last executing test programs: 1m50.441658571s ago: executing program 0 (id=2816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000027c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x67, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x8, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0xfffffffb}]}}}}}}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, 0x0, 0x0, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1m50.066377616s ago: executing program 0 (id=2819): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$LINK_GET_NEXT_ID(0x24, &(0x7f0000000080)={0x2}, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0x7d, 0x0, &(0x7f0000000300)=0x9b) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) 1m49.669041894s ago: executing program 3 (id=2822): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x40) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB="9871", @ANYBLOB], 0x198}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180), 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000800)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(michael_mic-generic)\x00'}, 0x58) bind$ax25(r3, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005600)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x78c) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000240)=@rose={'rose', 0x0}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f00000000c0), 0x10) sendto$l2tp(r6, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r6, &(0x7f0000000040)=""/15, 0xf, 0x2042, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 1m49.01131392s ago: executing program 0 (id=2827): r0 = socket$inet(0xa, 0x801, 0x84) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) close(0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02008d1e00000000000000045c00000400000007000000f000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r8, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x178, 0x10, 0x713, 0x70bd27, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x3c}, @in=@local, {0x200000, 0x0, 0xffffffffffff7fff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x86, 0x2, {{'ecb(cipher_null)\x00'}, 0x1f0, "5584ee51072c4f867f4f472b9b73a1cb705db866c4876df8de61e8370c76ae4da79325645befc1f07cd523dc748e7bfbcea5cbc6f29d36974097a8f5eada"}}]}, 0x178}}, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r3, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) accept4(r0, 0x0, 0x0, 0x0) socketpair(0x7, 0xa, 0x3, &(0x7f0000000080)) 1m48.551023063s ago: executing program 1 (id=2829): syz_80211_inject_frame(0x0, 0x0, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010026bd5040000000000a00aeb2dc655e3900bb4bbc0000000000000000"], 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x96}, 0x28) (async, rerun: 32) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000223f4a61f9676286717cef4132c23ceeffc10ae344e63bb0c3fe863c0102ab768b4847192725ba3c01576e70c98be2e117c2093d674f00f0"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], &(0x7f0000000440)='syzkaller\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4ff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a3000000000090002"], 0x80}}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x24040881) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) r6 = socket$unix(0x1, 0x2, 0x0) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x49, 0x800000, 0x8, 0x7, 0x8000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async, rerun: 32) write$bt_hci(r7, &(0x7f0000000080)=ANY=[], 0x6) (async, rerun: 32) sendmsg$unix(r6, &(0x7f0000000140)={&(0x7f0000000300)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x96, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="140000ebffffffe340000001000000000000d68602ac99fc89dd53a9d300"], 0x18}, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0004e89870d438d3a43b31da494d677f5eafed", @ANYRES32=r3, @ANYBLOB="12030000000000000a000100aaaaaaaaaabb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 1m48.548963268s ago: executing program 3 (id=2830): r0 = socket(0x2, 0x80805, 0x0) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000e72200f884000093e0200000"], 0x10}}], 0x2, 0x0) socket(0x2, 0x80805, 0x0) (async) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000e72200f884000093e0200000"], 0x10}}], 0x2, 0x0) (async) 1m48.336833359s ago: executing program 0 (id=2833): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203000210000000020000000000000005000600000000000a004e240000f59cff01000000000000000000000000000101000000000000000200010000000000000000000000000005000500000000000a004e2000000007fe80000000000000000000000000000bff7f0000000000000200080010"], 0x80}, 0x1, 0x7}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x8}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xfffffff7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 1m48.164531775s ago: executing program 3 (id=2834): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000800000000100000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x7, 0x7, 0xf7, 0x10, 0x6, @random="2017f2c71cc2"}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r2, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x17, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x100}, @ldst={0x3, 0x2, 0x2, 0x5, 0x5, 0xffffffffffffff6c, 0x1}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @generic={0xff, 0x2, 0x1, 0x8, 0xe09a}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00'}, 0x94) 1m48.096066203s ago: executing program 4 (id=2835): r0 = socket(0x2b, 0x80801, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r2, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) setsockopt$inet6_mtu(r0, 0x11e, 0x17, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newneigh={0x40, 0x1c, 0x200, 0x70bd26, 0x25dfdbff, {0x6, 0x0, 0x0, 0x0, 0x40, 0x1, 0x1}, [@NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NDA_DST_IPV4={0x8, 0x1, @multicast2}, @NDA_IFINDEX={0x8, 0x8, r4}, @NDA_PORT={0x6, 0x6, 0x4e24}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x1) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x40, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000050000000100000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004ca49588000000000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000cf000000bf0900000000000055090100000000409500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) 1m47.974805788s ago: executing program 1 (id=2836): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277c", 0x62}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c"], 0x68}}, 0x24040800) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x24000041) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x43, @private0, 0x8}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)="e13d03edeb250c36dce908f3e669ad3be0fd8bdcb0a9180a4becd54b5f7e11b72b3bae25660b9d194765160e", 0x2c}, {&(0x7f00000004c0)="4df42763645bdaa282e0fae62f3de99c9290", 0x12}, {&(0x7f0000000500)="48d41e79a26365d383f4aa15a6fe985f5aa909be4393e7f38e728e25258b2d9c77fe31bc9b8a06cfddc90940ce591f7974d100570e6af7b582e0850ab3e72105ac109d2e2db6e739c638ced209dae891fe52d7c6308ac263fa23f45a3efdbc44b32965700aa2a3f912ed12470bb866946cd40215b5dc297412efadf370a46b546023e0016f4f827390a8c319aaa488e0f837a80ee0cc519f83d5f659b4f16c854d23fd43fabc26fd25f3f7d9db5d6467cd7aedd62472a631c24dfd3500d6cb667b347a42a078922886bbd2e88691879908224813e872753f71a63678c84e96449c0ac0a210ed36cf", 0xe8}, {&(0x7f0000000600)="e2ba03232560cb7e9571c347ef2a736699a74f281064fe22c4b522baa3a50692ab6ac5964d407c52be28022e743e1815015402de83bac4f5172f788fdba5a35503fbdbf3213e407d379bd80bef73a38cabf9726c3fcef71abc5b003bb867ecca462de3289dccca5cde728d521c0d9f9d2a0e1e3841f35c0312d5ffb006feb1a9bff423781341c70a307d02bd3c9d7294a9b9c73c0df6e15b167bc2ac705b465facb0f748b6587559bfa83fd89bff78411ef1", 0xb2}, {&(0x7f00000006c0)="6d4a960de6e10bc1b3d09a807c9341982e9973b6998cf99e25c4620d84042d9f89d6e1a40bdb6d01cc4def2c70b2", 0x2e}, {&(0x7f0000000700)="759308a099859dadc17a3dcabd1e88a2d88cdff531e0e43a23703a492c3c946b913edd9a14e350bc8a2fa8485fd6962b989b54ebc94d3ee9543586e9ac6f66a8a27d8399b0536355053273e86eb282734cb32fa731f515deec54f6ffdfde8f2dd3cf410305c4ee59b75b803fa9015a2ddc59c49cb2e7b52885f080d25cd6c819707afbb6413079a1037e5b1881cc7071ea43fe42d860d510b8b44328a77e92ebfc1b46a5bdf33e798dd6ce4a21c0ef127284a6bb84d29b05a6b26303d840b0dff6386a8173772f50e1511293d1fdf5c7f6a3867690799ed4ce4a", 0xda}], 0x6}}, {{&(0x7f0000000880)=@in={0x2, 0x4e23, @multicast2}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000900)="d87e39d7f5c193097e583c860c8b370b6dc5ea9899748cec9681344f7ff07a4060d1dc07548fba77035723", 0x2b}, {&(0x7f0000000940)="71db25e2539d16c04ae66dac46d063ba317d252cb5b18ab768d53999c0110843b3630b06acc7a411196ec0c792fa108ce68a355db513ea9a22e51efc2bd8da1f27eeb9046f", 0x45}, {&(0x7f00000009c0)="bb609ca11d7067bc14641d4495237a99ee75df2e3ad4fc880c99158462cf6125ab72cb88e4a111298e1e98cffb6d3bc73c35301e71e5d57f33afe820aecf0cedc4a96b00704c9fee26b90846072a3857e0134bbe349899e2ce91d2a93e42fe2f90a91f7ec674453e9151acd56f180ea8fab3946bbc2bde1b1b277ff5bc6ec9bf23d41614c8ad873e72f8596a311cb4a48357e5c648b044b78e661ffbf64d18bccbc48680", 0xa4}, {&(0x7f0000000a80)="7f20e1c43502f88e7acfa268592da4abc65026f1571a935fcae87920422fbf0c8e878f", 0x23}], 0x4, &(0x7f0000000b00)=[{0x68, 0x108, 0x10001, "b1f9b86d4ee0232b1e6ec5935f37cca6c1e80f334c517af2be799b3594c75d7b13fae75120ed602e2b85b782c8869b9964b87623f8a993319a55cd8202ab8b2c4fad4a812a8f0cd7cb10f3118a9087b8b4e2755af8"}, {0x78, 0x108, 0x6, "5e1508453e6115dd44bfcee072d53adbb2a79756d3304258a0f4509cf6852b8c431db8e82496580c272117518223f2503d4fd07cab996fdb895446d1657c9ccb2f122409ac38317f22f66ad69b35cce299763f00c22ce0b3022116ee759ebe3ff2b62100e8c3"}, {0x70, 0x119, 0x91, "b140bce6608b40717f0b53b07dca3283e49d75b2d784b33923dbd05cf58c1762bac3540f5a556e6ff0b0bbce94dbd9d288a71572024f701def7694beed2b5f2e303390620f742ca977aa4ca0ea6fd81486d2a8ccc0dd67893faeebb4"}, {0x48, 0x117, 0x3, "83a9c5990ef876bf470c1439b8f4799e479b9ee6bcdc08527c63fc0be2f7e21065d1051ace44eac3bb8f3cfe09146881c7"}, {0x68, 0x119, 0x6, "29fc38c262bcfab94cf561c96cac075e8ed5feb93c966d0d5d4140f060624e0b9f304682065051257facfeea53d3324b0dbf1b4e55dc2a7377a52beac7e21f76e8ff6eb45214dbbb70b5ff928296edd0ce19a55d6d22873b"}, {0x30, 0x10c, 0x1, "e8c50b88313b536af8626006ef83ba16f03560ef467f99ee0f1cde"}, {0xc0, 0x103, 0x40, "7811b3975876311ece7d2a8483b95d420c06d3333cb9c3c91686a756e43727d8767b927e2a2780a91fdb38b32a8c236f1f0b509c4989ca36479080d0e26d53967ad568903300694e709922f873b268d22795874313738d1f9a0f4c47ecffa3221a118e020beab1dc2e0d1650d6f8303ce67405d3d3eedb8e79fcd2e21dfc8557432a84ea7bc4dd468a2a64481a3ec23fe88ec682e3cfff082106990e0a186fb8e86e909eabe3789aac081292fa62dc"}, {0x30, 0x3a, 0x6e, "aceab24dffdd0441f20c21818cc5432e833386b1f64c67a729d96a"}], 0x320}}], 0x2, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1000}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x10004080) 1m47.697861395s ago: executing program 4 (id=2837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1d, 0x0, 0x0, 0x0, 0x0}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e1d, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='veno', 0x4) socket$rds(0x15, 0x5, 0x0) close(0x4) 1m47.660427521s ago: executing program 1 (id=2838): r0 = socket(0x2d, 0x2, 0x1) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r1 = socket(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r2 = socket(0x10, 0x2, 0x0) syz_emit_ethernet(0x106, &(0x7f0000000740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0xd0, 0x2c, 0x1, @dev, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x0, 0x3, "028b7a7ce7eb565bd400df2d773ec3b6322fc1ff66b56ea04aa4a819db69c1cda7cda99a0184139271df08a7e45e473b67c93d5067b2664b6485f04a648dbd46ceea4a44e3cd96e536d0596ad8e163815959e2f9c37ed60d45d22e4ebcb156544866c2df71ccf81822b68c8bbf6c9049ecf56786846bcd6cba45cc6db9cb980ae76b1cabdf32ed62d8f4e6fc0175f39510997e22e4383cde0505d42ef13bc8033e8db36a73548c701abcdeba04f4ae1f210c283e1f865b96f37bec725d2d99c22f29aecd3f68a048"}}}}}}, 0x0) write(r2, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001d00000000000000", 0x1c) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000500)={{r2, &(0x7f0000000000)='/#]:}.(^,-}|++:$\x00', 0x100, &(0x7f0000000040)={@align=0x4, {0x5, 0x8, 0x1, 0x9}}, 0xf86, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0xe3}, 0x3, &(0x7f0000000480)=[{0x3, 0x1, &(0x7f0000000140)='\x00', &(0x7f0000000180)="4f9926c232cd3436bcff04515251bc686fb0270f18d1b4300cbc0b55057090e16610f7150ed5afbc38bc5e2e3bc6dedb9d1080eaa51864f3376cedec4b706c8a68a43254217bb24b9686660fad1e65b6edee7b4583e100b102232dc5c4524e9fa55b5402a69318efd15d1808d87fdd591c992741987836790965a8c662", 0x7d, 0x22}, {0x1, 0xfffffe00, &(0x7f0000000200)='&\x00\'\x00', &(0x7f0000000240)="32df1628e60e42b488ff7fcf54ff189168af2e012737185168c063203c1386d66df98a6a063a5aa819b1fc76293f9dca0100dfc7234226724b85ebdad5b98cb5c6c1b1b58ef87a720521493d032cefed314e0d34c8f1a6c07e242250b12c0c08650161da851b22b60444729a34ec64e5f03f8c4cf05e86a73d649fa11e8c71924214a606f3c6f169207d17587b667813c5c37bc74a4d7cd6db12f1bf709f01b33523ee75f3507a19dad9ab59a04fa9de264fc447f6d61ea998fba2a7a1edcd", 0xbf, 0xa}, {0x1, 0xb2d0f110, &(0x7f0000000300)='-{\'h\\,^+-}{)\xb9]%)+,\x01$\x00', &(0x7f0000000340)="40ad6aef081c7d551a87872ac2da0e7b535d9aceef7bda165b00ed1ebf928daaf3211686f655cbcff69be411063586eac6701544e342ddc3bbbcb59189117016c080b51da34b58f53237d956e357e08e3d59cccda7a0eba30fcb55071bf810e80f33f4665b7f", 0x66, 0x28}]}) write$tun(r3, &(0x7f00000005c0)={@val={0x0, 0x72c17396c5b2fca2}, @void, @ipv4=@dccp={{0x17, 0x4, 0x0, 0x4, 0x158, 0x65, 0x0, 0x8e, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@lsrr={0x83, 0xb, 0x9d, [@private=0xa010100, @multicast1]}, @ssrr={0x89, 0x27, 0x82, [@multicast1, @empty, @empty, @private=0xa010101, @loopback, @remote, @remote, @multicast1, @multicast1]}, @generic={0x94, 0x12, "ae3621ae6c5a5344f45dc34294510ebc"}, @ra={0x94, 0x4}]}}, {{0x4e20, 0x4e23, 0x4, 0x1, 0x2, 0x0, 0x0, 0x5, 0x6, "8472a3", 0x76, "32f6fd"}, "09bb26c1110856c00e5553b801c02f6a909a1d8d998732b2646c7853a1ed49ce6b1a05fd92bbb1b88dbb533164d1e831b209e8245b0b777d1f50f01df940842383fc3ad85211c070b0e5989ab533a60450faea8c1d66ba0c66e5ff6b49b906391e7f6a85ed4ba0b4fee63d4b569506d45eba79651013799706053cf80f28f350062035739823f23a73a3593258c4634751ebfb88cc1538f3cc3d978ed0879171dac1844b1e63997fb6d4d07ca0c88b319a1688f7174049b5d261fb97ed8c63047c7b050110ae9f5baf8552d4c5b90bca7ccd8d18c4445564d5cc69bf55e839727cff05d14a4d2802d97d3c0d"}}}, 0x15c) 1m47.499097395s ago: executing program 2 (id=2839): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x11c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x108, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xfffffffffffffd21, 0x8, {0x2}}}}, @m_sample={0xb8, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x0, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x3, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x9}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x11c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (rerun: 64) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSGEOMETRY_V1(r5, 0x80705864, &(0x7f0000000100)) r6 = socket$inet6(0xa, 0x3, 0x5) r7 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000000)={r9, 0xb5}, 0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000200)={r9, @in={{0x2, 0x4e21, @broadcast}}, 0x4, 0x8}, 0x90) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b4b56e000000", @ANYRES16=r4, @ANYBLOB="01002ebd7000fbdbdf251b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000047fd0b0000180000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) 1m47.408499532s ago: executing program 0 (id=2840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x400, 0x70bd27, 0x5, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe0}}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'tunl0\x00', 0x8000}) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/76, 0x4c}], 0x1}, 0x0) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=0x18) r6 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r8) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r8, @ANYRES32=r7]) r9 = socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r10, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], 0xfce) 1m47.394065308s ago: executing program 1 (id=2841): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'ip6gre0\x00', r3, 0x4, 0x1, 0x0, 0x2, 0x14, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x1, 0x6b56, 0x4}}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={0xffffffffffffffff}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0xfd7c}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x8110) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x7f}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r10, r13, 0x81, 0x0) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x1}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x20, &(0x7f0000000800)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="0000000e00000000b702892d093d4b619a000014000083000000bf0900006269ab50bd0eda640000000095000000000000000982630f0ad8c0a639426a57f8ffffff181600"/83, @ANYRES32=r4, @ANYBLOB="0000000000000000811103000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000900000085000000060000000873010006000000850000008c00000018410000feffffff000000000000000004030be001000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x5d, &(0x7f0000000340)=""/93, 0x41000, 0x20, '\x00', r5, 0x19, r6, 0x8, &(0x7f0000000400)={0x9}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x6, 0x3, 0x7}, 0x10, 0x1aa91, r7, 0x9, &(0x7f0000000580)=[r9, r10, r14, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x4, 0x1, 0x1}, {0x4, 0x1, 0x8, 0x1}, {0x4, 0x3, 0xc, 0x6}, {0x3, 0x4, 0xa, 0x7}, {0x4, 0x5, 0xb, 0x5}, {0x4, 0x3, 0x8, 0x1}, {0x2, 0x3, 0x5, 0x8}, {0x3, 0x5, 0xe, 0x9}, {0x0, 0x4, 0x1, 0xf799be94e0144edb}], 0x10, 0x5}, 0x94) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002120000000090a030b0000000000000000050000070900010073797a3100000000540400000b0a05000000000000000000070000093400098008000140000000080800014000000009200002801c0001800800014000000600080001400000407708000140fffffff8080007400000001608030980e40002804400018008000140000000000800014000000007080001400000000108000140000006c40800014000007dfb08000140000001010800014000000001080001400000cb6e340001800800014000000002080001400000000208000140fffffc000800014000000800080001400000000408000140000000052c000180080001400000000808000140ffffffff08001840000000ff080001400000001008000140000000093c000180080001400c0000000800014000000002080001400000000408000140000004130800014000000009080001400000000c08000140000000013c0102801c000180080001400000057c080001400000000208000140800000000c00018008000140000000030c000180080001400000000344000180080001400000010d080001400000000008000140000000090800014000000fff080001400000000008100140000000060800014000007fff0800014000000006240001800800014000004ca708000140000061a908000140000000050800014000000a781400018008000140ffffffff0800014000000006440001800800014000010001080001400000000408000140800000010800014000000ac5080001400000000008000140fffff0000800014000000c3108000140000000804400018008000140000000030800014000003b4b08000140000000040800014000000005080001400000040008000140000000080800014000000005080001400000000908000140000000c5b400028014000180080001400021c20008000140000000054400018008000140ffffffff0800014003a66d57080001400000000508000140000008000800014000000006080001400000000308000140ffffff0b080001400100000034000180080001400000000408000140ffffffff0800014000000006080001400000000608000140000000010800014000000ea12400018008000140000001000800014000000009080001400c000000080001400000000808000140000005f00800014000000002100002800c0001800800014000000008080001400000ffff08000f4000000005080006400000000008000440000000030900010073797a3000000000090002"], 0x944}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x400) r16 = getpid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)=r16) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f00000083c0)={{{@in=@private, @in6=@private1}}, {{@in=@private}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f00000084c0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000008500), &(0x7f0000008540)=0xc) 1m47.182966221s ago: executing program 2 (id=2842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xffffffffffffff0b, 0xaf, 0xe754}]}}}}}}}, 0x0) 1m47.101565293s ago: executing program 2 (id=2843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x80001, 0x0) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x81, 0x0, 0x9, 0xfffffffc, 0x4, 0x80000000, 0x2}, &(0x7f0000000380)=0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000005c0)={r2, @in={{0x2, 0x4e22, @local}}, 0x5, 0x1000, 0x8, 0x80000000, 0xc8}, &(0x7f0000000680)=0x98) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {0x2}, {}, {}, {0x1}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180)=0x9, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r5, 0xb35, 0x70bd22, 0x25dfdbfb}, 0x14}}, 0xa0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000b100008510000002000000a40000000000000095000011d46c482e1f9a79a60000009597dcff480071871c90420001010000009500000000000000852f2bc9"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r0, 0x620ee000) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) sendmmsg$inet6(r7, &(0x7f0000002840)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x10001, @local, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000002c40)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x6e}}}, @dstopts={{0x18, 0x29, 0x37, {0x6c}}}], 0x30}}], 0x1, 0x4000000) close(r6) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1300000056000100000000000000000007"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r6) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'gretap0\x00', 0x0}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmsg$alg(r12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) recvmmsg(r12, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)=""/234, 0xea}], 0x1}, 0x101}], 0x1, 0x60, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 1m46.999686805s ago: executing program 3 (id=2844): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x5}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x20001010) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x5}, 0x90) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x20001010) (async) 1m46.554904298s ago: executing program 3 (id=2845): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x2, 0x2, 0xc910000000000000, 0x5, 0x5], 0x4, &(0x7f0000000080)=[{}], 0x0, [{}, {}, {}, {}]}, 0xb8) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000200)=0x80) bind$alg(r2, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(tgr160,xts(cast6))\x00'}, 0x58) sendmsg$alg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="d5612aaca53536e3d2c6827eeeaf9fcfc6f4c5f2a4d161201fd276d2521a0a5095ef8ead3bd2c80013de924c2b2c7d7342bd11fb16ce072793ee042a3dae9e3db5ab8df3517eb4f3c7cd320d690c991f25cae7291fd4c2c1ca12b2f7ffb18b1c6e475b8a6e5998b8c82a7f734d151462b7ccf16f88ab3e1daa263fdb3bb583919770003c21c8f2551ee1084b9558bf4e37e7dc7a31ff30fc433171ea77f7e245a2111f521c5bea5c35c17e4d24d7332ffdba78d21c7f86a9ac176429e5461bd4182b2c019296a9acf3a832ab41e7b3", 0xcf}], 0x1, 0x0, 0x0, 0x4008840}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa8, r4, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x6, 0x2d4}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x4882e593f18f5580}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x67, 0xac, "88a257d66aee544ead99ed92cdbbc58a69736f498eea4f712ac2bc8d2eb0368a6035a4e3a60b6223d6b16331ee1253b3d41f7b760662247197ffe48ce970101822cc62a9235993adcb9533cfdfdb296331dede04fa989243e232ca1aa95aa9c8cdba86"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x5) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname(r5, &(0x7f0000000600)=@rc={0x1f, @fixed}, &(0x7f0000000680)=0x80) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000006c0)=0xc0, 0x4) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000a00)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000a40)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@broadcast}}, &(0x7f0000000b40)=0xe8) r8 = getgid() ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000b80)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000cc0)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000d00)={0x0}, &(0x7f0000000d40)=0xc) r12 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000d80)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, &(0x7f0000000e00)=0xc) r15 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000e40)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000f40)=0xe8) r17 = getgid() r18 = getpid() r19 = getgid() sendmsg$unix(r1, &(0x7f00000010c0)={&(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000780)="4aafbd8fa9ab0c105aeb4504c4a29b2a287d8b5ff6", 0x15}, {&(0x7f00000007c0)="42bf0cfecd2b7a1e2341fdb4440b65338b0a643bb7ceada334e08c2272c920912d8586c208700a8c340dd0ea90273f33d186999ce833d27f6fc9b8bdde20a5b0fd0a4c141d07b5852a523742269c5fb346f37ffa0eb29f3298dd847ec0de7d78fdacfc8bbda00d4283b58db21726641d5e39a5b88ac4dd167df182beb92cb1ef18c316b4d854b6a21e812e6681cfed40bdcca057f49af28d2062e36afb7241f41db23bcb", 0xa4}, {&(0x7f0000000880)="da1d15e3cee8c57e320a48c5d6bc189c128870859fcf7b4dc3dab45fdb34811d21f305f38eb1c81b7164332d598fe970b9b5c431a84e2006c431f2749b1816d69ca4220a779d0fbc5f1d1f09d0e52c8ded3e2ff5d964c1d73912ec82eeb1b74acdd56a643f7271de8bc57df4d5d4f232723b6fd1f5324ff41811c7bda88641701b6cb985e8008f12cf61c593e904287a16a8437ba9de4ea6024e1ee95f709d9442b947b7e08dc7f7f1428e13f268cace9aa9ed61e4f5e63090acd9131ac69e58dc96b5f45e2f731461ecf6ed2cc0e8d7d1870f7f", 0xd4}, {&(0x7f0000000980)}], 0x4, &(0x7f0000000f80)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r12, r0, r0, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r13, r14}}}, @rights={{0x20, 0x1, 0x1, [r5, r3, r5, r15]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, 0xee00, r19}}}], 0x108, 0x40}, 0x4000080) socketpair(0x23, 0x3, 0x5, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = syz_genetlink_get_family_id$tipc(&(0x7f0000001180), r20) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x30, r21, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x5, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x814) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x78, r4, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x1, 0x2, 0x0, {0x6d6, 0xd, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x800, 0x3d, 0x1c}}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_BSS_SELECT={0x10, 0xe3, 0x0, 0x1, {0xc, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x2}]}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1, 0x0, 0x0, 0x0, {0xfffffffffffffffb, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, 0x800, 0x1, 0x3}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x10000800}, 0x20048080) 1m46.55406438s ago: executing program 4 (id=2846): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) poll(&(0x7f0000000000)=[{r0, 0x125}], 0x1, 0x9) 1m46.543545782s ago: executing program 2 (id=2847): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000000)="ca1d42190e46c2be2849b5395716ddb92cbb60d6c52e1973a5b849bad0f07bcc5c7261cc77c8450675b70b406acc3f68e25c9acbd02b0229b3f368018c11c60d4961be68d4d9", 0x46) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @initdev}, &(0x7f00000000c0)=0xc) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000100)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000340)={{r0, &(0x7f0000000140)='\x00', 0x101000, &(0x7f0000000180)={@_ha_fsid={[0x2, 0x3]}, {0x82fe, 0x3, 0x293, 0xa61}}, 0x40, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x2}, 0x1, &(0x7f0000000300)=[{0x1, 0x4, &(0x7f0000000240)='*\x00', &(0x7f0000000280)="51f163d7e9655cdb99a82d443f811aa7c5df2137988d16bea31c881494bc10672140c50ad943d78202fffbac96a6a37891e85e92d69478b9bd1316fb27f6f23576fa8e8b65b9e7348f10de9c548c0fa7de126a545871e8727a02f38c970d56610991ac6f4279c1", 0x67}]}) ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f00000003c0)=@default) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000500)={&(0x7f0000000400)=""/202, 0xca}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000540)={{r0}, "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"}) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000001540)={{0x32, @remote, 0x9, 0x4, 'lc\x00', 0x14, 0x1, 0x1c}, {@private=0xa010100, 0x4e21, 0x0, 0x8, 0x1, 0xf}}, 0x44) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001880)=@bpf_ext={0x1c, 0x2, &(0x7f0000001600)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x832, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000001640)='syzkaller\x00', 0x6, 0xbc, &(0x7f0000001680)=""/188, 0x40f00, 0x20, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000001740)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001780)={0x0, 0x6, 0x6, 0x6}, 0x10, 0x20f12, 0xffffffffffffffff, 0x6, &(0x7f00000017c0)=[r0, r3, r3, r3], &(0x7f0000001800)=[{0x4, 0x3, 0xf, 0x4}, {0x2, 0x3, 0xd, 0x3}, {0x0, 0x4, 0x8, 0x8}, {0x3, 0x4, 0xc, 0x8}, {0x3, 0x5, 0xd, 0x9}, {0x2, 0x3, 0x4, 0x9}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000015c0)={@cgroup=r3, r3, 0x31, 0x7, r3, @void, @value=r4}, 0x20) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000001940), &(0x7f0000001980)=0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r5, 0x42600, 0x732, &(0x7f00000019c0)="c5c108b500c5ae0f416254cb026abf3f76128061d48be8d67ea68b10b1cfc1acb0c5e38775bcb73470f91a6b41b96406", 0x30) ioctl(r4, 0xa, &(0x7f0000001a00)="3e8ab6674d3856b6640ffb4bf76c1f544ac8602b747d0337016674c0b02f44") r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000001a80), r3) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x2c, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000001b80)={"fb4cbba5fc12c27f8c5b20eaa59c9241", 0x0, 0x0, {0x2, 0x6}, {0x2, 0x8}, 0x343, [0x1, 0x6, 0x0, 0x9, 0x0, 0x4, 0x4, 0x4, 0x7, 0x1, 0x3ff, 0x3, 0x222d, 0x3, 0x2ac, 0x7fff]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001c80)={{r4}, r7, 0x8, @unused=[0x5, 0x7, 0x81, 0x5], @subvolid=0x9}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, &(0x7f0000002c80)={0x68, 0x5}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000002cc0)={0x0, 'wg1\x00', {0x3}, 0x7}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000002d00)={0x3, 0x5}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d80), r4) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x1004000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x14, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) close(r0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002ec0), r3) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x1c, r9, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4008845) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000030c0), 0x4) 1m46.327780971s ago: executing program 4 (id=2848): r0 = socket$netlink(0x10, 0x3, 0x1) writev(r0, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001500190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1m46.235294911s ago: executing program 1 (id=2849): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0xff, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xa, 0xfff3}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) accept4(r0, &(0x7f0000000000)=@llc, &(0x7f0000000080)=0x80, 0x800) 1m46.15627174s ago: executing program 2 (id=2850): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000001340)=@phonet={0x23, 0x7f, 0x6, 0x9}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x6}], 0x1}, 0x20000001) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 1m46.03402565s ago: executing program 3 (id=2851): r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000048000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000708000140000000051400030076657468315f6d616376746170000000140000001100010000000000000000000000000a"], 0x90}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'team_slave_1\x00', 0x100}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="01000000020000000400000004"], 0x48) close(0x3) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_LEARNING={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r8, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)='\'', 0x1}], 0x1}, 0x4) 1m45.863152824s ago: executing program 4 (id=2852): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}}, 0xc000) 1m45.75106664s ago: executing program 1 (id=2853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xffffffffffffff0b, 0xaf, 0xe754}]}}}}}}}, 0x0) 1m45.621304157s ago: executing program 2 (id=2854): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, 0x0}}], 0x1, 0x4000040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r2 = socket$inet(0x2, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r2}, 0x20) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r4, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r5, 0x0, 0x2, &(0x7f0000000380)='\a', 0x1) sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r7, 0x4, 0x100, 0x3}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000080)={r7, 0x5, 0xb, 0x3, 0x200, 0xd99e}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r8, 0xe}, 0x8) r9 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c2000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$inet6_int(r9, 0x29, 0x10, &(0x7f00000000c0), 0x4) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) 1m45.490904073s ago: executing program 0 (id=2855): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x7, 0x6, 0x31, 0x5, 0x80, 0x2, 0x42, 0x1, 0xb, 0x7, 0x8, 0x3, 0xb, 0x1}, 0xe) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffff7, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r1}, &(0x7f0000000080)=0x8) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x4}, @TCA_CODEL_CE_THRESHOLD={0xffffffffffffff79}]}}]}, 0x44}}, 0x0) (async, rerun: 32) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffa}, 0xe) (async) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0x1}, 0xe) (async) sendmsg$inet(r7, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000380)="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", 0x2ae}], 0x1}, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0xe23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r9, 0x29, 0x41, &(0x7f0000000340)=ANY=[], 0x78) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073790900000000000900010073797a30006d29b8dc000a40000000042c000000080a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) 1m45.489806313s ago: executing program 4 (id=2856): unshare(0x1100) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x3, 0x8000, 0x6}) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x25, 0xc, @val=@netkit}, 0x1c) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000640)=0xe8) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000700)=0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000840)=0xe8) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) r10 = getpid() (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000a00)=0xe8) (async, rerun: 32) r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async, rerun: 32) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r14 = accept$inet(0xffffffffffffffff, &(0x7f0000000a40)={0x2, 0x0, @multicast1}, &(0x7f0000000a80)=0x10) sendmsg$unix(r1, &(0x7f0000000c00)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000100)="025531a94552eb543d66b94007672cfd07687cf5c780227cf729278486b88b58c8d162a682c1da1ae66926ca4d7876a7f10fde993788317227d74e2396da31d404eb4042d1fc1e5f082f787ab457c4400cae8cd3b2486ec7a4d8372f27ee529fb943e0469687590b874b18d870e0df77fcef54cfb4409d4da9018b4bf358bde355e027c95c3b0e202648d6976ccedbdfa671224421532d6e40bb570168cb8f6646f093d267d5b0cb24e7", 0xaa}, {&(0x7f00000001c0)="8b6b70e473a06e7fd4e0c525313d1ca7e0b3016a2682330c2e7131e025da0ff2e81688a87b94a41e1d37e7df353112020b2ca4beed7465c0f72e7094dbef4469753fc58394c22e229230f639a30d9377c9e1747c8c3c9e7f1fb807c80a258c3fc2db41c865abb32bd03d6b70a4fae5fd0e2a461f28d6437353cbd774158ec0df872f3455c9096a73a6c22482011d0d9fd9d8bbddd4c01cc0d96835a5068adef8e5adc8ca325b399f20b82554eeef8b08ce6d372c1f79e63bd59e62d96c55b693f25ba0d7f8a12cf511ffe83aac413aca2bb41a04b6952e597a8d299ecbddfdb89ea20c23e3d526c146381a0111e73627d2f86630", 0xf4}, {&(0x7f00000002c0)="0d1726cb246f31e13311c1b8d63d4a457657aedf5226f320d62d4efa24b30217a151937aa0a4dcc0b034d8a59cedfaf84df6ea81b26d19bf29c5e658e1509d0cd727e4036e22ff0c238e54a6e602a29eedaca8bc80a5bbd746f956eb691b24671307e525ef0dd0081571b5e9b907bd", 0x6f}, {&(0x7f0000000340)="4057b42cd316b7efc9f14c4932b1be", 0xf}, {&(0x7f0000000380)="e84e50e7fb4ee4618ebf3fe60c39c4b5fce1e901f9fd942c77135910398ea325dd3691e8db5067bbc3591cb0b3d98fa55f2c91962d6090af1efbdca08c8a74f68b0e2ff6f234cb75a0a91540665e51958c01f0db6e1e4a2372399f24edd02be65160768eb240d3a529e250cdb68aecb401ecee74d7e973a6f86325a622dfa64049798b9c8deb130514bc4bafb87cdecba45c9f59cf85b17afcb783e1cdd062362b6bff6301b6a44bea7983b7583f9f3d7c2bf0d0196e182d85c3b756345b1711c98805858d04a58cca0395bf60059625bfc52467d7b2f49a977a", 0xda}], 0x5, &(0x7f0000000ac0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r2]}}, @rights={{0x34, 0x1, 0x1, [r0, r3, r0, r4, 0xffffffffffffffff, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r12]}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r13]}}, @rights={{0x18, 0x1, 0x1, [r14, r0]}}], 0x128, 0x4044000}, 0x4000000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r13, 0x10e, 0x2, &(0x7f0000000c40)=0x16, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000c80), &(0x7f0000000cc0)=0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00), r1) (async) pipe(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000d80)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0xfffffffc, 0xbcde, 0x80, 0xfffffffb, 0x48, 0x0, 0xd2}, &(0x7f0000000e40)=0x9c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r15, 0x84, 0x79, &(0x7f0000000e80)={r16, 0x401, 0x2}, 0x8) (async, rerun: 32) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000ec0)) (async, rerun: 32) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000f40)={{r4}, "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"}) ioctl$AUTOFS_IOC_READY(r15, 0x9360, 0xffff) (async) ioctl$EXT4_IOC_CHECKPOINT(r12, 0x4004662b, &(0x7f0000001f40)=0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001f80)={'xfrm0\x00', 0x2000}) 0s ago: executing program 32 (id=2855): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x7, 0x6, 0x31, 0x5, 0x80, 0x2, 0x42, 0x1, 0xb, 0x7, 0x8, 0x3, 0xb, 0x1}, 0xe) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffff7, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r1}, &(0x7f0000000080)=0x8) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x4}, @TCA_CODEL_CE_THRESHOLD={0xffffffffffffff79}]}}]}, 0x44}}, 0x0) (async, rerun: 32) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffa}, 0xe) (async) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0x1}, 0xe) (async) sendmsg$inet(r7, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000380)="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", 0x2ae}], 0x1}, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0xe23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r9, 0x29, 0x41, &(0x7f0000000340)=ANY=[], 0x78) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073790900000000000900010073797a30006d29b8dc000a40000000042c000000080a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) kernel console output (not intermixed with test programs): 138.977509][ T8099] Bluetooth: MGMT ver 1.23 [ 139.154265][ T24] net_ratelimit: 3 callbacks suppressed [ 139.154286][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.356686][ T8116] __nla_validate_parse: 22 callbacks suppressed [ 139.356709][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'. [ 139.380782][ T8116] netlink: 'syz.3.618': attribute type 83 has an invalid length. [ 139.390518][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.472726][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'. [ 139.526611][ T8128] netlink: 199808 bytes leftover after parsing attributes in process `syz.2.620'. [ 139.573114][ T8128] netlink: 'syz.2.620': attribute type 1 has an invalid length. [ 139.581868][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 139.609488][ T8131] netlink: 666 bytes leftover after parsing attributes in process `syz.4.621'. [ 139.789286][ T8140] netlink: 'syz.3.626': attribute type 1 has an invalid length. [ 139.790569][ T8138] netlink: 'syz.0.625': attribute type 12 has an invalid length. [ 139.806002][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 139.840601][ T8135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.848195][ T8135] batadv0: mtu less than device minimum [ 139.864385][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'. [ 139.890476][ T8135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.902638][ T8135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.914464][ T8135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.926062][ T8135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.937583][ T8135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.949031][ T8135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.960761][ T8135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.010834][ T8135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.157646][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.628'. [ 140.203800][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'. [ 140.220939][ T8153] gtp0: entered promiscuous mode [ 140.226074][ T8153] gtp0: entered allmulticast mode [ 140.360592][ T8156] netlink: 132 bytes leftover after parsing attributes in process `syz.2.630'. [ 140.556590][ T8172] xt_hashlimit: size too large, truncated to 1048576 [ 140.832430][ T8180] : entered promiscuous mode [ 141.153073][ T8208] netlink: 'syz.0.646': attribute type 10 has an invalid length. [ 141.628004][ T8208] veth0_vlan: left promiscuous mode [ 141.641988][ T8208] veth0_vlan: entered promiscuous mode [ 141.674522][ T8208] team0: Device veth0_vlan failed to register rx_handler [ 142.012293][ T8241] hsr0 speed is unknown, defaulting to 1000 [ 142.188135][ T8236] xt_CT: No such helper "syz1" [ 142.550634][ T8263] netlink: 'syz.1.659': attribute type 4 has an invalid length. [ 142.666584][ T8270] xt_ecn: cannot match TCP bits for non-tcp packets [ 143.129370][ T8284] netlink: 'syz.1.663': attribute type 2 has an invalid length. [ 143.182599][ T8289] syzkaller0: entered promiscuous mode [ 143.208567][ T8289] syzkaller0: entered allmulticast mode [ 144.053223][ T8330] block nbd3: not configured, cannot reconfigure [ 144.353056][ T24] net_ratelimit: 23 callbacks suppressed [ 144.353077][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.387602][ T8343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.573768][ T8352] __nla_validate_parse: 9 callbacks suppressed [ 144.573792][ T8352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.685'. [ 144.652760][ T8358] netlink: 'syz.3.687': attribute type 1 has an invalid length. [ 144.691303][ T8358] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 145.070251][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.305489][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.694'. [ 145.392002][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.515938][ T8399] xt_hashlimit: size too large, truncated to 1048576 [ 145.820093][ T8417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.704'. [ 145.837044][ T8417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.704'. [ 145.860990][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 145.887066][ T8418] netlink: 'syz.0.703': attribute type 10 has an invalid length. [ 145.904754][ T8424] netlink: 20 bytes leftover after parsing attributes in process `syz.4.704'. [ 145.973961][ T8418] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 146.055735][ T5831] syz1: Port: 1 Link ACTIVE [ 146.104657][ T8435] netlink: 'syz.2.708': attribute type 8 has an invalid length. [ 146.238179][ T8444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.711'. [ 146.259101][ T8444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.711'. [ 146.278531][ T8446] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.712'. [ 146.370908][ T8450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.379646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.404229][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'. [ 146.431924][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.531046][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.570857][ T8462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.579845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.262095][ T8496] veth0: entered promiscuous mode [ 147.270422][ T8495] veth0: left promiscuous mode [ 147.743826][ T8528] netlink: 'syz.0.737': attribute type 1 has an invalid length. [ 147.847601][ T8541] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.855399][ T8541] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.909087][ T8586] netlink: 'syz.3.757': attribute type 1 has an invalid length. [ 149.043476][ T8598] xt_TCPMSS: Only works on TCP SYN packets [ 149.563493][ T796] net_ratelimit: 14 callbacks suppressed [ 149.563517][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.659859][ T8623] netlink: 'syz.2.766': attribute type 3 has an invalid length. [ 150.061829][ T8652] xt_hashlimit: size too large, truncated to 1048576 [ 150.084608][ T8656] netlink: 'syz.0.776': attribute type 21 has an invalid length. [ 150.102635][ T8656] __nla_validate_parse: 20 callbacks suppressed [ 150.102657][ T8656] netlink: 132 bytes leftover after parsing attributes in process `syz.0.776'. [ 150.333146][ T8671] netlink: 'syz.4.779': attribute type 1 has an invalid length. [ 150.490440][ T8671] openvswitch: netlink: Multiple metadata blocks provided [ 150.522190][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.779'. [ 150.593903][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.721323][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'. [ 150.744817][ T8686] xt_ecn: cannot match TCP bits for non-tcp packets [ 151.122404][ T8711] netlink: 32 bytes leftover after parsing attributes in process `syz.2.791'. [ 151.150594][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.156572][ T8711] netlink: 32 bytes leftover after parsing attributes in process `syz.2.791'. [ 151.159476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.337135][ T8723] netlink: 168 bytes leftover after parsing attributes in process `syz.0.794'. [ 151.347224][ T8720] hsr0 speed is unknown, defaulting to 1000 [ 151.451690][ T8729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.796'. [ 151.544252][ T8733] netlink: 'syz.1.796': attribute type 3 has an invalid length. [ 151.633655][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.829859][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 151.835726][ T8747] netlink: 'syz.4.801': attribute type 1 has an invalid length. [ 151.912730][ T8747] bond3: entered promiscuous mode [ 151.918050][ T8747] bond3: entered allmulticast mode [ 151.924124][ T8747] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.937058][ T8743] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 151.946793][ T8751] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 151.962640][ T8751] netlink: 'syz.3.802': attribute type 39 has an invalid length. [ 151.983013][ T8743] netlink: 148 bytes leftover after parsing attributes in process `syz.0.800'. [ 152.268654][ T8764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.806'. [ 152.291758][ T8764] netlink: 'syz.3.806': attribute type 7 has an invalid length. [ 152.482628][ T8775] dvmrp0: entered allmulticast mode [ 152.625736][ T8788] netlink: 'syz.4.813': attribute type 21 has an invalid length. [ 152.659005][ T8789] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 152.671244][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.672976][ T8789] bond4 (unregistering): Released all slaves [ 152.693669][ T8796] SET target dimension over the limit! [ 153.212975][ T8820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.261550][ T8820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.277057][ T8820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.767137][ T8851] netlink: 'syz.3.831': attribute type 21 has an invalid length. [ 153.793392][ T8851] netlink: 'syz.3.831': attribute type 21 has an invalid length. [ 154.131205][ T8868] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 154.220315][ T8863] macvlan2: entered promiscuous mode [ 154.225705][ T8863] macvlan2: entered allmulticast mode [ 154.282540][ T8863] bond4: entered promiscuous mode [ 154.287748][ T8863] bridge5: entered promiscuous mode [ 154.323297][ T8863] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 154.341125][ T8863] bond4: left promiscuous mode [ 154.346137][ T8863] bridge5: left promiscuous mode [ 154.406826][ T8885] syzkaller0: entered promiscuous mode [ 154.414568][ T8885] syzkaller0: entered allmulticast mode [ 154.553451][ T8894] netlink: 'syz.4.847': attribute type 1 has an invalid length. [ 154.596469][ T8894] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.624944][ T8894] bond4: (slave geneve4): making interface the new active one [ 154.635877][ T8894] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 154.645523][ T169] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 154.658933][ T169] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 154.688874][ T169] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 154.735289][ T8898] tipc: Enabling of bearer rejected, failed to enable media [ 154.745531][ T13] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 154.754811][ T42] net_ratelimit: 5 callbacks suppressed [ 154.754837][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.782790][ T8897] tipc: Enabling of bearer rejected, failed to enable media [ 154.831174][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.839557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.995230][ T1130] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.406742][ T8940] __nla_validate_parse: 11 callbacks suppressed [ 155.406765][ T8940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.861'. [ 155.479496][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.862'. [ 155.548219][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'. [ 155.732395][ T8954] netlink: 'syz.1.865': attribute type 8 has an invalid length. [ 155.740277][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 155.742792][ T8955] ipvlan1: entered promiscuous mode [ 155.791208][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.811250][ T8955] ipvlan1: entered allmulticast mode [ 155.816629][ T8955] veth0_vlan: entered allmulticast mode [ 155.864472][ T8954] bond0: entered promiscuous mode [ 155.869724][ T8954] bond_slave_0: entered promiscuous mode [ 155.876038][ T8954] bond_slave_1: entered promiscuous mode [ 155.884328][ T8954] gretap0: entered promiscuous mode [ 155.900118][ T8954] bond0: left promiscuous mode [ 155.904979][ T8954] bond_slave_0: left promiscuous mode [ 155.952778][ T8954] bond_slave_1: left promiscuous mode [ 155.985981][ T8954] gretap0: left promiscuous mode [ 156.110894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.331527][ T8990] IPv6: addrconf: prefix option has invalid lifetime [ 156.442972][ T8994] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20002 [ 156.463623][ T8996] netlink: 100 bytes leftover after parsing attributes in process `syz.3.878'. [ 156.657360][ T9005] netlink: 184 bytes leftover after parsing attributes in process `syz.0.881'. [ 156.830863][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.281394][ T9037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.871020][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.879257][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.887738][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.163986][ T9041] netlink: 'syz.0.895': attribute type 23 has an invalid length. [ 158.870172][ T9059] netlink: 'syz.1.903': attribute type 1 has an invalid length. [ 158.878168][ T9059] netlink: 212 bytes leftover after parsing attributes in process `syz.1.903'. [ 159.127558][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 159.193353][ T9076] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 159.212809][ T9076] netlink: 40 bytes leftover after parsing attributes in process `syz.0.909'. [ 159.230497][ T9076] batadv0: entered promiscuous mode [ 159.241355][ T9076] batadv0: entered allmulticast mode [ 159.257814][ T9076] bridge0: port 1(batadv0) entered blocking state [ 159.280822][ T9076] bridge0: port 1(batadv0) entered disabled state [ 159.301432][ T9086] netlink: 36 bytes leftover after parsing attributes in process `syz.3.908'. [ 159.320878][ T9076] bridge0: port 1(batadv0) entered blocking state [ 159.327579][ T9076] bridge0: port 1(batadv0) entered forwarding state [ 159.603146][ T9096] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 159.781499][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 159.791783][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 159.837376][ T9104] net_ratelimit: 4 callbacks suppressed [ 159.837396][ T9104] Set syz1 is full, maxelem 768 reached [ 159.953068][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.195758][ T9132] syz.1.923: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 160.238992][ T9132] CPU: 0 UID: 0 PID: 9132 Comm: syz.1.923 Not tainted syzkaller #0 PREEMPT(full) [ 160.239023][ T9132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 160.239045][ T9132] Call Trace: [ 160.239054][ T9132] [ 160.239064][ T9132] dump_stack_lvl+0xe8/0x150 [ 160.239115][ T9132] warn_alloc+0x249/0x340 [ 160.239144][ T9132] ? stack_trace_save+0xa9/0x100 [ 160.239172][ T9132] ? __pfx_warn_alloc+0x10/0x10 [ 160.239207][ T9132] ? kasan_save_track+0x4f/0x80 [ 160.239231][ T9132] ? kasan_save_track+0x3e/0x80 [ 160.239254][ T9132] ? __kasan_kmalloc+0x93/0xb0 [ 160.239279][ T9132] ? __kmalloc_cache_noprof+0x31c/0x660 [ 160.239304][ T9132] ? xskq_create+0x56/0x170 [ 160.239331][ T9132] ? xsk_setsockopt+0x54c/0x990 [ 160.239355][ T9132] ? do_sock_setsockopt+0x17c/0x1b0 [ 160.239384][ T9132] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 160.239411][ T9132] ? do_syscall_64+0x14d/0xf80 [ 160.239447][ T9132] __vmalloc_node_range_noprof+0x132/0x1730 [ 160.239507][ T9132] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 160.239541][ T9132] ? __kasan_kmalloc+0x93/0xb0 [ 160.239575][ T9132] vmalloc_user_noprof+0xad/0xe0 [ 160.239600][ T9132] ? xskq_create+0xbf/0x170 [ 160.239628][ T9132] xskq_create+0xbf/0x170 [ 160.239659][ T9132] xsk_init_queue+0x8a/0xe0 [ 160.239689][ T9132] xsk_setsockopt+0x54c/0x990 [ 160.239718][ T9132] ? __pfx_xsk_setsockopt+0x10/0x10 [ 160.239744][ T9132] ? __pfx_aa_sk_perm+0x10/0x10 [ 160.239780][ T9132] ? aa_sock_opt_perm+0xff/0x1a0 [ 160.239805][ T9132] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 160.239832][ T9132] ? __pfx_xsk_setsockopt+0x10/0x10 [ 160.239893][ T9132] do_sock_setsockopt+0x17c/0x1b0 [ 160.239925][ T9132] __x64_sys_setsockopt+0x13d/0x1b0 [ 160.239961][ T9132] do_syscall_64+0x14d/0xf80 [ 160.239993][ T9132] ? trace_irq_disable+0x3b/0x150 [ 160.240012][ T9132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.240035][ T9132] ? clear_bhb_loop+0x40/0x90 [ 160.240062][ T9132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.240085][ T9132] RIP: 0033:0x7fb18999c819 [ 160.240114][ T9132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.240134][ T9132] RSP: 002b:00007fb18a8e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 160.240158][ T9132] RAX: ffffffffffffffda RBX: 00007fb189c15fa0 RCX: 00007fb18999c819 [ 160.240174][ T9132] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 160.240187][ T9132] RBP: 00007fb189a32c91 R08: 0000000000000004 R09: 0000000000000000 [ 160.240200][ T9132] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.240214][ T9132] R13: 00007fb189c16038 R14: 00007fb189c15fa0 R15: 00007ffcfc15aff8 [ 160.240249][ T9132] [ 160.568422][ T9132] Mem-Info: [ 160.572650][ T9132] active_anon:7441 inactive_anon:0 isolated_anon:0 [ 160.572650][ T9132] active_file:2757 inactive_file:39956 isolated_file:0 [ 160.572650][ T9132] unevictable:768 dirty:43 writeback:0 [ 160.572650][ T9132] slab_reclaimable:11125 slab_unreclaimable:98636 [ 160.572650][ T9132] mapped:30862 shmem:2916 pagetables:1364 [ 160.572650][ T9132] sec_pagetables:0 bounce:0 [ 160.572650][ T9132] kernel_misc_reclaimable:0 [ 160.572650][ T9132] free:1325351 free_pcp:9886 free_cma:0 [ 160.621788][ T9139] IPv6: sit1: Disabled Multicast RS [ 160.630045][ T9132] Node 0 active_anon:31264kB inactive_anon:0kB active_file:11028kB inactive_file:159620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124948kB dirty:168kB writeback:0kB shmem:11628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12824kB pagetables:5304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 160.665498][ T9132] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 160.739620][ T9132] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 160.770130][ T9132] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 160.775976][ T9132] Node 0 DMA32 free:1349580kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35164kB inactive_anon:0kB active_file:11028kB inactive_file:159620kB unevictable:1536kB writepending:168kB zspages:0kB present:3129332kB managed:2552580kB mlocked:0kB bounce:0kB free_pcp:34196kB local_pcp:13460kB free_cma:0kB [ 160.809821][ T9132] lowmem_reserve[]: 0 0 0 0 0 [ 160.814684][ T9132] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 160.865504][ T9132] lowmem_reserve[]: 0 0 0 0 0 [ 160.872386][ T9132] Node 1 Normal free:3936464kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 160.908576][ T9132] lowmem_reserve[]: 0 0 0 0 0 [ 160.922011][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.930496][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.954574][ T9132] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 160.968188][ T9132] Node 0 DMA32: 3479*4kB (UME) 1554*8kB (UME) 611*16kB (UE) 77*32kB (UME) 114*64kB (UME) 107*128kB (UME) 92*256kB (UME) 67*512kB (UME) 55*1024kB (UM) 32*2048kB (UME) 271*4096kB (UM) = 1349308kB [ 160.988342][ T9132] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 161.012234][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.036086][ T9132] Node 1 Normal: 0*4kB 2*8kB (UM) 6*16kB (UM) 5*32kB (UM) 9*64kB (UM) 5*128kB (UM) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3936464kB [ 161.090794][ T9132] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.100664][ T9132] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.144602][ T9132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.170647][ T9132] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.201527][ T9132] 46762 total pagecache pages [ 161.206308][ T9132] 0 pages in swap cache [ 161.226557][ T9132] Free swap = 124996kB [ 161.236636][ T9132] Total swap = 124996kB [ 161.240550][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.244112][ T9132] 2097051 pages RAM [ 161.252508][ T9132] 0 pages HighMem/MovableOnly [ 161.257537][ T9132] 427072 pages reserved [ 161.265568][ T9132] 0 pages cma reserved [ 161.406853][ T9157] __nla_validate_parse: 1 callbacks suppressed [ 161.406879][ T9157] netlink: 32 bytes leftover after parsing attributes in process `syz.4.931'. [ 161.446705][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 161.637638][ T9161] batman_adv: batadv0: Interface deactivated: dummy0 [ 161.678989][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.936'. [ 161.692047][ T9186] netlink: 36 bytes leftover after parsing attributes in process `syz.4.931'. [ 161.709735][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.936'. [ 161.769777][ T9161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.889682][ T9161] bond2: left promiscuous mode [ 161.895127][ T9161] bridge2: left promiscuous mode [ 161.912433][ T9161] bond3: left promiscuous mode [ 161.922719][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.931'. [ 161.944216][ T9157] netlink: 2 bytes leftover after parsing attributes in process `syz.4.931'. [ 162.057194][ T239] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.081269][ T9199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.089671][ T239] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.098827][ T239] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.115889][ T239] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.171432][ T9195] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4 [ 162.263276][ T239] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.280575][ T239] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.304887][ T239] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.316159][ T239] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.362037][ T9210] pim6reg1: entered promiscuous mode [ 162.374077][ T9210] pim6reg1: entered allmulticast mode [ 162.510736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.533348][ T9224] xt_NFQUEUE: number of total queues is 0 [ 162.615039][ T9219] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 162.651359][ T9219] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 162.666115][ T9219] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 162.990415][ T9195] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4 [ 163.051255][ T9245] netlink: 'syz.2.950': attribute type 2 has an invalid length. [ 163.076697][ T9245] 9: entered promiscuous mode [ 163.101088][ T9245] netlink: 'syz.2.950': attribute type 25 has an invalid length. [ 163.118152][ T9245] netlink: 'syz.2.950': attribute type 28 has an invalid length. [ 163.130245][ T9245] netlink: 'syz.2.950': attribute type 1 has an invalid length. [ 163.141744][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.950'. [ 163.152976][ T9197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.184299][ T9245] netlink: 'syz.2.950': attribute type 12 has an invalid length. [ 163.258766][ T9253] syzkaller0: entered promiscuous mode [ 163.276773][ T9253] syzkaller0: entered allmulticast mode [ 163.396098][ T9260] dvmrp0: entered allmulticast mode [ 163.404500][ T9260] bridge0: port 1(syz_tun) entered blocking state [ 163.412964][ T9260] bridge0: port 1(syz_tun) entered disabled state [ 163.419629][ T9260] syz_tun: entered allmulticast mode [ 163.471160][ T9260] syz_tun: entered promiscuous mode [ 163.645110][ T9267] netlink: 'syz.3.958': attribute type 21 has an invalid length. [ 163.668709][ T9267] IPv6: NLM_F_CREATE should be specified when creating new route [ 164.023795][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.963'. [ 164.047266][ T9286] macsec1: entered promiscuous mode [ 164.056701][ T9286] bridge0: entered promiscuous mode [ 164.063113][ T9286] macsec1: entered allmulticast mode [ 164.069693][ T9286] bridge0: port 3(macsec1) entered blocking state [ 164.078097][ T9286] bridge0: port 3(macsec1) entered disabled state [ 164.111516][ T9286] bridge0: left promiscuous mode [ 164.337522][ T9299] bond0: (slave gre0): refused to change device type [ 164.509242][ T9314] netlink: 'syz.0.971': attribute type 30 has an invalid length. [ 164.523563][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.971'. [ 164.552463][ T9315] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 164.571665][ T9315] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 164.939350][ T9336] hsr0: entered promiscuous mode [ 164.961658][ T9336] macvlan2: entered allmulticast mode [ 164.967118][ T9336] hsr0: entered allmulticast mode [ 164.985858][ T9336] hsr_slave_0: entered allmulticast mode [ 164.993492][ T9336] hsr_slave_1: entered allmulticast mode [ 165.012243][ T9342] atomic_op ffff88807a306198 conn xmit_atomic 0000000000000000 [ 165.216452][ T9334] syzkaller0: entered promiscuous mode [ 165.233510][ T9195] net_ratelimit: 10 callbacks suppressed [ 165.233533][ T9195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.256533][ T9334] syzkaller0: entered allmulticast mode [ 166.287625][ T9197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.002950][ T9180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.012420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.291258][ T9391] syzkaller0: entered promiscuous mode [ 167.296865][ T9391] syzkaller0: entered allmulticast mode [ 167.311462][ T9197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.402154][ T9405] netlink: 'syz.0.993': attribute type 10 has an invalid length. [ 167.474575][ T9412] __nla_validate_parse: 5 callbacks suppressed [ 167.474596][ T9412] netlink: 256 bytes leftover after parsing attributes in process `syz.4.995'. [ 167.572973][ T1209] IPVS: starting estimator thread 0... [ 167.579022][ T9415] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 167.672117][ T9421] IPVS: using max 27 ests per chain, 64800 per kthread [ 167.788630][ T9428] openvswitch: netlink: Multiple metadata blocks provided [ 167.870410][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4 [ 168.350580][ T9195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.835802][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.146548][ T9405] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 169.156899][ T9405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 169.166128][ T9405] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 169.406551][ T9454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1006'. [ 169.732639][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1012'. [ 169.806533][ T9475] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 169.816778][ T9475] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 170.079596][ T9496] netlink: 'syz.1.1020': attribute type 2 has an invalid length. [ 170.096177][ T9496] 9: entered promiscuous mode [ 170.199868][ T9503] netlink: 'syz.1.1022': attribute type 1 has an invalid length. [ 170.259140][ T9505] xt_policy: too many policy elements [ 170.384642][ T9510] net_ratelimit: 1152 callbacks suppressed [ 170.384710][ T9510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.400969][ T9510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.415047][ T9510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.429294][ T9507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.438342][ T9195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.446628][ T9195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.456730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.467091][ T9507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.476808][ T9507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.488115][ T9507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.503266][ T9507] netlink: 'syz.1.1024': attribute type 1 has an invalid length. [ 170.716597][ T9515] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.853522][ T9523] syzkaller0: entered promiscuous mode [ 170.868427][ T9523] syzkaller0: entered allmulticast mode [ 170.929126][ T9523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1029'. [ 171.354390][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'. [ 171.396516][ T9557] netlink: 'syz.0.1039': attribute type 2 has an invalid length. [ 171.486153][ T9549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.609670][ T9570] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.617471][ T9570] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1042'. [ 171.638508][ T9571] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1042'. [ 171.666079][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1042'. [ 171.728008][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 171.912561][ T9577] syzkaller0: entered promiscuous mode [ 171.918115][ T9577] syzkaller0: entered allmulticast mode [ 174.006387][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'. [ 174.441789][ T9656] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1071'. [ 174.455067][ T9656] IPVS: set_ctl: invalid protocol: 12 100.1.1.2:20003 [ 174.691354][ T9667] netlink: 'syz.0.1075': attribute type 1 has an invalid length. [ 174.725464][ T9667] netlink: 'syz.0.1075': attribute type 1 has an invalid length. [ 174.766815][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1076'. [ 174.792263][ T9674] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1077'. [ 174.817426][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1077'. [ 174.847921][ T9674] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1077'. [ 174.887668][ T9674] netlink: 'syz.3.1077': attribute type 2 has an invalid length. [ 174.909215][ T9680] netlink: 'syz.0.1078': attribute type 1 has an invalid length. [ 174.918100][ T9674] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1077'. [ 174.984755][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1078'. [ 175.039295][ T9680] bond7: entered promiscuous mode [ 175.064817][ T9680] 8021q: adding VLAN 0 to HW filter on device bond7 [ 175.081085][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1078'. [ 175.104237][ T9686] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1079'. [ 175.236478][ T9693] netlink: 'syz.0.1081': attribute type 2 has an invalid length. [ 175.424838][ T9699] net_ratelimit: 5 callbacks suppressed [ 175.424860][ T9699] netlink: Conntrack attr has 3 unknown bytes [ 175.472104][ T9699] netlink: Conntrack attr has 3 unknown bytes [ 175.671970][ T9718] syzkaller0: entered promiscuous mode [ 175.677788][ T9718] syzkaller0: entered allmulticast mode [ 176.245368][ T9743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.311105][ T9751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.312499][ T9752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.469574][ T9762] netlink: 'syz.2.1098': attribute type 8 has an invalid length. [ 176.549160][ T9737] syz.4.1092 (9737) used greatest stack depth: 17472 bytes left [ 176.738357][ T9777] netlink: 'syz.3.1103': attribute type 10 has an invalid length. [ 176.758197][ T9777] dummy0: entered promiscuous mode [ 176.775765][ T9777] bridge0: port 3(dummy0) entered blocking state [ 176.789696][ T9777] bridge0: port 3(dummy0) entered disabled state [ 176.796888][ T9777] dummy0: entered allmulticast mode [ 177.028842][ T9792] netlink: 'syz.4.1108': attribute type 3 has an invalid length. [ 177.289827][ T9804] 8021q: VLANs not supported on dvmrp0 [ 177.433338][ T9813] veth0_to_bond: entered allmulticast mode [ 177.502339][ T9813] bond5 (unregistering): Released all slaves [ 177.828610][ T9830] netlink: 'syz.1.1118': attribute type 21 has an invalid length. [ 177.867216][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.871084][ T9830] netlink: 'syz.1.1118': attribute type 21 has an invalid length. [ 177.896710][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.917541][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.939761][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.515205][ T9850] lo: entered promiscuous mode [ 178.530367][ T9850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.762930][ T9878] ipt_REJECT: TCP_RESET invalid for non-tcp [ 179.161881][ T9888] __nla_validate_parse: 89 callbacks suppressed [ 179.161906][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1132'. [ 179.207168][ T9892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1133'. [ 179.282577][ T9896] IPVS: sed: FWM 3 0x00000003 - no destination available [ 179.417845][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1135'. [ 179.673194][ T9918] netlink: 'syz.2.1138': attribute type 1 has an invalid length. [ 180.001454][ T9925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1142'. [ 180.696235][ T9956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1152'. [ 180.735786][ T9956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.146344][ T9967] lo: entered allmulticast mode [ 181.152402][ T9967] lo: left allmulticast mode [ 181.204547][ T9969] syzkaller0: entered promiscuous mode [ 181.211514][ T9969] syzkaller0: entered allmulticast mode [ 181.222379][ T9969] tcf_pedit_act: 7 callbacks suppressed [ 181.222398][ T9969] tc action pedit offset -2147483648 out of bounds [ 181.234964][ T9969] tc action pedit offset -2147483648 out of bounds [ 181.241554][ T9969] tc action pedit offset -2147483648 out of bounds [ 181.248104][ T9969] tc action pedit offset -2147483648 out of bounds [ 181.254691][ T9969] tc action pedit offset -2147483648 out of bounds [ 181.261382][ T9969] tc action pedit offset -2147483648 out of bounds [ 181.267948][ T9969] tc action pedit offset -2147483648 out of bounds [ 181.274679][ T9969] tc action pedit offset -2147483648 out of bounds [ 181.281288][ T9969] tc action pedit offset -2147483648 out of bounds [ 181.287854][ T9969] tc action pedit offset -2147483648 out of bounds [ 181.294573][ T9969] 0: reclassify loop, rule prio 0, protocol 800 [ 181.363978][ T9973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1158'. [ 181.449654][ T9975] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.502768][ T9977] nbd: must specify a device to reconfigure [ 181.509098][ T9977] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1161'. [ 181.530732][ T9979] netlink: 'syz.4.1162': attribute type 1 has an invalid length. [ 181.565972][ T9979] bond5: entered promiscuous mode [ 181.572454][ T9979] 8021q: adding VLAN 0 to HW filter on device bond5 [ 181.630878][ T9979] 8021q: adding VLAN 0 to HW filter on device bond5 [ 181.638218][ T9979] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 181.670761][ T9979] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 181.684988][ T9979] bond5: (slave vti0): making interface the new active one [ 181.693955][ T9979] vti0: entered promiscuous mode [ 181.701469][ T9979] bond5: (slave vti0): Enslaving as an active interface with an up link [ 181.719311][ T9985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1164'. [ 181.731508][ T9985] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1164'. [ 182.031413][ T9999] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 182.038714][ T9999] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 182.225991][T10016] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1171'. [ 182.375406][T10024] netlink: 'syz.1.1175': attribute type 4 has an invalid length. [ 182.384041][T10024] netlink: 'syz.1.1175': attribute type 1 has an invalid length. [ 182.668508][T10039] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 182.699784][T10042] netlink: 'syz.2.1182': attribute type 13 has an invalid length. [ 182.709584][T10042] macvtap0: entered allmulticast mode [ 182.727945][T10039] netlink: 'syz.3.1181': attribute type 1 has an invalid length. [ 182.737476][T10042] macvtap0: refused to change device tx_queue_len [ 182.774607][T10039] 8021q: adding VLAN 0 to HW filter on device bond6 [ 182.951947][T10054] syzkaller1: entered promiscuous mode [ 182.957620][T10054] syzkaller1: entered allmulticast mode [ 183.597930][T10095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.607694][T10095] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.626247][T10095] batman_adv: batadv0: Interface activated: dummy0 [ 183.641386][T10095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.659832][T10091] netlink: 'syz.4.1192': attribute type 4 has an invalid length. [ 183.714226][ T13] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 183.735274][ T13] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 183.763324][ T13] bond0: now running without any active interface! [ 183.955426][T10109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 183.963181][T10109] IPv6: NLM_F_CREATE should be set when creating new route [ 183.981441][T10109] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 184.027468][T10109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.437444][T10134] __nla_validate_parse: 6 callbacks suppressed [ 184.437465][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1203'. [ 184.519567][T10135] syzkaller0: entered promiscuous mode [ 184.526735][T10135] syzkaller0: entered allmulticast mode [ 184.591612][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1206'. [ 184.837597][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'. [ 184.869447][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1209'. [ 184.903154][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'. [ 184.930291][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1209'. [ 185.041989][T10155] netlink: 'syz.4.1211': attribute type 2 has an invalid length. [ 185.152478][T10163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1212'. [ 185.162544][T10155] vþ: entered promiscuous mode [ 185.352703][T10169] x_tables: duplicate underflow at hook 3 [ 185.363505][T10167] netlink: 'syz.4.1214': attribute type 1 has an invalid length. [ 185.985045][T10188] syzkaller0: entered promiscuous mode [ 186.048915][T10188] syzkaller0: entered allmulticast mode [ 186.157634][T10196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1220'. [ 186.339140][T10202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1221'. [ 186.353344][T10201] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1223'. [ 186.407405][T10201] netlink: 'syz.2.1223': attribute type 8 has an invalid length. [ 186.421339][T10202] IPVS: sed: FWM 3 0x00000003 - no destination available [ 186.810248][T10222] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 186.843322][T10222] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 186.902739][T10215] netlink: 'syz.3.1225': attribute type 1 has an invalid length. [ 188.248132][T10201] bond0: entered promiscuous mode [ 188.253940][T10201] bond_slave_0: entered promiscuous mode [ 188.259792][T10201] bond_slave_1: entered promiscuous mode [ 188.267893][T10201] gretap0: entered promiscuous mode [ 188.275034][T10201] bond0: left promiscuous mode [ 188.280695][T10201] bond_slave_0: left promiscuous mode [ 188.286306][T10201] bond_slave_1: left promiscuous mode [ 188.295761][T10201] gretap0: left promiscuous mode [ 188.521799][T10238] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 188.695759][T10250] xt_hashlimit: invalid interval [ 188.714234][T10252] tipc: Started in network mode [ 188.719403][T10252] tipc: Node identity 4, cluster identity 4711 [ 188.729470][T10252] tipc: Node number set to 4 [ 188.998045][T10262] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.390988][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4 [ 189.744870][T10306] __nla_validate_parse: 5 callbacks suppressed [ 189.744894][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1250'. [ 189.837952][T10313] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1251'. [ 189.873268][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1250'. [ 190.380261][T10344] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1260'. [ 190.831854][T10365] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 190.844369][T10365] bond5 (unregistering): Released all slaves [ 191.025529][ T5489] veth0_macvtap: left promiscuous mode [ 191.073114][T10380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.117425][T10383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.253405][T10386] netlink: 'syz.4.1270': attribute type 1 has an invalid length. [ 191.284699][T10389] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1271'. [ 191.305678][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1270'. [ 191.692847][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1278'. [ 191.719688][T10416] netlink: 'syz.0.1278': attribute type 24 has an invalid length. [ 191.742425][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 191.758450][T10416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.772866][T10414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.799545][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1279'. [ 191.884258][T10426] netlink: 203812 bytes leftover after parsing attributes in process `syz.2.1280'. [ 192.017775][T10433] netlink: 'syz.4.1282': attribute type 1 has an invalid length. [ 192.030775][T10433] netlink: 'syz.4.1282': attribute type 1 has an invalid length. [ 192.063367][T10433] netlink: 'syz.4.1282': attribute type 8 has an invalid length. [ 192.573432][T10469] netlink: 'syz.3.1292': attribute type 21 has an invalid length. [ 192.614616][T10469] IPv6: NLM_F_CREATE should be specified when creating new route [ 192.624003][T10469] netlink: 'syz.3.1292': attribute type 1 has an invalid length. [ 192.846519][T10473] bond3: entered promiscuous mode [ 193.613862][T10518] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 194.177561][T10555] netlink: 'syz.2.1316': attribute type 5 has an invalid length. [ 194.342435][T10555] netlink: 'syz.2.1316': attribute type 2 has an invalid length. [ 194.606130][T10585] netlink: 'syz.0.1324': attribute type 1 has an invalid length. [ 194.651337][T10592] xt_addrtype: ipv6 does not support BROADCAST matching [ 194.675390][T10593] netlink: 'syz.4.1327': attribute type 10 has an invalid length. [ 194.755916][T10599] __nla_validate_parse: 15 callbacks suppressed [ 194.755940][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 194.782402][T10603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.795055][T10599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1324'. [ 195.092568][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1331'. [ 195.366577][T10637] sctp: [Deprecated]: syz.2.1337 (pid 10637) Use of int in max_burst socket option. [ 195.366577][T10637] Use struct sctp_assoc_value instead [ 195.435804][T10645] veth0: entered promiscuous mode [ 195.468364][T10645] veth0: left promiscuous mode [ 195.916469][T10670] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1345'. [ 196.097158][T10674] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 196.194001][T10688] netlink: 'syz.1.1348': attribute type 21 has an invalid length. [ 196.202061][T10687] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1348'. [ 196.213424][T10688] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1348'. [ 196.238598][T10686] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1350'. [ 196.244779][T10687] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1348'. [ 196.283997][T10688] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1348'. [ 196.299832][T10691] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1352'. [ 196.477438][T10698] syzkaller0: entered promiscuous mode [ 196.484265][T10698] syzkaller0: entered allmulticast mode [ 196.701375][T10717] tipc: Failed to remove unknown binding: 66,1,1/1:1145459706/1145459708 [ 196.732631][T10718] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.745580][T10717] tipc: Failed to remove unknown binding: 66,1,1/1:1145459706/1145459708 [ 196.785869][T10718] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.878084][ T35] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.897473][ T35] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.917097][T10729] ip6gre1: entered allmulticast mode [ 196.924844][ T35] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.939717][ T35] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.197841][T10803] validate_nla: 6 callbacks suppressed [ 198.197864][T10803] netlink: 'syz.0.1379': attribute type 1 has an invalid length. [ 198.496828][T10815] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 198.531501][T10815] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 198.822662][T10824] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 199.426939][T10858] netlink: 'syz.1.1394': attribute type 1 has an invalid length. [ 199.446054][T10857] netlink: 'syz.1.1394': attribute type 1 has an invalid length. [ 200.263100][T10887] __nla_validate_parse: 19 callbacks suppressed [ 200.263124][T10887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1403'. [ 200.288278][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'. [ 200.574237][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1406'. [ 200.588594][T10902] openvswitch: netlink: Flow actions attr not present in new flow. [ 200.733854][T10909] syzkaller0: entered promiscuous mode [ 200.739410][T10909] syzkaller0: entered allmulticast mode [ 200.875078][T10915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1415'. [ 200.910673][T10920] netlink: 'syz.3.1417': attribute type 13 has an invalid length. [ 200.941856][T10920] veth0_macvtap: left promiscuous mode [ 200.959338][T10924] netlink: 'syz.2.1415': attribute type 10 has an invalid length. [ 200.967376][T10926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1416'. [ 200.978386][T10920] macvtap0: entered allmulticast mode [ 200.993913][T10920] macvtap0: refused to change device tx_queue_len [ 201.018454][T10924] wlan1: mtu greater than device maximum [ 201.045888][T10924] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 201.399846][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'. [ 201.414991][T10950] tipc: Can't bind to reserved service type 1 [ 201.465067][T10950] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 201.675693][T10965] lo: left promiscuous mode [ 201.685775][T10965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.724358][T10968] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 201.952365][T10976] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 201.988636][T10976] team0: Device macvlan0 is already an upper device of the team interface [ 202.020854][T10983] netlink: 'syz.1.1434': attribute type 1 has an invalid length. [ 202.629655][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 202.638854][T11015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1444'. [ 203.137012][T11036] hsr0 speed is unknown, defaulting to 1000 [ 203.152025][T11051] openvswitch: netlink: IP tunnel dst address not specified [ 203.234285][T11054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.241644][T11054] IPv6: NLM_F_CREATE should be set when creating new route [ 203.255114][T11052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1452'. [ 203.304216][T11052] bond0: entered promiscuous mode [ 203.329939][T11052] bond_slave_0: entered promiscuous mode [ 203.336500][T11052] bond_slave_1: entered promiscuous mode [ 203.358236][T11052] gretap0: entered promiscuous mode [ 203.376820][T11052] debugfs: 'hsr1' already exists in 'hsr' [ 203.383579][T11052] Cannot create hsr debugfs directory [ 203.389028][T11052] hsr1: entered promiscuous mode [ 203.450255][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 203.551939][T11068] openvswitch: netlink: Missing key (keys=40, expected=100) [ 203.677692][T11075] netlink: 'syz.4.1460': attribute type 1 has an invalid length. [ 203.697742][T11075] netlink: 'syz.4.1460': attribute type 20 has an invalid length. [ 203.750759][ T169] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.767462][T11075] netlink: 'syz.4.1460': attribute type 20 has an invalid length. [ 203.783745][ T169] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.826483][ T169] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.866008][ T169] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.991922][T11091] netlink: 'syz.1.1463': attribute type 9 has an invalid length. [ 204.136328][T11091] netlink: 'syz.1.1463': attribute type 1 has an invalid length. [ 204.598708][T11133] IPVS: sed: FWM 3 0x00000003 - no destination available [ 204.978556][T11144] bond8: Unable to set up delay as MII monitoring is disabled [ 205.029619][T11144] bond8 (unregistering): Released all slaves [ 205.107189][T11162] vlan0: entered promiscuous mode [ 205.113597][T11162] bridge0: entered promiscuous mode [ 205.132614][T11161] wireguard0: entered promiscuous mode [ 205.138223][T11161] wireguard0: entered allmulticast mode [ 205.203826][T11161] team0: Device wireguard0 is of different type [ 205.265442][T11172] xt_TPROXY: Can be used only with -p tcp or -p udp [ 205.521747][T11182] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 205.542929][T11182] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 205.808712][T11195] __nla_validate_parse: 7 callbacks suppressed [ 205.808734][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'. [ 205.833407][T11192] hsr0 speed is unknown, defaulting to 1000 [ 206.432920][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 206.464036][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 206.620947][T11241] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 206.661991][T11241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1497'. [ 206.930446][ T9199] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4 [ 206.967860][ T9199] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.635703][ T9197] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4 [ 207.710637][ T9197] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.346064][T11298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1509'. [ 209.365877][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1510'. [ 209.438477][T11302] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 209.538243][T11304] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1514'. [ 209.600098][T11310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1515'. [ 209.705844][T11306] xt_CT: No such helper "pptp" [ 209.782232][T11310] syzkaller0: entered promiscuous mode [ 209.787788][T11310] syzkaller0: entered allmulticast mode [ 209.934816][T11324] tipc: Enabling of bearer rejected, failed to enable media [ 210.109008][T11335] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 211.960195][T11372] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1529'. [ 211.996865][T11382] netlink: 'syz.2.1532': attribute type 3 has an invalid length. [ 212.226377][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1536'. [ 212.646491][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 212.770590][T11431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1549'. [ 212.784364][T11429] syzkaller0: entered promiscuous mode [ 212.800447][T11429] syzkaller0: entered allmulticast mode [ 212.812221][T11435] tipc: Started in network mode [ 212.821350][T11435] tipc: Node identity 080211000001, cluster identity 4711 [ 212.831718][T11435] tipc: Enabled bearer , priority 0 [ 213.341674][T11464] netlink: 'syz.1.1554': attribute type 8 has an invalid length. [ 213.349509][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1554'. [ 213.745744][T11474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1560'. [ 213.766450][T11478] xt_ecn: cannot match TCP bits for non-tcp packets [ 213.803567][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'. [ 213.815863][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 213.831314][T11478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1561'. [ 213.840367][T11480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1563'. [ 213.952631][ T9195] tipc: Node number set to 134418688 [ 214.311214][T11508] xt_ecn: cannot match TCP bits for non-tcp packets [ 214.334599][T11508] Bluetooth: MGMT ver 1.23 [ 214.382782][T11512] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 214.868735][T11540] xt_addrtype: ipv6 does not support BROADCAST matching [ 215.362014][T11583] netlink: 'syz.0.1594': attribute type 4 has an invalid length. [ 215.370679][T11583] netlink: 'syz.0.1594': attribute type 1 has an invalid length. [ 215.432600][T11587] sock: sock_timestamping_bind_phc: sock not bind to device [ 215.492792][T11591] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 215.947791][T11621] sctp: [Deprecated]: syz.1.1603 (pid 11621) Use of int in maxseg socket option. [ 215.947791][T11621] Use struct sctp_assoc_value instead [ 215.948921][T11617] bridge9: entered promiscuous mode [ 215.969008][T11617] bridge9: entered allmulticast mode [ 215.981032][T11617] team0: Port device bridge9 added [ 215.986651][T11618] bridge0: port 4(team0) entered blocking state [ 215.996753][T11618] bridge0: port 4(team0) entered disabled state [ 216.016599][T11618] team0: entered allmulticast mode [ 216.030181][T11618] team_slave_0: entered allmulticast mode [ 216.036071][T11618] team_slave_1: entered allmulticast mode [ 216.046974][T11618] team0: entered promiscuous mode [ 216.053117][T11618] team_slave_0: entered promiscuous mode [ 216.059195][T11618] team_slave_1: entered promiscuous mode [ 216.270216][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4 [ 216.273393][T11636] netlink: 'syz.2.1609': attribute type 16 has an invalid length. [ 216.306550][T11636] netlink: 'syz.2.1609': attribute type 3 has an invalid length. [ 216.535937][T11651] sctp: [Deprecated]: syz.0.1614 (pid 11651) Use of int in max_burst socket option. [ 216.535937][T11651] Use struct sctp_assoc_value instead [ 216.686010][T11655] netlink: 'syz.2.1615': attribute type 4 has an invalid length. [ 216.694399][T11662] netlink: 'syz.2.1615': attribute type 4 has an invalid length. [ 217.525793][T11710] __nla_validate_parse: 9 callbacks suppressed [ 217.525811][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1633'. [ 217.559454][T11712] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1634'. [ 217.572224][T11710] bond0: entered promiscuous mode [ 217.579069][T11710] bond_slave_0: entered promiscuous mode [ 217.579102][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1633'. [ 217.598275][T11710] bond_slave_1: entered promiscuous mode [ 217.637986][T11710] bond0: left promiscuous mode [ 217.645091][T11710] bond_slave_0: left promiscuous mode [ 217.653330][T11710] bond_slave_1: left promiscuous mode [ 217.704097][T11713] team0: Port device team_slave_0 removed [ 217.718937][T11716] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.1635'. [ 217.725083][T11717] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1633'. [ 217.757730][T11717] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1633'. [ 218.453405][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1645'. [ 218.647844][T11771] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1649'. [ 218.669676][T11771] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1649'. [ 218.700923][T11771] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 218.755741][T11771] 8021q: adding VLAN 0 to HW filter on device bond8 [ 218.788731][T11781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 218.823260][T11781] openvswitch: netlink: Flow actions attr not present in new flow. [ 219.040261][T11793] netlink: 'syz.1.1656': attribute type 10 has an invalid length. [ 219.112910][T11793] bridge_slave_1: left allmulticast mode [ 219.118700][T11793] bridge_slave_1: left promiscuous mode [ 219.160275][T11793] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.214855][T11793] bridge_slave_1: entered promiscuous mode [ 219.222107][T11793] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 219.537870][T11820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.271229][T11847] x_tables: duplicate underflow at hook 2 [ 220.413100][T11850] block nbd0: Unsupported socket: should be TCP or UNIX. [ 220.567016][T11862] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 220.592320][T11862] bond6 (unregistering): Released all slaves [ 220.872382][T11878] veth0: entered promiscuous mode [ 220.893344][T11877] veth0: left promiscuous mode [ 221.029744][T11882] syzkaller0: entered promiscuous mode [ 221.043228][T11882] syzkaller0: entered allmulticast mode [ 221.597628][T11916] SET target dimension over the limit! [ 221.630979][T11921] SET target dimension over the limit! [ 221.988099][T11940] netlink: 'syz.2.1698': attribute type 1 has an invalid length. [ 222.025120][T11940] netlink: 'syz.2.1698': attribute type 1 has an invalid length. [ 222.033539][T11940] netlink: 'syz.2.1698': attribute type 8 has an invalid length. [ 222.075335][T11950] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 222.082252][T11950] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 222.130331][T11950] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 222.136865][T11950] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 222.170416][T11950] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 222.176956][T11950] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 222.189464][T11950] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 222.196038][T11950] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 222.205412][T11950] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 222.212024][T11950] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 222.244923][T11942] : entered promiscuous mode [ 222.405128][T11961] pim6reg: entered allmulticast mode [ 222.513454][T11964] bond5: entered promiscuous mode [ 222.644413][T11974] __nla_validate_parse: 25 callbacks suppressed [ 222.644437][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1709'. [ 222.938854][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1716'. [ 222.958891][T11991] tc_dump_action: action bad kind [ 223.198881][T12008] bond9: option lp_interval: invalid value (0) [ 223.206268][T12008] bond9: option lp_interval: allowed values 1 - 2147483647 [ 223.217024][T12008] bond9 (unregistering): Released all slaves [ 223.237955][T12012] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.1721'. [ 223.254294][T12012] netlink: 'syz.2.1721': attribute type 1 has an invalid length. [ 223.331062][T12018] ipt_REJECT: TCP_RESET invalid for non-tcp [ 223.427358][T12025] netlink: 'syz.0.1725': attribute type 9 has an invalid length. [ 223.474538][T12029] netlink: 'syz.4.1727': attribute type 1 has an invalid length. [ 223.844436][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1735'. [ 223.962992][T12063] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1736'. [ 224.253390][T12086] syzkaller1: entered promiscuous mode [ 224.261022][T12086] syzkaller1: entered allmulticast mode [ 224.287169][T12090] sctp: [Deprecated]: syz.4.1742 (pid 12090) Use of int in max_burst socket option deprecated. [ 224.287169][T12090] Use struct sctp_assoc_value instead [ 224.362377][T12092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1744'. [ 224.432476][T12098] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 224.439199][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1745'. [ 224.613578][T12104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1748'. [ 224.643050][T12109] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1749'. [ 224.884407][T12120] syzkaller0: entered promiscuous mode [ 224.890412][T12120] syzkaller0: entered allmulticast mode [ 225.646569][T12165] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 225.695753][T12167] netlink: 'syz.1.1769': attribute type 5 has an invalid length. [ 225.784899][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1772'. [ 226.281526][T12200] netlink: 'syz.0.1779': attribute type 1 has an invalid length. [ 226.318791][T12200] 8021q: adding VLAN 0 to HW filter on device bond9 [ 226.332403][T12200] ip6t_srh: unknown srh match flags 5F28 [ 226.359804][T12200] bond9: (slave bridge5): making interface the new active one [ 226.369564][T12200] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 226.714467][T12221] netlink: 'syz.3.1787': attribute type 1 has an invalid length. [ 226.807816][T12225] bond8: (slave geneve2): making interface the new active one [ 226.818109][T12225] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 226.828588][ T1330] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 226.840999][ T1330] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 226.851128][ T1330] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 227.185764][T12244] bridge0: left allmulticast mode [ 227.556404][T12254] bond0 (unregistering): left promiscuous mode [ 227.564345][T12254] bond_slave_0: left promiscuous mode [ 227.581668][T12254] bond_slave_1: left promiscuous mode [ 227.597232][T12254] bridge_slave_1: left promiscuous mode [ 227.617378][T12254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.633864][T12267] net_ratelimit: 1994 callbacks suppressed [ 227.633888][T12267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.653327][T12254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.682467][T12254] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 227.721118][T12254] bond0 (unregistering): Released all slaves [ 228.275655][T12307] __nla_validate_parse: 10 callbacks suppressed [ 228.275680][T12307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1810'. [ 228.301423][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'. [ 228.333266][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'. [ 228.496120][T12319] GUP no longer grows the stack in syz.0.1812 (12319): 200000003000-20000000a000 (200000001000) [ 228.508427][T12319] CPU: 0 UID: 0 PID: 12319 Comm: syz.0.1812 Not tainted syzkaller #0 PREEMPT(full) [ 228.508459][T12319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 228.508474][T12319] Call Trace: [ 228.508483][T12319] [ 228.508493][T12319] dump_stack_lvl+0xe8/0x150 [ 228.508532][T12319] __get_user_pages+0x2453/0x29d0 [ 228.508567][T12319] ? __lock_acquire+0x6b5/0x2cf0 [ 228.508619][T12319] ? __gup_longterm_locked+0xc4e/0x1630 [ 228.508654][T12319] ? down_read_killable+0x1bb/0x340 [ 228.508685][T12319] __gup_longterm_locked+0xdcf/0x1630 [ 228.508747][T12319] gup_fast_fallback+0x1d82/0x22e0 [ 228.508818][T12319] ? __pfx_gup_fast_fallback+0x10/0x10 [ 228.508863][T12319] ? futex_unqueue+0x22/0x240 [ 228.508891][T12319] ? futex_unqueue+0x22/0x240 [ 228.508918][T12319] ? is_valid_gup_args+0x11f/0x200 [ 228.508956][T12319] ? get_user_pages_fast+0x4d/0xb0 [ 228.508993][T12319] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 228.509029][T12319] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 228.509060][T12319] iov_iter_get_pages2+0x5e/0xa0 [ 228.509090][T12319] __se_sys_vmsplice+0x7b3/0x1490 [ 228.509134][T12319] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 228.509158][T12319] ? __pfx_futex_wait+0x10/0x10 [ 228.509205][T12319] ? lockdep_hardirqs_on+0x7a/0x110 [ 228.509301][T12319] do_syscall_64+0x14d/0xf80 [ 228.509332][T12319] ? trace_irq_disable+0x3b/0x150 [ 228.509352][T12319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.509375][T12319] ? clear_bhb_loop+0x40/0x90 [ 228.509404][T12319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.509426][T12319] RIP: 0033:0x7fb49b99c819 [ 228.509450][T12319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.509470][T12319] RSP: 002b:00007fb49c7e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 228.509513][T12319] RAX: ffffffffffffffda RBX: 00007fb49bc15fa0 RCX: 00007fb49b99c819 [ 228.509530][T12319] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 228.509543][T12319] RBP: 00007fb49ba32c91 R08: 0000000000000000 R09: 0000000000000000 [ 228.509556][T12319] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 228.509569][T12319] R13: 00007fb49bc16038 R14: 00007fb49bc15fa0 R15: 00007ffc75977d98 [ 228.509606][T12319] [ 228.895944][T12329] tipc: New replicast peer: 172.20.20.187 [ 228.908529][T12329] tipc: Enabled bearer , priority 10 [ 228.924399][T12329] netlink: 'syz.4.1815': attribute type 10 has an invalid length. [ 228.938559][T12329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.956208][T12329] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 229.134043][T12342] syzkaller1: entered promiscuous mode [ 229.150217][T12342] syzkaller1: entered allmulticast mode [ 229.186820][T12347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.199175][T12347] tipc: Enabling of bearer rejected, failed to enable media [ 229.423461][T12358] netlink: 'syz.3.1822': attribute type 1 has an invalid length. [ 229.476107][T12358] 8021q: adding VLAN 0 to HW filter on device bond9 [ 229.615037][T12368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.753980][T12376] netlink: 'syz.3.1828': attribute type 1 has an invalid length. [ 229.836952][T12376] bond10: entered promiscuous mode [ 229.846341][T12376] 8021q: adding VLAN 0 to HW filter on device bond10 [ 229.877594][T12376] bond10: (slave bridge10): making interface the new active one [ 229.886686][T12376] bridge10: entered promiscuous mode [ 229.896246][T12376] bridge10: left promiscuous mode [ 230.360183][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 230.512418][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1838'. [ 230.718571][T12422] netlink: 'syz.3.1841': attribute type 1 has an invalid length. [ 230.806101][T12422] 8021q: adding VLAN 0 to HW filter on device bond11 [ 230.926885][T12422] 8021q: adding VLAN 0 to HW filter on device bond11 [ 230.947633][T12422] bond11: (slave vcan0): The slave device specified does not support setting the MAC address [ 230.974845][T12422] bond11: (slave vcan0): Error -95 calling set_mac_address [ 231.063160][T12440] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1846'. [ 231.241025][T12452] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 231.358244][T12456] bridge0: port 5(veth0_to_bridge) entered blocking state [ 231.387095][T12456] bridge0: port 5(veth0_to_bridge) entered disabled state [ 231.417215][T12456] veth0_to_bridge: entered allmulticast mode [ 231.445070][T12456] veth0_to_bridge: entered promiscuous mode [ 231.458054][T12463] netlink: 'syz.2.1851': attribute type 16 has an invalid length. [ 231.466443][T12463] netlink: 'syz.2.1851': attribute type 3 has an invalid length. [ 231.484665][T12463] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1851'. [ 232.142196][T12505] netlink: 'syz.2.1862': attribute type 3 has an invalid length. [ 232.156755][T12508] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1863'. [ 232.195598][T12508] openvswitch: netlink: Missing key (keys=40, expected=100) [ 232.880839][T12555] pim6reg1: entered promiscuous mode [ 232.910362][T12555] pim6reg1: entered allmulticast mode [ 232.991798][T12560] syzkaller0: entered promiscuous mode [ 232.997365][T12560] syzkaller0: entered allmulticast mode [ 233.014753][T12560] gre2: entered promiscuous mode [ 233.151091][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1875'. [ 233.534596][T12588] batman_adv: batadv0: Interface deactivated: dummy0 [ 233.553141][T12588] batman_adv: batadv0: Removing interface: dummy0 [ 233.597893][T12588] bridge_slave_0: left allmulticast mode [ 233.605030][T12588] bridge_slave_0: left promiscuous mode [ 233.613577][T12588] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.627538][T12588] bridge_slave_1: left allmulticast mode [ 233.642971][T12588] bridge_slave_1: left promiscuous mode [ 233.653689][T12588] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.682256][T12588] bond0: (slave bond_slave_0): Releasing backup interface [ 233.718977][T12588] bond0: (slave bond_slave_1): Releasing backup interface [ 233.753174][T12588] team0: Port device team_slave_0 removed [ 233.762987][T12588] team0: Port device team_slave_1 removed [ 233.769544][T12588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.778124][T12588] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 233.794775][T12589] team0: Mode changed to "broadcast" [ 233.803717][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1880'. [ 234.011618][T12613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1887'. [ 234.026523][T12613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1887'. [ 234.537225][T12649] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 234.777055][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1901'. [ 234.809709][T12659] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1901'. [ 234.884877][T12664] tipc: Started in network mode [ 234.897225][T12664] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 234.949105][T12664] tipc: Enabling of bearer rejected, failed to enable media [ 235.037646][T12670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1903'. [ 235.048067][T12674] syzkaller0: entered promiscuous mode [ 235.055661][T12674] syzkaller0: entered allmulticast mode [ 235.117758][T12676] syzkaller1: entered allmulticast mode [ 235.331681][T12687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1906'. [ 235.377006][T12687] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1906'. [ 235.377283][T12689] netlink: 'syz.3.1907': attribute type 1 has an invalid length. [ 235.418369][T12689] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1907'. [ 235.465039][T12689] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1907'. [ 235.696913][ T5489] veth0_vlan: left promiscuous mode [ 235.731627][ T5489] veth0_vlan: entered promiscuous mode [ 236.465360][T12739] syzkaller1: entered promiscuous mode [ 236.492898][T12739] syzkaller1: entered allmulticast mode [ 237.315424][T12792] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 238.114412][T12839] IPVS: Scheduler module ip_vs_sip not found [ 238.129729][T12842] IPVS: set_ctl: invalid protocol: 73 172.30.0.1:20000 [ 238.204430][T12849] netlink: 'syz.0.1950': attribute type 24 has an invalid length. [ 238.247677][T12849] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 238.320322][T12851] block nbd0: not configured, cannot reconfigure [ 238.384314][T12859] netlink: 'syz.0.1953': attribute type 1 has an invalid length. [ 238.384314][T12858] netlink: 'syz.0.1953': attribute type 1 has an invalid length. [ 238.474216][T12858] 8021q: adding VLAN 0 to HW filter on device bond11 [ 238.663603][T12866] bond11: (slave veth13): Enslaving as an active interface with a down link [ 239.188013][T12904] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.199086][T12904] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 239.392934][T12904] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.420944][T12904] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 239.471640][T12916] xt_TPROXY: Can be used only with -p tcp or -p udp [ 239.598090][T12904] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.644581][T12904] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 239.721296][T12927] netlink: 'syz.1.1973': attribute type 1 has an invalid length. [ 239.769403][T12927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.901130][T12927] bond0: (slave gretap1): making interface the new active one [ 239.916329][T12927] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 240.054162][ T239] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 240.075042][ T239] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 240.153703][ T239] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 240.163346][ T239] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 240.176328][T12950] netlink: 'syz.2.1979': attribute type 27 has an invalid length. [ 240.194940][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 240.209832][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 240.238159][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 240.247038][ T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 240.378704][T12960] bond0: (slave gre0): refused to change device type [ 240.429491][T12962] __nla_validate_parse: 7 callbacks suppressed [ 240.429514][T12962] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1982'. [ 240.447936][T12962] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1982'. [ 240.473795][T12964] xt_socket: unknown flags 0x50 [ 240.516794][T12966] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1986'. [ 240.586637][T12968] netlink: 'syz.3.1987': attribute type 1 has an invalid length. [ 240.624009][T12973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1989'. [ 240.637309][T12973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1989'. [ 240.919610][T12983] netlink: 'syz.1.1992': attribute type 1 has an invalid length. [ 241.050990][T12983] 8021q: adding VLAN 0 to HW filter on device bond5 [ 241.074289][T12996] netlink: 'syz.3.1997': attribute type 15 has an invalid length. [ 241.095046][T12994] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 241.119702][T12986] syzkaller0: entered promiscuous mode [ 241.125644][T12986] syzkaller0: entered allmulticast mode [ 241.234675][T12993] bridge8: entered promiscuous mode [ 241.240271][T12993] bridge8: entered allmulticast mode [ 241.374395][T13008] batadv_slave_1: entered promiscuous mode [ 241.406449][T13008] batadv_slave_1: left promiscuous mode [ 241.495521][T13015] netlink: 'syz.1.2001': attribute type 12 has an invalid length. [ 241.542102][T13015] bond6: option primary_reselect: invalid value (255) [ 241.551696][T13015] bond6 (unregistering): Released all slaves [ 241.778155][T13029] openvswitch: netlink: IP tunnel dst address not specified [ 241.789058][T13029] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 241.839466][T13033] netlink: 'syz.2.2006': attribute type 21 has an invalid length. [ 241.856233][T13033] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2006'. [ 242.128196][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2012'. [ 242.213920][T13053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2008'. [ 242.231491][T13050] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2012'. [ 242.241244][T13050] nbd: must specify a size in bytes for the device [ 242.364038][T13059] wlan1: mtu greater than device maximum [ 242.370885][T13059] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 242.378853][T13060] wlan1: mtu greater than device maximum [ 242.385696][T13060] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 242.535632][T13067] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2018'. [ 243.926947][T13121] validate_nla: 3 callbacks suppressed [ 243.926969][T13121] netlink: 'syz.0.2036': attribute type 1 has an invalid length. [ 243.963686][T13121] netlink: 'syz.0.2036': attribute type 1 has an invalid length. [ 244.066446][T13129] netlink: 'syz.4.2037': attribute type 23 has an invalid length. [ 244.579223][T13141] netlink: 'syz.2.2038': attribute type 1 has an invalid length. [ 247.208790][T13221] netlink: 'syz.4.2050': attribute type 3 has an invalid length. [ 247.259316][T13215] macsec1: entered promiscuous mode [ 247.497515][T13231] syzkaller1: entered promiscuous mode [ 247.518887][T13231] syzkaller1: entered allmulticast mode [ 247.944584][T13238] netlink: 'syz.4.2053': attribute type 12 has an invalid length. [ 248.453791][T13251] __nla_validate_parse: 5 callbacks suppressed [ 248.453816][T13251] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2058'. [ 248.568828][T13251] bridge_slave_1: default FDB implementation only supports local addresses [ 249.402639][T13268] macvlan0: entered promiscuous mode [ 249.521457][T13287] netlink: 'syz.0.2063': attribute type 1 has an invalid length. [ 249.856813][T13299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2065'. [ 250.729534][T13318] IPVS: set_ctl: invalid protocol: 22 172.20.20.41:20002 [ 253.402178][T13330] netlink: 'syz.4.2069': attribute type 7 has an invalid length. [ 253.450717][T13334] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.2071'. [ 256.743507][T13326] veth0: entered promiscuous mode [ 256.854862][T13326] veth0: left promiscuous mode [ 257.162186][T13357] netlink: 'syz.2.2077': attribute type 1 has an invalid length. [ 257.235621][T13369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2077'. [ 257.280185][T13357] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2077'. [ 259.108504][T13398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2082'. [ 259.139312][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2082'. [ 259.784400][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'. [ 259.923543][T13412] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 260.033235][T13412] bond6: (slave lo): Enslaving as an active interface with an up link [ 260.081166][T13412] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 260.106864][T13417] block nbd0: Unsupported socket: should be TCP or UNIX. [ 260.178348][T13423] dvmrp0: left allmulticast mode [ 260.343071][T13425] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 260.369046][T13428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2090'. [ 260.400078][T13430] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2090'. [ 262.092499][T13438] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2093'. [ 262.466716][T13462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 262.925861][T13478] xt_nat: multiple ranges no longer supported [ 262.946299][T13478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2103'. [ 262.978795][T13472] macvlan3: entered promiscuous mode [ 262.993389][T13472] macvlan3: entered allmulticast mode [ 263.010232][T13472] bond7: entered promiscuous mode [ 263.040976][T13472] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 263.079889][ C0] sched: DL replenish lagged too much [ 263.133341][T13472] bond7: left promiscuous mode [ 263.331179][T13483] netlink: 'syz.3.2105': attribute type 29 has an invalid length. [ 263.406698][T13487] siw: device registration error -23 [ 263.491005][T13489] netlink: 294 bytes leftover after parsing attributes in process `syz.2.2107'. [ 263.522212][T13489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.329947][T13515] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2115'. [ 264.739203][T13527] syzkaller0: entered promiscuous mode [ 264.776720][T13527] syzkaller0: entered allmulticast mode [ 264.850713][T13527] tc action pedit 'at' offset 257 out of bounds [ 264.857516][T13527] tc action pedit 'at' offset 257 out of bounds [ 264.863941][T13527] tc action pedit 'at' offset 257 out of bounds [ 264.870278][T13527] tc action pedit 'at' offset 257 out of bounds [ 264.876565][T13527] tc action pedit 'at' offset 257 out of bounds [ 264.882933][T13527] tc action pedit 'at' offset 257 out of bounds [ 264.889232][T13527] tc action pedit 'at' offset 257 out of bounds [ 264.895593][T13527] tc action pedit 'at' offset 257 out of bounds [ 264.901957][T13527] tc action pedit 'at' offset 257 out of bounds [ 264.908308][T13527] tc action pedit 'at' offset 257 out of bounds [ 264.914674][T13527] 0: reclassify loop, rule prio 0, protocol 800 [ 265.493586][T13544] veth0: entered promiscuous mode [ 266.123066][T13540] veth0: left promiscuous mode [ 266.129246][T13562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2131'. [ 266.213425][T13562] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2131'. [ 266.254482][T13564] xt_hashlimit: size too large, truncated to 1048576 [ 266.332139][T13570] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2133'. [ 266.342041][T13570] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2133'. [ 266.472841][T13571] syzkaller0: entered promiscuous mode [ 266.503721][T13571] syzkaller0: entered allmulticast mode [ 267.681841][T13604] netlink: 'syz.3.2145': attribute type 1 has an invalid length. [ 268.045906][T13604] bond12: entered promiscuous mode [ 268.071083][T13604] 8021q: adding VLAN 0 to HW filter on device bond12 [ 268.209208][T13609] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2142'. [ 268.291270][T13609] openvswitch: netlink: Flow key attr not present in new flow. [ 268.379386][T13615] 8021q: adding VLAN 0 to HW filter on device bond12 [ 268.424815][T13615] bond12: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 268.500143][T13615] bond12: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 268.555474][T13615] bond12: (slave ip6gre1): making interface the new active one [ 268.593429][T13615] ip6gre1: entered promiscuous mode [ 268.655342][T13615] bond12: (slave ip6gre1): Enslaving as an active interface with an up link [ 269.342603][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2151'. [ 269.384614][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2151'. [ 269.804288][T13629] openvswitch: netlink: Message has 8 unknown bytes. [ 269.852439][T13629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.889326][T13628] netlink: 'syz.0.2149': attribute type 16 has an invalid length. [ 269.936900][T13628] netlink: 'syz.0.2149': attribute type 17 has an invalid length. [ 270.000050][T13628] eql: remember to turn off Van-Jacobson compression on your slave devices [ 270.061178][T13628] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 270.421421][T13657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2157'. [ 270.523548][T13661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.825743][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2160'. [ 270.884576][T13669] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2162'. [ 271.339677][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4 [ 271.522737][T13683] netlink: 'syz.2.2166': attribute type 64 has an invalid length. [ 271.642044][T13688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2167'. [ 271.685307][T13687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2168'. [ 271.716624][T13688] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 271.928142][T13687] bond13: entered promiscuous mode [ 271.999281][T13687] 8021q: adding VLAN 0 to HW filter on device bond13 [ 272.410579][T13706] sctp: [Deprecated]: syz.4.2173 (pid 13706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.410579][T13706] Use struct sctp_sack_info instead [ 272.660821][T13712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2176'. [ 273.231690][T13726] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2182'. [ 274.923085][T13767] x_tables: duplicate underflow at hook 3 [ 275.043540][T13773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'. [ 275.194790][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2190'. [ 276.484202][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2203'. [ 276.518549][T13805] netlink: 'syz.1.2203': attribute type 1 has an invalid length. [ 276.564803][T13809] tipc: Enabling of bearer rejected, failed to enable media [ 276.574325][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2203'. [ 276.603989][T13809] netlink: 'syz.0.2204': attribute type 27 has an invalid length. [ 276.876234][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2206'. [ 276.936590][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2209'. [ 276.973325][T13825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2209'. [ 277.008084][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'. [ 277.120751][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2211'. [ 277.370323][T13839] netlink: 'syz.2.2212': attribute type 1 has an invalid length. [ 277.469381][T13852] xt_TCPMSS: Only works on TCP SYN packets [ 277.484357][T13834] syzkaller0: entered promiscuous mode [ 277.503130][T13834] syzkaller0: entered allmulticast mode [ 278.914544][T13877] __nla_validate_parse: 4 callbacks suppressed [ 278.914565][T13877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2221'. [ 279.048911][T13879] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2221'. [ 279.058569][T13879] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2221'. [ 283.403262][T13883] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2223'. [ 302.445659][T13900] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.2231'. [ 302.721652][T13900] netlink: 212232 bytes leftover after parsing attributes in process `syz.4.2231'. [ 303.080439][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2235'. [ 304.662686][T13946] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2239'. [ 304.693204][T13947] netlink: 'syz.4.2239': attribute type 23 has an invalid length. [ 304.958940][T13958] netlink: 'syz.0.2242': attribute type 23 has an invalid length. [ 305.667568][T13980] IPVS: set_ctl: invalid protocol: 8 172.20.20.15:20001 [ 305.882442][T13986] atomic_op ffff88806128a998 conn xmit_atomic 0000000000000000 [ 306.523528][T13969] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 306.851490][T13996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2251'. [ 307.577166][T14010] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.591195][T14044] netlink: 'syz.0.2263': attribute type 1 has an invalid length. [ 308.601589][T14044] netlink: 'syz.0.2263': attribute type 1 has an invalid length. [ 308.619093][T14044] netlink: 'syz.0.2263': attribute type 1 has an invalid length. [ 308.627621][T14044] netlink: 'syz.0.2263': attribute type 1 has an invalid length. [ 308.636432][T14044] netlink: 'syz.0.2263': attribute type 1 has an invalid length. [ 308.646674][T14044] netlink: 'syz.0.2263': attribute type 1 has an invalid length. [ 313.721698][T14010] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.797295][T14040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.910432][T14053] netlink: 'syz.1.2264': attribute type 1 has an invalid length. [ 314.074785][T14053] bond6: entered promiscuous mode [ 314.093867][T14053] 8021q: adding VLAN 0 to HW filter on device bond6 [ 314.335304][T14071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2267'. [ 314.560949][T14010] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.716992][T14057] macvtap1: entered allmulticast mode [ 314.791741][T14063] bond6: (slave bridge6): making interface the new active one [ 314.811875][T14063] bridge6: entered promiscuous mode [ 314.827916][T14063] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 315.007902][T14010] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.768877][T13176] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.795969][T14106] sctp: [Deprecated]: syz.1.2273 (pid 14106) Use of int in maxseg socket option. [ 315.795969][T14106] Use struct sctp_assoc_value instead [ 315.829606][ T169] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.897532][T14106] sctp: [Deprecated]: syz.1.2273 (pid 14106) Use of int in maxseg socket option. [ 315.897532][T14106] Use struct sctp_assoc_value instead [ 315.950787][T14096] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 316.014733][T14106] sctp: [Deprecated]: syz.1.2273 (pid 14106) Use of int in maxseg socket option. [ 316.014733][T14106] Use struct sctp_assoc_value instead [ 316.084831][T14096] syzkaller0: entered promiscuous mode [ 316.108033][T14106] sctp: [Deprecated]: syz.1.2273 (pid 14106) Use of int in maxseg socket option. [ 316.108033][T14106] Use struct sctp_assoc_value instead [ 316.123630][T14096] syzkaller0: entered allmulticast mode [ 316.216366][T14106] sctp: [Deprecated]: syz.1.2273 (pid 14106) Use of int in maxseg socket option. [ 316.216366][T14106] Use struct sctp_assoc_value instead [ 316.287280][T14106] sctp: [Deprecated]: syz.1.2273 (pid 14106) Use of int in maxseg socket option. [ 316.287280][T14106] Use struct sctp_assoc_value instead [ 316.355737][T14106] sctp: [Deprecated]: syz.1.2273 (pid 14106) Use of int in maxseg socket option. [ 316.355737][T14106] Use struct sctp_assoc_value instead [ 316.388852][T14106] sctp: [Deprecated]: syz.1.2273 (pid 14106) Use of int in maxseg socket option. [ 316.388852][T14106] Use struct sctp_assoc_value instead [ 316.405119][T14106] sctp: [Deprecated]: syz.1.2273 (pid 14106) Use of int in maxseg socket option. [ 316.405119][T14106] Use struct sctp_assoc_value instead [ 316.420906][T14106] sctp: [Deprecated]: syz.1.2273 (pid 14106) Use of int in maxseg socket option. [ 316.420906][T14106] Use struct sctp_assoc_value instead [ 316.500593][T13174] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.567004][T13174] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.683050][T14115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2276'. [ 316.988509][T14126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 317.259295][T14138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.668054][T14148] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2283'. [ 318.004914][T14148] tipc: Trying to set illegal importance in message [ 318.587798][T14173] sctp: [Deprecated]: syz.2.2290 (pid 14173) Use of int in maxseg socket option. [ 318.587798][T14173] Use struct sctp_assoc_value instead [ 319.897416][T14191] hsr0 speed is unknown, defaulting to 1000 [ 320.422269][T14205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2296'. [ 320.492833][T14208] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.2297'. [ 320.788642][T14206] hsr0 speed is unknown, defaulting to 1000 [ 321.162103][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2302'. [ 321.348457][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 321.643597][T14237] netlink: 'syz.2.2303': attribute type 1 has an invalid length. [ 322.015847][T14239] bond7: (slave gretap2): making interface the new active one [ 322.065770][T14239] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 322.133775][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'. [ 323.138814][T14272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2308'. [ 323.190156][T14272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2308'. [ 323.389063][T14278] netlink: 'syz.2.2310': attribute type 7 has an invalid length. [ 323.435560][T14278] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2310'. [ 324.274965][T14299] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2314'. [ 324.471328][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2315'. [ 324.691113][T14306] netlink: 'syz.2.2317': attribute type 15 has an invalid length. [ 325.092069][T14321] netlink: 'syz.1.2320': attribute type 3 has an invalid length. [ 325.136497][T14321] netlink: 'syz.1.2320': attribute type 3 has an invalid length. [ 325.251632][T14324] netlink: 'syz.2.2321': attribute type 33 has an invalid length. [ 325.494300][T14324] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 325.613404][T14324] bond8 (unregistering): Released all slaves [ 325.807773][T14343] __nla_validate_parse: 3 callbacks suppressed [ 325.807797][T14343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2325'. [ 325.910904][T14344] netlink: 'syz.3.2325': attribute type 1 has an invalid length. [ 325.965954][T14344] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2325'. [ 326.003346][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2325'. [ 326.417264][T14356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2329'. [ 326.920875][T14368] syzkaller0: entered promiscuous mode [ 326.957618][T14368] syzkaller0: entered allmulticast mode [ 327.048568][T14368] batadv0: entered allmulticast mode [ 327.206292][T14379] bridge_slave_0: left allmulticast mode [ 327.225243][T14379] bridge_slave_0: left promiscuous mode [ 327.248688][T14379] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.425585][T14384] netlink: 'syz.1.2335': attribute type 12 has an invalid length. [ 327.527936][T14383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2336'. [ 327.728605][T14384] bond7: option primary_reselect: invalid value (255) [ 327.813611][T14384] bond7 (unregistering): Released all slaves [ 327.961809][T14383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2336'. [ 328.084305][T14388] x_tables: duplicate underflow at hook 2 [ 329.013709][T14398] netlink: 'syz.1.2340': attribute type 1 has an invalid length. [ 329.047018][T14398] netlink: 'syz.1.2340': attribute type 1 has an invalid length. [ 329.090731][T14398] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.2340'. [ 329.485915][T14410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2344'. [ 329.546067][T14415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2344'. [ 330.717888][T14438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.796130][T14441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.901733][T14442] netlink: 'syz.1.2353': attribute type 61 has an invalid length. [ 330.930934][T14442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2353'. [ 331.094444][T14449] netlink: 'syz.4.2356': attribute type 1 has an invalid length. [ 331.298126][T14452] SET target dimension over the limit! [ 333.155886][T14473] netlink: 'syz.0.2363': attribute type 1 has an invalid length. [ 334.331072][T14494] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 335.578472][T14527] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2381'. [ 335.937206][T14542] netlink: 'syz.3.2384': attribute type 2 has an invalid length. [ 336.405475][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2388'. [ 337.862953][T14568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2391'. [ 339.635977][T14583] can: request_module (can-proto-4) failed. [ 339.795480][T14589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2396'. [ 340.555502][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2404'. [ 341.047802][T14628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2405'. [ 343.262642][T14641] netlink: 'syz.1.2408': attribute type 1 has an invalid length. [ 343.298526][T14648] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 343.333342][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2408'. [ 343.602783][T14647] bond7: Invalid ad_actor_system MAC address. [ 343.626727][T14647] bond7: option ad_actor_system: invalid value (1) [ 343.726461][T14647] bond7 (unregistering): Released all slaves [ 343.876684][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2412'. [ 344.571251][T14676] x_tables: duplicate entry at hook 1 [ 344.601918][T14678] Cannot find add_set index 3 as target [ 344.608063][T14676] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2415'. [ 344.663940][T14676] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2415'. [ 349.589696][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2423'. [ 352.883383][T14737] syzkaller0: entered promiscuous mode [ 352.907499][T14737] syzkaller0: entered allmulticast mode [ 360.447801][T14753] syzkaller0: entered promiscuous mode [ 360.455704][T14753] syzkaller0: entered allmulticast mode [ 361.342327][T14803] tap0: tun_chr_ioctl cmd 1074025676 [ 361.407972][T14803] tap0: owner set to 0 [ 361.479064][T14813] bridge0: port 1(syz_tun) entered blocking state [ 361.485771][T14813] bridge0: port 1(syz_tun) entered forwarding state [ 361.492815][T14813] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.500130][T14813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.688004][T14817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2437'. [ 362.101920][T14817] bond7: entered promiscuous mode [ 362.185863][T14817] 8021q: adding VLAN 0 to HW filter on device bond7 [ 362.322386][T14849] netlink: 'syz.4.2445': attribute type 1 has an invalid length. [ 362.370873][T14849] netlink: 'syz.4.2445': attribute type 2 has an invalid length. [ 362.898408][T14848] 8021q: adding VLAN 0 to HW filter on device bond7 [ 362.907911][T14848] bond7: (slave sit1): The slave device specified does not support setting the MAC address [ 362.921585][T14848] bond7: (slave sit1): Error -95 calling set_mac_address [ 363.415625][T14854] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.2446'. [ 363.485698][T14856] netlink: 'syz.4.2447': attribute type 5 has an invalid length. [ 363.495023][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 364.528233][T14872] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.2451'. [ 366.921391][T14900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.975478][T14900] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.2459'. [ 370.027516][T14946] netlink: 'syz.1.2470': attribute type 16 has an invalid length. [ 370.047445][T14946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2470'. [ 371.165599][T14938] hsr0 speed is unknown, defaulting to 1000 [ 371.632275][T14972] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2476'. [ 371.678313][T14974] netlink: 'syz.3.2477': attribute type 18 has an invalid length. [ 371.702730][T14977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.786741][T14981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.828662][T14974] netlink: 'syz.3.2477': attribute type 18 has an invalid length. [ 371.888312][T13176] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.280793][T13176] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.299667][T13176] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.413135][T13176] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.793302][T14999] syzkaller0: entered promiscuous mode [ 372.798863][T14999] syzkaller0: entered allmulticast mode [ 372.850873][T15006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2484'. [ 373.430293][T13165] bond0: (slave bridge_slave_1): interface is now down [ 373.437570][T13165] bond0: (slave netdevsim0): interface is now down [ 373.491830][T13165] bond0: now running without any active interface! [ 383.962451][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4 [ 395.847619][T15044] Cannot find add_set index 65532 as target [ 396.813344][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2498'. [ 397.333349][ T9195] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.487384][ T9195] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4 [ 397.650975][ T9195] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.784503][T15070] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 397.823572][T15072] netlink: 'syz.0.2498': attribute type 1 has an invalid length. [ 398.100809][ T9195] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4 [ 398.551902][T15106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2507'. [ 398.585745][T15095] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2502'. [ 398.613929][T15095] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 398.756369][T15112] netlink: 'syz.1.2509': attribute type 1 has an invalid length. [ 398.765151][T15112] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2509'. [ 398.775861][T15112] netlink: 658 bytes leftover after parsing attributes in process `syz.1.2509'. [ 398.835199][T15112] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2509'. [ 398.957477][T15115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2510'. [ 398.977544][T15116] netlink: 'syz.2.2511': attribute type 4 has an invalid length. [ 398.998271][T15116] netlink: 'syz.2.2511': attribute type 4 has an invalid length. [ 399.364300][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2514'. [ 400.125344][T15145] netlink: zone id is out of range [ 400.159480][T15145] netlink: zone id is out of range [ 400.177999][T15145] netlink: zone id is out of range [ 400.195574][T15145] netlink: zone id is out of range [ 400.209099][T15145] netlink: zone id is out of range [ 400.225874][T15145] netlink: zone id is out of range [ 400.239241][T15145] netlink: zone id is out of range [ 400.263774][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2522'. [ 400.486171][T15158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2525'. [ 401.400859][T15176] netlink: 'syz.1.2531': attribute type 1 has an invalid length. [ 401.413884][T15174] : entered promiscuous mode [ 401.458917][T15177] netlink: 'syz.1.2531': attribute type 1 has an invalid length. [ 402.333757][T15215] syzkaller0: entered promiscuous mode [ 402.374603][T15215] syzkaller0: entered allmulticast mode [ 402.441962][T15217] bond7: entered allmulticast mode [ 402.807065][T15229] xt_HMARK: proto mask must be zero with L3 mode [ 402.882699][T15229] __nla_validate_parse: 1 callbacks suppressed [ 402.882731][T15229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2545'. [ 402.965963][T15216] bond7: left allmulticast mode [ 402.989400][T15235] netlink: 211896 bytes leftover after parsing attributes in process `syz.3.2546'. [ 403.252418][T15232] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 403.441097][T15237] macvlan3: entered promiscuous mode [ 403.446491][T15237] macvlan3: entered allmulticast mode [ 403.534726][T15237] bond8: entered promiscuous mode [ 403.571053][T15237] bridge4: entered promiscuous mode [ 403.613365][T15237] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 403.743064][T15237] bond8: left promiscuous mode [ 403.748335][T15237] bridge4: left promiscuous mode [ 404.652113][T15275] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2555'. [ 404.700702][T15275] netlink: 'syz.0.2555': attribute type 7 has an invalid length. [ 404.708510][T15275] netlink: 'syz.0.2555': attribute type 8 has an invalid length. [ 404.744761][T15276] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2557'. [ 404.788923][T15283] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 404.811123][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2555'. [ 404.833784][T15281] tipc: Enabled bearer , priority 0 [ 405.241657][T15281] syzkaller0: entered promiscuous mode [ 405.248579][T15281] syzkaller0: entered allmulticast mode [ 405.264778][T15281] tipc: Resetting bearer [ 405.385997][T15302] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2562'. [ 405.492969][T15302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2562'. [ 405.561471][T15305] xt_CT: You must specify a L4 protocol and not use inversions on it [ 405.570513][T15302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2562'. [ 405.707902][T13165] tipc: Resetting bearer [ 405.725370][T15298] H: renamed from dummy0 (while UP) [ 405.781723][T15277] tipc: Resetting bearer [ 411.148894][T15277] tipc: Disabling bearer [ 411.906410][T15339] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 412.061564][T15343] sctp: [Deprecated]: syz.2.2576 (pid 15343) Use of int in max_burst socket option deprecated. [ 412.061564][T15343] Use struct sctp_assoc_value instead [ 412.227807][T15349] sctp: [Deprecated]: syz.2.2576 (pid 15349) Use of int in max_burst socket option deprecated. [ 412.227807][T15349] Use struct sctp_assoc_value instead [ 412.322541][T15350] syzkaller1: entered promiscuous mode [ 412.362950][T15350] syzkaller1: entered allmulticast mode [ 412.768450][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2582'. [ 412.818120][T15366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2582'. [ 412.859232][T15366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2582'. [ 412.914372][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2582'. [ 412.970959][T15366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2582'. [ 413.035801][T15366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2582'. [ 413.371285][T15384] ip6t_REJECT: ECHOREPLY is not supported [ 413.571002][T15381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2586'. [ 413.610793][T15381] bond0: Caught tx_queue_len zero misconfig [ 413.647342][T15381] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2586'. [ 413.698198][T15387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.195599][T15422] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.261068][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2598'. [ 415.280306][T15422] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.333616][T15432] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2599'. [ 415.386195][T15424] lo: Caught tx_queue_len zero misconfig [ 415.719606][T15438] netlink: 'syz.2.2600': attribute type 21 has an invalid length. [ 415.753181][T15422] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.787623][T15444] net_ratelimit: 1 callbacks suppressed [ 415.787644][T15444] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 415.816935][T15422] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.863760][T15446] sctp: [Deprecated]: syz.4.2601 (pid 15446) Use of int in max_burst socket option deprecated. [ 415.863760][T15446] Use struct sctp_assoc_value instead [ 415.913982][T15438] netlink: 'syz.2.2600': attribute type 1 has an invalid length. [ 416.442177][T15422] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.478784][T15422] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.574298][T15468] netlink: 'syz.2.2607': attribute type 10 has an invalid length. [ 416.955943][T15472] x_tables: duplicate entry at hook 3 [ 417.275689][T15484] block nbd4: not configured, cannot reconfigure [ 417.347171][T15422] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.368782][T15422] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.201101][T13165] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.221285][T13165] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.326800][T13165] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.359688][T13165] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.458943][T13188] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.479245][T13188] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.554490][T15507] openvswitch: netlink: Multiple metadata blocks provided [ 418.578218][T15506] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 418.603964][T13188] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.645026][T13188] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.885897][T15512] __nla_validate_parse: 11 callbacks suppressed [ 418.885919][T15512] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2621'. [ 418.977401][T15512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2621'. [ 419.024120][T15512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2621'. [ 419.227742][T15526] netlink: 'syz.2.2625': attribute type 1 has an invalid length. [ 419.268752][T15526] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2625'. [ 419.731957][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 420.184415][T15538] scsi_nl_rcv_msg: discarding partial skb [ 421.677363][T15566] xt_l2tp: v2 doesn't support IP mode [ 421.812315][T15569] xt_ecn: cannot match TCP bits for non-tcp packets [ 422.148628][T15576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2641'. [ 422.197450][T15576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2641'. [ 422.252509][T15576] syzkaller0: entered promiscuous mode [ 422.280580][T15576] syzkaller0: entered allmulticast mode [ 422.463247][T15589] openvswitch: netlink: Flow actions attr not present in new flow. [ 423.152526][T15592] syzkaller1: entered promiscuous mode [ 423.168829][T15592] syzkaller1: entered allmulticast mode [ 423.762398][T15616] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2655'. [ 423.784505][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2655'. [ 424.297678][T15633] IPVS: sed: FWM 3 0x00000003 - no destination available [ 424.464645][T15637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2665'. [ 425.523249][T15665] netlink: 'syz.2.2678': attribute type 4 has an invalid length. [ 426.500706][T15694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2688'. [ 426.661623][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2691'. [ 426.869130][T15705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2694'. [ 428.842079][T15748] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2709'. [ 429.746968][T15774] netlink: 'syz.2.2721': attribute type 1 has an invalid length. [ 429.799115][T15774] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2721'. [ 429.826606][T15776] openvswitch: netlink: Flow key attr not present in new flow. [ 430.624432][T15799] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2732'. [ 430.656397][T15800] netlink: 'syz.3.2731': attribute type 10 has an invalid length. [ 430.703036][T15800] bond0: (slave wlan1): Opening slave failed [ 431.008904][T15808] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 431.029404][T15794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.142999][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'. [ 431.166490][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2738'. [ 431.288250][T15817] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2738'. [ 431.573338][T15822] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2742'. [ 431.594580][T15822] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2742'. [ 431.649001][T15823] h: entered promiscuous mode [ 431.917748][T15830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2745'. [ 431.938439][T15832] netlink: 'syz.3.2746': attribute type 1 has an invalid length. [ 432.007350][T15833] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2745'. [ 432.048162][T15829] syzkaller0: entered promiscuous mode [ 432.060645][T15829] syzkaller0: entered allmulticast mode [ 432.163913][T15832] 8021q: adding VLAN 0 to HW filter on device bond14 [ 437.517137][T15835] vlan2: entered promiscuous mode [ 437.523055][T15835] bond14: entered promiscuous mode [ 437.528414][T15835] vlan2: entered allmulticast mode [ 437.535022][T15835] bond14: entered allmulticast mode [ 437.616379][T15847] ip6tnl0: Caught tx_queue_len zero misconfig [ 437.822538][T15848] bond8 (unregistering): Released all slaves [ 437.955422][T15862] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2751'. [ 438.033151][T15864] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2751'. [ 438.092784][T15863] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2751'. [ 438.273604][T15870] netlink: 'syz.0.2753': attribute type 2 has an invalid length. [ 438.325248][T15870] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2753'. [ 438.701706][T15890] x_tables: duplicate underflow at hook 1 [ 438.887506][T15889] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 438.993234][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2760'. [ 439.309018][T15893] syzkaller1: entered promiscuous mode [ 439.330706][T15893] syzkaller1: entered allmulticast mode [ 439.538368][T15914] netlink: 'syz.2.2768': attribute type 1 has an invalid length. [ 440.265945][T15916] bond8: (slave geneve3): making interface the new active one [ 440.329412][T15916] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 440.531313][T13165] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 440.578237][T13165] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 440.639731][T13165] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 440.751729][T13165] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 441.558010][T15962] tipc: Enabling of bearer rejected, already enabled [ 444.056199][T16035] netlink: 320 bytes leftover after parsing attributes in process `syz.0.2791'. [ 445.419175][T16068] syzkaller0: entered promiscuous mode [ 445.456141][T16068] syzkaller0: entered allmulticast mode [ 445.504548][T16077] ipt_REJECT: TCP_RESET invalid for non-tcp [ 445.511770][T16074] xt_hashlimit: size too large, truncated to 1048576 [ 445.969642][T16086] netlink: 'syz.1.2808': attribute type 1 has an invalid length. [ 445.997876][T16086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.405542][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2814'. [ 446.472877][T16105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2815'. [ 446.488224][T16108] netlink: 'syz.1.2813': attribute type 1 has an invalid length. [ 446.534620][T16108] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2813'. [ 446.595225][T16108] netlink: 658 bytes leftover after parsing attributes in process `syz.1.2813'. [ 446.657780][T16108] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2813'. [ 446.700214][T16115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2815'. [ 447.722071][T16149] x_tables: unsorted underflow at hook 3 [ 447.889035][T16152] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2825'. [ 448.704762][T16180] netlink: 'syz.0.2833': attribute type 33 has an invalid length. [ 448.838758][T16168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.928499][T16187] xt_cgroup: invalid path, errno=-2 [ 449.009039][T16180] bond13: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 449.118747][T16180] bond13 (unregistering): Released all slaves [ 449.136785][T16194] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2836'. [ 449.911784][T16217] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2841'. [ 450.276777][T16231] syzkaller1: entered promiscuous mode [ 450.290837][T16231] syzkaller1: entered allmulticast mode [ 450.680897][T16241] 8021q: VLANs not supported on wg1 [ 450.840818][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2849'. [ 450.884940][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2849'. [ 450.942033][T16248] netlink: 'syz.1.2849': attribute type 12 has an invalid length. [ 450.998764][T16248] netlink: 'syz.1.2849': attribute type 11 has an invalid length. [ 619.477665][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 624.591444][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4 [ 725.779678][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 725.786711][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5824/1:b..l [ 725.795248][ C0] rcu: (detected by 0, t=10503 jiffies, g=53625, q=1991 ncpus=2) [ 725.803128][ C0] task:syz-executor state:R running task stack:22528 pid:5824 tgid:5824 ppid:1 task_flags:0x400140 flags:0x00080002 [ 725.817844][ C0] Call Trace: [ 725.821185][ C0] [ 725.824266][ C0] __schedule+0x15dd/0x52d0 [ 725.828836][ C0] ? kernel_text_address+0xa5/0xe0 [ 725.834004][ C0] ? __kernel_text_address+0xd/0x30 [ 725.839261][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 725.845479][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 725.850509][ C0] ? __pfx___schedule+0x10/0x10 [ 725.855424][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 725.860433][ C0] preempt_schedule_irq+0x4d/0xa0 [ 725.865515][ C0] irqentry_exit+0x599/0x620 [ 725.870163][ C0] ? trace_irq_disable+0x3b/0x150 [ 725.875256][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 725.881297][ C0] RIP: 0010:unwind_next_frame+0xd5f/0x23c0 [ 725.887189][ C0] Code: 8d 5c 24 f8 4d 8b 66 10 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 20 0f b6 04 01 84 c0 0f 85 51 11 00 00 41 83 3e 00 0f 95 c0 <49> 39 df 0f 96 c1 20 c1 49 39 dc 0f 97 c0 20 c8 3c 01 75 18 48 8d [ 725.906847][ C0] RSP: 0018:ffffc90003c570d8 EFLAGS: 00000202 [ 725.912984][ C0] RAX: 0000000000000001 RBX: ffffc90003c57670 RCX: 1ffff9200078ae35 [ 725.921000][ C0] RDX: ffffffff90b35906 RSI: 0000000000000002 RDI: ffffffff8c27d520 [ 725.929028][ C0] RBP: 1ffff9200078ae36 R08: 0000000000000009 R09: ffffffff8e75e5a0 [ 725.937050][ C0] R10: ffffc90003c571f8 R11: ffffffff81b0dc10 R12: ffffc90003c58000 [ 725.945072][ C0] R13: 1ffff9200078ae37 R14: ffffc90003c571a8 R15: ffffc90003c50000 [ 725.953304][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 725.959535][ C0] ? unwind_next_frame+0xd4/0x23c0 [ 725.964721][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 725.969896][ C0] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 725.975602][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 725.981874][ C0] arch_stack_walk+0x11b/0x150 [ 725.986799][ C0] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 725.992499][ C0] stack_trace_save+0xa9/0x100 [ 725.997316][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 726.002752][ C0] save_stack+0x122/0x230 [ 726.007133][ C0] ? __pfx_save_stack+0x10/0x10 [ 726.012135][ C0] ? __free_frozen_pages+0xc2b/0xdb0 [ 726.017482][ C0] ? __slab_free+0x263/0x2b0 [ 726.022362][ C0] ? qlist_free_all+0x97/0x100 [ 726.027183][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 726.032872][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 726.037950][ C0] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 726.043645][ C0] ? page_ext_put+0x97/0xc0 [ 726.048219][ C0] __reset_page_owner+0x71/0x1f0 [ 726.053216][ C0] __free_frozen_pages+0xc2b/0xdb0 [ 726.058397][ C0] __slab_free+0x263/0x2b0 [ 726.062892][ C0] qlist_free_all+0x97/0x100 [ 726.067533][ C0] ? anon_vma_clone+0x3e5/0x9f0 [ 726.072435][ C0] kasan_quarantine_reduce+0x148/0x160 [ 726.078038][ C0] __kasan_slab_alloc+0x22/0x80 [ 726.082947][ C0] kmem_cache_alloc_noprof+0x2bc/0x650 [ 726.088631][ C0] ? anon_vma_clone+0x3e5/0x9f0 [ 726.093529][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 726.099396][ C0] anon_vma_clone+0x3e5/0x9f0 [ 726.104142][ C0] anon_vma_fork+0x16a/0x570 [ 726.108794][ C0] dup_mmap+0x991/0x1d90 [ 726.113196][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 726.117929][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 726.123206][ C0] copy_mm+0x13b/0x4a0 [ 726.127333][ C0] copy_process+0x18b6/0x3cd0 [ 726.132084][ C0] ? copy_process+0x921/0x3cd0 [ 726.137032][ C0] ? __pfx_copy_process+0x10/0x10 [ 726.142127][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 726.147241][ C0] kernel_clone+0x248/0x8e0 [ 726.151816][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 726.156936][ C0] __x64_sys_clone+0x1b6/0x230 [ 726.161788][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 726.167167][ C0] ? do_user_addr_fault+0xc6f/0x1340 [ 726.172523][ C0] do_syscall_64+0x14d/0xf80 [ 726.177432][ C0] ? trace_irq_disable+0x3b/0x150 [ 726.182508][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.188633][ C0] ? clear_bhb_loop+0x40/0x90 [ 726.193367][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.199314][ C0] RIP: 0033:0x7fb49b9c5292 [ 726.203783][ C0] RSP: 002b:00007ffc75977fb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 726.212278][ C0] RAX: ffffffffffffffda RBX: 00007ffc75977fb0 RCX: 00007fb49b9c5292 [ 726.220518][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 726.228632][ C0] RBP: 00007ffc7597813c R08: 0000000000000000 R09: 0000000000000001 [ 726.236666][ C0] R10: 00005555602ae7d0 R11: 0000000000000246 R12: 0000000000000001 [ 726.244686][ C0] R13: 00000000000927c0 R14: 000000000006deee R15: 00007ffc75978190 [ 726.252745][ C0]