last executing test programs: 1.979661871s ago: executing program 3 (id=2167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r2, @ANYBLOB="ad0008ff0a00", @ANYRESHEX=r1, @ANYBLOB="2000128008000100687372001400028008000100", @ANYBLOB="ab2f56fda2c98a3711a6852ebc29676574097197051c7b358c1cf997fda5e1b5d530071adef600c4c7a5115b88eff12049aae62532a4fa2485db01382164a2eb4dcdb0c80c52a65449d363428b6820a9bea4157376289c033fc7a95eb7275e13677fedaa7b2f44aa8585438a97aa66cd9ea3cb7bc971ac3bdc199f7b42ae1fda1c5effcfd0c4b50d06a4533a7dbfd28b51f5959ca3415020", @ANYRESDEC=r1, @ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x20004040) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200002002300, 0x0, 0x0, 0x2000000024be, 0x2000200024ee], 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000008013e6ef61000080000000feffffff010000001f1100006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff0100000000ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRESHEX, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000051872088000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000", @ANYRESHEX=r4, @ANYRESHEX=r1, @ANYRESHEX=r3]}, 0x2da) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) (async) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24048855) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYRES32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbd, &(0x7f0000000580)=""/189, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async, rerun: 32) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x1}, 0x1c) (rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000170800024000000002050007401400000014000000110001"], 0x80}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74}, 0x94) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000815}, 0xd0) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) close(0x4) 1.973376882s ago: executing program 4 (id=2168): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='\a\x00'/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000040000c007020000a8a1694cfb9602293ae990ec0060000000008a0daf8b6b3b8d8872515970eb87b4d439267b81c9bcb68c3ce503061e9b5bd7df8755"], 0x80}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x40) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 1.882921421s ago: executing program 1 (id=2170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0x11, 0x6, 0x32) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x2}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x60008000}, 0x850) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x2}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x60008000}, 0x850) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$kcm(0x2c, 0x3, 0x0) (async) socket$kcm(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000480)={0x8, 0x1, 0x836, 0xfffffff9, 0x7}, 0x14) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000480)={0x8, 0x1, 0x836, 0xfffffff9, 0x7}, 0x14) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000080)=0x10000008, 0x4) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0201"], 0x70}, 0x1, 0x7}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400000000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="fab0817dbcb5f31a2400128011000100620926d6fe026d3db3617665000000000c000580080022"], 0x44}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r8 = socket$kcm(0x2, 0xa, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) 1.842329639s ago: executing program 4 (id=2172): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)={0x128, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x98, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0xffffffffffffffe5}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x7c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x43}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040), 0x4) socket(0x0, 0x1, 0x4) r3 = socket$isdn(0x22, 0x2, 0x26) close(r3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) ioctl$HCIINQUIRY(r4, 0x400448dd, &(0x7f0000000000)={0x2, 0xfffd, "1bfb04", 0x8a}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000380)={0x0, 0x5, 0x3}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000780)={r6, 0x1, 0xd, 0x1}) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000e003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d0"], 0x3c}}, 0x10) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$SIOCX25GCAUSEDIAG(r7, 0x89e6, &(0x7f00000000c0)={0x8, 0x3}) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r7}, 0x8) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x4, 0xe, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xcc58b1925c035368, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.735323478s ago: executing program 3 (id=2174): r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x22020600) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000040)=0xffffff01, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0xffe0}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004894}, 0x0) 1.546392427s ago: executing program 1 (id=2178): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2bc, 0x24, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x9, 0xe}, {0x3, 0xa}, {0xf, 0xf}}, [@TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0xf8, 0x34e2, 0x2, 0x1, 0x8000, 0x80, 0x5}}, {0xe, 0x2, [0xa, 0x81, 0x9, 0x0, 0x7ff]}}, {{0x1c, 0x1, {0x1, 0x6, 0x8d, 0x2, 0x2, 0x1, 0x9, 0x1}}, {0x6, 0x2, [0xd]}}, {{0x1c, 0x1, {0xa, 0x9, 0x2, 0xd56, 0x2, 0x80000000, 0x9, 0x6}}, {0x10, 0x2, [0xf8a3, 0x9, 0x8, 0x3, 0x0, 0x7]}}, {{0x1c, 0x1, {0x5, 0x35, 0xcf, 0x4, 0x1, 0x8, 0x6, 0x2}}, {0x8, 0x2, [0x8000, 0x1]}}, {{0x1c, 0x1, {0x6e, 0x5, 0xe, 0x6, 0x1, 0x2, 0x0, 0x3}}, {0xa, 0x2, [0xfff, 0x9, 0x9]}}, {{0x1c, 0x1, {0x8, 0x8, 0xc, 0x2, 0x1, 0x1000, 0x8, 0x2}}, {0x8, 0x2, [0x9, 0x401]}}]}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0x5, 0xc, 0x1, 0x1, 0x6, 0x7fffffff, 0x2}}, {0x8, 0x2, [0x2, 0x0]}}, {{0x1c, 0x1, {0x6, 0x1, 0x7f, 0xaf, 0x0, 0x6, 0x1a, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x2, 0x10, 0x9335, 0x349c4c20, 0x2, 0x3f, 0x865, 0x4}}, {0xc, 0x2, [0x8, 0x5, 0xc00, 0x1]}}, {{0x1c, 0x1, {0x7, 0x5, 0x1, 0x9c, 0x2, 0xb, 0x8, 0x2}}, {0x8, 0x2, [0x9, 0x5d9]}}, {{0x1c, 0x1, {0x8, 0x9, 0x8, 0x4, 0x1, 0x8, 0x7, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x9, 0x4, 0x8, 0x7, 0x2, 0x7, 0xc, 0x3}}, {0xa, 0x2, [0xf24, 0x6, 0x1000]}}, {{0x1c, 0x1, {0x9, 0x7, 0xc52, 0x4, 0x0, 0xffffffff, 0xfffffff3, 0x9}}, {0x16, 0x2, [0x800, 0x1ff, 0x3, 0x1, 0x7, 0x5, 0xff, 0x7, 0x2]}}, {{0x1c, 0x1, {0x1, 0x8, 0x100, 0xffff, 0x0, 0x7, 0x7f, 0x8}}, {0x14, 0x2, [0x5, 0x7fff, 0x2, 0x6f1, 0x2d9, 0x3ff, 0x8001, 0xb12]}}, {{0x1c, 0x1, {0x9, 0xb, 0x8, 0x0, 0x0, 0x61c, 0x8001, 0x1}}, {0x6, 0x2, [0x794]}}, {{0x1c, 0x1, {0xf7, 0xf, 0x44, 0xfff, 0x2, 0x9, 0xbe3e, 0x5}}, {0xe, 0x2, [0x6, 0xfff9, 0x8, 0xa, 0x9]}}]}, @qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000040)='sit0\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'gre0\x00', r2, 0x8000, 0x8, 0xfffffffc, 0xc, {{0x1f, 0x4, 0x2, 0x6, 0x7c, 0x66, 0x0, 0x3, 0x2f, 0x0, @private=0xa010102, @loopback, {[@ssrr={0x89, 0x7, 0xd, [@empty]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x3d, [@dev={0xac, 0x14, 0x14, 0x22}]}, @lsrr={0x83, 0x2b, 0x97, [@empty, @multicast1, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x12}, @empty, @broadcast, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}, @end, @lsrr={0x83, 0x7, 0xbf, [@broadcast]}, @lsrr={0x83, 0x7, 0xdb, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0x47, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @noop, @timestamp_addr={0x44, 0xc, 0x4d, 0x1, 0xc, [{@broadcast, 0x3}]}]}}}}}) sendto(r0, &(0x7f0000000080)="a8ea66465e3ee07508045a070816a242ab200bb08335a9ef1f1d65967f1f946abb66d1658a47f11eea681cd25370a85b3c73ea638c318b6fcd0975d4e4ac4711e916b358c608c77c8a80d33d2ec09a07d36ee44e1f76ac8ec73917204508538e2348e44ab1ba86c77e4ea2b5e3adf0de8bcb72fe5f643c26bcf1cf3889f7e86622c31884da81b8", 0x87, 0x40400c0, &(0x7f0000000240)=@ll={0x11, 0x15, r4, 0x1, 0x8, 0x6, @random="6ff10320acbc"}, 0x80) 1.422360469s ago: executing program 1 (id=2179): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000d600"/32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0xa, 0x3, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001400bd7f4366c07a2cbfb7eb01"], 0x14}}, 0x0) 1.372467161s ago: executing program 4 (id=2180): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv6_delroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x2, 0xc8, 0x0, 0x1500}, [@RTA_PRIORITY={0x8, 0x1e, 0x2}]}, 0x24}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x13}, 0x94) 1.318493618s ago: executing program 3 (id=2182): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) shutdown(r3, 0x1) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x5}], 0x1}, 0x969cff6ec7b6e2e) (async) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x5}], 0x1}, 0x969cff6ec7b6e2e) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x1, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x1, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, 0x0, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f00000004c0), 0x48, 0x820b, 0x0) (async) recvmmsg(r4, &(0x7f00000004c0), 0x48, 0x820b, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8c002120}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r5, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x14084801}, 0x840) setsockopt$inet6_int(r4, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]}, 0x1ab) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad560bc2a071b5c4ccde3292e854c7beef915d564c90c200", 0x55) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad560bc2a071b5c4ccde3292e854c7beef915d564c90c200", 0x55) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x48, 0x140f, 0x800, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x48, 0x140f, 0x800, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4) 1.230854315s ago: executing program 3 (id=2185): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001d00128009000100626f6e640000000014000280050001000300000008001500ff000000"], 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x40, r5, 0x6, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x3a}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfffffff6}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x24000041) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd4, r2, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x8}, @ETHTOOL_A_COALESCE_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x9}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x3ff}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xb}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4805}, 0x44) 1.066677942s ago: executing program 2 (id=2187): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 939.516893ms ago: executing program 2 (id=2189): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8936, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0xcb, 0x4, 0x8}, 0x50) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x41}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x400c000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) 890.21726ms ago: executing program 1 (id=2190): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket$netlink(0x10, 0x3, 0xc) r1 = socket(0x840000000002, 0x3, 0x7c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x7, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="700e0000", @ANYRES16=r6, @ANYBLOB="010027bd7000fddbdf258100000008000300", @ANYRES32=r7, @ANYBLOB="06006600090000000a000600ffffffffffff00003e003300100c070008021100000008021100000050505050505012009042520001002d1a0c201008000000000000000700da0010000000010006000000050000"], 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x24000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8200, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0xffff, 0xd}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@deltclass={0x24, 0x29, 0x800, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0xc, 0x5}, {0x10, 0x3}, {0x9, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x220008e8}, 0x20004884) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r14, @ANYBLOB="0c00990000000200000000000800a000940900000800260094090000080027"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88020000", @ANYRES16=r6, @ANYBLOB="20002bbd7000ffdbdf254400000008000300", @ANYRES32=r14, @ANYBLOB="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"], 0x288}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r15, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @remote}) r16 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000680), r16) 756.3999ms ago: executing program 2 (id=2192): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x6, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000080)='GPL\x00', 0x4, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2c, 0x6, 0x100) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e24, @loopback}}) r1 = socket(0x400000000010, 0x4, 0x5) connect$inet6(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) accept$inet(r2, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[], 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010b02400010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a0102000000000000000073797a310000000058000000060a010400000000000000000100000008000b4000030000300004802c000180090001007866726d000000000000000000080002400000000208000440000000020900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}}, 0x40080) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x52c02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000040)=0x800, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000000)={0x3d, 0x0}, 0x10) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000340)=@rose={'rose', 0x0}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[], 0x544}, 0x1, 0x0, 0x0, 0x2000c080}, 0x24000091) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='*\x00\x00\x00', @ANYBLOB="814e0ecb382ef6bcd32046116c0d6298a3155981c22fa5b260bbc441964bd0bb5e83ec1dbd3636ee827b80738db5275112c09915e507998844511bc76de193f5bb7a563ff22277af969b23014c8e0d9c76db678f46fbc99891eab2a36b17bd68c4267802177b48cb5181ad16d609e43dc471bebccab8", @ANYRES32, @ANYRES8], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000840) 719.449262ms ago: executing program 0 (id=2193): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8004800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a0002000000836b00000000ac"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1, 0x400}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x4) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1, 0x400}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x4) 614.99923ms ago: executing program 0 (id=2194): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000000, 0x0, 0xff, 0x1, 0xffff}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x100}, 0x1, 0x0, 0x0, 0x24040800}, 0x8081) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(r2, 0xffff, &(0x7f0000000100)="7a76d95cdde75a5ef3bf2a9e9aaaf80dfb7a78bafd43913ba76bef8ba399258dfdc20b7d6732b99ee0c5fd9f25c978c96bfa81af118d83458a957179b52dd59b622ee326a839df689e2ee9c27e931e8fe93e644956ef265157ca08c442c7559c8b58d2107f03771e821912dcfe0378e7a67f00ddf740dd9b51") 612.9731ms ago: executing program 1 (id=2195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x2, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_PROTOINFO={0x44, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x40, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x6}, @CTA_PROTOINFO_DCCP_STATE={0x5}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008850) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073ae16a7bfb2320d0000010073797a310000000028000480080002401886c3010800014000000005140003006d61637674617030000000000000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 611.65771ms ago: executing program 2 (id=2196): r0 = socket(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0xba, 0xce02cd}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x9, 0x81, 0xffffffff, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) close(r4) 594.623559ms ago: executing program 0 (id=2197): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0x3a, [@func={0x5, 0x0, 0x0, 0xc, 0x2}, @enum64={0x10, 0x3, 0x0, 0x13, 0x0, 0x0, [{0x7, 0x8000, 0x6}, {0x10, 0x3, 0x3ff}, {0x5, 0x8, 0x3}]}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x2, 0x9}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x51, 0x0, 0x7c, 0x7}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x7, 0x4}, {0x2}, {0xa, 0x5}, {0x1, 0x5}, {0x10, 0x2}, {0xd, 0x2}, {0x2, 0x3}, {0x3, 0x3}]}, @restrict={0x6, 0x0, 0x0, 0xb, 0x4}, @enum64={0x2, 0x4, 0x0, 0x13, 0x0, 0x1, [{0x8006, 0x7, 0x4}, {0xb, 0xda, 0x5}, {0x9, 0x0, 0x1ff}, {0x4, 0x83, 0x2}]}, @volatile={0xf, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x30, 0x61, 0x2e, 0x61]}}, &(0x7f00000002c0)=""/44, 0x11a, 0x2c, 0x0, 0xffff09f9, 0x10000}, 0x28) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000012c0)={{0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x100, &(0x7f0000000700)={@align=0xc0d, {0x6, 0x9, 0x7fffffff, 0x4}}, 0x8003, &(0x7f0000000740), &(0x7f0000000780)=0x1}, 0xa, &(0x7f0000001180)=[{0x3, 0x3, &(0x7f00000007c0)='GPL\x00', &(0x7f0000000800)="3146c48ea8c3c8cad06c9b8db9db579739ff1bc7c8ef8e0dfa2f0df2ea5af7", 0x1f, 0xc}, {0x2, 0x101, &(0x7f0000000840)='#}\x00', &(0x7f0000000880)="79eb44595b9760499bfcb245c68d58a1efc99e96d4a4d9ea5c01f6a37710fde0dfc8c87dfc73c364a3dea3655ad76534a9585bab026df3a746ef39af3efc084fd336991f06a7198feccbef7f47b30c33b6bbdc4895fd4d0b554378495559001936a3ec6d85e5d4a5f3abfc70fe104e396bfb001bff93dd322e", 0x79, 0x10}, {0x2, 0x7, &(0x7f0000000900)='\xd5-)-%%(\x00', &(0x7f0000000940)="7a30e12da11ab97b0df4a7618ca221e77a1ca325e96320634833c0506954f1f16403862895366b15cdaacbfb60e166a36dae01a858bdddf28519a093dbb0d58486ac2a96a640b52378e2f7cc32e26e17b34d4ab13951efff2425ae1436bfb33942715b26894b1235a30a1dd22327180840bd9b92eb7c70e9fe8ba91d27e19e4f5651f48f6423debdc512fd32560594b6eea50b9263f441", 0x97, 0x20}, {0x3, 0xc, &(0x7f0000000a00)='!%\x00', &(0x7f0000000a40)="98244e5f0707a6871de3542a1197d78ba99dc8180711b63ae904d36aa4925a3f7fbc98e9", 0x24, 0x10}, {0x3, 0x4, &(0x7f0000000a80)='\x00', &(0x7f0000000b00)="ff763a55d1f2ee82fff1e5a0bbc4d58849bd1e9731d3a76ec71276af5c819e31fcc65338a3c20d1e36840b8828b83d7a59b85a8d872d6c4c34c82948109a3e601216edb9b07996aa49931a0fe112d74de83783854cd9125354ed67e5c8fd59c45eee970f023d6872d8cd7b0dc45fcd61f112f8db13b612604bf141e231d3cf927c", 0x81, 0x10}, {0x3, 0x7f, &(0x7f0000000bc0)='.\x00', &(0x7f0000000c00)="ceca96c1f96f5a44f5f31c6477bd7a12a6d0d2e850b38201f2c9f5d4ddede301ba4880c173d98bc62b7f9542ff9b2ed3b9e2f0a6509623751e6144c20bc4b50585c9710fab60feaa1e971bc334f3da15d3ff6d016cf7aa7710124f397dc2ff3d5cac7263ded93890b4b2be80c9ccf9bd3bcab814df69a8004629478887adcacb94ef33ab11084ed29e161eb0687693dc4cf84a54502c9aa1fad7a2720fbe0e3a3518e8ba562e9d864281e956ad6b27ba1126997dd4a8fc8f32a8dd9415d82b5d3126c34b51c35223b7da7fd62726a86e02e37b1ace566499f46f1632bad5e3a3bafb1c287ddbda559973847d359e8d7dee162a46523717c5", 0xf8, 0x20}, {0x1, 0x69, &(0x7f0000001640)='\x9f\xf0\xf2\x1a\xfer\xb8a\xca\xa4\x86\xebS\x90\x96\xd6\x17m\x1fn\xd1\xc9\x0fI\xa1\xa9L\x0f+\xa8\xd9\xbb\xe7\x16\xaf(\xde\x9d,\x7f6\xea\"\x14\xe8W\xaa%/)\x05\xc1\xa9%v\x80\x86\xf4 \f\xec\x0ex^Uk\'\xf1:\x8d\xa7\xe5\xc45\x80\xbf<\x8acA\xee\xf1\xad\xe7\xc3dKi\xd1>\x94f\x847\xa6\x92b\xac\x82`\xe5&f\n\xd2\xce\xac\xa4\xe5D\x7f\x13\xbeF\x8dY\xacK<\r3\xfc\x03\xd5c\x8d0\xa4\xa5\x8c>\xd6\xb1O\xa6\xd0\xaf\xc6\x06.KS\x86\xdf\xa4\xe7\xbe\\i\xeb\x8a\x9e\xb3\x9f\xda\x18\xe0\xd2\x91~$nt\xd4ry\xa6\x01\xbd\xd4\xc3-\x1a\xc1\xf9\x12;\x8e\x18\x9f\xac\x95N\x18\xf8\x9b9\xba\xe4\xc9a\xaf\xabf\xc2\x7f\xacix\xbd\xf1d!\x9d\x85,\xa4\x97\xee\xb9\xfe\xc4\xcc\xafo', &(0x7f0000000d40)="a0314c6c81d1b072feb1743fb555f638de9f2fe06c3cb8863a2e92f1856bdb130572a017b5ee7f955f89533bbffd6284492c0a636391df29bdbc75436855cd33b0a549ee0f66a5ef7067ac7d386f69432a444d978052850ec27cec6644429ff75eef64b93e92b318aed6ef826b49c2004d1f86eac0625c61e3d58bffab0c16a1184db9f2b0d1b937a3543c737780b64ca049599718373655a772ca8779d08398d81d43d1e28721d90c0f414e0c527d96edbbe4b13ffcb9ff522bec2c13d840d90b67ae4323d565f73492b026fbb1ea81d355a63626c584b24a2eb2f73a28caf535467a9316e33a4d22dffa6143db4a8b374af8de", 0xf4, 0x32}, {0x3, 0x2d, &(0x7f0000000e40)='-)\x00', &(0x7f0000000e80)="99b0a35335eadb5c739115859635d0e8c3c55bbc0cd43d36d9ae5ed9d9547d709f37badc96f0fcdc4cb344622baf866a174542b0356bedc9af823f31b59be641c0380b9816e4273e3ed0e8a984e1de30285007", 0x53, 0x2a}, {0x3, 0xf, &(0x7f0000000f00)='GPL\x00', &(0x7f0000000f40)="ec2d5a06d8f3e8db3828cf16df74f92b568faaf1c85707faf3414db009dc1411acf8a1df56ee9b1110017e4e646d0d777cf38f6fabaa2660ff74c911723ab32e06902854a14d028f9e23964e13418096fd7a03037d77149a7da81d113ce57b40b3fb6d80417cd6908b5000f652666c3dde67a68c70d9b979376b01f3fa3a2d73f90f7711fd3e52212646e1194f8f0dbe737eb1ba55feb1e151075177212ea89d76f08db9072dc0a388e49c56b3ba1facbf72ccbcfb722bd321fba8b84d064c618a799a534dbede4c3dd933ff03d42c72efea2670c7246e81425a3ae3e181d76f9b60f53ee22ada9c97b670ea3846c4947af656", 0xf3, 0x2a}, {0x2, 0x10, &(0x7f0000001040)='\x00', &(0x7f0000001080)="5617c34e375130065b7fbb28630892fb7f1b5974d5406a5d8477f5577494633107635b4355e053b0f8dc3ec8264c09300b3e459b2d91a9c1751730f824749162f10c292d4dad9bb5c5af9bcc333068b7b1a758baeb8c1a34f5be5b957c9477ea5114f30c044f600fe8d81496384ec40041b39cb228c5ccb501efaedeeb6d70b20fca3cea6b66fa6620ed81fed23194d975e64d0625ac933c8925ccc864ce62fba2d7e7ba24fbcb52dad29c2d4d358ffac0ee9bf6d46eae6b87e00245e48c8237dee53658b16a5872850811a5", 0xcc}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r4}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000000000000000000000000000fe8000000000000000000000000000aa00000000000790"], 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0xffc5) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000000)={r9, 0x10001}, 0x8) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001400)=@bpf_tracing={0x1a, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f0000000340)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x0, 0x7, 0xba8}, 0x10, 0x178a, r3, 0x5, &(0x7f0000001340)=[r6, 0xffffffffffffffff], &(0x7f0000001380)=[{0x3, 0x3, 0x3, 0x8}, {0x3, 0x3, 0x8, 0x8}, {0x3, 0x2, 0x1, 0xb}, {0x1, 0x3, 0x5, 0x6}, {0x3, 0x4, 0x0, 0x3}], 0x10, 0xebb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x2, 0x0, &(0x7f0000000000)="259a", 0x0, 0xf11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) ioctl$SIOCSIFHWADDR(r0, 0x8b36, &(0x7f0000000240)={'wlan1\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r12, 0x84, 0x23, &(0x7f0000000100)={r14, 0xa11c}, 0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f00000014c0)="5768302557645b2ec840082644fd3d2e6b24810341e5b971cfcdd77aacd06a20258537596579e606dc4a5423b8d336e72db45452018d9373df45d8c4955a09941fbabe3f9a3577d3d3a58e18b37022435be09abdca10bb793dda45b9f995662b014968abc33c939b973cae0c7bb63b393479b683b462f09d075b9ec4efc1af3411d3de1da7e10fe1cf05562ec27e05730fcd1489365ceeac16"}, 0x20) sendmsg$IPSET_CMD_GET_BYNAME(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000010e0603000000000000000000010000090500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7b4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c010105fb7000"}, 0xd8) 476.056285ms ago: executing program 0 (id=2198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd700005000000020000000900010073797a3000000000140002"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000040)={0x80000000}, 0x4) 419.324132ms ago: executing program 1 (id=2199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) r2 = socket(0x14, 0x2, 0x4) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0xa8, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x0, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x0, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_ID={0x0, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x0, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x0, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x0, 0x2, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x0, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x0, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x0, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0xfcc9, 0x4, 0x101}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040c1}, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000440)={0x0, 0xfffffffffffffe59, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x4008040) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001e00010000000000e0ffffff0100000003000007000000000800080000000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 414.111841ms ago: executing program 4 (id=2200): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x5e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r1) sendmsg$alg(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000880)="99", 0x1}], 0x1, 0x0, 0x0, 0x8890}, 0x1) 395.551894ms ago: executing program 2 (id=2201): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00000000fedba30be698000070f4baeb9da1f06873db2ba326856f59ed4ecc958a687b63791b10916bc26dd7d7ec4665a0ce1b05788f06b80c9ddd1c6ec3389080e2e460cc27c713cb0eb6d1f2c206b4591d54a551ddf8b61e2134a1f4f7da03e4ca49de2e50e80dbb7dc9628f9ebe9c38412f40b80a", @ANYRES32=0x0, @ANYBLOB="a4840000003f00002c003480140035007465616d300000000000000000000000140035006970365f767469300000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'pim6reg0\x00'}) 279.535159ms ago: executing program 3 (id=2202): r0 = socket(0x80000000000000a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000001c0)={'veth1_macvtap\x00', 0x400}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) close(0x3) 279.165476ms ago: executing program 0 (id=2203): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r2, @ANYBLOB="0600150008000000100016800c00010000a4"], 0x3c}}, 0x0) 223.688345ms ago: executing program 4 (id=2204): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000300)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x99}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @jmp={0x5, 0x0, 0x6, 0xb, 0xa, 0x4, 0x10}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, r0, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r1 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e, 0x0) r2 = socket(0x2d, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000300)={0x2d, 0xfffffffe, 0x1bffe}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000140)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000002000010300000000fbdbdf25022000000000000000000000080001000000000008001b"], 0x2c}}, 0x0) sendmsg$unix(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000001c0)="b9f4727cd4323635c4a9b43a161bc352f01e6ea308f5f792340760f39edfb3721e28bed8102683ebdc7ad6d55facdee0c237ee013033b384276aef3c67827271cbe8a90180b616cda5f0b8be13c1d2085dc764a2039fe9016cb42d6ea94a3ed16ffb274e9e07dbd3de956dacbd8fbfa486e3ca23d58ae3af6cde106f4388bdef273796151ce3081e5e3b84efdeccec115ac9203ed69b731840bef2cf42a038320a", 0xa1}, {&(0x7f0000000500)="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", 0x1000}], 0x2, 0x0, 0x0, 0x20000800}, 0x40000) 207.934053ms ago: executing program 2 (id=2205): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x1) r1 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) r2 = getpid() sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@dellink={0x148, 0x11, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20005, 0x20}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}, @IFLA_MTU={0x8, 0x4, 0x1f}, @IFLA_LINKMODE={0x5, 0x11, 0xa4}, @IFLA_AF_SPEC={0x108, 0x1a, 0x0, 0x1, [@AF_INET6={0x60, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x61}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2e}}]}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x5}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x48, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x4040) 46.492105ms ago: executing program 0 (id=2206): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0xfcbe}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x40010) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000070000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x9b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r4) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000000c0)={0x6, 0x6f39, 0xfffffffa, 0x4}, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r5, 0x111, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xd5, 0xb, 0x9}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x6, 0x136, 0x0, 0x0, @str='\x84;'}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet(0x2, 0x2, 0x1) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0xfcbe}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x40010) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000070000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x9b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r4) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000000c0)={0x6, 0x6f39, 0xfffffffa, 0x4}, 0x10) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r5, 0x111, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xd5, 0xb, 0x9}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x6, 0x136, 0x0, 0x0, @str='\x84;'}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) 11.999114ms ago: executing program 3 (id=2207): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=2208): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000}, 0x48) kernel console output (not intermixed with test programs): s `syz.3.355'. [ 108.264869][ T7387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.518823][ T7428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.362'. [ 108.605248][ T7429] netlink: 64 bytes leftover after parsing attributes in process `syz.4.362'. [ 108.898522][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.370'. [ 109.376345][ T7463] bridge_slave_0: left allmulticast mode [ 109.382641][ T7463] bridge_slave_0: left promiscuous mode [ 109.388506][ T7463] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.408053][ T7463] bridge_slave_1: left allmulticast mode [ 109.414373][ T7463] bridge_slave_1: left promiscuous mode [ 109.420239][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.440607][ T7463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.452020][ T7463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.461917][ T7463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.472824][ T7463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.486313][ T7463] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.603726][ T7485] netlink: 'syz.2.379': attribute type 1 has an invalid length. [ 109.639089][ T7485] netlink: 'syz.2.379': attribute type 1 has an invalid length. [ 109.659598][ T7485] netlink: 'syz.2.379': attribute type 1 has an invalid length. [ 109.706988][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.382'. [ 109.801674][ T7496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.383'. [ 109.916993][ T7503] netlink: 'syz.4.385': attribute type 21 has an invalid length. [ 109.941841][ T7503] netlink: 132 bytes leftover after parsing attributes in process `syz.4.385'. [ 110.052905][ T7505] syzkaller0: entered promiscuous mode [ 110.058388][ T7505] syzkaller0: entered allmulticast mode [ 110.073450][ T7509] syzkaller0: entered promiscuous mode [ 110.078982][ T7509] syzkaller0: entered allmulticast mode [ 110.088566][ T7509] tc action pedit offset must be on 32 bit boundaries [ 110.308983][ T7523] Cannot find add_set index 2 as target [ 110.743343][ T7551] netlink: 'syz.0.400': attribute type 10 has an invalid length. [ 110.762166][ T7551] netlink: 40 bytes leftover after parsing attributes in process `syz.0.400'. [ 110.780228][ T7551] dummy0: entered promiscuous mode [ 110.789019][ T7551] bridge0: port 3(dummy0) entered blocking state [ 110.795811][ T7551] bridge0: port 3(dummy0) entered disabled state [ 110.802490][ T7551] dummy0: entered allmulticast mode [ 110.811721][ T7551] bridge0: port 3(dummy0) entered blocking state [ 110.818209][ T7551] bridge0: port 3(dummy0) entered forwarding state [ 110.836740][ T7549] tipc: Started in network mode [ 110.849528][ T7549] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 110.869985][ T7549] tipc: Enabled bearer , priority 24 [ 111.049387][ T7555] bond2: option miimon: invalid value (18446744073709551585) [ 111.056987][ T7555] bond2: option miimon: allowed values 0 - 2147483647 [ 111.071299][ T7555] bond2 (unregistering): Released all slaves [ 111.436545][ T7579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.410'. [ 111.469480][ T7579] netlink: 13 bytes leftover after parsing attributes in process `syz.4.410'. [ 111.635317][ T7579] veth3: entered promiscuous mode [ 111.669514][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'. [ 111.700485][ T7582] veth0: Caught tx_queue_len zero misconfig [ 112.001530][ T9] tipc: Node number set to 10005162 [ 112.299891][ T7620] tunl0: entered promiscuous mode [ 112.310269][ T7620] netlink: 'syz.4.425': attribute type 3 has an invalid length. [ 112.945128][ T7654] tipc: Started in network mode [ 112.950927][ T7654] tipc: Node identity 9a762f020fa8, cluster identity 4711 [ 112.958323][ T7654] tipc: Enabled bearer , priority 11 [ 113.020103][ T7657] tipc: Enabling of bearer rejected, already enabled [ 113.221521][ T7674] netlink: 'syz.2.443': attribute type 8 has an invalid length. [ 113.623492][ T7699] __nla_validate_parse: 9 callbacks suppressed [ 113.623511][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'. [ 113.653218][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'. [ 113.664534][ T7699] netlink: 'syz.4.450': attribute type 19 has an invalid length. [ 113.673131][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 113.695680][ T7290] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.715526][ T7290] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.724982][ T7290] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.738916][ T7290] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.789183][ T7707] netlink: 'syz.4.452': attribute type 2 has an invalid length. [ 113.811484][ T7708] netlink: 'syz.4.452': attribute type 2 has an invalid length. [ 113.856905][ T7707] h: entered promiscuous mode [ 113.919078][ T7716] netlink: 'syz.4.455': attribute type 1 has an invalid length. [ 113.929623][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.455'. [ 114.001548][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'. [ 114.073361][ T42] tipc: Node number set to 2514366210 [ 114.312094][ T7734] netlink: 64 bytes leftover after parsing attributes in process `syz.4.459'. [ 114.426949][ T7738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.833195][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.839581][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.263432][ T7777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'. [ 136.284341][ T7778] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.291180][ T7777] netlink: 44 bytes leftover after parsing attributes in process `syz.2.473'. [ 136.301461][ T7778] team0: Cannot enslave team device to itself [ 136.310892][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'. [ 136.543757][ T7789] lo speed is unknown, defaulting to 1000 [ 136.562881][ T7789] lo speed is unknown, defaulting to 1000 [ 136.583912][ T7789] lo speed is unknown, defaulting to 1000 [ 136.606334][ T7789] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 136.658636][ T7789] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 136.701775][ T7795] netlink: 'syz.1.480': attribute type 2 has an invalid length. [ 136.701806][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 136.733142][ T7796] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 136.739335][ T7795] netlink: 244 bytes leftover after parsing attributes in process `syz.1.480'. [ 136.751072][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 136.753761][ T7789] lo speed is unknown, defaulting to 1000 [ 136.777698][ T7789] lo speed is unknown, defaulting to 1000 [ 136.784994][ T7789] lo speed is unknown, defaulting to 1000 [ 136.792764][ T7789] lo speed is unknown, defaulting to 1000 [ 136.799760][ T7789] lo speed is unknown, defaulting to 1000 [ 136.950484][ T7806] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 136.965248][ T7806] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 136.973293][ T7806] gretap1: entered promiscuous mode [ 136.978643][ T7806] gretap1: entered allmulticast mode [ 137.302096][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'. [ 137.481086][ T7839] netlink: 64 bytes leftover after parsing attributes in process `syz.2.495'. [ 137.499434][ T7839] netlink: 'syz.2.495': attribute type 1 has an invalid length. [ 137.517412][ T7839] netlink: 228 bytes leftover after parsing attributes in process `syz.2.495'. [ 137.548933][ T7843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.496'. [ 137.650361][ T7847] netlink: 'syz.0.497': attribute type 29 has an invalid length. [ 137.678749][ T7847] netlink: 'syz.0.497': attribute type 29 has an invalid length. [ 137.714386][ T7841] "syz.3.496" (7841) uses obsolete ecb(arc4) skcipher [ 137.723636][ T7847] netlink: 'syz.0.497': attribute type 32 has an invalid length. [ 137.767559][ T7847] netlink: 'syz.0.497': attribute type 29 has an invalid length. [ 137.943465][ T7864] : entered promiscuous mode [ 138.206868][ T7876] netlink: 'syz.1.504': attribute type 21 has an invalid length. [ 138.222497][ T7876] netlink: 'syz.1.504': attribute type 6 has an invalid length. [ 138.440253][ T7884] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 139.081962][ T7944] netlink: 'syz.4.526': attribute type 1 has an invalid length. [ 139.168668][ T7944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.295316][ T7958] netlink: zone id is out of range [ 139.300721][ T7958] netlink: zone id is out of range [ 139.315083][ T7958] netlink: zone id is out of range [ 139.323791][ T7958] netlink: zone id is out of range [ 139.334629][ T7958] netlink: zone id is out of range [ 139.344797][ T7958] netlink: zone id is out of range [ 139.368785][ T7958] netlink: zone id is out of range [ 139.379093][ T7958] netlink: zone id is out of range [ 139.392442][ T7958] netlink: zone id is out of range [ 139.399695][ T7962] netlink: 'syz.1.528': attribute type 10 has an invalid length. [ 139.402570][ T7958] netlink: zone id is out of range [ 139.429016][ T7962] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.436900][ T7962] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.526213][ T7962] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.533445][ T7962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.541004][ T7962] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.548176][ T7962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.572243][ T7962] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 140.002443][ T7989] syzkaller0: entered promiscuous mode [ 140.007953][ T7989] syzkaller0: entered allmulticast mode [ 141.069835][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 141.280386][ T8023] __nla_validate_parse: 12 callbacks suppressed [ 141.280405][ T8023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.548'. [ 141.352156][ T8024] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.547'. [ 141.362702][ T8036] netlink: 44 bytes leftover after parsing attributes in process `syz.2.548'. [ 141.379460][ T8024] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.547'. [ 141.392513][ T8024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.547'. [ 141.434326][ T8024] netlink: 36 bytes leftover after parsing attributes in process `syz.3.547'. [ 141.451143][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'. [ 141.485166][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'. [ 141.763036][ T8056] : renamed from hsr0 (while UP) [ 141.792705][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.558'. [ 141.903136][ T8073] bridge2: entered promiscuous mode [ 141.908394][ T8073] bridge2: entered allmulticast mode [ 141.926649][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 141.990714][ T8071] bond3: option resend_igmp: invalid value (32767) [ 141.997249][ T8071] bond3: option resend_igmp: allowed values 0 - 255 [ 142.005786][ T8071] bond3 (unregistering): Released all slaves [ 142.370585][ T8091] xt_connbytes: Forcing CT accounting to be enabled [ 142.414730][ T8097] Cannot find add_set index 0 as target [ 142.496170][ T8104] syzkaller0: entered allmulticast mode [ 142.691321][ T8116] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 142.807774][ T8122] bond3: Unable to set up delay as MII monitoring is disabled [ 142.816796][ T8122] bond3 (unregistering): Released all slaves [ 142.836411][ T8123] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 142.847986][ T8126] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 142.866234][ T29] audit: type=1800 audit(1774038285.492:2): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.574" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 142.887595][ T8126] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 142.900932][ T8126] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 142.941063][ T8126] syz.3.574 (8126) used greatest stack depth: 17696 bytes left [ 143.541087][ T8159] veth0_virt_wifi: entered promiscuous mode [ 143.553195][ T8165] netlink: 'syz.1.582': attribute type 1 has an invalid length. [ 143.725946][ T8165] bond2: entered promiscuous mode [ 143.740377][ T8165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.955355][ T8181] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 144.698113][ T8219] bond3: entered allmulticast mode [ 144.704653][ T8219] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.849496][ T8229] FAULT_INJECTION: forcing a failure. [ 144.849496][ T8229] name failslab, interval 1, probability 0, space 0, times 1 [ 144.863006][ T8229] CPU: 1 UID: 0 PID: 8229 Comm: syz.3.600 Not tainted syzkaller #0 PREEMPT(full) [ 144.863032][ T8229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.863049][ T8229] Call Trace: [ 144.863057][ T8229] [ 144.863065][ T8229] dump_stack_lvl+0xe8/0x150 [ 144.863095][ T8229] should_fail_ex+0x412/0x560 [ 144.863126][ T8229] should_failslab+0xa8/0x100 [ 144.863156][ T8229] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 144.863177][ T8229] ? __alloc_skb+0x186/0x7d0 [ 144.863194][ T8229] ? __alloc_skb+0x1d0/0x7d0 [ 144.863210][ T8229] ? __local_bh_enable_ip+0xd0/0x130 [ 144.863238][ T8229] __alloc_skb+0x1d0/0x7d0 [ 144.863261][ T8229] netlink_sendmsg+0x5d4/0xb40 [ 144.863299][ T8229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.863329][ T8229] ? aa_sock_msg_perm+0xf1/0x1b0 [ 144.863357][ T8229] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 144.863381][ T8229] ____sys_sendmsg+0x972/0x9f0 [ 144.863411][ T8229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.863440][ T8229] ? import_iovec+0x73/0xa0 [ 144.863462][ T8229] ___sys_sendmsg+0x2a5/0x360 [ 144.863488][ T8229] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.863542][ T8229] ? __fget_files+0x2a/0x420 [ 144.863568][ T8229] ? __fget_files+0x3a0/0x420 [ 144.863610][ T8229] __x64_sys_sendmsg+0x1bd/0x2a0 [ 144.863634][ T8229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.863664][ T8229] ? __pfx_ksys_write+0x10/0x10 [ 144.863684][ T8229] ? handle_softirqs+0x73c/0x870 [ 144.863716][ T8229] do_syscall_64+0x14d/0xf80 [ 144.863737][ T8229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.863755][ T8229] ? clear_bhb_loop+0x40/0x90 [ 144.863778][ T8229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.863796][ T8229] RIP: 0033:0x7f425899c799 [ 144.863818][ T8229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.863833][ T8229] RSP: 002b:00007f4256bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.863859][ T8229] RAX: ffffffffffffffda RBX: 00007f4258c15fa0 RCX: 00007f425899c799 [ 144.863872][ T8229] RDX: cfb4854c0caad94c RSI: 00002000000001c0 RDI: 0000000000000003 [ 144.863884][ T8229] RBP: 00007f4256bee090 R08: 0000000000000000 R09: 0000000000000000 [ 144.863895][ T8229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.863906][ T8229] R13: 00007f4258c16038 R14: 00007f4258c15fa0 R15: 00007fffc8c3e038 [ 144.863936][ T8229] [ 146.292751][ T8274] netlink: 'syz.3.612': attribute type 32 has an invalid length. [ 146.319684][ T8274] __nla_validate_parse: 16 callbacks suppressed [ 146.319704][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.612'. [ 146.373449][ T8286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.612'. [ 146.434242][ T8274] bond1: Setting coupled_control to off (0) [ 146.618092][ T5824] IPVS: starting estimator thread 0... [ 146.710754][ T8308] net_ratelimit: 53 callbacks suppressed [ 146.710785][ T8308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.739415][ T8299] IPVS: using max 37 ests per chain, 88800 per kthread [ 146.783328][ T8313] netlink: 'syz.1.622': attribute type 10 has an invalid length. [ 146.804083][ T8313] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.811395][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.941601][ T8322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.626'. [ 146.951926][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'. [ 147.081030][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 147.357827][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 147.416940][ T8329] bridge2: port 1(veth3) entered blocking state [ 147.423813][ T8329] bridge2: port 1(veth3) entered disabled state [ 147.430727][ T8329] veth3: entered allmulticast mode [ 147.435402][ T8332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.628'. [ 147.450804][ T8334] netlink: 'syz.4.629': attribute type 5 has an invalid length. [ 147.460620][ T8329] veth3: entered promiscuous mode [ 147.938153][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 147.939922][ T8370] FAULT_INJECTION: forcing a failure. [ 147.939922][ T8370] name failslab, interval 1, probability 0, space 0, times 0 [ 147.969648][ T8370] CPU: 0 UID: 0 PID: 8370 Comm: syz.2.638 Not tainted syzkaller #0 PREEMPT(full) [ 147.969673][ T8370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.969684][ T8370] Call Trace: [ 147.969691][ T8370] [ 147.969700][ T8370] dump_stack_lvl+0xe8/0x150 [ 147.969731][ T8370] should_fail_ex+0x412/0x560 [ 147.969764][ T8370] should_failslab+0xa8/0x100 [ 147.969790][ T8370] __kmalloc_noprof+0xe8/0x760 [ 147.969812][ T8370] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 147.969841][ T8370] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 147.969872][ T8370] genl_family_rcv_msg_doit+0xd9/0x330 [ 147.969901][ T8370] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 147.969931][ T8370] ? apparmor_capable+0x126/0x170 [ 147.969953][ T8370] ? bpf_lsm_capable+0x9/0x20 [ 147.969977][ T8370] ? security_capable+0x7e/0x2c0 [ 147.970007][ T8370] genl_rcv_msg+0x61c/0x7a0 [ 147.970034][ T8370] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.970057][ T8370] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 147.970077][ T8370] ? __pfx_nl80211_tdls_oper+0x10/0x10 [ 147.970093][ T8370] ? __pfx_nl80211_post_doit+0x10/0x10 [ 147.970115][ T8370] ? __lock_acquire+0x6b5/0x2cf0 [ 147.970149][ T8370] netlink_rcv_skb+0x232/0x4b0 [ 147.970186][ T8370] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.970208][ T8370] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.970251][ T8370] ? down_read+0x272/0x2e0 [ 147.970269][ T8370] ? genl_rcv+0xd/0x40 [ 147.970287][ T8370] genl_rcv+0x28/0x40 [ 147.970305][ T8370] netlink_unicast+0x80f/0x9b0 [ 147.970334][ T8370] ? __pfx_netlink_unicast+0x10/0x10 [ 147.970358][ T8370] ? netlink_sendmsg+0x650/0xb40 [ 147.970389][ T8370] netlink_sendmsg+0x813/0xb40 [ 147.970428][ T8370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.970455][ T8370] ? aa_sock_msg_perm+0xf1/0x1b0 [ 147.970481][ T8370] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.970504][ T8370] ____sys_sendmsg+0x972/0x9f0 [ 147.970534][ T8370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.970561][ T8370] ? import_iovec+0x73/0xa0 [ 147.970583][ T8370] ___sys_sendmsg+0x2a5/0x360 [ 147.970608][ T8370] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.970661][ T8370] ? __fget_files+0x2a/0x420 [ 147.970686][ T8370] ? __fget_files+0x3a0/0x420 [ 147.970721][ T8370] __x64_sys_sendmsg+0x1bd/0x2a0 [ 147.970744][ T8370] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.970774][ T8370] ? __pfx_ksys_write+0x10/0x10 [ 147.970805][ T8370] do_syscall_64+0x14d/0xf80 [ 147.970825][ T8370] ? trace_irq_disable+0x3b/0x150 [ 147.970850][ T8370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.970865][ T8370] ? clear_bhb_loop+0x40/0x90 [ 147.970887][ T8370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.970905][ T8370] RIP: 0033:0x7f4062b9c799 [ 147.970922][ T8370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.970938][ T8370] RSP: 002b:00007f4063a68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.970957][ T8370] RAX: ffffffffffffffda RBX: 00007f4062e15fa0 RCX: 00007f4062b9c799 [ 147.970970][ T8370] RDX: cfb4854c0caad94c RSI: 00002000000001c0 RDI: 0000000000000003 [ 147.970982][ T8370] RBP: 00007f4063a68090 R08: 0000000000000000 R09: 0000000000000000 [ 147.970993][ T8370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.971003][ T8370] R13: 00007f4062e16038 R14: 00007f4062e15fa0 R15: 00007ffd0c408a28 [ 147.971033][ T8370] [ 148.487173][ T8387] vxcan3: entered promiscuous mode [ 148.914422][ T8398] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 149.072586][ T8402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.648'. [ 149.163229][ T8409] xt_TCPMSS: Only works on TCP SYN packets [ 149.186748][ T8413] FAULT_INJECTION: forcing a failure. [ 149.186748][ T8413] name failslab, interval 1, probability 0, space 0, times 0 [ 149.202578][ T8405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.649'. [ 149.205713][ T8413] CPU: 1 UID: 0 PID: 8413 Comm: syz.0.652 Not tainted syzkaller #0 PREEMPT(full) [ 149.205736][ T8413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.205747][ T8413] Call Trace: [ 149.205754][ T8413] [ 149.205762][ T8413] dump_stack_lvl+0xe8/0x150 [ 149.205792][ T8413] should_fail_ex+0x412/0x560 [ 149.205823][ T8413] should_failslab+0xa8/0x100 [ 149.205848][ T8413] __kmalloc_noprof+0xe8/0x760 [ 149.205877][ T8413] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 149.205905][ T8413] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 149.205934][ T8413] genl_family_rcv_msg_doit+0xd9/0x330 [ 149.205961][ T8413] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 149.205996][ T8413] ? apparmor_capable+0x126/0x170 [ 149.206018][ T8413] ? bpf_lsm_capable+0x9/0x20 [ 149.206042][ T8413] ? security_capable+0x7e/0x2c0 [ 149.206072][ T8413] genl_rcv_msg+0x61c/0x7a0 [ 149.206105][ T8413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 149.206124][ T8413] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 149.206145][ T8413] ? __pfx_nl80211_tdls_oper+0x10/0x10 [ 149.206161][ T8413] ? __pfx_nl80211_post_doit+0x10/0x10 [ 149.206181][ T8413] ? __lock_acquire+0x6b5/0x2cf0 [ 149.206215][ T8413] netlink_rcv_skb+0x232/0x4b0 [ 149.206242][ T8413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 149.206264][ T8413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 149.206306][ T8413] ? down_read+0x272/0x2e0 [ 149.206326][ T8413] ? genl_rcv+0xd/0x40 [ 149.206347][ T8413] genl_rcv+0x28/0x40 [ 149.206366][ T8413] netlink_unicast+0x80f/0x9b0 [ 149.206397][ T8413] ? __pfx_netlink_unicast+0x10/0x10 [ 149.206423][ T8413] ? netlink_sendmsg+0x650/0xb40 [ 149.206454][ T8413] netlink_sendmsg+0x813/0xb40 [ 149.206488][ T8413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.206518][ T8413] ? aa_sock_msg_perm+0xf1/0x1b0 [ 149.206549][ T8413] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.206576][ T8413] ____sys_sendmsg+0x972/0x9f0 [ 149.206605][ T8413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.206638][ T8413] ? import_iovec+0x73/0xa0 [ 149.206661][ T8413] ___sys_sendmsg+0x2a5/0x360 [ 149.206687][ T8413] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.206740][ T8413] ? __fget_files+0x2a/0x420 [ 149.206765][ T8413] ? __fget_files+0x3a0/0x420 [ 149.206805][ T8413] __x64_sys_sendmsg+0x1bd/0x2a0 [ 149.206828][ T8413] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.206857][ T8413] ? __pfx_ksys_write+0x10/0x10 [ 149.206888][ T8413] do_syscall_64+0x14d/0xf80 [ 149.206908][ T8413] ? trace_irq_disable+0x3b/0x150 [ 149.206933][ T8413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.206950][ T8413] ? clear_bhb_loop+0x40/0x90 [ 149.206972][ T8413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.206989][ T8413] RIP: 0033:0x7f03ac19c799 [ 149.207006][ T8413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.207021][ T8413] RSP: 002b:00007f03ad08a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.207043][ T8413] RAX: ffffffffffffffda RBX: 00007f03ac415fa0 RCX: 00007f03ac19c799 [ 149.207056][ T8413] RDX: cfb4854c0caad94c RSI: 00002000000001c0 RDI: 0000000000000003 [ 149.207068][ T8413] RBP: 00007f03ad08a090 R08: 0000000000000000 R09: 0000000000000000 [ 149.207078][ T8413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.207088][ T8413] R13: 00007f03ac416038 R14: 00007f03ac415fa0 R15: 00007ffc5ea4c578 [ 149.207126][ T8413] [ 149.763651][ T8435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.813212][ T8435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.942054][ T8440] FAULT_INJECTION: forcing a failure. [ 149.942054][ T8440] name failslab, interval 1, probability 0, space 0, times 0 [ 149.978322][ T8440] CPU: 0 UID: 0 PID: 8440 Comm: syz.0.663 Not tainted syzkaller #0 PREEMPT(full) [ 149.978347][ T8440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.978357][ T8440] Call Trace: [ 149.978365][ T8440] [ 149.978373][ T8440] dump_stack_lvl+0xe8/0x150 [ 149.978403][ T8440] should_fail_ex+0x412/0x560 [ 149.978431][ T8440] should_failslab+0xa8/0x100 [ 149.978455][ T8440] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 149.978477][ T8440] ? __alloc_skb+0x1d0/0x7d0 [ 149.978493][ T8440] ? __local_bh_enable_ip+0xd0/0x130 [ 149.978521][ T8440] __alloc_skb+0x1d0/0x7d0 [ 149.978538][ T8440] ? netlink_ack_tlv_len+0x6c/0x210 [ 149.978573][ T8440] netlink_ack+0x146/0xa50 [ 149.978595][ T8440] ? __pfx_genl_rcv_msg+0x10/0x10 [ 149.978613][ T8440] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 149.978634][ T8440] ? __pfx_nl80211_post_doit+0x10/0x10 [ 149.978654][ T8440] ? __lock_acquire+0x6b5/0x2cf0 [ 149.978688][ T8440] netlink_rcv_skb+0x2b6/0x4b0 [ 149.978714][ T8440] ? __pfx_genl_rcv_msg+0x10/0x10 [ 149.978734][ T8440] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 149.978772][ T8440] ? down_read+0x272/0x2e0 [ 149.978792][ T8440] ? genl_rcv+0xd/0x40 [ 149.978814][ T8440] genl_rcv+0x28/0x40 [ 149.978832][ T8440] netlink_unicast+0x80f/0x9b0 [ 149.978863][ T8440] ? __pfx_netlink_unicast+0x10/0x10 [ 149.978886][ T8440] ? netlink_sendmsg+0x650/0xb40 [ 149.978917][ T8440] netlink_sendmsg+0x813/0xb40 [ 149.978947][ T8440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.978977][ T8440] ? aa_sock_msg_perm+0xf1/0x1b0 [ 149.979005][ T8440] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.979028][ T8440] ____sys_sendmsg+0x972/0x9f0 [ 149.979057][ T8440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.979087][ T8440] ? import_iovec+0x73/0xa0 [ 149.979118][ T8440] ___sys_sendmsg+0x2a5/0x360 [ 149.979146][ T8440] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.979201][ T8440] ? __fget_files+0x2a/0x420 [ 149.979225][ T8440] ? __fget_files+0x3a0/0x420 [ 149.979258][ T8440] __x64_sys_sendmsg+0x1bd/0x2a0 [ 149.979280][ T8440] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.979307][ T8440] ? __pfx_ksys_write+0x10/0x10 [ 149.979335][ T8440] do_syscall_64+0x14d/0xf80 [ 149.979354][ T8440] ? trace_irq_disable+0x3b/0x150 [ 149.979377][ T8440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.979394][ T8440] ? clear_bhb_loop+0x40/0x90 [ 149.979415][ T8440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.979432][ T8440] RIP: 0033:0x7f03ac19c799 [ 149.979450][ T8440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.979465][ T8440] RSP: 002b:00007f03ad08a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.979484][ T8440] RAX: ffffffffffffffda RBX: 00007f03ac415fa0 RCX: 00007f03ac19c799 [ 149.979497][ T8440] RDX: cfb4854c0caad94c RSI: 00002000000001c0 RDI: 0000000000000003 [ 149.979509][ T8440] RBP: 00007f03ad08a090 R08: 0000000000000000 R09: 0000000000000000 [ 149.979520][ T8440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.979530][ T8440] R13: 00007f03ac416038 R14: 00007f03ac415fa0 R15: 00007ffc5ea4c578 [ 149.979560][ T8440] [ 150.728960][ T8468] netlink: 'syz.1.670': attribute type 1 has an invalid length. [ 151.441829][ T8529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.536749][ T8536] __nla_validate_parse: 66 callbacks suppressed [ 151.536768][ T8536] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.689'. [ 151.606293][ T8546] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 151.894861][ T8583] netlink: 'syz.1.696': attribute type 1 has an invalid length. [ 151.953230][ T8583] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.006338][ T8589] bond4: (slave veth0_to_bond): making interface the new active one [ 152.033420][ T8589] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 152.047009][ T8588] dummy0: left allmulticast mode [ 152.055766][ T8588] bridge0: port 3(dummy0) entered disabled state [ 152.116396][ T8589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.696'. [ 152.127431][ T8588] batman_adv: batadv0: Adding interface: dummy0 [ 152.136154][ T8588] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.162680][ T8588] batman_adv: batadv0: Interface activated: dummy0 [ 152.212844][ T8583] 8021q: adding VLAN 0 to HW filter on device bond5 [ 152.221796][ T8583] bond4: (slave bond5): Enslaving as an active interface with a down link [ 152.244997][ T8597] batadv0: mtu less than device minimum [ 152.255212][ T8604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.702'. [ 152.257963][ T8597] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.264770][ T8604] netlink: 80 bytes leftover after parsing attributes in process `syz.2.702'. [ 152.276049][ T8597] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.285134][ T8604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.702'. [ 152.295565][ T8597] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.314521][ T8597] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.325692][ T8597] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.336849][ T8597] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.348086][ T8597] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.359733][ T8597] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.371012][ T8597] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.394023][ T8600] erspan0: entered promiscuous mode [ 152.399886][ T8600] erspan0: entered allmulticast mode [ 152.425162][ T8602] lo: Caught tx_queue_len zero misconfig [ 152.622632][ T8611] netlink: 'syz.4.705': attribute type 1 has an invalid length. [ 152.647701][ T8609] netlink: 76 bytes leftover after parsing attributes in process `syz.0.704'. [ 152.672100][ T8615] syzkaller0: entered promiscuous mode [ 152.683790][ T8615] syzkaller0: entered allmulticast mode [ 153.041364][ T8640] netlink: 'syz.0.715': attribute type 1 has an invalid length. [ 153.074108][ T8640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.715'. [ 153.095016][ T8643] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20004 [ 153.101164][ T8640] netlink: 658 bytes leftover after parsing attributes in process `syz.0.715'. [ 153.111760][ T8640] netlink: 'syz.0.715': attribute type 1 has an invalid length. [ 153.349123][ T8664] netlink: 108 bytes leftover after parsing attributes in process `syz.4.723'. [ 153.520428][ T8671] netlink: 16 bytes leftover after parsing attributes in process `syz.4.726'. [ 153.685040][ T8680] netlink: 'syz.0.730': attribute type 1 has an invalid length. [ 153.772750][ T8680] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.808556][ T8688] bond2: (slave geneve3): making interface the new active one [ 153.822913][ T8688] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 154.311209][ T8725] netlink: 'syz.2.743': attribute type 1 has an invalid length. [ 154.323495][ T8719] nbd0: detected capacity change from 0 to 63 [ 154.337551][ T51] block nbd0: Receive control failed (result -32) [ 154.346502][ T7787] block nbd0: Send control failed (result -32) [ 154.366277][ T7787] block nbd0: Request send failed, requeueing [ 154.380899][ T5159] block nbd0: Dead connection, failed to find a fallback [ 154.388650][ T5159] block nbd0: shutting down sockets [ 154.394425][ T5159] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.407074][ T5159] Buffer I/O error on dev nbd0, logical block 0, async page read [ 154.415293][ T7787] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.425340][ T7787] Buffer I/O error on dev nbd0, logical block 1, async page read [ 154.433944][ T7787] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.443840][ T7787] Buffer I/O error on dev nbd0, logical block 2, async page read [ 154.451724][ T7787] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.461387][ T7787] Buffer I/O error on dev nbd0, logical block 3, async page read [ 154.469192][ T7787] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.479469][ T7787] Buffer I/O error on dev nbd0, logical block 0, async page read [ 154.487271][ T7787] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.497829][ T7787] Buffer I/O error on dev nbd0, logical block 1, async page read [ 154.506000][ T7787] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.516257][ T7787] Buffer I/O error on dev nbd0, logical block 2, async page read [ 154.524200][ T7787] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.532786][ T8736] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 154.534726][ T7787] Buffer I/O error on dev nbd0, logical block 3, async page read [ 154.552728][ T7787] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.562999][ T7787] Buffer I/O error on dev nbd0, logical block 0, async page read [ 154.583057][ T7787] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.604268][ T7787] Buffer I/O error on dev nbd0, logical block 1, async page read [ 154.612859][ T8737] netlink: 'syz.4.747': attribute type 5 has an invalid length. [ 154.613848][ T7787] ldm_validate_partition_table(): Disk read failed. [ 154.628629][ T7787] Dev nbd0: unable to read RDB block 0 [ 154.635950][ T7787] nbd0: unable to read partition table [ 154.658653][ T7787] ldm_validate_partition_table(): Disk read failed. [ 154.666933][ T7787] Dev nbd0: unable to read RDB block 0 [ 154.680282][ T7787] nbd0: unable to read partition table [ 154.830501][ T8744] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 154.856803][ T8744] bond3 (unregistering): Released all slaves [ 154.985705][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c3f7800: rx timeout, send abort [ 154.995598][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c3f7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 155.271938][ T8773] gretap0: entered promiscuous mode [ 155.285407][ T8773] vlan2: entered promiscuous mode [ 155.339824][ T8770] syzkaller0: entered promiscuous mode [ 155.355375][ T8770] syzkaller0: entered allmulticast mode [ 155.746855][ T8804] team0 (unregistering): Port device team_slave_0 removed [ 155.771357][ T8804] team0 (unregistering): Port device team_slave_1 removed [ 155.792284][ T8812] netlink: 'syz.2.763': attribute type 1 has an invalid length. [ 157.185369][ T8820] syzkaller0: entered promiscuous mode [ 157.194799][ T8820] syzkaller0: entered allmulticast mode [ 157.373368][ T8826] netlink: 'syz.4.772': attribute type 1 has an invalid length. [ 157.438625][ T8826] __nla_validate_parse: 7 callbacks suppressed [ 157.438639][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 157.517864][ T8830] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 157.528245][ T8830] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 157.540131][ T8830] bond4: (slave vcan1): making interface the new active one [ 157.548049][ T8830] bond4: (slave vcan1): Enslaving as an active interface with an up link [ 158.491463][ T8789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.773436][ T8840] netlink: 'syz.3.776': attribute type 9 has an invalid length. [ 158.902477][ T8850] gtp0: entered promiscuous mode [ 158.907474][ T8850] gtp0: entered allmulticast mode [ 158.997866][ T8850] can: request_module (can-proto-0) failed. [ 159.002778][ T8859] tipc: Enabling of bearer rejected, failed to enable media [ 159.252235][ T8871] netlink: 20 bytes leftover after parsing attributes in process `syz.3.786'. [ 159.269504][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 159.344337][ T8879] netlink: 'syz.2.788': attribute type 13 has an invalid length. [ 159.400814][ T8879] gretap0: refused to change device tx_queue_len [ 159.407291][ T8879] net_ratelimit: 12 callbacks suppressed [ 159.407307][ T8879] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 159.566662][ T8888] netlink: 'syz.2.790': attribute type 1 has an invalid length. [ 159.597869][ T8888] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.615892][ T8888] vlan2: entered promiscuous mode [ 159.621443][ T8888] bond4: entered promiscuous mode [ 159.626658][ T8888] vlan2: entered allmulticast mode [ 159.632035][ T8888] bond4: entered allmulticast mode [ 159.654375][ T8888] bond4: (slave bridge3): making interface the new active one [ 159.662082][ T8888] bridge3: entered promiscuous mode [ 159.667577][ T8888] bridge3: entered allmulticast mode [ 159.674450][ T8888] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 159.790729][ T8893] netlink: 32 bytes leftover after parsing attributes in process `syz.0.792'. [ 159.908457][ T8903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.955109][ T8905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.972077][ T8899] can: request_module (can-proto-0) failed. [ 160.019353][ T8912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.798'. [ 160.041004][ T8914] netlink: 164 bytes leftover after parsing attributes in process `syz.3.799'. [ 160.041653][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 160.078050][ T8912] chnl_net:caif_netlink_parms(): no params data found [ 160.488829][ T8934] netlink: 'syz.1.805': attribute type 1 has an invalid length. [ 160.750647][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.789570][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.830169][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.869671][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.910118][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.949779][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.109606][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.118117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.989989][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.029883][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.070436][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.109768][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.150148][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.189605][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.511230][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.519669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.149822][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.158070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.229790][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.269845][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.070006][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.309959][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.349920][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.389782][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.429603][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.469790][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.189603][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.198011][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.509815][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.172450][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.812'. [ 181.314679][ T8971] lo speed is unknown, defaulting to 1000 [ 181.367640][ T8978] netlink: zone id is out of range [ 181.387805][ T8978] netlink: zone id is out of range [ 181.401770][ T8976] Cannot find add_set index 0 as target [ 181.419979][ T8978] netlink: zone id is out of range [ 181.430680][ T8976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.814'. [ 181.462254][ T8978] netlink: zone id is out of range [ 181.472134][ T8978] netlink: zone id is out of range [ 181.477676][ T8978] netlink: zone id is out of range [ 181.486352][ T8978] netlink: zone id is out of range [ 181.501712][ T8978] netlink: zone id is out of range [ 181.508297][ T8978] netlink: zone id is out of range [ 181.572723][ T8984] netlink: 'syz.0.817': attribute type 1 has an invalid length. [ 181.689817][ T8984] netlink: 96 bytes leftover after parsing attributes in process `syz.0.817'. [ 181.698711][ T8984] netlink: 'syz.0.817': attribute type 1 has an invalid length. [ 181.727176][ T8984] netlink: 'syz.0.817': attribute type 8 has an invalid length. [ 181.746329][ T8984] netlink: 582 bytes leftover after parsing attributes in process `syz.0.817'. [ 181.758269][ T8984] netlink: 1 bytes leftover after parsing attributes in process `syz.0.817'. [ 181.883055][ T8996] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 181.905204][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'. [ 182.102523][ T9017] netlink: 'syz.3.828': attribute type 1 has an invalid length. [ 182.134714][ T9017] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.192469][ T9022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.829'. [ 182.203640][ T9018] bond2: (slave gretap1): making interface the new active one [ 182.228925][ T9022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.829'. [ 182.239976][ T9018] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 182.261634][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 182.271451][ T9026] netlink: 56 bytes leftover after parsing attributes in process `syz.2.831'. [ 182.359681][ T9028] sctp: [Deprecated]: syz.0.829 (pid 9028) Use of int in maxseg socket option. [ 182.359681][ T9028] Use struct sctp_assoc_value instead [ 182.767477][ T9029] IPVS: Unknown mcast interface: vcan0 [ 182.775062][ T9039] syzkaller0: entered promiscuous mode [ 182.780971][ T9039] syzkaller0: entered allmulticast mode [ 183.239818][ T8543] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.254353][ T8543] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.293037][ T8543] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.330876][ T8543] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.370124][ T9082] netlink: 'syz.0.846': attribute type 1 has an invalid length. [ 184.201148][ T9122] netlink: 'syz.3.857': attribute type 12 has an invalid length. [ 184.252538][ T9125] netlink: 'syz.4.859': attribute type 9 has an invalid length. [ 184.848836][ T9149] netlink: 'syz.2.867': attribute type 1 has an invalid length. [ 185.713178][ T5933] net_ratelimit: 74 callbacks suppressed [ 185.713197][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.011414][ T9217] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 186.032363][ T9217] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 186.042601][ T9217] gretap2: entered promiscuous mode [ 186.048086][ T9217] gretap2: entered allmulticast mode [ 186.154649][ T9220] bond3: entered promiscuous mode [ 186.549804][ T1149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.558573][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.606566][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.614965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.749532][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.234496][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.242926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.267225][ T9306] __nla_validate_parse: 18 callbacks suppressed [ 187.267244][ T9306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.916'. [ 187.625580][ T9327] bond7: Unable to set down delay as MII monitoring is disabled [ 187.640562][ T9327] bond7 (unregistering): Released all slaves [ 187.679500][ T8543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.687934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.039131][ T9354] netlink: 'syz.4.930': attribute type 17 has an invalid length. [ 188.040216][ T9352] syzkaller0: entered promiscuous mode [ 188.053705][ T9352] syzkaller0: entered allmulticast mode [ 188.059407][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.930'. [ 188.059438][ T9354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.930'. [ 188.088522][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.929'. [ 188.126836][ T9354] nbd: device at index 4 is going down [ 188.159669][ T9352] vlan2: entered allmulticast mode [ 188.181100][ T9352] hsr0: entered allmulticast mode [ 188.186373][ T9352] hsr_slave_0: entered allmulticast mode [ 188.203873][ T9352] hsr_slave_1: entered allmulticast mode [ 188.220581][ T9358] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 188.266583][ T9359] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 188.318233][ T9364] netlink: 'syz.4.933': attribute type 1 has an invalid length. [ 188.318870][ T9358] 8021q: adding VLAN 0 to HW filter on device bond5 [ 188.444879][ T9370] netlink: 'syz.1.934': attribute type 26 has an invalid length. [ 188.453016][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.934'. [ 188.632070][ T9387] netlink: 'syz.2.938': attribute type 4 has an invalid length. [ 188.693321][ T9386] netlink: 'syz.2.938': attribute type 4 has an invalid length. [ 188.719538][ T9387] netlink: 152 bytes leftover after parsing attributes in process `syz.2.938'. [ 188.723714][ T9386] netlink: 152 bytes leftover after parsing attributes in process `syz.2.938'. [ 188.769711][ T9386] netlink: 'syz.2.938': attribute type 1 has an invalid length. [ 188.810411][ T9394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.939'. [ 188.819670][ T9394] netlink: 32 bytes leftover after parsing attributes in process `syz.3.939'. [ 189.051275][ T9401] delete_channel: no stack [ 189.101747][ T9413] xt_ecn: cannot match TCP bits for non-tcp packets [ 189.148115][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.944'. [ 189.577759][ T9440] netlink: 'syz.4.953': attribute type 2 has an invalid length. [ 189.644654][ T9440] 9: entered promiscuous mode [ 189.914292][ T9462] veth1_to_bond: entered allmulticast mode [ 190.093767][ T9470] ip6gre1: entered promiscuous mode [ 190.115486][ T9470] ip6gre1: entered allmulticast mode [ 190.127535][ T7301] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.132581][ T9470] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.160197][ T796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.169647][ T7301] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.190765][ T9470] tipc: Started in network mode [ 190.204522][ T9470] tipc: Node identity fffffffd, cluster identity 4711 [ 190.224524][ T9470] tipc: Node number set to 4294967293 [ 190.233420][ T9461] veth1_to_bond: left allmulticast mode [ 190.368553][ T9488] netlink: 'syz.3.967': attribute type 12 has an invalid length. [ 190.427812][ T9486] veth5: entered promiscuous mode [ 190.449421][ T796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.489603][ T29] audit: type=1800 audit(1774038333.122:3): pid=9488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.967" name="memory.events" dev="tmpfs" ino=895 res=0 errno=0 [ 190.507436][ T9493] delete_channel: no stack [ 190.718875][ T9507] xt_hashlimit: size too large, truncated to 1048576 [ 190.826445][ T9515] NCSI netlink: No device for ifindex 131092 [ 190.858264][ T9517] tls_set_device_offload: netdev not found [ 190.909483][ T796] net_ratelimit: 11 callbacks suppressed [ 190.909502][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.149502][ T796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.229443][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 191.229996][ T796] IPVS: starting estimator thread 0... [ 191.235488][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 191.247493][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 191.253026][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 191.379327][ T9546] IPVS: using max 31 ests per chain, 74400 per kthread [ 191.380853][ T9553] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 191.404089][ T9553] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 191.415466][ T9553] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 191.440496][ T9556] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 191.452903][ T9556] bond3: (slave vcan1): making interface the new active one [ 191.462632][ T9556] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 191.658732][ T9572] netlink: 'syz.0.989': attribute type 11 has an invalid length. [ 192.210816][ T9585] only policy match revision 0 supported [ 192.210838][ T9585] unable to load match [ 192.460072][ T9590] veth0: entered promiscuous mode [ 192.630264][ T9601] __nla_validate_parse: 11 callbacks suppressed [ 192.630282][ T9601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.999'. [ 192.706534][ T9589] veth0: left promiscuous mode [ 192.797584][ T9605] lo speed is unknown, defaulting to 1000 [ 193.040086][ T9620] validate_nla: 7 callbacks suppressed [ 193.040103][ T9620] netlink: 'syz.4.1003': attribute type 2 has an invalid length. [ 193.065201][ T9620] netlink: 'syz.4.1003': attribute type 1 has an invalid length. [ 193.219075][ T9634] netlink: 'syz.2.1005': attribute type 2 has an invalid length. [ 193.235235][ T9635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1004'. [ 193.248890][ T9634] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 193.273740][ T9635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1004'. [ 193.302771][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 193.318080][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 193.331502][ T9636] xt_hashlimit: size too large, truncated to 1048576 [ 193.427526][ T9640] Bluetooth: MGMT ver 1.23 [ 193.453571][ T9640] syzkaller0: entered promiscuous mode [ 193.468507][ T9640] syzkaller0: entered allmulticast mode [ 193.574534][ T9649] vlan3: entered promiscuous mode [ 193.589179][ T9649] bridge0: entered promiscuous mode [ 193.808906][ T9660] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1015'. [ 193.831780][ T9657] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 193.857182][ T9657] bond6: (slave lo): Enslaving as an active interface with an up link [ 193.866063][ T9657] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 193.887225][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1015'. [ 193.898792][ T796] lo speed is unknown, defaulting to 1000 [ 193.905411][ T5824] lo speed is unknown, defaulting to 1000 [ 193.912920][ T5824] syz0: Port: 1 Link ACTIVE [ 193.931516][ T9664] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1014'. [ 194.083372][ T9674] netlink: 'syz.4.1019': attribute type 21 has an invalid length. [ 194.172536][ T9676] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1019'. [ 194.189449][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.248779][ T9679] only policy match revision 0 supported [ 194.248799][ T9679] unable to load match [ 194.277613][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.284030][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.309911][ T9685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1024'. [ 194.416806][ T9691] netlink: 'syz.0.1026': attribute type 4 has an invalid length. [ 194.677210][ T9714] netlink: 'syz.2.1030': attribute type 4 has an invalid length. [ 194.937127][ T9726] vlan2: entered allmulticast mode [ 194.971659][ T9726] bond0: entered allmulticast mode [ 194.976807][ T9726] bond_slave_0: entered allmulticast mode [ 195.008664][ T9726] bond_slave_1: entered allmulticast mode [ 195.015492][ T9739] netlink: 'syz.4.1037': attribute type 1 has an invalid length. [ 195.121194][ T9741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.136276][ T9741] bond_slave_0: left allmulticast mode [ 195.180274][ T9741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.206759][ T9741] bond_slave_1: left allmulticast mode [ 195.231568][ T9741] bond0 (unregistering): Released all slaves [ 195.457589][ T9762] netlink: 'syz.3.1045': attribute type 1 has an invalid length. [ 195.465547][ T9761] syzkaller0: entered promiscuous mode [ 195.471288][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 195.477395][ T5144] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 195.480679][ T9762] IPv6: Can't replace route, no match found [ 195.490697][ T9761] syzkaller0: entered allmulticast mode [ 195.502198][ T9762] IPv6: Can't replace route, no match found [ 195.511524][ T9766] netlink: 'syz.2.1046': attribute type 33 has an invalid length. [ 195.540635][ T9762] bridge_slave_1: left allmulticast mode [ 195.547896][ T9762] bridge_slave_1: left promiscuous mode [ 195.554296][ T9762] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.563715][ T9762] bridge_slave_0: left allmulticast mode [ 195.570575][ T9762] bridge_slave_0: left promiscuous mode [ 195.576341][ T9762] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.658057][ T9774] sctp: [Deprecated]: syz.0.1047 (pid 9774) Use of int in maxseg socket option. [ 195.658057][ T9774] Use struct sctp_assoc_value instead [ 195.956811][ T9788] openvswitch: netlink: IP tunnel dst address not specified [ 196.088565][ T29] audit: type=1800 audit(1774038338.732:4): pid=9795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1053" name="memory.events" dev="tmpfs" ino=1017 res=0 errno=0 [ 196.398965][ T9815] bond0: entered promiscuous mode [ 196.404594][ T9815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.434648][ T9815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.443742][ T9815] bond0: (slave sit1): The slave device specified does not support setting the MAC address [ 196.455675][ T9815] bond0: (slave sit1): Error -95 calling set_mac_address [ 198.947471][ T9788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.957634][ T9794] validate_nla: 2 callbacks suppressed [ 198.957649][ T9794] netlink: 'syz.3.1052': attribute type 1 has an invalid length. [ 198.971469][ T9794] __nla_validate_parse: 9 callbacks suppressed [ 198.971485][ T9794] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1052'. [ 198.988339][ T9794] netlink: 'syz.3.1052': attribute type 1 has an invalid length. [ 198.996561][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1052'. [ 199.195428][ T9828] netlink: 'syz.1.1064': attribute type 11 has an invalid length. [ 199.203443][ T9828] netlink: 'syz.1.1064': attribute type 11 has an invalid length. [ 199.211835][ T9828] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1064'. [ 199.223765][ T9827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1063'. [ 199.245611][ T9827] bond0: entered promiscuous mode [ 199.265157][ T9827] gretap0: entered promiscuous mode [ 199.291700][ T9827] hsr1: entered promiscuous mode [ 199.356813][ T9844] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.522440][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 199.539537][ T9854] openvswitch: netlink: Unknown nsh attribute 0 [ 199.675624][ T9866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.796790][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1077'. [ 199.882700][ T9879] netlink: 'syz.4.1079': attribute type 1 has an invalid length. [ 199.901973][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'. [ 199.910509][ T9875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1078'. [ 199.919508][ T9881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.938310][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1079'. [ 199.964153][ T9878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1079'. [ 200.025003][ T9879] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.727243][ T9920] bond7 (unregistering): Released all slaves [ 201.178354][ T9951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.294838][ T9968] x_tables: duplicate entry at hook 2 [ 201.815641][T10006] netlink: 'syz.1.1116': attribute type 1 has an invalid length. [ 201.853587][T10006] netlink: 'syz.1.1116': attribute type 10 has an invalid length. [ 201.949441][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 202.093076][T10021] can: request_module (can-proto-3) failed. [ 202.183459][T10026] netlink: 'syz.0.1120': attribute type 1 has an invalid length. [ 202.589389][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.654841][T10052] SET target dimension over the limit! [ 202.728968][T10053] xt_TPROXY: Can be used only with -p tcp or -p udp [ 202.831339][T10059] netlink: 'syz.2.1128': attribute type 3 has an invalid length. [ 203.549182][T10112] syzkaller0: entered promiscuous mode [ 203.555933][T10112] syzkaller0: entered allmulticast mode [ 203.981077][T10145] __nla_validate_parse: 97 callbacks suppressed [ 203.981095][T10145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'. [ 204.147240][T10162] netlink: 'syz.2.1163': attribute type 10 has an invalid length. [ 204.197268][T10154] xt_hashlimit: overflow, rate too high: 0 [ 204.243794][T10167] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1165'. [ 204.274525][T10167] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 204.289063][T10167] netlink: 'syz.4.1165': attribute type 5 has an invalid length. [ 204.315851][T10171] netlink: 'syz.2.1167': attribute type 1 has an invalid length. [ 204.323890][T10171] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1167'. [ 204.334720][T10171] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1167'. [ 204.344571][T10171] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1167'. [ 204.357983][T10170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1166'. [ 204.500216][T10186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1171'. [ 204.603719][T10189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1172'. [ 204.657216][T10191] tunl0: left promiscuous mode [ 204.670914][T10192] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 204.724425][T10191] erspan0: left promiscuous mode [ 204.762690][T10191] erspan0: left allmulticast mode [ 204.824790][T10203] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1175'. [ 204.893847][T10191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.922448][T10191] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.945916][T10191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.134197][T10194] bond7: (slave gre0): Device is not bonding slave [ 205.165354][T10218] netlink: 'syz.4.1179': attribute type 25 has an invalid length. [ 205.168621][T10194] bond7: option active_slave: invalid value (gre0) [ 205.192762][T10194] bond7 (unregistering): Released all slaves [ 205.245377][T10225] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1181'. [ 205.588230][T10245] x_tables: duplicate underflow at hook 3 [ 205.626648][T10250] Unsupported ieee802154 address type: 0 [ 206.396606][T10299] netlink: 'syz.4.1201': attribute type 1 has an invalid length. [ 206.405469][T10299] netlink: 'syz.4.1201': attribute type 1 has an invalid length. [ 206.414410][T10299] netlink: 'syz.4.1201': attribute type 8 has an invalid length. [ 206.754091][T10317] netlink: 'syz.4.1206': attribute type 1 has an invalid length. [ 206.911247][T10330] pim6reg: entered allmulticast mode [ 206.922089][T10321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.407205][T10356] syzkaller0: entered promiscuous mode [ 207.413366][T10356] syzkaller0: entered allmulticast mode [ 207.684411][T10365] netlink: 'syz.1.1218': attribute type 4 has an invalid length. [ 207.912667][T10377] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 207.943090][T10379] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 208.401479][T10415] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 208.440948][T10424] xt_hashlimit: size too large, truncated to 1048576 [ 208.618146][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.641978][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.689859][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.708581][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.762493][T10451] netlink: 'syz.1.1241': attribute type 9 has an invalid length. [ 208.787712][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.796797][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.807642][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.816664][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.995007][T10462] __nla_validate_parse: 56 callbacks suppressed [ 208.995020][T10462] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1244'. [ 209.018105][ T745] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 209.030962][ T745] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 209.039486][ T5901] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 209.062540][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1245'. [ 209.072785][T10465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1245'. [ 209.396695][T10432] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.573007][T10475] validate_nla: 1 callbacks suppressed [ 209.573026][T10475] netlink: 'syz.4.1249': attribute type 8 has an invalid length. [ 209.592092][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 209.592612][T10480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1250'. [ 209.609555][T10474] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1248'. [ 209.777646][T10474] syzkaller0: entered promiscuous mode [ 209.786915][T10474] syzkaller0: entered allmulticast mode [ 209.821299][T10492] vlan2: entered allmulticast mode [ 209.826459][T10492] bridge_slave_0: entered allmulticast mode [ 209.828591][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1256'. [ 209.888813][ T5901] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 209.960949][ T5901] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 210.047112][T10511] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1257'. [ 210.155748][T10517] netlink: 'syz.0.1261': attribute type 3 has an invalid length. [ 210.164293][T10517] netlink: 'syz.0.1261': attribute type 3 has an invalid length. [ 210.188820][T10517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1261'. [ 210.225305][T10518] netlink: 'syz.0.1261': attribute type 3 has an invalid length. [ 210.231890][T10521] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1260'. [ 210.235395][T10518] netlink: 'syz.0.1261': attribute type 3 has an invalid length. [ 210.372288][T10526] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 211.754651][T10569] bridge_slave_0: entered promiscuous mode [ 211.893344][T10578] syzkaller0: entered allmulticast mode [ 212.149977][T10593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.240695][T10601] openvswitch: netlink: Unknown nsh attribute 0 [ 212.807081][T10634] FAULT_INJECTION: forcing a failure. [ 212.807081][T10634] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 212.836773][T10634] CPU: 1 UID: 0 PID: 10634 Comm: syz.4.1290 Not tainted syzkaller #0 PREEMPT(full) [ 212.836799][T10634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.836809][T10634] Call Trace: [ 212.836816][T10634] [ 212.836824][T10634] dump_stack_lvl+0xe8/0x150 [ 212.836855][T10634] should_fail_ex+0x412/0x560 [ 212.836886][T10634] _copy_from_user+0x2d/0xb0 [ 212.836907][T10634] __sys_bpf+0x229/0x950 [ 212.836937][T10634] ? __pfx___sys_bpf+0x10/0x10 [ 212.836976][T10634] ? ksys_write+0x242/0x270 [ 212.836997][T10634] ? __pfx_ksys_write+0x10/0x10 [ 212.837022][T10634] __x64_sys_bpf+0x7c/0x90 [ 212.837048][T10634] do_syscall_64+0x14d/0xf80 [ 212.837067][T10634] ? trace_irq_disable+0x3b/0x150 [ 212.837092][T10634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.837109][T10634] ? clear_bhb_loop+0x40/0x90 [ 212.837131][T10634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.837148][T10634] RIP: 0033:0x7feae399c799 [ 212.837164][T10634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.837179][T10634] RSP: 002b:00007feae47bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 212.837199][T10634] RAX: ffffffffffffffda RBX: 00007feae3c15fa0 RCX: 00007feae399c799 [ 212.837213][T10634] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 212.837224][T10634] RBP: 00007feae47bc090 R08: 0000000000000000 R09: 0000000000000000 [ 212.837235][T10634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.837245][T10634] R13: 00007feae3c16038 R14: 00007feae3c15fa0 R15: 00007fff383ae068 [ 212.837274][T10634] [ 213.186656][T10646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.389396][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 213.904600][T10666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.156998][T10690] FAULT_INJECTION: forcing a failure. [ 214.156998][T10690] name failslab, interval 1, probability 0, space 0, times 0 [ 214.202749][T10695] __nla_validate_parse: 12 callbacks suppressed [ 214.202767][T10695] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1304'. [ 214.218861][T10690] CPU: 1 UID: 0 PID: 10690 Comm: syz.3.1306 Not tainted syzkaller #0 PREEMPT(full) [ 214.218884][T10690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.218895][T10690] Call Trace: [ 214.218902][T10690] [ 214.218909][T10690] dump_stack_lvl+0xe8/0x150 [ 214.218938][T10690] should_fail_ex+0x412/0x560 [ 214.218968][T10690] should_failslab+0xa8/0x100 [ 214.218990][T10690] __kmalloc_noprof+0xe8/0x760 [ 214.219010][T10690] ? bpf_test_init+0x9f/0x150 [ 214.219032][T10690] ? kstrtouint+0x6e/0xe0 [ 214.219058][T10690] bpf_test_init+0x9f/0x150 [ 214.219085][T10690] bpf_prog_test_run_xdp+0x529/0x1160 [ 214.219126][T10690] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 214.219158][T10690] ? __fget_files+0x2a/0x420 [ 214.219187][T10690] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 214.219217][T10690] bpf_prog_test_run+0x2c7/0x340 [ 214.219237][T10690] __sys_bpf+0x643/0x950 [ 214.219266][T10690] ? __pfx___sys_bpf+0x10/0x10 [ 214.219307][T10690] ? ksys_write+0x242/0x270 [ 214.219329][T10690] ? __pfx_ksys_write+0x10/0x10 [ 214.219356][T10690] __x64_sys_bpf+0x7c/0x90 [ 214.219382][T10690] do_syscall_64+0x14d/0xf80 [ 214.219402][T10690] ? trace_irq_disable+0x3b/0x150 [ 214.219428][T10690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.219446][T10690] ? clear_bhb_loop+0x40/0x90 [ 214.219469][T10690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.219495][T10690] RIP: 0033:0x7f425899c799 [ 214.219511][T10690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.219524][T10690] RSP: 002b:00007f4256bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.219542][T10690] RAX: ffffffffffffffda RBX: 00007f4258c15fa0 RCX: 00007f425899c799 [ 214.219554][T10690] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 214.219564][T10690] RBP: 00007f4256bee090 R08: 0000000000000000 R09: 0000000000000000 [ 214.219573][T10690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.219582][T10690] R13: 00007f4258c16038 R14: 00007f4258c15fa0 R15: 00007fffc8c3e038 [ 214.219611][T10690] [ 214.514728][T10700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1308'. [ 214.717194][T10709] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.1311'. [ 218.589712][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 222.429501][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 235.621419][T10716] netlink: 'syz.3.1316': attribute type 26 has an invalid length. [ 235.651131][T10716] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.1316'. [ 235.855017][T10740] FAULT_INJECTION: forcing a failure. [ 235.855017][T10740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.877326][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1318'. [ 235.885216][T10740] CPU: 0 UID: 0 PID: 10740 Comm: syz.0.1320 Not tainted syzkaller #0 PREEMPT(full) [ 235.885242][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.885252][T10740] Call Trace: [ 235.885258][T10740] [ 235.885265][T10740] dump_stack_lvl+0xe8/0x150 [ 235.885296][T10740] should_fail_ex+0x412/0x560 [ 235.885327][T10740] _copy_from_user+0x2d/0xb0 [ 235.885349][T10740] bpf_test_init+0xd8/0x150 [ 235.885380][T10740] bpf_prog_test_run_xdp+0x529/0x1160 [ 235.885420][T10740] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 235.885452][T10740] ? __fget_files+0x2a/0x420 [ 235.885483][T10740] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 235.885511][T10740] bpf_prog_test_run+0x2c7/0x340 [ 235.885534][T10740] __sys_bpf+0x643/0x950 [ 235.885563][T10740] ? __pfx___sys_bpf+0x10/0x10 [ 235.885603][T10740] ? ksys_write+0x242/0x270 [ 235.885626][T10740] ? __pfx_ksys_write+0x10/0x10 [ 235.885653][T10740] __x64_sys_bpf+0x7c/0x90 [ 235.885680][T10740] do_syscall_64+0x14d/0xf80 [ 235.885700][T10740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.885718][T10740] ? clear_bhb_loop+0x40/0x90 [ 235.885741][T10740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.885758][T10740] RIP: 0033:0x7f03ac19c799 [ 235.885776][T10740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.885791][T10740] RSP: 002b:00007f03ad08a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.885810][T10740] RAX: ffffffffffffffda RBX: 00007f03ac415fa0 RCX: 00007f03ac19c799 [ 235.885824][T10740] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 235.885836][T10740] RBP: 00007f03ad08a090 R08: 0000000000000000 R09: 0000000000000000 [ 235.885848][T10740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.885859][T10740] R13: 00007f03ac416038 R14: 00007f03ac415fa0 R15: 00007ffc5ea4c578 [ 235.885888][T10740] [ 235.953356][T10751] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1321'. [ 236.119093][T10736] lo speed is unknown, defaulting to 1000 [ 236.133859][T10759] netlink: 'syz.3.1323': attribute type 32 has an invalid length. [ 236.184231][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1323'. [ 236.323903][T10762] netlink: 'syz.2.1318': attribute type 29 has an invalid length. [ 236.372974][T10759] bond4: option coupled_control: invalid value (52) [ 236.383306][T10759] bond4 (unregistering): Released all slaves [ 236.421491][T10764] netlink: 'syz.2.1318': attribute type 29 has an invalid length. [ 236.437207][T10770] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 236.459504][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1327'. [ 236.490199][T10775] tc_dump_action: action bad kind [ 236.540202][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1327'. [ 236.557273][T10775] tc_dump_action: action bad kind [ 236.591884][T10788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1328'. [ 236.599031][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1327'. [ 236.650459][T10775] tc_dump_action: action bad kind [ 236.666722][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1327'. [ 236.676226][T10775] tc_dump_action: action bad kind [ 236.718579][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1327'. [ 236.734208][T10775] tc_dump_action: action bad kind [ 236.754592][T10775] tc_dump_action: action bad kind [ 236.772114][T10775] tc_dump_action: action bad kind [ 236.787695][T10775] tc_dump_action: action bad kind [ 236.795886][T10775] tc_dump_action: action bad kind [ 236.808797][T10775] tc_dump_action: action bad kind [ 236.821551][T10775] tc_dump_action: action bad kind [ 236.843032][T10775] tc_dump_action: action bad kind [ 236.859757][T10775] tc_dump_action: action bad kind [ 236.880448][T10775] tc_dump_action: action bad kind [ 236.887778][T10775] tc_dump_action: action bad kind [ 236.898929][T10775] tc_dump_action: action bad kind [ 236.912719][T10775] tc_dump_action: action bad kind [ 236.929609][T10775] tc_dump_action: action bad kind [ 236.944055][T10775] tc_dump_action: action bad kind [ 236.958309][T10775] tc_dump_action: action bad kind [ 236.999509][T10775] tc_dump_action: action bad kind [ 237.004782][T10775] tc_dump_action: action bad kind [ 237.025306][T10775] tc_dump_action: action bad kind [ 237.045712][T10775] tc_dump_action: action bad kind [ 237.054790][T10775] tc_dump_action: action bad kind [ 237.073479][T10775] tc_dump_action: action bad kind [ 237.079944][T10775] tc_dump_action: action bad kind [ 237.085272][T10775] tc_dump_action: action bad kind [ 237.091880][T10775] tc_dump_action: action bad kind [ 237.097290][T10775] tc_dump_action: action bad kind [ 237.103873][T10775] tc_dump_action: action bad kind [ 237.109138][T10775] tc_dump_action: action bad kind [ 237.119526][T10775] tc_dump_action: action bad kind [ 237.124949][T10775] tc_dump_action: action bad kind [ 237.134145][T10775] tc_dump_action: action bad kind [ 237.148686][T10775] tc_dump_action: action bad kind [ 237.158837][T10775] tc_dump_action: action bad kind [ 237.165777][T10775] tc_dump_action: action bad kind [ 237.173443][T10775] tc_dump_action: action bad kind [ 237.178761][T10775] tc_dump_action: action bad kind [ 237.186293][T10775] tc_dump_action: action bad kind [ 237.191875][T10775] tc_dump_action: action bad kind [ 237.197563][T10775] tc_dump_action: action bad kind [ 237.206793][T10775] tc_dump_action: action bad kind [ 237.213325][T10775] tc_dump_action: action bad kind [ 237.218635][T10775] tc_dump_action: action bad kind [ 237.224602][T10775] tc_dump_action: action bad kind [ 240.032778][T10805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.196473][T10842] netlink: 'syz.1.1342': attribute type 3 has an invalid length. [ 240.240407][T10851] netlink: 'syz.3.1346': attribute type 1 has an invalid length. [ 240.349398][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 240.402939][T10851] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.467157][T10862] bond4: (slave veth3): Enslaving as an active interface with a down link [ 240.576048][T10851] vlan3: entered allmulticast mode [ 240.588472][T10851] veth0_to_bond: entered allmulticast mode [ 240.597210][T10851] veth0_to_bond: entered promiscuous mode [ 240.626895][T10851] veth0_to_bond: left promiscuous mode [ 240.635650][T10851] bond4: (slave vlan3): making interface the new active one [ 240.657910][T10851] veth0_to_bond: entered promiscuous mode [ 240.665881][T10851] vlan3: entered promiscuous mode [ 240.677660][T10851] bond4: (slave vlan3): Enslaving as an active interface with an up link [ 240.724672][T10884] syzkaller1: entered promiscuous mode [ 240.742012][T10884] syzkaller1: entered allmulticast mode [ 240.742383][T10888] __nla_validate_parse: 45 callbacks suppressed [ 240.742396][T10888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1352'. [ 240.812614][T10888] team0 (unregistering): Port device team_slave_0 removed [ 240.842260][T10888] team0 (unregistering): Port device team_slave_1 removed [ 240.856636][T10893] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1354'. [ 240.903543][T10887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.933261][T10880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.022873][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1358'. [ 241.032149][T10903] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1358'. [ 241.106479][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 241.128817][T10910] : entered promiscuous mode [ 241.190684][T10915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1363'. [ 241.360870][T10930] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 241.547412][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'. [ 241.616112][T10946] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1373'. [ 241.624265][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1374'. [ 241.817908][T10957] netlink: 'syz.4.1378': attribute type 1 has an invalid length. [ 241.863062][T10959] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1379'. [ 242.045414][T10965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.185948][T10980] tipc: Trying to set illegal importance in message [ 242.385457][T10997] syzkaller0: entered promiscuous mode [ 242.391410][T10997] syzkaller0: entered allmulticast mode [ 242.434033][T10997] team0: Port device team_slave_0 removed [ 242.623798][T11011] openvswitch: netlink: Missing key (keys=40, expected=100) [ 242.855115][T11030] bond8: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 242.866311][T11030] bond8 (unregistering): Released all slaves [ 243.879007][T11081] xt_hashlimit: size too large, truncated to 1048576 [ 244.056646][T11092] netlink: 'syz.0.1413': attribute type 1 has an invalid length. [ 244.196231][T11105] tipc: Enabled bearer , priority 0 [ 244.268551][T11105] syzkaller0: entered promiscuous mode [ 244.274731][T11105] syzkaller0: entered allmulticast mode [ 244.281701][T11105] tipc: Resetting bearer [ 244.305815][T11104] tipc: Resetting bearer [ 244.590374][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 244.628364][T11120] netlink: 'syz.4.1421': attribute type 23 has an invalid length. [ 245.498040][T11104] tipc: Disabling bearer [ 245.507141][T11110] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 245.804753][T11133] __nla_validate_parse: 17 callbacks suppressed [ 245.804785][T11133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1424'. [ 245.841543][T11148] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1429'. [ 245.865138][T11148] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1429'. [ 245.875308][T11148] netlink: 'syz.4.1429': attribute type 6 has an invalid length. [ 245.883998][T11148] netlink: 'syz.4.1429': attribute type 5 has an invalid length. [ 245.894222][T11148] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1429'. [ 245.914608][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1430'. [ 246.124715][T11164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1435'. [ 246.232334][T11176] netlink: 'syz.3.1439': attribute type 1 has an invalid length. [ 246.422949][T11191] netlink: 'syz.3.1443': attribute type 16 has an invalid length. [ 246.432489][T11191] netlink: 'syz.3.1443': attribute type 17 has an invalid length. [ 246.465575][T11193] netlink: 'syz.2.1444': attribute type 1 has an invalid length. [ 246.480433][T11191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.550436][T11193] 8021q: adding VLAN 0 to HW filter on device bond7 [ 246.625181][T11209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1447'. [ 246.798037][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 246.812308][T11218] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1450'. [ 246.824114][T11218] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1450'. [ 247.043157][T11229] netlink: 'syz.1.1455': attribute type 11 has an invalid length. [ 247.268616][T11242] can: request_module (can-proto-0) failed. [ 247.742055][T11268] netlink: 'syz.3.1466': attribute type 1 has an invalid length. [ 248.210844][T11290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.221570][T11288] erspan0: entered promiscuous mode [ 248.228256][T11288] erspan0: left promiscuous mode [ 248.309255][T11297] tipc: Enabled bearer , priority 0 [ 248.316973][T11297] syzkaller0: entered promiscuous mode [ 248.330138][T11297] syzkaller0: entered allmulticast mode [ 248.374603][T11297] tipc: Resetting bearer [ 248.393367][T11293] tipc: Resetting bearer [ 248.446735][T11293] tipc: Disabling bearer [ 248.679445][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.866433][T11328] veth1_macvtap: left promiscuous mode [ 248.936528][T11322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.956731][T11322] batadv0: mtu less than device minimum [ 248.965231][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 248.977254][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 248.988806][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 249.000534][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 249.005373][T11333] netlink: 'syz.2.1487': attribute type 39 has an invalid length. [ 249.012164][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 249.030816][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 249.042644][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 249.054319][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 249.330123][T11322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.411706][T11350] geneve3: entered promiscuous mode [ 249.422372][ T745] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 42301 - 0 [ 249.440771][ T745] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 42301 - 0 [ 249.467509][ T745] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 42301 - 0 [ 249.486905][ T745] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 42301 - 0 [ 249.695578][T11366] netlink: 'syz.1.1497': attribute type 21 has an invalid length. [ 249.715434][T11361] netlink: 'syz.1.1497': attribute type 1 has an invalid length. [ 249.743748][T11361] netlink: 'syz.1.1497': attribute type 1 has an invalid length. [ 249.809260][T11361] netlink: 'syz.1.1497': attribute type 1 has an invalid length. [ 249.864588][T11372] netlink: 'syz.2.1501': attribute type 1 has an invalid length. [ 249.933099][T11376] netlink: 'syz.2.1501': attribute type 1 has an invalid length. [ 249.943212][T11376] netlink: 'syz.2.1501': attribute type 1 has an invalid length. [ 250.538998][T11416] netlink: 'syz.4.1511': attribute type 1 has an invalid length. [ 250.810771][T11436] __nla_validate_parse: 19 callbacks suppressed [ 250.810791][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1516'. [ 250.863287][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1517'. [ 250.904769][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1519'. [ 250.924713][T11437] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.956074][T11450] hsr_slave_0: left promiscuous mode [ 250.993081][T11450] hsr_slave_1: left promiscuous mode [ 251.152995][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 251.165547][T11474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1525'. [ 251.218679][T11475] bond8: Unable to set up delay as MII monitoring is disabled [ 251.235743][T11475] bond8 (unregistering): Released all slaves [ 251.313934][T11483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.360233][T11483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.368267][T11483] batman_adv: batadv0: Interface deactivated: dummy0 [ 251.376829][T11483] batman_adv: batadv0: Removing interface: dummy0 [ 251.423695][T11485] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1527'. [ 251.475947][T11485] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.1527'. [ 251.726190][T11503] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 251.814129][T11501] syz.3.1533 (11501) used greatest stack depth: 17472 bytes left [ 251.865056][T11515] nbd: socks must be embedded in a SOCK_ITEM attr [ 252.001090][T11526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1541'. [ 252.010683][ T8543] vlan3: left promiscuous mode [ 252.158816][T11542] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 252.371812][T11550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1543'. [ 252.411082][T11558] sctp: [Deprecated]: syz.4.1550 (pid 11558) Use of int in maxseg socket option. [ 252.411082][T11558] Use struct sctp_assoc_value instead [ 252.578957][T11565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1552'. [ 252.803369][T11579] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 252.824652][T11579] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 252.835192][T11579] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 252.911079][T11579] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 252.935370][T11579] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 252.969755][T11579] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 252.985806][T11579] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 253.023022][T11579] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 253.067195][T11596] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.074267][T11595] net_ratelimit: 31 callbacks suppressed [ 253.074285][T11595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.074473][T11596] IPv6: NLM_F_CREATE should be set when creating new route [ 253.102571][T11596] IPv6: NLM_F_CREATE should be set when creating new route [ 253.109926][T11596] IPv6: NLM_F_CREATE should be set when creating new route [ 253.118207][T11598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.121906][T11579] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 253.136320][T11579] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 253.434661][T11611] validate_nla: 4 callbacks suppressed [ 253.434680][T11611] netlink: 'syz.3.1567': attribute type 1 has an invalid length. [ 253.638757][T11624] netlink: 'syz.4.1571': attribute type 1 has an invalid length. [ 253.815783][T11631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.033689][T11637] : renamed from hsr0 (while UP) [ 254.752321][ T5836] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 254.909921][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 254.909948][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.909973][ T5836] Call Trace: [ 254.909980][ T5836] [ 254.909989][ T5836] dump_stack_lvl+0xe8/0x150 [ 254.910020][ T5836] dump_header+0xd3/0x4c0 [ 254.910045][ T5836] oom_kill_process+0x3ab/0x970 [ 254.910070][ T5836] out_of_memory+0x106c/0x1410 [ 254.910089][ T5836] ? percpu_ref_put+0x19/0x180 [ 254.910114][ T5836] ? __pfx___mutex_lock+0x10/0x10 [ 254.910143][ T5836] ? __pfx_out_of_memory+0x10/0x10 [ 254.910160][ T5836] ? do_raw_spin_unlock+0xf5/0x210 [ 254.910191][ T5836] try_charge_memcg+0xc53/0x1560 [ 254.910216][ T5836] ? __lock_acquire+0x6b5/0x2cf0 [ 254.910252][ T5836] ? __pfx_try_charge_memcg+0x10/0x10 [ 254.910270][ T5836] ? xa_load+0x60/0x210 [ 254.910301][ T5836] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 254.910327][ T5836] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 254.910353][ T5836] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 254.910379][ T5836] __swap_cache_prepare_and_add+0x52a/0x700 [ 254.910426][ T5836] swap_cache_alloc_folio+0xf1/0x240 [ 254.910457][ T5836] swap_cluster_readahead+0x369/0x690 [ 254.910492][ T5836] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 254.910534][ T5836] ? get_vma_policy+0x27b/0x3c0 [ 254.910561][ T5836] swapin_readahead+0x196/0xc50 [ 254.910588][ T5836] ? filemap_map_pages+0x185/0x2050 [ 254.910620][ T5836] ? __pfx_swapin_readahead+0x10/0x10 [ 254.910646][ T5836] ? swap_table_get+0x1e/0x260 [ 254.910668][ T5836] ? swap_table_get+0x1e/0x260 [ 254.910689][ T5836] ? swap_table_get+0x1e/0x260 [ 254.910713][ T5836] ? swap_table_get+0x216/0x260 [ 254.910740][ T5836] ? swap_cache_get_folio+0x513/0x520 [ 254.910779][ T5836] do_swap_page+0x56f/0x5a20 [ 254.910829][ T5836] ? do_swap_page+0x127/0x5a20 [ 254.910855][ T5836] ? __pfx_do_swap_page+0x10/0x10 [ 254.910879][ T5836] ? __pte_offset_map+0x1ae/0x240 [ 254.910911][ T5836] ? pte_offset_map_rw_nolock+0xea/0x160 [ 254.910932][ T5836] handle_mm_fault+0x12d2/0x3310 [ 254.910976][ T5836] ? handle_mm_fault+0xee/0x3310 [ 254.911012][ T5836] ? __pfx_handle_mm_fault+0x10/0x10 [ 254.911038][ T5836] ? lock_vma_under_rcu+0x45a/0x500 [ 254.911086][ T5836] do_user_addr_fault+0xa73/0x1340 [ 254.911119][ T5836] ? rcu_is_watching+0x15/0xb0 [ 254.911145][ T5836] ? trace_page_fault_user+0x84/0x210 [ 254.911173][ T5836] exc_page_fault+0x6a/0xc0 [ 254.911195][ T5836] asm_exc_page_fault+0x26/0x30 [ 254.911213][ T5836] RIP: 0033:0x7f2bd426a7b7 [ 254.911232][ T5836] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 ae ed 00 48 01 d1 39 7c 24 [ 254.911248][ T5836] RSP: 002b:00007ffc9582de90 EFLAGS: 00010206 [ 254.911266][ T5836] RAX: 0000001b30324000 RBX: 000000000000037e RCX: 000000000003e030 [ 254.911280][ T5836] RDX: 000000000852f4d2 RSI: 00007ffc9582df20 RDI: 0000000000000007 [ 254.911292][ T5836] RBP: 00007ffc9582decc R08: 7fffffffffffffff R09: 3fffffffffffffff [ 254.911306][ T5836] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 254.911319][ T5836] R13: 00000000000927c0 R14: 000000000003df9c R15: 00007ffc9582df20 [ 254.911351][ T5836] [ 254.911358][ T5836] memory: usage 307200kB, limit 307200kB, failcnt 573 [ 255.247763][ T5836] memory+swap: usage 298812kB, limit 9007199254740988kB, failcnt 0 [ 255.258030][ T5836] kmem: usage 298520kB, limit 9007199254740988kB, failcnt 0 [ 255.267970][ T5836] Memory cgroup stats for /syz1: [ 255.269344][ T5836] cache 0 [ 255.288095][ T5836] rss 0 [ 255.353734][ T5836] rss_huge 0 [ 255.374074][ T5836] shmem 0 [ 255.389835][ T5836] mapped_file 0 [ 255.453759][ T5836] dirty 0 [ 255.456729][ T5836] writeback 0 [ 255.489044][ T5836] workingset_refault_anon 1 [ 255.540379][ T5836] workingset_refault_file 21 [ 255.545007][ T5836] swap 196608 [ 255.548475][ T5836] swapcached 200704 [ 255.613984][ T5836] pgpgin 16857 [ 255.617396][ T5836] pgpgout 16856 [ 255.636398][ T5836] pgfault 40476 [ 255.641139][ T5836] pgmajfault 5 [ 255.644536][ T5836] inactive_anon 0 [ 255.659453][ T5836] active_anon 4096 [ 255.663212][ T5836] inactive_file 0 [ 255.666846][ T5836] active_file 0 [ 255.689393][ T5836] unevictable 0 [ 255.692888][ T5836] hierarchical_memory_limit 314572800 [ 255.707549][ T5836] hierarchical_memsw_limit 9223372036854771712 [ 255.719041][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.720103][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.744499][ T5836] total_cache 0 [ 255.747998][ T5836] total_rss 0 [ 255.802607][ T5836] total_rss_huge 0 [ 255.806361][ T5836] total_shmem 0 [ 255.825691][ T5836] total_mapped_file 0 [ 255.843910][ T5836] total_dirty 0 [ 255.847414][ T5836] total_writeback 0 [ 255.862282][T11717] __nla_validate_parse: 6 callbacks suppressed [ 255.862300][T11717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1596'. [ 255.889266][ T5836] total_workingset_refault_anon 1 [ 255.894425][ T5836] total_workingset_refault_file 21 [ 255.923907][T11717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1596'. [ 255.940848][ T5836] total_swap 196608 [ 255.954934][ T5836] total_swapcached 200704 [ 255.965072][ T5836] total_pgpgin 16857 [ 255.968989][ T5836] total_pgpgout 16856 [ 255.988637][T11715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.011466][ T5836] total_pgfault 40476 [ 256.016108][ T5836] total_pgmajfault 5 [ 256.031782][ T5836] total_inactive_anon 0 [ 256.035961][ T5836] total_active_anon 4096 [ 256.059578][ T5836] total_inactive_file 0 [ 256.063894][ T5836] total_active_file 0 [ 256.067882][ T5836] total_unevictable 0 [ 256.085553][ T5836] anon_cost 0 [ 256.088871][ T5836] file_cost 0 [ 256.099303][ T5836] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1560,pid=11591,uid=0 [ 256.149863][ T5836] Memory cgroup out of memory: OOM victim 11591 (syz.1.1560) is already exiting. Skip killing the task [ 256.372984][T11733] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1601'. [ 256.385524][T11725] x_tables: unsorted underflow at hook 1 [ 256.599802][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'. [ 256.631727][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1603'. [ 256.651041][T11747] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1602'. [ 256.674324][T11738] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 256.685749][T11745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1606'. [ 257.399175][T11785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1617'. [ 257.449922][T11787] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 257.633479][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1622'. [ 257.696713][T11797] team1: entered promiscuous mode [ 257.709124][T11797] team1: entered allmulticast mode [ 257.735921][T11804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1624'. [ 257.778182][T11804] netlink: 'syz.4.1624': attribute type 1 has an invalid length. [ 257.803630][T11808] netlink: 'syz.2.1625': attribute type 6 has an invalid length. [ 258.136131][T11827] netlink: 'syz.1.1631': attribute type 63 has an invalid length. [ 258.154630][T11827] netlink: 'syz.1.1631': attribute type 63 has an invalid length. [ 258.199696][T11829] netlink: 'syz.2.1632': attribute type 1 has an invalid length. [ 258.224368][T11829] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 258.249472][T11829] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 258.473510][T11848] netlink: 'syz.2.1637': attribute type 39 has an invalid length. [ 258.744766][T11863] veth7: entered promiscuous mode [ 259.001649][T11881] netlink: 'syz.4.1646': attribute type 1 has an invalid length. [ 259.104553][T11881] bond8: entered promiscuous mode [ 259.110049][T11881] 8021q: adding VLAN 0 to HW filter on device bond8 [ 259.116095][T11893] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 259.208580][T11881] bond8: (slave bridge4): making interface the new active one [ 259.225169][T11881] bridge4: entered promiscuous mode [ 259.237882][T11881] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 259.352437][T11897] syzkaller1: entered promiscuous mode [ 259.357946][T11897] syzkaller1: entered allmulticast mode [ 259.933568][T11930] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 260.121179][T11940] bond9: option lp_interval: invalid value (0) [ 260.128198][T11940] bond9: option lp_interval: allowed values 1 - 2147483647 [ 260.137901][T11940] bond9 (unregistering): Released all slaves [ 260.164274][T11939] vlan2: entered allmulticast mode [ 260.170075][T11939] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 260.335283][T11956] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 260.684908][T11991] netlink: 'syz.4.1682': attribute type 1 has an invalid length. [ 260.740155][T11981] netlink: 'syz.2.1681': attribute type 5 has an invalid length. [ 260.941555][T12006] __nla_validate_parse: 22 callbacks suppressed [ 260.941574][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1684'. [ 260.968401][T12005] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 261.040486][T12005] syzkaller0: entered promiscuous mode [ 261.051705][T12005] syzkaller0: entered allmulticast mode [ 261.074923][T12005] tipc: Enabled bearer , priority 0 [ 261.119095][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1687'. [ 261.173202][T12004] tipc: Resetting bearer [ 261.387881][T12004] tipc: Disabling bearer [ 261.582751][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1694'. [ 261.683719][T12041] xt_hashlimit: invalid interval [ 261.707437][T12041] xt_hashlimit: invalid interval [ 261.726772][T12049] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 261.758758][T12044] netlink: 'syz.3.1696': attribute type 1 has an invalid length. [ 261.775812][T12044] netlink: 'syz.3.1696': attribute type 1 has an invalid length. [ 261.784418][T12044] netlink: 'syz.3.1696': attribute type 1 has an invalid length. [ 261.793363][T12044] netlink: 'syz.3.1696': attribute type 2 has an invalid length. [ 261.802588][T12044] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1696'. [ 261.808809][T12055] delete_channel: no stack [ 261.924466][T12061] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20002 [ 261.945281][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1703'. [ 262.046518][T12078] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20000 [ 262.270362][T12090] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1711'. [ 262.446569][T12103] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 262.459714][T12103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.717713][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'. [ 262.763377][T12126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1721'. [ 262.800505][T12126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1721'. [ 262.875206][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1720'. [ 263.006353][T12142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.505674][T12165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.518784][T12165] bond0: (slave rose0): Enslaving as an active interface with an up link [ 263.697441][T12187] netlink: 'syz.3.1737': attribute type 11 has an invalid length. [ 263.722712][T12188] xt_hashlimit: size too large, truncated to 1048576 [ 263.774114][T12192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.908612][T12198] netlink: 'syz.2.1739': attribute type 16 has an invalid length. [ 263.947093][T12198] netlink: 'syz.2.1739': attribute type 17 has an invalid length. [ 264.147537][T12192] x9: renamed from bridge_slave_0 [ 264.322783][T12198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.267480][T12260] bond9 (unregistering): Released all slaves [ 265.334184][T12266] sch_fq: defrate 0 ignored. [ 265.602760][T12279] netlink: zone id is out of range [ 265.607915][T12279] netlink: zone id is out of range [ 265.623373][T12279] netlink: zone id is out of range [ 265.628951][T12279] netlink: zone id is out of range [ 265.670717][T12279] netlink: zone id is out of range [ 265.700221][T12279] netlink: zone id is out of range [ 265.708204][T12279] netlink: zone id is out of range [ 265.729401][T12279] netlink: zone id is out of range [ 265.799131][T12283] syzkaller0: entered promiscuous mode [ 265.806266][T12283] syzkaller0: entered allmulticast mode [ 266.698308][T12323] netlink: 'syz.3.1765': attribute type 1 has an invalid length. [ 266.747319][T12323] __nla_validate_parse: 7 callbacks suppressed [ 266.747336][T12323] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.1765'. [ 266.813851][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1766'. [ 266.999805][T12339] nbd: couldn't find device at index 242 [ 267.016726][T12339] netlink: 'syz.0.1769': attribute type 1 has an invalid length. [ 267.050579][T12339] netlink: 'syz.0.1769': attribute type 3 has an invalid length. [ 267.084273][T12353] netlink: 'syz.0.1769': attribute type 1 has an invalid length. [ 267.092420][T12339] nbd: couldn't find device at index 242 [ 267.095255][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1773'. [ 267.110985][T12352] netlink: 'syz.0.1769': attribute type 3 has an invalid length. [ 267.648277][T12383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1781'. [ 267.658068][T12383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1781'. [ 267.798367][T12385] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.806125][T12385] bridge0: port 1(1x9) entered disabled state [ 267.949004][T12385] tipc: Resetting bearer [ 267.964195][T12385] veth1_macvtap: left promiscuous mode [ 268.144981][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1783'. [ 268.277728][ T1149] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.299679][ T1149] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 268.354069][T12414] hsr_slave_0 (unregistering): left promiscuous mode [ 268.381695][ T1149] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.426887][ T1149] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 268.479603][ T1149] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.488526][ T1149] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 268.560478][ T1149] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.579923][ T1149] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 268.720375][T12434] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1790'. [ 268.818966][T12447] netlink: 'syz.1.1793': attribute type 1 has an invalid length. [ 268.912132][T12450] nbd2: detected capacity change from 0 to 63 [ 268.929037][T12450] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1795'. [ 268.951847][ T5144] block nbd2: Receive control failed (result -104) [ 268.969468][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1796'. [ 269.187409][T12471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1800'. [ 269.240518][T12477] netlink: 'syz.1.1803': attribute type 4 has an invalid length. [ 269.362456][T12483] netlink: 'syz.0.1804': attribute type 39 has an invalid length. [ 269.745387][T12506] syzkaller0: entered promiscuous mode [ 269.769384][T12506] syzkaller0: entered allmulticast mode [ 269.943898][ T8568] nci: nci_rsp_packet: unknown rsp opcode 0x405 [ 270.682783][T12521] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.466369][T12577] net_ratelimit: 7 callbacks suppressed [ 271.466388][T12577] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 271.572882][T12571] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 271.713561][T12593] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 271.856065][T12601] __nla_validate_parse: 4 callbacks suppressed [ 271.856083][T12601] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1829'. [ 271.994865][T12611] syzkaller0: entered promiscuous mode [ 272.000861][T12611] syzkaller0: entered allmulticast mode [ 272.079362][T12618] netlink: 'syz.2.1836': attribute type 64 has an invalid length. [ 272.163996][ T5884] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 272.236370][T12626] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 272.248522][T12626] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 272.345866][T12633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1841'. [ 272.363406][T12633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1841'. [ 272.400534][T12638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1841'. [ 272.471105][T12642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1843'. [ 272.506871][T12652] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1845'. [ 272.786436][T12658] lo speed is unknown, defaulting to 1000 [ 272.991282][ T5884] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 273.026439][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1848'. [ 273.524670][T12688] bond5: entered promiscuous mode [ 273.548851][T12690] macvlan2: entered promiscuous mode [ 273.556366][T12690] macvlan2: entered allmulticast mode [ 273.564520][T12690] bond5: (slave macvlan2): Opening slave failed [ 274.093285][T12723] openvswitch: netlink: IP tunnel dst address not specified [ 274.118157][ T29] audit: type=1804 audit(1774038416.762:5): pid=12724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1860" name="/newroot/410/memory.events" dev="tmpfs" ino=2117 res=1 errno=0 [ 274.147474][T12704] syzkaller0: entered promiscuous mode [ 274.153284][ T29] audit: type=1800 audit(1774038416.802:6): pid=12724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1860" name="memory.events" dev="tmpfs" ino=2117 res=0 errno=0 [ 274.174822][T12704] syzkaller0: entered allmulticast mode [ 274.476578][T12751] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1867'. [ 274.520699][T12753] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1868'. [ 274.537510][T12754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1867'. [ 275.726580][T12769] netlink: 'syz.3.1872': attribute type 12 has an invalid length. [ 276.061677][T12795] xt_hashlimit: size too large, truncated to 1048576 [ 276.676009][T12847] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.689096][T12847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 276.696368][T12847] IPv6: NLM_F_CREATE should be set when creating new route [ 276.829772][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 277.562556][T12914] __nla_validate_parse: 7 callbacks suppressed [ 277.562575][T12914] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1915'. [ 277.737274][T12929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1920'. [ 277.781529][T12917] lo: entered promiscuous mode [ 277.806187][T12917] tunl0: entered promiscuous mode [ 277.822040][T12917] gre0: entered promiscuous mode [ 277.848823][T12917] gretap0: entered promiscuous mode [ 277.892079][T12917] erspan0: entered promiscuous mode [ 277.921571][T12917] ip_vti0: entered promiscuous mode [ 278.056489][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1926'. [ 278.229404][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1931'. [ 278.245946][T12961] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1930'. [ 278.563524][T12984] pimreg5: entered allmulticast mode [ 278.770615][T12998] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1938'. [ 278.828479][T13002] openvswitch: netlink: IP tunnel dst address not specified [ 278.883347][T12957] netlink: 273 bytes leftover after parsing attributes in process `syz.1.1926'. [ 279.300274][T13043] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.1948'. [ 279.301014][T13044] netlink: zone id is out of range [ 279.327688][T13047] netlink: zone id is out of range [ 279.342780][T13048] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1947'. [ 279.357161][T13044] netlink: zone id is out of range [ 279.357164][T13047] netlink: zone id is out of range [ 279.370212][T13048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1947'. [ 279.644243][T13072] blkio.reset_stats is deprecated [ 279.653240][T13071] netlink: 'syz.1.1954': attribute type 8 has an invalid length. [ 279.666277][T13071] bond0: entered promiscuous mode [ 279.672973][T13071] bond_slave_0: entered promiscuous mode [ 279.678805][T13071] bridge0: entered promiscuous mode [ 279.687617][T13071] bond0: left promiscuous mode [ 279.692807][T13071] bond_slave_0: left promiscuous mode [ 279.698463][T13071] bridge0: left promiscuous mode [ 279.786878][T13077] block nbd1: not configured, cannot reconfigure [ 279.821785][T13077] netlink: 'syz.1.1956': attribute type 2 has an invalid length. [ 279.830747][T13077] netlink: 'syz.1.1956': attribute type 1 has an invalid length. [ 279.878750][T13079] bond0: (slave bridge0): Releasing backup interface [ 279.892231][T13079] bridge_slave_0: left allmulticast mode [ 279.897876][T13079] bridge_slave_0: left promiscuous mode [ 279.904706][T13079] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.914436][T13079] bridge_slave_1: left allmulticast mode [ 279.920487][T13079] bridge_slave_1: left promiscuous mode [ 279.926310][T13079] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.936618][T13079] bond4: (slave veth0_to_bond): Releasing active interface [ 279.944206][T13079] bond4: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 279.967039][T13079] bond0: (slave bond_slave_0): Releasing backup interface [ 279.983645][T13079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.991399][T13079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.000667][T13079] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 280.026858][T13080] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 280.298256][T13103] netlink: 'syz.1.1963': attribute type 1 has an invalid length. [ 281.022684][T13121] veth9: entered allmulticast mode [ 281.720799][ T1115] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.739417][ T1115] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.772756][ T1115] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.794982][ T1115] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.812528][T13198] netlink: 'syz.4.1984': attribute type 21 has an invalid length. [ 282.108659][T13220] 8021q: adding VLAN 0 to HW filter on device bond5 [ 282.166867][T13227] netlink: 'syz.4.1992': attribute type 7 has an invalid length. [ 282.192349][T13227] netlink: 'syz.4.1992': attribute type 8 has an invalid length. [ 282.352130][T13237] 8021q: adding VLAN 0 to HW filter on device bond6 [ 282.953773][T13283] __nla_validate_parse: 25 callbacks suppressed [ 282.953791][T13283] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2007'. [ 283.055736][T13293] netlink: 'syz.3.2009': attribute type 1 has an invalid length. [ 283.211884][T13300] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2012'. [ 283.242074][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2012'. [ 283.520149][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2015'. [ 283.548255][T13313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2015'. [ 283.593696][T13313] bridge40: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 283.772954][T13320] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2018'. [ 283.863580][T13328] syzkaller0: entered promiscuous mode [ 283.881638][T13328] syzkaller0: entered allmulticast mode [ 284.021504][T13338] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2022'. [ 284.060715][T13343] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2024'. [ 284.079070][T13338] netlink: 'syz.4.2022': attribute type 1 has an invalid length. [ 284.087137][T13338] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2022'. [ 284.256101][T13353] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2027'. [ 284.294567][T13359] tipc: Enabling not permitted [ 284.300499][T13359] tipc: Enabling of bearer rejected, failed to enable media [ 284.448958][T13375] ieee802154 phy0 wpan0: encryption failed: -22 [ 284.500437][T13374] x_tables: duplicate underflow at hook 2 [ 284.507064][T13374] xt_recent: Unsupported userspace flags (000000b1) [ 284.590492][T13385] veth1_macvtap: mtu less than device minimum [ 284.826517][T13405] vlan2: entered promiscuous mode [ 284.832000][T13405] bridge0: entered promiscuous mode [ 284.856957][T13407] sit0: entered promiscuous mode [ 284.862009][T13407] sit0: entered allmulticast mode [ 284.947660][T13411] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 285.011159][T13411] team0: entered promiscuous mode [ 285.016289][T13411] team0: entered allmulticast mode [ 285.970635][T13504] netlink: 'syz.0.2074': attribute type 7 has an invalid length. [ 285.988637][T13504] netlink: 'syz.0.2074': attribute type 8 has an invalid length. [ 286.159039][T13519] netlink: 'syz.1.2081': attribute type 58 has an invalid length. [ 286.351097][T13530] netlink: 'syz.1.2085': attribute type 21 has an invalid length. [ 286.359091][T13530] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.376967][T13532] netlink: 'syz.3.2086': attribute type 4 has an invalid length. [ 286.409019][T13535] gretap0: refused to change device tx_queue_len [ 286.437487][T13535] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 286.518236][T13546] mac80211_hwsim hwsim6 : renamed from wlan1 (while UP) [ 286.738417][T13550] syzkaller0: entered promiscuous mode [ 286.744639][T13550] syzkaller0: entered allmulticast mode [ 286.777914][T13552] TC_ACT_REPEAT abuse ? [ 288.273626][T13586] netlink: zone id is out of range [ 288.278923][T13586] netlink: zone id is out of range [ 288.278992][T13592] netlink: zone id is out of range [ 288.284291][T13586] netlink: zone id is out of range [ 288.284302][T13586] netlink: zone id is out of range [ 288.284311][T13586] netlink: zone id is out of range [ 288.284320][T13586] netlink: zone id is out of range [ 288.334681][T13586] netlink: 'syz.1.2102': attribute type 30 has an invalid length. [ 288.555430][T13615] bond7: option all_slaves_active: invalid value (222) [ 288.572122][T13615] bond7 (unregistering): Released all slaves [ 288.582693][T13622] __nla_validate_parse: 21 callbacks suppressed [ 288.582710][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2110'. [ 288.600036][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2110'. [ 288.846347][T13635] tipc: Enabled bearer , priority 0 [ 288.908886][T13627] tipc: Disabling bearer [ 289.086290][T13652] tipc: Enabling of bearer rejected, failed to enable media [ 289.346153][T13669] netlink: 'syz.2.2128': attribute type 7 has an invalid length. [ 289.374340][T13669] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2128'. [ 289.390772][T13669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2128'. [ 289.445977][T13669] veth0_to_team: entered promiscuous mode [ 289.454452][T13669] veth0_to_team: left promiscuous mode [ 289.473721][T13676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2131'. [ 289.506270][T13676] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2131'. [ 289.554674][T13676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2131'. [ 289.693508][T13682] netlink: 'syz.1.2132': attribute type 13 has an invalid length. [ 289.714421][T13682] net_ratelimit: 114 callbacks suppressed [ 289.714441][T13682] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 289.851903][T13699] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2137'. [ 290.014718][T13708] IPv6: NLM_F_CREATE should be specified when creating new route [ 290.528644][T13714] xt_l2tp: v2 tid > 0xffff: 1114244 [ 290.535838][T13714] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2141'. [ 290.552579][T13714] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 290.784115][T13719] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2143'. [ 291.066244][T13727] raw_sendmsg: syz.3.2146 forgot to set AF_INET. Fix it! [ 292.344056][T13677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 292.484032][T13732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.726479][T13751] tipc: Enabling of bearer rejected, failed to enable media [ 292.803926][T13756] netlink: 'syz.4.2157': attribute type 12 has an invalid length. [ 292.867019][T13756] bond9: option primary_reselect: invalid value (255) [ 292.879576][T13756] bond9 (unregistering): Released all slaves [ 292.891799][T13765] openvswitch: netlink: Missing key (keys=40, expected=100) [ 292.902521][T13766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.912706][T13763] tipc: Enabling of bearer rejected, failed to enable media [ 292.931463][T13765] netlink: 'syz.2.2160': attribute type 11 has an invalid length. [ 293.078501][T13774] netlink: 'syz.4.2164': attribute type 2 has an invalid length. [ 293.248030][T13786] netlink: 'syz.4.2168': attribute type 83 has an invalid length. [ 293.465270][T13809] delete_channel: no stack [ 293.497499][T13801] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 293.822700][T13826] xt_hashlimit: size too large, truncated to 1048576 [ 293.823895][T13832] __nla_validate_parse: 10 callbacks suppressed [ 293.823912][T13832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2183'. [ 293.863510][T13832] IPVS: Error connecting to the multicast addr [ 293.953972][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2185'. [ 293.984444][T13840] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2185'. [ 294.168342][T13860] netlink: 'syz.0.2188': attribute type 1 has an invalid length. [ 294.283653][T13864] gtp0: entered promiscuous mode [ 294.288633][T13864] gtp0: entered allmulticast mode [ 294.304528][T13868] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2191'. [ 294.334008][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'. [ 294.557767][T13882] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2195'. [ 294.696651][T13889] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2198'. [ 294.805482][T13897] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2201'. [ 294.907407][T13900] IPv6: NLM_F_CREATE should be specified when creating new route [ 295.275533][T13925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2206'. [ 295.299599][T13908] ------------[ cut here ]------------ [ 295.305471][T13908] ODEBUG: init active (active state 0) object: ffff88802af16ef8 object type: timer_list hint: lec_arp_check_expire+0x0/0xc90 [ 295.318677][T13908] WARNING: lib/debugobjects.c:632 at __debug_object_init+0x2b1/0x4e0, CPU#0: syz.2.2205/13908 [ 295.329051][T13908] Modules linked in: [ 295.333589][T13908] CPU: 0 UID: 0 PID: 13908 Comm: syz.2.2205 Not tainted syzkaller #0 PREEMPT(full) [ 295.344113][T13908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.355136][T13908] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 295.361431][T13908] Code: 3c 38 00 74 08 4c 89 ef e8 ee fb 76 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 c0 c9 27 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 5e ef 58 0b 83 fd 03 75 3f 4c 8b [ 295.381540][T13908] RSP: 0018:ffffc9000bfaf8f8 EFLAGS: 00010246 [ 295.387630][T13908] RAX: 1ffffffff179e7b8 RBX: ffff88802af16ef8 RCX: 0000000000000000 [ 295.398470][T13908] RDX: ffffffff8c27cdc0 RSI: ffffffff8c27c9c0 RDI: ffffffff901c6750 [ 295.406566][T13908] RBP: 0000000000000003 R08: ffff88802af16ef8 R09: ffffffff8bcf50e0 [ 295.414615][T13908] R10: dffffc0000000000 R11: ffffffff81b1e960 R12: ffffffff8c27cdc0 [ 295.422931][T13908] R13: ffffffff8bcf3dc0 R14: ffffffff901c6750 R15: dffffc0000000000 [ 295.431017][T13908] FS: 00007f4063a686c0(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000 [ 295.441278][T13908] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.447896][T13908] CR2: 00007f03ac187600 CR3: 0000000057e20000 CR4: 00000000003526f0 [ 295.449638][T13925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.456912][T13908] Call Trace: [ 295.468136][T13908] [ 295.471221][T13908] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 295.476964][T13908] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 295.483052][T13908] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 295.488898][T13908] timer_init_key+0x41/0x2f0 [ 295.493607][T13908] lane_ioctl+0x1579/0x2220 [ 295.498139][T13908] ? __pfx_clip_ioctl+0x10/0x10 [ 295.503104][T13908] ? br2684_ioctl+0x110/0x6b0 [ 295.507812][T13908] ? __pfx_lane_ioctl+0x10/0x10 [ 295.513038][T13908] ? atmtcp_ioctl+0x1ce/0xdf0 [ 295.517753][T13908] do_vcc_ioctl+0x36d/0x9d0 [ 295.522344][T13908] svc_ioctl+0x1f6/0x7d0 [ 295.526608][T13908] ? kasan_quarantine_put+0xbb/0x1f0 [ 295.532020][T13908] ? __pfx_svc_ioctl+0x10/0x10 [ 295.536806][T13908] ? tomoyo_path_number_perm+0x219/0x630 [ 295.543844][T13908] ? tomoyo_path_number_perm+0x219/0x630 [ 295.550495][T13908] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 295.555565][T13908] sock_do_ioctl+0x101/0x320 [ 295.560264][T13908] ? __pfx_sock_do_ioctl+0x10/0x10 [ 295.565404][T13908] ? do_futex+0x333/0x420 [ 295.570074][T13908] sock_ioctl+0x5c6/0x7f0 [ 295.574437][T13908] ? __pfx_sock_ioctl+0x10/0x10 [ 295.579376][T13908] ? __fget_files+0x2a/0x420 [ 295.584038][T13908] ? __fget_files+0x3a0/0x420 [ 295.588731][T13908] ? __fget_files+0x2a/0x420 [ 295.593416][T13908] ? bpf_lsm_file_ioctl+0x9/0x20 [ 295.598376][T13908] ? __pfx_sock_ioctl+0x10/0x10 [ 295.603595][T13908] __se_sys_ioctl+0xfc/0x170 [ 295.608215][T13908] do_syscall_64+0x14d/0xf80 [ 295.612907][T13908] ? trace_irq_disable+0x3b/0x150 [ 295.617963][T13908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.624136][T13908] ? clear_bhb_loop+0x40/0x90 [ 295.628834][T13908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.635153][T13908] RIP: 0033:0x7f4062b9c799 [ 295.639661][T13908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.660710][T13908] RSP: 002b:00007f4063a68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.669847][T13908] RAX: ffffffffffffffda RBX: 00007f4062e15fa0 RCX: 00007f4062b9c799 [ 295.677851][T13908] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000004 [ 295.685919][T13908] RBP: 00007f4062c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 295.694254][T13908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.702352][T13908] R13: 00007f4062e16038 R14: 00007f4062e15fa0 R15: 00007ffd0c408a28 [ 295.710458][T13908] [ 295.713495][T13908] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 295.720781][T13908] CPU: 0 UID: 0 PID: 13908 Comm: syz.2.2205 Not tainted syzkaller #0 PREEMPT(full) [ 295.730145][T13908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.740194][T13908] Call Trace: [ 295.743560][T13908] [ 295.746488][T13908] vpanic+0x56c/0xa60 [ 295.750473][T13908] ? __pfx__printk+0x10/0x10 [ 295.755059][T13908] ? __pfx_vpanic+0x10/0x10 [ 295.759558][T13908] ? is_bpf_text_address+0x292/0x2b0 [ 295.764837][T13908] ? is_bpf_text_address+0x26/0x2b0 [ 295.770041][T13908] panic+0xc5/0xd0 [ 295.773768][T13908] ? __pfx_panic+0x10/0x10 [ 295.778195][T13908] __warn+0x315/0x4f0 [ 295.782177][T13908] ? __debug_object_init+0x2b1/0x4e0 [ 295.787460][T13908] ? __debug_object_init+0x2b1/0x4e0 [ 295.792741][T13908] __report_bug+0x29a/0x540 [ 295.797240][T13908] ? __debug_object_init+0x2b1/0x4e0 [ 295.802523][T13908] ? __pfx___report_bug+0x10/0x10 [ 295.807576][T13908] ? __lock_acquire+0x6b5/0x2cf0 [ 295.812521][T13908] report_bug_entry+0x19a/0x290 [ 295.817376][T13908] ? __debug_object_init+0x30f/0x4e0 [ 295.822662][T13908] ? __debug_object_init+0x314/0x4e0 [ 295.827958][T13908] handle_bug+0xce/0x200 [ 295.832198][T13908] exc_invalid_op+0x1a/0x50 [ 295.836697][T13908] asm_exc_invalid_op+0x1a/0x20 [ 295.841539][T13908] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 295.847433][T13908] Code: 3c 38 00 74 08 4c 89 ef e8 ee fb 76 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 c0 c9 27 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 5e ef 58 0b 83 fd 03 75 3f 4c 8b [ 295.867038][T13908] RSP: 0018:ffffc9000bfaf8f8 EFLAGS: 00010246 [ 295.873104][T13908] RAX: 1ffffffff179e7b8 RBX: ffff88802af16ef8 RCX: 0000000000000000 [ 295.881067][T13908] RDX: ffffffff8c27cdc0 RSI: ffffffff8c27c9c0 RDI: ffffffff901c6750 [ 295.889030][T13908] RBP: 0000000000000003 R08: ffff88802af16ef8 R09: ffffffff8bcf50e0 [ 295.896994][T13908] R10: dffffc0000000000 R11: ffffffff81b1e960 R12: ffffffff8c27cdc0 [ 295.904960][T13908] R13: ffffffff8bcf3dc0 R14: ffffffff901c6750 R15: dffffc0000000000 [ 295.912937][T13908] ? __pfx_timer_debug_hint+0x10/0x10 [ 295.918321][T13908] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 295.924034][T13908] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 295.929747][T13908] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 295.935555][T13908] timer_init_key+0x41/0x2f0 [ 295.940145][T13908] lane_ioctl+0x1579/0x2220 [ 295.944645][T13908] ? __pfx_clip_ioctl+0x10/0x10 [ 295.949494][T13908] ? br2684_ioctl+0x110/0x6b0 [ 295.954175][T13908] ? __pfx_lane_ioctl+0x10/0x10 [ 295.959018][T13908] ? atmtcp_ioctl+0x1ce/0xdf0 [ 295.963702][T13908] do_vcc_ioctl+0x36d/0x9d0 [ 295.968207][T13908] svc_ioctl+0x1f6/0x7d0 [ 295.972450][T13908] ? kasan_quarantine_put+0xbb/0x1f0 [ 295.977739][T13908] ? __pfx_svc_ioctl+0x10/0x10 [ 295.982500][T13908] ? tomoyo_path_number_perm+0x219/0x630 [ 295.988127][T13908] ? tomoyo_path_number_perm+0x219/0x630 [ 295.993760][T13908] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 295.998786][T13908] sock_do_ioctl+0x101/0x320 [ 296.003378][T13908] ? __pfx_sock_do_ioctl+0x10/0x10 [ 296.008500][T13908] ? do_futex+0x333/0x420 [ 296.012860][T13908] sock_ioctl+0x5c6/0x7f0 [ 296.017195][T13908] ? __pfx_sock_ioctl+0x10/0x10 [ 296.022049][T13908] ? __fget_files+0x2a/0x420 [ 296.026685][T13908] ? __fget_files+0x3a0/0x420 [ 296.031364][T13908] ? __fget_files+0x2a/0x420 [ 296.035955][T13908] ? bpf_lsm_file_ioctl+0x9/0x20 [ 296.040887][T13908] ? __pfx_sock_ioctl+0x10/0x10 [ 296.045732][T13908] __se_sys_ioctl+0xfc/0x170 [ 296.050334][T13908] do_syscall_64+0x14d/0xf80 [ 296.054931][T13908] ? trace_irq_disable+0x3b/0x150 [ 296.060390][T13908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.066456][T13908] ? clear_bhb_loop+0x40/0x90 [ 296.071128][T13908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.077030][T13908] RIP: 0033:0x7f4062b9c799 [ 296.081453][T13908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.101058][T13908] RSP: 002b:00007f4063a68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.109488][T13908] RAX: ffffffffffffffda RBX: 00007f4062e15fa0 RCX: 00007f4062b9c799 [ 296.117457][T13908] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000004 [ 296.125425][T13908] RBP: 00007f4062c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 296.133387][T13908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.141349][T13908] R13: 00007f4062e16038 R14: 00007f4062e15fa0 R15: 00007ffd0c408a28 [ 296.149338][T13908] [ 296.152638][T13908] Kernel Offset: disabled [ 296.156949][T13908] Rebooting in 86400 seconds..