last executing test programs: 2.288093187s ago: executing program 2 (id=2131): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000000000000000000000000000000005480d3259ec476cf82343c2eaaad532448cfeea925b892ada43ae23300a84e0dd196f1908cd463bdaac21c003bdc12d64aab4529f5191c0a62ab73d5a72532de05b9c83cde4f856b3a6fea3f68665fc2e5db2f25e3d4", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.131992674s ago: executing program 0 (id=2133): syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@default_ibss_ssid, 0x6, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1c, 0x20016, 0x9, 0x80}, 0x50) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x240488c4) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f00000000c0)) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x100, 0xc42, 0x3, 0x7, 0x5, 0x2]}, &(0x7f0000000100)=0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) 2.048585162s ago: executing program 2 (id=2135): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) r1 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8}}, 0x0, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000180)={0x200, 0x4, 0x8}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000440)={0x1, 0x6}, 0x8) 1.982491425s ago: executing program 0 (id=2136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB="0000020000000000000000000000000000000000bd4218b428c0403e9d493b67f9d2a9fcf4e561e03a6ff243e5298c24452594524c7ff2cc4863aa61194cf1571c9ec0cd0689d7ada7a725b5b5abd81fed06", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d6000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r4, 0x0) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r2, 0x3, {0x0, 0xff, 0x2}, 0xff}, 0x18) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000ffff00000087080000010100007b8af8ff00000000bfa200000000000007020007f8ffffffb703000008000000b7040000000000008500000082000000d606ae2c2fe79500"], &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB="0000020000000000000000000000000000000000bd4218b428c0403e9d493b67f9d2a9fcf4e561e03a6ff243e5298c24452594524c7ff2cc4863aa61194cf1571c9ec0cd0689d7ada7a725b5b5abd81fed06", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f00005d6000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r4, 0x0) (async) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r2, 0x3, {0x0, 0xff, 0x2}, 0xff}, 0x18) (async) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000ffff00000087080000010100007b8af8ff00000000bfa200000000000007020007f8ffffffb703000008000000b7040000000000008500000082000000d606ae2c2fe79500"], &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) (async) 1.864007275s ago: executing program 2 (id=2139): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c00000013813f1d5a7c89bbc1d3594a50ad451f06fc0d09e2c0b065e75a4ec672c78e6d53bd231595fd7bfe33066fb72cdc28cdef3809b31224929f00fdb32cc7446bdbf1c2ce3e5a620d1f9c475928302dea6299d66d1ad8f15dc3bcf9d485341b51d8df08045dcab9e7a01d67498e31d0d8afadff2fb55b28be545d4c1cbd512eb903b6127dfbc27ad80b330ceaf1ad9f0c9f581c8a53d20889e19dc51fc8f83eff603629ba1b097463eac0407fa549734735cdc5831766f2c0591971e2d5e90540f550b33de1b1d4ea5834a6486a0300000000000000ddb362af0bc420367cf1c844d8ae230a06ef7bc7", @ANYRES16=r6, @ANYBLOB="01002abd700003dcdf250100000008000100", @ANYRES32=r7, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB], 0x5c}, 0x1, 0x400000000000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}}, 0x20}}, 0x0) 1.73367133s ago: executing program 2 (id=2141): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1], 0x0) r2 = accept(r0, &(0x7f0000000080)=@generic, &(0x7f0000000100)=0x80) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4) 1.637076637s ago: executing program 0 (id=2144): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)="3900000013000318680d07070000000f1801ff3f04000000170a001700000000040037000d00400001312564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 1.427723893s ago: executing program 0 (id=2148): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x50) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5fc2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x2, 0x20000000008, 0xfffffffffffffffd}, {0x0, 0x1, 0xcc}, {0xf6, 0xffffffff}, 0x70bd2c, 0x0, 0xa, 0x1, 0x9}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "fb695c1c2b0adabc399d03ca99760e2e2d4ffe240c8b474b404667"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r7, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x4c}, 0x1, 0xffffffff00000003}, 0x0) 1.415765079s ago: executing program 1 (id=2149): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) sendto$packet(r2, &(0x7f0000000700)="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", 0x1000, 0x4000000, &(0x7f00000000c0)={0x11, 0x11, r1, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000100001040000000000000000000000007ff8d157211f7e94058a2303ca48469f6a5c9b8b30ed79014239c71c8f9d40733d49ae5f2ee32887ce17b66e5102975be993eca6df0ee88262189134638d21d272aa57b6320e26621183832232", @ANYRES32=r1, @ANYBLOB="0305000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa000008000300000000000800010010000000"], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) 1.220546559s ago: executing program 1 (id=2152): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0x7ff, 0x9, 0x8}) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r5, 0x215eb000) pipe(&(0x7f0000000740)) r6 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x61d0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="c62465d7fb8d"}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r4], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d56c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffffffffff7f00000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff0000000025bd7000043500000a0001002000000000000000380017000700000028bd700029bd700027bd700027bd700000100000ffff0000f8ffffff08000000190d0000050000004000000003000000240009000e000000000000000700000000000000c600000000000000000000800000000004010500ffffffff000000000000000000000000000004d33300000002000000fe880000000000000000000000000101ff34000006020900070000000700000001f8ffffffffffff000000000000000000000000000004d46c0000000a00000000000000000000000000000000000000043500000203f500a4070000000001000000000064010101000000000000000000000000000004d4330000000a000000fc0100000000000000000000000000000235000001020700060000000800000000800000fc020000000000000000000000000000000004d66c00000006000000000000000000000000000000000000000535000003020800070000000100008000020000"], 0x250}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xb, "85dc30119ae701f76cf3e5"}, &(0x7f0000000180)=0x13) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r7, 0x2}, &(0x7f0000000200)=0x8) 1.129016185s ago: executing program 4 (id=2153): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000000)=[{&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001200)={'lo\x00', &(0x7f00000011c0)=@ethtool_cmd={0x4a, 0x9, 0xe21, 0x2, 0x9, 0x2, 0xa5, 0x0, 0x7, 0xfc, 0x2, 0xc, 0x5, 0x2, 0xf9, 0x2, [0xffffffff, 0x42]}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001200)={'lo\x00', &(0x7f00000011c0)=@ethtool_cmd={0x4a, 0x9, 0xe21, 0x2, 0x9, 0x2, 0xa5, 0x0, 0x7, 0xfc, 0x2, 0xc, 0x5, 0x2, 0xf9, 0x2, [0xffffffff, 0x42]}}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'caif0\x00', 0x0}) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)={0x14, 0x0, 0x5, 0x3, 0x0, 0x0, {0x3}}, 0x14}}, 0x840) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES16=r3, @ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x805) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES16=r3, @ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x805) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe, 0x2}, 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) (async) recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r6, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r2, 0x6fa65000) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004904003400650000042190780a010101ac14140cc191da8ae654cfb786060000000200004e214e2204519078089cc7e80394125f"], 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004904003400650000042190780a010101ac14140cc191da8ae654cfb786060000000200004e214e2204519078089cc7e80394125f"], 0x0) sendmmsg(r6, &(0x7f0000001080)=[{{&(0x7f0000000280)=@caif, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="f47d1bda7a53bca2ff4cfcfe9f0bc1c7a8aaee50119a2908fd083ba47fbb4b47ae67ec8834fc730a5db740ac4c63f2ad5db0eacf8a149f0e5a2bb1fe5c14d0c2d775c6", 0x43}, {&(0x7f0000000380)="cceee4f9fff8ac168584aec095abc46711b5598cf5bfc9448f580d7d7ea18f637be905ba858fefd882a480d9bc3202c31eca3184320504463168840f611984a76e565a30d211eb658324f33836b342f3a5a19caee412168bcb1d6ac9e2e3a53826ae01d45cee2e7e7f4bbe015708447958841ebbe76ec9b3da3c3e8e2de9e63e88977cd597ece4bc1f0122c36a54b723b96ac15e403d559954639fb0163ed9a74f2bac6af9c405318a54d72d10a73dc556f0d221bd324db6e1cbc9f5ed05932a9e7d217c2b0869803c80e1d966c9ab29dec0c5c6159da912f8b539165f372c60ac98f467a59239b89cefa531fdf7", 0xee}], 0x2, &(0x7f0000000b80)=[{0xa0, 0x104, 0x0, "0f64001b3068d168afbbe8bcdca142a46c12be80ac167f5d748c2a2315f8833e46ef1ee51d97f9867b4fb4aed7af7eba61eac1374ebe64d75b55a8af78ccedcecd112ecffc3576f1b54a92a07a7a7984661abb24144c840490ae3f101b38dbc8c1450e6b472969367b1785d85f1dcd02955713f25dd553f574f768afa431be124642dd9cd00910fda1"}, {0x50, 0x1, 0xa, "119764bc473a73b1355a06ccae583318b9ca41ea4b2f24b78e5b003a506ef790d44405c9bb3daf96544e3da01646937f04fa2fc87e8bb385e8"}, {0x100, 0x117, 0x8, "46b3a2346173de078ceddc7e6cdb33bf4715d50867d4b0d956840e2c700a2d9254205c02629b3d6610816b48c8cce6556e440d7615aad2801cb2284a194f4ada9efbbd38f31f96c0c0478d123c4f15cb59722b36e4dca02d2d9601b90f269401c11fcf6ffa1e5de5a7e91ebdaa591c1b1807a20ca125299db89d9c436e0a90a1a2b4a7a6703c51ee4a9d86aaf103317e04895b5695a0e79c5e6d0a767dfc83f62c3be1c967b82b4b8037e6766e47da0d7b03e6403149b197cf7944a0ba9a3b942fa7cb989e6cb865cda91064f28f6bc836ce32a0f6d529933c7ff14cd9ba557825fc62bbefd4f824e21df6a61e3ed5"}, {0x70, 0x10f, 0x8001, "bfeb0322b51637483f8ec227b72aee5c3ecb6d41548732975e546395a171e0a5ff37d79c9100856b6e5ccb7361ef945eb67b9bb6988c19268e8db6736a76b8be309eb89e0713a191c457e173c76d214553e89671c706a6643e7474"}, {0xf0, 0x107, 0x0, "e1f71b3d2f9a16b68d65c36166a81afca75458880be9c48ee39f1b3bfb162802d0f1a4099ee3ae3802b8b8ccab40733f5d8b708448b3e1be01091d32c17061a50a2fac704e19df2d8c7c53280d7683fe45e0e9b878e6738c35416e3534d21e366323b25e0d1e177fa9fd4840d6318cf1dfc147451217f01e7f89ce25b17794fb7776df4ed9d29eead94aeb387542f1d190aad5c2d9bdd68d7cf510537b71344910ca678eedecf4599272452bc9fb00c47b68a34c73e42eb643e772954f63d1fe9cc1a64894af69624fca13bdb9021887dd30a923fdb7cbaeb15d8cee"}], 0x350}}, {{&(0x7f0000000f00)=@generic={0x25, "f41481bd4b3d3499e767869f5516ac80df783d6d641b176786b87aa8dbc6b1527c8e5e02085f9224bc5df1b6ff8312df736c3a9c91336b933a6f1c0356bb244950d40f4ee7e307e26c9746dd68b9b37064cbeb2a03d21cf61a123b1ac364a4de73a2058f1c5a82d73cba183565914dee470dc38d36624ea278451d1550e4"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000f80)="54ff198e51ee363d062f548436bcd01c4540b74b67d32fa58668b88264063bbc0533bf29e2f59885d2cc74eec06ffc58e3c06935f8381d0c72743c7a040857c5626b7e9a567faf4df70b99d79f84c3d2d612ffc50490306b460041b82c49fb60534c6524ba2c07ccce619d1ebd42a5e24017ec770f7a", 0x76}], 0x1, &(0x7f0000001000)=[{0x70, 0x6, 0xac, "d803383d86f79ef52c89bcdc7c3641574ffe9ecedfe4d8d3370a6799ac308859bc0deb12072f2947f4ed6e03023f362fb6bde35d255c4f8641620199520cce222bc6884392e37298b3c78cce7f869ca5ea7f38d7a1c09a2638d1ec317eec688d"}], 0x70}}], 0x2, 0x0) (async) sendmmsg(r6, &(0x7f0000001080)=[{{&(0x7f0000000280)=@caif, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="f47d1bda7a53bca2ff4cfcfe9f0bc1c7a8aaee50119a2908fd083ba47fbb4b47ae67ec8834fc730a5db740ac4c63f2ad5db0eacf8a149f0e5a2bb1fe5c14d0c2d775c6", 0x43}, {&(0x7f0000000380)="cceee4f9fff8ac168584aec095abc46711b5598cf5bfc9448f580d7d7ea18f637be905ba858fefd882a480d9bc3202c31eca3184320504463168840f611984a76e565a30d211eb658324f33836b342f3a5a19caee412168bcb1d6ac9e2e3a53826ae01d45cee2e7e7f4bbe015708447958841ebbe76ec9b3da3c3e8e2de9e63e88977cd597ece4bc1f0122c36a54b723b96ac15e403d559954639fb0163ed9a74f2bac6af9c405318a54d72d10a73dc556f0d221bd324db6e1cbc9f5ed05932a9e7d217c2b0869803c80e1d966c9ab29dec0c5c6159da912f8b539165f372c60ac98f467a59239b89cefa531fdf7", 0xee}], 0x2, &(0x7f0000000b80)=[{0xa0, 0x104, 0x0, "0f64001b3068d168afbbe8bcdca142a46c12be80ac167f5d748c2a2315f8833e46ef1ee51d97f9867b4fb4aed7af7eba61eac1374ebe64d75b55a8af78ccedcecd112ecffc3576f1b54a92a07a7a7984661abb24144c840490ae3f101b38dbc8c1450e6b472969367b1785d85f1dcd02955713f25dd553f574f768afa431be124642dd9cd00910fda1"}, {0x50, 0x1, 0xa, "119764bc473a73b1355a06ccae583318b9ca41ea4b2f24b78e5b003a506ef790d44405c9bb3daf96544e3da01646937f04fa2fc87e8bb385e8"}, {0x100, 0x117, 0x8, "46b3a2346173de078ceddc7e6cdb33bf4715d50867d4b0d956840e2c700a2d9254205c02629b3d6610816b48c8cce6556e440d7615aad2801cb2284a194f4ada9efbbd38f31f96c0c0478d123c4f15cb59722b36e4dca02d2d9601b90f269401c11fcf6ffa1e5de5a7e91ebdaa591c1b1807a20ca125299db89d9c436e0a90a1a2b4a7a6703c51ee4a9d86aaf103317e04895b5695a0e79c5e6d0a767dfc83f62c3be1c967b82b4b8037e6766e47da0d7b03e6403149b197cf7944a0ba9a3b942fa7cb989e6cb865cda91064f28f6bc836ce32a0f6d529933c7ff14cd9ba557825fc62bbefd4f824e21df6a61e3ed5"}, {0x70, 0x10f, 0x8001, "bfeb0322b51637483f8ec227b72aee5c3ecb6d41548732975e546395a171e0a5ff37d79c9100856b6e5ccb7361ef945eb67b9bb6988c19268e8db6736a76b8be309eb89e0713a191c457e173c76d214553e89671c706a6643e7474"}, {0xf0, 0x107, 0x0, "e1f71b3d2f9a16b68d65c36166a81afca75458880be9c48ee39f1b3bfb162802d0f1a4099ee3ae3802b8b8ccab40733f5d8b708448b3e1be01091d32c17061a50a2fac704e19df2d8c7c53280d7683fe45e0e9b878e6738c35416e3534d21e366323b25e0d1e177fa9fd4840d6318cf1dfc147451217f01e7f89ce25b17794fb7776df4ed9d29eead94aeb387542f1d190aad5c2d9bdd68d7cf510537b71344910ca678eedecf4599272452bc9fb00c47b68a34c73e42eb643e772954f63d1fe9cc1a64894af69624fca13bdb9021887dd30a923fdb7cbaeb15d8cee"}], 0x350}}, {{&(0x7f0000000f00)=@generic={0x25, "f41481bd4b3d3499e767869f5516ac80df783d6d641b176786b87aa8dbc6b1527c8e5e02085f9224bc5df1b6ff8312df736c3a9c91336b933a6f1c0356bb244950d40f4ee7e307e26c9746dd68b9b37064cbeb2a03d21cf61a123b1ac364a4de73a2058f1c5a82d73cba183565914dee470dc38d36624ea278451d1550e4"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000f80)="54ff198e51ee363d062f548436bcd01c4540b74b67d32fa58668b88264063bbc0533bf29e2f59885d2cc74eec06ffc58e3c06935f8381d0c72743c7a040857c5626b7e9a567faf4df70b99d79f84c3d2d612ffc50490306b460041b82c49fb60534c6524ba2c07ccce619d1ebd42a5e24017ec770f7a", 0x76}], 0x1, &(0x7f0000001000)=[{0x70, 0x6, 0xac, "d803383d86f79ef52c89bcdc7c3641574ffe9ecedfe4d8d3370a6799ac308859bc0deb12072f2947f4ed6e03023f362fb6bde35d255c4f8641620199520cce222bc6884392e37298b3c78cce7f869ca5ea7f38d7a1c09a2638d1ec317eec688d"}], 0x70}}], 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r7, 0x26, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r8, 0x0, 0x0}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000006c0)={0x5, {{0xa, 0x4e23, 0x401, @mcast2, 0x7}}, 0x1, 0x8, [{{0xa, 0x4e22, 0x1, @private1, 0x2}}, {{0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x4e21, 0x3ff, @empty, 0x60}}, {{0xa, 0x4e20, 0xa, @private1, 0x1}}, {{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x401}}, {{0xa, 0x4e23, 0x800, @empty, 0x8}}, {{0xa, 0x4e21, 0x2, @empty, 0x8000}}, {{0xa, 0x4e24, 0x2ef66d49, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6f}}]}, 0x490) (async) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000006c0)={0x5, {{0xa, 0x4e23, 0x401, @mcast2, 0x7}}, 0x1, 0x8, [{{0xa, 0x4e22, 0x1, @private1, 0x2}}, {{0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x4e21, 0x3ff, @empty, 0x60}}, {{0xa, 0x4e20, 0xa, @private1, 0x1}}, {{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x401}}, {{0xa, 0x4e23, 0x800, @empty, 0x8}}, {{0xa, 0x4e21, 0x2, @empty, 0x8000}}, {{0xa, 0x4e24, 0x2ef66d49, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6f}}]}, 0x490) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r9, 0x107, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000001380)={0x0, 0xb9, "b6a37eab1c3a6fbca81befce798d2f68e00be95901c456cf8358a3dcfb7f1c60aae9cea0cb73e4924ebefc02074632411bca67421b52c8078a7af1da2efc93595758cf915b9bde92a943b882c0bc424fb693ee8d8022141b34f3c08e87ddcc70a27f9050ff74bf67ac3584d70bb31f830d701e8dee4e407a9f753f504c9553ee4538c994660a8b5534ad9d3558d83114f5a5d4b2b885759fd0df7104ba5a2f45d8bb23ef31c2a51e6f74fea07597dd9c4d9a9c909bc33e9cfe"}, &(0x7f0000001100)=0xc1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001180)={r10, 0xa4, &(0x7f0000001580)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x5c32, @local, 0x3}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0x6, @mcast1, 0x7}, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x3c}, 0xfffffff4}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000001540)=0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 1.052777075s ago: executing program 3 (id=2154): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) r1 = socket(0x840000000002, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061106d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}], 0x18}}], 0x2, 0x20004086) 1.051792756s ago: executing program 0 (id=2155): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) socket$inet_smc(0x2b, 0x1, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r2, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) poll(&(0x7f0000000340)=[{r2}], 0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r3, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000040), &(0x7f00000000c0)='GPL\x00'}, 0x94) 947.003329ms ago: executing program 2 (id=2156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2e0, 0x0, 0x0, 0x148, 0x0, 0x148, 0x248, 0x240, 0x240, 0x248, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xffffffff, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0xfffffffc, 0xed, 0x7, 0x0, 0x78}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x4, 0x0, 0x3, 0x1, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x17d9d65ca8f0eaa1, 0x7ff, 0x9, 0x7a2, 'netbios-ns\x00', 'syz0\x00', {0x8001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) write(r5, &(0x7f0000000340), 0x11000) vmsplice(r4, &(0x7f00000013c0)=[{&(0x7f00000001c0)="adba69b8faf1fafbc15e7fee388d121381cf70f5f5cea82140b46a3b8d7234cde6eb75f3b89d275bd9ed38ec804a94c3c637ed69c4c04b7ad6ea2908ac095e0f", 0x40}], 0x1, 0xf) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00010000b424d7d58bc8453e"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="ddbe"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x38, 0xb, 0xa, 0x101, 0x0, 0x0, {0x4, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x447}]}, @NFT_MSG_DELFLOWTABLE={0x284, 0x18, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x210, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc3ae}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'sit0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_DELCHAIN={0x7c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10d24763}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x19491218}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bridge\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x39c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 870.367692ms ago: executing program 3 (id=2157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x6, [@typedef={0xc}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x5, 0x6}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x2, 0x4}, {0xf, 0x2}, {0x2}, {0x5, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x400}}]}, {0x0, [0x2e, 0x20, 0x5f, 0x2e]}}, &(0x7f00000001c0)=""/74, 0x7e, 0x4a, 0x1, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xe, 0x5a43, 0x81, 0x102a, r2, 0x7, '\x00', 0x0, r3, 0x1, 0x5, 0x0, 0x3}, 0x50) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x6, [@typedef={0xc}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x5, 0x6}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x2, 0x4}, {0xf, 0x2}, {0x2}, {0x5, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x400}}]}, {0x0, [0x2e, 0x20, 0x5f, 0x2e]}}, &(0x7f00000001c0)=""/74, 0x7e, 0x4a, 0x1, 0x6}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xe, 0x5a43, 0x81, 0x102a, r2, 0x7, '\x00', 0x0, r3, 0x1, 0x5, 0x0, 0x3}, 0x50) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) (async) 724.293452ms ago: executing program 4 (id=2158): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x3}], 0x18, 0x4000800}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280100002f00010000000000fcdbdf250801f2800c00180008ac0f000010000014000100fc00000000000000000000000000000008004400", @ANYRES32=0x0, @ANYBLOB="d90062802400328008004100b20000000800ca00ac1e000108003d00fcffffff0400c58004008a800800a18004000f80c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb07a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26000000100002800c0001"], 0x128}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) 637.021489ms ago: executing program 4 (id=2159): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x80000000, 0x504, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x160b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) connect$802154_dgram(r5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'syzkaller1\x00'}]}, 0x50}}, 0x8000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendto$packet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x4000, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001640), 0x0, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 621.418776ms ago: executing program 3 (id=2160): syz_emit_ethernet(0x3e, &(0x7f0000000bc0)={@random="31e02b0eaf4e", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x6}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x30, 0x49, 0xc05, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x0, 0x0, 0x3b}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 479.919777ms ago: executing program 4 (id=2161): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000080)='GPL\x00', 0x18000, &(0x7f00000000c0)={@_ha_fsid={[0x6, 0x4]}, {0x2, 0x2, 0x5, 0xfffffffffffffff7}}, 0x76, &(0x7f0000000100), &(0x7f0000000140)=0x9}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000300)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) syz_open_procfs$namespace(r4, &(0x7f0000001780)='ns/ipc\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @loopback}}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) sendmsg$nl_netfilter(r1, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x234, 0xa, 0xa, 0x3, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0x6}, [@nested={0x12f, 0x121, 0x0, 0x1, [@typed={0x8, 0x143, 0x0, 0x0, @uid=r2}, @typed={0x14, 0x52, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0xe7}, @generic="72e34d0003f63b9c64a2e8d1f3a7e35766f2575bfa31a2e49ba408318e4710f1b7af87adc6b4a11320b2d6d96d206a646738a9c509b8f2671a0313ded6da9957711f64c71c631f49e8fe68891b358213c45dfdca0a919edf7ab70ea83aa6c449d8763d02a5a2a04ba5292b932c8dea4cfe91872a3d9f9db5ce6013dc9919be461fb5543ec628908004b0785e1f7b780a56a6dfba446e683a2bc65cd03e721afffe99f830e2ef543bff1a79e84dce22536ae0a70c27d3d78519e7f801d4ed2c56a1834c31a7d7697e3ff9ff7ca5541c2d94c614a69944ab0306fc9540b79d53733128f9", @typed={0x8, 0x29, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="f15aa725f310936f79366dce40899798b988783181efbc81c77c3aa7", @nested={0x4, 0x114}]}, @nested={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0x103, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x63, 0x0, 0x0, @pid=r4}, @typed={0xc, 0x10a, 0x0, 0x0, @u64=0x401}, @nested={0xba, 0x145, 0x0, 0x1, [@typed={0xc, 0x5d, 0x0, 0x0, @u64}, @typed={0x14, 0x12b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x1d}, @typed={0x5, 0xee, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x146}, @typed={0x14, 0x15a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="c3b35462e5a6070d50b8762335ddcb8d1a10bf8ef5347d279eac93f657c85ebcc3d4689ba786fb60224daa4b9519fed6b1d1c5b0f9f2098d4ce617fbeccd5a2d886f7240aa074bf3e27021cd12f9e6fe6d47e04851199bb82c8859ac2c5554c9d7ce6657c2d014c0e51ca487aa6a6358afac"]}]}, 0x234}, 0x1, 0x0, 0x0, 0x20000010}, 0x40044) 472.953397ms ago: executing program 3 (id=2162): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @private2}, @in6={0xa, 0x4e23, 0x0, @ipv4}], 0x38) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x70bd2d, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0xfe, 0x5}}, 0x1c}}, 0x40800) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 397.374011ms ago: executing program 4 (id=2163): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) r2 = socket(0x2b, 0x80801, 0x1) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000040)=0xc5, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f00000003c0), 0x4) recvmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r6, 0xff08, 0x0) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@var={0xf, 0x0, 0x0, 0xe, 0x4, 0x2}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x23, 0x0, 0x23}, @ptr={0x1, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x2e, 0x1e]}}, &(0x7f0000000640)=""/27, 0x48, 0x1b, 0x0, 0xfffffffc}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x1ff, 0x3104, r6, 0xf, '\x00', r4, r7, 0x5, 0x4, 0x0, 0x7}, 0x50) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) (async) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="70000908f8f84c6010499a0b19456da6b4de74294711c63f307d46c0ec14ee69870166a9ac7a363bf02b7187c4eadd0199056125d0a2d5f96280fe8d41b61d1de17b816c47711f59831ae20391172315778fe8bb619c2629d3ca3d39f7aeeec0c78cf3989068256fc391cae82202c218cda51859b6367e726c69cb9219663e19055412746c29a55207558f5797"], 0xc) (async) write$nci(r0, &(0x7f0000000e40)=ANY=[@ANYBLOB="6200816a58d552afcbdfe2035d9d2aa97bd65de121090ebf223127e94ed2c5eb9657448dc3ad81f4dc82e0af5430d1215bacccf36ee7d3ed5eab6641e9db95475020c9b71ebf7d8f0f8b64c7d272c98f377ce64a95d2c1d9fe7ee80fc9e265a4e835e5bda6f147a5158331a7d52c1963eb2dfec35264230715b4f03b6b66582a7cd1081dd5783213dd7fd393e00f83515f5964ae072cb5fdf435def67de4b78b5ea163cf08a8d834d3356bfebc2330156a8365fb4e398d73e9"], 0x157) (async) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtaction={0x598, 0x30, 0x1, 0x0, 0x0, {}, [{0x584, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x530, 0x4, 0x0, 0x0, {{0xb}, {0x480, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7, 0xb, 0x9, 0x4, 0x4, 0x3ff, 0xfffffff7, 0x4, 0x6, 0x26e, 0x7fff, 0x1, 0x1, 0xfffffffb, 0x1, 0x59c, 0x2, 0xb569, 0x7, 0x3, 0x3, 0xfffffffb, 0x0, 0xa, 0x5, 0x40000, 0x46c, 0x5, 0x5, 0x1000, 0x3, 0x1ff, 0x2, 0x8, 0x0, 0x5, 0xdf9b, 0x80000000, 0x6, 0xc, 0x8, 0x3, 0xbd, 0x6, 0x6, 0x8, 0xf, 0x6, 0x4, 0x8, 0x92000000, 0x8, 0x80000000, 0x8, 0x9, 0x3, 0x1, 0x6f4, 0x4, 0x7, 0x80, 0x7, 0x1000, 0x4, 0x0, 0x400, 0x7, 0x5, 0x6, 0x8, 0x5, 0xffffffc0, 0x200, 0x80000001, 0x4, 0x0, 0xb4a, 0x1, 0x7, 0x4, 0xea, 0x0, 0x9, 0x9e, 0x40, 0x4e70, 0x59, 0x6, 0xffffff03, 0x4, 0x400, 0xf, 0x6, 0x6, 0x4, 0x1, 0x3, 0x5, 0x9, 0xfff, 0x2000000, 0x1b, 0x400, 0x10000, 0x8, 0x5, 0x9, 0x8, 0x7, 0xb, 0x4, 0x1, 0x3, 0xaec4, 0xfffffffd, 0x5, 0x8, 0x5, 0xfffffff7, 0x3, 0x4, 0x7, 0x9, 0x4, 0x7ff, 0x4, 0x8d49, 0x2, 0x9, 0x6, 0x6, 0x3, 0x8, 0x9, 0x9, 0x2719, 0xd, 0x10000, 0x5, 0x9, 0xe, 0x4, 0x6, 0x615, 0x171, 0x2810, 0xa39, 0x100, 0x6, 0x8, 0x4, 0x1, 0x77, 0x74, 0x5, 0x5, 0x89d, 0x8, 0x1, 0x0, 0x3, 0x80000000, 0x8, 0x5, 0x2, 0x4, 0x4, 0x3c8d, 0x80000001, 0x7, 0x40, 0x80000000, 0x8, 0x3, 0x81, 0xb9, 0x6, 0x1, 0xd, 0x10, 0x4, 0xe6, 0x6, 0xaa1, 0x4, 0xe, 0x4, 0x100, 0x2, 0x0, 0x10000, 0x4, 0x5d12, 0x5, 0xffffffbf, 0x80000001, 0x401, 0x9bc, 0x3, 0x5eef, 0x7, 0x200, 0x800, 0x7, 0x2894, 0xffff, 0xffffff4a, 0x7f, 0x1, 0x5, 0x6, 0x6, 0x5, 0x646f, 0x4, 0x9f8, 0x200, 0x0, 0x9, 0x5, 0xae, 0xf000000, 0xffffffff, 0x2, 0x9, 0x8, 0x7fff0, 0x8, 0x3029, 0x5, 0x80000000, 0x101, 0x1af72208, 0x5, 0x646, 0x4d, 0x925f, 0x4, 0x81, 0x6, 0x8000, 0x80e, 0xd, 0x800, 0xf, 0x1, 0x2, 0x8, 0x200, 0xfffffff8, 0x25, 0xfffffffc, 0x8, 0x3, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x7fff, 0x1, 0x4, {0xa6, 0x0, 0x5, 0xfffe, 0x6}, {0x38, 0x2, 0x9bf7, 0x0, 0x0, 0x2}, 0xd1b, 0x6, 0x5}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x9303, 0x80000001, 0xeb58, {0x0, 0x2, 0x9, 0x7, 0x7fff, 0x3}, {0x3, 0x1, 0x9, 0x38, 0x5, 0x3}, 0x80, 0x10000, 0x317}}]]}, {0x87, 0x6, "f715eef422b14b59ccc6d21bf52e13fce51058afd4ce2885e9af843b79247d7652a6a8a1e0cd5e46505cd28a0dfeb6f71050b05e35d5eae336a36acf6b206d667dcbe11c89808c9a6539a549d139831eb063ee34853013188358a8ed1a6334ef0261bce66c9bced417b4fbe120f9c5cae32a098a8eea8937bc800204d3de7b5bfadf7f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x598}}, 0x14) (async) r10 = accept(r9, &(0x7f0000000140)=@xdp, &(0x7f0000000280)=0x80) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x2f, &(0x7f0000000000), 0x4) sendto$inet(r11, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r12, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040045}, 0x4000000) 295.895347ms ago: executing program 1 (id=2164): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x300}}]}, 0x24}}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x5e20, @multicast1}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)="26551ef7a380a256b1413a3c9bf897122cb177acd6606686e3563c55434495bdcb0df13acb1abddb9ef64c17ddf9131f9f94976ba73ad0b5c6732403dac012d5c3c7594c0d128a6c0dd5c382f524691419c89db56cb88517885e22847dac8bdbf4e5b876dbb10e61793285a71e7c1be86b923c81f2ad7bf317f033fb15a72752db3d1ba35f502df497864e29e14ae64d26f4f20c29a1c6c6d2dcb026c7450707f0b465e523afe9e4c1fb1eb91a75bb45e0c22b7ee5900a9cb32ea635cdd9c03c23ab24090acfdfec82ae1ed4f8c9ff0b334e7670e8898ee191455b32d4c0d0062e20", 0xe2}, {&(0x7f00000004c0)="a21a7626da9e0a8d758f900ffb50f54df3d65723937a38252e16c3d994d96acbf4d643943dc848ee0577efd2c23767bdfe4e790d8d55074f432d8dc0e11a8dd177bc1adc840fd252c66e347c980833ca1e33c1351227a67c62484310c900f17bab83ded8245c84e9024cf2568854532ac01acd126ed111450b5efbfb1f40fff8df696ecb0ff45531843cdb4e825e1b376932dcbbaa19a8d2dfb066a388c00035d4cef03928b171e9", 0xa8}, {&(0x7f0000000180)="443c53240d7ef33b5e42190f0e3754ae37256e0ad5d06387ac689e5469fa272226aad4f0c47c66149952da362c26044d26cb984dbf6b49a0fc9ece05a96814f53f", 0x41}, {&(0x7f00000003c0)="ecd77938fffa92b2792acd0df0c3a614865ec9e1bbf29ed3d4b6010fdc2eefa68a6153ac3a652b51fe4d5f978ba7b8530adccb528ee4f318e0a9ddeaa28fc918c3c5b09dd6cc64edf25f1fb6205b3878b9e9dcad4847c2f5b26cfa8e9312a3f08018c48463081cb89dbd50bd9e97c08eb93050b7c13c928a4f996d2e46b7c0be10d487a773d5a8700bf9a2697691edb911d9aadd09a3b726f6166b2585bfbc3364d6e91ed6fa312b4024af9fe3b0", 0xae}], 0x4, &(0x7f00000009c0)=[{0x110, 0x116, 0x9, "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"}, {0x60, 0x111, 0x0, "585efadcd158953ecbc097dff4c181149f3167f29edc812be207355696d1c7818709b98a00c46eeb230d36bcef374ea4c1a425dd57d10c274fe30f30d004317281cbf74f88b08fd440a2a9b013fd56b1"}, {0xa8, 0x119, 0x3, "a81fac63216264fd6fe2495b5101a4bcbeb439067eea3f7da108254b21c84ae884abdecbdc8f89f5d6eecadc7113a3be9642ec95d20b3a318c3c6f0ed88cd1e4d69182753c79805ad5bd2b815381f9743baec56ee0b3881f3192feeff25fa0e0033f28ed770e53762abfb5054bb523927d74d34e7276d3a820c053855680ff031a3a8748f1193fe441d07a78d474f2f612da0b"}, {0xc8, 0x117, 0x8, "a93bea9e118ccd77aa3a4fcc2bb8dde6c0939728d370f54eaaa0f1cc28228919534fa0483f53c96af12098d4d06930ca3b3dbcb2136039db342dd25b5cd3647dd88ab341efe222810e4f5580a4152306592db11a77bc186f5fddc613793bc98c754834e143250c8cf4528d9d66f6935d9a2b2e4a0901643a819016ee01e0396ad01273c163733f2c7f10846d74b548a2e07ace8976d8179366fefe160f8c4f648e79a76d862c532ac8438c0ee6f1fb1eee42b532f79ad5cc"}, {0xc8, 0x3a, 0x40, "b67ac1437afb54c78d8607c06cb0b04a969e28aa88c7202f7cfaad3c25f4fc9bdb3ae00d81ebd5df5abc3831000377441d00a0bf4701e403491d10d43cb6e2e5170a8e8c5d98076d0b4ae4196d7c5747f1dbbe3b49b4e9080c21c8d07cf6ac4b81d104005d216cc4fcfd9f9bbb9cec387ff6b44c175d0d0114d4577517a0222e3009cf1a2ef02bafe1c446baf50e37f6470c0bc45ad825d70cbe9855d3560a6d6841d95bcd83458a26b5e2369dd6a079752a355a39512869"}], 0x3a8}, 0x1000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x94, 0x0, 0x1, 0x200, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_LABELS={0x2c, 0x16, 0x1, 0x0, [0xd, 0x287, 0x6, 0x70000000, 0x7f, 0x90b, 0x4, 0xd45a, 0x7, 0x7fffffff]}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}]}, 0x94}}, 0x20000001) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r3, &(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x2}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480590001800e890b000000000000726465720000002c000280080003400000000008000140000000000800024000000000080004400000000008000540000000000900010073797a30000000000900020073797a32000000001400000011000100000000000000000000000a9e02c5817578d9df3bef1a316a64dd588696e44e4f2120ef1f007de7ebe9e6beff129b6b59398f0355ab3759ced8265d4922a17562792bbe1af69c72b6db9252cfe74ded76a3c1b58ac557bdeb50c4cc7f16ee143af2f06c6569d7716a7ec883a65e85089fdcdf718c1f4fb216dd064bd3bf138abd6fc6cb48fd82324a61d233dc68c7bed7a2e5d2d0074c36e014e004a6212c00"], 0x98}}, 0x0) 294.906863ms ago: executing program 3 (id=2165): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xe4, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x40}}}}, [@key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "db8646c0b7547170bb62537141"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "7f2fd75db30932d0c7014f64aa"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4ae0f62459"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @NL80211_ATTR_MAC={0xa, 0x6, @random="f1c4e634736f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @random="623417f3c21f"}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x6, 0xa, "0590"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "60f3dbde94"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x8091) connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x3a) socket$isdn_base(0x22, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r4, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) getpeername(r4, 0x0, 0x0) ioctl$OCFS2_IOC_REFLINK(r4, 0x40186f04, &(0x7f0000000100)={&(0x7f00000000c0)='\x00\x00k\x89(', &(0x7f0000000300)='meXPy.e~ents\x00\xbf@\xa9\x9a\'\x04\xcc\x05\xb5nH\xba\xefiz\x00\x9b\xb0\xd7\x81\x9dk\x8e\xf4\xde\xacr`\xec\xf8\xf08\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x19\xb9\x90\x90\xfdo\xe3\xae3\xbb\x9a\xe2o]|eu\x81v>\a\x93\x99W8V\xc6L9\x95_}W\xb55\b\x9f&\x835\xbf\xa9\xa9\xfdag \x00\xc0\x10\xfb\xb8\x12,\x92%\xb7\xb8\xe5\x1f\xf0k#e\x1d\x82Z=\xde\xceT\xf8\xf8\x0f\x91\xcd6B[\xf0\xb5\x84\xd5\xfa\xca\x15C\t\xf4\x8c\x01\xef\x7fH\x15\xfeQ', 0x4}) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYRES64=r1, @ANYRESHEX=r0], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x9d3d8000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc}}]}, 0x34}}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0x3) 268.173826ms ago: executing program 1 (id=2166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000009000000ffffff7f0000000000000000001c00000000000000"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000020000000000fccedf95fcb200549bcb0d2e4a9f7d29f6ad55cdf7d657c99a2d7135cc99dd7d409ac8952e27915d1910c431470aa31a81e99efd2207cb2bc887bde2bc5a2787a87be9f84f7c018714f4ca914644fe16a5230964f067ce4c2b34815f9517124bcb79a1a25614b2151dd031c9b37583fb10f1866bd902ade735c9c47e44ce65c487577cea7a11b75674dd2fa409c7ce57b9ada8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 188.414079ms ago: executing program 4 (id=2167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getuid() sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c80)={0x944, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x147}, @nested={0x92c, 0x1, 0x0, 0x1, [@nested={0x928, 0x129, 0x0, 0x1, [@nested={0x924, 0xa8, 0x0, 0x1, [@nested={0x914, 0x130, 0x0, 0x1, [@generic="76b3451b", @typed={0x8, 0xfc, 0x0, 0x0, @uid=r1}, @typed={0x8, 0x45, 0x0, 0x0, @pid}, @typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @typed={0x8e5, 0xcb, 0x0, 0x0, @binary="b2e49aa025f5c5f42501c8ec34873b91bbf82e10c11ea6597742312ec04497b998faa5bafd03288848301c6b68da168eac333e6775ddaa726b3df3ec3415ddac2299fc760bf024cf35adee60a8dc98c22751af797c39e9e34584847af681ff9e3abb188c108ecb8756ae2d0e5b3ae4104d08846d76bf50cb491916a7fc781b8309e30e8ba0aead4ed7463aedbefbec9436798a2d09760ebb47560cb2e09620d5bbcc8b5c4ac0dcfb249a6ff773c2c3b96d5625e11cd147880f65918503f329f2f8969e709797fa8c07e9523abda2fe65edba8b39032117c4932d6f05d34cca134c3263a9197df15c49767c5d9b2542bcc390c41463abdeaf47cf778990a1bbe9e5a14a49448386df4758288e4ce211ccfd21c427f1d941d9d0a66a450831fefdf1aa929e01d84883b641c92bfbecd99c166d829b4e3317baeb993318637681705c8267052c4170fff1ecb64a2afc1e2992f9a2b2873c8b548ca4a3b8afb170425c3b228479dac1f7677816dfdbb2a7645807ac285d476c081ee0538797aca2c1fdd272a814c8a407f28a5822f9da50607e427905a0dd3d03304765d675f13b6507130ac59cf0a2b9e7883a3a8a49123f24d85fdc771f5b7bb367e0df48d148bbe317a9f6a1893fce877032f7838c71dfcba3406799a8a335745791c7e6c6a967c7d8422129fe6d5ed06d7cdc38860ddadf60a917ef34ab2038d493d85256f9617cfe8a79081ac4552646d68da08936d1cc8fc673b82d8756bd99c58a23f95996e4795af97b80a5f78d5dfa645d65f54931758388f37eb439b7952004628007602ee142f1360fb488484bfbcfa351ed56dda809e59de2708e088ee2515270efd00e2c99c7a74c31b0565491d73feb422c3a8b4be3a31f34393a98a7d723736c405ffdc1a92b86d0b5393a4bbb62ad3b4ff53c3ae786bf3b0f44e5768c38d68773f97bb884f6c5ac72b11fa80eb30eb362b7b68c86fe85d3e83e6b0231bc8ae74cfa3c656f6a43a6b22ae0763c192de296c4688520b5f15488e79e172e6f9e0f7ac2da2ee01647f67a7cae4450c2d25adfe051054c9837b9b4b5dc205c73595bc9a66abdf3d7cb2fd0baa7cb069a160f66b7a2dfa74b50a3d3bbb7cbda80ca7b2f686b005d0ab2ba8f400fd4832d215e475070b25e1b92453924fd62cdb12878427b941e9c06e4dafdb034f3bc2aa53dcbf1f2f6a69c15bffb58c0d48b705f3bd3f827f14d6923c1b7e7301d2e34633decf2d2548ba1e9250257c09a99093ee834d7cd2a4dbceba3ea7a03c3a3c4fd1083ade1990fdd4341bb4e6c53af32e31d97d15c416628f6bf2cfcfb30a1895600196c9c2e40c1811a381754d758bf2450109dd93b0561c07d3a60554adee364ef4053a764c3b7d74cc5927d680de9bcefe06836119ae95af8461240c01009c0ff8ebc3cdfcfbe534b27c2e285ba41fd3862f3eb16a13c3af0a13cf017aba5859880a2054734133346e2389b8713d7e3d2f37e619880308a1e2a43eeae4f66f1a946d2a9d39906ade82ee7d2d6ba4ad789251f9392dc5d88f115a6a1da9a53bf0257a225ab0dd0b10512d1430c46122307bac97c6cffc0606ae5422f4d7414a7310862be9baa7af17a7e51adbb40278dfa22654ccbcf0b47e0b35f5124f7fefe8719a95a561dcb70255b809b082623cb5e3e64efd3cf1f92cb8a064a3bf701203afb40db42df489884c7bbde4c831278270e460563d68df332708da82b174302518b9ce9bdde2595f9b7d2072c6e5150a44e3e1551904a878c85ffde39caba250be41ca21d975924693d2c89ccf9e79133f90a75c1d5946ac5fc466af039c8f560f0197f7114260f222f0c3e21d3358dd293bc0775b277b9e571c3aed8a041ba79965b04824d72841306c85b1d1eee766b6b20018ae9e1fd2864dd2b22998da5b76a7625e02a13173ca7f2c7fd4df3af88a8c25f1883d90082bfba9c49a65c228abe5ca923b84f6334269c0d09cd3f90d69973621ca65c3481ba8d2530e96285d54b9318abe762508005b1c11fd620774003aec8f75c01a66ed68f735732cb60974f315b956fe4de8e244adbd5ac563df332233128ac030a506bf8d80c80e64f6419e09b9005bfb3f58a30284135552c362858c63779cac98074bb95aaf06c61d35230d7242ed38b43dbf1538e6caed8bcdd415e08468d185165385c2a5650e7aaa09538b58257aea3dc501ec2af5d1806feca5485d3d4a44a8284571d053724ce253a21ca2c8ac37f78ee2cbcc15c309ae2cc6d9e6ba76acb2547896c26deed0528a800d0483c2c24ea4763e66497c507aa558cc61c6404b879970a72a3d38b2f2aae0a942bb620e3ba5b41b021892e150920f42a53436e8e78144b5c70bfe8d7a94347fc22544563688d64e07ac0ebabf4de25f4086f546627a78b5b729522cfe3285ad6c70d06b940199cba6a56d21b61cb9e5a56d04fc3d0539750ea53874555f1bedba39d7d89a118b319340ee072ca66ac6a9c4c9f6655db55203f33dd46df83aee302e9ef24000fc3bccebccaa0384203a743c09f154a252d4a8f8ce8d3fdb8843e51df11e00c4385df3ccf77f6f1a5f90e4276891f31847c3506b2aea4a2e78733aa69ce5b1c8ab0c56e55dc730c3a8bb114b417487f5627f677e66715b784ea04f79011a8f7af148253b712e70f9d69d565b302286b55379cae59f7b62029c7a1ed2c8633c5b8b9dda731a51eec3123bd0be59b91a66933e1f1db03c4710da3429dd8567557d331694be72b54f8aacd30dd1f7caa4094affe6d2077552219bf4f081facfc59eea4d94f221dcb924341ddafc890c673dd6343178de091770bee56aaba047560dd5d658f7b2921b9b80d6538d81e3817c7499c7bbae32c05e31193cdeccda51817fa2c40b774e1f4a87a0ae4a958c6b47467f6872f5419d293d7738b224ec36025fbd9a0cd7f1bf62ee030415c2f7dd8e55006c68c3391d68c36fecdf56c144f59c5b18a32e8d7fc681f01fd74e94217b234a132d0292ea3e35fb985a0f7f23ad2e593a54fa34456168d319110e277e053d96ad33b62b27c4753ec2d1456de798a18e7f9c75ff58075af9a76917609b71cd5be15ccffcb590dfc5047ce64147fd325f43e2276e591deac0eea08a47cbce140584838ec53fcf87b166d0a4467f1a37a1395332721abafe0dbb30cd72593636048acda5247799dd76d93cfab4b21b48d84cd45a2eab26b"}]}, @nested={0x4, 0x2e}, @typed={0x8, 0x63, 0x0, 0x0, @fd=r0}]}]}]}]}, 0x944}, 0x1, 0x0, 0x0, 0x20004801}, 0xc000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0xaeaf9ec181b6dfc9, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x142, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r9, 0x320, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x283}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x575}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x39}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x581}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4c2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xefb}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r11, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r12, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r12, 0x0) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @u32=0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 136.724758ms ago: executing program 1 (id=2168): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYBLOB="0100000000003fc14d7a0100000004000480080002000100000008000100000000000400088008010c8054000b800800090000000000080009000000000008000a0000000000080009000000000008000a00000000000800090000000009", @ANYRESHEX=r0], 0x134}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000e0603000000000000000000f000000905000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x20c, 0x3f, 0x8, 0x70bd2a, 0x25dfdbfb, {0x2}, [@generic="2f1243643178ef0983142d9562972706428d08ffa82d09825fc9c2bb1b00f9d100562e6950854786a8acca28c80edf57c18d5a6ce392fd6c4c1ca4503ebb9d2fc9cf6736ce19fc14831d4955237fcef6aec103178f8195f14cd97ee21e62d1c59c9df71af7f8e8f22bdfed08d22c11781dca6e7f0cb3cacf5f682eef1cfd1cd46155a665bca5cbd6bf85add7bbb195b6c78241d175b5f8eedc7343deff82d9ce3e8f017bd3bfc665c6da3672dfc016e13c93563e6d2608ab9323b196067d2247a6a2bf926f9b45aaa526b3a0dfb2e108", @nested={0x18, 0xae, 0x0, 0x1, [@typed={0x8, 0xeb, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x68, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0xe3}]}, @nested={0x4, 0x29}, @generic="941faa4d000e5a9f14db00fca3830fb4e4c8f9e5fefb2d29f8337c7a7fb0cab4c198de4acc10bc30c9ceeebac885b13f51", @generic="402a5405966b7f3bbe500d5b8d987d1282e42af3f8c3a88d693310bc373c99ef524738fc14afcc430841976ddd9170b5197a9d574917ecf3f35bef43a3557a9b81474a227221b11b77b01ea8902f44080d16e579e0a26572bc57a9146dd02be25d756484b63abaa798e85a36221d8c103aa8617e1f96271091b789999ad68b74bab026773bc8eb2d54075d8716a9cb02ae1b74f85749035c56a92d5ce4bbeda0af7fb22943bab424c312531b7c6b39f4df96122191775d081ad2aa1cd93b5db05b36d1536499c6737fb5cb1f60b6c57bf2fd7dc44c8cafa3ea", @generic]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 102.695892ms ago: executing program 0 (id=2169): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r10, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)='\'', 0x1}, {&(0x7f00000001c0)="46cd05222515898389a60e11cc801e5aff300f", 0x13}], 0x2}, 0x4) 61.393549ms ago: executing program 1 (id=2170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000600)=[{0x0, 0x1b8}], 0x1, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x1}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000040)={0x2c}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x40, 0x2, 0xfd, 0xa, 0x9, 0x2768}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)={0x3c, r7, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 837.242µs ago: executing program 3 (id=2171): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x3010}, 0x48) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000200)={0xa, 0x0, @private}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@const={0x6}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000180)=""/77, 0x28, 0x4d, 0x1, 0x1e}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000040), &(0x7f00000000c0)=0x10) 0s ago: executing program 2 (id=2172): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000240"], 0x10c}}, 0x0) kernel console output (not intermixed with test programs): and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.023571][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.065384][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.150384][ T5980] xt_policy: output policy not valid in PREROUTING and INPUT [ 92.182289][ T5980] xt_policy: output policy not valid in PREROUTING and INPUT [ 92.401543][ T5989] Zero length message leads to an empty skb [ 92.519754][ T5995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16'. [ 92.535296][ T5993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 92.565529][ T5839] Bluetooth: hci0: command tx timeout [ 92.594733][ T5993] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2'. [ 92.636671][ T5998] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 92.645264][ T5839] Bluetooth: hci1: command tx timeout [ 92.724488][ T5839] Bluetooth: hci3: command tx timeout [ 92.730784][ T5839] Bluetooth: hci2: command tx timeout [ 92.789779][ T5998] team0 (unregistering): Port device team_slave_0 removed [ 92.807385][ T5839] Bluetooth: hci4: command tx timeout [ 92.816917][ T5998] team0 (unregistering): Port device team_slave_1 removed [ 92.883448][ T6008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21'. [ 93.072482][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'. [ 93.147033][ T6014] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 93.179239][ T6014] bond1: option packets_per_slave: allowed values 0 - 65535 [ 93.191746][ T6014] bond1 (unregistering): Released all slaves [ 93.241301][ T6025] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 93.259860][ T6025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.425593][ T6034] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.28'. [ 93.599058][ T6036] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 93.612324][ T6040] netlink: 'syz.0.31': attribute type 1 has an invalid length. [ 93.634787][ T6036] netlink: 224 bytes leftover after parsing attributes in process `syz.1.29'. [ 93.705225][ T6042] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.29'. [ 93.717130][ T6049] netlink: 40 bytes leftover after parsing attributes in process `syz.4.30'. [ 93.787299][ T6045] netlink: 80 bytes leftover after parsing attributes in process `syz.4.30'. [ 93.851185][ T6052] : renamed from hsr0 (while UP) [ 93.916660][ T6052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.925838][ T6052] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 93.945553][ T6052] bond0: (slave gre0): Error -95 calling set_mac_address [ 93.979776][ T6060] IPv6: sit1: Disabled Multicast RS [ 94.006665][ T6060] sit1: entered allmulticast mode [ 94.636267][ T6101] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.753515][ T6107] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 95.429804][ T6142] netlink: zone id is out of range [ 95.435243][ T6142] netlink: zone id is out of range [ 95.440456][ T6142] netlink: zone id is out of range [ 95.454869][ T6142] netlink: zone id is out of range [ 95.461408][ T6142] netlink: zone id is out of range [ 95.469486][ T6142] netlink: zone id is out of range [ 95.475025][ T6142] netlink: zone id is out of range [ 95.483300][ T6142] netlink: set zone limit has 4 unknown bytes [ 97.161012][ T6073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.400490][ T6174] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 97.429435][ T6177] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 97.626100][ T6189] xt_hashlimit: size too large, truncated to 1048576 [ 98.071684][ T6204] batman_adv: batadv0: Adding interface: dummy0 [ 98.078071][ T6204] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.144003][ T6204] batman_adv: batadv0: Interface activated: dummy0 [ 98.185012][ T6205] batadv0: mtu less than device minimum [ 98.362562][ T6220] netlink: 'syz.0.68': attribute type 7 has an invalid length. [ 98.559081][ T6226] __nla_validate_parse: 5 callbacks suppressed [ 98.559104][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'. [ 98.636388][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'. [ 98.717062][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'. [ 98.736682][ T6230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.72'. [ 98.897359][ T6243] syzkaller0: entered promiscuous mode [ 98.916321][ T6243] syzkaller0: entered allmulticast mode [ 99.003774][ T6244] netlink: 16 bytes leftover after parsing attributes in process `syz.2.74'. [ 99.038197][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'. [ 99.055016][ T6243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.74'. [ 99.066233][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 99.385845][ T6275] netlink: 14 bytes leftover after parsing attributes in process `syz.1.80'. [ 99.406873][ T6273] vlan2: entered allmulticast mode [ 99.440917][ T6273] bond0: entered allmulticast mode [ 99.454112][ T6273] bond_slave_0: entered allmulticast mode [ 99.492724][ T6273] bond_slave_1: entered allmulticast mode [ 99.631600][ T6275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.647871][ T6275] bond_slave_0: left allmulticast mode [ 99.699560][ T6275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.740956][ T6275] bond_slave_1: left allmulticast mode [ 99.741376][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 99.803416][ T6275] bond0 (unregistering): Released all slaves [ 99.883542][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.916740][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.962385][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.988247][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.194207][ T6315] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 100.347561][ T6320] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 100.427512][ T6320] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 100.457882][ T6320] gretap1: entered promiscuous mode [ 100.474445][ T6320] gretap1: entered allmulticast mode [ 100.490417][ T6328] tipc: Invalid UDP bearer configuration [ 100.490472][ T6328] tipc: Enabling of bearer rejected, failed to enable media [ 100.701179][ T6342] Bluetooth: MGMT ver 1.23 [ 101.116844][ T6361] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20004 [ 101.219298][ T6364] netlink: 'syz.0.108': attribute type 19 has an invalid length. [ 101.328353][ T6374] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 101.351398][ T6372] syzkaller0: entered promiscuous mode [ 101.357564][ T6372] syzkaller0: entered allmulticast mode [ 101.422259][ T6372] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 101.593548][ T6388] netlink: 'syz.0.116': attribute type 11 has an invalid length. [ 101.750776][ T6390] warning: `syz.3.117' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.823233][ T6390] h: entered promiscuous mode [ 101.840066][ T6392] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 101.880133][ T5833] IPVS: starting estimator thread 0... [ 101.887111][ T6399] net_ratelimit: 19 callbacks suppressed [ 101.887130][ T6399] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 101.917081][ T6398] IPVS: rr: FWM 3 0x00000003 - no destination available [ 101.984162][ T6400] IPVS: using max 27 ests per chain, 64800 per kthread [ 102.501157][ T6426] netlink: 'syz.4.129': attribute type 12 has an invalid length. [ 102.599257][ T6426] bond1: option primary_reselect: invalid value (255) [ 102.609182][ T6426] bond1 (unregistering): Released all slaves [ 102.691292][ T6429] tc_dump_action: action bad kind [ 103.199749][ T6452] syzkaller0: entered promiscuous mode [ 103.213729][ T6452] syzkaller0: entered allmulticast mode [ 103.633464][ T6483] trusted_key: syz.4.146 sent an empty control message without MSG_MORE. [ 103.667527][ T6485] __nla_validate_parse: 16 callbacks suppressed [ 103.667548][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.147'. [ 103.688194][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 104.246694][ T6514] netlink: 'syz.2.154': attribute type 8 has an invalid length. [ 104.592365][ T6532] vlan3: entered promiscuous mode [ 104.598485][ T6532] vlan3: entered allmulticast mode [ 104.603764][ T6532] hsr_slave_1: entered allmulticast mode [ 104.652621][ T6532] syzkaller0: entered promiscuous mode [ 104.671241][ T6532] syzkaller0: entered allmulticast mode [ 104.699394][ T6540] netlink: 44 bytes leftover after parsing attributes in process `syz.4.161'. [ 104.739832][ T6540] netlink: 'syz.4.161': attribute type 1 has an invalid length. [ 104.908328][ T6548] netlink: 112 bytes leftover after parsing attributes in process `syz.0.164'. [ 105.177217][ T6562] netlink: 40 bytes leftover after parsing attributes in process `syz.2.168'. [ 105.371808][ T5839] Bluetooth: hci4: command tx timeout [ 105.439524][ T6573] netlink: 'syz.1.171': attribute type 10 has an invalid length. [ 105.452699][ T6573] team0: Device vxcan1 is of different type [ 105.533143][ T6575] netlink: 'syz.3.172': attribute type 10 has an invalid length. [ 105.561740][ T6575] netlink: 40 bytes leftover after parsing attributes in process `syz.3.172'. [ 105.617948][ T6575] dummy0: entered promiscuous mode [ 105.645326][ T6575] bridge0: port 3(dummy0) entered blocking state [ 105.665685][ T6575] bridge0: port 3(dummy0) entered disabled state [ 105.682862][ T6575] dummy0: entered allmulticast mode [ 105.706588][ T6575] bridge0: port 3(dummy0) entered blocking state [ 105.713447][ T6575] bridge0: port 3(dummy0) entered forwarding state [ 105.812089][ T6588] openvswitch: netlink: Flow key attr not present in new flow. [ 105.994428][ T6601] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.179'. [ 106.059284][ T6602] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.179'. [ 106.204120][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 106.218592][ T6610] netlink: 'syz.1.183': attribute type 10 has an invalid length. [ 106.229848][ T6608] netlink: 64 bytes leftover after parsing attributes in process `syz.4.182'. [ 106.263248][ T6608] netlink: 'syz.4.182': attribute type 10 has an invalid length. [ 106.273780][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.282080][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.346824][ T6608] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 106.367666][ T6623] netlink: 'syz.2.184': attribute type 16 has an invalid length. [ 106.386736][ T6623] netlink: 'syz.2.184': attribute type 17 has an invalid length. [ 106.506147][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.556040][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.742756][ T6637] netlink: 'syz.1.187': attribute type 4 has an invalid length. [ 106.754511][ T6635] netlink: 'syz.3.190': attribute type 4 has an invalid length. [ 106.939133][ T6648] veth0: entered promiscuous mode [ 106.952745][ T6648] veth0: left promiscuous mode [ 107.612265][ T6679] netem: invalid attributes len -24 [ 107.617884][ T6679] netem: change failed [ 107.671244][ T6683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.974783][ T6689] IPv6: addrconf: prefix option has invalid lifetime [ 108.682164][ T6729] syzkaller0: entered promiscuous mode [ 108.688434][ T6729] syzkaller0: entered allmulticast mode [ 108.708175][ T6740] batman_adv: batadv0: Adding interface: netdevsim0 [ 108.716107][ T6740] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.747226][ T6740] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 109.728275][ T6751] __nla_validate_parse: 18 callbacks suppressed [ 109.728294][ T6751] netlink: 64 bytes leftover after parsing attributes in process `syz.3.227'. [ 110.165001][ T6781] GUP no longer grows the stack in syz.4.234 (6781): 200000003000-20000000a000 (200000001000) [ 110.198693][ T6781] CPU: 1 UID: 0 PID: 6781 Comm: syz.4.234 Not tainted syzkaller #0 PREEMPT(full) [ 110.198723][ T6781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 110.198745][ T6781] Call Trace: [ 110.198754][ T6781] [ 110.198764][ T6781] dump_stack_lvl+0xe8/0x150 [ 110.198807][ T6781] __get_user_pages+0x2453/0x29d0 [ 110.198841][ T6781] ? __lock_acquire+0x6b5/0x2cf0 [ 110.198889][ T6781] ? __gup_longterm_locked+0xc4e/0x1630 [ 110.198924][ T6781] ? down_read_killable+0x1bb/0x340 [ 110.198967][ T6781] __gup_longterm_locked+0xdcf/0x1630 [ 110.199027][ T6781] gup_fast_fallback+0x1d82/0x22e0 [ 110.199096][ T6781] ? __pfx_gup_fast_fallback+0x10/0x10 [ 110.199132][ T6781] ? is_valid_gup_args+0x11f/0x200 [ 110.199168][ T6781] ? get_user_pages_fast+0x4d/0xb0 [ 110.199203][ T6781] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 110.199235][ T6781] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 110.199263][ T6781] iov_iter_get_pages2+0x5e/0xa0 [ 110.199291][ T6781] __se_sys_vmsplice+0x7b3/0x1490 [ 110.199346][ T6781] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 110.199384][ T6781] ? __pfx_futex_wake+0x10/0x10 [ 110.199491][ T6781] do_syscall_64+0x14d/0xf80 [ 110.199517][ T6781] ? trace_irq_disable+0x3b/0x150 [ 110.199557][ T6781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.199580][ T6781] ? clear_bhb_loop+0x40/0x90 [ 110.199607][ T6781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.199629][ T6781] RIP: 0033:0x7fe68139c799 [ 110.199657][ T6781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.199677][ T6781] RSP: 002b:00007fe68223e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 110.199709][ T6781] RAX: ffffffffffffffda RBX: 00007fe681616090 RCX: 00007fe68139c799 [ 110.199726][ T6781] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 110.199740][ T6781] RBP: 00007fe681432c99 R08: 0000000000000000 R09: 0000000000000000 [ 110.199753][ T6781] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 110.199765][ T6781] R13: 00007fe681616128 R14: 00007fe681616090 R15: 00007ffd32b1f948 [ 110.199800][ T6781] [ 110.506157][ T6783] syzkaller0: entered promiscuous mode [ 110.512138][ T6783] syzkaller0: entered allmulticast mode [ 110.849210][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 110.911629][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 111.764856][ T6806] H: renamed from dummy0 (while UP) [ 111.991577][ T6820] validate_nla: 1 callbacks suppressed [ 111.991597][ T6820] netlink: 'syz.4.244': attribute type 1 has an invalid length. [ 112.017976][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 112.050821][ T6825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.243'. [ 112.485933][ T6847] IPv6: sit1: Disabled Multicast RS [ 112.731158][ T6865] netlink: 'syz.2.249': attribute type 3 has an invalid length. [ 113.159997][ T6884] netlink: 92 bytes leftover after parsing attributes in process `syz.3.257'. [ 113.266391][ T6886] netlink: 44 bytes leftover after parsing attributes in process `syz.2.258'. [ 113.288932][ T5893] IPVS: starting estimator thread 0... [ 113.397241][ T6891] IPVS: using max 28 ests per chain, 67200 per kthread [ 113.470403][ T6901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.500196][ T6901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.510702][ T6901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.526818][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.560927][ T6901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.582149][ T6901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.654988][ T6901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.663267][ T6909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.708288][ T6909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.016807][ T6926] xt_nat: multiple ranges no longer supported [ 114.048540][ T6924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.067935][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 114.153762][ T6936] netlink: 'syz.0.274': attribute type 21 has an invalid length. [ 114.198361][ T6936] IPv6: NLM_F_CREATE should be specified when creating new route [ 114.206759][ T6936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.214298][ T6936] IPv6: NLM_F_CREATE should be set when creating new route [ 114.221794][ T6936] IPv6: NLM_F_CREATE should be set when creating new route [ 114.229117][ T6936] IPv6: NLM_F_CREATE should be set when creating new route [ 114.305656][ T6936] syzkaller1: entered promiscuous mode [ 114.311192][ T6936] syzkaller1: entered allmulticast mode [ 114.466139][ T6945] netlink: 52 bytes leftover after parsing attributes in process `syz.3.276'. [ 115.077150][ T6971] xt_hashlimit: size too large, truncated to 1048576 [ 115.104290][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 117.097382][ T7050] netlink: 60 bytes leftover after parsing attributes in process `syz.4.307'. [ 117.121238][ T7053] netlink: 'syz.1.308': attribute type 12 has an invalid length. [ 117.135651][ T7056] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 117.169932][ T7054] netlink: 'syz.2.309': attribute type 4 has an invalid length. [ 117.636496][ T7072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.315'. [ 117.692437][ T7070] block nbd0: not configured, cannot reconfigure [ 117.972360][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 118.045149][ T7088] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.319'. [ 118.054557][ T7095] netlink: 56 bytes leftover after parsing attributes in process `syz.4.320'. [ 118.076429][ T7097] syzkaller0: entered promiscuous mode [ 118.082187][ T7097] syzkaller0: entered allmulticast mode [ 118.310266][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 118.350206][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 118.627610][ T7113] syzkaller0: entered promiscuous mode [ 118.633181][ T7113] syzkaller0: entered allmulticast mode [ 118.654972][ T7113] tc action pedit offset must be on 32 bit boundaries [ 118.687742][ T7118] netlink: 'syz.3.328': attribute type 1 has an invalid length. [ 118.724286][ T29] net_ratelimit: 12 callbacks suppressed [ 118.724304][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.739400][ T7118] netlink: 'syz.3.328': attribute type 3 has an invalid length. [ 118.768062][ T7123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.774416][ T7118] netlink: 172 bytes leftover after parsing attributes in process `syz.3.328'. [ 118.777646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.794047][ T7118] NCSI netlink: No device for ifindex 813332851 [ 118.836087][ T7123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.850284][ T309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.974139][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.095391][ T7122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.104027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.168882][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 119.290932][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.445191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.744663][ T7155] syzkaller0: entered promiscuous mode [ 119.764050][ T7155] syzkaller0: entered allmulticast mode [ 119.949886][ T7166] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.133663][ T7173] ipt_REJECT: TCP_RESET invalid for non-tcp [ 120.635511][ T7182] __nla_validate_parse: 2 callbacks suppressed [ 120.635532][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.348'. [ 120.652450][ T7184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.349'. [ 120.753462][ T7188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.350'. [ 120.777304][ T7188] nbd: illegal input index 65528 [ 120.848282][ T7188] block nbd0: not configured, cannot reconfigure [ 121.010817][ T7195] xt_nfacct: accounting object `syz1' does not exist [ 121.258795][ T7204] netlink: 96 bytes leftover after parsing attributes in process `syz.0.351'. [ 121.381114][ T7207] netlink: 'syz.2.356': attribute type 1 has an invalid length. [ 121.431877][ T7207] netlink: 224 bytes leftover after parsing attributes in process `syz.2.356'. [ 122.243474][ T7234] veth3: entered promiscuous mode [ 122.260469][ T7234] veth3: entered allmulticast mode [ 122.280292][ T7236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.381644][ T7246] netlink: 348 bytes leftover after parsing attributes in process `syz.4.369'. [ 122.445104][ T7246] netlink: 'syz.4.369': attribute type 4 has an invalid length. [ 122.774318][ T7260] tipc: Started in network mode [ 122.783853][ T7260] tipc: Node identity e697ea2cf9f8, cluster identity 4711 [ 122.792347][ T7260] tipc: Enabled bearer , priority 0 [ 122.935640][ T7267] +: renamed from syzkaller0 [ 122.946833][ T7267] tipc: Disabling bearer [ 123.927476][ T24] net_ratelimit: 14 callbacks suppressed [ 123.927496][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.038684][ T7292] syzkaller0: entered promiscuous mode [ 124.054746][ T7292] syzkaller0: entered allmulticast mode [ 124.276706][ T7341] netlink: 10 bytes leftover after parsing attributes in process `syz.2.389'. [ 124.310183][ T7341] netlink: 'syz.2.389': attribute type 21 has an invalid length. [ 124.376893][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 124.575151][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.967785][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.289674][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 125.366058][ T7341] netlink: 132 bytes leftover after parsing attributes in process `syz.2.389'. [ 125.688524][ T7371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.398'. [ 125.797756][ T7365] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.841243][ T7365] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.933867][ T7382] netlink: 44 bytes leftover after parsing attributes in process `syz.4.401'. [ 125.946246][ T7384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.403'. [ 125.956341][ T7382] netlink: 35 bytes leftover after parsing attributes in process `syz.4.401'. [ 125.984288][ T7382] netlink: 'syz.4.401': attribute type 5 has an invalid length. [ 125.992181][ T7382] netlink: 'syz.4.401': attribute type 6 has an invalid length. [ 125.999932][ T7387] netlink: 'syz.1.402': attribute type 17 has an invalid length. [ 125.999954][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'. [ 125.999982][ T7387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.402'. [ 126.017409][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.064020][ T7382] netlink: 35 bytes leftover after parsing attributes in process `syz.4.401'. [ 126.106037][ T7386] netlink: 128 bytes leftover after parsing attributes in process `syz.1.402'. [ 126.125567][ T7386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.402'. [ 126.149904][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 126.169201][ T7365] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.204407][ T7365] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.333789][ T7365] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.346769][ T7365] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.472538][ T7406] netlink: 'syz.4.411': attribute type 3 has an invalid length. [ 126.502326][ T7406] netlink: 'syz.4.411': attribute type 3 has an invalid length. [ 126.533767][ T7365] batman_adv: batadv0: Removing interface: netdevsim0 [ 126.567921][ T7365] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.594517][ T7365] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.704745][ T7418] netlink: 'syz.2.413': attribute type 16 has an invalid length. [ 126.724245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.941434][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.974137][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.985723][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.014853][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.046843][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.074816][ T309] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.104586][ T309] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.150404][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.197434][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.613598][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.638615][ T7469] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 127.658158][ T7467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.719869][ T7474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.728210][ T7474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.737793][ T7474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.746191][ T7474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.085479][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.368618][ T7503] netlink: 'syz.0.433': attribute type 1 has an invalid length. [ 128.388811][ T7503] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 129.136693][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.013956][ T7437] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.173796][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.388034][ T7536] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.417827][ T7527] vcan0: entered allmulticast mode [ 130.440771][ T7534] syzkaller0: entered promiscuous mode [ 130.461685][ T7534] syzkaller0: entered allmulticast mode [ 130.650538][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.709866][ T7548] __nla_validate_parse: 11 callbacks suppressed [ 130.709887][ T7548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.441'. [ 130.740481][ T7550] netlink: 'syz.2.440': attribute type 7 has an invalid length. [ 130.786406][ T7550] netlink: 140 bytes leftover after parsing attributes in process `syz.2.440'. [ 130.845326][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'. [ 130.909922][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.920554][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.934312][ T5944] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.115948][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 131.150330][ T7570] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.184921][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.214798][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.382012][ T7577] xt_hashlimit: overflow, rate too high: 0 [ 131.500213][ T7585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.638644][ T7596] openvswitch: netlink: IP tunnel dst address not specified [ 131.640564][ T7585] netlink: 'syz.1.452': attribute type 4 has an invalid length. [ 132.007363][ T5944] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.223702][ T7615] netlink: 'syz.0.458': attribute type 3 has an invalid length. [ 132.232648][ T7615] netlink: 'syz.0.458': attribute type 3 has an invalid length. [ 132.245913][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.429888][ T7626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.439242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.482155][ T7630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.459'. [ 132.894610][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.911364][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.940169][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.299069][ T7653] syzkaller0: entered promiscuous mode [ 133.314515][ T7653] syzkaller0: entered allmulticast mode [ 133.346429][ T7658] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.375135][ T7658] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.407976][ T7666] xt_l2tp: v2 tid > 0xffff: 1114244 [ 133.571146][ T7662] "syz.2.467" (7662) uses obsolete ecb(arc4) skcipher [ 134.151732][ T7689] netlink: 'syz.1.472': attribute type 1 has an invalid length. [ 134.177205][ T7690] netlink: 'syz.1.472': attribute type 1 has an invalid length. [ 134.328214][ T5833] net_ratelimit: 5 callbacks suppressed [ 134.328235][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.806344][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.044210][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.213713][ T7658] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.229905][ T7658] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.296192][ T7689] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 135.303091][ T7690] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 135.357373][ T7658] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.376096][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.382025][ T7658] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.463496][ T7704] netlink: 40 bytes leftover after parsing attributes in process `syz.0.476'. [ 135.583222][ T7658] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.625234][ T7658] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.719148][ T7722] netlink: 'syz.4.480': attribute type 10 has an invalid length. [ 135.767909][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 135.848781][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.856639][ T7722] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.881181][ T7732] netlink: 76 bytes leftover after parsing attributes in process `syz.0.482'. [ 135.906139][ T7732] nbd: illegal input index -8454144 [ 135.916897][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.924460][ T7722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.932236][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.939580][ T7722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.973530][ T7722] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 136.017863][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.033214][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.112141][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.144186][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.192999][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.224376][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.303822][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.312606][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.408874][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.649624][ T7761] syzkaller1: entered promiscuous mode [ 136.684911][ T7761] syzkaller1: entered allmulticast mode [ 136.717455][ T7764] vlan1: entered allmulticast mode [ 136.722658][ T7764] veth0_vlan: entered allmulticast mode [ 136.761360][ T7764] netlink: 'syz.2.493': attribute type 3 has an invalid length. [ 136.784727][ T7764] netlink: 32 bytes leftover after parsing attributes in process `syz.2.493'. [ 136.887228][ T7766] syzkaller0: entered promiscuous mode [ 136.892773][ T7766] syzkaller0: entered allmulticast mode [ 136.985026][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'. [ 137.454804][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.815807][ T7799] netlink: 40 bytes leftover after parsing attributes in process `syz.4.503'. [ 137.844394][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.243006][ T7774] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 138.253134][ T7774] netlink: 184 bytes leftover after parsing attributes in process `syz.0.497'. [ 138.264035][ T7781] tunl0: entered promiscuous mode [ 138.272173][ T7781] netlink: 'syz.2.498': attribute type 3 has an invalid length. [ 138.284704][ T7781] netlink: 9 bytes leftover after parsing attributes in process `syz.2.498'. [ 138.419571][ T7807] netlink: 44 bytes leftover after parsing attributes in process `syz.2.507'. [ 138.482773][ T7810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.492255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.501838][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.532684][ T7812] netlink: 'syz.4.508': attribute type 1 has an invalid length. [ 138.543406][ T7810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.552762][ T7812] netlink: 96 bytes leftover after parsing attributes in process `syz.4.508'. [ 138.565630][ T7812] netlink: 'syz.4.508': attribute type 1 has an invalid length. [ 138.573630][ T7812] netlink: 'syz.4.508': attribute type 8 has an invalid length. [ 138.582719][ T7812] netlink: 606 bytes leftover after parsing attributes in process `syz.4.508'. [ 138.696531][ T7823] tipc: Enabling of bearer rejected, failed to enable media [ 138.802420][ T7827] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 138.859942][ T7830] netlink: 'syz.1.511': attribute type 1 has an invalid length. [ 139.014943][ T7841] netlink: 'syz.2.517': attribute type 1 has an invalid length. [ 139.196933][ T7848] veth3: entered promiscuous mode [ 139.355197][ T7858] syzkaller1: entered promiscuous mode [ 139.376521][ T7858] syzkaller1: entered allmulticast mode [ 139.442071][ T7866] validate_nla: 1 callbacks suppressed [ 139.442092][ T7866] netlink: 'syz.0.525': attribute type 1 has an invalid length. [ 139.527528][ T5833] net_ratelimit: 5 callbacks suppressed [ 139.527546][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.555077][ T7866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.579647][ T7868] netlink: 'syz.2.524': attribute type 1 has an invalid length. [ 139.600298][ T7870] bond1: (slave veth0_to_bond): making interface the new active one [ 139.678074][ T7870] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 139.728063][ T7874] bond1: entered promiscuous mode [ 139.733192][ T7874] veth0_to_bond: entered promiscuous mode [ 139.765756][ T7874] bond1: entered allmulticast mode [ 139.770985][ T7874] veth0_to_bond: entered allmulticast mode [ 140.229850][ T7906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.248048][ T7906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.268658][ T7906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.281873][ T7906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.315364][ T7906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.363386][ T7906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.438924][ T7903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.569335][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.884413][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.971559][ T7940] __nla_validate_parse: 12 callbacks suppressed [ 140.971580][ T7940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.547'. [ 141.009545][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 141.056849][ T7938] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 141.112414][ T7938] bond2 (unregistering): Released all slaves [ 141.209208][ T7945] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 141.353395][ T7960] netlink: 'syz.3.551': attribute type 11 has an invalid length. [ 141.375783][ T7960] netlink: 171756 bytes leftover after parsing attributes in process `syz.3.551'. [ 141.507437][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 141.544043][ T7964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.552'. [ 141.551585][ T7966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.553'. [ 141.593513][ T7964] geneve2: entered promiscuous mode [ 141.599727][ T7964] geneve2: entered allmulticast mode [ 141.655639][ T7966] netlink: 32 bytes leftover after parsing attributes in process `syz.2.553'. [ 141.905414][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'. [ 141.935015][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'. [ 142.008257][ T7984] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 142.018272][ T7986] vcan0: tx address claim with dlc 0 [ 142.106306][ T7989] netlink: 'syz.2.561': attribute type 21 has an invalid length. [ 142.159676][ T7989] netlink: 132 bytes leftover after parsing attributes in process `syz.2.561'. [ 142.806335][ T8025] netlink: 'syz.0.572': attribute type 2 has an invalid length. [ 142.861370][ T8030] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 143.124096][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.188459][ T8047] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 144.391050][ T8099] netlink: 'syz.4.597': attribute type 4 has an invalid length. [ 144.448116][ T8103] syzkaller1: entered promiscuous mode [ 144.460444][ T8103] syzkaller1: entered allmulticast mode [ 144.720433][ T8112] netlink: 'syz.0.602': attribute type 1 has an invalid length. [ 144.969558][ T8120] syzkaller0: entered promiscuous mode [ 144.975899][ T8120] syzkaller0: entered allmulticast mode [ 145.114266][ T5944] IPVS: starting estimator thread 0... [ 145.224959][ T8134] IPVS: using max 31 ests per chain, 74400 per kthread [ 145.376558][ T8143] veth0: entered promiscuous mode [ 145.592220][ T8136] veth0: left promiscuous mode [ 145.640220][ T8154] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 145.710025][ T8163] erspan0: entered promiscuous mode [ 145.724629][ T8163] erspan0: entered allmulticast mode [ 146.023216][ T8183] __nla_validate_parse: 8 callbacks suppressed [ 146.023236][ T8183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.621'. [ 146.277352][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 146.302974][ T8195] team_slave_0: entered allmulticast mode [ 146.425093][ T8200] netlink: 'syz.2.625': attribute type 2 has an invalid length. [ 146.443264][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 146.790714][ T8224] net_ratelimit: 1 callbacks suppressed [ 146.790732][ T8224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.935948][ T8231] netlink: 'syz.2.631': attribute type 4 has an invalid length. [ 147.170726][ T8241] netlink: 'syz.3.633': attribute type 1 has an invalid length. [ 147.199833][ T8241] netlink: 228 bytes leftover after parsing attributes in process `syz.3.633'. [ 147.460794][ T8255] ipvlan2: entered allmulticast mode [ 147.472316][ T8255] batadv_slave_1: entered allmulticast mode [ 147.507409][ T8255] batman_adv: batadv0: Adding interface: ipvlan2 [ 147.525083][ T8255] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.554723][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.567069][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.579716][ T8255] batman_adv: batadv0: Interface activated: ipvlan2 [ 147.853109][ T8283] netlink: 'syz.4.645': attribute type 1 has an invalid length. [ 147.885947][ T8283] netlink: 'syz.4.645': attribute type 2 has an invalid length. [ 147.925132][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.996364][ T8287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.647'. [ 148.248972][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.368405][ T8312] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.653'. [ 148.395381][ T8300] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.611227][ T8317] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.642540][ T8317] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 148.706955][ T8323] netlink: 48 bytes leftover after parsing attributes in process `syz.1.655'. [ 148.748082][ T8323] netlink: 48 bytes leftover after parsing attributes in process `syz.1.655'. [ 148.984797][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.363492][ T8346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.665'. [ 149.566647][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 149.737173][ T8362] netlink: 'syz.0.669': attribute type 12 has an invalid length. [ 149.773623][ T8362] netlink: 'syz.0.669': attribute type 29 has an invalid length. [ 149.809662][ T8362] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 150.005620][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.497236][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.722231][ T8406] netlink: 'syz.4.682': attribute type 7 has an invalid length. [ 150.754731][ T8406] netlink: 'syz.4.682': attribute type 8 has an invalid length. [ 150.776538][ T8411] netlink: 'syz.4.682': attribute type 1 has an invalid length. [ 151.044931][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.138800][ T8426] __nla_validate_parse: 9 callbacks suppressed [ 151.138820][ T8426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'. [ 151.167517][ T8425] netlink: 40 bytes leftover after parsing attributes in process `syz.1.686'. [ 151.289138][ T8429] netlink: 64 bytes leftover after parsing attributes in process `syz.4.688'. [ 151.307688][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'. [ 151.320840][ T8429] netlink: 68 bytes leftover after parsing attributes in process `syz.4.688'. [ 151.428525][ T8433] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 151.463472][ T8433] team0: Port device batadv1 added [ 151.681398][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 151.773803][ T8449] netlink: 184 bytes leftover after parsing attributes in process `syz.3.695'. [ 152.089624][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.283873][ T8477] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.702'. [ 152.382450][ T8486] netlink: zone id is out of range [ 152.415770][ T8486] netlink: zone id is out of range [ 152.420961][ T8486] netlink: zone id is out of range [ 152.505492][ T8486] netlink: zone id is out of range [ 152.531102][ T8486] netlink: zone id is out of range [ 152.538855][ T8492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.706'. [ 152.551500][ T8486] netlink: zone id is out of range [ 152.557426][ T8492] netlink: 120 bytes leftover after parsing attributes in process `syz.1.706'. [ 152.591702][ T8486] netlink: zone id is out of range [ 152.598976][ T8486] netlink: zone id is out of range [ 152.604940][ T8486] netlink: zone id is out of range [ 153.177285][ T8535] netlink: 'syz.2.716': attribute type 1 has an invalid length. [ 153.384037][ T8535] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.796439][ T8573] netlink: 'syz.2.728': attribute type 1 has an invalid length. [ 153.881388][ T8581] netlink: 'syz.1.730': attribute type 2 has an invalid length. [ 153.923143][ T8573] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.169471][ T8590] : entered promiscuous mode [ 154.531727][ T8614] Driver unsupported XDP return value 0 on prog (id 104) dev N/A, expect packet loss! [ 154.829512][ T8629] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 154.982115][ T8634] syzkaller0: entered promiscuous mode [ 154.994509][ T8634] syzkaller0: entered allmulticast mode [ 155.298664][ T8650] netlink: 'syz.2.752': attribute type 1 has an invalid length. [ 155.343485][ T8650] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.487770][ T8650] bond4: (slave geneve2): making interface the new active one [ 155.525820][ T8650] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 155.577509][ T8664] netlink: 'syz.0.754': attribute type 3 has an invalid length. [ 155.698111][ T8667] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.737899][ T8673] vlan2: entered allmulticast mode [ 155.743112][ T8673] gretap0: entered allmulticast mode [ 155.906533][ T8683] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 155.918856][ T8683] Cannot find add_set index 0 as target [ 155.988897][ T8684] syzkaller0: entered promiscuous mode [ 156.015129][ T8684] syzkaller0: entered allmulticast mode [ 156.242217][ T8700] __nla_validate_parse: 17 callbacks suppressed [ 156.242237][ T8700] netlink: 32 bytes leftover after parsing attributes in process `syz.1.765'. [ 156.687400][ T8722] bond1: option lp_interval: invalid value (0) [ 156.699735][ T8722] bond1: option lp_interval: allowed values 1 - 2147483647 [ 156.711681][ T8722] bond1 (unregistering): Released all slaves [ 156.807724][ T8730] netlink: 'syz.2.773': attribute type 12 has an invalid length. [ 156.818646][ T8732] netlink: 11 bytes leftover after parsing attributes in process `syz.1.775'. [ 157.047810][ T8745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.778'. [ 157.143224][ T8754] syzkaller0: entered promiscuous mode [ 157.149456][ T8754] syzkaller0: entered allmulticast mode [ 157.181814][ T8745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.778'. [ 157.290926][ T5893] net_ratelimit: 198 callbacks suppressed [ 157.290945][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.445326][ T8771] netlink: 44 bytes leftover after parsing attributes in process `syz.3.786'. [ 157.497167][ T8771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.786'. [ 157.578519][ T8777] tipc: Enabled bearer , priority 0 [ 157.624234][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 157.641321][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 157.783728][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.792'. [ 157.909369][ T8795] netlink: zone id is out of range [ 157.916528][ T8795] netlink: del zone limit has 4 unknown bytes [ 158.078529][ T8803] netlink: 'syz.2.797': attribute type 28 has an invalid length. [ 158.089608][ T8803] netlink: 'syz.2.797': attribute type 3 has an invalid length. [ 158.133394][ T8803] netlink: 132 bytes leftover after parsing attributes in process `syz.2.797'. [ 158.324302][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.332493][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.696925][ T5893] tipc: Node number set to 527428140 [ 158.971135][ T8851] tc_dump_action: action bad kind [ 159.086307][ T8861] netlink: 'syz.0.820': attribute type 1 has an invalid length. [ 159.145357][ T8864] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 159.161482][ T8864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.277996][ T8861] syzkaller0: entered promiscuous mode [ 159.283554][ T8861] syzkaller0: entered allmulticast mode [ 159.365247][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.764485][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 159.786047][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.409047][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.576906][ T8900] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 160.614704][ T8900] bond1: entered promiscuous mode [ 160.620335][ T8900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.638791][ T8900] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 160.647691][ T8900] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 160.749600][ T8900] bond1: (slave bridge4): making interface the new active one [ 160.774689][ T8900] bridge4: entered promiscuous mode [ 160.787348][ T8900] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 160.798697][ T8911] netlink: 'syz.2.832': attribute type 1 has an invalid length. [ 160.939359][ T8911] bond5: entered promiscuous mode [ 160.946777][ T8911] 8021q: adding VLAN 0 to HW filter on device bond5 [ 161.044438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.095273][ T8928] xt_bpf: check failed: parse error [ 161.246555][ T8941] __nla_validate_parse: 3 callbacks suppressed [ 161.246575][ T8941] netlink: 64 bytes leftover after parsing attributes in process `syz.4.841'. [ 161.449690][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.846'. [ 161.469373][ T8953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.846'. [ 161.957743][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.855'. [ 162.421248][ T8994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.858'. [ 162.486054][ T29] net_ratelimit: 5 callbacks suppressed [ 162.486076][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.524567][ T8999] netlink: 32 bytes leftover after parsing attributes in process `syz.4.860'. [ 162.727653][ T9009] netlink: 'syz.4.863': attribute type 8 has an invalid length. [ 162.751273][ T9006] netlink: 'syz.2.862': attribute type 1 has an invalid length. [ 162.767441][ T9006] netlink: 228 bytes leftover after parsing attributes in process `syz.2.862'. [ 162.788729][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.863'. [ 163.001210][ T9021] syzkaller0: entered promiscuous mode [ 163.019930][ T9023] netlink: 'syz.0.865': attribute type 9 has an invalid length. [ 163.030585][ T9021] syzkaller0: entered allmulticast mode [ 163.529980][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.784895][ T9066] netlink: 312 bytes leftover after parsing attributes in process `syz.3.874'. [ 163.999441][ T9065] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.063156][ T9065] bond0: (slave bridge0): Releasing backup interface [ 164.123012][ T9085] x_tables: duplicate underflow at hook 2 [ 164.146604][ T9065] batman_adv: batadv0: Interface deactivated: H [ 164.159803][ T9065] batman_adv: batadv0: Removing interface: H [ 164.191365][ T9088] netlink: 'syz.1.880': attribute type 3 has an invalid length. [ 164.269606][ T9065] bridge_slave_0: left allmulticast mode [ 164.294703][ T9065] bridge_slave_0: left promiscuous mode [ 164.304929][ T9065] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.366511][ T9065] bridge_slave_1: left allmulticast mode [ 164.372227][ T9065] bridge_slave_1: left promiscuous mode [ 164.404817][ T9065] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.426696][ T9065] bond0: (slave bond_slave_0): Releasing backup interface [ 164.451336][ T9065] bond0: (slave bond_slave_1): Releasing backup interface [ 164.466563][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.528720][ T9065] team0: Port device team_slave_0 removed [ 164.576819][ T9065] team0: Port device team_slave_1 removed [ 164.600026][ T9065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.619452][ T9065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.636004][ T9065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.658322][ T9065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.688281][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.726886][ T9065] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 165.043552][ T9135] pimreg: entered allmulticast mode [ 165.064829][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'. [ 165.085270][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.130100][ T9136] hsr_slave_0: left promiscuous mode [ 165.524956][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.533350][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.777701][ T9095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.256576][ T9150] syz.2.891 (9150) used greatest stack depth: 17472 bytes left [ 166.806512][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.981438][ T9218] netlink: 'syz.3.910': attribute type 1 has an invalid length. [ 167.020451][ T9218] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.129002][ T9226] netlink: 'syz.0.911': attribute type 4 has an invalid length. [ 167.155940][ T9226] netlink: 'syz.0.911': attribute type 4 has an invalid length. [ 167.278964][ T9230] netlink: 'syz.3.913': attribute type 29 has an invalid length. [ 167.290894][ T9230] netlink: 'syz.3.913': attribute type 29 has an invalid length. [ 167.352389][ T9231] netlink: 'syz.3.913': attribute type 32 has an invalid length. [ 167.360402][ T9231] __nla_validate_parse: 5 callbacks suppressed [ 167.360415][ T9231] netlink: 500 bytes leftover after parsing attributes in process `syz.3.913'. [ 167.855309][ T9098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.564507][ T9116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.886011][ T9095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.311024][ T9200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.321646][ T9208] netlink: 'syz.2.907': attribute type 4 has an invalid length. [ 169.579095][ T9244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.914'. [ 169.635842][ T9245] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 169.675888][ T9248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.685318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.872337][ T9263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.925'. [ 169.882955][ T9263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.925'. [ 169.899382][ T9263] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20003 [ 169.925760][ T9095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.059470][ T9271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.929'. [ 170.069602][ T9271] netlink: 'syz.2.929': attribute type 7 has an invalid length. [ 170.077820][ T9271] netlink: 'syz.2.929': attribute type 8 has an invalid length. [ 170.086337][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 170.259246][ T9282] syzkaller1: entered promiscuous mode [ 170.266030][ T9282] syzkaller1: entered allmulticast mode [ 170.503820][ T9290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.935'. [ 170.534631][ T9290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.935'. [ 170.654350][ T9294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.788588][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'. [ 170.836166][ T9307] bond2: option xmit_hash_policy: invalid value (64) [ 170.856888][ T9307] bond2 (unregistering): Released all slaves [ 170.985835][ T9098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.065663][ T9315] ieee802154 phy0 wpan0: encryption failed: -90 [ 171.167663][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'. [ 171.289770][ T9309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.302141][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.604471][ T9116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.731441][ T9334] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 171.737763][ T9334] syzkaller1: Refused to change device type [ 172.005653][ T9095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.021114][ T9355] netlink: 'syz.2.955': attribute type 1 has an invalid length. [ 172.048628][ T9356] x_tables: duplicate underflow at hook 1 [ 172.075415][ T9355] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 172.368388][ T9379] __nla_validate_parse: 2 callbacks suppressed [ 172.368423][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 172.396077][ T9371] netlink: 'syz.2.960': attribute type 11 has an invalid length. [ 172.403855][ T9371] netlink: 224 bytes leftover after parsing attributes in process `syz.2.960'. [ 172.861356][ T9410] netlink: 'syz.4.967': attribute type 1 has an invalid length. [ 172.910627][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.967'. [ 173.051569][ T9095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.379084][ T9433] netlink: 'syz.4.972': attribute type 1 has an invalid length. [ 173.562980][ T9433] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.633680][ T9449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.975'. [ 173.692829][ T9438] bond3: (slave veth3): Enslaving as an active interface with a down link [ 173.726033][ T9440] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 173.890825][ T9445] bond3: (slave veth5): Enslaving as an active interface with a down link [ 173.920060][ T9445] netlink: 'syz.4.972': attribute type 1 has an invalid length. [ 173.959902][ T9445] netlink: 'syz.4.972': attribute type 2 has an invalid length. [ 174.085466][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.373269][ T9484] netlink: 'syz.0.984': attribute type 10 has an invalid length. [ 174.391919][ T9484] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 174.487675][ T9488] netlink: 44 bytes leftover after parsing attributes in process `syz.0.984'. [ 174.496865][ T9488] netlink: 43 bytes leftover after parsing attributes in process `syz.0.984'. [ 174.508608][ T9488] netlink: 'syz.0.984': attribute type 6 has an invalid length. [ 174.525299][ T9488] netlink: 'syz.0.984': attribute type 5 has an invalid length. [ 174.544042][ T9488] netlink: 43 bytes leftover after parsing attributes in process `syz.0.984'. [ 174.569897][ T9490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'. [ 174.645353][ T9116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.662801][ T9500] sch_tbf: burst 0 is lower than device bridge5 mtu (1514) ! [ 174.833598][ T9507] netlink: 'syz.4.991': attribute type 3 has an invalid length. [ 174.842121][ T9507] netlink: 'syz.4.991': attribute type 1 has an invalid length. [ 174.850945][ T9507] netlink: 224 bytes leftover after parsing attributes in process `syz.4.991'. [ 175.121422][ T30] audit: type=1800 audit(1774574797.450:2): pid=9505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.990" name="memory.events" dev="tmpfs" ino=1071 res=0 errno=0 [ 175.149919][ T9095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.934447][ T9559] syzkaller0: entered allmulticast mode [ 176.041060][ T9559] syzkaller0 (unregistering): left allmulticast mode [ 176.444193][ T9095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.618991][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.637468][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.695634][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.736392][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.812381][ T9598] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 176.865192][ T9602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.056955][ T9521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.156852][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'. [ 177.470811][ T9630] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 177.488344][ T9641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1020'. [ 177.521242][ T9630] bond2 (unregistering): Released all slaves [ 177.534928][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.684625][ T9117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.766306][ T9653] C: renamed from lo (while UP) [ 177.776824][ T9653] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 177.849658][ T9655] netlink: 'syz.3.1027': attribute type 1 has an invalid length. [ 177.865933][ T9655] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1027'. [ 177.943644][ T9661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1030'. [ 178.062322][ T9663] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1031'. [ 178.102957][ T9663] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1031'. [ 178.565330][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.764629][ T9689] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1039'. [ 179.083380][ T9700] tipc: Failed to obtain node identity [ 179.096022][ T9700] tipc: Enabling of bearer rejected, failed to enable media [ 179.135631][ T9703] bond6: ARP target 1.0.0.0 is already present [ 179.141941][ T9703] bond6: option arp_ip_target: invalid value (1) [ 179.151229][ T9700] raw_sendmsg: syz.0.1044 forgot to set AF_INET. Fix it! [ 179.176937][ T9703] bond6 (unregistering): Released all slaves [ 179.353812][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1050'. [ 179.367315][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1050'. [ 179.550724][ T9733] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 179.592407][ T9736] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1055'. [ 179.608937][ T9095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.835638][ T9750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1060'. [ 180.109490][ T9771] bond2: option lp_interval: invalid value (0) [ 180.116314][ T9771] bond2: option lp_interval: allowed values 1 - 2147483647 [ 180.135735][ T9771] bond2 (unregistering): Released all slaves [ 180.459993][ T9792] netlink: 'syz.0.1071': attribute type 1 has an invalid length. [ 180.607811][ T9798] batadv_slave_0: entered promiscuous mode [ 180.645093][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.708227][ T9801] syzkaller1: entered promiscuous mode [ 180.713861][ T9801] syzkaller1: entered allmulticast mode [ 180.726820][ T9117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.874281][ T9797] batadv_slave_0: left promiscuous mode [ 181.002554][ T9816] syzkaller0: entered promiscuous mode [ 181.029755][ T9824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.041072][ T9816] syzkaller0: entered allmulticast mode [ 181.579049][ T9842] batadv_slave_0: entered promiscuous mode [ 181.602192][ T9841] batadv_slave_0: left promiscuous mode [ 181.685876][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.046765][ T9854] syzkaller0: entered promiscuous mode [ 182.172156][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.248224][ T9874] xt_ecn: cannot match TCP bits for non-tcp packets [ 182.510316][ T9888] __nla_validate_parse: 7 callbacks suppressed [ 182.510335][ T9888] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1097'. [ 182.728101][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.657927][ T9895] netlink: 'syz.3.1102': attribute type 22 has an invalid length. [ 183.666632][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 183.690008][ T9895] netlink: 'syz.3.1102': attribute type 22 has an invalid length. [ 183.700490][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 183.765186][ T9117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.773547][ T9117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.887052][ T9911] Bluetooth: MGMT ver 1.23 [ 183.897826][ T9911] netlink: 'syz.1.1106': attribute type 11 has an invalid length. [ 183.944373][ T9914] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1108'. [ 184.099058][ T9922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1111'. [ 184.369034][ T9937] netlink: 'syz.0.1116': attribute type 1 has an invalid length. [ 184.789213][ T9956] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 184.803362][ T9956] syzkaller1: Refused to change device type [ 184.814952][ T9098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.898440][ T9962] block nbd0: not configured, cannot reconfigure [ 185.626453][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1140'. [ 185.636665][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1140'. [ 185.844815][T10026] macvlan1: mtu less than device minimum [ 185.845136][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.871606][T10026] sctp: [Deprecated]: syz.3.1141 (pid 10026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.871606][T10026] Use struct sctp_sack_info instead [ 185.919571][T10031] netlink: 'syz.0.1143': attribute type 4 has an invalid length. [ 185.928100][T10031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1143'. [ 186.092737][T10039] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 186.105525][T10040] sock: sock_timestamping_bind_phc: sock not bind to device [ 186.113070][T10039] sock: sock_timestamping_bind_phc: sock not bind to device [ 186.123528][T10040] netlink: 'syz.3.1145': attribute type 16 has an invalid length. [ 186.131549][T10040] netlink: 'syz.3.1145': attribute type 17 has an invalid length. [ 186.175542][T10039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.184856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.238288][T10046] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004 [ 186.259274][T10052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1149'. [ 186.306676][T10040] bridge0: port 3(dummy0) entered disabled state [ 186.339396][T10052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1149'. [ 186.358983][T10040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.487905][T10059] ªªªªª»: renamed from team_slave_1 [ 186.503093][T10061] netlink: 'syz.3.1152': attribute type 1 has an invalid length. [ 186.561867][T10061] bond4: entered promiscuous mode [ 186.576031][T10061] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.613632][T10067] bond4: (slave bridge6): making interface the new active one [ 186.622183][T10067] bridge6: entered promiscuous mode [ 186.630485][T10067] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 186.767889][T10077] unsupported nlmsg_type 40 [ 186.805813][ T9113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.884822][ T9098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.136929][T10102] netlink: 'syz.2.1160': attribute type 2 has an invalid length. [ 187.587884][T10116] tipc: Started in network mode [ 187.599153][T10116] tipc: Node identity 9257c3e301b7, cluster identity 4711 [ 187.621207][T10116] tipc: Enabled bearer , priority 0 [ 187.657933][T10120] syzkaller0: entered promiscuous mode [ 187.663857][T10120] syzkaller0: entered allmulticast mode [ 187.958743][T10134] netlink: 'syz.3.1167': attribute type 24 has an invalid length. [ 188.144327][T10115] tipc: Resetting bearer [ 188.247627][T10115] tipc: Disabling bearer [ 188.264352][T10149] __nla_validate_parse: 66 callbacks suppressed [ 188.264373][T10149] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1168'. [ 188.312110][T10145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1168'. [ 188.336997][T10146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1168'. [ 188.348853][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1171'. [ 188.629651][T10165] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1175'. [ 188.675602][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1176'. [ 188.705157][T10169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1176'. [ 188.751222][T10169] syzkaller1: entered promiscuous mode [ 188.807784][T10169] syzkaller1: entered allmulticast mode [ 188.977071][ T9095] net_ratelimit: 4 callbacks suppressed [ 188.977090][ T9095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.048139][T10186] bond0: entered promiscuous mode [ 189.069806][T10186] bond_slave_0: entered promiscuous mode [ 189.084843][T10186] bond_slave_1: entered promiscuous mode [ 189.202474][T10192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1180'. [ 189.269385][T10194] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 189.297841][T10194] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 189.316441][T10194] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 189.339584][T10194] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 189.516699][T10206] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1185'. [ 189.560781][T10206] bond6 (unregistering): Released all slaves [ 189.596680][T10209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.605761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.847062][ T9116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.890160][T10220] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1190'. [ 189.902810][T10220] netlink: 'syz.3.1190': attribute type 2 has an invalid length. [ 189.938507][T10220] 9: entered promiscuous mode [ 190.011875][ T9095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.156878][T10234] x_tables: duplicate underflow at hook 1 [ 190.314845][T10239] Cannot find set identified by id 2 to match [ 190.336056][T10243] sctp: [Deprecated]: syz.1.1197 (pid 10243) Use of int in maxseg socket option. [ 190.336056][T10243] Use struct sctp_assoc_value instead [ 190.421780][T10245] netlink: 'syz.4.1201': attribute type 3 has an invalid length. [ 190.465981][T10245] netlink: 'syz.4.1201': attribute type 3 has an invalid length. [ 190.934989][T10274] netlink: 'syz.2.1210': attribute type 13 has an invalid length. [ 190.947195][T10274] veth0_macvtap: left promiscuous mode [ 190.967265][T10274] macvtap0: entered allmulticast mode [ 191.005254][T10274] macvtap0: refused to change device tx_queue_len [ 191.044420][ T9095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.103586][T10282] syz_tun: entered allmulticast mode [ 191.165906][T10282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.197268][T10282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.246058][T10282] bond0 (unregistering): Released all slaves [ 191.310759][T10281] syz_tun: left allmulticast mode [ 191.355481][T10292] tipc: Started in network mode [ 191.361456][T10292] tipc: Node identity ac141441, cluster identity 4711 [ 191.388737][T10292] tipc: Enabled bearer , priority 10 [ 191.593213][T10305] syzkaller1: entered promiscuous mode [ 191.600144][T10305] syzkaller1: entered allmulticast mode [ 191.913213][T10320] netlink: 'syz.2.1223': attribute type 39 has an invalid length. [ 192.404103][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.419452][T10346] team0: Device gtp1 is up. Set it down before adding it as a team port [ 192.504717][ T9116] tipc: Node number set to 2886997057 [ 192.688714][T10360] syzkaller0: entered promiscuous mode [ 192.695361][T10360] syzkaller0: entered allmulticast mode [ 192.715997][T10366] netlink: 'syz.2.1237': attribute type 1 has an invalid length. [ 192.724877][T10368] netlink: 'syz.2.1237': attribute type 1 has an invalid length. [ 192.795549][T10366] 8021q: adding VLAN 0 to HW filter on device bond6 [ 192.836002][T10372] bond6: (slave gretap1): making interface the new active one [ 192.848322][T10372] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 193.046678][T10384] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 193.491648][T10407] bond0: option fail_over_mac: invalid value (16) [ 193.517361][T10407] bond0 (unregistering): Released all slaves [ 193.537755][T10416] netlink: 'syz.2.1250': attribute type 11 has an invalid length. [ 193.560606][T10417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.849053][T10426] __nla_validate_parse: 10 callbacks suppressed [ 193.849075][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1255'. [ 193.868433][T10428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1256'. [ 193.917838][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1256'. [ 193.945880][T10434] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 2, id = 0 [ 193.996719][T10426] bond2: Unable to set down delay as MII monitoring is disabled [ 194.055301][T10426] bond2 (unregistering): Released all slaves [ 194.071202][T10441] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1257'. [ 194.110065][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1257'. [ 194.146004][T10441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1257'. [ 194.164807][ T9098] net_ratelimit: 6 callbacks suppressed [ 194.164826][ T9098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.329998][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.341121][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 194.669976][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'. [ 194.720715][T10468] veth1_macvtap: left promiscuous mode [ 194.726736][T10468] macsec0: entered promiscuous mode [ 194.731991][T10468] macsec0: entered allmulticast mode [ 194.758423][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'. [ 194.780714][T10468] veth1_macvtap: entered promiscuous mode [ 194.798901][T10468] veth1_macvtap: entered allmulticast mode [ 194.826571][T10468] macsec0: left promiscuous mode [ 194.863257][T10468] macsec0: left allmulticast mode [ 194.893124][T10468] veth1_macvtap: left allmulticast mode [ 195.048858][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1271'. [ 195.087462][T10485] netlink: 'syz.4.1272': attribute type 4 has an invalid length. [ 195.206675][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.400786][T10505] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 195.500105][T10513] set match dimension is over the limit! [ 195.926970][ T9113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.973155][T10543] netlink: 'syz.3.1289': attribute type 83 has an invalid length. [ 196.041769][T10546] IPVS: length: 239 != 24 [ 196.096327][T10551] netlink: 'syz.4.1293': attribute type 3 has an invalid length. [ 196.111980][T10548] netlink: 'syz.2.1292': attribute type 15 has an invalid length. [ 196.144701][T10553] syzkaller0: entered promiscuous mode [ 196.160256][T10553] syzkaller0: entered allmulticast mode [ 196.246532][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.346659][T10564] 8021q: VLANs not supported on tunl0 [ 196.357943][T10556] syzkaller0: entered promiscuous mode [ 196.379052][T10556] syzkaller0: entered allmulticast mode [ 196.563501][T10570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.801817][T10593] syzkaller0: entered promiscuous mode [ 196.831808][T10593] 0: reclassify loop, rule prio 0, protocol 800 [ 197.047330][T10608] "syz.0.1311" (10608) uses obsolete ecb(arc4) skcipher [ 197.178955][T10617] netlink: 'syz.2.1313': attribute type 20 has an invalid length. [ 197.189185][T10618] netlink: 'syz.2.1313': attribute type 1 has an invalid length. [ 197.207265][T10617] IPv6: NLM_F_CREATE should be specified when creating new route [ 197.216264][T10618] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 197.285997][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.461747][T10632] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.032349][T10675] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 198.146158][T10687] 0·: renamed from hsr_slave_1 (while UP) [ 198.164936][ T671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.181306][T10687] 0·: entered allmulticast mode [ 198.187885][T10687] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 198.793036][T10713] netlink: 'syz.1.1338': attribute type 1 has an invalid length. [ 198.986002][T10713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.125708][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 199.126797][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.189222][T10733] __nla_validate_parse: 17 callbacks suppressed [ 199.189243][T10733] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1343'. [ 199.209892][ T9117] IPVS: starting estimator thread 0... [ 199.304746][T10734] IPVS: using max 28 ests per chain, 67200 per kthread [ 199.366304][ T9098] net_ratelimit: 2 callbacks suppressed [ 199.366322][ T9098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.412776][T10743] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1345'. [ 199.524432][T10752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1348'. [ 199.527541][T10748] syzkaller0: entered promiscuous mode [ 199.557258][T10752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1348'. [ 199.588461][T10757] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1348'. [ 199.598191][T10748] syzkaller0: entered allmulticast mode [ 199.705649][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1349'. [ 199.737309][T10759] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1349'. [ 199.747704][T10760] netlink: 'syz.4.1349': attribute type 1 has an invalid length. [ 199.779779][T10759] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1349'. [ 199.895281][T10760] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.189841][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1355'. [ 200.401962][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1361'. [ 200.412506][ T9098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.848739][T10822] netlink: 'syz.0.1367': attribute type 13 has an invalid length. [ 201.150031][T10836] Cannot find del_set index 4 as target [ 201.271949][T10844] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.280294][T10844] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.444762][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.592402][T10854] sctp: [Deprecated]: syz.2.1379 (pid 10854) Use of int in maxseg socket option. [ 201.592402][T10854] Use struct sctp_assoc_value instead [ 202.025743][ T9117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.101046][T10876] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 202.486520][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.670120][T10916] netlink: 'syz.3.1400': attribute type 17 has an invalid length. [ 202.687157][T10916] gretap0: entered promiscuous mode [ 202.747247][T10916] gretap0: left promiscuous mode [ 202.782249][T10918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.951981][T10923] xt_cgroup: invalid path, errno=-2 [ 203.138507][T10933] delete_channel: no stack [ 203.184745][T10931] syzkaller0: entered allmulticast mode [ 203.285505][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.511239][T10956] bond0: entered promiscuous mode [ 203.527357][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.951863][T10979] netlink: 'syz.2.1420': attribute type 83 has an invalid length. [ 203.996197][T10984] netlink: 'syz.1.1422': attribute type 25 has an invalid length. [ 204.006368][T10985] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 204.110186][T10991] netlink: 'syz.0.1423': attribute type 1 has an invalid length. [ 204.367750][T11002] netlink: 'syz.2.1427': attribute type 1 has an invalid length. [ 204.570594][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.726998][T11030] macvlan0: entered promiscuous mode [ 204.760667][T11028] syzkaller0: entered promiscuous mode [ 204.794788][T11028] syzkaller0: entered allmulticast mode [ 205.016977][T11048] __nla_validate_parse: 13 callbacks suppressed [ 205.016996][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1440'. [ 205.045676][ T9113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.173197][T11058] netlink: 39 bytes leftover after parsing attributes in process `syz.0.1442'. [ 205.520872][T11074] IPVS: Unknown mcast interface: rose0 [ 205.605752][ T9098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.732059][T11081] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1447'. [ 205.926093][T11091] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1450'. [ 206.215498][T11108] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1454'. [ 206.368829][T11117] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1457'. [ 206.401320][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1457'. [ 206.619731][T11136] netlink: 'syz.3.1462': attribute type 1 has an invalid length. [ 206.628483][T11136] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1462'. [ 206.643705][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 206.653114][T11023] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.658349][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.668344][T11023] Bluetooth: hci1: command 0x0406 tx timeout [ 206.675349][T11023] Bluetooth: hci2: command 0x0406 tx timeout [ 206.681390][T11023] Bluetooth: hci3: command 0x0406 tx timeout [ 207.008372][T11153] netlink: 'syz.0.1465': attribute type 1 has an invalid length. [ 207.307008][T11161] bond0: (slave vlan0): Enslaving as a backup interface with an up link [ 207.685903][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.707281][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 208.085899][ T9113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.118625][T11214] netlink: 'syz.3.1483': attribute type 1 has an invalid length. [ 208.408267][ T9521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.476471][T11236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.554901][T11241] xt_l2tp: v2 tid > 0xffff: 1114244 [ 208.626711][T11241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.660713][T11241] IPv6: addrconf: prefix option has invalid lifetime [ 208.833672][T11256] sit2: entered promiscuous mode [ 208.848195][T11256] sit2: entered allmulticast mode [ 209.591456][T11300] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.719385][T11300] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.765598][ T5915] net_ratelimit: 1 callbacks suppressed [ 209.765617][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.906418][T11300] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.978365][T11317] netlink: 'syz.1.1515': attribute type 1 has an invalid length. [ 210.015642][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.034277][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.051738][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.119898][T11319] __nla_validate_parse: 11 callbacks suppressed [ 210.119920][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1516'. [ 210.155673][ T9098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.271531][T11300] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.471184][ T9098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.505436][T11332] bond0: option ad_select: unable to set because the bond device is up [ 210.636502][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1524'. [ 210.813258][T11348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.824717][ T9098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.832856][ T9098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.841928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.941885][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.952181][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.009234][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.040744][T11355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1526'. [ 211.065635][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.540528][T11376] netem: change failed [ 211.551899][T11378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1536'. [ 211.581155][T11378] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 211.582728][T11378] block (null): Could not allocate knbd recv work queue. [ 211.639050][T11378] nbd: failed to add new device [ 211.689189][T11391] can: request_module (can-proto-0) failed. [ 211.728475][T11389] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1538'. [ 211.770685][T11389] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1538'. [ 211.792190][T11394] netlink: 780 bytes leftover after parsing attributes in process `syz.3.1540'. [ 211.930846][T11407] netlink: 'syz.3.1544': attribute type 1 has an invalid length. [ 211.966427][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1541'. [ 211.991997][T11407] 8021q: adding VLAN 0 to HW filter on device bond5 [ 212.026441][T11407] vlan3: entered allmulticast mode [ 212.031641][T11407] bond5: entered allmulticast mode [ 212.049452][T11400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1541'. [ 212.068368][T11407] bond5: (slave geneve2): making interface the new active one [ 212.076440][T11407] geneve2: entered allmulticast mode [ 212.084606][T11407] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 212.100373][T11400] geneve3: entered promiscuous mode [ 212.105932][T11400] geneve3: entered allmulticast mode [ 212.486486][T11432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1552'. [ 212.585220][ T9521] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.616787][ T169] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.648942][ T169] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.694721][ T169] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.874947][T11459] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 213.202542][T11485] netlink: 'syz.0.1563': attribute type 1 has an invalid length. [ 213.241933][T11485] netlink: 'syz.0.1563': attribute type 62 has an invalid length. [ 213.343827][T11489] netlink: 'syz.3.1565': attribute type 12 has an invalid length. [ 213.949574][T11522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.975899][T11522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.113433][T11536] netlink: 'syz.1.1581': attribute type 1 has an invalid length. [ 214.429745][T11558] x_tables: duplicate entry at hook 2 [ 214.441489][T11560] netlink: 'syz.2.1590': attribute type 21 has an invalid length. [ 214.470999][T11563] pim6reg1: entered promiscuous mode [ 214.478284][T11563] pim6reg1: entered allmulticast mode [ 214.936590][T11589] Cannot find map_set index 65533 as target [ 214.965297][ T5915] net_ratelimit: 253 callbacks suppressed [ 214.965316][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.979270][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.190310][T11599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.284732][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.322172][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.444717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.668638][T11614] __nla_validate_parse: 11 callbacks suppressed [ 215.668661][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1609'. [ 215.696196][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1609'. [ 215.706313][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1609'. [ 215.861539][T11622] bond0: left promiscuous mode [ 215.870007][T11622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.004842][ T9098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.051378][T11633] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 216.071499][T11629] veth0_macvtap: entered promiscuous mode [ 216.095577][T11629] macvtap1: entered allmulticast mode [ 216.110968][T11629] veth0_macvtap: entered allmulticast mode [ 216.141198][T11639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.464308][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.472613][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.501129][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1620'. [ 216.520056][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1621'. [ 216.530088][T11657] x_tables: ip_tables: udp match: only valid for protocol 17 [ 216.650020][T11660] team0: entered promiscuous mode [ 216.681080][T11660] team_slave_0: entered promiscuous mode [ 216.748479][T11660] team_slave_1: entered promiscuous mode [ 216.768355][T11660] team0: entered allmulticast mode [ 216.773558][T11660] team_slave_0: entered allmulticast mode [ 216.780847][T11660] team_slave_1: entered allmulticast mode [ 216.797608][T11660] team0: Cannot enslave team device to itself [ 216.898635][T11678] bridge0: port 3(veth0_to_bridge) entered blocking state [ 216.923165][T11678] bridge0: port 3(veth0_to_bridge) entered disabled state [ 216.936958][T11678] veth0_to_bridge: entered allmulticast mode [ 216.945429][T11678] veth0_to_bridge: entered promiscuous mode [ 216.971778][T11678] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.005286][T11678] bridge0: port 3(veth0_to_bridge) entered blocking state [ 217.012908][T11678] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 217.327454][T11700] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1632'. [ 217.381328][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1633'. [ 217.408024][T11702] netlink: 'syz.3.1633': attribute type 30 has an invalid length. [ 217.417294][T11702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1633'. [ 217.644923][T11716] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1638'. [ 217.830285][T11727] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1639'. [ 218.048158][T11738] netlink: 'syz.4.1642': attribute type 3 has an invalid length. [ 218.341910][T11761] Bluetooth: MGMT ver 1.23 [ 219.192648][T11815] xt_CONNSECMARK: invalid mode: 0 [ 219.515019][T11832] netlink: 'syz.2.1670': attribute type 18 has an invalid length. [ 219.537040][T11830] pim6reg1: entered promiscuous mode [ 219.544566][T11830] pim6reg1: entered allmulticast mode [ 220.167626][ T9098] net_ratelimit: 14 callbacks suppressed [ 220.167646][ T9098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.177209][T11875] syzkaller0: entered promiscuous mode [ 220.187188][T11875] syzkaller0: entered allmulticast mode [ 220.244799][ T9116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.316842][T11881] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 220.607581][T11890] netlink: 'syz.2.1688': attribute type 5 has an invalid length. [ 220.793797][T11898] bond6: option all_slaves_active: invalid value (222) [ 220.807938][T11898] bond6 (unregistering): Released all slaves [ 220.905489][T11910] __nla_validate_parse: 18 callbacks suppressed [ 220.905511][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1695'. [ 220.944273][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.957664][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.037446][T11914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1696'. [ 221.214999][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.459911][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'. [ 221.514593][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'. [ 221.662366][T11953] netlink: 'syz.0.1708': attribute type 29 has an invalid length. [ 221.685127][T11953] netlink: 'syz.0.1708': attribute type 29 has an invalid length. [ 221.759072][T11957] netlink: 'syz.4.1707': attribute type 25 has an invalid length. [ 221.781180][T11953] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1708'. [ 221.828613][T11953] unsupported nla_type 58 [ 221.900818][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1713'. [ 221.911142][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1711'. [ 221.911182][T11961] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 221.933357][T11961] bond3 (unregistering): Released all slaves [ 221.959419][T11969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1711'. [ 221.983592][T11964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1712'. [ 222.035015][T11964] bond6: entered promiscuous mode [ 222.040741][T11964] 8021q: adding VLAN 0 to HW filter on device bond6 [ 222.066996][T11964] vlan4: entered allmulticast mode [ 222.072310][T11964] bond6: entered allmulticast mode [ 222.080276][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1712'. [ 222.115233][ T9521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.133791][ T9521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.167068][T11976] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 222.270572][ T9098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.540219][T11995] netlink: 'syz.0.1719': attribute type 1 has an invalid length. [ 222.618332][T11995] bond2: entered promiscuous mode [ 222.665017][T11995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.765659][T12004] bond2: (slave bridge5): making interface the new active one [ 222.773397][T12004] bridge5: entered promiscuous mode [ 222.780752][T12004] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 223.036296][T12025] syzkaller0: entered promiscuous mode [ 223.049809][T12025] syzkaller0: entered allmulticast mode [ 223.106778][T12025] dvmrp0: entered allmulticast mode [ 223.520868][T12054] bond0: entered promiscuous mode [ 223.549630][T12059] netlink: 'syz.2.1740': attribute type 1 has an invalid length. [ 223.851118][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.882747][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.909700][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.930514][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.095959][T12090] tipc: Started in network mode [ 224.101018][T12090] tipc: Node identity 4a888a841e, cluster identity 4711 [ 224.112442][T12090] tipc: Enabled bearer , priority 0 [ 224.356960][T12090] syzkaller0: entered promiscuous mode [ 224.367160][T12090] syzkaller0: entered allmulticast mode [ 224.376477][T12090] tipc: Resetting bearer [ 224.441522][ T9521] tipc: Resetting bearer [ 224.460612][T12089] tipc: Resetting bearer [ 225.365201][ T9095] net_ratelimit: 10 callbacks suppressed [ 225.365229][ T9095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.484737][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.496133][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.684530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.693425][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.147297][T12089] tipc: Disabling bearer [ 226.159239][T12112] vxcan1 speed is unknown, defaulting to 1000 [ 226.177935][ T5915] tipc: Node number set to 1418234500 [ 226.207967][T12112] vxcan1 speed is unknown, defaulting to 1000 [ 226.247918][T12149] netlink: 'syz.3.1758': attribute type 14 has an invalid length. [ 226.306918][T12149] __nla_validate_parse: 9 callbacks suppressed [ 226.306939][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1758'. [ 226.322926][T12112] vxcan1 speed is unknown, defaulting to 1000 [ 226.498700][T12158] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1762'. [ 226.572106][T12162] netlink: 'syz.0.1763': attribute type 26 has an invalid length. [ 226.604116][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1763'. [ 226.631360][T12162] netlink: 'syz.0.1763': attribute type 26 has an invalid length. [ 226.648245][T12166] syzkaller0: entered promiscuous mode [ 226.659259][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1763'. [ 226.668841][T12166] syzkaller0: entered allmulticast mode [ 226.816148][T12169] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 227.086724][T12179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1770'. [ 227.159032][T12184] netlink: 'syz.0.1772': attribute type 21 has an invalid length. [ 227.185695][T12184] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1772'. [ 227.208394][ T5915] vxcan1 speed is unknown, defaulting to 1000 [ 227.224652][T12112] infiniband syz2: set active [ 227.241048][T12112] infiniband syz2: added vxcan1 [ 227.355466][T12192] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1773'. [ 227.399342][T12112] RDS/IB: syz2: added [ 227.406000][T12112] smc: adding ib device syz2 with port count 1 [ 227.412474][T12112] smc: ib device syz2 port 1 has no pnetid [ 227.425114][ T9116] vxcan1 speed is unknown, defaulting to 1000 [ 227.436773][T12112] vxcan1 speed is unknown, defaulting to 1000 [ 227.705280][T12211] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1780'. [ 227.949771][T12217] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1781'. [ 227.959678][T12217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1781'. [ 228.016959][T12112] vxcan1 speed is unknown, defaulting to 1000 [ 228.442471][T12239] syzkaller0: entered promiscuous mode [ 228.535360][T12239] syzkaller0: entered allmulticast mode [ 228.584480][T12248] veth0_to_bond: entered promiscuous mode [ 228.591013][T12248] veth0_to_bond: entered allmulticast mode [ 228.687416][T12249] bond3: entered promiscuous mode [ 228.692921][T12249] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.760458][T12253] bridge5: entered promiscuous mode [ 228.771615][T12253] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 228.782850][T12112] vxcan1 speed is unknown, defaulting to 1000 [ 228.881072][T12253] macvlan2: entered promiscuous mode [ 228.889993][T12253] macvlan2: entered allmulticast mode [ 228.929335][T12253] bond3: (slave macvlan2): Error -98 calling set_mac_address [ 229.435314][T12112] vxcan1 speed is unknown, defaulting to 1000 [ 229.799053][T12295] netlink: 'syz.0.1805': attribute type 4 has an invalid length. [ 229.977708][T12301] netlink: 'syz.4.1807': attribute type 1 has an invalid length. [ 230.068749][T12301] 8021q: adding VLAN 0 to HW filter on device bond8 [ 230.091745][T12310] netlink: 'syz.0.1809': attribute type 7 has an invalid length. [ 230.172965][T12304] bond8: (slave veth7): Enslaving as an active interface with a down link [ 230.207352][T12310] erspan0: entered promiscuous mode [ 230.228636][T12310] gretap0: entered promiscuous mode [ 230.254019][T12112] vxcan1 speed is unknown, defaulting to 1000 [ 230.349953][T12320] nbd: device at index 1 is going down [ 230.462924][T12330] netlink: 'syz.4.1812': attribute type 2 has an invalid length. [ 230.495897][T12331] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 230.505596][T12330] netlink: 'syz.4.1812': attribute type 15 has an invalid length. [ 231.272938][T12361] pim6reg: entered allmulticast mode [ 231.307803][T12360] netlink: 'syz.3.1822': attribute type 1 has an invalid length. [ 231.330123][T12361] pim6reg: left allmulticast mode [ 231.344192][T12360] netlink: 'syz.3.1822': attribute type 2 has an invalid length. [ 231.632955][T12382] netlink: 'syz.4.1826': attribute type 11 has an invalid length. [ 231.670269][T12382] __nla_validate_parse: 22 callbacks suppressed [ 231.670287][T12382] netlink: 186748 bytes leftover after parsing attributes in process `syz.4.1826'. [ 231.713406][T12391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1829'. [ 231.893160][T12396] geneve2: entered promiscuous mode [ 231.915601][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 36198 - 0 [ 231.945413][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 36198 - 0 [ 231.957761][T12404] netlink: 'syz.1.1831': attribute type 1 has an invalid length. [ 231.984634][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 36198 - 0 [ 232.002613][T12404] openvswitch: netlink: Flow key attribute not present in set flow. [ 232.005242][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 36198 - 0 [ 232.244099][T12423] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1837'. [ 232.378104][T12423] vxcan1 speed is unknown, defaulting to 1000 [ 232.391098][T12429] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1840'. [ 232.824485][T12442] syzkaller0: entered promiscuous mode [ 232.830998][T12442] syzkaller0: entered allmulticast mode [ 233.029756][T12451] vxcan1 speed is unknown, defaulting to 1000 [ 233.119046][T12460] netlink: 'syz.4.1847': attribute type 1 has an invalid length. [ 233.128628][T12460] netlink: 'syz.4.1847': attribute type 7 has an invalid length. [ 233.145186][T12460] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1847'. [ 233.678181][T12473] syzkaller0: entered promiscuous mode [ 233.686129][T12473] syzkaller0: entered allmulticast mode [ 233.758108][T12473] tc action pedit offset must be on 32 bit boundaries [ 233.765435][T12473] tc action pedit offset must be on 32 bit boundaries [ 233.772399][T12473] tc action pedit offset must be on 32 bit boundaries [ 233.779285][T12473] tc action pedit offset must be on 32 bit boundaries [ 233.786130][T12473] tc action pedit offset must be on 32 bit boundaries [ 233.792926][T12473] tc action pedit offset must be on 32 bit boundaries [ 233.799773][T12473] tc action pedit offset must be on 32 bit boundaries [ 233.806611][T12473] tc action pedit offset must be on 32 bit boundaries [ 233.813528][T12473] tc action pedit offset must be on 32 bit boundaries [ 233.820415][T12473] tc action pedit offset must be on 32 bit boundaries [ 233.827361][T12473] 0: reclassify loop, rule prio 0, protocol 800 [ 234.031509][T12473] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 234.053220][T12473] bond9 (unregistering): Released all slaves [ 234.147828][T12480] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1854'. [ 234.276435][T12487] gtp1: entered promiscuous mode [ 234.281460][T12487] gtp1: entered allmulticast mode [ 234.491522][T12490] bond9: entered promiscuous mode [ 234.507271][T12490] 8021q: adding VLAN 0 to HW filter on device bond9 [ 234.594163][T12490] bond9: (slave bridge7): making interface the new active one [ 234.601785][T12490] bridge7: entered promiscuous mode [ 234.612515][T12490] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 234.667346][T12504] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1860'. [ 234.731293][T12504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1860'. [ 234.769940][T12504] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1860'. [ 235.227089][T12541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1869'. [ 235.249767][T12541] validate_nla: 2 callbacks suppressed [ 235.249789][T12541] netlink: 'syz.0.1869': attribute type 7 has an invalid length. [ 235.378506][T12546] Cannot find add_set index 65532 as target [ 235.386310][T12544] Cannot find add_set index 65532 as target [ 235.396127][T12548] macvtap0: entered promiscuous mode [ 235.426261][T12548] macvtap0 (unregistering): left promiscuous mode [ 235.458368][T12550] bridge0: port 3(batadv2) entered blocking state [ 235.466280][T12550] bridge0: port 3(batadv2) entered disabled state [ 235.472988][T12550] batadv2: entered allmulticast mode [ 235.488863][T12550] batadv2: entered promiscuous mode [ 235.954657][ T49] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 235.964958][ T49] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 236.020543][T12579] xt_l2tp: invalid flags combination: 0 [ 236.028667][T12582] syzkaller0: entered promiscuous mode [ 236.037684][T12582] syzkaller0: entered allmulticast mode [ 236.139873][T12583] syzkaller0: entered promiscuous mode [ 236.260702][T12596] netlink: 'syz.0.1888': attribute type 5 has an invalid length. [ 236.274384][T12583] Cannot find del_set index 3 as target [ 236.299783][T12599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.358345][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.368566][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.378335][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.403737][T12602] netlink: 'syz.1.1890': attribute type 4 has an invalid length. [ 236.418636][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.601874][T12610] netlink: 'syz.4.1893': attribute type 8 has an invalid length. [ 236.649092][T12612] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 236.830304][T12617] syzkaller1: entered promiscuous mode [ 236.836209][T12617] syzkaller1: entered allmulticast mode [ 237.011879][T12639] : entered promiscuous mode [ 237.522481][T12674] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 237.598273][T12676] vcan1: entered promiscuous mode [ 237.604822][T12676] vcan1: entered allmulticast mode [ 237.642482][T12677] __nla_validate_parse: 13 callbacks suppressed [ 237.642499][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1914'. [ 237.719092][T12679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1915'. [ 239.729607][T12617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.007047][T12700] Cannot find add_set index 65532 as target [ 240.129807][T12707] netlink: 'syz.1.1924': attribute type 9 has an invalid length. [ 240.150210][T12707] netlink: 'syz.1.1924': attribute type 11 has an invalid length. [ 240.163665][T12707] netlink: 'syz.1.1924': attribute type 12 has an invalid length. [ 240.173378][T12707] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1924'. [ 240.187885][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1924'. [ 240.254788][T12712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1925'. [ 240.267417][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1925'. [ 240.310616][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1926'. [ 240.592768][T12735] ieee802154 phy0 wpan0: encryption failed: -22 [ 240.777837][T12746] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1935'. [ 240.806200][T12740] syzkaller0: entered promiscuous mode [ 240.812788][T12730] netlink: 'syz.4.1930': attribute type 1 has an invalid length. [ 240.833410][T12740] syzkaller0: entered allmulticast mode [ 241.027725][T12748] syzkaller0: entered promiscuous mode [ 241.034592][T12748] syzkaller0: entered allmulticast mode [ 241.054484][T12757] netlink: 'syz.3.1938': attribute type 1 has an invalid length. [ 241.063481][T12757] xt_l2tp: v2 doesn't support IP mode [ 241.071186][T12757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1938'. [ 241.089669][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1938'. [ 241.416388][T12773] nbd: device at index 0 is going down [ 241.626644][ T7168] udevd[7168]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 241.647059][T12781] veth0_to_team: entered allmulticast mode [ 241.860380][T12803] : entered promiscuous mode [ 242.018490][T12803] vxcan1 speed is unknown, defaulting to 1000 [ 242.069071][T12816] tipc: Enabling of bearer rejected, failed to enable media [ 242.711325][T12849] __nla_validate_parse: 3 callbacks suppressed [ 242.711346][T12849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1967'. [ 242.788951][T12852] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1966'. [ 242.830243][T12855] netlink: 'syz.0.1968': attribute type 1 has an invalid length. [ 242.932761][T12858] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1966'. [ 242.977436][T12863] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1970'. [ 243.013406][T12863] nbd: illegal input index -8454144 [ 243.030800][T12852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.089765][T12852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.136303][T12852] bond0 (unregistering): Released all slaves [ 243.215218][T12872] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1971'. [ 243.242961][T12867] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 243.268767][T12874] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1972'. [ 243.280885][T12872] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1971'. [ 243.302555][T12867] bond9 (unregistering): Released all slaves [ 243.359228][T12875] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1971'. [ 243.372423][T12868] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 243.379494][T12868] syzkaller1: linktype set to 823 [ 243.401946][T12875] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1971'. [ 244.007590][T12918] netlink: 'syz.4.1985': attribute type 9 has an invalid length. [ 244.099542][T12921] IPVS: ip_vs_add_dest(): server weight less than zero [ 244.120479][T12921] netlink: zone id is out of range [ 244.127995][T12921] netlink: zone id is out of range [ 244.140947][T12921] netlink: zone id is out of range [ 244.153031][T12921] netlink: zone id is out of range [ 244.158463][T12921] netlink: zone id is out of range [ 244.165829][T12921] netlink: zone id is out of range [ 244.173483][T12921] netlink: zone id is out of range [ 244.178886][T12921] netlink: zone id is out of range [ 244.188043][T12921] netlink: zone id is out of range [ 244.193303][T12921] netlink: zone id is out of range [ 244.347142][ T5839] block nbd2: Receive control failed (result -32) [ 244.446597][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1992'. [ 244.992214][T12975] syzkaller0: entered promiscuous mode [ 244.998822][T12975] syzkaller0: entered allmulticast mode [ 245.499989][T13007] netlink: 'syz.4.2010': attribute type 29 has an invalid length. [ 245.576357][T13007] netlink: 'syz.4.2010': attribute type 29 has an invalid length. [ 245.589777][T13011] x_tables: duplicate underflow at hook 4 [ 245.605468][T13007] netlink: 'syz.4.2010': attribute type 32 has an invalid length. [ 245.693022][T13022] x_tables: duplicate entry at hook 1 [ 245.769456][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 245.861974][T13028] netlink: 'syz.4.2015': attribute type 1 has an invalid length. [ 245.955747][T13033] bond10: (slave gretap3): making interface the new active one [ 245.965820][T13033] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 246.249149][T13046] bridge0: port 1(gretap0) entered blocking state [ 246.263037][T13046] bridge0: port 1(gretap0) entered disabled state [ 246.272645][T13046] gretap0: entered allmulticast mode [ 246.280300][T13046] gretap0: entered promiscuous mode [ 246.525371][T13071] veth7: entered allmulticast mode [ 247.255708][T13107] netlink: 'syz.1.2036': attribute type 2 has an invalid length. [ 247.289954][T13107] netlink: 'syz.1.2036': attribute type 1 has an invalid length. [ 247.310010][T13115] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 248.506838][T13179] __nla_validate_parse: 10 callbacks suppressed [ 248.506861][T13179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2053'. [ 248.625586][T13179] sctp: [Deprecated]: syz.1.2053 (pid 13179) Use of int in maxseg socket option. [ 248.625586][T13179] Use struct sctp_assoc_value instead [ 248.651042][T13187] netlink: 'syz.4.2054': attribute type 1 has an invalid length. [ 248.681044][T13187] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2054'. [ 248.796187][T13195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2055'. [ 249.284690][T13210] xt_ecn: cannot match TCP bits for non-tcp packets [ 249.337286][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2060'. [ 249.567473][T13221] net_ratelimit: 187 callbacks suppressed [ 249.567498][T13221] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.603977][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.670704][T13227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2063'. [ 249.768943][T13236] netlink: 'syz.3.2067': attribute type 1 has an invalid length. [ 249.842205][T13236] bond0: entered promiscuous mode [ 249.898262][T13236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.113713][T13259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2073'. [ 250.270672][T13266] netlink: 'syz.0.2076': attribute type 1 has an invalid length. [ 250.365450][T13266] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.474204][T13266] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.2076'. [ 250.507031][T13273] bond3: (slave ip6erspan0): making interface the new active one [ 250.537928][T13273] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 250.573282][T13287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2081'. [ 250.644788][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.719386][T13296] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 250.729187][T13295] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.820771][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'. [ 251.151383][T13316] syzkaller0: entered promiscuous mode [ 251.174979][T13316] 0: reclassify loop, rule prio 0, protocol 800 [ 251.292892][T13331] sctp: [Deprecated]: syz.3.2097 (pid 13331) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.292892][T13331] Use struct sctp_sack_info instead [ 251.312998][T13329] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2096'. [ 251.318629][T13331] sctp: [Deprecated]: syz.3.2097 (pid 13331) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.318629][T13331] Use struct sctp_sack_info instead [ 251.483200][T13345] netlink: 'syz.3.2100': attribute type 28 has an invalid length. [ 251.492676][T13345] netlink: 'syz.3.2100': attribute type 3 has an invalid length. [ 251.532767][T13348] tipc: Cannot configure node identity twice [ 251.683987][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.039430][T13386] netlink: 'syz.2.2113': attribute type 1 has an invalid length. [ 252.230260][T13393] netlink: 'syz.0.2116': attribute type 4 has an invalid length. [ 252.389754][T13403] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 252.508890][T13403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.724052][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.847552][T13422] netlink: 'syz.0.2124': attribute type 9 has an invalid length. [ 252.866711][T13422] netlink: 'syz.0.2124': attribute type 11 has an invalid length. [ 252.888877][T13422] netlink: 'syz.0.2124': attribute type 12 has an invalid length. [ 253.172282][T13434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.501156][T13449] vlan0: entered allmulticast mode [ 253.506588][T13449] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 253.764093][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.874321][T13473] openvswitch: netlink: Key type 346 is out of range max 32 [ 253.887755][T13474] xt_hashlimit: size too large, truncated to 1048576 [ 253.994684][T13481] netlink: 'syz.0.2144': attribute type 64 has an invalid length. [ 254.014524][T13481] __nla_validate_parse: 18 callbacks suppressed [ 254.014545][T13481] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2144'. [ 254.212380][T13495] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2149'. [ 254.525899][T13516] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2153'. [ 254.625368][T13515] syzkaller1: entered promiscuous mode [ 254.630924][T13519] x_tables: duplicate underflow at hook 1 [ 254.630984][T13515] syzkaller1: entered allmulticast mode [ 254.674286][T13524] xt_hashlimit: max too large, truncated to 1048576 [ 254.777763][T13527] bridge10: entered promiscuous mode [ 254.783816][T13528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.804052][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.822530][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2156'. [ 254.826639][T13527] bridge10: entered allmulticast mode [ 254.846653][T13533] netlink: 'syz.4.2158': attribute type 1 has an invalid length. [ 254.856350][T13533] netlink: 'syz.4.2158': attribute type 1 has an invalid length. [ 254.958333][T13536] macvlan0: entered promiscuous mode [ 255.438979][T13563] netlink: zone id is out of range [ 255.451690][T13563] netlink: zone id is out of range [ 255.469782][T13563] netlink: zone id is out of range [ 255.484324][T13563] netlink: zone id is out of range [ 255.489509][T13563] netlink: zone id is out of range [ 255.524788][T13563] netlink: zone id is out of range [ 255.529978][T13563] netlink: zone id is out of range [ 255.554155][T13566] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2167'. [ 255.590636][T13563] netlink: zone id is out of range [ 255.609502][T13565] syzkaller0: entered promiscuous mode [ 255.615570][T13565] syzkaller0: entered allmulticast mode [ 255.628156][T13571] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 255.663119][ C0] ------------[ cut here ]------------ [ 255.669007][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 255.678943][ C0] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#0: syz.2.2172/13572 [ 255.689813][ C0] Modules linked in: [ 255.693772][ C0] CPU: 0 UID: 0 PID: 13572 Comm: syz.2.2172 Not tainted syzkaller #0 PREEMPT(full) [ 255.703270][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.713422][ C0] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 255.719768][ C0] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 255.739758][ C0] RSP: 0018:ffffc90000007618 EFLAGS: 00010246 [ 255.745928][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 255.753979][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9022eeb0 [ 255.762001][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.770074][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88808000f3e8 [ 255.778156][ C0] R13: 0000000000000000 R14: ffffffff9022eeb0 R15: ffff88807e8e3138 [ 255.786622][ C0] FS: 0000000000000000(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000 [ 255.795835][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.802529][ C0] CR2: 00007f8ccd44eddd CR3: 000000005cef4000 CR4: 00000000003526f0 [ 255.810750][ C0] Call Trace: [ 255.814115][ C0] [ 255.817020][ C0] rate_control_send_low+0x1a7/0x7b0 [ 255.822379][ C0] rate_control_get_rate+0x20b/0x5d0 [ 255.827804][ C0] ieee80211_beacon_get_finish+0x3af/0x6f0 [ 255.833686][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 255.840147][ C0] ? __ieee80211_beacon_add_tim+0x1180/0x15a0 [ 255.846570][ C0] ? ieee80211_beacon_get_ap+0x8cb/0x2040 [ 255.852365][ C0] ieee80211_beacon_get_ap+0x196a/0x2040 [ 255.858164][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 255.864252][ C0] ? kasan_save_track+0x4f/0x80 [ 255.869207][ C0] ? lock_acquire+0xf0/0x2e0 [ 255.873915][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 255.879520][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 255.885251][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 255.890862][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 255.896424][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 255.902568][ C0] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 255.908221][ C0] ? lock_acquire+0xf0/0x2e0 [ 255.912862][ C0] __iterate_interfaces+0x2ab/0x590 [ 255.918179][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 255.924333][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 255.931596][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 255.937765][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 255.944890][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 255.950155][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 255.956070][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 255.961367][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 255.967231][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 255.973359][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 255.978639][ C0] handle_softirqs+0x22a/0x870 [ 255.983468][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 255.988458][ C0] __irq_exit_rcu+0x5f/0x150 [ 255.992014][T13575] dummy0: left allmulticast mode [ 255.993101][ C0] irq_exit_rcu+0x9/0x30 [ 255.993142][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 256.007525][T13575] dummy0: left promiscuous mode [ 256.008123][ C0] [ 256.014099][T13575] bridge0: port 3(dummy0) entered disabled state [ 256.015916][ C0] [ 256.025283][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 256.031319][ C0] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 256.036717][ C0] Code: e9 30 ff ff ff e8 75 26 0d 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 f1 a3 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 56 0c 10 0a cc 48 8d 3d 2e 6c 73 [ 256.056416][ C0] RSP: 0018:ffffc9000db67310 EFLAGS: 00000292 [ 256.062515][ C0] RAX: 0cbd54bcb806ac00 RBX: 0000000000000246 RCX: 0000000080000001 [ 256.070567][ C0] RDX: 0000000072a5f24f RSI: ffffffff8e168ad8 RDI: ffffffff8c27c200 [ 256.078607][ C0] RBP: 0000000000000000 R08: ffffffff823c1fa4 R09: ffffffff8e75e520 [ 256.086682][ C0] R10: dffffc0000000000 R11: fffff940003a4d09 R12: 0000000000000002 [ 256.094747][ C0] R13: ffffffff8e75e520 R14: 0000000000000000 R15: 0000000000000000 [ 256.102784][ C0] ? page_table_check_clear+0x144/0x5f0 [ 256.108498][ C0] page_table_check_clear+0x164/0x5f0 [ 256.114048][ C0] ? page_table_check_clear+0x144/0x5f0 [ 256.119640][ C0] ? page_table_check_clear+0x144/0x5f0 [ 256.125273][ C0] ? vm_normal_page+0x10d/0x240 [ 256.130276][ C0] unmap_page_range+0x33b3/0x48f0 [ 256.135449][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 256.140897][ C0] ? mas_find+0xb0e/0xd30 [ 256.145336][ C0] ? unmap_vmas+0x1c4/0x6a0 [ 256.149909][ C0] unmap_vmas+0x48f/0x6a0 [ 256.154367][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 256.159517][ C0] exit_mmap+0x280/0xa10 [ 256.163828][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 256.168755][ C0] ? __pfx_exit_aio+0x10/0x10 [ 256.173524][ C0] ? uprobe_clear_state+0x27c/0x290 [ 256.178838][ C0] __mmput+0x118/0x430 [ 256.182976][ C0] exit_mm+0x168/0x220 [ 256.187152][ C0] do_exit+0x6a2/0x23c0 [ 256.191374][ C0] ? __pfx_do_exit+0x10/0x10 [ 256.196100][ C0] ? cgroup1_freezing+0x20/0x350 [ 256.201116][ C0] ? cgroup1_freezing+0x20/0x350 [ 256.206156][ C0] do_group_exit+0x21b/0x2d0 [ 256.210805][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.216098][ C0] get_signal+0x1284/0x1330 [ 256.220861][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 256.226711][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 256.232943][ C0] exit_to_user_mode_loop+0x86/0x480 [ 256.238315][ C0] ? rcu_is_watching+0x15/0xb0 [ 256.243140][ C0] do_syscall_64+0x32d/0xf80 [ 256.247914][ C0] ? trace_irq_disable+0x3b/0x150 [ 256.252999][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.259155][ C0] ? clear_bhb_loop+0x40/0x90 [ 256.263925][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.269864][ C0] RIP: 0033:0x7f8ccd39c799 [ 256.274365][ C0] Code: Unable to access opcode bytes at 0x7f8ccd39c76f. [ 256.281439][ C0] RSP: 002b:00007f8cce1c90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 256.289957][ C0] RAX: fffffffffffffe00 RBX: 00007f8ccd615fa8 RCX: 00007f8ccd39c799 [ 256.298034][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8ccd615fa8 [ 256.306106][ C0] RBP: 00007f8ccd615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 256.314171][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.322190][ C0] R13: 00007f8ccd616038 R14: 00007fff340f6e20 R15: 00007fff340f6f08 [ 256.330277][ C0] [ 256.333370][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 256.340690][ C0] CPU: 0 UID: 0 PID: 13572 Comm: syz.2.2172 Not tainted syzkaller #0 PREEMPT(full) [ 256.350138][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.360329][ C0] Call Trace: [ 256.363654][ C0] [ 256.366535][ C0] vpanic+0x56c/0xa60 [ 256.370605][ C0] ? __pfx__printk+0x10/0x10 [ 256.375274][ C0] ? __pfx_vpanic+0x10/0x10 [ 256.379873][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 256.385208][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 256.390854][ C0] panic+0xc5/0xd0 [ 256.394635][ C0] ? __pfx_panic+0x10/0x10 [ 256.399129][ C0] __warn+0x315/0x4f0 [ 256.403242][ C0] ? __rate_control_send_low+0x524/0x800 [ 256.408907][ C0] ? __rate_control_send_low+0x524/0x800 [ 256.414575][ C0] __report_bug+0x29a/0x540 [ 256.419120][ C0] ? kernel_text_address+0xa5/0xe0 [ 256.424264][ C0] ? __rate_control_send_low+0x524/0x800 [ 256.430016][ C0] ? __pfx___report_bug+0x10/0x10 [ 256.435089][ C0] ? __build_skb+0x62/0x440 [ 256.439634][ C0] ? stack_trace_save+0xa9/0x100 [ 256.444608][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 256.450008][ C0] report_bug_entry+0x19a/0x290 [ 256.454886][ C0] ? __rate_control_send_low+0x5bb/0x800 [ 256.460556][ C0] ? __rate_control_send_low+0x5c0/0x800 [ 256.466299][ C0] handle_bug+0xce/0x200 [ 256.470570][ C0] exc_invalid_op+0x1a/0x50 [ 256.475104][ C0] asm_exc_invalid_op+0x1a/0x20 [ 256.480072][ C0] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 256.486338][ C0] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 256.506012][ C0] RSP: 0018:ffffc90000007618 EFLAGS: 00010246 [ 256.512153][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 256.520241][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9022eeb0 [ 256.528240][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.536242][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88808000f3e8 [ 256.544321][ C0] R13: 0000000000000000 R14: ffffffff9022eeb0 R15: ffff88807e8e3138 [ 256.552332][ C0] ? __rate_control_send_low+0x58d/0x800 [ 256.558002][ C0] rate_control_send_low+0x1a7/0x7b0 [ 256.563310][ C0] rate_control_get_rate+0x20b/0x5d0 [ 256.568625][ C0] ieee80211_beacon_get_finish+0x3af/0x6f0 [ 256.574466][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 256.580823][ C0] ? __ieee80211_beacon_add_tim+0x1180/0x15a0 [ 256.586932][ C0] ? ieee80211_beacon_get_ap+0x8cb/0x2040 [ 256.592694][ C0] ieee80211_beacon_get_ap+0x196a/0x2040 [ 256.598375][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 256.604476][ C0] ? kasan_save_track+0x4f/0x80 [ 256.609386][ C0] ? lock_acquire+0xf0/0x2e0 [ 256.614023][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 256.619595][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 256.625180][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 256.630763][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 256.636251][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 256.642381][ C0] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 256.647955][ C0] ? lock_acquire+0xf0/0x2e0 [ 256.652575][ C0] __iterate_interfaces+0x2ab/0x590 [ 256.657800][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 256.663904][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 256.671142][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 256.677232][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 256.684287][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 256.689545][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 256.695460][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 256.700711][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 256.706461][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 256.712559][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 256.717703][ C0] handle_softirqs+0x22a/0x870 [ 256.722493][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 256.727374][ C0] __irq_exit_rcu+0x5f/0x150 [ 256.731988][ C0] irq_exit_rcu+0x9/0x30 [ 256.736254][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 256.741927][ C0] [ 256.744875][ C0] [ 256.747831][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 256.753839][ C0] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 256.759262][ C0] Code: e9 30 ff ff ff e8 75 26 0d 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 f1 a3 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 56 0c 10 0a cc 48 8d 3d 2e 6c 73 [ 256.778901][ C0] RSP: 0018:ffffc9000db67310 EFLAGS: 00000292 [ 256.785002][ C0] RAX: 0cbd54bcb806ac00 RBX: 0000000000000246 RCX: 0000000080000001 [ 256.793000][ C0] RDX: 0000000072a5f24f RSI: ffffffff8e168ad8 RDI: ffffffff8c27c200 [ 256.801004][ C0] RBP: 0000000000000000 R08: ffffffff823c1fa4 R09: ffffffff8e75e520 [ 256.809005][ C0] R10: dffffc0000000000 R11: fffff940003a4d09 R12: 0000000000000002 [ 256.817012][ C0] R13: ffffffff8e75e520 R14: 0000000000000000 R15: 0000000000000000 [ 256.825141][ C0] ? page_table_check_clear+0x144/0x5f0 [ 256.830737][ C0] page_table_check_clear+0x164/0x5f0 [ 256.836143][ C0] ? page_table_check_clear+0x144/0x5f0 [ 256.841715][ C0] ? page_table_check_clear+0x144/0x5f0 [ 256.847288][ C0] ? vm_normal_page+0x10d/0x240 [ 256.852162][ C0] unmap_page_range+0x33b3/0x48f0 [ 256.857259][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 256.862668][ C0] ? mas_find+0xb0e/0xd30 [ 256.867204][ C0] ? unmap_vmas+0x1c4/0x6a0 [ 256.871758][ C0] unmap_vmas+0x48f/0x6a0 [ 256.876173][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 256.881083][ C0] exit_mmap+0x280/0xa10 [ 256.885366][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 256.890185][ C0] ? __pfx_exit_aio+0x10/0x10 [ 256.894921][ C0] ? uprobe_clear_state+0x27c/0x290 [ 256.900161][ C0] __mmput+0x118/0x430 [ 256.904262][ C0] exit_mm+0x168/0x220 [ 256.908363][ C0] do_exit+0x6a2/0x23c0 [ 256.912574][ C0] ? __pfx_do_exit+0x10/0x10 [ 256.917182][ C0] ? cgroup1_freezing+0x20/0x350 [ 256.922146][ C0] ? cgroup1_freezing+0x20/0x350 [ 256.927128][ C0] do_group_exit+0x21b/0x2d0 [ 256.931752][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.937070][ C0] get_signal+0x1284/0x1330 [ 256.941628][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 256.947234][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 256.953434][ C0] exit_to_user_mode_loop+0x86/0x480 [ 256.958747][ C0] ? rcu_is_watching+0x15/0xb0 [ 256.963550][ C0] do_syscall_64+0x32d/0xf80 [ 256.968168][ C0] ? trace_irq_disable+0x3b/0x150 [ 256.973233][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.979322][ C0] ? clear_bhb_loop+0x40/0x90 [ 256.984220][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.990240][ C0] RIP: 0033:0x7f8ccd39c799 [ 256.994684][ C0] Code: Unable to access opcode bytes at 0x7f8ccd39c76f. [ 257.001725][ C0] RSP: 002b:00007f8cce1c90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 257.010179][ C0] RAX: fffffffffffffe00 RBX: 00007f8ccd615fa8 RCX: 00007f8ccd39c799 [ 257.018184][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8ccd615fa8 [ 257.026186][ C0] RBP: 00007f8ccd615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 257.034177][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.042173][ C0] R13: 00007f8ccd616038 R14: 00007fff340f6e20 R15: 00007fff340f6f08 [ 257.050183][ C0] [ 257.053776][ C0] Kernel Offset: disabled [ 257.058109][ C0] Rebooting in 86400 seconds..