last executing test programs: 14.517748879s ago: executing program 3 (id=3154): r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xe, 0x0, 0x0, r0}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) (async) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x80}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r4}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r10) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x2, 0x6, 0x798, 0x3a8, 0x0, 0x498, 0x1b0, 0x1b0, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x21, 0x0, 0xc, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff000000], 0x3, 0xb10}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [], 0xfd}}]}, @HL={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x73, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private0, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) (async) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x2, 0x6, 0x798, 0x3a8, 0x0, 0x498, 0x1b0, 0x1b0, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x21, 0x0, 0xc, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff000000], 0x3, 0xb10}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [], 0xfd}}]}, @HL={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x73, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private0, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) 14.136527498s ago: executing program 3 (id=3158): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000043c0)=@ethtool_sfeatures={0x51}}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c010000100013040000000000000000fe88000000000000000000000000000120010000000000000000000000000000fffd00004e2400000a00002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="640101000000000000000000000000000000002032000000fc0000000000000000000000000000010000000000000000070000000000000000000000000000000400000000000000000000000000002004000000000000000800000000020000070000000000000001000000010000000800000000000000cc000000000000000000000000000000f6000000000000000000000000000000040000000200000100000000000000004c001200726663343330392863636d28610373292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}}, 0x804) 13.847019273s ago: executing program 3 (id=3161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r2, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000100)="ad", 0x1, 0x4040000, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 12.906898177s ago: executing program 3 (id=3169): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x21}, {r1, 0x7205}], 0x2, &(0x7f0000000840)={0x0, 0x989680}, &(0x7f0000000880)={[0x22f2097a]}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000040000000029000000180001801400020076657468315f746f5f687372"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r7, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f00000002c0)=@delchain={0x4c4, 0x65, 0x800, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff1, 0xc}, {0xb, 0x9}, {0xe, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x76}}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x6003}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}, @filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'ip6tnl0\x00'}]}}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e20}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x3}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x10}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_bpf={{0x8}, {0x48, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0xd, 0x9, 0x82, 0x26}, {0x8000, 0x6, 0x5, 0x81e}, {0x2, 0x6, 0x88, 0x3}, {0x7, 0x3, 0x3, 0x7}, {0x9, 0x1a, 0x9, 0x7fffffff}, {0x1, 0x2, 0x1, 0x7fffffff}, {0x29, 0x9, 0x2b, 0x81}]}}]}}, @filter_kind_options=@f_route={{0xa}, {0x3b0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x69}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x5}}, @TCA_ROUTE4_TO={0x8, 0x2, 0xf8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x56}, @TCA_ROUTE4_ACT={0x38c, 0x6, [@m_ctinfo={0x3c, 0x3, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5d5}]}, {0x8, 0x6, "d30ec8d5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0xac, 0x1b, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfffb, 0xd}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1fffe, 0x9, 0x8, 0x3, 0x10001}}]}, {0x60, 0x6, "1581c74604d17c4cfbd992d7e250d08067e8b2d6ef620b01a6b2acec6ccc5280d8d2355eb344de085a60b909f3836f5c8de0f2e879856480a9e7e0360bf5b73fd0df5f12986702380eec3aaf58be07bd3b987afa57d454d3c1bfbcf8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x12c, 0x0, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4000, 0xcf2, 0x6, 0x3, 0x3}}]}, {0xe9, 0x6, "cfe79dd64a203e17653637ee342a21fd86b57223bdae64193fb5f5cbe432c471f274b3520cd3dff0051c0ffa48eb2b034f8b84d528f16873b74ba732acd8cfdd7cfbc1400b827e9282e517d5fa94a17fb4e0aa6c9b712cfcb6e6b627f9d1e1aefe641b98ba725a918a52ace0b670ae4726795659f4e786f822f688ce6cdded3e6969d1bb0099b6061a0a64ba1664e1488156b3b8e2a5386daa5b7e7456cec2d5ba1b413a73d7d0f399afd149cf6ab419065774d2268a2aaa49c929ec85e8644a8b0f582a5d3461defa54520534fd6f36cf06b7b5b8296e0975237c5c5b53968090bfd8088e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x174, 0x1a, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x6, 0x5, 0x3, 0xc}, @remote, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x2, 0x7, 0x4}, @broadcast, @multicast1, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd70a, 0x0, 0x2, 0x0, 0x800}, @loopback, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x0, 0x5, 0x5, 0x5}, @loopback, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x5, 0x7, 0x80000000, 0xef}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7c28, 0x2, 0x0, 0x2, 0xffffaba7}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x59, 0x6, "4ff86e66e9efb730e82b879c0342a9376b53bcd380ef322dba7ebd230775f1d3312279701071a32bbdb43a4828e1641ee6bca5fd7c3804f9ef43b2a747e6bbd2a3a5b75437c305019ddc9f86f47bda3fc2bfede692"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x3}}}}]}]}}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x4000}, 0x24004044) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015000500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a769b4d4ccd40dd6e4ed01ddceb5a2b5ac3290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab628", 0xd8}], 0x1}, 0x0) 10.007799833s ago: executing program 3 (id=3175): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x4000000) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000000000", 0x57}], 0x1) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000", @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x38, 0x1, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1ff}]}, 0x38}}, 0x80) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x28, 0x7}, 0x9, 0x9, 0x1, 0x7f, 0xd, 'syz1\x00', "6ecf9c9aaddd506228feca205ecc962aa12474f0f7b3253fdca1badf82c403c0", "045b8488ce9dca338fe33ae3c4aacdc6472390cd0ef665613adbd250dfbdc17e", [{0x187, 0xffff, {0x3, 0xfffffffe}}, {0x2, 0x3000, {0x2, 0x5}}, {0x81, 0x6, {0x2, 0x10001}}, {0x81, 0x2, {0x3, 0x3}}, {0xb, 0x9, {0x1, 0xcab}}, {0x9, 0x0, {0x2, 0x2}}, {0x5, 0x8, {0x3, 0x9}}, {0xfffe, 0xdff, {0x2, 0x7}}, {0x8, 0x3, {0x3, 0x4a5f76b2}}, {0x5, 0x7, {0x0, 0xfffff001}}, {0x5, 0x1, {0x1, 0x9}}, {0x2, 0xc, {0x2, 0x1}}, {0x8, 0x5, {0x0, 0xffffff0f}}, {0x1, 0x9, {0x1, 0x9}}, {0x401, 0x7, {0x0, 0x2}}, {0x8, 0x7fff, {0x1, 0x7ff}}, {0x0, 0x6, {0x1, 0x20000}}, {0x5c5d, 0x10, {0x0, 0x5}}, {0x6, 0x8, {0x0, 0x80000001}}, {0x5bcf, 0x9, {0x0, 0x1}}, {0x2, 0x101, {0x3, 0x6}}, {0x7, 0x2, {0x1, 0x7}}, {0x2, 0x58ad, {0x2, 0x4}}, {0x3ba, 0x4, {0x2, 0x4000000}}, {0x800, 0x5, {0x0, 0x6}}, {0x5, 0x1, {0x0, 0x6}}, {0x8, 0xb, {0x3, 0x3}}, {0x211, 0x2, {0x3, 0x73b0000}}, {0x4, 0x0, {0x2, 0x1}}, {0xb, 0x5, {0x3, 0x7}}, {0x8, 0x4, {0x3, 0x4}}, {0x400, 0x80, {0x1, 0x8}}, {0x6, 0xb, {0x2, 0x40}}, {0x66, 0x0, {0x2}}, {0x5, 0x5, {0x1, 0xffffffff}}, {0x8, 0x3, {0x2, 0x2}}, {0xfc0b, 0xe, {0x1, 0x1f}}, {0x79eb, 0x671b, {0x1, 0x100}}, {0x7f42, 0x2, {0x0, 0x3}}, {0x0, 0x17, {0x2, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) socket$nl_route(0x10, 0x3, 0x0) 9.817514747s ago: executing program 3 (id=3177): r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x9, 0x2, 0x0, 0x0, @local, @rand_addr=0xe0000000, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @timestamp_addr={0x44, 0x0, 0x6b, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x1d}}, {@local, 0x4}, {@rand_addr=0x64010102, 0x3}, {@multicast2, 0x81}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x8000}, {@loopback, 0x22e}, {@loopback, 0x10001}, {@multicast2, 0xa}]}]}}}}}}}, 0x0) 2.950912423s ago: executing program 2 (id=3251): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="1389f0792b5691a1df6f2d9c0b93bf316b97facb0779bc53dddb786bba87d60d501b3c3609e8a168745a4d3cde6a2330e8fdcf852a947ca4f4acc732fe23880796f33252ebebe3a7289a5510fc96bae8944f20dfddf517eb978459a45b604110eb69113d43d6de165de42367d41c4f120d52a27f9bfb08a6690a5141b2d882191c30ace4b31596f977d252c15261d24bf1a69a27c69e01c0b18f53307b3c11", 0x9f}, {&(0x7f00000000c0)="65e8a4060822743bc6a77ce0d74b9e561ba2973649958c02c4c308d754a89d027aa29b4f2805075f6110e6a8d4aa4dadd403af42c0560247f6d64997b889faf80667b78bf2d6197ca7f20bbbe2da1ff5081b8de11ec6f3f5a00acb4a74196f34256d832ec29c8b3e5ebf8e54af414e3931133dd1aca2c7bc13590f89fb109e6d1f000a04770f5783b1791ff5fa5deca1533680c365149226a452e8a998d4c424ec97840d99465e1d4350a1e8f1dfc72432b9631ea33d5367d562f07398ac504250e27da5", 0xc4}], 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 2.68290046s ago: executing program 2 (id=3254): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x198, 0xfeffffff, 0x268, 0x268, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x1}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2b, @rand_addr=0x64010100, @loopback, @port=0x4e21, @gre_key=0x1}}}}, {{@ip={@remote, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3a, @private, @rand_addr, @gre_key, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x80fe, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.535488017s ago: executing program 4 (id=3256): socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r0 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100003052dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000800000190024002b8c1f0d9e03254b3ad27b5a7cc054b64dd8148afb000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000314010025bd7000ffd9df250900020073797a31000000000800410072786500140033017866726d3000"/56], 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x4000) 2.519393236s ago: executing program 2 (id=3257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a737941320000000089519475edf99878726fafee974ef03cfbb2b7f3de624176e5e07143848619"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) 2.24522871s ago: executing program 4 (id=3261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000200)=0xffffff02, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000001840)=0x6, 0x4) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.109035408s ago: executing program 0 (id=3262): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b000000411b2bda8d6ed6b861e1329f35b04714c1625ea81edfde9047a2bf0ee853ec7977b3689ccbcffc50da8b67eeb34f36181523e4f98935e80abfca18b698a1eb1eed6679540bf7762b34bd0dea1a320595b9d2248081dee067786bb0f933ea619b4717758134d897f916a93e80be8ab6bcc398e3f80b3a62d1f2f34d03cd14adf40aaa42e22e83669e43f295519ae1fb02dea911373edb8d5ef9a8e11c808ee964ad06440883422877c35fc1ff64f8d9271de0c67680e6b71087f0681ba6b65018c53c7b57a91dfdff5bdba2ea1e23b9c52838d9d1bc736e918096a283cc4e8e691d676ca1e29714bf0851539006b03a37c33e42bee58386e2c336d3b816ede773cf566dcf937aa0a8b73cb41f43ed6691413a963e06ca8920c59ae9bd4bff02a09a1a40f1885d00edac0edc2ed7b4ea2070eb7c67de75204e502475043c0ded7e43e4642e5559e79396cabbe993cdc0619a992be0244b72cf26d27529f739f0a544930ad1078f917d6afcb0f815fce1395efaafb123e0205cf57e57f27a0daa3bcac783ceb242fc50096f16cd2d90ab5696ee67939f60ff74ad497abe0b06735dbd997457c98223c27526de75c987f156e04e3a613479f8417bc922ab2a9b73956681697112f7da714042677a506c560b8b1cbba0030f00c2c3a5c1e025cafc402d91", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) 1.965541984s ago: executing program 2 (id=3263): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000007c40)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, r2, 0xc003}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x40040f4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={0x0, r7, 0x4000, r5}, 0xffffffffffffff4b) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={0x0, r7, 0x4000, r5}, 0xffffffffffffff4b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x3, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0xc, 0xb3, &(0x7f0000000100)=""/179, 0x40f00, 0x10, '\x00', r2, @sk_skb=0x4, r4, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x9, 0x6, 0x8000}, 0x10, 0x0, r7, 0x0, &(0x7f00000003c0)=[r8, r9], 0x0, 0x10, 0x5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0xc, 0xb3, &(0x7f0000000100)=""/179, 0x40f00, 0x10, '\x00', r2, @sk_skb=0x4, r4, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x9, 0x6, 0x8000}, 0x10, 0x0, r7, 0x0, &(0x7f00000003c0)=[r8, r9], 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}}, 0x0) 1.965033978s ago: executing program 4 (id=3264): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x4000000) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000000000", 0x57}], 0x1) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000", @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x38, 0x1, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1ff}]}, 0x38}}, 0x80) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x28, 0x7}, 0x9, 0x9, 0x1, 0x7f, 0xd, 'syz1\x00', "6ecf9c9aaddd506228feca205ecc962aa12474f0f7b3253fdca1badf82c403c0", "045b8488ce9dca338fe33ae3c4aacdc6472390cd0ef665613adbd250dfbdc17e", [{0x187, 0xffff, {0x3, 0xfffffffe}}, {0x2, 0x3000, {0x2, 0x5}}, {0x81, 0x6, {0x2, 0x10001}}, {0x81, 0x2, {0x3, 0x3}}, {0xb, 0x9, {0x1, 0xcab}}, {0x9, 0x0, {0x2, 0x2}}, {0x5, 0x8, {0x3, 0x9}}, {0xfffe, 0xdff, {0x2, 0x7}}, {0x8, 0x3, {0x3, 0x4a5f76b2}}, {0x5, 0x7, {0x0, 0xfffff001}}, {0x5, 0x1, {0x1, 0x9}}, {0x2, 0xc, {0x2, 0x1}}, {0x8, 0x5, {0x0, 0xffffff0f}}, {0x1, 0x9, {0x1, 0x9}}, {0x401, 0x7, {0x0, 0x2}}, {0x8, 0x7fff, {0x1, 0x7ff}}, {0x0, 0x6, {0x1, 0x20000}}, {0x5c5d, 0x10, {0x0, 0x5}}, {0x6, 0x8, {0x0, 0x80000001}}, {0x5bcf, 0x9, {0x0, 0x1}}, {0x2, 0x101, {0x3, 0x6}}, {0x7, 0x2, {0x1, 0x7}}, {0x2, 0x58ad, {0x2, 0x4}}, {0x3ba, 0x4, {0x2, 0x4000000}}, {0x800, 0x5, {0x0, 0x6}}, {0x5, 0x1, {0x0, 0x6}}, {0x8, 0xb, {0x3, 0x3}}, {0x211, 0x2, {0x3, 0x73b0000}}, {0x4, 0x0, {0x2, 0x1}}, {0xb, 0x5, {0x3, 0x7}}, {0x8, 0x4, {0x3, 0x4}}, {0x400, 0x80, {0x1, 0x8}}, {0x6, 0xb, {0x2, 0x40}}, {0x66, 0x0, {0x2}}, {0x5, 0x5, {0x1, 0xffffffff}}, {0x8, 0x3, {0x2, 0x2}}, {0xfc0b, 0xe, {0x1, 0x1f}}, {0x79eb, 0x671b, {0x1, 0x100}}, {0x7f42, 0x2, {0x0, 0x3}}, {0x0, 0x17, {0x2, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) socket$nl_route(0x10, 0x3, 0x0) 1.889964698s ago: executing program 1 (id=3265): r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r1, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x8, 0x4, 0xff, 0x0, 0x1}, 0x50) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000001c0)=0x3, 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x2, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYBLOB="7205f7d25c3d1793f64f13a24a4f7bf5c27b9a033ef3e68f1abdf0a2ef52e29ea0104bdcc525f007211a1d4aac4f5af822f95ce5ef18", @ANYRESHEX=r0, @ANYRESDEC=r7, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.669475785s ago: executing program 1 (id=3266): r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = accept(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000100)=0x80) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0xc, 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e20, 0xff, @mcast2, 0x2}}}, 0x84) (async) write(r0, &(0x7f0000000280)="59f18e6831a5f243c7116fdbbc7a31261fbbf47c86f230ad1ca54b860695375af0f6af6ce70f8a7374e3f1d67524fb5c008aeafa98b963e58c34188a099b891d20df760cda97389e22281f19bc1b66f45dd08af88d65f8bae2d5c20e3786e1204298365992f09398b733964b66eb71baa5a6368aeec6ec11ce68bca6105972bc52e5d4528e11f18afb627b3da10c4a061d6814330b95bfd35cc2ac214dd4451013a2f0f675e9be4f4a3387cfb9a4cbe778a0f3dc59f74156bad83d0c0f8f87651df3b87790235ca0abc01022482c4dc6f04309131f946d85bf56d18395db89d53c837001f243901545b45df8bc6b3e38bd17", 0xf2) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000380)=0x1, 0x4) (async) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@void, @val={0x0, 0x0, 0xf, 0x8b, 0xb8f0, 0x100}, @llc={@llc={0x0, 0x2, "e7", "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"}}}, 0x100d) (async) sendmsg$nl_route(r2, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)=@ipv4_getrule={0x1c, 0x22, 0x100, 0x70bd2c, 0x25dfdbfe, {0x2, 0x14, 0x68c2356c285f01c3, 0xf8, 0x1, 0x0, 0x0, 0x4, 0x10}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x81) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000001500)={0x3, 0x202, 0x2815a546, 0x5dfdb085, r3}, &(0x7f0000001540)=0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000003800)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000037c0)={&(0x7f00000015c0)={0x21d0, 0x39, 0x400, 0x70bd27, 0x25dfdbff, {0x15}, [@typed={0x8, 0xdd, 0x0, 0x0, @u32=0x7}, @generic="837160cf39de77a6c74cb9a5aa099ac647fa32c8a3821edb2c3e38c8c532b0aa866345eea8d9fb4cb4f79ce9c2d1c51ddd78b517ab291d53786ddc86f3a8eafa15a5d1b2e417ba978abfac9fbc3094d624a1504c1007ae3046a96644d021def3f8b882f71894f5db765005f75424b8474adaf24f2751fe4c1a601a64c4c3fd06f8e79b96191f49cf7a36c2d68a8012179619167a342300770a3a191896683108276dc1052beda2e724399427f88ea5cbda49bb4a1668b7f1881bbd74", @nested={0x18, 0xbe, 0x0, 0x1, [@typed={0x9, 0x44, 0x0, 0x0, @str='\\%\x03.\x00'}, @nested={0x4, 0x4}, @nested={0x4, 0x54}]}, @typed={0xb1, 0xf4, 0x0, 0x0, @binary="985bb9358f51e20c7441b64e1d3859844e162eb117f8dcbe3eb4cad0693d8437a80ef1498d15c557e6a5a5c3ae768ce9f14d35d4954c2dc21c51cdafe0747a1d39253de8bb1c2c8b0e3ae473dab4fe3c527b60493da35ae5daa553155c047de25e8f07d50080cd19cb22833db8130f3820ff6e2bf6d629d222bc31f306ea712b2d84b233f8e25c34320f9a909b6714efd6022d0ec0dbcd12b36563b93fc344243edaa4161d893868779140ec11"}, @nested={0x202c, 0x11e, 0x0, 0x1, [@generic="961488dbe47905fbb4ec9aa297614cdc94810d8e3f127fd281fb76c96989b5e17c2c31245ee442588f8fe64314ebaae020a1ec86ee1158d5bd1227e808f60abd96208c9110d1aae57fb9cb10b0f0e6a8c8bf0ec43e64f92c3232b6ff19236fd11217743440aca071077140030d03ad92c5ee72aeed990abd39e4cc1e411d406f4914ec31f8e5eba42fb835996fa8221f5f5573a4ae36a8c837799310544adade4bba9738709c22b43fc1e36aa69e7f505daf234b7814273389f3dbac0b5193e8b6ee629a737e0fa74726438b216e0b7e02b924c8e9e14430dc514c5aca11b803427a957cb9c188e645c857658cbe5321944d16e8e5748aebacc44dcfe1cfbb6261ca0430bfbff699c389a9e6f4bc12c2df4f5cd3b6d6c82d4cb338b402b1c6109f92870676dba898f1cacaf0ff2c5f3f618f43c73e745f777c9007f17d2e04404951aa14f3af1683c360fa4c229d1e034b3beb66dacc1cc04e37aa542c6d6594b43fb4575e58fb85206a0a0dd7317b858193b7ab906b366675e4193856a73e3e57837354436248ce43e764ed51f2cbae84b8691ae393ed8c493b8cd3e7f7202a7b9f2b213d0aefdd57895b9f85960129fb84131b8686cbd3cb379da2a95a6950ba9b345af4860670c19fb93293b1f757962d7a4b8bc0b3e33d945306a8723cbb5e773441020f1e2debf87ed86804f52cddf779d2ce3422d223e8233c3f3211687e98cbf846757c60eb2c91669b0353f91b74da3d51bf2e22909ab37b08b0ee06c8cac088003a89fc262f106de7124c56ab06a776dd7808b658cc97dca4658f197f25d368061819759406c870680f6ef0518159e71374ddaa513303b0668f58b418d417d0e0e0c7d1ade8d942b67849fa15c1cdf369de2a7c81963374968c12f8b1b3b8158fd2c4c6f55b272e2400885fe0440961669b3805e06bd06ce45caf62cf10497aeb8d786c45154b3cc4ce9fe8e989646985363622100e8875c3f467134170b954c726f8d2440c3aaba556ed2e3e2c4922f4fe443f548ebefa50d320406b835e72317764e29b732dc3aeca929c10d11be378aad756a67f09d22343e340e7752fe96ef1e961930753c9dbbf836f17a1e4430d6da90653c6d99db82feb09e87d0f4dbb60667548d325d5ea142ef1bfec92a969456a664d7289da7ea0168ed141836038665e4e7fb031249af7872366950db9dd9104c539e1d6a93f2472cfbb56b219a70a0da134fb1af86d7852380474a8cda6a80d1484e69ddcf37d89e98c9dc844cf12771c464b8733a0f6cc7487f57bf689ef494056fd4da55c2841d1b18a58fc117c1efb65dbb7f20a025ffb9eba772446084ec6a3f06978aa296254289de1c2c280bc578d1b1b5fa63e7ae9a7f81b49bffe8d6db65d449152e49545b1b1818c853ccc8727b87b0fed1b82a4f8d59d41051f03ae1d284615bacef50d3b3cf258ed67882fdf021f8e68246cdec5fb90b6703ac4b59930a9fc2344103d0a4bfcd8ca13de6aa50cf96c4eaf86823662c99a0e6f44a30a9bdacd4827cf8d68f32e94b98872565fcb4bf1df74ccf4864b1452955a388236a2ec7157ac5f05bc328d542f59f1eff2ca4871ad921e8d44959303d8d52d9e3be77723a95b7e1a03c4fca80830a53343955384ee3fd435ef3414a5bcd7c8d0e8dd282b99300f4b995b5d810fa364dd461e6db6b5cb1993530a726c70ef276f2f698b1d8263b777cfb58a57050edafbaf7d3220f0f3237816f5914ba1ecfc3dedc18fb2ecb9372c9c5f0eab1b84c483c9de8c6891db437589ba13e727bd42adf3f7255f6b9c7e51b4425088cf7e8c49c469640ae35ab7de979fa5788f248a983e6778e283d037ae4f7e5057dd680d08c1d4dc4f5311724f6a546ef1d60e5333f8640749406ff0f20595d5fb127352df16385f8898dac4e05f83d6a63e90de19d5689e6f35c2b4b469b53483437fbbcc89896cc730da1c77a7a0769bc1d85f44b5cc6801a0999c060b53e34f643f4b757261bd6237d84c3e07956e66ee7296f2a6cd6fd22505cea57773954c0c1b2548801a02c322205476e0a7153a1213699ebf1cc8acdb289ad4e905241a777e905b6b4962f996d49bbbec7883310012235fe14c59269d7addb015de39605d1808438975f42fa9b82dbf211755979a64c41b801684e991d2acf4ffe1b6256345b9a788aae92f62cb971c0c2c6696911d4430392de10e3446aedf7c786267f84b7b17b35ac71f21fdbadfa66ac710566ad5c46606652e33e8562401ebe0f32ea3967bec7373f465c213e9c7a2d6db1a152170075d4d19568de8001c52dbc40ec6c0bd1cf5f70793a1a17aaff96ca4bd073555fc3386900c411827c3a37840afa0420550af39b6b0271bd369d5eef1bea8e355114c2f05890766b432352927ef61c8f6bef2be4f46f2f954f08bc52aa6449d5ceb6c8c5970822510a96efb449403025c68088e753ef9b6df6a7d08fdefa41dcb43e26d0b5415ee9f80e9208c62a54666f435d1486672b0cde42984f63826e8f120b1a18d5fb903c71b7f98653bff420b3aedcd3ab4aa66ffff724e27148bb5e81114c86c921a4267d296836ca46b19f4ad6c4ed20258bec5d50ec30354f58869d8420cb4d85829563eb415e3941bed9fa3f26ef60a765de0de14d208b07051897211d3df90e313c82b172ba559a75fe6d96c6831740e6c7fa0c2ca6be8985ffe2594d77ad7cb4ff0f8ff51490dca0ff629d882d9a17e90827b31944f4e02d33b6958f97926a11920683ed100641087fa8e70d4c7df4ee8c53809db68b8cd7a9e5e5c61f312fba6620a250e08aa621027e65734bd338df9ccb01f09bd1df347b828d1092f0edbffc2334dcc6d3c3b198f2d0044a4e4a154f534ee4f0ffef898ec346408f64d34172740797590115e6f680c2375c4adb330e46f30baab78a49d0228029aa8634e7f5005238cc5a6a4e62132730e5f402ed52edf56c8837ec7cafb400692ec4cdf08d3a30f6f211c5d3811decd72b66c06184b6e944cb04858366eb627dc00c9b66a5dc19539364e6918da335c4136aa28ff20f492aebcc39ed79814bb7b9c7723ede8f8032ac3b663af1258edb3f97792aaf65bbf0fa7b3e38e76fc8e07b5c1f8a3916d5c24c2f3e47ebfaedd4c5e3c3a8ae1c23f1aec1686818f57db8a2b54c84f041713cde92f788b97935563f495b375555b76cacc0fdfb70d5a6ce740fe4bb4bc70295fb85d60f998676287ba562aae6897213f8b1520912bdc5c05ceac4a56862b5e153e70c7ef56dff2b34fe8468908b305a41cd5afbb5ad5987ce546d3c4d9526a744eae7a00060ab678d9a1192ee9cd0d207c69c37029039f7f63742fcd551700e22a29c52ebe30114ff95efcacedfd2805a747044f59c37f5bd16f70ce33cb07f987af8a63705c836290ab30b66acf10bd4ec1045229eefbc8d450ed90d2b678fe5328dc928405628d7df536e8c2f7bc077eb83fcc885565a18c52a1e9e9ab70a3a3c3a18232696b85112c1fd882a64065d533446df0d182bddd415002b6f8ede47493756c5afcc00dff39c148efc7e27fb6828e77b02b6bd03bc0e5a46d54adc0d7961fd6e0e6dd4689bf8ecd30ed0579aebb319b63f160dcad5b6f4a16a76822a39c9d1a1f9cb023e51d940f8e9006c6cd0ceb654db340e6c54a8ea9942ec10d4f7ee6d6a1b20956af723fa074f85c289242f63329d714e587b4a1db61369a7a5db783539d2948446304c8250244670fe023c1b2622339079c2e7524ec6672b91706b66d5b7c384308859f543d6385b2712b4c8d8c72f62bc6df2a80bb8d5cd563f3a825849dfd5b0903251c6f287ffb7d1bf2d7d38b984eda5dfd098cd166dd23dbf051ab55c71b0e926aec577df720ebfbf90f3859456c4fc8977c9a17df77b33f4b1ea14d13b868064170f749a7aaa8136a0e8016775d852227aa40f3f1a5351a31a1d09ddf6448cd6adcff2d645574ba2595d26eee93078162203b8d12c86c9339f049403dbf18e7e6510d55c254392a1d2c72fb27dc78ad6c9927a25df0f5469782f9a317357c79c0e3040bf98d1d2e35f3310e9a4954fb27fc109e581485f23b8f9b8b5fce3cb1620a73827526907d49ae2ffa2e17f1ae5b4f506059a680a812189155d688efe3b87ed7f10b8f8ec6c11142f4f81e8adc4979a7a8d8d461ec2c529742ebd0cddf0d134dc9aed83e2663d129241d60cf39d17b34700baa24424ab108e4da91acd709ea07b4d70e25282a49152bb0998b7e619eb85f777fd0755f696bbbbcd5177f7f014caad52d39b791750d9d16e708559614276f47fad284a6ee13e3a4f452bb0ae9a1fdfa6f5d75e6baf6353f6bb6e9b6538770d00718153d57fe3ef400bf275ae4c67cf2e7fbb0002ac2ccfd1b0068ea9c4afb3a36e7ae9778283208261539f65c600921147284bd47ae647352f6621d2e38b1cbd0243c0415da0e542308e3c958e9161707d0b68d9e80fb670d2aacfc79b2dca519c22d98684ae01e133485bde9df572627b26b0d60cbd13c9bd37d8c4cad99ff5a0d749c63c34b4aa891c97cbe7203d06a16571f552aac2872856fbb6e4ae8440c90c27a01fb71698164985ed3bf9b80ebcde6f4add441ec77bf22fcf651796dee14db9586c64d6eb91f2bd39e013d12e8ab1c02ebdc62e782b441ff3b8fa87f3821e1dd16130af81feb2e72063ca66bc515c55c797aac317f5250c596bb07da1d4b4dc7920fbd514dfe21d60ed17f90bc03112575b143aa43c957a3f4fca6f4a62647cea177d585652142d9e2e6f1a5e24952bd188f9f8f8e483de3374f51ae572ea4258de58dc9bb20603e1d5c9c063f8b4ad1d784c8a15ca56a0305e6fcde839a09a7d7dfbebb80f511fd09ce7430de44e0590a6471bc96c1a11ee58c3d481c6e49ed0703e207b91593619157a6271c894268ce715e959fa4b8c58d5cca18565c52e7bbe0897b6424e8792ff1c00ed48ad970a9fc2a885a2fc0e8af3319420093e0fe8502abcadb5b77a1d4e85d09fcb5d6edd77abe6cf99568a47a47da1173d5d76f9a2ec832b562c2554d043e80be5f84b3063b306ac858bcaaa677475090075f77645e553ddd575c3acc4b9316ff457697dcbdc057ddcc5fbf8e6d48fe6031637b90316e18c2c24858f09ed1d42d5eb8bcdc3f8dbd8dbbb85600522deb7867ef40d1fb3394e24a532685344ac10ccc155e1bc325f97fa5d6b4c58d2da31f55c9a2d01678c86083ff4fc981d8e3d9339b3469a3ddd9bce9dfae470509aa188ddb58823d6c98d2d0b7fd7feead52baa02b919b6c7735fd1b32c29a4323774c598e5742dcc5819d826d11afa374d2e80deaf167b74896a61120612b0b97d9d1012242bb891a3ebddfeca9c8065a41f46ba140c9573f479e59e8c44e6de8b716715239b123c567fdc21227167d174428cbf52d9947563ab8241e309f35494a1180d986af77a4b1cf60b7906a42f7331e76fc0d4ca64acdfd0053528c46b9822adbdbfc5d2a2c7976089ffec0cc8031a97d344e58f319f1cd03c283e8981e09f50f3bcfcfe637ada8bc2dbe93a7bdf3013dc368bb7d2cb3e6320feae28d0e680d5a93a76ed91572f7a07be586441ee9a7307a3e5314c1bc91b827f34b6f767f0a21023dab3e2842fbfec2c29438abecf46a4af4e722ccfbe00fb4ee4dd19d04805fc5b977283532555e5a4f1e364a6303962b66dc0b7d2127088572f7ab81f76cf2b4c1d02572c88bb70e2a30a03c761eb15b2da62d46b0ff5efed235054e77af3e59a944ac5ff95c32bb7a1cf594044058da20ab0fb8640bb6889f84e1", @generic, @nested={0x4, 0xcf}, @typed={0x8, 0x50, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xa6}, @nested={0x4, 0x76}, @generic="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", @typed={0x14, 0xd8, 0x0, 0x0, @ipv6=@local}]}]}, 0x21d0}, 0x1, 0x0, 0x0, 0x45}, 0x45) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000038c0)={r4, 0x58, &(0x7f0000003840)=[@in6={0xa, 0x4e20, 0x5c, @mcast1, 0x5}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e23, 0x7fff, @mcast2, 0x6}]}, &(0x7f0000003900)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000003940)={r5, 0x1a65}, &(0x7f0000003980)=0x8) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003a00), r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000003ac0)={'ip6tnl0\x00', &(0x7f0000003a40)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x5, 0x62f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x2f}, 0x10, 0x8, 0x1, 0x2}}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000003bc0)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b00)={0x68, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000003cc0)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003c80)={&(0x7f0000003c40)={0x1c, 0x0, 0x120, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x0) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000003dc0)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d40)=@ipv4_deladdr={0x28, 0x15, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x1, 0x45, 0x0, r7}, [@IFA_FLAGS={0x8, 0x8, 0x19e}, @IFA_FLAGS={0x8, 0x8, 0x290}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c090}, 0x20000000) (async) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x1, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000003fc0)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003f80)={&(0x7f0000003e80)={0xe8, r8, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x20004002) connect$vsock_stream(r2, &(0x7f0000004000)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000004040), &(0x7f0000004080)=0x4) (async, rerun: 64) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000004100), r2) (rerun: 64) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000041c0)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x1c, r9, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000f4}, 0x40080) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004240), r2) sendmsg$TIPC_NL_PEER_REMOVE(r10, &(0x7f0000004340)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004300)={&(0x7f0000004280)={0x50, r11, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x319}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) 1.452919668s ago: executing program 1 (id=3267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x3, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x81}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000029c0)={'wlan0\x00', 0x0}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000000)) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002a00)={0x40, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "531025271a62310c4fc6f27d5e"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025642531010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) 1.450161052s ago: executing program 4 (id=3268): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x300, 0x0, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.449696565s ago: executing program 2 (id=3269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20040600) (async) unshare(0x20040600) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, 0x0, 0x0, 0x20000000) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x21, @loopback, 0x4e24, 0x2, 'rr\x00', 0x1, 0x5, 0x37}, 0x2c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt(r1, 0x6, 0x3, &(0x7f00000004c0)="4447221752c940617b2e9fd7d5174513b26c8e13100630386ac40cff9867ad56c7884ab9a8e273cb80ecd02292becd17cdd870a5e647367834959bb6d7253cb71e2901d8200898b58f558125de6399c7e3e6f1786a5593bac78f6ec3fb0c9cf6199aa7e2c4f96b0eb53258c7037bace29dd22db1acf1a547d111216ae921cae1a42d6ee12a10dcca70de02808a649c9a4faf9d84289b5bcb524eb61b1c8a1bc9f39dfe86fb6e39f41142d818272f07942ca3a62be7329c41b9539a2735e509", 0xbf) (async) setsockopt(r1, 0x6, 0x3, &(0x7f00000004c0)="4447221752c940617b2e9fd7d5174513b26c8e13100630386ac40cff9867ad56c7884ab9a8e273cb80ecd02292becd17cdd870a5e647367834959bb6d7253cb71e2901d8200898b58f558125de6399c7e3e6f1786a5593bac78f6ec3fb0c9cf6199aa7e2c4f96b0eb53258c7037bace29dd22db1acf1a547d111216ae921cae1a42d6ee12a10dcca70de02808a649c9a4faf9d84289b5bcb524eb61b1c8a1bc9f39dfe86fb6e39f41142d818272f07942ca3a62be7329c41b9539a2735e509", 0xbf) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x7b, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9effffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a010400000000000000000700fffe08000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d0800044000000803140000001000010000000000000000000084000a089543caa3fac2be2db82e62d2a0eed103931d0bb7c723b3566fb95dbed4"], 0x6c}}, 0x20050800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110be000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110be000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000340)=[{&(0x7f0000002000)="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", 0xfe41}, {&(0x7f0000000300)="9b364acaa018d77f8143825708d8", 0x1}], 0x1000000000000029, 0xa) (async) vmsplice(r7, &(0x7f0000000340)=[{&(0x7f0000002000)="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", 0xfe41}, {&(0x7f0000000300)="9b364acaa018d77f8143825708d8", 0x1}], 0x1000000000000029, 0xa) sendmsg$AUDIT_GET_FEATURE(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3fb, 0x8, 0x70bd28, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) sendmsg$AUDIT_GET_FEATURE(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3fb, 0x8, 0x70bd28, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 1.054421479s ago: executing program 0 (id=3270): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="5c00000026006bab9a0900000017aa3136cd876c1d0000007ea60864160af36504001a0038e22e001d004231a0e69ee517d344600500000000a705251e61829c9ad4938037e70e4509c5bb4b64f69853362ac3407173ec2df2cc24f17fe8", 0x5e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000082) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000000)='.'}, 0x20) (async) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) socket(0x22, 0x4, 0x6) recvmsg$kcm(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x100) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 889.294481ms ago: executing program 0 (id=3271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x5, &(0x7f0000000000)=@framed={{}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 875.804721ms ago: executing program 1 (id=3272): r0 = socket$inet(0x2, 0x0, 0x71f) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x1828, 0x1}, 0x48) (async) setsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x4) 804.313376ms ago: executing program 4 (id=3273): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd2b, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 803.666431ms ago: executing program 2 (id=3274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0xffff}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400600027c035c9cc652bdcea3ea5a7134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecb84ec95ee5de6ccd40dd6e4f1ef3d93452a92782f9ffcdb020e6f3baf432b25a55e08", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4c000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r0, r3, &(0x7f0000000440)=0x3, 0x96b0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@deltfilter={0x2c, 0x2d, 0x404, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x16}, {0x6, 0x5}, {0xe, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xf3, 0xb}}]}, 0x2c}}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 740.062331ms ago: executing program 0 (id=3275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000884}, 0x10) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x14, 0x1, 0x3, 0x801}, 0x14}}, 0x0) 708.475077ms ago: executing program 1 (id=3276): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000001400030527bd700000dcdf25023f5100", @ANYRES32=r3, @ANYBLOB="00004c36a275bfaa6cfa36ba92d42f0000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x2008) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0xffe1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x8000, 0x9, 0xf, 0x4, 0x3, 0xac}, [@TCA_NETEM_CORR={0x10, 0x1, {0x6, 0x10, 0x8}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x200, 0xfffffffffffffffc, 0x8cb, 0x7, 0x8, 0x2}}]}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004001}, 0x20000000) (async) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r10, 0x0) (async) listen(r10, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xdc0, 0x0, &(0x7f0000000300)="0400000071a76d2688ca006588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r12) sendmsg$IEEE802154_ADD_IFACE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000002100000009001f00706879f529000000050020"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000a00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x11c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xe4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x7fff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8b}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "50057ac175a9a4e1302e900353e4b0ac"}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x518bcf18}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "18803bb929b89cadddd5fa15a91d36e29fec959ef5cdda042a93db38ea426ff4"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r5) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000b00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00'/17, @ANYRES16=r16, @ANYBLOB="00082cbd7000ff0f0000100000003000028006000f000300000006000b000200000014000100000000000000000000000000000000000800040005000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0xfffffff8, 0x1}, 0xc) (async) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='#\x00\x00\x00.\x00\t\x00*\x00'/24], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x8014) 563.304802ms ago: executing program 0 (id=3277): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0xa}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r4, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 8.835414ms ago: executing program 0 (id=3278): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x4000000) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000000000", 0x57}], 0x1) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000", @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x38, 0x1, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1ff}]}, 0x38}}, 0x80) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x28, 0x7}, 0x9, 0x9, 0x1, 0x7f, 0xd, 'syz1\x00', "6ecf9c9aaddd506228feca205ecc962aa12474f0f7b3253fdca1badf82c403c0", "045b8488ce9dca338fe33ae3c4aacdc6472390cd0ef665613adbd250dfbdc17e", [{0x187, 0xffff, {0x3, 0xfffffffe}}, {0x2, 0x3000, {0x2, 0x5}}, {0x81, 0x6, {0x2, 0x10001}}, {0x81, 0x2, {0x3, 0x3}}, {0xb, 0x9, {0x1, 0xcab}}, {0x9, 0x0, {0x2, 0x2}}, {0x5, 0x8, {0x3, 0x9}}, {0xfffe, 0xdff, {0x2, 0x7}}, {0x8, 0x3, {0x3, 0x4a5f76b2}}, {0x5, 0x7, {0x0, 0xfffff001}}, {0x5, 0x1, {0x1, 0x9}}, {0x2, 0xc, {0x2, 0x1}}, {0x8, 0x5, {0x0, 0xffffff0f}}, {0x1, 0x9, {0x1, 0x9}}, {0x401, 0x7, {0x0, 0x2}}, {0x8, 0x7fff, {0x1, 0x7ff}}, {0x0, 0x6, {0x1, 0x20000}}, {0x5c5d, 0x10, {0x0, 0x5}}, {0x6, 0x8, {0x0, 0x80000001}}, {0x5bcf, 0x9, {0x0, 0x1}}, {0x2, 0x101, {0x3, 0x6}}, {0x7, 0x2, {0x1, 0x7}}, {0x2, 0x58ad, {0x2, 0x4}}, {0x3ba, 0x4, {0x2, 0x4000000}}, {0x800, 0x5, {0x0, 0x6}}, {0x5, 0x1, {0x0, 0x6}}, {0x8, 0xb, {0x3, 0x3}}, {0x211, 0x2, {0x3, 0x73b0000}}, {0x4, 0x0, {0x2, 0x1}}, {0xb, 0x5, {0x3, 0x7}}, {0x8, 0x4, {0x3, 0x4}}, {0x400, 0x80, {0x1, 0x8}}, {0x6, 0xb, {0x2, 0x40}}, {0x66, 0x0, {0x2}}, {0x5, 0x5, {0x1, 0xffffffff}}, {0x8, 0x3, {0x2, 0x2}}, {0xfc0b, 0xe, {0x1, 0x1f}}, {0x79eb, 0x671b, {0x1, 0x100}}, {0x7f42, 0x2, {0x0, 0x3}}, {0x0, 0x17, {0x2, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) socket$nl_route(0x10, 0x3, 0x0) 8.117821ms ago: executing program 4 (id=3279): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r1, &(0x7f0000000180)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fc414a", 0x30, 0x3c, 0x0, @private0, @local, {[@srh={0x2f, 0x4, 0x4, 0x2, 0xe5, 0x70, 0x8, [@private1, @private0]}], {0x0, 0x0, 0x8}}}}}}, 0x0) 0s ago: executing program 1 (id=3280): syz_emit_ethernet(0x66, &(0x7f0000001a40)={@random="0f539af21094", @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061119400000000000620000000000000950000d700000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): .403588][T11273] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1452'. [ 196.444612][T11269] bond6: entered promiscuous mode [ 196.450528][T11269] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.452442][T11277] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 196.508918][T11268] bond6: Unable to set up delay as MII monitoring is disabled [ 196.536672][T11268] bond6 (unregistering): Released all slaves [ 196.579986][T11273] 0·: renamed from hsr0 [ 196.602435][T11273] 0·: left promiscuous mode [ 196.713686][T11284] bond6: (slave bridge1): making interface the new active one [ 196.725326][T11284] bridge1: entered promiscuous mode [ 196.738242][T11284] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 196.850458][T11292] syzkaller0: entered promiscuous mode [ 196.862908][T11292] syzkaller0: entered allmulticast mode [ 196.904408][T11292] tipc: Started in network mode [ 196.915099][T11292] tipc: Node identity 4671a8f9edf1, cluster identity 4711 [ 196.951387][T11292] tipc: Enabled bearer , priority 0 [ 197.008492][T11291] tipc: Resetting bearer [ 197.088387][T11291] tipc: Disabling bearer [ 197.144014][T11309] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1459'. [ 197.172229][T11309] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1459'. [ 197.652816][T11322] tipc: Enabled bearer , priority 0 [ 197.784083][T11322] syzkaller0: entered promiscuous mode [ 197.797626][T11322] syzkaller0: entered allmulticast mode [ 197.804267][T11322] tipc: Resetting bearer [ 197.829587][T11321] tipc: Resetting bearer [ 197.921714][T11348] netlink: 'syz.2.1469': attribute type 1 has an invalid length. [ 199.611940][T11321] tipc: Disabling bearer [ 199.628068][T11344] syzkaller0: entered promiscuous mode [ 199.640898][T11344] syzkaller0: entered allmulticast mode [ 199.649912][T11348] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 199.856725][ T8308] tipc: Node number set to 2877335801 [ 199.961582][T11372] __nla_validate_parse: 2 callbacks suppressed [ 199.961598][T11372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1473'. [ 200.034256][T11372] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1473'. [ 200.132384][T11372] gretap2: entered promiscuous mode [ 200.166825][T11372] gretap2: entered allmulticast mode [ 200.408353][T11411] netlink: 'syz.3.1484': attribute type 8 has an invalid length. [ 200.442020][T11405] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1482'. [ 200.477277][T11405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1482'. [ 200.477881][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 200.502125][T11411] netlink: 'syz.3.1484': attribute type 1 has an invalid length. [ 200.510714][T11411] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1484'. [ 200.526933][T11411] ipt_rpfilter: unknown options [ 200.652575][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 200.672792][T11428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1490'. [ 200.673467][T11425] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1487'. [ 200.696445][T11425] bridge0: left promiscuous mode [ 200.702139][T11425] bridge0: left allmulticast mode [ 200.792787][T11436] xt_TCPMSS: Only works on TCP SYN packets [ 200.899921][T11440] x_tables: duplicate underflow at hook 1 [ 200.907744][T11440] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000 [ 200.932197][T11442] netlink: 'syz.0.1494': attribute type 1 has an invalid length. [ 200.992914][T11442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.074387][T11452] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 201.104116][T11442] macvlan2: entered promiscuous mode [ 201.110025][T11442] macvlan2: entered allmulticast mode [ 201.208111][T11458] unsupported nlmsg_type 40 [ 201.230466][T11458] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1497'. [ 201.461522][T11476] ipt_REJECT: ECHOREPLY no longer supported. [ 201.554608][T11469] netlink: 'syz.2.1500': attribute type 11 has an invalid length. [ 201.619419][T11483] syzkaller0: entered promiscuous mode [ 201.638159][T11483] syzkaller0: entered allmulticast mode [ 201.688151][ T8327] IPVS: starting estimator thread 0... [ 201.797601][T11489] IPVS: using max 33 ests per chain, 79200 per kthread [ 201.949142][T11503] netlink: 'syz.2.1510': attribute type 11 has an invalid length. [ 201.972711][T11506] netlink: 'syz.3.1512': attribute type 5 has an invalid length. [ 202.007194][T11509] IPVS: set_ctl: invalid protocol: 135 172.20.20.33:20003 [ 202.018744][T11509] raw_sendmsg: syz.4.1511 forgot to set AF_INET. Fix it! [ 202.316685][T11524] netlink: 'syz.2.1517': attribute type 1 has an invalid length. [ 202.425682][T11533] netlink: 'syz.3.1520': attribute type 11 has an invalid length. [ 202.454168][T11533] netlink: 'syz.3.1520': attribute type 4 has an invalid length. [ 202.629453][T11541] IPv6: Can't replace route, no match found [ 202.959599][T11557] bond6: Removing last ns target with arp_interval on [ 202.967815][T11562] netlink: 'syz.0.1529': attribute type 2 has an invalid length. [ 202.977892][T11567] netlink: 'syz.4.1531': attribute type 1 has an invalid length. [ 203.110821][T11567] 8021q: adding VLAN 0 to HW filter on device bond7 [ 203.359089][T11592] : entered promiscuous mode [ 203.648463][T11615] tipc: Enabled bearer , priority 0 [ 203.670929][T11615] syzkaller0: entered promiscuous mode [ 203.684981][T11615] syzkaller0: entered allmulticast mode [ 203.707492][T11615] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 203.804358][T11624] veth5: entered promiscuous mode [ 203.809587][T11624] veth5: entered allmulticast mode [ 203.820048][T11626] net_ratelimit: 822 callbacks suppressed [ 203.820067][T11626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.838433][T11614] tipc: Resetting bearer [ 203.917344][T11614] tipc: Disabling bearer [ 204.969791][T11685] __nla_validate_parse: 8 callbacks suppressed [ 204.969808][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1561'. [ 205.135787][T11689] bond_slave_1: entered allmulticast mode [ 205.223266][T11691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.264159][T11691] ip6_vti0: Caught tx_queue_len zero misconfig [ 205.468421][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.505833][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.512792][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.535311][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.548765][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.557702][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.566601][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.625131][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.661284][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.698287][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.718769][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.737803][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.769457][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.797832][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.805663][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.812621][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.822268][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.832780][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.842403][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.849941][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.857564][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.878221][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.893429][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.901674][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.909355][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.918589][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.972048][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 205.998608][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 206.007369][T11739] team0: Port device team_slave_0 removed [ 206.023011][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 206.055338][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 206.081453][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 206.099879][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 206.128680][T11717] xt_cgroup: xt_cgroup: no path or classid specified [ 206.252239][T11752] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1579'. [ 206.303274][T11756] netlink: 'syz.3.1580': attribute type 1 has an invalid length. [ 206.316524][T11755] netlink: 'syz.1.1581': attribute type 3 has an invalid length. [ 206.370145][T11760] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1581'. [ 206.429657][T11756] 8021q: adding VLAN 0 to HW filter on device bond7 [ 206.456537][T11759] erspan0: entered promiscuous mode [ 206.490117][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1582'. [ 206.594934][T11761] bond7: (slave gretap2): making interface the new active one [ 206.619343][T11761] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 206.832445][T11784] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1585'. [ 206.874433][T11785] netlink: 'syz.3.1589': attribute type 9 has an invalid length. [ 207.117527][T11803] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1594'. [ 207.317214][T11815] netlink: 'syz.1.1596': attribute type 29 has an invalid length. [ 207.351455][T11820] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1598'. [ 207.367215][T11820] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1598'. [ 207.389557][T11821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1595'. [ 207.419138][T11821] netlink: 'syz.2.1595': attribute type 8 has an invalid length. [ 207.426897][T11820] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 207.473630][T11820] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 207.621648][T11841] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1601'. [ 207.835712][T11851] netlink: 'syz.1.1605': attribute type 32 has an invalid length. [ 207.899785][T11851] bond7: option coupled_control: invalid value (192) [ 207.971679][T11851] bond7 (unregistering): Released all slaves [ 208.049967][T11862] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 208.081996][T11854] vlan2: entered allmulticast mode [ 208.095353][T11854] bond0: entered allmulticast mode [ 208.123849][T11854] bond_slave_0: entered allmulticast mode [ 208.143317][T11854] bond_slave_1: entered allmulticast mode [ 208.463591][T11876] bond7: option fail_over_mac: invalid value (16) [ 208.489784][T11876] bond7 (unregistering): Released all slaves [ 208.577889][T11890] tipc: Enabled bearer , priority 0 [ 208.588865][T11892] syzkaller0: entered promiscuous mode [ 208.607783][T11892] syzkaller0: entered allmulticast mode [ 208.630573][T11895] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 208.664483][T11875] tipc: Resetting bearer [ 208.691100][T11872] tipc: Resetting bearer [ 208.752853][T11872] tipc: Disabling bearer [ 208.810818][T11904] syzkaller0: entered promiscuous mode [ 208.817921][T11904] syzkaller0: entered allmulticast mode [ 208.917654][T11897] openvswitch: netlink: nsh attr 5 is out of range max 3 [ 208.931955][T11908] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 208.935598][T11897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.952823][T11909] syzkaller1: entered promiscuous mode [ 208.958954][T11909] syzkaller1: entered allmulticast mode [ 209.032654][T11897] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 209.328385][T11923] openvswitch: netlink: Flow key attr not present in new flow. [ 210.420962][T11977] __nla_validate_parse: 9 callbacks suppressed [ 210.420980][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'. [ 210.682067][T11989] xt_limit: Overflow, try lower: 271964/0 [ 210.749610][T11988] vxcan1 speed is unknown, defaulting to 1000 [ 210.942994][T11998] syzkaller0: entered promiscuous mode [ 210.963125][T11998] syzkaller0: entered allmulticast mode [ 211.054907][T12009] x_tables: duplicate underflow at hook 3 [ 211.100738][T12009] netlink: 'syz.2.1652': attribute type 11 has an invalid length. [ 211.414874][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 211.448736][T12023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1656'. [ 211.577008][T12032] netlink: 'syz.3.1660': attribute type 3 has an invalid length. [ 211.649443][T12035] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1661'. [ 212.004463][T12055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1666'. [ 212.014419][T12058] netlink: 'syz.1.1667': attribute type 1 has an invalid length. [ 212.807282][T12095] syzkaller0: entered promiscuous mode [ 212.830560][T12095] syzkaller0: entered allmulticast mode [ 213.010483][T12102] veth0: entered promiscuous mode [ 213.046845][T12102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'. [ 213.106745][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'. [ 213.206805][T12117] vlan2: entered promiscuous mode [ 213.212993][T12117] bridge0: entered promiscuous mode [ 213.453614][T12130] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1692'. [ 213.532771][T12137] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1692'. [ 213.578966][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1695'. [ 213.633446][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 213.902918][T12161] netlink: 'syz.0.1699': attribute type 6 has an invalid length. [ 214.042840][T12166] netlink: 'syz.3.1703': attribute type 4 has an invalid length. [ 214.214607][T12171] netlink: 'syz.0.1706': attribute type 1 has an invalid length. [ 214.822562][T12208] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 214.881803][T12208] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 215.206738][T12223] geneve4: entered promiscuous mode [ 215.269714][ T57] netdevsim netdevsim2 netdevsim0: set [1, 3] type 2 family 0 port 35839 - 0 [ 215.280548][ T57] netdevsim netdevsim2 netdevsim1: set [1, 3] type 2 family 0 port 35839 - 0 [ 215.301635][ T57] netdevsim netdevsim2 netdevsim2: set [1, 3] type 2 family 0 port 35839 - 0 [ 215.329837][ T57] netdevsim netdevsim2 netdevsim3: set [1, 3] type 2 family 0 port 35839 - 0 [ 216.186450][T12268] veth1_to_bond: entered allmulticast mode [ 216.241519][T12268] __nla_validate_parse: 7 callbacks suppressed [ 216.241537][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1727'. [ 216.327303][T12272] TCP: TCP_TX_DELAY enabled [ 216.346966][T12268] veth1_to_bond (unregistering): left allmulticast mode [ 216.574218][T12274] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 216.594350][T12274] bond4 (unregistering): Released all slaves [ 216.973554][T12308] veth0: entered promiscuous mode [ 217.113667][T12321] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1739'. [ 217.127091][T12311] syzkaller0: entered promiscuous mode [ 217.148687][T12321] netlink: 320 bytes leftover after parsing attributes in process `syz.4.1739'. [ 217.171100][T12311] syzkaller0: entered allmulticast mode [ 217.210808][T12313] veth0: left promiscuous mode [ 217.246158][T12326] ipvlan0: entered promiscuous mode [ 217.381797][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1741'. [ 217.502553][T12342] tipc: Enabling of bearer rejected, failed to enable media [ 217.750203][T12355] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1748'. [ 217.929005][T12367] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1750'. [ 217.963069][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 218.028264][T12368] bond2: (slave veth0_to_bond): Releasing active interface [ 218.107403][T12375] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:21 [ 218.136587][T12375] IPVS: ip_vs_add_dest(): server weight less than zero [ 218.159857][T12374] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1754'. [ 218.216128][T12379] pim6reg: entered allmulticast mode [ 218.249138][T12385] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1758'. [ 218.260175][T12385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1758'. [ 218.273555][T12379] pim6reg: left allmulticast mode [ 218.556888][T12390] netlink: 'syz.2.1761': attribute type 1 has an invalid length. [ 218.740771][T12411] syzkaller0: entered promiscuous mode [ 218.769527][T12411] syzkaller0: entered allmulticast mode [ 218.942599][ T99] tipc: Subscription rejected, illegal request [ 219.398775][T12445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.537300][T12447] openvswitch: netlink: Missing key (keys=40, expected=80) [ 219.655845][T12455] tls_set_device_offload_rx: netdev not found [ 219.660129][T12462] x_tables: duplicate underflow at hook 2 [ 220.407225][T12490] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 222.884241][T12474] __nla_validate_parse: 19 callbacks suppressed [ 222.884263][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1784'. [ 222.915434][T12474] veth1: Caught tx_queue_len zero misconfig [ 223.236342][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1792'. [ 223.259664][T12520] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 223.382008][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1795'. [ 223.486155][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1796'. [ 223.587129][T12542] netlink: 'syz.0.1801': attribute type 9 has an invalid length. [ 223.791776][T12547] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1803'. [ 223.840715][T12551] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1804'. [ 223.985208][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1808'. [ 223.998537][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1808'. [ 224.255381][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'. [ 224.296633][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'. [ 225.132347][T12615] vlan3: entered allmulticast mode [ 225.144262][T12615] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 225.612550][T12648] veth0: entered promiscuous mode [ 225.633149][T12647] veth0: left promiscuous mode [ 225.744154][T12651] netlink: 'syz.4.1834': attribute type 1 has an invalid length. [ 225.825510][T12656] netlink: 'syz.4.1834': attribute type 11 has an invalid length. [ 225.863591][T12656] netlink: 'syz.4.1834': attribute type 5 has an invalid length. [ 225.956234][T12651] bond9: entered promiscuous mode [ 225.980531][T12651] 8021q: adding VLAN 0 to HW filter on device bond9 [ 226.060357][T12651] bond9: (slave bridge8): making interface the new active one [ 226.088376][T12651] bridge8: entered promiscuous mode [ 226.096828][T12651] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 226.467602][T12694] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20001 [ 226.492183][T12686] bridge_slave_1: left allmulticast mode [ 226.523109][T12686] bridge_slave_1: left promiscuous mode [ 226.546658][T12686] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.597557][T12686] bridge_slave_0: left allmulticast mode [ 226.609650][T12686] bridge_slave_0: left promiscuous mode [ 226.637831][T12686] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.685916][T12703] openvswitch: netlink: Key type 30 is not supported [ 227.042295][T12717] netlink: 'syz.1.1854': attribute type 5 has an invalid length. [ 227.070460][T12717] netlink: 'syz.1.1854': attribute type 6 has an invalid length. [ 227.163093][T12717] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 227.211815][T12726] xt_TCPMSS: Only works on TCP SYN packets [ 227.537237][T12745] netlink: 'syz.4.1862': attribute type 1 has an invalid length. [ 227.707611][T12745] 8021q: adding VLAN 0 to HW filter on device bond10 [ 228.015296][T12772] __nla_validate_parse: 15 callbacks suppressed [ 228.015315][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1871'. [ 228.028590][T12774] netlink: 'syz.4.1870': attribute type 1 has an invalid length. [ 228.091458][T12772] netlink: 'syz.0.1871': attribute type 2 has an invalid length. [ 228.149101][T12772] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1871'. [ 228.223503][T12777] ip6tnl0: Caught tx_queue_len zero misconfig [ 228.362590][T12795] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1876'. [ 228.419880][T12797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1879'. [ 228.565823][T12804] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 228.581291][T12804] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 228.805379][T12816] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1885'. [ 228.847388][T12822] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1885'. [ 229.189323][T12842] netlink: 'syz.2.1890': attribute type 24 has an invalid length. [ 229.214837][T12841] ipt_ECN: cannot use operation on non-tcp rule [ 229.803258][T12878] 8021q: VLANs not supported on lo [ 229.816736][T12883] netlink: 'syz.0.1904': attribute type 21 has an invalid length. [ 229.817043][T12884] netlink: 'syz.0.1904': attribute type 21 has an invalid length. [ 229.838306][T12884] IPv6: NLM_F_CREATE should be specified when creating new route [ 229.843794][T12878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1903'. [ 229.860602][T12885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1904'. [ 229.871611][T12884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1904'. [ 230.100807][T12891] tipc: Enabling of bearer rejected, failed to enable media [ 230.308687][T12905] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 230.335865][T12905] bond8 (unregistering): Released all slaves [ 230.817638][T12934] netlink: 'syz.1.1917': attribute type 1 has an invalid length. [ 230.898827][T12936] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1918'. [ 230.947131][T12934] IPv6: sit4: Disabled Multicast RS [ 231.048169][ T3306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.150511][T12993] bond8 (unregistering): Released all slaves [ 232.186287][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.261141][T10708] bond0: (slave bond_slave_1): interface is now down [ 232.327875][T10708] bond0: now running without any active interface! [ 232.438786][T13011] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 232.531122][T13011] sch_tbf: burst 46 is lower than device syzkaller0 mtu (1514) ! [ 232.559850][T13011] syzkaller0: entered promiscuous mode [ 232.573430][T13011] syzkaller0: entered allmulticast mode [ 232.630230][T12997] netlink: 'syz.1.1936': attribute type 10 has an invalid length. [ 232.726872][T13025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.753945][T13025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.773136][T13025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.807289][T13025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.821108][T13025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.839427][T13025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.858332][T13029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.877014][T13029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.160439][T13041] __nla_validate_parse: 8 callbacks suppressed [ 233.160458][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1949'. [ 233.212830][T13038] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 233.390129][T13038] netlink: 'syz.0.1947': attribute type 2 has an invalid length. [ 233.513082][T13061] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1955'. [ 233.638082][T13072] netlink: 'syz.3.1958': attribute type 2 has an invalid length. [ 233.655929][T13072] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1958'. [ 234.081916][T13096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1968'. [ 234.344479][T13110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1971'. [ 234.397767][T13112] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 234.439853][T13112] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 234.471763][T13112] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 234.487664][T13110] 8021q: adding VLAN 0 to HW filter on device bond8 [ 234.496656][T13112] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 234.513118][T13112] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 234.533872][T13112] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 234.539316][T13118] macvlan2: entered promiscuous mode [ 234.549826][T13118] macvlan2: entered allmulticast mode [ 234.550639][T13112] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 234.570360][T13112] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 234.587471][T13112] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 234.621383][T13112] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 234.696317][T13118] macvlan2: entered promiscuous mode [ 234.723421][T13118] macvlan2: entered allmulticast mode [ 234.839879][T13135] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.1977'. [ 234.874610][T13118] macvlan2: entered promiscuous mode [ 234.878457][T13140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1978'. [ 234.880601][T13118] macvlan2: entered allmulticast mode [ 234.920984][T13122] syzkaller1: entered promiscuous mode [ 234.942308][T13122] syzkaller1: entered allmulticast mode [ 234.973253][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1979'. [ 234.974386][T13135] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 234.991867][T13135] 0ªX¹¦Dö»: entered allmulticast mode [ 235.017027][ T3306] smc: removing ib device syz2 [ 235.055140][T13118] macvlan2: entered promiscuous mode [ 235.060612][T13118] macvlan2: entered allmulticast mode [ 235.073924][ T3306] smbdirect: ib_dev[syz2] removed [ 235.110889][ T8327] vxcan1 speed is unknown, defaulting to 1000 [ 235.120393][T13145] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.124530][ T8327] syz2: Port: 1 Link DOWN [ 235.159751][T13145] bridge_slave_0 (unregistering): left allmulticast mode [ 235.185418][T13145] bridge_slave_0 (unregistering): left promiscuous mode [ 235.206151][T13145] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.272746][T13147] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1980'. [ 235.320851][T13118] macvlan2: entered promiscuous mode [ 235.343921][T13118] macvlan2: entered allmulticast mode [ 235.666314][T13160] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 235.684578][T13159] netlink: 'syz.2.1984': attribute type 3 has an invalid length. [ 235.744942][T13159] netlink: 'syz.2.1984': attribute type 3 has an invalid length. [ 235.873462][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1987'. [ 236.024064][T13178] netlink: 'syz.0.1990': attribute type 1 has an invalid length. [ 236.472811][T13188] macvlan0: entered promiscuous mode [ 236.513416][T13188] macvlan0: entered allmulticast mode [ 237.193284][T13218] netlink: 'syz.4.2003': attribute type 27 has an invalid length. [ 237.587174][T13236] x_tables: duplicate underflow at hook 1 [ 237.796963][ T3384] net_ratelimit: 8 callbacks suppressed [ 237.796983][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.111394][T13258] bridge_slave_0: left allmulticast mode [ 238.118505][T13258] bridge_slave_0: left promiscuous mode [ 238.124518][T13258] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.174230][T13258] bridge_slave_1: left allmulticast mode [ 238.189438][T13258] bridge_slave_1: left promiscuous mode [ 238.200658][T13258] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.257879][T13262] netlink: 'syz.2.2014': attribute type 1 has an invalid length. [ 238.271069][T13262] __nla_validate_parse: 17 callbacks suppressed [ 238.271088][T13262] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2014'. [ 238.288140][T13258] bond0: (slave bond_slave_0): Releasing backup interface [ 238.297433][T13262] NCSI netlink: No device for ifindex 0 [ 238.309967][T13258] bond0: (slave bond_slave_1): Releasing backup interface [ 238.341504][T13262] xt_l2tp: invalid flags combination: 0 [ 238.350402][T13258] team0: Port device team_slave_0 removed [ 238.388897][T13258] team0: Port device team_slave_1 removed [ 238.407013][T13258] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.674545][T13283] netlink: 'syz.0.2019': attribute type 2 has an invalid length. [ 238.889367][T13292] netlink: 'syz.4.2023': attribute type 7 has an invalid length. [ 238.931595][T13292] netlink: 'syz.4.2023': attribute type 7 has an invalid length. [ 238.947163][ T99] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.165035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.193501][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2027'. [ 239.641534][T13333] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2033'. [ 239.814162][T13346] netlink: 'syz.1.2037': attribute type 1 has an invalid length. [ 239.886650][T13346] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 239.890874][T13353] tipc: New replicast peer: 255.255.255.255 [ 239.939075][T13353] tipc: Enabled bearer , priority 10 [ 240.002677][T13357] netlink: 'syz.0.2039': attribute type 1 has an invalid length. [ 240.065185][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.097866][T13373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2041'. [ 240.150320][T13365] bond8: entered promiscuous mode [ 240.156877][T13365] bond8: entered allmulticast mode [ 240.162743][T13365] 8021q: adding VLAN 0 to HW filter on device bond8 [ 240.181034][T13374] bond0: Caught tx_queue_len zero misconfig [ 240.207032][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.231499][T13375] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.264454][T13383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2043'. [ 240.471558][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2047'. [ 240.502886][T13395] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2047'. [ 241.176728][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.554614][T13453] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2060'. [ 241.813194][T13468] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 241.852227][T13472] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 241.858988][T13468] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 241.937154][T13476] nbd: socks must be embedded in a SOCK_ITEM attr [ 241.966246][T13478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2067'. [ 242.228345][T13482] veth1: entered allmulticast mode [ 242.284996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.295085][ T3347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.314470][T13492] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2071'. [ 242.627350][T13511] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 242.688166][T13511] netlink: 'syz.4.2078': attribute type 1 has an invalid length. [ 242.764866][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 242.923967][T13526] batadv_slave_0: Caught tx_queue_len zero misconfig [ 242.988448][T13526] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 243.019978][T13531] netlink: 'syz.3.2082': attribute type 1 has an invalid length. [ 243.038440][T13526] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 243.056978][T13531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.064990][T13531] IPv6: NLM_F_CREATE should be set when creating new route [ 243.079899][T13539] netlink: 'syz.3.2082': attribute type 1 has an invalid length. [ 243.086548][T13526] team0: Failed to send options change via netlink (err -105) [ 243.098095][T13526] team0: Port device batadv1 added [ 243.110971][T13539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.134385][T13535] sch_fq: defrate 0 ignored. [ 243.436374][ T3347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.485542][T13555] __nla_validate_parse: 3 callbacks suppressed [ 243.485560][T13555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2091'. [ 243.513612][T13557] netlink: 'syz.1.2094': attribute type 1 has an invalid length. [ 243.516885][T13561] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2093'. [ 243.531779][T13557] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2094'. [ 243.539990][T13561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2093'. [ 243.568158][T13561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2093'. [ 243.589293][T13561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2093'. [ 243.646662][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2091'. [ 243.685377][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2091'. [ 243.704302][T13555] netlink: 'syz.3.2091': attribute type 3 has an invalid length. [ 244.286434][T13611] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.2103'. [ 244.318814][T13611] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 244.362991][T13611] 0ªX¹¦Dö»: entered allmulticast mode [ 244.585049][ T3306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.903913][T13654] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 244.916894][T13654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.080377][T13663] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 245.274331][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2125'. [ 245.715143][ T3306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.885097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.967639][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.460814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.470866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.488849][T13689] infiniband syz2: set down [ 246.493972][T13689] infiniband syz2: added ipvlan0 [ 246.501095][T13689] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 246.512111][T13689] infiniband syz2: Couldn't open port 1 [ 246.527340][T13689] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 246.543727][T13689] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 246.562863][T13689] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 246.632414][T13689] RDS/IB: syz2: added [ 246.641307][T13689] smc: adding ib device syz2 with port count 1 [ 246.650429][T13689] smc: ib device syz2 port 1 has no pnetid [ 247.878115][T13773] sctp: [Deprecated]: syz.4.2152 (pid 13773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.878115][T13773] Use struct sctp_sack_info instead [ 248.243491][T13798] xt_NFQUEUE: number of total queues is 0 [ 248.506781][T13810] __nla_validate_parse: 19 callbacks suppressed [ 248.506799][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2163'. [ 248.564915][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2163'. [ 248.702157][T13817] syz_tun: entered allmulticast mode [ 248.808951][T13825] xt_l2tp: v2 tid > 0xffff: 1114244 [ 248.848779][T13825] xt_hashlimit: size too large, truncated to 1048576 [ 249.005139][ T24] net_ratelimit: 8 callbacks suppressed [ 249.005156][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.048219][T13835] netlink: 'syz.4.2171': attribute type 1 has an invalid length. [ 249.169464][T13841] bond12: (slave bridge10): making interface the new active one [ 249.169708][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.188470][T13841] bond12: (slave bridge10): Enslaving as an active interface with an up link [ 249.189411][T10715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.233422][T13843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2173'. [ 249.564931][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.576589][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.585088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.593521][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.672928][T13855] netlink: 'syz.2.2179': attribute type 21 has an invalid length. [ 249.681198][T13855] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2179'. [ 249.698543][T13856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.814422][T13858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2178'. [ 249.909637][T13858] macvlan2: entered promiscuous mode [ 249.936543][T13858] macvlan2: entered allmulticast mode [ 250.045904][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.335403][T10710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.442119][T13877] vcan1: entered allmulticast mode [ 250.951016][T13898] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2192'. [ 250.992639][T13902] netlink: 'syz.2.2194': attribute type 1 has an invalid length. [ 251.143153][T13903] syzkaller0: entered promiscuous mode [ 251.145137][T13894] nbd0: detected capacity change from 0 to 63 [ 251.149177][T13903] syzkaller0: entered allmulticast mode [ 251.174913][ T5647] block nbd0: Receive control failed (result -32) [ 251.174960][ T5636] block nbd0: Receive control failed (result -32) [ 251.194145][ T5634] block nbd0: Send control failed (result -32) [ 251.223870][ T5634] block nbd0: Request send failed, requeueing [ 251.275175][ T11] block nbd0: Dead connection, failed to find a fallback [ 251.285906][ T11] block nbd0: shutting down sockets [ 251.291896][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.304473][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 251.316883][ T5634] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.327762][ T5634] Buffer I/O error on dev nbd0, logical block 1, async page read [ 251.336833][ T5634] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.348819][ T5634] Buffer I/O error on dev nbd0, logical block 2, async page read [ 251.357108][ T5634] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.366343][ T5634] Buffer I/O error on dev nbd0, logical block 3, async page read [ 251.376285][ T5634] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.386218][ T5634] Buffer I/O error on dev nbd0, logical block 0, async page read [ 251.394164][ T5634] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.403517][ T5634] Buffer I/O error on dev nbd0, logical block 1, async page read [ 251.418916][ T5634] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.429392][ T5634] Buffer I/O error on dev nbd0, logical block 2, async page read [ 251.438711][ T5634] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.447952][ T5634] Buffer I/O error on dev nbd0, logical block 3, async page read [ 251.456338][ T5634] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.466011][ T5634] Buffer I/O error on dev nbd0, logical block 0, async page read [ 251.474192][ T5634] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.483728][ T5634] Buffer I/O error on dev nbd0, logical block 1, async page read [ 251.511927][ T5634] ldm_validate_partition_table(): Disk read failed. [ 251.539251][ T5634] Dev nbd0: unable to read RDB block 0 [ 251.559022][ T5634] nbd0: unable to read partition table [ 251.638625][ T5634] ldm_validate_partition_table(): Disk read failed. [ 251.692188][ T5634] Dev nbd0: unable to read RDB block 0 [ 251.711614][ T5634] nbd0: unable to read partition table [ 254.208927][ T24] net_ratelimit: 16 callbacks suppressed [ 254.208947][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.675393][T13932] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 254.835462][T10715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.007765][T13943] syzkaller1: entered promiscuous mode [ 255.022842][T13943] syzkaller1: entered allmulticast mode [ 255.051755][T13955] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 255.115881][T13952] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.130368][T13952] wireguard: wg0: Could not create IPv4 socket [ 255.137855][T13952] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 255.246077][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.354319][T13965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.485904][T13978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2215'. [ 255.643011][T13983] netlink: 'syz.4.2217': attribute type 4 has an invalid length. [ 255.679247][T13983] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2217'. [ 255.699621][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2218'. [ 255.894927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.903447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.911849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.920353][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.167016][T14021] netlink: 'syz.3.2227': attribute type 1 has an invalid length. [ 256.176661][T14021] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2227'. [ 256.191465][T14021] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2227'. [ 256.201058][T14021] netlink: 'syz.3.2227': attribute type 1 has an invalid length. [ 256.211277][T14021] netlink: 'syz.3.2227': attribute type 8 has an invalid length. [ 256.219649][T14021] netlink: 582 bytes leftover after parsing attributes in process `syz.3.2227'. [ 256.232871][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2228'. [ 256.246547][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2228'. [ 256.256869][T14022] netlink: 'syz.0.2228': attribute type 3 has an invalid length. [ 256.625560][T14038] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 256.648476][T14041] : renamed from bond0 [ 256.676813][T14045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2237'. [ 256.690084][T14043] netlink: 372 bytes leftover after parsing attributes in process `syz.0.2236'. [ 256.861932][T14057] netlink: 'syz.1.2239': attribute type 1 has an invalid length. [ 257.055516][T14057] 8021q: adding VLAN 0 to HW filter on device bond7 [ 258.287454][T14145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.352585][T14145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.372431][ T5768] IPVS: starting estimator thread 0... [ 258.472746][T14152] erspan0: entered promiscuous mode [ 258.475338][T14153] IPVS: using max 33 ests per chain, 79200 per kthread [ 258.756557][T14172] netlink: 'syz.0.2271': attribute type 1 has an invalid length. [ 258.788482][T14172] netlink: 'syz.0.2271': attribute type 1 has an invalid length. [ 258.881349][T14178] netem: change failed [ 258.960578][T14184] xt_l2tp: v2 sid > 0xffff: 1114112 [ 259.358702][T10714] net_ratelimit: 56 callbacks suppressed [ 259.358722][T10714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.451089][T14211] netlink: 'syz.4.2279': attribute type 1 has an invalid length. [ 259.503521][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.567398][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.647800][T14217] xt_hashlimit: size too large, truncated to 1048576 [ 259.996613][T14213] bond14 (unregistering): Released all slaves [ 260.163132][T14233] team0: mtu less than device minimum [ 260.231997][T14233] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 260.250992][T14233] bond4 (unregistering): Released all slaves [ 260.516017][T10710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.519110][T14247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.539634][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.577376][T14249] __nla_validate_parse: 13 callbacks suppressed [ 260.577394][T14249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2287'. [ 260.664488][T14256] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2290'. [ 260.913934][T14276] netlink: 'syz.3.2297': attribute type 1 has an invalid length. [ 260.940231][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2297'. [ 260.961844][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2297'. [ 260.991817][T14276] netlink: 'syz.3.2297': attribute type 2 has an invalid length. [ 261.017845][T14276] netlink: 'syz.3.2297': attribute type 2 has an invalid length. [ 261.040386][T14276] netlink: 'syz.3.2297': attribute type 2 has an invalid length. [ 261.123045][T14288] xt_hashlimit: size too large, truncated to 1048576 [ 261.236960][T14295] IPv6: sit1: Disabled Multicast RS [ 261.262130][T14295] sit1: entered allmulticast mode [ 261.324970][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.512598][T14305] netlink: 'syz.4.2302': attribute type 1 has an invalid length. [ 261.565690][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.647169][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.657199][T14315] pim6reg: entered allmulticast mode [ 261.718517][T14327] netlink: 'syz.2.2308': attribute type 3 has an invalid length. [ 261.757861][T14327] netlink: 'syz.2.2308': attribute type 3 has an invalid length. [ 261.920084][T14335] sctp: [Deprecated]: syz.4.2311 (pid 14335) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.920084][T14335] Use struct sctp_sack_info instead [ 261.934312][T14339] tipc: Enabling of bearer rejected, already enabled [ 261.963448][T14339] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2313'. [ 262.070538][T14345] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2316'. [ 262.112215][T14346] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2316'. [ 262.211298][T14346] tap0: tun_chr_ioctl cmd 1074025673 [ 262.217800][T14356] netlink: 'syz.4.2319': attribute type 1 has an invalid length. [ 262.227876][T14353] netlink: 'syz.1.2318': attribute type 1 has an invalid length. [ 262.235258][T14356] netlink: 'syz.4.2319': attribute type 4 has an invalid length. [ 262.247047][T14345] tap0: tun_chr_ioctl cmd 2148553947 [ 262.247282][T14356] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2319'. [ 262.354555][T14353] bond8: entered promiscuous mode [ 262.378712][T14353] 8021q: adding VLAN 0 to HW filter on device bond8 [ 262.469602][T14360] bond8: (slave bridge6): making interface the new active one [ 262.510161][T14360] bridge6: entered promiscuous mode [ 262.528464][T14360] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 262.549965][T14369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2321'. [ 262.785661][T14378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2326'. [ 262.893414][T14380] 8021q: adding VLAN 0 to HW filter on device bond9 [ 262.923214][T14385] xt_hashlimit: size too large, truncated to 1048576 [ 262.991968][T14382] bond9: (slave geneve2): making interface the new active one [ 263.030193][T14382] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 263.075875][T14396] IPVS: set_ctl: invalid protocol: 60 172.20.20.33:20003 [ 263.457703][T14405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.630221][T14408] 8021q: adding VLAN 0 to HW filter on device bond9 [ 263.669162][T14408] bond0: (slave bond9): Enslaving as an active interface with an up link [ 263.707043][T14412] bond0 (unregistering): (slave bond9): Releasing backup interface [ 263.729790][T14412] bond0 (unregistering): Released all slaves [ 264.686350][ T24] net_ratelimit: 13 callbacks suppressed [ 264.686368][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.037147][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.100133][T10715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.112568][T10715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.235377][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.350031][T14506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.362475][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.422965][T14508] ip6tnl1: entered promiscuous mode [ 265.528246][T14513] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 265.646393][ T8308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.726396][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.888988][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.005507][T14539] validate_nla: 6 callbacks suppressed [ 266.005525][T14539] netlink: 'syz.4.2368': attribute type 1 has an invalid length. [ 266.034550][T14539] __nla_validate_parse: 16 callbacks suppressed [ 266.034569][T14539] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2368'. [ 266.239524][T14551] netlink: 404 bytes leftover after parsing attributes in process `syz.2.2372'. [ 266.259076][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2372'. [ 266.466728][T14560] netlink: 'syz.1.2376': attribute type 1 has an invalid length. [ 266.578876][T14558] IPVS: set_ctl: invalid protocol: 44 172.20.20.15:19999 [ 266.642589][T14560] bond9: entered promiscuous mode [ 266.650406][T14560] 8021q: adding VLAN 0 to HW filter on device bond9 [ 266.660887][T14562] syzkaller1: entered promiscuous mode [ 266.667543][T14562] syzkaller1: entered allmulticast mode [ 266.791984][T14576] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2379'. [ 266.928832][T10714] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.937272][T10714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.078188][T14588] Unsupported ieee802154 address type: 0 [ 267.179506][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2384'. [ 267.409786][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2386'. [ 267.577445][T14597] bond3: (slave lo): Releasing backup interface [ 267.672565][T14597] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 267.751065][T14597] bridge_slave_0: left allmulticast mode [ 267.779399][T14597] bridge_slave_0: left promiscuous mode [ 267.802724][T14597] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.825858][T14611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.849414][T14597] bridge_slave_1: left allmulticast mode [ 267.860310][T14597] bridge_slave_1: left promiscuous mode [ 267.869604][T14597] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.886714][T14597] bond0: (slave bond_slave_0): Releasing backup interface [ 267.894838][T14597] bond_slave_0: left allmulticast mode [ 267.910969][T14597] bond0: (slave bond_slave_1): Releasing backup interface [ 267.920964][T14597] bond_slave_1: left allmulticast mode [ 267.942766][T14597] team0: Port device team_slave_1 removed [ 267.949697][T14597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.958424][T14597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.105609][T14620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2394'. [ 268.547404][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2400'. [ 268.557800][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2400'. [ 268.628728][T14640] netlink: 'syz.4.2398': attribute type 2 has an invalid length. [ 268.678592][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2398'. [ 268.916836][T14661] syzkaller0: entered promiscuous mode [ 268.932566][T14661] syzkaller0: entered allmulticast mode [ 268.973452][T14668] netlink: 'syz.3.2406': attribute type 1 has an invalid length. [ 268.983341][T14668] netlink: 'syz.3.2406': attribute type 1 has an invalid length. [ 268.998358][T14668] netlink: 'syz.3.2406': attribute type 8 has an invalid length. [ 269.183811][T14675] netlink: 'syz.4.2409': attribute type 1 has an invalid length. [ 269.378139][T14675] bond15: entered promiscuous mode [ 269.445289][T14675] 8021q: adding VLAN 0 to HW filter on device bond15 [ 269.499169][T14682] bond15: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 269.539853][T14682] bond15: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 269.583302][T14682] bond15: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 269.661063][T14698] macsec0: entered promiscuous mode [ 269.677354][T14698] macsec0: entered allmulticast mode [ 269.712118][T14708] veth1_macvtap: entered allmulticast mode [ 269.730981][T14708] macsec0: left promiscuous mode [ 269.738611][T14708] macsec0: left allmulticast mode [ 269.743836][T14708] veth1_macvtap: left allmulticast mode [ 269.886142][ T5768] net_ratelimit: 15 callbacks suppressed [ 269.886160][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.262612][T14730] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 270.965659][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.172257][T14764] __nla_validate_parse: 8 callbacks suppressed [ 271.174123][T14764] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.2430'. [ 271.237748][T14764] blkio.reset_stats is deprecated [ 271.519858][T14781] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2434'. [ 271.725846][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.741574][T14784] netlink: 'syz.3.2435': attribute type 1 has an invalid length. [ 271.947155][T14798] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 272.056761][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.257134][T14813] tipc: Enabled bearer , priority 0 [ 272.289461][T14813] syzkaller0: entered promiscuous mode [ 272.308422][T14813] syzkaller0: entered allmulticast mode [ 272.369934][T14813] tipc: Resetting bearer [ 272.408013][T14812] tipc: Resetting bearer [ 272.443073][T14812] tipc: Disabling bearer [ 272.480018][T14824] macvlan5: entered promiscuous mode [ 272.488579][T14824] macvlan5: entered allmulticast mode [ 272.696400][T14835] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.2446'. [ 272.718009][T14837] netlink: 'syz.2.2448': attribute type 32 has an invalid length. [ 272.962135][T14853] netlink: del zone limit has 8 unknown bytes [ 273.085749][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.183946][T14869] tipc: Enabled bearer , priority 0 [ 273.244374][T14869] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 273.254461][T14869] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 273.273455][T14869] tipc: Resetting bearer [ 273.282095][T14872] tc action pedit offset must be on 32 bit boundaries [ 273.291294][T14872] tc action pedit offset must be on 32 bit boundaries [ 273.298710][T14872] tc action pedit offset must be on 32 bit boundaries [ 273.305649][T14872] tc action pedit offset must be on 32 bit boundaries [ 273.312516][T14872] tc action pedit offset must be on 32 bit boundaries [ 273.320857][T14872] tc action pedit offset must be on 32 bit boundaries [ 273.328448][T14872] tc action pedit offset must be on 32 bit boundaries [ 273.335594][T14872] tc action pedit offset must be on 32 bit boundaries [ 273.342379][T14872] tc action pedit offset must be on 32 bit boundaries [ 273.349226][T14872] tc action pedit offset must be on 32 bit boundaries [ 273.356239][T14872] 0: reclassify loop, rule prio 0, protocol 800 [ 273.524302][T14888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2459'. [ 273.578893][T14888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2459'. [ 273.621086][T14888] 0ªX¹¦Dö»: entered promiscuous mode [ 273.647193][T14888] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 273.731841][T14892] batadv1: entered allmulticast mode [ 273.941892][T14901] netlink: 'syz.2.2465': attribute type 28 has an invalid length. [ 273.975916][T14901] netlink: 'syz.2.2465': attribute type 3 has an invalid length. [ 273.995245][T14901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2465'. [ 274.052456][T14901] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2465'. [ 274.062481][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2465'. [ 274.128194][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.207420][T14909] tipc: Enabled bearer , priority 0 [ 274.233471][T14909] syzkaller0: entered promiscuous mode [ 274.248212][T14914] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 274.252755][T14909] syzkaller0: entered allmulticast mode [ 274.267771][ T8327] tipc: Node number set to 2889566585 [ 274.284518][T14909] tipc: Resetting bearer [ 274.301578][T14908] tipc: Resetting bearer [ 274.352592][T14908] tipc: Disabling bearer [ 274.624294][T14930] netlink: 'syz.1.2476': attribute type 1 has an invalid length. [ 274.668459][T14930] netlink: 'syz.1.2476': attribute type 83 has an invalid length. [ 274.683784][T14936] v: renamed from nlmon0 [ 274.753113][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2481'. [ 274.766734][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.798038][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2481'. [ 274.898217][T14950] netlink: 'syz.1.2482': attribute type 10 has an invalid length. [ 275.165750][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.580462][T14991] netlink: 'syz.1.2492': attribute type 1 has an invalid length. [ 276.207743][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.423471][T15038] bond_slave_0: Caught tx_queue_len zero misconfig [ 276.477952][T15038] __nla_validate_parse: 7 callbacks suppressed [ 276.477969][T15038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2502'. [ 276.847430][T15055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2509'. [ 277.022916][T15055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2509'. [ 277.134411][T15067] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2512'. [ 277.176440][T15069] netlink: 'syz.4.2514': attribute type 1 has an invalid length. [ 277.196415][T15069] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2514'. [ 277.226590][T15069] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2514'. [ 277.245742][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.274476][T15069] netlink: 658 bytes leftover after parsing attributes in process `syz.4.2514'. [ 277.592537][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2519'. [ 277.619029][T15090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2519'. [ 277.621693][T15088] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2520'. [ 277.636506][T15091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.690128][T15096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.699606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.738517][T15093] tipc: Enabled bearer , priority 0 [ 277.762791][T15093] syzkaller0: entered promiscuous mode [ 277.778934][T15093] syzkaller0: entered allmulticast mode [ 277.811438][ T8308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.837149][T15093] tipc: Resetting bearer [ 277.863992][T15092] tipc: Resetting bearer [ 277.910903][T15092] tipc: Disabling bearer [ 277.968230][ T8308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.094419][T15109] IPv6: NLM_F_CREATE should be specified when creating new route [ 278.286054][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.501618][T15136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.538148][T15139] team0: Caught tx_queue_len zero misconfig [ 278.579863][T15142] Bluetooth: MGMT ver 1.23 [ 278.599349][T15139] netlink: 'syz.2.2536': attribute type 2 has an invalid length. [ 278.705816][T15139] veth5: entered promiscuous mode [ 278.718741][T15139] veth5: entered allmulticast mode [ 278.849481][T15148] 0ªX¹¦Dö»: left allmulticast mode [ 279.043345][T15148] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.195373][T15152] tipc: Enabled bearer , priority 0 [ 279.205814][T15145] syzkaller0: entered promiscuous mode [ 279.219807][T15145] syzkaller0: entered allmulticast mode [ 279.232705][T15161] tipc: Resetting bearer [ 279.279176][T15144] tipc: Resetting bearer [ 279.376188][T15144] tipc: Disabling bearer [ 279.634513][T15190] netlink: 'syz.0.2548': attribute type 9 has an invalid length. [ 279.745569][T15197] tipc: Enabled bearer , priority 10 [ 280.038164][T15210] netlink: 'syz.1.2555': attribute type 1 has an invalid length. [ 280.132851][T15218] netlink: 'syz.4.2557': attribute type 9 has an invalid length. [ 280.265776][T15222] tipc: Enabled bearer , priority 0 [ 280.280561][T15222] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 280.288954][T15227] netlink: 'syz.4.2559': attribute type 26 has an invalid length. [ 280.298148][T15222] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 280.316365][T15227] netlink: 'syz.4.2559': attribute type 26 has an invalid length. [ 280.365665][ T24] net_ratelimit: 43 callbacks suppressed [ 280.365683][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.382288][T15228] syzkaller0: entered promiscuous mode [ 280.391052][T15228] syzkaller0: entered allmulticast mode [ 280.406972][T15222] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 280.845223][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.415675][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.468818][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.452500][T15238] tipc: Resetting bearer [ 283.461169][T15243] xfrm0: Caught tx_queue_len zero misconfig [ 283.678782][T15256] __nla_validate_parse: 9 callbacks suppressed [ 283.678800][T15256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2567'. [ 283.724425][T15261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.815386][T15269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2567'. [ 283.851695][T15271] netlink: 'syz.3.2573': attribute type 4 has an invalid length. [ 283.884163][T15271] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2573'. [ 284.019469][T15286] xt_hashlimit: size too large, truncated to 1048576 [ 284.228470][T15294] tipc: Enabled bearer , priority 0 [ 284.264559][T15294] syzkaller0: entered promiscuous mode [ 284.300378][T15294] syzkaller0: entered allmulticast mode [ 284.322700][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2578'. [ 284.337097][T15301] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 284.342518][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2578'. [ 284.439883][T15294] tipc: Resetting bearer [ 284.443497][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2582'. [ 284.474364][T15293] tipc: Resetting bearer [ 284.489048][T15302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2581'. [ 284.538270][T15293] tipc: Disabling bearer [ 285.281709][T15341] netlink: 'syz.4.2595': attribute type 21 has an invalid length. [ 285.290824][T15341] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2595'. [ 285.395709][T15346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2596'. [ 285.416835][T15348] ipt_REJECT: ECHOREPLY no longer supported. [ 285.424286][T15348] ipt_REJECT: ECHOREPLY no longer supported. [ 285.572283][T15352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2599'. [ 285.618157][T15352] openvswitch: netlink: IP tunnel dst address not specified [ 286.906285][T15405] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 306.765020][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 313.217628][T15466] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 313.232466][T15474] __nla_validate_parse: 2 callbacks suppressed [ 313.232483][T15474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2631'. [ 313.257217][T15466] syzkaller1: Refused to change device type [ 313.671489][T15491] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 313.717179][T15491] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 313.740000][T15491] gretap0: entered promiscuous mode [ 313.749075][T15491] gretap0: entered allmulticast mode [ 313.972679][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2644'. [ 314.159337][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2647'. [ 314.199394][T15519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.282939][T15519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.332265][T15528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2650'. [ 314.343418][T15531] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2652'. [ 314.427719][T15536] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2653'. [ 314.542538][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2654'. [ 314.617379][T15547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2657'. [ 314.646000][T15547] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 314.741197][T15553] sock: sock_set_timeout: `syz.3.2660' (pid 15553) tries to set negative timeout [ 315.110181][T15578] openvswitch: netlink: IP tunnel dst address not specified [ 315.271185][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2669'. [ 315.300930][T15592] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2671'. [ 315.338143][T15591] can: request_module (can-proto-0) failed. [ 315.742196][T15614] atomic_op ffff88803539c198 conn xmit_atomic 0000000000000000 [ 316.050781][T13763] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 316.093120][T13763] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.151614][T15632] netlink: zone id is out of range [ 316.172747][T15632] netlink: zone id is out of range [ 316.194129][T15632] netlink: zone id is out of range [ 316.218064][T15632] netlink: zone id is out of range [ 316.258109][T15632] netlink: zone id is out of range [ 316.270592][T15632] netlink: zone id is out of range [ 316.282754][T15632] netlink: zone id is out of range [ 316.844411][T15684] netlink: 'syz.1.2700': attribute type 6 has an invalid length. [ 317.609269][T15712] netlink: 'syz.1.2709': attribute type 16 has an invalid length. [ 318.173330][T15750] netlink: 'syz.0.2719': attribute type 14 has an invalid length. [ 318.244006][T15754] netlink: 'syz.0.2720': attribute type 1 has an invalid length. [ 318.326167][T15754] 8021q: adding VLAN 0 to HW filter on device bond5 [ 318.330533][T15725] infiniband syz0: set active [ 318.352582][T15725] infiniband syz0: added bridge_slave_1 [ 318.456323][T15725] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 318.507760][T15725] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 318.534074][T15725] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 318.643532][T15776] __nla_validate_parse: 10 callbacks suppressed [ 318.643548][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2726'. [ 318.661923][T15778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2727'. [ 318.682480][T15778] tipc: Invalid UDP bearer configuration [ 318.682543][T15778] tipc: Enabling of bearer rejected, failed to enable media [ 318.693112][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2726'. [ 318.717757][T15725] RDS/IB: syz0: added [ 318.732532][T15782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2726'. [ 318.746463][T15725] smc: adding ib device syz0 with port count 1 [ 318.781904][T15725] smc: ib device syz0 port 1 has no pnetid [ 318.790427][T15782] block nbd1: Unsupported socket: should be TCP or UNIX. [ 318.858440][T15790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.083033][T15797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2730'. [ 319.108670][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2732'. [ 319.142352][T15806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2732'. [ 319.636425][T15833] netlink: 'syz.2.2743': attribute type 12 has an invalid length. [ 319.702691][T15833] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 344.701196][T15862] xt_hashlimit: size too large, truncated to 1048576 [ 344.721185][T15866] net_ratelimit: 54 callbacks suppressed [ 344.721203][T15866] openvswitch: netlink: Key type 30 is not supported [ 345.517957][T15913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2759'. [ 345.578702][ T30] audit: type=1800 audit(1780511526.203:5): pid=15917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2762" name="memory.events" dev="tmpfs" ino=2634 res=0 errno=0 [ 345.624813][ T30] audit: type=1804 audit(1780511526.233:6): pid=15917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2762" name="/newroot/514/memory.events" dev="tmpfs" ino=2634 res=1 errno=0 [ 345.850188][T15924] x_tables: duplicate underflow at hook 1 [ 346.142469][T15935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2768'. [ 346.626228][T15963] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2774'. [ 346.780660][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2775'. [ 347.139275][T15955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.148790][T15990] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.2782'. [ 347.181399][T15991] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.2782'. [ 347.521928][T16009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2790'. [ 347.531739][T16009] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2790'. [ 347.838876][T16031] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 347.849216][T16031] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 348.050888][T16046] macvtap1: entered promiscuous mode [ 348.061819][T16046] macvtap1: entered allmulticast mode [ 348.080467][T16046] veth1_vlan: entered allmulticast mode [ 348.108808][T16051] macvtap2: entered promiscuous mode [ 348.114232][T16051] macvtap2: entered allmulticast mode [ 348.170394][T16056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2804'. [ 348.355656][ T8327] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 348.724365][T16084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2813'. [ 348.739957][T16065] netlink: 'syz.1.2807': attribute type 11 has an invalid length. [ 349.406926][ T8327] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 349.630375][T16126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.750527][T16136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.869827][T16139] netlink: 'syz.0.2833': attribute type 1 has an invalid length. [ 350.088643][T16156] netlink: 'syz.2.2838': attribute type 10 has an invalid length. [ 350.103696][T16156] syz_tun: entered promiscuous mode [ 350.142028][T16161] netlink: 'syz.1.2837': attribute type 1 has an invalid length. [ 350.384202][ T5647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 350.401138][ T5647] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 350.412896][ T5647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 350.425229][ T5647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 350.432885][ T5647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 350.467436][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 350.480008][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 350.491681][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 350.501043][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 350.510376][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 351.111830][T16197] netlink: 'syz.0.2849': attribute type 1 has an invalid length. [ 351.139480][T16197] netlink: 'syz.0.2849': attribute type 4 has an invalid length. [ 351.156850][ T5630] syz_tun (unregistering): left allmulticast mode [ 351.157161][T16197] __nla_validate_parse: 8 callbacks suppressed [ 351.157224][T16197] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2849'. [ 351.207646][T16186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.247087][T16203] openvswitch: netlink: IP tunnel dst address not specified [ 351.401724][T16207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2851'. [ 351.471174][T16210] netlink: 'syz.1.2852': attribute type 21 has an invalid length. [ 351.929340][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2856'. [ 352.043721][T16230] netlink: 'syz.0.2857': attribute type 5 has an invalid length. [ 352.230553][T16241] netlink: 'syz.0.2860': attribute type 1 has an invalid length. [ 352.259305][T16240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.500994][T16254] netlink: 'syz.0.2863': attribute type 1 has an invalid length. [ 352.539773][T16256] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 352.604817][ T5636] Bluetooth: hci5: command tx timeout [ 352.780240][T16254] netlink: 1116 bytes leftover after parsing attributes in process `syz.0.2863'. [ 352.846608][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 353.156243][T16294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.213069][T16264] syzkaller0: entered promiscuous mode [ 353.220502][T16264] syzkaller0: entered allmulticast mode [ 354.685563][ T5636] Bluetooth: hci5: command tx timeout [ 355.288285][T16317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2875'. [ 355.302758][T16319] netlink: 'syz.3.2874': attribute type 1 has an invalid length. [ 355.354496][T16319] netlink: 'syz.3.2874': attribute type 2 has an invalid length. [ 355.389507][T16319] netlink: 'syz.3.2874': attribute type 1 has an invalid length. [ 355.397902][T16319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2874'. [ 355.605646][T16336] bridge: RTM_NEWNEIGH with invalid ether address [ 355.769441][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2883'. [ 355.939059][T16353] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 356.030894][T16362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2884'. [ 356.049560][T16363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2887'. [ 356.054401][T16167] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.069032][T16167] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.077835][T16167] bridge_slave_0: entered allmulticast mode [ 356.085680][T16167] bridge_slave_0: entered promiscuous mode [ 356.094299][T16167] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.101571][T16167] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.109464][T16167] bridge_slave_1: entered allmulticast mode [ 356.117583][T16167] bridge_slave_1: entered promiscuous mode [ 356.409905][T16167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.440721][T16167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.498871][T16378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.645033][T16167] team0: Port device team_slave_0 added [ 356.665327][T16167] team0: Port device team_slave_1 added [ 356.769768][ T5636] Bluetooth: hci5: command tx timeout [ 356.812320][T16398] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001 [ 356.904166][T16167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.913501][T16167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.981905][T16167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.001069][T16167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.010418][T16167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.042367][T16167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.052179][T16415] netlink: 'syz.1.2898': attribute type 2 has an invalid length. [ 357.060717][T16407] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2896'. [ 357.078573][T16410] Cannot find set identified by id 3 to match [ 357.163028][T16167] hsr_slave_0: entered promiscuous mode [ 357.198414][T16167] hsr_slave_1: entered promiscuous mode [ 357.210779][T16167] debugfs: 'hsr0' already exists in 'hsr' [ 357.222847][T16167] Cannot create hsr debugfs directory [ 357.404115][T16431] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2903'. [ 357.418541][T16431] Cannot find add_set index 65532 as target [ 357.593164][T16440] lo: entered promiscuous mode [ 357.601551][T16440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.607128][T16442] netlink: 'syz.4.2904': attribute type 2 has an invalid length. [ 357.973427][T16450] tipc: Enabling of bearer rejected, failed to enable media [ 358.011144][T16455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2908'. [ 358.164346][T16167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.182253][T16460] netlink: 'syz.4.2910': attribute type 1 has an invalid length. [ 358.193029][T16167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 358.205353][T16167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 358.216129][T16167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 35839 - 0 [ 358.343484][T16460] 8021q: adding VLAN 0 to HW filter on device bond16 [ 358.403835][T16467] bond16: (slave geneve3): making interface the new active one [ 358.414038][T16467] bond16: (slave geneve3): Enslaving as an active interface with an up link [ 358.430439][T10714] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 358.550588][T16167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.562084][T16470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2909'. [ 358.597486][T16167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 358.609875][T16167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 358.621527][T16167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 3] type 2 family 0 port 35839 - 0 [ 358.649546][T10714] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 358.773504][T16461] syzkaller0: entered promiscuous mode [ 358.788274][T16461] syzkaller0: entered allmulticast mode [ 358.798982][T16489] Bluetooth: MGMT ver 1.23 [ 358.812000][T10714] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 358.833584][T16489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2918'. [ 358.844912][ T5636] Bluetooth: hci5: command tx timeout [ 358.946944][T16167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.976542][T16167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 359.010276][T16167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 359.029187][T16167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 3] type 2 family 0 port 35839 - 0 [ 359.152703][T16507] Bluetooth: MGMT ver 1.23 [ 360.962205][T16502] tipc: Enabling of bearer rejected, failed to enable media [ 361.076964][T16530] netlink: 'syz.1.2922': attribute type 1 has an invalid length. [ 361.118237][T16167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.146481][T16167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 361.170094][T16167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 361.188715][T16167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 3] type 2 family 0 port 35839 - 0 [ 361.205618][T16530] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 361.349262][T16543] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2927'. [ 361.402041][T16549] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2927'. [ 361.441454][T16543] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2927'. [ 361.582890][T16558] netlink: 'syz.4.2930': attribute type 10 has an invalid length. [ 361.611427][T16543] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2927'. [ 361.810091][T16167] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 361.873224][T16167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.906731][T16167] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 361.948835][T16167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.983432][T16167] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 362.018600][T16167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.027616][T16167] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 362.070764][T16167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.137479][T16586] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2940'. [ 362.174116][T16586] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2940'. [ 362.204558][T16599] sctp: [Deprecated]: syz.0.2942 (pid 16599) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.204558][T16599] Use struct sctp_sack_info instead [ 362.229732][T16586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2940'. [ 362.419650][T16611] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2947'. [ 362.586646][T16167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.630115][T16167] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.654303][T10710] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.661516][T10710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.708441][T10710] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.715627][T10710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.772866][T16625] tipc: Can't bind to reserved service type 0 [ 363.218477][T16650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2960'. [ 363.926578][T16167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.991743][T16167] veth0_vlan: entered promiscuous mode [ 364.011196][T16167] veth1_vlan: entered promiscuous mode [ 364.074685][T16167] veth0_macvtap: entered promiscuous mode [ 364.090790][T16167] veth1_macvtap: entered promiscuous mode [ 364.140349][T16167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.166580][T16167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.191926][ T149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.217910][ T149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.247687][ T149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.301517][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.427737][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.440799][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.550207][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.564362][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.760545][T16724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2980'. [ 364.819301][T16724] xfrm1: entered promiscuous mode [ 364.858108][T16724] xfrm1: entered allmulticast mode [ 365.032054][T16735] syz_tun: entered allmulticast mode [ 365.255578][ T5647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.271347][ T5647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.280326][ T5647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.290099][ T5647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.300461][ T5647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.635378][T16758] netem: incorrect gi model size [ 365.863877][T16770] netlink: 'syz.3.2991': attribute type 58 has an invalid length. [ 365.891713][T16770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2991'. [ 366.226354][T16783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2997'. [ 366.264374][T16783] netlink: 'syz.2.2997': attribute type 39 has an invalid length. [ 366.299216][T16783] hsr_slave_0: left promiscuous mode [ 366.341074][T16783] hsr_slave_1: left promiscuous mode [ 366.487990][T16793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3001'. [ 366.656938][T16798] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3002'. [ 366.977639][ T57] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xff [ 367.012958][T16811] netlink: 'syz.1.3006': attribute type 24 has an invalid length. [ 367.105483][T16823] veth0: entered promiscuous mode [ 367.111103][T16823] veth0: left promiscuous mode [ 367.325842][ T5647] Bluetooth: hci0: command tx timeout [ 367.422658][T16746] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.430037][T16746] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.437920][T16746] bridge_slave_0: entered allmulticast mode [ 367.445817][T16746] bridge_slave_0: entered promiscuous mode [ 367.456023][T16746] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.463307][T16746] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.470727][T16746] bridge_slave_1: entered allmulticast mode [ 367.478002][T16746] bridge_slave_1: entered promiscuous mode [ 367.507032][T16746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.518901][T16746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.548250][T16746] team0: Port device team_slave_0 added [ 367.556321][T16746] team0: Port device team_slave_1 added [ 367.581235][T16746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.588976][T16746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.615421][T16746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.627804][T16746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.634934][T16746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.661773][T16746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.702676][T16746] hsr_slave_0: entered promiscuous mode [ 367.709488][T16746] hsr_slave_1: entered promiscuous mode [ 367.716110][T16746] debugfs: 'hsr0' already exists in 'hsr' [ 367.721942][T16746] Cannot create hsr debugfs directory [ 367.843932][T16746] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 367.855782][T16746] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.866856][T16746] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 367.943100][T16746] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 367.953452][T16746] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.964128][T16746] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 368.023940][T16746] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 368.034349][T16746] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.045297][T16746] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 369.405954][ T5647] Bluetooth: hci0: command tx timeout [ 369.815063][T16805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 369.851394][T16746] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 369.959785][T16746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.983967][T16746] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 369.998720][T16746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 370.098840][T16746] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 370.130495][T16851] __nla_validate_parse: 1 callbacks suppressed [ 370.130511][T16851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3018'. [ 370.160454][T16746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 370.168624][T16849] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3015'. [ 370.190562][T16746] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 370.210398][T16746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.350146][T16865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3020'. [ 370.362620][T16865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3020'. [ 370.377823][T16865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3020'. [ 370.528922][T16746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.618819][T16746] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.667073][T10710] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.674287][T10710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.725680][T16880] bond0: (slave bond_slave_1): Releasing backup interface [ 370.777473][T16883] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3027'. [ 370.821846][T10710] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.829089][T10710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.902466][T16880] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.922740][T16880] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.067591][T16880] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.093317][T16880] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.236626][T16880] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.273842][T16880] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.363989][T16880] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.382033][T16880] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.486535][ T5647] Bluetooth: hci0: command tx timeout [ 371.561844][T16924] netlink: 'syz.2.3038': attribute type 1 has an invalid length. [ 371.686872][T10714] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.695630][T10714] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.821471][ T3335] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.840662][ T3335] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.901677][T10710] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.902637][T16941] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 371.929869][T10710] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.001916][ T149] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.038061][ T149] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.350477][T16746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.587451][T16980] syzkaller1: entered promiscuous mode [ 372.619890][T16980] syzkaller1: entered allmulticast mode [ 372.626972][T16984] netlink: 808 bytes leftover after parsing attributes in process `syz.0.3052'. [ 372.636282][T16986] sctp: [Deprecated]: syz.3.3053 (pid 16986) Use of int in max_burst socket option. [ 372.636282][T16986] Use struct sctp_assoc_value instead [ 372.866158][T16991] : entered promiscuous mode [ 373.046941][T17005] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3059'. [ 373.070607][T16746] veth0_vlan: entered promiscuous mode [ 373.076549][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3059'. [ 373.106443][T16746] veth1_vlan: entered promiscuous mode [ 373.242362][T16746] veth0_macvtap: entered promiscuous mode [ 373.296406][T16746] veth1_macvtap: entered promiscuous mode [ 373.353172][T17018] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3060'. [ 373.379112][T17018] veth0_to_bond: default FDB implementation only supports local addresses [ 373.410578][T16746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.410655][T17018] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 373.441511][T16746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.472484][T10714] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.510368][T10714] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.565517][ T5647] Bluetooth: hci0: command tx timeout [ 373.575833][T10714] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.599006][T10714] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.630395][T17020] gretap2: entered promiscuous mode [ 373.891191][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.923245][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.960697][T17043] x_tables: duplicate underflow at hook 1 [ 374.235279][T17051] bond10: option packets_per_slave: invalid value (18446744073709551615) [ 374.255600][T17051] bond10: option packets_per_slave: allowed values 0 - 65535 [ 374.272822][T17051] bond10 (unregistering): Released all slaves [ 374.334162][ T3335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.371735][ T3335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.376611][T17060] macsec0: entered promiscuous mode [ 374.388410][T17060] batadv0: entered promiscuous mode [ 374.396189][T17060] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 374.403681][T17060] batadv0: left promiscuous mode [ 376.352203][T17073] IPVS: set_ctl: invalid protocol: 58338 172.20.20.15:21 [ 376.483898][T17081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3075'. [ 376.545518][T17081] netlink: 'syz.3.3075': attribute type 1 has an invalid length. [ 376.815765][T17095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3079'. [ 376.989985][T17104] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3081'. [ 377.040742][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.061145][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.074578][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.093192][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.107803][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.211576][T17113] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3083'. [ 377.279767][T17113] ip_vti0: entered promiscuous mode [ 377.681094][T10710] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.697160][T10710] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.779452][T17145] Unsupported ieee802154 address type: 0 [ 377.862512][T17150] netlink: 'syz.2.3093': attribute type 1 has an invalid length. [ 377.999148][T17150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.019283][T17160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3095'. [ 378.035620][T10710] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.052424][T10710] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.102148][T17163] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ2 [ 378.137996][T17161] bond2: (slave ip6gretap1): making interface the new active one [ 378.166577][T17161] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 378.226245][T10710] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.271479][T10710] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.321965][T17172] pim6reg: entered allmulticast mode [ 378.373812][T10710] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.395311][T10710] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.432684][T17176] netlink: 'syz.0.3100': attribute type 5 has an invalid length. [ 378.495002][T17179] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3101'. [ 378.623159][T17183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3102'. [ 378.742591][T17187] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3104'. [ 378.779559][T17183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.816501][T17183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.839705][T17192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.880698][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3106'. [ 379.141790][T10710] bridge_slave_1: left allmulticast mode [ 379.160085][T10710] bridge_slave_1: left promiscuous mode [ 379.168960][ T5636] Bluetooth: hci4: command tx timeout [ 379.179265][T10710] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.225978][T10710] lo: left allmulticast mode [ 379.533919][T10710] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 380.260010][T10710] bond8 (unregistering): (slave bridge6): Releasing backup interface [ 380.269381][T10710] bridge6 (unregistering): left promiscuous mode [ 380.304019][T10710] bond0 (unregistering): Released all slaves [ 380.314333][T10710] bond1 (unregistering): Released all slaves [ 380.330504][T10710] bond2 (unregistering): (slave bond3): Releasing backup interface [ 380.343913][T10710] bond2 (unregistering): Released all slaves [ 380.358001][T10710] bond3 (unregistering): Released all slaves [ 380.374060][T10710] bond4 (unregistering): (slave veth3): Releasing active interface [ 380.385402][T10710] bond4 (unregistering): (slave veth5): Releasing active interface [ 380.399448][T10710] bond4 (unregistering): Released all slaves [ 380.418095][T10710] bond5 (unregistering): Released all slaves [ 380.431620][T10710] bond6 (unregistering): Released all slaves [ 380.445830][T10710] bond7 (unregistering): Released all slaves [ 380.462531][T10710] bond8 (unregistering): Released all slaves [ 380.486594][T10710] bond9 (unregistering): Released all slaves [ 380.500177][ T12] bond0: (slave bond_slave_0): interface is now down [ 380.511335][ T12] bond0: (slave bond_slave_1): interface is now down [ 380.516057][T17208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.613472][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 380.747541][T10710] : left promiscuous mode [ 380.902560][T17231] macvtap0: entered allmulticast mode [ 380.941335][T17231] veth0_macvtap: entered allmulticast mode [ 381.008596][T10710] tipc: Disabling bearer [ 381.020484][T10710] tipc: Disabling bearer [ 381.079141][T10710] tipc: Disabling bearer [ 381.137010][T10710] tipc: Left network mode [ 381.245681][ T5636] Bluetooth: hci4: command tx timeout [ 381.411498][T17259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.687069][T17269] veth0: entered promiscuous mode [ 381.692202][T17274] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 381.717342][T17269] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3122'. [ 381.997997][T17269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.050724][T17269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.073812][T17269] bond0 (unregistering): Released all slaves [ 382.251078][T17267] veth0: left promiscuous mode [ 382.256927][T17302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.548715][T17314] netlink: 'syz.2.3126': attribute type 2 has an invalid length. [ 382.558432][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 383.085747][T13763] bond0: (slave bond_slave_0): interface is now down [ 383.117335][T13763] bond0: (slave bond_slave_1): interface is now down [ 383.216408][T17352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3130'. [ 383.325086][ T5636] Bluetooth: hci4: command tx timeout [ 383.547787][T17101] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.570477][T17101] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.597688][T17101] bridge_slave_0: entered allmulticast mode [ 383.626064][T17101] bridge_slave_0: entered promiscuous mode [ 383.658486][T17365] can: request_module (can-proto-0) failed. [ 383.789539][T17101] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.797258][T17101] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.804601][T17101] bridge_slave_1: entered allmulticast mode [ 383.813056][T17101] bridge_slave_1: entered promiscuous mode [ 383.821094][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 383.897256][T17101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.910934][T17101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.986311][T17101] team0: Port device team_slave_0 added [ 383.999313][T17101] team0: Port device team_slave_1 added [ 384.019653][T17383] netlink: 'syz.2.3137': attribute type 1 has an invalid length. [ 384.151525][T17383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.214173][T17101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.245002][T17101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.324805][T17101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.352933][T17101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.369719][T17101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.397063][T17101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.500705][T10710] hsr_slave_0: left promiscuous mode [ 384.507416][T10710] hsr_slave_1: left promiscuous mode [ 384.513635][T10710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.522865][T10710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.531273][T10710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.850847][T17101] hsr_slave_0: entered promiscuous mode [ 384.865735][T17101] hsr_slave_1: entered promiscuous mode [ 384.872699][T17101] debugfs: 'hsr0' already exists in 'hsr' [ 384.879821][T17101] Cannot create hsr debugfs directory [ 385.098079][T10710] IPVS: stop unused estimator thread 0... [ 385.406112][ T5636] Bluetooth: hci4: command tx timeout [ 385.654894][ T3335] bond0: (slave bond_slave_0): interface is now down [ 385.661663][ T3335] bond0: (slave bond_slave_1): interface is now down [ 385.672660][ T3335] bond0: now running without any active interface! [ 386.018407][T17350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.043443][T17101] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 386.093404][T17101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 386.133930][T17101] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 386.175266][T17101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 386.211615][T17101] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 386.276532][T17101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 386.312293][T17101] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 386.359338][T17101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 386.527575][T17433] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3145'. [ 386.549174][T17429] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3146'. [ 386.657669][T17440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3148'. [ 386.953944][T17455] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3150'. [ 387.003202][T17101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.104342][T17101] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.142898][T17464] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.3153'. [ 387.175654][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.182846][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.272924][T13763] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.280147][T13763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.285184][T17466] Cannot find del_set index 4 as target [ 387.296660][T17472] Cannot find del_set index 4 as target [ 387.640158][T17487] 8021q: VLANs not supported on ip_vti0 [ 387.867712][T17500] bond0: (slave bond_slave_1): Releasing backup interface [ 388.032402][T17512] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3162'. [ 388.564501][T17543] netlink: 'syz.4.3168': attribute type 5 has an invalid length. [ 388.573594][T17545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3167'. [ 388.633351][T17545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3167'. [ 388.683771][T17545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3167'. [ 388.751633][T17554] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 388.760959][T17554] team0: Port device batadv1 added [ 388.766934][T17545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3167'. [ 388.783981][T17545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3167'. [ 388.795355][T17545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3167'. [ 388.805409][T17545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3167'. [ 389.082090][T17101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.169204][T17101] veth0_vlan: entered promiscuous mode [ 389.213202][T17101] veth1_vlan: entered promiscuous mode [ 389.285188][T17101] veth0_macvtap: entered promiscuous mode [ 389.304308][T17101] veth1_macvtap: entered promiscuous mode [ 389.335031][T17101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.352849][T17101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.393085][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.409214][T13763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.442580][T13763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.453903][T13763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.518384][T17585] syzkaller0: entered promiscuous mode [ 389.538545][T17585] syzkaller0: entered allmulticast mode [ 389.549889][T17585] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 391.406038][T17540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.509989][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.537649][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.654234][T10710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.693392][T10710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.174360][T17670] x_tables: duplicate underflow at hook 1 [ 392.448136][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.509908][ T5647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 392.539037][ T5647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 392.547197][ T5647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 392.565186][ T5647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 392.573856][ T5647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 392.593881][T17691] tipc: Enabling of bearer rejected, failed to enable media [ 392.819927][T17700] bridge0: port 3(ipvlan2) entered blocking state [ 392.856038][T17700] bridge0: port 3(ipvlan2) entered disabled state [ 392.877675][T17700] ipvlan2: entered allmulticast mode [ 392.900100][T17700] bridge0: entered allmulticast mode [ 392.927791][T17700] ipvlan2: left allmulticast mode [ 392.950191][T17700] bridge0: left allmulticast mode [ 393.023433][T17701] bridge0: port 3(ipvlan2) entered blocking state [ 393.031750][T17701] bridge0: port 3(ipvlan2) entered disabled state [ 393.040494][T17701] ipvlan2: entered allmulticast mode [ 393.047030][T17701] bridge0: entered allmulticast mode [ 393.070082][T17701] ipvlan2: left allmulticast mode [ 393.083423][T17701] bridge0: left allmulticast mode [ 393.383900][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.399690][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.405508][T17729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.439279][T17721] tipc: Enabling of bearer rejected, failed to enable media [ 393.458611][T17726] syzkaller0: entered promiscuous mode [ 393.474940][T17726] syzkaller0: entered allmulticast mode [ 393.487639][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.507177][T17728] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 393.718241][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.736069][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.909662][T17756] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 394.052512][T17763] __nla_validate_parse: 60 callbacks suppressed [ 394.052530][T17763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3208'. [ 394.087101][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.134297][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.286364][ T149] tipc: Subscription rejected, illegal request [ 394.545816][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.605411][ T5636] Bluetooth: hci2: command tx timeout [ 394.632696][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.692964][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.693564][T17799] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3219'. [ 394.729275][T17799] openvswitch: netlink: Flow key attr not present in new flow. [ 395.038410][T17811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.246558][ T8325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.482371][ T36] pimreg: left allmulticast mode [ 395.567747][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.725868][ T8308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.143406][ T36] bond7 (unregistering): (slave gretap2): Releasing active interface [ 396.197940][ T36] bond9 (unregistering): (slave geneve2): Releasing active interface [ 396.269022][ T36] bond6 (unregistering): (slave bridge1): Releasing backup interface [ 396.277532][ T36] bridge1 (unregistering): left promiscuous mode [ 396.366033][ T8308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.622802][ T36] bond0 (unregistering): Released all slaves [ 396.633172][ T36] bond1 (unregistering): Released all slaves [ 396.648253][ T36] bond2 (unregistering): Released all slaves [ 396.670986][ T36] bond3 (unregistering): Released all slaves [ 396.684021][ T36] bond4 (unregistering): Released all slaves [ 396.685069][ T5636] Bluetooth: hci2: command tx timeout [ 396.702523][ T36] bond5 (unregistering): Released all slaves [ 396.720575][ T36] bond6 (unregistering): Released all slaves [ 396.734021][ T36] bond7 (unregistering): Released all slaves [ 396.749219][ T36] bond8 (unregistering): Released all slaves [ 396.762507][ T36] bond9 (unregistering): Released all slaves [ 396.790682][T17821] team0: Port device team_slave_0 removed [ 396.952536][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 397.031940][ T36] tipc: Left network mode [ 397.055959][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3232'. [ 397.182943][T17857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3233'. [ 397.418327][T17876] nbd: socks must be embedded in a SOCK_ITEM attr [ 397.450596][T17876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3238'. [ 397.513653][T17886] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3238'. [ 397.648414][ T5769] net_ratelimit: 2 callbacks suppressed [ 397.648502][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.827484][T17899] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3241'. [ 397.936142][T17909] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3244'. [ 397.950081][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3241'. [ 398.060989][T17900] bridge_slave_1: left allmulticast mode [ 398.067600][T17900] bridge_slave_1: left promiscuous mode [ 398.074606][T17900] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.089439][T17916] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3245'. [ 398.103149][T17900] bridge_slave_0: left allmulticast mode [ 398.109424][T17900] bridge_slave_0: left promiscuous mode [ 398.115459][T17900] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.239352][T17923] xt_ipcomp: unknown flags 1D [ 398.436369][T17930] af_packet: tpacket_rcv: packet too big, clamped from 4556 to 3952. macoff=96 [ 398.440906][T17932] netlink: 'syz.4.3249': attribute type 4 has an invalid length. [ 398.459167][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 398.686687][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.765765][ T5636] Bluetooth: hci2: command tx timeout [ 399.167798][T17680] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.199844][T17680] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.229828][T17680] bridge_slave_0: entered allmulticast mode [ 399.295198][T17680] bridge_slave_0: entered promiscuous mode [ 399.339703][T17967] tipc: Started in network mode [ 399.351273][T17967] tipc: Node identity ac14140f, cluster identity 4711 [ 399.381250][T17967] tipc: New replicast peer: 255.255.255.255 [ 399.406130][ T8308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.407519][T17967] tipc: Enabled bearer , priority 10 [ 399.488016][T17680] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.522426][T17680] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.540852][T17680] bridge_slave_1: entered allmulticast mode [ 399.578524][T17987] netlink: 'syz.0.3262': attribute type 1 has an invalid length. [ 399.590269][T17680] bridge_slave_1: entered promiscuous mode [ 399.642044][T17990] __nla_validate_parse: 2 callbacks suppressed [ 399.642060][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3262'. [ 399.725676][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.734237][T17990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3262'. [ 400.023495][T17991] team0: Cannot enslave team device to itself [ 400.219107][T18002] macvlan2: entered promiscuous mode [ 400.229647][T18019] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20004 [ 400.237614][T18002] macvlan2: entered allmulticast mode [ 400.259405][T18002] bond8: entered promiscuous mode [ 400.283691][T18002] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 400.362560][T18002] bond8: left promiscuous mode [ 400.417737][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 400.433790][T17680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.486910][T18020] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 400.494449][T18020] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 400.628783][T17680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.642263][T18031] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3270'. [ 400.651942][ T24] tipc: Node number set to 2886997007 [ 400.713935][ T36] hsr_slave_0: left promiscuous mode [ 400.751324][ T36] hsr_slave_1: left promiscuous mode [ 400.768096][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.810404][ T36] veth1_vlan: left allmulticast mode [ 400.836895][ T36] veth0_macvtap: left promiscuous mode [ 400.846186][ T8328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.854450][ T5636] Bluetooth: hci2: command tx timeout [ 400.855676][ T36] veth1_vlan: left promiscuous mode [ 400.891453][ T36] veth0_vlan: left promiscuous mode [ 400.915008][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3276'. [ 401.010776][T18053] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3277'. [ 401.034027][ T36] team0 (unregistering): Port device batadv1 removed [ 401.062144][T18059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3277'. [ 401.072080][ T36] pim6reg (unregistering): left allmulticast mode [ 401.107680][T18049] netlink: 'syz.2.3274': attribute type 21 has an invalid length. [ 401.121073][T18049] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3274'. [ 401.160000][T18060] netlink: 'syz.2.3274': attribute type 21 has an invalid length. [ 401.175989][T18060] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3274'. [ 401.286723][ T57] smc: removing ib device syz2 [ 401.396277][T10714] smc: removing ib device syz0 [ 401.473674][T18042] : entered promiscuous mode [ 401.503510][T18049] netlink: 'syz.2.3274': attribute type 5 has an invalid length. [ 401.526950][ T8328] syz0: Port: 1 Link DOWN [ 401.528967][T18049] netlink: 'syz.2.3274': attribute type 6 has an invalid length. [ 401.567055][T18049] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3274'. [ 401.589059][T18060] netlink: 'syz.2.3274': attribute type 5 has an invalid length. [ 401.611077][T18060] netlink: 'syz.2.3274': attribute type 6 has an invalid length. [ 401.624882][T18060] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3274'. [ 401.634001][ T24] ================================================================== [ 401.642145][ T24] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 401.651056][ T24] Read of size 8 at addr ffff8880789d82f0 by task kworker/1:0/24 [ 401.658815][ T24] [ 401.661185][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 401.661230][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.661239][ T24] Workqueue: events smc_ib_port_event_work [ 401.661322][ T24] Call Trace: [ 401.661354][ T24] [ 401.661409][ T24] dump_stack_lvl+0xe8/0x150 [ 401.661523][ T24] print_address_description+0x55/0x1e0 [ 401.661540][ T24] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 401.661577][ T24] print_report+0x58/0x70 [ 401.661587][ T24] kasan_report+0x117/0x150 [ 401.661620][ T24] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 401.661641][ T24] __ethtool_get_link_ksettings+0x5e/0x170 [ 401.661655][ T24] ib_get_eth_speed+0x180/0x7f0 [ 401.661746][ T24] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 401.661766][ T24] ? do_raw_spin_unlock+0xf5/0x210 [ 401.661803][ T24] rxe_query_port+0x93/0x3d0 [ 401.661864][ T24] ib_query_port+0x170/0x830 [ 401.661906][ T24] smc_ib_port_event_work+0x15a/0x940 [ 401.661927][ T24] ? process_scheduled_works+0xa70/0x1860 [ 401.661950][ T24] ? process_scheduled_works+0xa70/0x1860 [ 401.661961][ T24] process_scheduled_works+0xb5d/0x1860 [ 401.661983][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 401.661996][ T24] ? assign_work+0x3d5/0x5e0 [ 401.662008][ T24] worker_thread+0xa53/0xfc0 [ 401.662028][ T24] kthread+0x389/0x470 [ 401.662043][ T24] ? __pfx_worker_thread+0x10/0x10 [ 401.662054][ T24] ? __pfx_kthread+0x10/0x10 [ 401.662068][ T24] ret_from_fork+0x514/0xb70 [ 401.662090][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 401.662101][ T24] ? __switch_to+0xc79/0x1410 [ 401.662117][ T24] ? __pfx_kthread+0x10/0x10 [ 401.662131][ T24] ret_from_fork_asm+0x1a/0x30 [ 401.662151][ T24] [ 401.662180][ T24] [ 401.834358][ T24] Allocated by task 5635: [ 401.838754][ T24] kasan_save_track+0x3e/0x80 [ 401.843422][ T24] __kasan_kmalloc+0x93/0xb0 [ 401.847998][ T24] __kvmalloc_node_noprof+0x528/0x8a0 [ 401.853398][ T24] alloc_netdev_mqs+0xa8/0x1210 [ 401.858299][ T24] rtnl_create_link+0x31f/0xd70 [ 401.863169][ T24] rtnl_newlink_create+0x277/0xb70 [ 401.868337][ T24] rtnl_newlink+0x166a/0x1bb0 [ 401.873015][ T24] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 401.877936][ T24] netlink_rcv_skb+0x232/0x4b0 [ 401.882768][ T24] netlink_unicast+0x75c/0x8e0 [ 401.887516][ T24] netlink_sendmsg+0x813/0xb40 [ 401.892271][ T24] __sys_sendto+0x672/0x710 [ 401.896857][ T24] __x64_sys_sendto+0xde/0x100 [ 401.901617][ T24] do_syscall_64+0x174/0x580 [ 401.906256][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.912151][ T24] [ 401.914460][ T24] Freed by task 36: [ 401.918245][ T24] kasan_save_track+0x3e/0x80 [ 401.922911][ T24] kasan_save_free_info+0x46/0x50 [ 401.927933][ T24] __kasan_slab_free+0x5c/0x80 [ 401.932708][ T24] kfree+0x1c5/0x640 [ 401.936603][ T24] device_release+0xc4/0x1f0 [ 401.941333][ T24] kobject_put+0x228/0x560 [ 401.945781][ T24] netdev_run_todo+0xc75/0xde0 [ 401.950532][ T24] default_device_exit_batch+0x967/0x9e0 [ 401.956234][ T24] ops_undo_list+0x52b/0x940 [ 401.960845][ T24] cleanup_net+0x56b/0x800 [ 401.965253][ T24] process_scheduled_works+0xb5d/0x1860 [ 401.970782][ T24] worker_thread+0xa53/0xfc0 [ 401.975354][ T24] kthread+0x389/0x470 [ 401.979413][ T24] ret_from_fork+0x514/0xb70 [ 401.983986][ T24] ret_from_fork_asm+0x1a/0x30 [ 401.988735][ T24] [ 401.991087][ T24] The buggy address belongs to the object at ffff8880789d8000 [ 401.991087][ T24] which belongs to the cache kmalloc-cg-4k of size 4096 [ 402.005454][ T24] The buggy address is located 752 bytes inside of [ 402.005454][ T24] freed 4096-byte region [ffff8880789d8000, ffff8880789d9000) [ 402.019329][ T24] [ 402.021641][ T24] The buggy address belongs to the physical page: [ 402.028050][ T24] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x789d8 [ 402.036793][ T24] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 402.045273][ T24] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 402.052806][ T24] page_type: f5(slab) [ 402.056780][ T24] raw: 00fff00000000040 ffff88813fe33500 dead000000000122 0000000000000000 [ 402.065351][ T24] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 402.073933][ T24] head: 00fff00000000040 ffff88813fe33500 dead000000000122 0000000000000000 [ 402.082588][ T24] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 402.091251][ T24] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 402.099914][ T24] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 402.108591][ T24] page dumped because: kasan: bad access detected [ 402.114996][ T24] page_owner tracks the page as allocated [ 402.120698][ T24] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5638, tgid 5638 (syz-executor), ts 79772383305, free_ts 59974095016 [ 402.142046][ T24] post_alloc_hook+0x22d/0x280 [ 402.146813][ T24] get_page_from_freelist+0x2593/0x2610 [ 402.152352][ T24] __alloc_frozen_pages_noprof+0x18d/0x380 [ 402.158145][ T24] allocate_slab+0x77/0x660 [ 402.162642][ T24] refill_objects+0x339/0x3d0 [ 402.167733][ T24] __pcs_replace_empty_main+0x321/0x720 [ 402.173262][ T24] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 402.179663][ T24] kmemdup_noprof+0x2b/0x70 [ 402.184180][ T24] __addrconf_sysctl_register+0xa7/0x4d0 [ 402.189879][ T24] addrconf_sysctl_register+0x168/0x1c0 [ 402.195412][ T24] ipv6_add_dev+0xd26/0x13a0 [ 402.199993][ T24] addrconf_notify+0x771/0x1050 [ 402.204834][ T24] notifier_call_chain+0x1ad/0x3d0 [ 402.209938][ T24] register_netdevice+0x18c9/0x1ec0 [ 402.215118][ T24] macvlan_common_newlink+0x127c/0x19e0 [ 402.220765][ T24] rtnl_newlink_create+0x329/0xb70 [ 402.225863][ T24] page last free pid 5473 tgid 5473 stack trace: [ 402.232165][ T24] __free_frozen_pages+0xc1c/0xd30 [ 402.237270][ T24] __slab_free+0x274/0x2c0 [ 402.241673][ T24] qlist_free_all+0x99/0x100 [ 402.246245][ T24] kasan_quarantine_reduce+0x148/0x160 [ 402.251690][ T24] __kasan_slab_alloc+0x22/0x80 [ 402.256530][ T24] kmem_cache_alloc_noprof+0x2bc/0x650 [ 402.262059][ T24] do_getname+0x2e/0x250 [ 402.266306][ T24] vfs_fstatat+0x45/0x170 [ 402.270614][ T24] __x64_sys_newfstatat+0x151/0x200 [ 402.275795][ T24] do_syscall_64+0x174/0x580 [ 402.280363][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.286238][ T24] [ 402.288544][ T24] Memory state around the buggy address: [ 402.294218][ T24] ffff8880789d8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.302272][ T24] ffff8880789d8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.310382][ T24] >ffff8880789d8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.318427][ T24] ^ [ 402.326170][ T24] ffff8880789d8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.334210][ T24] ffff8880789d8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.342252][ T24] ================================================================== [ 402.358095][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 402.376753][ T8328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.447537][ T8308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.493583][ T24] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 402.500933][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 402.510132][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 402.520196][ T24] Workqueue: events smc_ib_port_event_work [ 402.526011][ T24] Call Trace: [ 402.529303][ T24] [ 402.532241][ T24] vpanic+0x56c/0xa60 [ 402.536217][ T24] ? __pfx_vpanic+0x10/0x10 [ 402.540706][ T24] ? __pfx___schedule+0x10/0x10 [ 402.545640][ T24] panic+0xc5/0xd0 [ 402.549358][ T24] ? __pfx_panic+0x10/0x10 [ 402.553777][ T24] ? preempt_schedule_common+0x82/0xd0 [ 402.559231][ T24] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 402.565200][ T24] check_panic_on_warn+0x89/0xb0 [ 402.570151][ T24] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 402.576115][ T24] end_report+0x73/0x170 [ 402.580346][ T24] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 402.586307][ T24] kasan_report+0x128/0x150 [ 402.590790][ T24] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 402.596761][ T24] __ethtool_get_link_ksettings+0x5e/0x170 [ 402.602552][ T24] ib_get_eth_speed+0x180/0x7f0 [ 402.607398][ T24] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 402.612766][ T24] ? do_raw_spin_unlock+0xf5/0x210 [ 402.617871][ T24] rxe_query_port+0x93/0x3d0 [ 402.622454][ T24] ib_query_port+0x170/0x830 [ 402.627032][ T24] smc_ib_port_event_work+0x15a/0x940 [ 402.632394][ T24] ? process_scheduled_works+0xa70/0x1860 [ 402.638094][ T24] ? process_scheduled_works+0xa70/0x1860 [ 402.643797][ T24] process_scheduled_works+0xb5d/0x1860 [ 402.649340][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 402.655395][ T24] ? assign_work+0x3d5/0x5e0 [ 402.659968][ T24] worker_thread+0xa53/0xfc0 [ 402.664549][ T24] kthread+0x389/0x470 [ 402.668603][ T24] ? __pfx_worker_thread+0x10/0x10 [ 402.673706][ T24] ? __pfx_kthread+0x10/0x10 [ 402.678283][ T24] ret_from_fork+0x514/0xb70 [ 402.682857][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 402.687950][ T24] ? __switch_to+0xc79/0x1410 [ 402.692613][ T24] ? __pfx_kthread+0x10/0x10 [ 402.697206][ T24] ret_from_fork_asm+0x1a/0x30 [ 402.701980][ T24] [ 402.705150][ T24] Kernel Offset: disabled [ 402.709468][ T24] Rebooting in 86400 seconds..