 200.875177][ T9489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.882733][ T9488] netlink: 'syz.2.1006': attribute type 10 has an invalid length. [ 200.930683][ T9493] netlink: 'syz.3.1010': attribute type 1 has an invalid length. [ 200.947676][ T9497] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1009'. [ 200.991837][ T9493] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.000217][ T9496] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1009'. [ 201.011161][ T9492] netlink: set zone limit has 4 unknown bytes [ 201.069263][ T9494] bond3: (slave veth0_to_bond): making interface the new active one [ 201.082985][ T9494] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 201.141227][ T9493] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.152060][ T9507] x_tables: duplicate underflow at hook 1 [ 201.168732][ T9493] bond3: (slave bond4): Enslaving as an active interface with a down link [ 201.324162][ T9526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.332975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.386085][ T9523] bridge2: entered promiscuous mode [ 201.393109][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1016'. [ 201.422996][ T9523] bridge2: entered allmulticast mode [ 201.453286][ T9523] team0: Port device bridge2 added [ 201.492670][ T9528] bridge0: port 1(team0) entered blocking state [ 201.529198][ T9528] bridge0: port 1(team0) entered disabled state [ 201.634839][ T9528] team0: entered allmulticast mode [ 201.640027][ T9528] team_slave_1: entered allmulticast mode [ 201.731501][ T9528] team0: entered promiscuous mode [ 201.737142][ T9528] team_slave_1: entered promiscuous mode [ 201.810978][ T9542] veth5: entered allmulticast mode [ 201.821353][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'. [ 202.225351][ T9567] netlink: 'syz.2.1029': attribute type 12 has an invalid length. [ 202.522731][ T9583] tipc: Can't bind to reserved service type 1 [ 203.705088][ T9629] vlan3: entered promiscuous mode [ 203.723928][ T9629] geneve1: entered promiscuous mode [ 203.732857][ T9629] vlan3: entered allmulticast mode [ 203.762148][ T9629] geneve1: entered allmulticast mode [ 203.836295][ T9633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.850868][ T9636] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 203.906340][ T9639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.147340][ T9651] bridge_slave_0: left allmulticast mode [ 204.153059][ T9651] bridge_slave_0: left promiscuous mode [ 204.177983][ T9651] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.245961][ T9651] bridge_slave_1: left allmulticast mode [ 204.252025][ T9651] bridge_slave_1: left promiscuous mode [ 204.267396][ T9651] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.292609][ T9651] bond0: (slave bond_slave_0): Releasing backup interface [ 204.335980][ T9651] bond0: (slave bond_slave_1): Releasing backup interface [ 204.388771][ T9651] team0: Port device team_slave_0 removed [ 204.438162][ T9651] team0: Port device team_slave_1 removed [ 204.461894][ T9651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.486948][ T9651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.612760][ T9651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.621934][ T9651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.642654][ T9664] validate_nla: 4 callbacks suppressed [ 204.642673][ T9664] netlink: 'syz.1.1057': attribute type 12 has an invalid length. [ 205.108460][ T9695] netlink: 'syz.3.1066': attribute type 2 has an invalid length. [ 205.123564][ T9695] netlink: 'syz.3.1066': attribute type 2 has an invalid length. [ 205.151842][ T9695] __nla_validate_parse: 13 callbacks suppressed [ 205.151860][ T9695] netlink: 16082 bytes leftover after parsing attributes in process `syz.3.1066'. [ 205.193158][ T9699] netlink: 'syz.1.1067': attribute type 29 has an invalid length. [ 205.214850][ T9687] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1063'. [ 205.515948][ T796] page_pool_release_retry() stalled pool shutdown: id 84, 1 inflight 60 sec [ 205.536764][ T9714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1071'. [ 205.767964][ T9716] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 205.816234][ T9721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1074'. [ 205.936223][ T9726] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1076'. [ 205.955568][ T9728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1075'. [ 205.977386][ T9728] netlink: 'syz.1.1075': attribute type 7 has an invalid length. [ 205.993883][ T9728] netlink: 'syz.1.1075': attribute type 8 has an invalid length. [ 206.025546][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 206.265035][ T9741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1081'. [ 206.290881][ T9747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1083'. [ 206.308601][ T9745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1085'. [ 206.365964][ T9745] netlink: 'syz.4.1085': attribute type 21 has an invalid length. [ 206.655772][ T9773] netlink: 'syz.4.1089': attribute type 1 has an invalid length. [ 206.860798][ T9783] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 207.351057][ T9805] xt_time: unknown flags 0xf4 [ 208.488906][ T9853] syzkaller0: entered promiscuous mode [ 208.508636][ T9853] syzkaller0: entered allmulticast mode [ 209.113225][ T9886] netlink: 'syz.0.1125': attribute type 1 has an invalid length. [ 209.131730][ T9886] netlink: 'syz.0.1125': attribute type 7 has an invalid length. [ 210.243407][ T7443] syz_tun: tun_net_xmit 42 [ 210.591931][ T9950] validate_nla: 1 callbacks suppressed [ 210.591950][ T9950] netlink: 'syz.1.1143': attribute type 8 has an invalid length. [ 210.630513][ T9950] __nla_validate_parse: 15 callbacks suppressed [ 210.630532][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 210.889981][ T9965] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1146'. [ 211.048542][ T9976] tipc: MTU too low for tipc bearer [ 211.071725][ T9969] netlink: 'syz.1.1148': attribute type 1 has an invalid length. [ 211.081037][ T9969] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1148'. [ 211.105862][ T9969] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20002 [ 211.244221][ T9985] netlink: 'syz.3.1153': attribute type 1 has an invalid length. [ 211.258372][ T9986] tipc: Failed to obtain node identity [ 211.269419][ T9986] tipc: Enabling of bearer rejected, failed to enable media [ 211.278073][ C1] syz_tun: tun_net_xmit 42 [ 211.367575][ T9985] bond5: entered promiscuous mode [ 211.373161][ T9985] 8021q: adding VLAN 0 to HW filter on device bond5 [ 211.456923][ T9998] veth7: entered allmulticast mode [ 211.490284][ T9985] bond5: (slave bridge4): making interface the new active one [ 211.498882][ T9985] bridge4: entered promiscuous mode [ 211.506576][ T9985] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 211.545084][T10006] netlink: 'syz.4.1160': attribute type 1 has an invalid length. [ 211.572206][T10006] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 211.744209][T10024] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1164'. [ 211.820554][T10034] netlink: 'syz.4.1166': attribute type 21 has an invalid length. [ 211.853900][T10034] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1166'. [ 211.880067][T10034] netlink: 'syz.4.1166': attribute type 4 has an invalid length. [ 211.933620][T10034] netlink: 'syz.4.1166': attribute type 5 has an invalid length. [ 211.980257][T10034] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1166'. [ 212.313693][ C1] syz_tun: tun_net_xmit 42 [ 213.022169][T10093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.031596][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.199791][T10105] syz.2.1184: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 213.219207][T10105] CPU: 0 UID: 0 PID: 10105 Comm: syz.2.1184 Not tainted syzkaller #0 PREEMPT(full) [ 213.219236][T10105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 213.219250][T10105] Call Trace: [ 213.219259][T10105] [ 213.219267][T10105] dump_stack_lvl+0xe8/0x150 [ 213.219304][T10105] warn_alloc+0x249/0x340 [ 213.219328][T10105] ? stack_trace_save+0xa9/0x100 [ 213.219353][T10105] ? __pfx_warn_alloc+0x10/0x10 [ 213.219383][T10105] ? kasan_save_track+0x4f/0x80 [ 213.219402][T10105] ? kasan_save_track+0x3e/0x80 [ 213.219420][T10105] ? __kasan_kmalloc+0x93/0xb0 [ 213.219440][T10105] ? __kmalloc_cache_noprof+0x31c/0x660 [ 213.219460][T10105] ? xskq_create+0x56/0x170 [ 213.219487][T10105] ? xsk_setsockopt+0x54c/0x990 [ 213.219510][T10105] ? do_sock_setsockopt+0x17c/0x1b0 [ 213.219537][T10105] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 213.219563][T10105] ? do_syscall_64+0x14d/0xf80 [ 213.219599][T10105] __vmalloc_node_range_noprof+0x132/0x1730 [ 213.219661][T10105] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 213.219691][T10105] ? __kasan_kmalloc+0x93/0xb0 [ 213.219720][T10105] vmalloc_user_noprof+0xad/0xe0 [ 213.219741][T10105] ? xskq_create+0xbf/0x170 [ 213.219770][T10105] xskq_create+0xbf/0x170 [ 213.219808][T10105] xsk_init_queue+0x8a/0xe0 [ 213.219838][T10105] xsk_setsockopt+0x54c/0x990 [ 213.219867][T10105] ? __pfx_xsk_setsockopt+0x10/0x10 [ 213.219895][T10105] ? __pfx_aa_sk_perm+0x10/0x10 [ 213.219922][T10105] ? aa_sock_opt_perm+0xff/0x1a0 [ 213.219951][T10105] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 213.219973][T10105] ? __pfx_xsk_setsockopt+0x10/0x10 [ 213.220001][T10105] do_sock_setsockopt+0x17c/0x1b0 [ 213.220034][T10105] __x64_sys_setsockopt+0x13d/0x1b0 [ 213.220070][T10105] do_syscall_64+0x14d/0xf80 [ 213.220101][T10105] ? trace_irq_disable+0x3b/0x150 [ 213.220130][T10105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.220152][T10105] ? clear_bhb_loop+0x40/0x90 [ 213.220177][T10105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.220198][T10105] RIP: 0033:0x7f578759c629 [ 213.220219][T10105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.220235][T10105] RSP: 002b:00007f578842f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 213.220258][T10105] RAX: ffffffffffffffda RBX: 00007f5787815fa0 RCX: 00007f578759c629 [ 213.220274][T10105] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 213.220286][T10105] RBP: 00007f5787632b39 R08: 0000000000000004 R09: 0000000000000000 [ 213.220299][T10105] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.220311][T10105] R13: 00007f5787816038 R14: 00007f5787815fa0 R15: 00007fffbb929d78 [ 213.220344][T10105] [ 213.220870][T10105] Mem-Info: [ 213.510387][T10105] active_anon:5817 inactive_anon:7 isolated_anon:0 [ 213.510387][T10105] active_file:2760 inactive_file:40172 isolated_file:0 [ 213.510387][T10105] unevictable:768 dirty:107 writeback:0 [ 213.510387][T10105] slab_reclaimable:11409 slab_unreclaimable:98063 [ 213.510387][T10105] mapped:29282 shmem:1353 pagetables:1284 [ 213.510387][T10105] sec_pagetables:0 bounce:0 [ 213.510387][T10105] kernel_misc_reclaimable:0 [ 213.510387][T10105] free:1327093 free_pcp:11758 free_cma:0 [ 213.556963][T10105] Node 0 active_anon:23268kB inactive_anon:28kB active_file:11040kB inactive_file:160476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117128kB dirty:428kB writeback:0kB shmem:3876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13152kB pagetables:5028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.615637][ T7446] syz_tun: tun_net_xmit 42 [ 213.641778][T10105] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.682949][T10116] openvswitch: netlink: IP tunnel TTL not specified. [ 213.713052][T10105] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.767113][T10105] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 213.773017][T10105] Node 0 DMA32 free:1342388kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23368kB inactive_anon:28kB active_file:11040kB inactive_file:160476kB unevictable:1536kB writepending:428kB zspages:0kB present:3129332kB managed:2552848kB mlocked:0kB bounce:0kB free_pcp:47400kB local_pcp:27284kB free_cma:0kB [ 213.844133][T10105] lowmem_reserve[]: 0 0 0 0 0 [ 213.874953][T10105] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 213.936627][T10105] lowmem_reserve[]: 0 0 0 0 0 [ 213.941530][T10105] Node 1 Normal free:3949532kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.989751][T10105] lowmem_reserve[]: 0 0 0 0 0 [ 213.995320][T10105] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 214.026766][T10105] Node 0 DMA32: 3197*4kB (UM) 2156*8kB (UME) 1136*16kB (UME) 913*32kB (UME) 265*64kB (UM) 356*128kB (UM) 295*256kB (U) 207*512kB (UM) 163*1024kB (UME) 89*2048kB (UME) 164*4096kB (UM) = 1342388kB [ 214.047608][T10105] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 214.062174][T10105] Node 1 Normal: 3*4kB (UE) 8*8kB (UME) 17*16kB (UME) 12*32kB (UME) 12*64kB (UME) 10*128kB (UME) 5*256kB (UM) 6*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 961*4096kB (M) = 3949532kB [ 214.112391][T10105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 214.143579][T10105] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 214.155912][T10105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 214.179695][T10105] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 214.191861][T10105] 44281 total pagecache pages [ 214.198864][T10105] 0 pages in swap cache [ 214.203238][T10105] Free swap = 124996kB [ 214.207701][T10105] Total swap = 124996kB [ 214.211969][T10105] 2097051 pages RAM [ 214.216502][T10105] 0 pages HighMem/MovableOnly [ 214.221391][T10105] 427003 pages reserved [ 214.226242][T10105] 0 pages cma reserved [ 214.256401][T10135] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1191'. [ 214.364646][T10132] syzkaller0: entered promiscuous mode [ 214.370187][T10132] syzkaller0: entered allmulticast mode [ 214.633577][ C0] syz_tun: tun_net_xmit 42 [ 214.691125][T10158] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1196'. [ 215.675948][ C0] syz_tun: tun_net_xmit 42 [ 215.994922][T10158] bridge0: left allmulticast mode [ 216.064374][T10170] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1197'. [ 216.076752][T10181] netlink: 'syz.3.1198': attribute type 4 has an invalid length. [ 216.165474][T10181] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 216.496182][T10203] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1200'. [ 216.516139][T10202] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.635427][T10207] tipc: Enabling of bearer rejected, failed to enable media [ 216.766455][T10214] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1205'. [ 216.901871][T10221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1206'. [ 216.977579][ T5988] syz_tun: tun_net_xmit 42 [ 217.157159][T10235] netlink: 'syz.3.1206': attribute type 23 has an invalid length. [ 217.736433][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 217.762861][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 217.854357][T10273] sctp: [Deprecated]: syz.1.1218 (pid 10273) Use of int in max_burst socket option. [ 217.854357][T10273] Use struct sctp_assoc_value instead [ 217.880474][T10270] netlink: 'syz.0.1216': attribute type 1 has an invalid length. [ 217.898495][T10276] dvmrp6: entered allmulticast mode [ 217.993584][ C0] syz_tun: tun_net_xmit 42 [ 218.458426][T10314] netlink: 181328 bytes leftover after parsing attributes in process `syz.4.1226'. [ 218.477007][T10316] Unsupported ieee802154 address type: 0 [ 218.649733][T10323] syzkaller0: entered promiscuous mode [ 218.685198][T10323] syzkaller0: entered allmulticast mode [ 218.821216][T10328] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1230'. [ 218.882742][T10334] ipt_REJECT: TCP_RESET invalid for non-tcp [ 219.033629][ C0] syz_tun: tun_net_xmit 42 [ 219.097479][T10344] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1232'. [ 219.372884][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 219.391223][T10362] netlink: 'syz.2.1239': attribute type 6 has an invalid length. [ 219.572729][T10362] gtp0: entered promiscuous mode [ 219.598411][T10362] gtp0: entered allmulticast mode [ 220.415290][ T7446] syz_tun: tun_net_xmit 42 [ 220.697121][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c09e400: rx timeout, send abort [ 221.198234][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057a8cc00: rx timeout, send abort [ 221.207381][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c09e400: abort rx timeout. Force session deactivation [ 221.277539][T10444] xt_hashlimit: size too large, truncated to 1048576 [ 221.433572][ C0] syz_tun: tun_net_xmit 42 [ 221.474413][T10455] __nla_validate_parse: 3 callbacks suppressed [ 221.474433][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1261'. [ 221.614818][T10455] netlink: 'syz.4.1261': attribute type 10 has an invalid length. [ 221.675589][T10455] bridge0: port 1(team0) entered disabled state [ 221.706556][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057a8cc00: abort rx timeout. Force session deactivation [ 221.743681][T10455] team0 (unregistering): left allmulticast mode [ 221.750231][T10455] team_slave_1: left allmulticast mode [ 221.767211][T10455] team0 (unregistering): left promiscuous mode [ 221.793572][T10455] team_slave_1: left promiscuous mode [ 221.799517][T10455] bridge0: port 1(team0) entered disabled state [ 221.889763][T10455] team0 (unregistering): Port device team_slave_1 removed [ 221.931390][T10455] team0 (unregistering): Port device bridge2 removed [ 222.175303][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 222.473576][ C0] syz_tun: tun_net_xmit 42 [ 222.576638][T10495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1269'. [ 222.627910][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 223.008705][T10520] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 223.155893][T10528] netlink: 'syz.4.1277': attribute type 5 has an invalid length. [ 223.188038][T10528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1277'. [ 223.213865][T10534] netlink: 'syz.2.1279': attribute type 4 has an invalid length. [ 223.245157][T10534] netlink: 'syz.2.1279': attribute type 4 has an invalid length. [ 223.297008][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'. [ 223.308112][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1279'. [ 223.328038][ T7446] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.328397][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'. [ 223.345860][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1279'. [ 223.348658][ T7446] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.405001][ T7446] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.413261][ T7446] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.677918][T10551] netlink: 'syz.1.1283': attribute type 1 has an invalid length. [ 223.696640][T10549] syzkaller0: entered promiscuous mode [ 223.702263][T10549] syzkaller0: entered allmulticast mode [ 223.773860][ T7446] syz_tun: tun_net_xmit 42 [ 223.963310][T10557] vcan1: entered promiscuous mode [ 223.990512][T10557] vcan1: entered allmulticast mode [ 224.049004][T10574] netlink: zone id is out of range [ 224.054267][T10574] netlink: zone id is out of range [ 224.059414][T10574] netlink: zone id is out of range [ 224.095826][T10574] netlink: zone id is out of range [ 224.140506][T10574] netlink: zone id is out of range [ 224.180039][T10574] netlink: zone id is out of range [ 224.200211][T10581] netlink: 'syz.2.1290': attribute type 28 has an invalid length. [ 224.214592][T10574] netlink: zone id is out of range [ 224.224140][T10574] netlink: set zone limit has 4 unknown bytes [ 224.230486][T10581] netlink: 'syz.2.1290': attribute type 3 has an invalid length. [ 224.256854][T10581] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1290'. [ 224.485013][T10591] veth1_macvtap: left promiscuous mode [ 224.538727][T10593] netlink: 'syz.1.1294': attribute type 9 has an invalid length. [ 224.547479][T10593] netlink: 'syz.1.1294': attribute type 6 has an invalid length. [ 224.589567][T10595] netlink: 'syz.3.1295': attribute type 2 has an invalid length. [ 224.647467][T10601] syzkaller0: entered promiscuous mode [ 224.662803][T10601] syzkaller0: entered allmulticast mode [ 224.803570][ C1] syz_tun: tun_net_xmit 42 [ 225.451804][T10633] tc_dump_action: action bad kind [ 225.833810][ C1] syz_tun: tun_net_xmit 42 [ 226.010736][T10657] IPVS: Scheduler module ip_vs_sip not found [ 226.562176][T10692] IPv6: sit2: Disabled Multicast RS [ 226.587043][T10696] __nla_validate_parse: 7 callbacks suppressed [ 226.587063][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'. [ 226.606921][T10696] openvswitch: netlink: Duplicate key (type 32). [ 226.857750][T10707] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1325'. [ 227.096369][ T7437] syz_tun: tun_net_xmit 42 [ 227.233030][T10732] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1329'. [ 227.890845][T10764] netlink: 'syz.3.1333': attribute type 4 has an invalid length. [ 228.153685][ C1] syz_tun: tun_net_xmit 42 [ 228.417680][T10803] netlink: 'syz.3.1339': attribute type 33 has an invalid length. [ 228.427276][T10803] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1339'. [ 228.525095][T10803] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1339'. [ 228.864639][T10817] syzkaller1: entered promiscuous mode [ 228.870293][T10817] syzkaller1: entered allmulticast mode [ 228.893275][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1343'. [ 228.939959][T10817] geneve2: entered promiscuous mode [ 229.069396][T10831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.079549][T10832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.131932][T10836] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1347'. [ 229.193611][ C1] syz_tun: tun_net_xmit 42 [ 229.352684][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'. [ 229.573918][T10860] netlink: 'syz.4.1351': attribute type 15 has an invalid length. [ 229.584571][T10860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1351'. [ 229.651197][T10857] openvswitch: netlink: Multiple metadata blocks provided [ 230.078851][T10859] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 230.097084][T10863] lo speed is unknown, defaulting to 1000 [ 230.144178][T10857] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 230.237150][ T7444] bond3: (slave veth0_to_bond): link status definitely down, disabling slave [ 230.264361][ T7444] bond3: now running without any active interface! [ 230.275284][T10863] lo speed is unknown, defaulting to 1000 [ 230.303837][T10863] lo speed is unknown, defaulting to 1000 [ 230.775112][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1364'. [ 230.856719][T10863] infiniband syz0: set active [ 230.863775][ T5885] lo speed is unknown, defaulting to 1000 [ 230.870694][T10863] infiniband syz0: added lo [ 230.885899][T10863] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 230.890761][T10863] infiniband syz0: Couldn't open port 1 [ 230.986365][T10863] RDS/IB: syz0: added [ 231.000752][T10863] smc: adding ib device syz0 with port count 1 [ 231.013190][T10863] smc: ib device syz0 port 1 has no pnetid [ 231.027187][ T8632] lo speed is unknown, defaulting to 1000 [ 231.047241][T10863] lo speed is unknown, defaulting to 1000 [ 231.327051][T10925] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 231.469245][T10863] lo speed is unknown, defaulting to 1000 [ 231.500823][T10933] gre0: entered promiscuous mode [ 231.507003][T10933] gre0: entered allmulticast mode [ 231.544249][T10933] netlink: 'syz.3.1376': attribute type 4 has an invalid length. [ 231.652198][T10938] __nla_validate_parse: 1 callbacks suppressed [ 231.652220][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1379'. [ 231.794247][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1380'. [ 231.823939][T10863] lo speed is unknown, defaulting to 1000 [ 232.123099][T10863] lo speed is unknown, defaulting to 1000 [ 232.326563][T10954] vlan2: entered promiscuous mode [ 232.331793][T10954] geneve1: entered promiscuous mode [ 232.337466][T10954] vlan2: entered allmulticast mode [ 232.342748][T10954] geneve1: entered allmulticast mode [ 232.371733][T10863] lo speed is unknown, defaulting to 1000 [ 232.601818][T10963] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1386'. [ 232.836514][T10970] syzkaller0: entered promiscuous mode [ 232.842321][T10970] syzkaller0: entered allmulticast mode [ 234.518282][T11011] netlink: 'syz.0.1398': attribute type 27 has an invalid length. [ 234.556798][T11014] netlink: 'syz.3.1397': attribute type 1 has an invalid length. [ 234.918634][ T30] audit: type=1800 audit(1772040771.456:3): pid=11031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1406" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1410 res=0 errno=0 [ 235.014207][T11035] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1408'. [ 235.026333][T11035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1408'. [ 235.039255][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'. [ 235.048885][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'. [ 235.064528][T11034] netlink: 'syz.3.1407': attribute type 3 has an invalid length. [ 235.097754][T11040] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 235.149765][T11040] 8021q: adding VLAN 0 to HW filter on device bond8 [ 235.181234][T11039] bond8: (slave veth5): Enslaving as an active interface with a down link [ 235.262583][T11046] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 235.284439][T11046] tipc: Enabled bearer , priority 0 [ 235.305381][T11046] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 235.312841][T11046] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 235.348874][T11046] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1411'. [ 235.373353][T11046] tipc: Resetting bearer [ 235.648749][T11061] delete_channel: no stack [ 235.662957][T11061] delete_channel: no stack [ 235.806118][T11070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1415'. [ 235.891263][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1420'. [ 236.077385][T11085] netlink: 'syz.3.1422': attribute type 11 has an invalid length. [ 236.295946][T11098] netlink: 'syz.3.1429': attribute type 11 has an invalid length. [ 236.634904][T11118] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 236.642689][T11118] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 236.897171][T11131] openvswitch: netlink: Flow actions attr not present in new flow. [ 236.956036][T11137] netlink: 'syz.0.1440': attribute type 29 has an invalid length. [ 237.152782][T11154] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 237.160603][T11154] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 237.286558][T11158] syzkaller0: entered promiscuous mode [ 237.292679][T11158] syzkaller0: entered allmulticast mode [ 237.352753][T11160] __nla_validate_parse: 134 callbacks suppressed [ 237.352775][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1447'. [ 237.434996][T11165] netlink: 'syz.0.1448': attribute type 1 has an invalid length. [ 237.453020][T11165] netlink: 'syz.0.1448': attribute type 2 has an invalid length. [ 237.524128][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1450'. [ 237.553570][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1450'. [ 237.850843][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1458'. [ 238.039055][T11207] netlink: 'syz.4.1464': attribute type 16 has an invalid length. [ 238.055281][T11207] netlink: 'syz.4.1464': attribute type 17 has an invalid length. [ 238.147108][T11200] netlink: 'syz.3.1461': attribute type 13 has an invalid length. [ 238.157940][T11207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.260758][T11212] syzkaller0: entered promiscuous mode [ 238.278639][T11212] syzkaller0: entered allmulticast mode [ 238.314300][T11216] x_tables: duplicate underflow at hook 1 [ 238.325262][T11215] tipc: Started in network mode [ 238.330187][T11215] tipc: Node identity 5ef9c5b3eb88, cluster identity 4711 [ 238.390266][T11215] tipc: Enabled bearer , priority 0 [ 238.461413][T11211] tipc: Resetting bearer [ 238.510664][T11211] tipc: Disabling bearer [ 238.708949][T11241] erspan0: entered promiscuous mode [ 238.715121][T11241] erspan0: entered allmulticast mode [ 238.755624][T11243] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1472'. [ 238.978636][T11260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.064616][T11265] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1476'. [ 239.180019][T11273] IPv6: NLM_F_REPLACE set, but no existing node found! [ 239.382286][T11277] syzkaller0: entered promiscuous mode [ 239.389716][T11277] syzkaller0: entered allmulticast mode [ 239.410054][T11282] blkio.reset_stats is deprecated [ 239.785045][T11310] xt_cluster: node mask cannot exceed total number of nodes [ 239.805994][T11315] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1487'. [ 239.822104][T11312] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1488'. [ 241.007654][T11312] bond0 (unregistering): Released all slaves [ 241.201687][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1492'. [ 241.244913][T11325] validate_nla: 3 callbacks suppressed [ 241.244934][T11325] netlink: 'syz.0.1492': attribute type 7 has an invalid length. [ 241.333760][T11332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1495'. [ 241.429101][T11332] Cannot find add_set index 2 as target [ 241.450697][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.460439][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.469001][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.482489][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.490931][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.527027][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.547777][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.557182][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.578141][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.589769][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.772874][T11338] lo speed is unknown, defaulting to 1000 [ 242.173232][T11371] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 242.211752][T11371] bond5 (unregistering): Released all slaves [ 242.499270][T11384] netlink: 'syz.0.1505': attribute type 3 has an invalid length. [ 242.745030][T11395] __nla_validate_parse: 5 callbacks suppressed [ 242.745049][T11395] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1507'. [ 242.894111][T11391] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1506'. [ 242.913792][T11391] nbd: illegal input index -8454144 [ 243.320115][T11338] chnl_net:caif_netlink_parms(): no params data found [ 243.578871][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1514'. [ 243.658712][T11420] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1514'. [ 243.688455][ T5836] Bluetooth: hci5: command tx timeout [ 243.777731][T11338] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.788404][T11338] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.824547][T11338] bridge_slave_0: entered allmulticast mode [ 243.868762][T11338] bridge_slave_0: entered promiscuous mode [ 243.891763][T11338] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.899455][T11338] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.907293][T11338] bridge_slave_1: entered allmulticast mode [ 243.916218][T11338] bridge_slave_1: entered promiscuous mode [ 243.925366][T11431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1515'. [ 244.113374][T11338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.136360][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1518'. [ 244.158808][T11338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.259356][T11338] team0: Port device team_slave_0 added [ 244.294769][T11338] team0: Port device team_slave_1 added [ 244.372644][T11338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.383595][T11338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.441771][T11338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.467273][T11338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.481316][T11338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.549711][T11338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.682832][T11338] hsr_slave_0: entered promiscuous mode [ 244.696227][T11338] hsr_slave_1: entered promiscuous mode [ 244.702700][T11338] debugfs: 'hsr0' already exists in 'hsr' [ 244.723569][T11338] Cannot create hsr debugfs directory [ 244.829203][T11465] xt_socket: unknown flags 0x50 [ 244.839041][T11466] xt_socket: unknown flags 0x50 [ 244.849359][T11461] bridge_slave_0: left promiscuous mode [ 244.856008][T11465] netlink: 'syz.3.1528': attribute type 15 has an invalid length. [ 244.864110][T11465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1528'. [ 244.875590][T11461] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.890779][T11461] bridge_slave_1: left allmulticast mode [ 244.896935][T11461] bridge_slave_1: left promiscuous mode [ 244.902808][T11461] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.928178][T11461] bond0: (slave bond_slave_0): Releasing backup interface [ 244.975901][T11461] bond0: (slave bond_slave_1): Releasing backup interface [ 245.015588][T11461] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 245.263205][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'. [ 245.277511][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1529'. [ 245.327184][T11480] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1530'. [ 245.676849][T11494] syzkaller0: entered promiscuous mode [ 245.688316][T11494] syzkaller0: entered allmulticast mode [ 245.699312][T11338] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 245.719559][T11338] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 245.745140][T11338] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 245.754299][ T5836] Bluetooth: hci5: command tx timeout [ 245.779813][T11338] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 246.006205][T11338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.079373][T11338] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.117540][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.124857][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.158457][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.165720][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.365351][T11530] tipc: Enabled bearer , priority 0 [ 246.373101][T11523] tipc: Enabling of bearer rejected, already enabled [ 246.479477][T11518] syzkaller0: entered promiscuous mode [ 246.485391][T11518] syzkaller0: entered allmulticast mode [ 246.491716][T11518] tipc: Resetting bearer [ 246.525936][T11516] tipc: Resetting bearer [ 246.592238][T11539] SET target dimension over the limit! [ 247.758733][T11516] tipc: Disabling bearer [ 247.804642][T10866] tipc: Node number set to 3044132275 [ 247.841104][ T5836] Bluetooth: hci5: command tx timeout [ 247.881991][T11548] __nla_validate_parse: 1 callbacks suppressed [ 247.882013][T11548] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1546'. [ 247.918610][T11551] tipc: Enabling of bearer rejected, failed to enable media [ 248.067955][T11555] sctp: [Deprecated]: syz.2.1550 (pid 11555) Use of int in maxseg socket option. [ 248.067955][T11555] Use struct sctp_assoc_value instead [ 248.098428][T11338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.267390][T11564] netlink: 'syz.3.1551': attribute type 1 has an invalid length. [ 248.285589][T11569] xt_hashlimit: size too large, truncated to 1048576 [ 248.314922][T11564] bond7: entered promiscuous mode [ 248.335065][T11564] 8021q: adding VLAN 0 to HW filter on device bond7 [ 248.472791][T11564] 8021q: adding VLAN 0 to HW filter on device bond7 [ 248.480560][T11564] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 248.492573][T11564] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 248.505779][T11564] bond7: (slave vti0): making interface the new active one [ 248.513296][T11564] vti0: entered promiscuous mode [ 248.521816][T11564] bond7: (slave vti0): Enslaving as an active interface with an up link [ 248.532308][T11570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1551'. [ 248.566423][T11578] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1555'. [ 248.834568][T11338] veth0_vlan: entered promiscuous mode [ 248.860589][T11338] veth1_vlan: entered promiscuous mode [ 248.966721][T11338] veth0_macvtap: entered promiscuous mode [ 248.980728][T11338] veth1_macvtap: entered promiscuous mode [ 249.020355][T11338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.060107][T11605] bond_slave_1: entered promiscuous mode [ 249.116495][T11338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.153116][ T3544] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.183099][ T3544] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.238572][T11613] xt_hashlimit: size too large, truncated to 1048576 [ 249.246058][ T3544] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.262807][ T3544] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.407098][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1565'. [ 249.458111][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.478389][T11626] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1566'. [ 249.488826][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.559756][ T7446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.574530][ T7446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.688741][T11628] netlink: 'syz.2.1567': attribute type 1 has an invalid length. [ 249.927031][ T5836] Bluetooth: hci5: command tx timeout [ 249.988235][T11650] netlink: 'syz.5.1490': attribute type 10 has an invalid length. [ 250.067546][T11650] team0: Port device dummy0 added [ 250.199645][T11664] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 250.589889][T11690] netlink: 'syz.4.1581': attribute type 1 has an invalid length. [ 250.612666][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1581'. [ 250.623189][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'. [ 250.864744][T11694] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1583'. [ 251.221986][T11710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.233242][T11711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.412282][T11714] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 251.418341][T11714] syzkaller1: Linktype set failed because interface is up [ 251.428248][T11714] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1590'. [ 251.454224][ T5901] syzkaller1: tun_net_xmit 90 [ 251.608702][T11724] IPv6: sit1: Disabled Multicast RS [ 251.639861][T11724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1594'. [ 251.943698][T11749] netlink: 'syz.5.1602': attribute type 1 has an invalid length. [ 251.951778][T11749] netlink: 'syz.5.1602': attribute type 1 has an invalid length. [ 251.984829][T11749] netlink: 'syz.5.1602': attribute type 8 has an invalid length. [ 252.267194][T11763] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 252.277812][T11763] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 252.616198][T11776] syzkaller0: tun_net_xmit 28 [ 252.628410][T11776] netlink: 'syz.4.1611': attribute type 10 has an invalid length. [ 253.615780][T11804] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 253.885495][T11811] __nla_validate_parse: 5 callbacks suppressed [ 253.885514][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1622'. [ 254.005395][T11813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.597262][T11827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1629'. [ 254.615189][T11827] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1629'. [ 254.675251][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1629'. [ 254.692283][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1629'. [ 254.819766][T11838] batadv_slave_0: entered promiscuous mode [ 254.906068][T11835] batadv_slave_0: left promiscuous mode [ 254.919179][T11844] lo: entered allmulticast mode [ 254.924497][T11844] lo: left allmulticast mode [ 255.280846][ T3544] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.311513][ T3544] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.334536][T11865] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 255.353143][ T3544] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.381923][ T3544] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.452566][T11867] openvswitch: netlink: Flow key attr not present in new flow. [ 255.561756][T11875] lo: entered promiscuous mode [ 255.567685][T11875] tunl0: entered promiscuous mode [ 255.573827][T11875] gre0: left allmulticast mode [ 255.658548][T11875] gretap0: entered promiscuous mode [ 255.675407][T11875] erspan0: entered promiscuous mode [ 255.681186][T11875] ip_vti0: entered promiscuous mode [ 255.697726][T11883] netlink: 'syz.5.1647': attribute type 1 has an invalid length. [ 255.758588][T11877] netem: unknown loss type 0 [ 255.772228][T11888] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1647'. [ 255.786176][T11877] netem: change failed [ 255.794515][T11888] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 255.802331][T11888] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 255.824496][T11887] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1648'. [ 255.836539][T11887] netlink: Unknown conntrack attr (0) [ 255.919293][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.928977][ T1298] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 255.967311][T11893] lo: MTU too low for tipc bearer [ 255.972529][T11893] tipc: Enabling of bearer rejected, failed to enable media [ 256.128207][T11901] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1652'. [ 256.152096][T11901] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 256.159978][T11901] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 256.258382][T11906] netlink: 'syz.5.1653': attribute type 1 has an invalid length. [ 256.582598][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1659'. [ 256.631068][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1660'. [ 256.779636][T11927] pim6reg: entered allmulticast mode [ 256.846055][T11929] veth9: entered allmulticast mode [ 257.171031][T11948] wireguard0: entered promiscuous mode [ 257.177320][T11948] wireguard0: entered allmulticast mode [ 257.191582][T11948] team0: Port device wireguard0 added [ 257.714442][T11993] bond1: Unable to set up delay as MII monitoring is disabled [ 257.724747][T11993] bond1 (unregistering): Released all slaves [ 257.851905][T11997] can: request_module (can-proto-0) failed. [ 258.214132][T12016] bridge0: port 3(gretap0) entered blocking state [ 258.227027][T12016] bridge0: port 3(gretap0) entered disabled state [ 258.235433][T12016] gretap0: entered allmulticast mode [ 258.269206][T12016] gretap0: entered promiscuous mode [ 258.289440][T12016] bridge0: port 3(gretap0) entered blocking state [ 258.296094][T12016] bridge0: port 3(gretap0) entered forwarding state [ 258.331521][T12028] .: renamed from bridge_slave_1 (while UP) [ 258.412396][T12032] netlink: Conntrack attr has 4 unknown bytes [ 258.560762][T12034] netlink: 'syz.2.1696': attribute type 1 has an invalid length. [ 259.012931][T12053] __nla_validate_parse: 13 callbacks suppressed [ 259.012953][T12053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1702'. [ 259.551605][T12087] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 259.574409][T12087] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 259.585636][T12090] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1711'. [ 260.124570][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1722'. [ 260.135660][T12127] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1722'. [ 260.145640][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c366000: rx timeout, send abort [ 260.187399][T12133] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1721'. [ 260.227834][ T7446] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.241672][ T7446] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.273863][ T7446] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.291220][ T7446] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.532135][T12151] sctp: [Deprecated]: syz.3.1726 (pid 12151) Use of int in max_burst socket option. [ 260.532135][T12151] Use struct sctp_assoc_value instead [ 260.638358][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c365800: rx timeout, send abort [ 260.646928][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c366000: abort rx timeout. Force session deactivation [ 260.690653][T12157] veth0: entered promiscuous mode [ 260.749819][T12156] veth0: left promiscuous mode [ 260.788942][T12165] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1732'. [ 260.815736][T12165] openvswitch: netlink: Flow key attribute not present in set flow. [ 261.131759][T12180] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.146678][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c365800: abort rx timeout. Force session deactivation [ 261.170160][T12180] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.309978][T12180] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.321069][T12180] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.405213][T12196] netlink: 'syz.2.1738': attribute type 10 has an invalid length. [ 261.422279][T12196] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1738'. [ 261.561849][T12200] lo: entered promiscuous mode [ 261.601863][T12200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.687650][T12180] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.702396][T12180] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.769260][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1742'. [ 261.819643][T12210] x_tables: duplicate underflow at hook 2 [ 261.844876][T12210] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 261.854543][T10866] IPVS: starting estimator thread 0... [ 261.861785][T12180] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.885506][T12180] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.944758][T12211] IPVS: using max 28 ests per chain, 67200 per kthread [ 261.996771][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1746'. [ 262.126942][ T1336] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.151755][ T1336] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.179529][ T1336] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.188328][ T1336] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.218706][ T1336] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.228242][ T1336] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.247722][ T1336] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.256422][ T1336] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.371711][T12237] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1750'. [ 262.474167][T10866] page_pool_release_retry() stalled pool shutdown: id 118, 1 inflight 60 sec [ 263.548194][T12303] xt_limit: Overflow, try lower: 271964/0 [ 264.314296][ T5901] page_pool_release_retry() stalled pool shutdown: id 119, 1 inflight 60 sec [ 264.700546][T12328] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.719426][T12329] wg1: entered promiscuous mode [ 264.727213][T12328] netlink: 'syz.2.1779': attribute type 1 has an invalid length. [ 264.745946][T12329] wg1: entered allmulticast mode [ 264.774982][T12328] __nla_validate_parse: 13 callbacks suppressed [ 264.775002][T12328] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1779'. [ 264.899430][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 264.917289][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 264.934358][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 264.952076][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 264.959991][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 265.109234][T12342] lo speed is unknown, defaulting to 1000 [ 265.195453][T12346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1782'. [ 265.205137][T12346] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.272517][T12357] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.354294][ T5901] page_pool_release_retry() stalled pool shutdown: id 120, 1 inflight 60 sec [ 265.452913][T12373] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1788'. [ 265.482929][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1788'. [ 265.655098][T12373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1788'. [ 265.668606][T12373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1788'. [ 265.860462][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1793'. [ 265.899120][T12386] xfrm1: entered promiscuous mode [ 265.909342][T12386] xfrm1: entered allmulticast mode [ 265.936279][T12388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1793'. [ 266.028852][T12393] nbd: must specify a size in bytes for the device [ 266.149806][T12399] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1796'. [ 266.357386][T12342] chnl_net:caif_netlink_parms(): no params data found [ 266.614760][T12342] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.622042][T12342] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.630598][T12342] bridge_slave_0: entered allmulticast mode [ 266.640158][T12342] bridge_slave_0: entered promiscuous mode [ 266.649948][T12342] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.657989][T12342] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.665629][T12342] bridge_slave_1: entered allmulticast mode [ 266.674695][T12342] bridge_slave_1: entered promiscuous mode [ 266.698500][T12429] netlink: 'syz.3.1801': attribute type 4 has an invalid length. [ 266.742034][T12429] sctp: [Deprecated]: syz.3.1801 (pid 12429) Use of int in max_burst socket option deprecated. [ 266.742034][T12429] Use struct sctp_assoc_value instead [ 266.761403][T12342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.797491][T12342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.950180][T12342] team0: Port device team_slave_0 added [ 266.979138][T12342] team0: Port device team_slave_1 added [ 267.004666][T12433] netlink: 576 bytes leftover after parsing attributes in process `syz.5.1802'. [ 267.033589][ T5836] Bluetooth: hci6: command tx timeout [ 267.115591][T12342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.146866][T12342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.242434][T12342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.285242][T12342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.293792][T12342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.325758][T12342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.349423][T12457] netlink: 'syz.4.1809': attribute type 29 has an invalid length. [ 267.436778][ T24] page_pool_release_retry() stalled pool shutdown: id 124, 1 inflight 60 sec [ 267.489702][T12342] hsr_slave_0: entered promiscuous mode [ 267.505484][T12342] hsr_slave_1: entered promiscuous mode [ 267.523689][T12342] debugfs: 'hsr0' already exists in 'hsr' [ 267.529481][T12342] Cannot create hsr debugfs directory [ 267.667832][T12476] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 267.917642][T12485] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 267.934139][T12485] netlink: 'syz.3.1817': attribute type 83 has an invalid length. [ 268.355892][T12507] netlink: 'syz.2.1823': attribute type 61 has an invalid length. [ 268.390791][T12342] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 268.601973][T12342] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 268.648483][T12509] netlink: 'syz.4.1824': attribute type 13 has an invalid length. [ 268.658954][T12342] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 268.814323][T12342] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 269.109087][T12342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.123819][ T5836] Bluetooth: hci6: command tx timeout [ 269.168710][T12342] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.186310][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.193540][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.222279][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.223402][T12547] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 269.240015][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.348188][T12554] lo: Caught tx_queue_len zero misconfig [ 269.520437][ T24] page_pool_release_retry() stalled pool shutdown: id 126, 1 inflight 60 sec [ 269.580371][T12560] lo speed is unknown, defaulting to 1000 [ 269.806093][T12342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.123006][T12590] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 270.260141][T12590] __nla_validate_parse: 11 callbacks suppressed [ 270.260164][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1843'. [ 270.370761][T12604] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1847'. [ 270.590312][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1850'. [ 270.615598][T12342] veth0_vlan: entered promiscuous mode [ 270.678875][T12607] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 270.691781][T12610] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1848'. [ 270.701892][T12342] veth1_vlan: entered promiscuous mode [ 270.858030][T12342] veth0_macvtap: entered promiscuous mode [ 270.890139][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1852'. [ 270.926982][T12342] veth1_macvtap: entered promiscuous mode [ 270.993283][T12623] netlink: 'syz.4.1853': attribute type 1 has an invalid length. [ 271.014813][T12623] netlink: 'syz.4.1853': attribute type 1 has an invalid length. [ 271.077017][T12342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.121732][T12342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.157102][ T7443] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.167567][ T7443] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.180099][ T7443] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.189130][ T7443] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.203569][ T5836] Bluetooth: hci6: command tx timeout [ 271.439380][T12640] sock: sock_timestamping_bind_phc: sock not bind to device [ 271.516480][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.524833][T12647] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 [ 271.552341][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.562421][T12647] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1861'. [ 271.680827][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.711794][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.959283][T12653] macsec0: entered promiscuous mode [ 271.976270][T12653] macsec0: entered allmulticast mode [ 272.031278][T12651] veth1_macvtap: entered allmulticast mode [ 272.041873][T12651] macsec0: left promiscuous mode [ 272.058157][T12651] macsec0: left allmulticast mode [ 272.064101][T12651] veth1_macvtap: left allmulticast mode [ 272.094762][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1868'. [ 272.117634][T12665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1868'. [ 272.241998][T12670] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1870'. [ 272.541334][T12687] netlink: 'syz.4.1876': attribute type 29 has an invalid length. [ 272.564136][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1876'. [ 272.728211][T12700] syzkaller1: entered promiscuous mode [ 272.755751][T12700] syzkaller1: entered allmulticast mode [ 272.983064][T12711] pimreg: entered allmulticast mode [ 273.134292][T12717] xt_HMARK: proto mask must be zero with L3 mode [ 273.273790][ T5836] Bluetooth: hci6: command tx timeout [ 273.420663][T12733] lo speed is unknown, defaulting to 1000 [ 274.338739][T12788] netlink: 'syz.5.1897': attribute type 1 has an invalid length. [ 274.483949][T12788] bond1: entered promiscuous mode [ 274.494440][T12788] bond1: entered allmulticast mode [ 274.507851][T12788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.555632][T12799] macvlan2: entered promiscuous mode [ 274.566001][T12799] macvlan2: entered allmulticast mode [ 274.598498][T12799] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 274.749934][ T5488] veth0_macvtap: left promiscuous mode [ 274.930665][T12814] º: renamed from veth1_vlan (while UP) [ 275.004798][T12811] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 275.032415][T12811] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 275.116619][T12821] IPv6: NLM_F_CREATE should be specified when creating new route [ 275.134311][T12821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 275.141597][T12821] IPv6: NLM_F_CREATE should be set when creating new route [ 275.149075][T12821] IPv6: NLM_F_CREATE should be set when creating new route [ 275.350555][T12831] __nla_validate_parse: 5 callbacks suppressed [ 275.350577][T12831] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1906'. [ 276.330323][T12876] netlink: 'syz.5.1916': attribute type 1 has an invalid length. [ 277.818069][T12901] dvmrp0: entered allmulticast mode [ 277.915187][T12906] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1927'. [ 278.066182][T12907] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.078798][T12907] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.206689][T12907] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.227139][T12925] xt_ecn: cannot match TCP bits for non-tcp packets [ 278.243995][T12907] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.325791][T12931] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1932'. [ 278.335779][T12926] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 278.358687][T12926] bond2: (slave lo): Enslaving as an active interface with an up link [ 278.385010][T12926] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 278.428550][T12907] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.438765][T12907] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.540752][T12907] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.554844][T12907] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.609075][T12944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1936'. [ 278.673636][T12944] netlink: 'syz.5.1936': attribute type 30 has an invalid length. [ 278.682245][T12944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1936'. [ 278.807297][ T7443] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.824844][ T7443] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.851612][ T7443] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.861750][ T7443] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.871059][ T7443] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.880263][ T7443] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.914058][ T7443] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.943682][ T7443] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.015506][T12961] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1941'. [ 279.101602][T12963] tipc: Started in network mode [ 279.115602][T12963] tipc: Node identity ac14140f, cluster identity 4711 [ 279.135427][T12963] tipc: New replicast peer: 255.255.255.255 [ 279.142159][T12963] tipc: Enabled bearer , priority 10 [ 279.410386][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1947'. [ 279.796849][T13003] syz.2.1957: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 279.837372][T13003] CPU: 1 UID: 0 PID: 13003 Comm: syz.2.1957 Not tainted syzkaller #0 PREEMPT(full) [ 279.837402][T13003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 279.837425][T13003] Call Trace: [ 279.837434][T13003] [ 279.837443][T13003] dump_stack_lvl+0xe8/0x150 [ 279.837478][T13003] warn_alloc+0x249/0x340 [ 279.837550][T13003] ? stack_trace_save+0xa9/0x100 [ 279.837576][T13003] ? __pfx_warn_alloc+0x10/0x10 [ 279.837605][T13003] ? kasan_save_track+0x4f/0x80 [ 279.837624][T13003] ? kasan_save_track+0x3e/0x80 [ 279.837642][T13003] ? __kasan_kmalloc+0x93/0xb0 [ 279.837661][T13003] ? __kmalloc_cache_noprof+0x31c/0x660 [ 279.837681][T13003] ? xskq_create+0x56/0x170 [ 279.837707][T13003] ? xsk_setsockopt+0x54c/0x990 [ 279.837730][T13003] ? do_sock_setsockopt+0x17c/0x1b0 [ 279.837757][T13003] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 279.837783][T13003] ? do_syscall_64+0x14d/0xf80 [ 279.837816][T13003] __vmalloc_node_range_noprof+0x132/0x1730 [ 279.837872][T13003] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 279.837901][T13003] ? __kasan_kmalloc+0x93/0xb0 [ 279.837929][T13003] vmalloc_user_noprof+0xad/0xe0 [ 279.837950][T13003] ? xskq_create+0xbf/0x170 [ 279.837978][T13003] xskq_create+0xbf/0x170 [ 279.838018][T13003] xsk_init_queue+0x8a/0xe0 [ 279.838048][T13003] xsk_setsockopt+0x54c/0x990 [ 279.838077][T13003] ? __pfx_xsk_setsockopt+0x10/0x10 [ 279.838104][T13003] ? __pfx_aa_sk_perm+0x10/0x10 [ 279.838131][T13003] ? aa_sock_opt_perm+0xff/0x1a0 [ 279.838159][T13003] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 279.838180][T13003] ? __pfx_xsk_setsockopt+0x10/0x10 [ 279.838207][T13003] do_sock_setsockopt+0x17c/0x1b0 [ 279.838240][T13003] __x64_sys_setsockopt+0x13d/0x1b0 [ 279.838275][T13003] do_syscall_64+0x14d/0xf80 [ 279.838304][T13003] ? trace_irq_disable+0x3b/0x150 [ 279.838337][T13003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.838358][T13003] ? clear_bhb_loop+0x40/0x90 [ 279.838384][T13003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.838404][T13003] RIP: 0033:0x7f578759c629 [ 279.838424][T13003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.838441][T13003] RSP: 002b:00007f578842f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 279.838463][T13003] RAX: ffffffffffffffda RBX: 00007f5787815fa0 RCX: 00007f578759c629 [ 279.838477][T13003] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 279.838489][T13003] RBP: 00007f5787632b39 R08: 0000000000000004 R09: 0000000000000000 [ 279.838502][T13003] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.838515][T13003] R13: 00007f5787816038 R14: 00007f5787815fa0 R15: 00007fffbb929d78 [ 279.838548][T13003] [ 279.839743][T13003] Mem-Info: [ 280.124337][T13003] active_anon:6519 inactive_anon:7 isolated_anon:0 [ 280.124337][T13003] active_file:2953 inactive_file:40205 isolated_file:0 [ 280.124337][T13003] unevictable:768 dirty:194 writeback:0 [ 280.124337][T13003] slab_reclaimable:12030 slab_unreclaimable:110162 [ 280.124337][T13003] mapped:39617 shmem:1357 pagetables:1403 [ 280.124337][T13003] sec_pagetables:0 bounce:0 [ 280.124337][T13003] kernel_misc_reclaimable:0 [ 280.124337][T13003] free:1290906 free_pcp:9705 free_cma:0 [ 280.174397][ T5893] tipc: Node number set to 2886997007 [ 280.194196][T13003] Node 0 active_anon:26176kB inactive_anon:28kB active_file:11812kB inactive_file:160608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158568kB dirty:772kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14340kB pagetables:5504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 280.268262][T13003] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 280.322776][T13003] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 280.387486][T13019] netlink: 'syz.5.1960': attribute type 3 has an invalid length. [ 280.395550][T13003] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 280.401381][T13003] Node 0 DMA32 free:1199036kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26276kB inactive_anon:28kB active_file:11812kB inactive_file:160608kB unevictable:1536kB writepending:772kB zspages:0kB present:3129332kB managed:2552848kB mlocked:0kB bounce:0kB free_pcp:38880kB local_pcp:17852kB free_cma:0kB [ 280.463994][T13019] netlink: 766 bytes leftover after parsing attributes in process `syz.5.1960'. [ 280.507994][T13023] netlink: 'syz.4.1961': attribute type 1 has an invalid length. [ 280.517675][T13003] lowmem_reserve[]: 0 0 0 0 0 [ 280.522477][T13003] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 280.583331][T13003] lowmem_reserve[]: 0 0 0 0 0 [ 280.597926][T13003] Node 1 Normal free:3949528kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 280.671372][T13003] lowmem_reserve[]: 0 0 0 0 0 [ 280.689626][T13003] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 280.723644][T13003] Node 0 DMA32: 3041*4kB (UME) 2708*8kB (UM) 1101*16kB (UME) 94*32kB (UME) 231*64kB (UME) 463*128kB (UM) 352*256kB (UM) 277*512kB (UM) 217*1024kB (UM) 109*2048kB (UM) 96*4096kB (UM) = 1199092kB [ 280.779474][T13003] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 280.828187][T13003] Node 1 Normal: 2*4kB (E) 8*8kB (UME) 17*16kB (UME) 12*32kB (UME) 12*64kB (UME) 10*128kB (UME) 5*256kB (UM) 6*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 961*4096kB (M) = 3949528kB [ 280.867271][T13003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 280.882785][T13003] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 280.894339][T13003] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 280.905190][T13003] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 280.914613][T13003] 44511 total pagecache pages [ 280.919579][T13003] 0 pages in swap cache [ 280.924402][T13003] Free swap = 124996kB [ 280.928605][T13003] Total swap = 124996kB [ 280.932906][T13003] 2097051 pages RAM [ 280.936901][T13003] 0 pages HighMem/MovableOnly [ 280.941600][T13003] 427003 pages reserved [ 280.946074][T13003] 0 pages cma reserved [ 281.328201][T13062] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 281.442555][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1974'. [ 281.466679][T13068] netlink: 'syz.4.1975': attribute type 39 has an invalid length. [ 281.617727][T13072] openvswitch: netlink: Multiple metadata blocks provided [ 281.781108][T13082] netlink: 'syz.2.1980': attribute type 1 has an invalid length. [ 281.800050][T13082] netlink: 'syz.2.1980': attribute type 10 has an invalid length. [ 282.189163][T13102] syzkaller0: entered promiscuous mode [ 282.196560][T13102] syzkaller0: entered allmulticast mode [ 282.471255][T13124] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1990'. [ 282.738086][T13142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.818211][T13142] unsupported nla_type 33542 [ 282.865929][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1995'. [ 283.458539][T13179] bond9: option mode: invalid value (133) [ 283.526689][T13179] bond9 (unregistering): Released all slaves [ 283.542140][T13191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2004'. [ 283.554702][T13191] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2004'. [ 283.739352][T13199] Bluetooth: MGMT ver 1.23 [ 283.912323][T13209] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2008'. [ 284.048169][T13209] syzkaller1: entered promiscuous mode [ 284.075567][T13209] syzkaller1: entered allmulticast mode [ 284.351141][T13227] netlink: 'syz.3.2013': attribute type 1 has an invalid length. [ 284.450902][T13232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2013'. [ 284.490846][T13227] bond9: entered promiscuous mode [ 284.497015][T13227] 8021q: adding VLAN 0 to HW filter on device bond9 [ 284.510147][T13232] bond9: entered allmulticast mode [ 284.540121][T13227] bond9: (slave bridge7): making interface the new active one [ 284.590913][T13227] bridge7: entered promiscuous mode [ 284.622998][T13227] bridge7: entered allmulticast mode [ 284.665042][T13227] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 284.807008][T13252] syzkaller0: entered promiscuous mode [ 284.823624][T13252] syzkaller0: entered allmulticast mode [ 284.941645][T13247] lo speed is unknown, defaulting to 1000 [ 317.357252][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.365618][ T1298] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 351.298640][T13300] x_tables: duplicate underflow at hook 2 [ 351.313727][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2025'. [ 351.440549][T13308] x_tables: duplicate underflow at hook 3 [ 351.447933][T13308] syz.3.2026 uses old SIOCAX25GETINFO [ 351.489215][T13310] ip6gre1: entered promiscuous mode [ 351.498257][T13310] ip6gre1: entered allmulticast mode [ 351.622163][T13317] netlink: 'syz.2.2028': attribute type 3 has an invalid length. [ 351.763234][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2033'. [ 351.773968][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2033'. [ 351.921273][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2036'. [ 351.982902][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2036'. [ 352.216825][T13348] netlink: 'syz.4.2041': attribute type 1 has an invalid length. [ 352.264710][T13348] netlink: 'syz.4.2041': attribute type 21 has an invalid length. [ 352.309551][T13348] bond9: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 352.326658][T13348] bond9 (unregistering): Released all slaves [ 352.366015][T13351] bridge0: port 3(gretap0) entered disabled state [ 352.399250][T13353] netlink: 'syz.5.2042': attribute type 16 has an invalid length. [ 352.412105][T13351] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.428559][T13351] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.434291][T13353] netlink: 'syz.5.2042': attribute type 17 has an invalid length. [ 352.522480][T13353] lo: left promiscuous mode [ 352.535733][T13353] bridge0: port 3(gretap0) entered blocking state [ 352.542414][T13353] bridge0: port 3(gretap0) entered forwarding state [ 352.575455][T13353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.941010][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2049'. [ 353.134081][T13383] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2055'. [ 353.167827][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2055'. [ 353.507999][T13410] dvmrp0: entered allmulticast mode [ 354.070237][T13445] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2073'. [ 354.249445][T13453] bond9: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 354.266074][T13453] bond9 (unregistering): Released all slaves [ 354.287685][T13458] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2075'. [ 354.877288][T13486] netlink: 'syz.6.2087': attribute type 3 has an invalid length. [ 355.335961][T13517] syzkaller0: entered promiscuous mode [ 355.343757][T13517] syzkaller0: entered allmulticast mode [ 355.529302][T13527] Bluetooth: MGMT ver 1.23 [ 355.553165][T13527] netlink: 'syz.3.2098': attribute type 1 has an invalid length. [ 356.216868][T13570] sctp: [Deprecated]: syz.4.2113 (pid 13570) Use of int in maxseg socket option. [ 356.216868][T13570] Use struct sctp_assoc_value instead [ 356.239056][T13570] netlink: 'syz.4.2113': attribute type 3 has an invalid length. [ 356.343199][T13577] netlink: 'syz.5.2116': attribute type 1 has an invalid length. [ 356.364209][T13577] netlink: 'syz.5.2116': attribute type 1 has an invalid length. [ 356.374481][ T5893] IPVS: starting estimator thread 0... [ 356.483821][T13582] IPVS: using max 31 ests per chain, 74400 per kthread [ 356.570003][T13589] __nla_validate_parse: 6 callbacks suppressed [ 356.570023][T13589] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2120'. [ 356.911715][T13614] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2128'. [ 356.967492][T13618] xt_HMARK: spi-set and port-set can't be combined [ 357.167085][T13630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.496693][T13650] tipc: Enabling of bearer rejected, failed to enable media [ 357.515057][T13651] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2140'. [ 357.654172][T13650] syzkaller0: entered promiscuous mode [ 357.661003][T13650] syzkaller0: entered allmulticast mode [ 357.736321][T13668] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.2143'. [ 358.389359][T13680] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2146'. [ 358.574142][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2148'. [ 359.715938][T13713] netlink: 'syz.5.2153': attribute type 33 has an invalid length. [ 359.739631][T13713] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 359.751724][T13713] bond3 (unregistering): Released all slaves [ 360.557519][T13654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 360.734280][T13728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.761809][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 361.335403][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2170'. [ 361.794584][T13762] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2169'. [ 361.978764][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2181'. [ 362.072343][T13794] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.141188][T13794] bridge_slave_1 (unregistering): left allmulticast mode [ 362.174274][T13794] bridge_slave_1 (unregistering): left promiscuous mode [ 362.215709][T13794] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.288855][T13806] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2183'. [ 362.470949][T13815] netlink: 'syz.5.2188': attribute type 1 has an invalid length. [ 362.485403][T13815] netlink: 'syz.5.2188': attribute type 11 has an invalid length. [ 362.498320][T13815] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2188'. [ 362.612139][T13820] netlink: 'syz.5.2189': attribute type 1 has an invalid length. [ 362.639601][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2189'. [ 362.714004][T13826] bridge0: port 3(gretap0) entered disabled state [ 363.095342][T13846] 8021q: VLANs not supported on xfrm0 [ 363.223744][T13849] netlink: 'syz.3.2198': attribute type 64 has an invalid length. [ 363.237733][T13856] lo speed is unknown, defaulting to 1000 [ 363.341927][T13857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2197'. [ 364.118010][T13887] bond0: option ad_select: unable to set because the bond device is up [ 364.257968][T13889] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2209'. [ 364.484279][T13900] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2211'. [ 364.525020][T13877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2205'. [ 364.747876][T13903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2212'. [ 365.056184][T13913] netlink: 'syz.3.2215': attribute type 1 has an invalid length. [ 365.234349][T13921] netlink: 'syz.5.2217': attribute type 2 has an invalid length. [ 365.520258][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 366.440717][T13985] gre1: entered promiscuous mode [ 366.471362][T13985] gre1: entered allmulticast mode [ 366.513279][T13992] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 366.796597][T14002] team0: Device gtp0 is up. Set it down before adding it as a team port [ 367.007616][T14000] batman_adv: batadv0: Adding interface: dummy0 [ 367.046805][T14000] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.059283][T14005] __nla_validate_parse: 4 callbacks suppressed [ 367.059354][T14005] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2236'. [ 367.139494][T14000] batman_adv: batadv0: Interface activated: dummy0 [ 367.165007][T14005] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 367.676975][T14057] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2250'. [ 367.710654][T14055] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 367.743038][T14055] syzkaller1: Refused to change device type [ 367.817183][T14059] netlink: 'syz.5.2253': attribute type 4 has an invalid length. [ 368.022486][T14071] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2255'. [ 368.154741][T14082] netlink: 'syz.2.2260': attribute type 1 has an invalid length. [ 368.185154][T14082] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.2260'. [ 368.354065][T14097] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2264'. [ 368.564095][T14110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2268'. [ 368.801115][T14116] netlink: 'syz.4.2271': attribute type 4 has an invalid length. [ 368.980524][T14128] xt_HMARK: spi-set and port-set can't be combined [ 369.191090][T14134] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2277'. [ 369.272311][T14141] syzkaller0: entered promiscuous mode [ 369.290155][T14141] syzkaller0: entered allmulticast mode [ 369.422605][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2281'. [ 369.478654][ T5992] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.511215][ T5992] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.521369][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2281'. [ 369.539534][ T5992] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.569952][ T5992] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.660006][T14163] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.2286'. [ 369.724502][T14171] netlink: 'syz.4.2287': attribute type 9 has an invalid length. [ 369.966590][T14194] netlink: 'syz.4.2290': attribute type 11 has an invalid length. [ 370.132856][T14203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.427772][T14220] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 370.563853][T14231] netlink: 'syz.5.2299': attribute type 3 has an invalid length. [ 370.592106][T14231] netlink: 'syz.5.2299': attribute type 1 has an invalid length. [ 370.607403][T14231] NCSI netlink: No device for ifindex 813332851 [ 370.644307][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.666969][T14236] netem: change failed [ 370.909573][T14257] IPVS: Unknown mcast interface: vcan0 [ 371.170095][T14269] ip6t_srh: unknown srh invflags 4000 [ 371.292590][T14270] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 371.433849][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.545113][T14286] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 371.654985][T14291] netlink: 'syz.2.2316': attribute type 1 has an invalid length. [ 371.671359][T14286] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 371.684570][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.862887][T14302] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 371.926372][T14291] "syz.2.2316" (14291) uses obsolete ecb(arc4) skcipher [ 372.173884][T14321] __nla_validate_parse: 5 callbacks suppressed [ 372.173905][T14321] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2323'. [ 372.206567][T14313] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2323'. [ 372.239121][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2323'. [ 372.357906][T14329] netlink: 'syz.4.2326': attribute type 27 has an invalid length. [ 372.400728][T14330] bond1: Removing last ns target with arp_interval on [ 372.467068][T14335] tipc: Enabled bearer , priority 0 [ 372.586211][T14335] syzkaller0: MTU too low for tipc bearer [ 372.592013][T14335] tipc: Disabling bearer [ 372.700363][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2337'. [ 372.715322][T10866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.729610][T14358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2337'. [ 372.777341][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2337'. [ 372.810062][T14358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2337'. [ 372.975223][T14366] IPv6: Can't replace route, no match found [ 373.105836][T14374] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2345'. [ 373.118742][T14374] bond2: option mode: unable to set because the bond device has slaves [ 373.184168][T14382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2345'. [ 373.256546][T14385] netlink: 'syz.3.2349': attribute type 12 has an invalid length. [ 373.278436][T14385] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.2349'. [ 373.291484][T14385] tipc: Failed to remove unknown binding: 66,1,1/633984370:1173783906/1173783908 [ 373.301124][T14385] tipc: Failed to remove unknown binding: 66,1,1/633984370:1173783906/1173783908 [ 373.362265][T14392] netlink: 'syz.2.2350': attribute type 13 has an invalid length. [ 373.392868][T14392] syz_tun: refused to change device tx_queue_len [ 373.630784][T14412] netlink: 'syz.6.2354': attribute type 1 has an invalid length. [ 373.685263][ T7442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.695991][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.705939][T10866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.762149][T14420] bond0: Caught tx_queue_len zero misconfig [ 374.374879][T14468] netlink: 'syz.2.2371': attribute type 1 has an invalid length. [ 374.384888][T14468] NCSI netlink: No device for ifindex 0 [ 374.390735][T14468] netlink: 'syz.2.2371': attribute type 1 has an invalid length. [ 374.418035][T14468] NCSI netlink: No device for ifindex 0 [ 374.473852][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.804812][T10866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.072927][ T30] audit: type=1800 audit(1772040911.606:4): pid=14497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2377" name="memory.events" dev="tmpfs" ino=532 res=0 errno=0 [ 375.217111][T14508] netlink: 'syz.2.2381': attribute type 21 has an invalid length. [ 375.350155][T14518] openvswitch: netlink: Missing valid actions attribute. [ 375.371411][T14518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.407231][T14518] Cannot find add_set index 2 as target [ 375.444646][T14526] netlink: 'syz.6.2386': attribute type 11 has an invalid length. [ 375.588710][T14536] validate_nla: 1 callbacks suppressed [ 375.588728][T14536] netlink: 'syz.3.2390': attribute type 6 has an invalid length. [ 375.799397][T14542] netlink: 'syz.2.2394': attribute type 5 has an invalid length. [ 375.845221][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.145743][T14554] bridge6: entered promiscuous mode [ 376.158417][T14554] bridge6: entered allmulticast mode [ 376.567063][T14581] lo speed is unknown, defaulting to 1000 [ 376.884279][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.410059][ T10] IPVS: starting estimator thread 0... [ 377.419055][T14624] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 377.455339][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 377.499226][T14627] __nla_validate_parse: 18 callbacks suppressed [ 377.499248][T14627] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2422'. [ 377.515977][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.563765][T14625] IPVS: using max 27 ests per chain, 64800 per kthread [ 377.612569][T14632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2423'. [ 377.665584][T14632] netlink: 'syz.5.2423': attribute type 1 has an invalid length. [ 377.692349][T14632] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2423'. [ 377.737868][T14632] netlink: 'syz.5.2423': attribute type 2 has an invalid length. [ 377.764070][T14632] netlink: 'syz.5.2423': attribute type 8 has an invalid length. [ 377.810111][T14632] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2423'. [ 377.849023][T14636] tipc: Enabling of bearer rejected, failed to enable media [ 377.915950][T10866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.045008][T14636] syzkaller0: entered promiscuous mode [ 378.103207][T14636] syzkaller0: entered allmulticast mode [ 378.163616][T14651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.208472][T14651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.231446][T14651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.809912][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.817778][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.822505][ T1298] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 379.923981][T14667] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.2433'. [ 379.944487][T14682] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2435'. [ 380.046713][T14689] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 380.177299][T14698] netlink: 'syz.2.2439': attribute type 1 has an invalid length. [ 380.195649][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'. [ 380.275200][T14698] 8021q: adding VLAN 0 to HW filter on device bond5 [ 380.306997][T14696] gtp0: entered promiscuous mode [ 380.312129][T14696] gtp0: entered allmulticast mode [ 380.329119][T14705] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component [ 380.442945][T14712] netlink: 'syz.6.2443': attribute type 1 has an invalid length. [ 380.458083][T14698] bond5: (slave gretap2): making interface the new active one [ 380.467267][T14712] netlink: 147 bytes leftover after parsing attributes in process `syz.6.2443'. [ 380.487914][T14698] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 380.597222][T14719] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2445'. [ 380.730026][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2446'. [ 381.562028][T14788] netlink: 'syz.4.2465': attribute type 29 has an invalid length. [ 381.575335][T14788] netlink: 'syz.4.2465': attribute type 29 has an invalid length. [ 381.682905][T14793] tipc: Enabling of bearer rejected, already enabled [ 381.730870][T14794] netlink: 'syz.2.2468': attribute type 32 has an invalid length. [ 381.802282][T14794] bond6: Setting coupled_control to off (0) [ 381.970153][T14814] 0·: renamed from hsr_slave_1 (while UP) [ 381.998351][T14814] 0·: entered allmulticast mode [ 382.006040][T14814] net_ratelimit: 10 callbacks suppressed [ 382.006061][T14814] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 382.276111][T14822] IPv6: sit1: Disabled Multicast RS [ 382.553955][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.723474][T14844] __nla_validate_parse: 6 callbacks suppressed [ 382.723495][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2484'. [ 382.752872][T14844] bond2: (slave lo): Releasing backup interface [ 382.805494][T14844] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 382.845490][T14844] gretap0: left allmulticast mode [ 382.863053][T14844] gretap0: left promiscuous mode [ 382.879805][T14844] bridge0: port 3(gretap0) entered disabled state [ 382.896212][T14851] netlink: 'syz.4.2486': attribute type 1 has an invalid length. [ 382.976348][T14844] team0: Port device dummy0 removed [ 383.012726][T14844] bridge_slave_0: left allmulticast mode [ 383.028998][T14844] bridge_slave_0: left promiscuous mode [ 383.036799][T14844] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.060629][T14844] bond0: (slave bond_slave_0): Releasing backup interface [ 383.089540][T14844] bond0: (slave bond_slave_1): Releasing backup interface [ 383.130639][T14844] team0: Port device team_slave_0 removed [ 383.166636][T14844] team0: Port device team_slave_1 removed [ 383.184867][T14844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.195099][T14844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.205536][T14844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.214713][T14844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.225751][T14844] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 383.423672][T14871] netlink: 'syz.2.2490': attribute type 4 has an invalid length. [ 383.437470][T14874] Cannot find add_set index 0 as target [ 383.460594][T14878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2493'. [ 383.491897][T14874] tipc: Started in network mode [ 383.505305][T14874] tipc: Node identity 46394b016a1f, cluster identity 4711 [ 383.551169][T14874] tipc: Enabled bearer , priority 0 [ 383.594905][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.654893][T14874] xt_TCPMSS: Only works on TCP SYN packets [ 383.714906][T14888] syzkaller0: entered promiscuous mode [ 383.720857][T14888] syzkaller0: entered allmulticast mode [ 383.732349][T14888] tipc: Resetting bearer [ 383.739684][T14894] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2494'. [ 383.748909][T14894] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2494'. [ 383.760361][T14885] netlink: 'syz.6.2494': attribute type 10 has an invalid length. [ 383.772099][T14885] team0: Device vxcan1 is of different type [ 383.783999][T14893] nbd: illegal input index 2958377 [ 383.806771][T14873] tipc: Resetting bearer [ 384.332029][T14918] netlink: 'syz.3.2500': attribute type 13 has an invalid length. [ 384.644289][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.875448][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.480050][T14873] tipc: Disabling bearer [ 385.532499][ T5901] tipc: Node number set to 740707073 [ 385.672535][T14921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.682021][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.691245][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.805825][T14936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.050845][T14947] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2509'. [ 386.137004][T14949] netlink: 'syz.6.2510': attribute type 2 has an invalid length. [ 386.313675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.544916][T14961] netlink: 'syz.6.2514': attribute type 7 has an invalid length. [ 386.554353][T14961] netlink: 'syz.6.2514': attribute type 7 has an invalid length. [ 386.821392][T14979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2520'. [ 387.193352][T15001] netlink: 'syz.5.2529': attribute type 1 has an invalid length. [ 387.207169][T14999] IPVS: Unknown mcast interface: dvmrp1 [ 387.237479][ T5900] IPVS: starting estimator thread 0... [ 387.296510][T15006] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2531'. [ 387.307911][T15007] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.2530'. [ 387.318944][T15007] net_ratelimit: 1 callbacks suppressed [ 387.318963][T15007] netlink: Unknown conntrack attr (type=2304, max=9) [ 387.331653][T15003] IPVS: using max 25 ests per chain, 60000 per kthread [ 387.437277][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2531'. [ 387.674833][T15029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2537'. [ 387.741200][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2536'. [ 387.754937][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.791573][T15032] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 387.878060][T15041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2538'. [ 387.914195][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.077603][T15045] netlink: 'syz.3.2539': attribute type 4 has an invalid length. [ 388.180830][T15054] ip6t_srh: unknown srh match flags 4000 [ 388.210984][T15054] ip6t_srh: unknown srh match flags 4000 [ 388.245116][T15054] ip6t_srh: unknown srh match flags 4000 [ 388.278872][T15054] ip6t_srh: unknown srh match flags 4000 [ 388.300543][T15054] ip6t_srh: unknown srh match flags 4000 [ 388.335620][T15054] ip6t_srh: unknown srh match flags 4000 [ 388.350893][T15054] ip6t_srh: unknown srh match flags 4000 [ 388.368361][T15054] ip6t_srh: unknown srh match flags 4000 [ 388.398578][T15054] ip6t_srh: unknown srh match flags 4000 [ 388.405407][T15054] ip6t_srh: unknown srh match flags 4000 [ 388.472497][T15074] syzkaller1: entered promiscuous mode [ 388.497037][T15074] syzkaller1: entered allmulticast mode [ 388.574656][T15076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.583196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.674164][T15083] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2551'. [ 388.684093][T15084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2551'. [ 388.693084][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2551'. [ 388.708543][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2551'. [ 388.721771][T15081] syzkaller0: entered promiscuous mode [ 388.740375][T15081] syzkaller0: entered allmulticast mode [ 388.799708][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.975107][T15098] syzkaller1: entered promiscuous mode [ 388.981239][T15098] syzkaller1: entered allmulticast mode [ 389.011839][T15099] dvmrp8: entered allmulticast mode [ 389.066071][T10866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.234788][T15113] netlink: 'syz.2.2559': attribute type 1 has an invalid length. [ 389.276017][T15113] bond7: entered promiscuous mode [ 389.281752][T15113] 8021q: adding VLAN 0 to HW filter on device bond7 [ 389.314714][T15113] bond7: (slave bridge8): making interface the new active one [ 389.322374][T15113] bridge8: entered promiscuous mode [ 389.330174][T15113] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 389.477688][T15126] Unsupported ieee802154 address type: 0 [ 389.490329][T15126] Unsupported ieee802154 address type: 0 [ 389.521177][T15126] Unsupported ieee802154 address type: 0 [ 389.539073][T15128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2563'. [ 389.574637][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2562'. [ 389.733520][T15137] veth0: entered promiscuous mode [ 389.789196][T15137] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2567'. [ 389.803884][T15138] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2567'. [ 389.835859][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.037470][T15136] veth0: left promiscuous mode [ 390.877815][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.094168][T15178] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 391.338144][T15188] lo speed is unknown, defaulting to 1000 [ 391.387514][T15191] 8021q: VLANs not supported on sit0 [ 391.597940][T15207] netlink: 'syz.3.2588': attribute type 1 has an invalid length. [ 391.709712][T15207] 8021q: adding VLAN 0 to HW filter on device bond10 [ 391.761174][T15211] bond10: (slave gretap2): making interface the new active one [ 391.804952][T15211] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 391.915294][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.891865][T15260] __nla_validate_parse: 7 callbacks suppressed [ 392.891888][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2601'. [ 392.953897][T10866] net_ratelimit: 4 callbacks suppressed [ 392.953916][T10866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.272594][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2607'. [ 393.541557][T15279] hsr_slave_0 (unregistering): left promiscuous mode [ 393.560657][T15282] netlink: 'syz.2.2608': attribute type 12 has an invalid length. [ 393.878447][T15307] tipc: Enabling of bearer rejected, failed to enable media [ 393.999735][T15304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2614'. [ 394.013351][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.031509][T15312] lo speed is unknown, defaulting to 1000 [ 394.105068][T15304] veth0_to_team: entered promiscuous mode [ 394.155377][T15304] veth0_to_team: left promiscuous mode [ 394.696361][T15333] netlink: 'syz.3.2623': attribute type 33 has an invalid length. [ 394.886966][T15339] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 395.081825][T10866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.103027][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2628'. [ 395.117075][T15348] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2627'. [ 395.197282][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.325716][T15355] netlink: 'syz.3.2631': attribute type 13 has an invalid length. [ 395.336710][T15354] netlink: 'syz.3.2631': attribute type 13 has an invalid length. [ 395.437295][T15361] openvswitch: netlink: IP tunnel dst address not specified [ 395.682698][T15372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.937634][T15385] netlink: 'syz.2.2640': attribute type 61 has an invalid length. [ 396.116340][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2643'. [ 396.154538][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.197403][T15398] netlink: 'syz.4.2644': attribute type 11 has an invalid length. [ 396.217505][T15398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2644'. [ 396.676595][T15423] tipc: Enabled bearer , priority 0 [ 396.696631][T15423] syzkaller0: entered promiscuous mode [ 396.702165][T15423] syzkaller0: entered allmulticast mode [ 396.748396][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2651'. [ 396.760545][T15430] xt_SECMARK: invalid mode: 9 [ 396.798119][T15423] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 396.870140][T15423] tipc: Resetting bearer [ 396.889002][T15440] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2655'. [ 396.912461][T15422] tipc: Resetting bearer [ 396.939380][T15422] tipc: Disabling bearer [ 396.966281][T15442] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 396.975094][T15442] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 397.149363][T15448] netlink: 'syz.6.2657': attribute type 1 has an invalid length. [ 397.195790][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.218392][T15448] bond2: entered promiscuous mode [ 397.226336][T15448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 397.234265][T15452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2659'. [ 397.263582][T15454] sctp: [Deprecated]: syz.3.2658 (pid 15454) Use of int in max_burst socket option deprecated. [ 397.263582][T15454] Use struct sctp_assoc_value instead [ 397.285449][T15448] bond2: (slave bridge1): making interface the new active one [ 397.293113][T15448] bridge1: entered promiscuous mode [ 397.306463][T15448] bridge1: left promiscuous mode [ 397.400540][T15452] syzkaller0: entered promiscuous mode [ 397.406705][T15452] syzkaller0: entered allmulticast mode [ 397.422538][ T7442] syzkaller0: tun_net_xmit 48 [ 397.452330][T15452] vlan1: entered allmulticast mode [ 397.458031][T15452] bridge_slave_0: entered allmulticast mode [ 398.236299][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.245317][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.290750][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.615856][T15516] netlink: 'syz.5.2674': attribute type 3 has an invalid length. [ 399.724241][T15522] netlink: 'syz.2.2675': attribute type 29 has an invalid length. [ 399.751745][T15524] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 399.764510][T15528] __nla_validate_parse: 2 callbacks suppressed [ 399.764529][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2678'. [ 399.805872][T15522] netlink: 'syz.2.2675': attribute type 29 has an invalid length. [ 399.830428][T15529] tunl0: Caught tx_queue_len zero misconfig [ 400.046827][T15541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2682'. [ 400.198836][T15558] sctp: [Deprecated]: syz.5.2689 (pid 15558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.198836][T15558] Use struct sctp_sack_info instead [ 400.273249][T15561] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2689'. [ 400.315120][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.571049][T15573] ip6tnl0: Caught tx_queue_len zero misconfig [ 400.585430][T15579] nbd: must specify a size in bytes for the device [ 400.588649][T15573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2694'. [ 400.657751][T15584] netlink: 'syz.2.2699': attribute type 10 has an invalid length. [ 400.674832][T15584] team0: Device dummy0 is of different type [ 400.818013][T15592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2700'. [ 400.953882][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2705'. [ 400.977852][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2705'. [ 401.116963][T15608] syzkaller1: entered promiscuous mode [ 401.133335][T15608] syzkaller1: entered allmulticast mode [ 401.241352][T15618] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2710'. [ 401.307577][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.353899][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.472797][T15625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2713'. [ 401.482582][T15630] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2714'. [ 401.545864][T15633] "syz.2.2717" (15633) uses obsolete ecb(arc4) skcipher [ 401.645150][T15634] netlink: 'syz.2.2717': attribute type 39 has an invalid length. [ 402.395905][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.017877][T15717] tipc: Enabling of bearer rejected, media not registered [ 403.391342][T15729] syzkaller0: entered promiscuous mode [ 403.409142][T15729] syzkaller0: entered allmulticast mode [ 403.434966][T10866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.517899][T15736] netlink: 'syz.2.2746': attribute type 1 has an invalid length. [ 403.658900][T15736] 8021q: adding VLAN 0 to HW filter on device bond8 [ 403.723323][T15741] 8021q: adding VLAN 0 to HW filter on device bond8 [ 403.734758][T15741] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 403.747961][T15741] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 403.758794][T15754] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 403.840797][T15747] veth3: entered promiscuous mode [ 403.845793][T15759] ip6t_REJECT: ECHOREPLY is not supported [ 403.861842][T15747] bond8: (slave veth3): Enslaving as an active interface with a down link [ 404.152243][T15766] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 404.194623][T15768] vlan3: entered allmulticast mode [ 404.314761][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.475094][ T6076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.654112][T15793] smc: net device wlan0 applied user defined pnetid SYZ0 [ 404.773922][T15806] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 404.865853][T15813] veth0: entered promiscuous mode [ 404.872164][T15813] __nla_validate_parse: 6 callbacks suppressed [ 404.872185][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2770'. [ 404.891461][T15813] veth0 (unregistering): left promiscuous mode [ 405.107805][T15821] netlink: 'syz.2.2774': attribute type 1 has an invalid length. [ 405.125212][T15827] netlink: 'syz.5.2776': attribute type 11 has an invalid length. [ 405.133318][T15827] netlink: 'syz.5.2776': attribute type 11 has an invalid length. [ 405.143717][T15827] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2776'. [ 405.154467][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2774'. [ 405.172510][T15827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2776'. [ 405.212316][T15826] macvtap1: entered promiscuous mode [ 405.227611][T15826] macvtap1: entered allmulticast mode [ 405.237302][T15826] veth1_vlan: entered allmulticast mode [ 405.307043][T15833] vxcan1: entered allmulticast mode [ 405.479901][T15843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2777'. [ 405.524295][ T6076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.574857][T15848] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2781'. [ 405.684545][T15856] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 405.700786][T15855] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 405.914252][T15869] ipt_REJECT: TCP_RESET invalid for non-tcp [ 405.955379][T15869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2788'. [ 406.134871][T15882] netlink: 'syz.4.2793': attribute type 10 has an invalid length. [ 406.151632][T15882] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 406.502018][T15907] openvswitch: netlink: Message has 8 unknown bytes. [ 406.524524][T15908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2799'. [ 406.855324][T15927] xt_connbytes: Forcing CT accounting to be enabled [ 406.920489][T15932] macvlan1: entered promiscuous mode [ 406.927324][T15932] macvlan1: entered allmulticast mode [ 406.932757][T15932] º: entered allmulticast mode [ 407.158141][T15938] batadv1: entered allmulticast mode [ 407.305685][T15952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2815'. [ 407.314619][T15953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2815'. [ 407.480667][T15958] syzkaller0: entered promiscuous mode [ 407.486999][T15958] syzkaller0: entered allmulticast mode [ 407.752493][T15977] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 408.297225][T16015] netlink: 'syz.4.2832': attribute type 8 has an invalid length. [ 409.882440][T16001] syzkaller1: entered promiscuous mode [ 409.888983][T16001] syzkaller1: entered allmulticast mode [ 410.521794][T16064] netlink: 'syz.4.2847': attribute type 2 has an invalid length. [ 410.544097][T16064] __nla_validate_parse: 36 callbacks suppressed [ 410.544208][T16064] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2847'. [ 410.572208][T16059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2846'. [ 410.622803][T16059] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2846'. [ 410.796157][ T31] INFO: task syz.0.1560:11597 blocked for more than 143 seconds. [ 410.804286][T16057] caif:caif_disconnect_client(): nothing to disconnect [ 410.821813][ T31] Not tainted syzkaller #0 [ 410.832209][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.841652][ T31] task:syz.0.1560 state:D stack:26728 pid:11597 tgid:11593 ppid:5825 task_flags:0x400140 flags:0x00080002 [ 410.857179][ T31] Call Trace: [ 410.860597][ T31] [ 410.867425][ T31] __schedule+0x1585/0x5340 [ 410.872101][ T31] ? __pfx___schedule+0x10/0x10 [ 410.882187][ T31] ? schedule+0x90/0x360 [ 410.890549][ T31] schedule+0x164/0x360 [ 410.895396][ T31] schedule_preempt_disabled+0x13/0x30 [ 410.901065][ T31] __mutex_lock+0x7fe/0x1300 [ 410.913646][T16077] net_ratelimit: 1 callbacks suppressed [ 410.913666][T16077] openvswitch: netlink: Flow key attr not present in new flow. [ 410.931666][ T31] ? __mutex_lock+0x5ac/0x1300 [ 410.954354][ T31] ? nfsd_nl_threads_set_doit+0x2c4/0xa30 [ 410.978050][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 410.999772][ T31] ? net_generic+0x1e/0x240 [ 411.011010][ T31] ? net_generic+0x1e/0x240 [ 411.025748][ T31] nfsd_nl_threads_set_doit+0x2c4/0xa30 [ 411.050722][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 411.068017][ T31] ? __asan_memcpy+0x40/0x70 [ 411.080412][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 411.094532][T16083] openvswitch: netlink: Flow key attr not present in new flow. [ 411.104012][T16085] caif:caif_disconnect_client(): nothing to disconnect [ 411.123161][ T31] ? bpf_lsm_capable+0x9/0x20 [ 411.143702][ T31] ? security_capable+0x7e/0x2c0 [ 411.148736][ T31] genl_rcv_msg+0x61c/0x7a0 [ 411.165736][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.181384][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 411.189377][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 411.208731][ T31] netlink_rcv_skb+0x232/0x4b0 [ 411.223514][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.238916][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.249212][ T31] ? down_read+0x272/0x2e0 [ 411.259308][ T31] ? genl_rcv+0xd/0x40 [ 411.269434][ T31] genl_rcv+0x28/0x40 [ 411.283598][ T31] netlink_unicast+0x80f/0x9b0 [ 411.293611][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 411.304399][ T31] ? netlink_sendmsg+0x650/0xb40 [ 411.313659][ T31] ? skb_put+0x11b/0x210 [ 411.317990][ T31] netlink_sendmsg+0x813/0xb40 [ 411.333153][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.343255][ T31] ? trace_sched_set_need_resched_tp+0x3e/0x160 [ 411.353493][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 411.358508][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.383445][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.388960][ T31] ____sys_sendmsg+0xa68/0xad0 [ 411.399204][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.409369][ T31] ? import_iovec+0x73/0xa0 [ 411.414898][ T31] ___sys_sendmsg+0x2a5/0x360 [ 411.430101][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.440295][ T31] ? futex_wake+0x4ac/0x580 [ 411.450540][ T31] ? __fget_files+0x2a/0x420 [ 411.455895][ T31] ? __fget_files+0x3a0/0x420 [ 411.471068][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 411.479416][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.485750][ T31] ? rcu_is_watching+0x15/0xb0 [ 411.490597][ T31] do_syscall_64+0x14d/0xf80 [ 411.495452][ T31] ? trace_irq_disable+0x3b/0x150 [ 411.500804][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.507065][ T31] ? clear_bhb_loop+0x40/0x90 [ 411.511917][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.524353][ T31] RIP: 0033:0x7f1eb119c629 [ 411.528842][ T31] RSP: 002b:00007f1eb20ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.543103][ T31] RAX: ffffffffffffffda RBX: 00007f1eb1415fa0 RCX: 00007f1eb119c629 [ 411.551796][ T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000009 [ 411.560649][ T31] RBP: 00007f1eb1232b39 R08: 0000000000000000 R09: 0000000000000000 [ 411.569601][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.578634][ T31] R13: 00007f1eb1416038 R14: 00007f1eb1415fa0 R15: 00007fff194cd2c8 [ 411.586878][ T31] [ 411.590301][ T31] [ 411.590301][ T31] Showing all locks held in the system: [ 411.591142][T16057] caif:caif_disconnect_client(): nothing to disconnect [ 411.600830][ T31] 1 lock held by khungtaskd/31: [ 411.606271][T16085] caif:caif_disconnect_client(): nothing to disconnect [ 411.611079][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 411.633465][ T31] 4 locks held by klogd/5182: [ 411.638278][ T31] 2 locks held by getty/5582: [ 411.643059][ T31] #0: ffff8880371520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 411.654286][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 411.664913][ T31] 2 locks held by syz.1.1316/10664: [ 411.670227][ T31] #0: ffffffff8fc394f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.679387][ T31] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2c4/0xa30 [ 411.690773][ T31] 2 locks held by syz.0.1560/11597: [ 411.696206][ T31] #0: ffffffff8fc394f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.705129][ T31] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2c4/0xa30 [ 411.716492][ T31] 3 locks held by syz.5.2843/16057: [ 411.721867][ T31] #0: ffff888077dcef48 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 411.734339][ T31] #1: ffff888028379260 (sk_lock-AF_CAIF){+.+.}-{0:0}, at: caif_release+0xf9/0x380 [ 411.745302][ T31] #2: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 411.756735][ T31] 1 lock held by syz.4.2849/16080: [ 411.761960][ T31] #0: ffffffff8fbcf028 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc6/0xd70 [ 411.774172][ T31] 2 locks held by syz.2.2852/16085: [ 411.779408][ T31] #0: ffff88804c382260 (sk_lock-AF_CAIF){+.+.}-{0:0}, at: caif_release+0xf9/0x380 [ 411.789917][ T31] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 411.801404][ T31] [ 411.804991][ T31] ============================================= [ 411.804991][ T31] [ 411.815621][ T31] NMI backtrace for cpu 0 [ 411.815651][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 411.815673][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 411.815686][ T31] Call Trace: [ 411.815693][ T31] [ 411.815701][ T31] dump_stack_lvl+0xe8/0x150 [ 411.815736][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 411.815762][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 411.815790][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 411.815819][ T31] sys_info+0x135/0x170 [ 411.815840][ T31] watchdog+0xfd9/0x1030 [ 411.815876][ T31] ? watchdog+0x21a/0x1030 [ 411.815914][ T31] kthread+0x388/0x470 [ 411.815934][ T31] ? __pfx_watchdog+0x10/0x10 [ 411.815963][ T31] ? __pfx_kthread+0x10/0x10 [ 411.815983][ T31] ret_from_fork+0x51e/0xb90 [ 411.816014][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 411.816039][ T31] ? __switch_to+0xc7d/0x1450 [ 411.816066][ T31] ? __pfx_kthread+0x10/0x10 [ 411.816087][ T31] ret_from_fork_asm+0x1a/0x30 [ 411.816133][ T31] [ 411.816141][ T31] Sending NMI from CPU 0 to CPUs 1: [ 411.836328][T16057] caif:caif_disconnect_client(): nothing to disconnect [ 411.841349][ C1] NMI backtrace for cpu 1 [ 411.841364][ C1] CPU: 1 UID: 0 PID: 16057 Comm: syz.5.2843 Not tainted syzkaller #0 PREEMPT(full) [ 411.841384][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 411.841395][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 411.841425][ C1] Code: e8 ee bf 85 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bf e8 ef fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 4a 3c 70 06 cc 44 89 f9 80 e1 07 [ 411.841440][ C1] RSP: 0018:ffffc9000553f170 EFLAGS: 00000002 [ 411.841456][ C1] RAX: 1ffffffff34b9100 RBX: 00000000000003fd RCX: 0000000000000000 [ 411.841467][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 411.841477][ C1] RBP: ffffffff9a5c8af0 R08: ffff888142298237 R09: 1ffff11028453046 [ 411.841491][ C1] R10: dffffc0000000000 R11: ffffffff853fcc50 R12: dffffc0000000000 [ 411.841503][ C1] R13: 0000000000000000 R14: ffffffff9a5c8860 R15: 0000000000000000 [ 411.841514][ C1] FS: 0000000000000000(0000) GS:ffff888125566000(0000) knlGS:0000000000000000 [ 411.841538][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.841550][ C1] CR2: 000000110c34084e CR3: 0000000080e94000 CR4: 00000000003526f0 [ 411.841565][ C1] Call Trace: [ 411.841572][ C1] [ 411.841580][ C1] wait_for_lsr+0x1a1/0x2f0 [ 411.841612][ C1] serial8250_console_write+0x1348/0x1ba0 [ 411.841646][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 411.841670][ C1] ? lock_acquire+0xf0/0x2e0 [ 411.841695][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 411.841714][ C1] ? console_flush_all+0x123/0xb20 [ 411.841731][ C1] console_flush_all+0x718/0xb20 [ 411.841757][ C1] ? console_flush_all+0x123/0xb20 [ 411.841776][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 411.841796][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 411.841818][ C1] console_unlock+0xd1/0x1c0 [ 411.841845][ C1] ? __pfx_console_unlock+0x10/0x10 [ 411.841872][ C1] ? vprintk_emit+0x2cf/0x560 [ 411.841896][ C1] ? vprintk_emit+0x2cf/0x560 [ 411.841921][ C1] vprintk_emit+0x485/0x560 [ 411.841947][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 411.841972][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 411.841996][ C1] _printk+0xdd/0x130 [ 411.842015][ C1] ? __pfx__printk+0x10/0x10 [ 411.842032][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 411.842057][ C1] __dynamic_pr_debug+0x1a2/0x260 [ 411.842083][ C1] ? __pfx___dynamic_pr_debug+0x10/0x10 [ 411.842106][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 411.842131][ C1] ? cfctrl_cancel_req+0x239/0x250 [ 411.842151][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 411.842173][ C1] ? cfctrl_cancel_req+0x239/0x250 [ 411.842207][ C1] ? net_generic+0x1f4/0x240 [ 411.842224][ C1] caif_disconnect_client+0x139/0x220 [ 411.842245][ C1] caif_release+0x166/0x380 [ 411.842263][ C1] sock_close+0xc3/0x240 [ 411.842292][ C1] ? __pfx_sock_close+0x10/0x10 [ 411.842308][ C1] __fput+0x44f/0xa70 [ 411.842338][ C1] task_work_run+0x1d9/0x270 [ 411.842358][ C1] ? __pfx_task_work_run+0x10/0x10 [ 411.842375][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 411.842397][ C1] do_exit+0x69b/0x2320 [ 411.842419][ C1] ? __pfx_do_exit+0x10/0x10 [ 411.842437][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 411.842459][ C1] do_group_exit+0x21b/0x2d0 [ 411.842476][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.842503][ C1] get_signal+0x1284/0x1330 [ 411.842536][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 411.842557][ C1] ? __x64_sys_sendmsg+0x26f/0x2a0 [ 411.842582][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 411.842614][ C1] exit_to_user_mode_loop+0x86/0x480 [ 411.842634][ C1] ? rcu_is_watching+0x15/0xb0 [ 411.842661][ C1] do_syscall_64+0x32d/0xf80 [ 411.842686][ C1] ? trace_irq_disable+0x3b/0x150 [ 411.842710][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.842728][ C1] ? clear_bhb_loop+0x40/0x90 [ 411.842754][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.842770][ C1] RIP: 0033:0x7f5f7319c629 [ 411.842786][ C1] Code: Unable to access opcode bytes at 0x7f5f7319c5ff. [ 411.842795][ C1] RSP: 002b:00007f5f73faf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.842812][ C1] RAX: 000000000000010c RBX: 00007f5f73416090 RCX: 00007f5f7319c629 [ 411.842824][ C1] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000055 [ 411.842835][ C1] RBP: 00007f5f73232b39 R08: 0000000000000000 R09: 0000000000000000 [ 411.842845][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.842855][ C1] R13: 00007f5f73416128 R14: 00007f5f73416090 R15: 00007ffdcaf59ae8 [ 411.842878][ C1] [ 411.862944][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 411.863007][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 411.863071][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 411.863112][ T31] Call Trace: [ 411.863135][ T31] [ 411.863157][ T31] vpanic+0x56c/0xa60 [ 411.863252][ T31] ? __pfx___schedule+0x10/0x10 [ 411.863331][ T31] ? __pfx_vpanic+0x10/0x10 [ 411.863411][ T31] ? __down_trylock_console_sem+0xad/0x110 [ 411.863497][ T31] panic+0xc5/0xd0 [ 411.863572][ T31] ? __pfx_panic+0x10/0x10 [ 411.863654][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 411.863729][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 411.863801][ T31] watchdog+0x1023/0x1030 [ 411.863896][ T31] ? watchdog+0x21a/0x1030 [ 411.864007][ T31] kthread+0x388/0x470 [ 411.864062][ T31] ? __pfx_watchdog+0x10/0x10 [ 411.864142][ T31] ? __pfx_kthread+0x10/0x10 [ 411.864195][ T31] ret_from_fork+0x51e/0xb90 [ 411.864277][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 411.864333][ T31] ? __switch_to+0xc7d/0x1450 [ 411.864359][ T31] ? __pfx_kthread+0x10/0x10 [ 412.491336][ T31] ret_from_fork_asm+0x1a/0x30 [ 412.496155][ T31] [ 412.499791][ T31] Kernel Offset: disabled [ 412.504148][ T31] Rebooting in 86400 seconds..