last executing test programs: 3.062184508s ago: executing program 0 (id=8294): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000007000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) write(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0x10, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xffffffffffffff71}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 2.492636878s ago: executing program 2 (id=8305): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r4, r6, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x7}}, 0x30) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r10, {0xffe0, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xfffffa3c, 0x2, 0x4, 0x80000001}}]}, {0x4}, {0xc, 0x3f}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0x54}}]}, 0x88}}, 0x20040054) syz_emit_ethernet(0xfdef, &(0x7f0000000200)={@empty, @remote, @val={@val={0x88a8, 0x4}, {0x8100, 0x2, 0x1, 0x4}}, {@mpls_uc}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) socket$unix(0x1, 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.155383711s ago: executing program 0 (id=8311): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00010000000000fffd00000a0010000100e2ff00000000"], 0x1c}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x9, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffff8, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r10 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r11, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) close(r10) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r12, 0x84, 0x79, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@getchain={0x2c, 0x66, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0x5}, {0xe}, {0xffff, 0x2}}, [{0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000890}, 0x20004004) 2.086861698s ago: executing program 2 (id=8312): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x0, 0x7fff) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_IFALIAS={0x0, 0x14, 'wlan1\x00'}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @local}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) listen(r0, 0x1000008) 1.953900485s ago: executing program 0 (id=8316): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700), 0x101043, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x23}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x0, 0x0, 0x1000}) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000680)={0x0, @rand_addr=0x64010100, 0x4e20, 0x0, 'sh\x00', 0xc, 0x101, 0x60}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000000)="e6", 0x0}, 0x20) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000080), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/99, 0x63}, {&(0x7f0000000180)=""/94, 0x5e}, {&(0x7f0000000200)=""/167, 0xa7}, {&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f0000000300)=""/220, 0xdc}, {&(0x7f0000000400)=""/150, 0x96}, {&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000540)=""/97, 0x61}], 0x8}, 0x10000) 1.85431687s ago: executing program 2 (id=8317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3103000000000000000004"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) 1.802001452s ago: executing program 3 (id=8318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x2, 0x0, 0x4) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x374, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x120, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xac}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a91}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2f9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ce}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4a2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5fb5ff5b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1299}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfbe3}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x47f}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8afd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd4000000}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x374}}, 0x48080) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r3, 0x0, 0x0, 0x563de1c6eba3ad61, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0xfffffffffffffef5) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000004c0)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000500)=0xc) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@private2, @private1, @mcast2, 0x1, 0x4, 0x0, 0x500, 0x7, 0x46c90106, r5}) 1.662183214s ago: executing program 0 (id=8320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_inet_tcp_SIOCINQ(r3, 0xff02, 0x0) 1.565131114s ago: executing program 2 (id=8321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x20, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0x48000) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000003800), 0x4) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x10804}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}]}}]}, 0x45c}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@fallback=r6, 0xf, 0x1, 0x64, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000300), 0x10) sendmsg$can_bcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="050000000000", @ANYRESOCT, @ANYRES64, @ANYRESDEC], 0x48}}, 0x4000) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000000008000100010000009c86b53e40023d9e25cd8929f3a7ed2d93"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000030303"], 0x20}}, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r15, 0x181}, 0x14}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r10, r13, 0x25, 0x8, @void}, 0x10) ioctl$INCFS_IOC_FILL_BLOCKS(r5, 0x80106720, &(0x7f0000000600)={0x4, &(0x7f0000000580)=[{0xffffffff, 0xce, &(0x7f0000000180)="9aa0ce763acf7069374d244480a7b7146d6ba3e2eec2df6489312dff8405e80686c8a1cf15afdd7f2ba0b127cfd946b36ea3f8b5ec155a3c724aa2ac37a96a73bc2aeee72065a9281d5480cfb8e5f9eb6353f5404b621ce3db7a992e6ba0eec00eb8c136cf247b086480683e68695f1bbf448432e02616c5bfe549bf8accc78587e549dc6adae844a45f5070f94bb4490a48d35ba20f9afd61cc7083d72fd5446255fc09e36dfc3a3ac4fc1433e13d2c7d4c849f8a2fbc301874b9babbbe0a341791c241dd15f4d8b107cb632501", 0x1}, {0x99e, 0xef, &(0x7f0000000280)="4040036b2f98d832e61e2623e08478d27fcb2ac3b6fb42206e41ab9339c97a7975b4421535f79df7d2cbb586946c9a8690c7f554d1fddd638a31700455f3e1c1f3d62ef60d77448a1300bf774e43a933a9165d1ed991eba97a37c0e603d2392bd3d27e11420247035b8c25c0daf3eef6641099d15b05ad3c334afa7847d702e56c61b658fa5ca04cd603e61c73268f4079e7e20fadd62920aae9fe762c391516ab728c5f522e0bd8356dcfaef33e3f338fb16afb24aef853b0be72d8d17bc076012c75f9b913f8f8d9563cdd6b286f6a788bb8a1cde90b486449ac32f9b10d374f1b2cbfce6054b30ee5735b55fc30"}, {0x200, 0xd4, &(0x7f0000000380)="5a43b97b0f0cbb92458485130e9c7216823780a106691a533a651b8a77899cd02244e5f23a84df96cfb77d18d49d978770e655592394263599039c1646cad0ad895ced42f4f186b2bc0a57e24c4ef052d74d35798f04c7f3ebee5c66484cb8a44a515148e036c00cc1253733a93b6bc63d61b0bc4e2078b56f8ec74082d4c288963286d4a1cb6fe48a588e7a20ffec6f511043a51ad9c12a7d03026a225b2c16081bb6f8be8a5655c15b10cd5072ed83baa3287974ac6a7d22d81907585db2fb5d7d988a60ced615a8318d2bbdcb6623caf76cc0"}, {0x3, 0xc6, &(0x7f0000000480)="48f26fc8cc88159c59cccc7bd44e0de6e425139957a5fe271c82b78398112c560fbf8c541c3711844ded261c2d9f5c8ba9091c5fb6085d42e4e0d56c7e40640e02a4551737794f6bb4b5191ca6e46f22f7b4f70b887139d6ded2ae193227326e176cd83c6466c2175d26fe9cb17d944959d288d2a63867dece3d3093dbb864116736ae1211123deac01f38707515074423572f4e6cb970fc24b5e17b8077e6b4ec184a8025155cac1d5a53508c8658d17f2ff916fa5de46d01c0df467f07501d5f64d42a3d7a", 0x1, 0x1}]}) 1.554098299s ago: executing program 4 (id=8322): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f07c60000000000000081"], 0x1c}}, 0x0) r2 = socket(0x25, 0xa, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000037c00000400fc80a72601"], 0x26c0}}, 0x4010) (async) connect$ax25(r2, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@bcast, @null, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 1.53759688s ago: executing program 3 (id=8323): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={r0, &(0x7f0000000080)="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", &(0x7f0000001080)=@tcp6=r1, 0x1}, 0x20) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000001140)={0x7, 0x10, '\x00', 0x0, &(0x7f0000001100)=[0x0, 0x0]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001180)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct}}) r2 = getpid() r3 = syz_open_procfs$namespace(r2, &(0x7f0000001580)='ns/uts\x00') ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000015c0)={{r1}, 0xe9, 0x93a7, 0x4}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001600)={0x7}, 0x8) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001780)={&(0x7f00000016c0)={0x9c, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x3, 0x5, 0x0, {0x160, 0x8, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3}, 0x300, 0x4f, 0x45}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x3, 0x0, 0x0, {0x5, 0x1ff6, 0x0, 0x8, 0x0, 0x1}, 0x400, 0x6, 0xd}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x0, 0x7, 0x0, {0x2, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x6, 0xffffbf7c, 0xb}}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x700, {0x9, 0x7fff, 0x7f, 0x9}}}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc}, 0x41) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001800)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) connect$inet6(r1, &(0x7f0000001a40)={0xa, 0x4e21, 0x3, @loopback, 0x536ce0e7}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000001a80), 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000001ac0)={0x6, 0x296, 0x0, 0x4, 0x81, 0x0, 0x40b}, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b00)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4, '\x00', 0x0, r0, 0x3, 0x2, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c00)={r6, 0x58, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x30, 0x140c, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004020}, 0x88c0) writev(r3, &(0x7f0000002d80)=[{&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="51ad38358142b0615d4766", 0xb}], 0x2) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000002dc0)=0x7f, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002e40), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000003000)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002e80)={0x10c, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x400}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0xf}, {0x8, 0x15, 0x3}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4441}, 0x4040) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x30, 0x1404, 0x100, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}}, 0x80) ioctl$XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f0000003140)={0x0, r3, r3, 0x2, 0xe2, '\x00', {0x3, 0x8001, 0x2, 0x655, 0x2, 0x3, 0x0, 0x33d, {0x80000000, 0x4}, {0x800, 0x7ff}, {0x40, 0x6}, 0x3, 0xfffffffb, 0x5ef, 0x1, 0x2, 0x3, 0x0, 0x8, 0x4, 0xa, '\x00', 0x3, 0xec, 0x4, 0x5}}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x3, 0x4) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003240), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x34, r9, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5}]}, 0x34}}, 0x40893) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003340)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x200, '\x00', r7, r0, 0x2, 0x4, 0x2}, 0x50) 1.465007348s ago: executing program 0 (id=8324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f0000000a00)=0x4, 0x4) bind$llc(r8, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) syz_emit_ethernet(0xae, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x78, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1, 0x1, "fe06000000e3"}]}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) close(r4) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f0000000a00)=0x4, 0x4) (async) bind$llc(r8, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) (async) syz_emit_ethernet(0xae, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x78, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1, 0x1, "fe06000000e3"}]}}}}}}, 0x0) (async) 1.464818431s ago: executing program 1 (id=8325): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x18, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x18}}, 0x44000) 1.38921247s ago: executing program 3 (id=8326): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r3, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x12}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r2}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8004) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r5, 0x1, 0x12, &(0x7f0000000500)=r5, 0x4) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="0a000100aaaa00"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.311088826s ago: executing program 1 (id=8327): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) (async, rerun: 64) r3 = socket(0x2, 0x80805, 0x0) (rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x84, @dev={0xac, 0x14, 0x14, 0x30}, 0x6e20, 0x3, 'lblc\x00', 0x1, 0x6, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004300)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x0, 0xfffc, 0xa3b}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) (async, rerun: 64) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0x81, 0x3, 0x2}, 0x10) (async, rerun: 64) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x80010, r4, 0xe2d9000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000011c0)={&(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)="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", 0x4, 0xffffffffffffffff, 0x9c1d459ef242e2c4}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r5, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendto$packet(r5, &(0x7f0000000380)="b252", 0x2, 0x4000000, &(0x7f0000000480)={0x11, 0x1, r7, 0x1, 0x0, 0x6, @random="f58e029fd257"}, 0x14) (async, rerun: 32) r8 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000300)="2c385aa3d49100dc6626c892b60700000000000000cb00060f02f8d240098f35e39b9fa4da58ce5603e3596f9fffe5c5fc21047a8d149e91fed988e1a9a66a927c505624e457574782eb4f0dde55b06a805e822cb0", 0x55) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000d220f15a2008423c3e96b4925d1074a0dd64208f745417", @ANYBLOB="d1c39690f472f7c6c5ff6e8b0eefa900f3a87266974ff352f21ed08fcaa8018eb5a79e87421d6363c9a3d7d15c3284b9e58f859a9ea6c85d30298fb3e5700146792070ba1c278f3ece26c7ef3c2c9c677a3e01d8185b255b769a53e6d567f5a72630440b55ac32b32389e32db1ce866aa0e4cffefce1a6536b19644e7b2bc6a2662649c907240c6cfe0bd2f8e01a4b3c481b31ed33744b1bf5fa928d5d64f785628f9017b960e6455df58424", @ANYBLOB="01002bbd7000fedbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900b00d00007300000018"], 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x80400d0) (async, rerun: 32) recvmmsg$unix(r10, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000200)=""/252, 0xfc}], 0x1}}], 0x1, 0x10000, 0x0) (rerun: 32) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) (rerun: 64) 1.189180395s ago: executing program 4 (id=8328): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x801) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) close(r1) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r3, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x72}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20d}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x44800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x11}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa54}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x65f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1b}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c819}, 0x20000080) 995.052337ms ago: executing program 3 (id=8329): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2d, &(0x7f0000000040)) (async) ioctl(r1, 0x8b2d, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x7) 943.051649ms ago: executing program 1 (id=8330): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001c00010029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="80effe0a0a000200aaaaaaaaaa0c"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x10, 0x8]}, 0x8) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3) 890.166105ms ago: executing program 2 (id=8331): r0 = socket(0x10, 0x3, 0x0) r1 = gettid() sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff28bd7000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c042000000000000140012800900010076657468000000000400028008001300", @ANYRES32=r1, @ANYBLOB="e22a960e4ca88c971ac2c5b1c653525c9b7384cfaac057e56fbcb3c9e447c3dbbbe46d97a52233201220f0ed6a5350716bd3bff0446e7f0baeac42f040b078af30"], 0x3c}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000b9402e12572a0000000000ec7bd37d6740333443580aea2bb45ea47707c6d6d335bd3343a5f13d2e5390b89c5635f81fa7b839ed13e02e1dae14cfe8a5cb95c082c419eac48af11ecba6665d3770d91d8e0f404737ae6c65356f1bbc09894bf78bc6c4851120cbd03d0fa308bb36d18549d83cb0f59cd40ed1c1a6f30d2e9c1ff1ef24f77e28c93b87c21394636ed2ee", @ANYRES32, @ANYBLOB="ffffff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000300"/28], 0x50) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x31, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x3) r4 = socket$netlink(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xe4}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000000100)=""/88, 0x58}], 0x2, 0xfffffff9, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fedbdf251c0000000e0003006e657464657673696d0000000f0002006e657464657673696d30000b0004000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4850) readv(r6, &(0x7f0000000680)=[{&(0x7f0000000580)=""/150, 0x96}, {&(0x7f0000000640)=""/5, 0x5}], 0x2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x9c, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4010080}, 0x24040884) 815.345931ms ago: executing program 0 (id=8332): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414aa00"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000000206c000000e0000001000000000000000000000000feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f000008"], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400f4ff14000103000000000000000005000000e8f4ca00f9f665f9b48299de8e4d3dcf58b4210ed80400986b46cc8fb30389d7c16caba7db"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 617.345252ms ago: executing program 4 (id=8333): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) read$alg(r1, &(0x7f0000000dc0)=""/134, 0x86) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_init_net_socket$ax25(0x3, 0x2, 0xda6118dfbc15f4d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "e84c4e835beeb26007f2d13c341d2dc7"}}}]}, 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 529.804025ms ago: executing program 1 (id=8334): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0x8000c934, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) 493.040633ms ago: executing program 2 (id=8335): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) (async) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x5}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @null]}, 0x48) (async) poll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x480}], 0x1, 0x33a0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r1, &(0x7f0000000280)={{0x3, @default, 0x5}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @null]}, 0x48) (async) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @null, 0x4}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) (async) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1) (async) sendmmsg$inet(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000100)=""/13, 0xd}], 0x2}, 0x5}], 0x1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) read(r7, &(0x7f00000003c0)=""/132, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) connect$can_bcm(r7, &(0x7f00000005c0)={0x1d, r8}, 0x10) (async) close(r0) r9 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r9, 0x110, 0x1, &(0x7f0000000ec0)='%){:-\x00', 0x6) 416.936147ms ago: executing program 3 (id=8336): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd65080000000000000000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x46, 0x0, &(0x7f0000000000)="378303076844268cb89e14f008004ee0ff", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000600)="27031600160014000000002f1eafacf706e105000000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x318, r5, 0xd02, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x39}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2d0, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x62, 0x3, "94a1f10a8eefeecba7d299f33519387ab772049e330f9b938779a02e0c39a71c679131949871c047860d8048c6782e85a6e35248924864cc7a3e324af4ea3d8ad9dfdf43628861ecebcec16e0e5a2a5a00f84f507325223c284205f17b93"}, @NL80211_BAND_5GHZ={0xff, 0x1, "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"}, @NL80211_BAND_6GHZ={0xdd, 0x3, "dc6f3ea9ba05d69e68e3968fcb2b5da3b6684031ed465d4179cd28575299d244ef82542ad09b6a9e2af244a28b3b58af607b7de5ea444447b8a6ac128aec100ab940bd410365a2f23695f99155bbd79525741057d2b7e855428e4267deeeb59450ae9ef474108817bcdf03b541d3849e87eb33b4833cd397bf8e9e18685431e7e9a29ba87dd75716beaf307c3eea34fd3fda8d2c7d900f114f5f7db6fd75e44e853cb9ed9d3c946a96d726f7f5063705b7d4b70ff536066efc82b831e470daf1260dd2c1d83933db9466fc7d433ee20e524fea5e7914d4e9ac"}, @NL80211_BAND_5GHZ={0x86, 0x1, "d709996b13532e12887847eda59af824bad28940fe728c0d108b49940170cd1c31d3db058f1871dbd6bef3741d26aa5f06756ff7b84ae9121046844b27c15fc3ce63fdee4db2350dd670fe740ba99b2c1ba9bcfd925c1b8f55dbb4cc2381ce9de1104d674ca758539e7213a7a561db5f362cf669ff46f4e13577f0bb8e525110660d"}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2410}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}]}, 0x318}, 0x1, 0x0, 0x0, 0x4000081}, 0x14) 370.438889ms ago: executing program 1 (id=8337): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) close(r0) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88", 0x7}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4000000) readv(r0, &(0x7f0000000440)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1) 282.17082ms ago: executing program 4 (id=8338): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) connect$unix(r0, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x10011, 0x1, 0x2, 0x2, 0xc}, 0x20) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000000e000300686173683a6970000c00078005001400000000000900020073797a30000000000000020073797a30000000000000036600686173683a697000"], 0x50}}, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$key(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x10, 0xe5, 0x5, 0x6, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_x_nat_t_type={0x1, 0x14, 0xff}, @sadb_x_sa2={0x2, 0x13, 0x13, 0x0, 0x0, 0x70bd2a, 0x3504}]}, 0x30}}, 0x8080) recvmsg(r2, &(0x7f0000000540)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000300)=""/98, 0x62}, {&(0x7f0000000380)=""/11, 0xb}, {&(0x7f00000003c0)=""/238, 0xee}], 0x5}, 0x40000000) 197.711201ms ago: executing program 4 (id=8339): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000001780)=0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xc0000c4}, 0x4c000) 127.516712ms ago: executing program 1 (id=8340): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x40}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0x8, 0x5, 0x0, 0x4b7b61cc, 0x3, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x1, 0x8, 0xa5b4, 0x1}}, {0x6, 0x2, [0x67]}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 64.984691ms ago: executing program 3 (id=8341): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x80, 0x5, 0x359}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x77, 0x6, 0x24, @local, @remote, 0x20, 0x8000, 0x6, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x8000, 0x8000, 0x7fff, 0x6, {{0x24, 0x4, 0x0, 0x33, 0x90, 0x3, 0x0, 0xd1, 0x29, 0x0, @broadcast, @local, {[@ssrr={0x89, 0x17, 0xef, [@broadcast, @rand_addr=0x64010102, @multicast1, @broadcast, @empty]}, @rr={0x7, 0x7, 0x35, [@rand_addr=0x64010100]}, @generic={0x44, 0x7, "6ac582db0a"}, @timestamp_addr={0x44, 0x3c, 0xb6, 0x1, 0x8, [{@multicast2, 0x7}, {@multicast1}, {@local, 0x3}, {@loopback, 0x5}, {@broadcast, 0x2}, {@multicast1, 0x4}, {@private=0xa010101, 0x8800000}]}, @lsrr={0x83, 0x7, 0x1a, [@dev={0xac, 0x14, 0x14, 0xc}]}, @cipso={0x86, 0x14, 0x3, [{0x5, 0xe, "ff5737fa019f185716a10214"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x40, 0x700, 0x10000, 0x80000001, {{0x22, 0x4, 0x3, 0x6, 0x88, 0x65, 0x0, 0x4, 0x6, 0x0, @multicast1, @multicast2, {[@noop, @generic={0x93, 0x5, "b33ba8"}, @generic={0x44, 0x5, "1bee64"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop, @end, @cipso={0x86, 0x55, 0x3, [{0x5, 0x9, "39bf6a5848d8bb"}, {0x5, 0x3, '.'}, {0x7, 0x2}, {0x2, 0x10, "db67d530cd61e95d5a78579b276d"}, {0x6, 0x12, "c4af9a1a513a602e63faa7bc4212d829"}, {0x0, 0x9, "ae1f2cdf635404"}, {0x6, 0xb, "c82030aba56c32df46"}, {0x0, 0x2}, {0x7, 0x9, "a2b2e5ae678d38"}]}, @lsrr={0x83, 0x7, 0xd7, [@empty]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@RTM_DELMDB={0xd8, 0x55, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x2, 0x2, {@in6_addr=@remote, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2cfd19425bbf9102, 0x2, {@in6_addr=@mcast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x1, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x1, {@in6_addr=@private2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x12}}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008001}, 0x60000890) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000500)={0x4, 0x80000000}, 0x8) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001680)={0x1b, 0x0, 0x0, 0x3, 0x0, r0, 0x4, '\x00', r4, r0, 0x5, 0x3, 0x3}, 0x50) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000001800)={r0, &(0x7f0000001700)='+)\x00', 0x80, &(0x7f0000001740)={@_ha_fsid={[0x7fff, 0x8]}, {0x4, 0x6f9e, 0x1, 0x8000000000000000}}, 0xffff, &(0x7f0000001780), &(0x7f00000017c0)=0x5}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x13, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x941}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, @generic={0x6, 0x5, 0x3, 0x3, 0x3ff}]}, &(0x7f0000000600)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000640)=""/4096, 0x40f00, 0xa1, '\x00', r2, 0x25, r0, 0x8, &(0x7f0000001640)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001840)=[r0, r6, r7, r0, r0], &(0x7f0000001880)=[{0x1, 0x1, 0xd, 0xc}, {0x4, 0x3, 0x4, 0x5}, {0x3, 0x5, 0x2, 0xa}, {0x3, 0x1, 0xb, 0x3}, {0x1, 0x3, 0x8, 0x5}, {0x5, 0x1, 0x8}], 0x10, 0x4}, 0x94) getsockname$packet(r7, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001a00)=0x14) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000001b00)={&(0x7f0000001a40), 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x24004090) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000001b40)={0x4}, 0x4) ioctl$sock_bt_hci(r7, 0x400448e0, &(0x7f0000001b80)="aa4e1026b91ff7311e280eb20ae733512d9cc9af44448396edb3292735c3074de45aa544199065d2c647b05ccdecafd94eb3da541b56ed3818d99f89aa47c79d0a97acc1d34641677362dfdbd9a43ac4c20371821a419be68da215fe4d8754c2ecb311c4072b9568c6ff57569d910954ba63d106cab00e0b5eb04c5a92b02efcab67d52ad52388dc5e620a0019c5e5ef00d8a25a95c6ad2690ef905192f5d97091d748992a304c062c7503ba0a11ab953c193884a75772ed22314f5badd9e0dee659a2387720f6c2979079516b050d3a1785bb9cd617fc154ca3aabbd8d57fd4bbcf17f71cd39b82a97252fc33825c21fbdc") (async) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000001c80)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000001d80)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000001dc0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x4e21, 0x0, 0x4e22, 0x0, 0xa, 0xa0, 0xa0, 0x3b, 0x0, r9}, {0x8, 0x200, 0x8, 0x58, 0x1, 0xfffffffffffffffa, 0x100000001, 0x1}, {0x0, 0x9, 0x8, 0x7fffffffffffffff}, 0x0, 0x6e6bb5, 0x1, 0x1, 0x2, 0x1}, {{@in=@private=0xa010100, 0x4d5, 0x33}, 0x2, @in6=@empty, 0x3501, 0x2, 0x3, 0x7, 0x5, 0x4, 0x800}}, 0xe8) (async) r10 = socket(0x9, 0x1, 0x9) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f00), r7) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001f40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x1c, r12, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r10, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x5c, r12, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe, 0x14}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}]}, 0x5c}}, 0x20045015) r14 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDELRT(r14, 0x890c, &(0x7f00000021c0)={0x0, {0x2, 0xfff8, @private=0xa010100}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e24, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002180)='ipvlan1\x00', 0x8001, 0x5, 0x5}) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002240)={0x3, 0x1000}, 0x4) (async) getsockname$packet(r7, &(0x7f0000002280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000022c0)=0x14) sendmsg$nl_xfrm(r7, &(0x7f00000024c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002480)={&(0x7f0000002340)=@newsa={0x10c, 0x10, 0x300, 0x70bd2d, 0x25dfdbfb, {{@in=@multicast2, @in=@private=0xa010102, 0x4e20, 0xfffa, 0x4e23, 0x5, 0x2, 0x20, 0x20, 0x4, r3, r9}, {@in6=@empty, 0x4d6, 0x2b}, @in6=@local, {0x4, 0x67, 0x800000, 0xfffffffffffffffd, 0x3, 0x3, 0xfffffffffffffff7, 0x5}, {0x8000000000000001, 0x4, 0x9, 0xfffffffffffff0a0}, {0x111, 0x2, 0x4}, 0x70bd29, 0x34ff, 0x2, 0x4, 0x6, 0x20}, [@encap={0x1c, 0x4, {0x0, 0x4e22, 0x4e21, @in=@local}}]}, 0x10c}}, 0x890) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r11, &(0x7f0000002600)={&(0x7f0000002500), 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x58, r12, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x68}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1bb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3de}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x235}]}, 0x58}, 0x1, 0x0, 0x0, 0x35b63fa351fb63e8}, 0x20000000) 0s ago: executing program 4 (id=8342): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800038005000700050000000a0014000180c20000000000"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): Released all slaves [ 807.043720][ T6022] bond6 (unregistering): Released all slaves [ 807.067730][ T6022] bond7 (unregistering): Released all slaves [ 807.086069][ T6022] bond8 (unregistering): Released all slaves [ 807.108324][ T6022] bond9 (unregistering): Released all slaves [ 807.126239][ T6022] bond10 (unregistering): Released all slaves [ 807.143764][T29906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.151000][T29906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.177551][T29906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.211226][T29906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.234093][T29906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.285158][T29906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.322792][ T5832] Bluetooth: hci3: command tx timeout [ 807.481856][ T9402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.716649][T30051] : entered promiscuous mode [ 807.722041][ T9402] wg1 speed is unknown, defaulting to 1000 [ 807.742313][ T9402] syz2: Port: 1 Link DOWN [ 807.786410][T30062] __nla_validate_parse: 1 callbacks suppressed [ 807.786431][T30062] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6305'. [ 807.807861][T29525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.868376][ T6022] : left promiscuous mode [ 807.967422][T29906] hsr_slave_0: entered promiscuous mode [ 807.986067][T29906] hsr_slave_1: entered promiscuous mode [ 808.005694][T29906] debugfs: 'hsr0' already exists in 'hsr' [ 808.027800][T29906] Cannot create hsr debugfs directory [ 808.110807][ T9402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.120147][ T9402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.223021][ T6022] tipc: Disabling bearer [ 808.237414][ T6022] tipc: Left network mode [ 808.518931][T30089] netlink: 'syz.0.6311': attribute type 11 has an invalid length. [ 808.545248][T30089] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6311'. [ 808.608577][T30092] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6312'. [ 808.838340][ T9412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.085537][T30094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6313'. [ 809.401222][ T5832] Bluetooth: hci3: command tx timeout [ 809.874935][ T9412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.914202][T29525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.155528][ T9401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.478830][ T5832] Bluetooth: hci3: command tx timeout [ 811.954624][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.297112][T30102] netlink: 'syz.1.6315': attribute type 1 has an invalid length. [ 812.309157][T30102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6315'. [ 812.442744][T30104] syzkaller0: entered promiscuous mode [ 812.463922][T30104] syzkaller0: entered allmulticast mode [ 812.502469][T30100] syzkaller0: entered promiscuous mode [ 812.513808][T30100] syzkaller0: entered allmulticast mode [ 812.557663][T30118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 812.647735][T30118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 812.815423][T30127] netlink: 'syz.4.6319': attribute type 1 has an invalid length. [ 813.059730][T30137] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 813.336076][T30148] x_tables: ip6_tables: REJECT target: only valid in filter table, not [ 813.540751][T30158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6328'. [ 813.736482][T30169] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 813.768698][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 814.205194][T30189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6335'. [ 814.534603][T30209] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.6338'. [ 814.582316][T30209] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.6338'. [ 814.775868][ T6022] hsr_slave_0: left promiscuous mode [ 814.797265][ T6022] hsr_slave_1: left promiscuous mode [ 814.830079][ T6022] veth1_macvtap: left promiscuous mode [ 814.836503][ T6022] veth1_vlan: left promiscuous mode [ 815.028335][ T6022] pim6reg527 (unregistering): left allmulticast mode [ 815.046973][ T6022] pim6reg (unregistering): left allmulticast mode [ 815.348497][ T6022] team0 (unregistering): Port device team_slave_1 removed [ 815.365361][ T6022] team0 (unregistering): Port device team_slave_0 removed [ 815.770509][T30234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6344'. [ 816.059000][T30247] tipc: Enabling of bearer rejected, failed to enable media [ 816.121742][T30241] netlink: 'syz.0.6344': attribute type 8 has an invalid length. [ 816.187024][T30241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6344'. [ 816.277732][ T6022] IPVS: stop unused estimator thread 0... [ 816.442501][T30263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6350'. [ 816.588762][T30272] netlink: 'syz.0.6352': attribute type 23 has an invalid length. [ 816.612842][T29906] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 816.673722][T29906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 816.690206][T29906] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 816.752636][T29906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 816.772718][T29906] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 816.824977][T29906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 816.846169][T29906] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 816.908904][T29906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 816.992031][ T6027] wlan1: Trigger new scan to find an IBSS to join [ 817.170440][T30307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6360'. [ 817.424082][T30312] bond2: (slave vxcan2): The slave device specified does not support setting the MAC address [ 817.453093][T30312] bond2: (slave vxcan2): Error -95 calling set_mac_address [ 817.585835][T30323] syzkaller0: entered promiscuous mode [ 817.600330][T30323] syzkaller0: entered allmulticast mode [ 817.794559][T29906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.925214][T29906] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.975494][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.982772][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.068289][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.075536][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.256216][T30346] netem: change failed [ 818.325962][T30346] netem: change failed [ 818.352823][T30348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 818.380595][T30352] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6370'. [ 818.406812][T30355] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6370'. [ 818.601956][T30364] netlink: 'syz.0.6372': attribute type 1 has an invalid length. [ 818.971963][T30383] netlink: 'syz.3.6376': attribute type 11 has an invalid length. [ 819.042000][T30388] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 819.159487][T29906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.346155][T29906] veth0_vlan: entered promiscuous mode [ 819.397793][T29906] veth1_vlan: entered promiscuous mode [ 819.524606][T29906] veth0_macvtap: entered promiscuous mode [ 819.552718][T29906] veth1_macvtap: entered promiscuous mode [ 819.621262][T29906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.665254][T29906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.707725][ T1091] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.811150][ T1091] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.856654][ T1091] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.884805][ T1091] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.162680][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.192438][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.311973][ T6027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.339383][ T6027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.727992][T30449] ip6gre0: Master is either lo or non-ether device [ 820.807479][T30454] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6263'. [ 820.859968][T30454] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.867435][T30454] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.046573][T30463] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6393'. [ 821.495720][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 821.510932][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 821.521034][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 821.529122][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 821.537425][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 821.852408][T30494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6402'. [ 821.918286][T30494] netlink: 'syz.1.6402': attribute type 1 has an invalid length. [ 821.930211][T30495] bridge2: entered promiscuous mode [ 821.942239][T30495] bridge2: entered allmulticast mode [ 821.950080][ T62] wlan1: Trigger new scan to find an IBSS to join [ 821.956707][T30494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6402'. [ 821.978627][T30495] team0: Port device bridge2 added [ 822.216598][T30502] netlink: 'syz.3.6404': attribute type 2 has an invalid length. [ 822.232384][T30502] netlink: 'syz.3.6404': attribute type 2 has an invalid length. [ 822.422352][ T1091] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.634659][ T1091] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.718333][ T1091] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.739177][T30482] chnl_net:caif_netlink_parms(): no params data found [ 822.896811][ T6027] wlan1: Creating new IBSS network, BSSID ce:20:97:a3:e3:3d [ 823.116813][T30482] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.135171][T30482] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.156222][T30482] bridge_slave_0: entered allmulticast mode [ 823.171620][T30482] bridge_slave_0: entered promiscuous mode [ 823.189891][T30482] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.202917][T30482] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.214207][T30482] bridge_slave_1: entered allmulticast mode [ 823.223784][T30482] bridge_slave_1: entered promiscuous mode [ 823.323952][T30482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.376027][T30482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.493283][T30482] team0: Port device team_slave_0 added [ 823.512727][T30482] team0: Port device team_slave_1 added [ 823.520085][ T1091] bridge_slave_0: left promiscuous mode [ 823.526496][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.631047][ T5145] Bluetooth: hci1: command tx timeout [ 823.795584][ T1091] bond10 (unregistering): (slave geneve3): Releasing active interface [ 823.814005][ T1091] bond6 (unregistering): (slave geneve2): Releasing active interface [ 823.993700][ T1091] bond1 (unregistering): Released all slaves [ 824.010696][ T1091] bond2 (unregistering): Released all slaves [ 824.028913][ T1091] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 824.048034][ T1091] bond3 (unregistering): Released all slaves [ 824.063897][ T1091] bond0 (unregistering): Released all slaves [ 824.079757][ T1091] bond4 (unregistering): Released all slaves [ 824.095536][ T1091] bond5 (unregistering): Released all slaves [ 824.135131][ T1091] bond6 (unregistering): Released all slaves [ 824.156318][ T1091] bond7 (unregistering): Released all slaves [ 824.185705][ T1091] bond8 (unregistering): Released all slaves [ 824.207436][ T1091] bond9 (unregistering): Released all slaves [ 824.241257][ T1091] bond10 (unregistering): Released all slaves [ 824.337217][T30482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.357115][T30482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.404980][T30482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.433887][T30482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.456498][T30482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.500499][T30482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.676490][T30482] hsr_slave_0: entered promiscuous mode [ 824.683937][T30482] hsr_slave_1: entered promiscuous mode [ 824.691646][T30482] debugfs: 'hsr0' already exists in 'hsr' [ 824.697577][T30482] Cannot create hsr debugfs directory [ 825.260503][T30506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 825.561095][T30566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6414'. [ 825.709971][ T5145] Bluetooth: hci1: command tx timeout [ 825.817430][T30570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6414'. [ 825.880121][T30572] xt_hashlimit: invalid interval [ 826.233774][T30482] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 826.252106][T30482] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 826.274660][T30482] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 826.317450][T30482] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 826.394551][T30482] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 826.436400][T30482] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 826.463272][T30482] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 826.533052][T30482] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 826.641683][T30615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6422'. [ 826.662859][ T1091] hsr_slave_0: left promiscuous mode [ 826.670339][ T1091] hsr_slave_1: left promiscuous mode [ 826.677576][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.074795][ T1091] team0 (unregistering): Port device team_slave_1 removed [ 827.098526][ T1091] team0 (unregistering): Port device team_slave_0 removed [ 827.673069][T30482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.721037][ T1091] IPVS: stop unused estimator thread 0... [ 827.764173][T30482] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.789773][ T5145] Bluetooth: hci1: command tx timeout [ 827.834192][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.841451][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.908723][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.916036][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.989965][T30656] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 827.997985][T30656] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 828.005985][T30656] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 828.013952][T30656] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 828.021932][T30656] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 828.029894][T30656] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 828.037864][T30656] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 828.045847][T30656] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 828.053821][T30656] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 828.061783][T30656] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 828.098725][T30659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6432'. [ 828.245223][T30657] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6430'. [ 828.440767][T30674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6433'. [ 828.930203][T30690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6437'. [ 828.958856][T30690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6437'. [ 829.256188][T30482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.797754][T30721] netlink: 'syz.0.6445': attribute type 18 has an invalid length. [ 829.826178][T30718] tipc: Started in network mode [ 829.853070][T30718] tipc: Node identity f60128a34828, cluster identity 4711 [ 829.871353][ T5145] Bluetooth: hci1: command tx timeout [ 829.885168][T30718] tipc: Enabled bearer , priority 0 [ 829.934585][T30728] syzkaller0: entered promiscuous mode [ 829.963581][T30728] syzkaller0: entered allmulticast mode [ 830.125059][T30718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6444'. [ 830.145523][T30718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6444'. [ 830.159929][T30738] netlink: 67 bytes leftover after parsing attributes in process `syz.1.6446'. [ 830.179117][T30718] netlink: 'syz.3.6444': attribute type 12 has an invalid length. [ 830.202083][T30718] netlink: 'syz.3.6444': attribute type 11 has an invalid length. [ 830.637435][T30728] tipc: Resetting bearer [ 830.655008][T30743] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 830.686571][T30717] tipc: Resetting bearer [ 830.721878][T30717] tipc: Disabling bearer [ 831.040869][T30482] veth0_vlan: entered promiscuous mode [ 831.097812][T30482] veth1_vlan: entered promiscuous mode [ 831.245237][T30482] veth0_macvtap: entered promiscuous mode [ 831.294800][T30482] veth1_macvtap: entered promiscuous mode [ 831.380699][T30482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.433552][T30482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.479086][ T1091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.515080][ T1091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.558996][ T1091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.588940][ T1091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.917788][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.946263][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.075742][T30801] netlink: 'syz.1.6458': attribute type 13 has an invalid length. [ 832.086402][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.115889][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.140483][T30801] netlink: 'syz.1.6458': attribute type 58 has an invalid length. [ 832.156811][T30801] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6458'. [ 832.405700][T30816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6461'. [ 832.721885][T30828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6463'. [ 832.908244][T30838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6464'. [ 834.056036][T30876] netlink: 'syz.1.6471': attribute type 1 has an invalid length. [ 834.112907][T30876] 8021q: adding VLAN 0 to HW filter on device bond3 [ 834.171445][T30880] bond3: (slave ip6erspan0): making interface the new active one [ 834.208125][T30880] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 835.717849][T30830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 836.062271][T30938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6478'. [ 836.127445][T30941] netlink: 'syz.2.6475': attribute type 21 has an invalid length. [ 836.131352][T30936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6477'. [ 836.184452][T30941] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6475'. [ 836.395009][T30941] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6475'. [ 836.447617][T30955] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 836.598998][T30950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.653606][T30968] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 836.932787][T30983] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6490'. [ 836.957662][T30987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6489'. [ 837.327205][T31006] __nla_validate_parse: 1 callbacks suppressed [ 837.327226][T31006] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6495'. [ 837.587824][T31016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6497'. [ 837.731706][T31018] bond1: option lp_interval: invalid value (0) [ 837.740424][T31018] bond1: option lp_interval: allowed values 1 - 2147483647 [ 837.755861][T31018] bond1 (unregistering): Released all slaves [ 837.846490][T31019] net_ratelimit: 45 callbacks suppressed [ 837.846512][T31019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 837.984752][T31039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6505'. [ 838.133477][T31051] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6509'. [ 838.144299][T31051] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 838.320685][T31057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 838.466356][T31073] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6514'. [ 838.497141][T31071] ip6gre1: entered allmulticast mode [ 838.711999][T31086] netlink: 'syz.3.6517': attribute type 10 has an invalid length. [ 838.766080][T31086] team0 (unregistering): Port device team_slave_0 removed [ 838.793553][T31086] team0 (unregistering): Port device team_slave_1 removed [ 838.837197][T31088] geneve2: entered promiscuous mode [ 838.843516][T31088] geneve2: entered allmulticast mode [ 838.850935][T30924] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 838.865768][T30924] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 838.875515][T30924] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 838.888284][T30924] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 838.976260][T31090] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6519'. [ 839.107589][T31096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6522'. [ 839.224055][T31101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6523'. [ 841.064263][T31043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 841.077367][T31055] tipc: Started in network mode [ 841.087531][T31055] tipc: Node identity aaaaaaaaaa2, cluster identity 4711 [ 841.095242][T31055] tipc: Enabled bearer , priority 24 [ 841.377517][T31123] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6530'. [ 841.429745][T31123] netlink: 41 bytes leftover after parsing attributes in process `syz.2.6530'. [ 841.860664][T31153] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 842.047534][T31157] syzkaller0: entered promiscuous mode [ 842.064984][T31157] syzkaller0: entered allmulticast mode [ 842.262453][ T979] tipc: Node number set to 9087658 [ 842.401310][T31173] __nla_validate_parse: 2 callbacks suppressed [ 842.401330][T31173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6541'. [ 842.602622][T31188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 842.879791][T31204] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 842.890520][T31203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.897460][T31204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 843.052026][T31206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6548'. [ 843.387770][T31219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 843.479897][T31234] sctp: [Deprecated]: syz.2.6553 (pid 31234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 843.479897][T31234] Use struct sctp_sack_info instead [ 843.482050][T31218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 843.832566][T31253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6562'. [ 843.994923][T31261] Bluetooth: MGMT ver 1.23 [ 844.352972][T31281] xt_time: unknown flags 0xf4 [ 844.511651][T31290] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6576'. [ 844.681311][T31305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6579'. [ 844.709675][T31296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6579'. [ 845.043265][T31326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6587'. [ 845.068957][T31326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6587'. [ 845.281865][T31334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6591'. [ 845.338129][T31335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6591'. [ 845.600276][T31348] syzkaller0: entered promiscuous mode [ 845.605856][T31348] syzkaller0: entered allmulticast mode [ 845.902647][T31367] netlink: 'syz.3.6602': attribute type 2 has an invalid length. [ 845.929347][T31367] netlink: 'syz.3.6602': attribute type 2 has an invalid length. [ 846.152706][T31379] : renamed from veth1_vlan (while UP) [ 846.242237][T31382] netlink: 'syz.0.6607': attribute type 1 has an invalid length. [ 846.353835][T31382] bond3: entered promiscuous mode [ 846.360991][T31382] 8021q: adding VLAN 0 to HW filter on device bond3 [ 846.380486][T31386] bridge_slave_0: left allmulticast mode [ 846.386256][T31386] bridge_slave_0: left promiscuous mode [ 846.392576][T31386] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.406486][T31386] bridge_slave_1: left allmulticast mode [ 846.412982][T31386] bridge_slave_1: left promiscuous mode [ 846.418855][T31386] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.443143][T31386] bond0: (slave bond_slave_0): Releasing backup interface [ 846.485138][T31386] bond0: (slave bond_slave_1): Releasing backup interface [ 846.524891][T31386] team0: Port device team_slave_0 removed [ 846.573391][T31386] team0: Port device team_slave_1 removed [ 846.590786][T31386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.598654][T31386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.608776][T31386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.616425][T31386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.628781][T31386] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 846.702133][T31382] bond3: (slave bridge3): making interface the new active one [ 846.713743][T31382] bridge3: entered promiscuous mode [ 846.754043][T31382] bridge3: left promiscuous mode [ 847.788704][T31452] sctp: [Deprecated]: syz.3.6625 (pid 31452) Use of int in maxseg socket option. [ 847.788704][T31452] Use struct sctp_assoc_value instead [ 847.988770][T31462] __nla_validate_parse: 6 callbacks suppressed [ 847.988798][T31462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6629'. [ 848.221095][T31472] netlink: 'syz.0.6634': attribute type 1 has an invalid length. [ 848.306799][T31474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6635'. [ 848.339955][T31474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6635'. [ 848.377638][T31472] 8021q: adding VLAN 0 to HW filter on device bond4 [ 848.500654][T31478] bond4: (slave geneve2): making interface the new active one [ 848.529831][T31478] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 848.540604][T31491] sctp: [Deprecated]: syz.3.6639 (pid 31491) Use of struct sctp_assoc_value in delayed_ack socket option. [ 848.540604][T31491] Use struct sctp_sack_info instead [ 848.741173][T31500] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6641'. [ 849.227477][T31526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6649'. [ 849.253289][T31526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6649'. [ 849.428147][T31531] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6651'. [ 849.494709][T31531] xt_TPROXY: Can be used only with -p tcp or -p udp [ 849.559932][ T979] IPVS: starting estimator thread 0... [ 849.566016][T31540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6654'. [ 849.669696][T31541] IPVS: using max 26 ests per chain, 62400 per kthread [ 849.745324][T31545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6657'. [ 849.785635][T31546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6657'. [ 849.954717][T31554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 850.089022][T31560] netlink: 'syz.0.6662': attribute type 10 has an invalid length. [ 850.196954][T31557] bond2: option miimon: invalid value (18446744073709551585) [ 850.235700][T31557] bond2: option miimon: allowed values 0 - 2147483647 [ 850.248330][T31570] netlink: 'syz.4.6663': attribute type 23 has an invalid length. [ 850.273619][T31557] bond2 (unregistering): Released all slaves [ 850.333305][T31572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 850.484056][T31582] netlink: 'syz.4.6667': attribute type 8 has an invalid length. [ 850.614396][T31589] netlink: 'syz.4.6667': attribute type 11 has an invalid length. [ 850.904805][T31593] netlink: 'syz.1.6670': attribute type 11 has an invalid length. [ 851.425205][T31623] syzkaller0: entered promiscuous mode [ 851.442540][T31633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.452455][T31623] syzkaller0: entered allmulticast mode [ 852.047438][T31659] netlink: 'syz.2.6692': attribute type 1 has an invalid length. [ 852.153026][T31663] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 852.426298][T31678] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 852.487731][T31683] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 852.538971][T31677] vlan2: entered allmulticast mode [ 852.594914][T31677] mac80211_hwsim hwsim73 wlan0: entered allmulticast mode [ 852.673612][T31686] syzkaller0: entered promiscuous mode [ 852.697276][T31686] syzkaller0: entered allmulticast mode [ 852.890886][T30911] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 852.977474][T31706] bridge0: port 3(vlan2) entered blocking state [ 852.996121][T31706] bridge0: port 3(vlan2) entered disabled state [ 853.011277][T31706] vlan2: entered allmulticast mode [ 853.016634][T31706] geneve0: entered allmulticast mode [ 853.025169][T31706] vlan2: entered promiscuous mode [ 853.031507][T31706] geneve0: entered promiscuous mode [ 853.075802][T31702] : entered promiscuous mode [ 853.143649][T31709] __nla_validate_parse: 8 callbacks suppressed [ 853.143677][T31709] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6705'. [ 853.237650][T31709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6705'. [ 853.312174][T31715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6707'. [ 853.442936][T31725] netlink: 'syz.1.6710': attribute type 83 has an invalid length. [ 853.694887][T31739] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.702311][T31739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.709962][T31739] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.717169][T31739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.025683][T31754] syzkaller0: entered promiscuous mode [ 854.045243][T31754] syzkaller0: entered allmulticast mode [ 854.078468][T31768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6723'. [ 854.104801][T31763] syzkaller0: entered promiscuous mode [ 854.124491][T31768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6723'. [ 854.138166][T31763] syzkaller0: entered allmulticast mode [ 854.302552][T31783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6727'. [ 854.535002][T31795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6731'. [ 854.546897][T31795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6731'. [ 857.118454][T31783] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 857.121186][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 857.142139][ C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 857.269961][T31810] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 857.518920][T31822] netlink: 'syz.2.6738': attribute type 1 has an invalid length. [ 857.705126][T31822] 8021q: adding VLAN 0 to HW filter on device bond2 [ 857.746588][T31837] netlink: 'syz.1.6741': attribute type 83 has an invalid length. [ 857.779002][T31830] bond2: (slave veth0_to_bond): making interface the new active one [ 857.793505][T31830] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 857.816783][T31835] bond2: entered promiscuous mode [ 857.842425][T31835] veth0_to_bond: entered promiscuous mode [ 857.848502][T31835] bond2: entered allmulticast mode [ 857.865758][T31835] veth0_to_bond: entered allmulticast mode [ 858.097044][T31854] netlink: 'syz.2.6747': attribute type 10 has an invalid length. [ 858.109115][T31854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6747'. [ 858.166063][T31854] team_slave_0: Caught tx_queue_len zero misconfig [ 858.387469][T31869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6752'. [ 858.413361][T31869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6752'. [ 858.497228][T31880] netlink: 'syz.1.6755': attribute type 11 has an invalid length. [ 858.536798][T31880] netlink: 'syz.1.6755': attribute type 11 has an invalid length. [ 858.561934][T31880] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6755'. [ 858.631003][T31887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6757'. [ 858.805955][T31896] netlink: 'syz.1.6759': attribute type 4 has an invalid length. [ 858.855643][T31896] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6759'. [ 858.894945][T31899] geneve3: entered promiscuous mode [ 858.910552][T31899] geneve3: entered allmulticast mode [ 858.978404][T31906] netlink: 'syz.2.6761': attribute type 4 has an invalid length. [ 859.017630][T31906] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6761'. [ 859.079061][T31915] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.6761'. [ 859.294763][T31922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6765'. [ 859.376350][T31926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6767'. [ 859.458872][T31932] netlink: 'syz.3.6768': attribute type 1 has an invalid length. [ 859.471311][T31928] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 859.554144][T31936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6771'. [ 859.577370][T31934] SET target dimension over the limit! [ 859.706294][T31942] xt_hashlimit: size too large, truncated to 1048576 [ 860.258313][T31968] netlink: 'syz.3.6780': attribute type 1 has an invalid length. [ 860.485884][T31978] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 860.708961][T31992] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 860.997722][T32010] netlink: 'syz.2.6792': attribute type 1 has an invalid length. [ 861.007020][T32010] netlink: 'syz.2.6792': attribute type 2 has an invalid length. [ 861.392735][T32030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 861.751045][T32047] xt_socket: unknown flags 0xe4 [ 861.980412][T32065] netlink: 'syz.1.6814': attribute type 29 has an invalid length. [ 862.148851][T32067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.191981][T32067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.226652][T32067] bond0 (unregistering): Released all slaves [ 862.546858][T32093] validate_nla: 2 callbacks suppressed [ 862.546880][T32093] netlink: 'syz.1.6824': attribute type 2 has an invalid length. [ 862.711606][T32102] netlink: 'syz.2.6826': attribute type 1 has an invalid length. [ 862.847884][T32108] netlink: 'syz.4.6828': attribute type 9 has an invalid length. [ 863.033295][T32116] netlink: 'syz.0.6831': attribute type 1 has an invalid length. [ 863.075284][T32116] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 863.386149][T32133] bond0: Removing last ns target with arp_interval on [ 863.587072][ T9402] IPVS: starting estimator thread 0... [ 863.593931][T32154] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20265 [ 863.644004][T32156] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20265 [ 863.700939][T32155] IPVS: using max 29 ests per chain, 69600 per kthread [ 863.817932][T32166] FAULT_INJECTION: forcing a failure. [ 863.817932][T32166] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 863.832258][T32166] CPU: 0 UID: 0 PID: 32166 Comm: syz.1.6843 Not tainted syzkaller #0 PREEMPT(full) [ 863.832289][T32166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 863.832312][T32166] Call Trace: [ 863.832326][T32166] [ 863.832336][T32166] dump_stack_lvl+0xe8/0x150 [ 863.832380][T32166] should_fail_ex+0x412/0x560 [ 863.832415][T32166] _copy_to_user+0x31/0xb0 [ 863.832450][T32166] simple_read_from_buffer+0xe1/0x170 [ 863.832474][T32166] proc_fail_nth_read+0x1bb/0x230 [ 863.832498][T32166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 863.832522][T32166] ? rw_verify_area+0x2a6/0x4d0 [ 863.832544][T32166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 863.832566][T32166] vfs_read+0x20c/0xa70 [ 863.832591][T32166] ? __pfx___mutex_lock+0x10/0x10 [ 863.832618][T32166] ? __pfx_vfs_read+0x10/0x10 [ 863.832641][T32166] ? __fget_files+0x2a/0x420 [ 863.832664][T32166] ? __fget_files+0x3a0/0x420 [ 863.832683][T32166] ? __fget_files+0x2a/0x420 [ 863.832708][T32166] ksys_read+0x150/0x270 [ 863.832732][T32166] ? __pfx_ksys_read+0x10/0x10 [ 863.832760][T32166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.832777][T32166] do_syscall_64+0x15f/0xf80 [ 863.832796][T32166] ? trace_irq_disable+0x3b/0x140 [ 863.832813][T32166] ? clear_bhb_loop+0x40/0x90 [ 863.832831][T32166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.832850][T32166] RIP: 0033:0x7f893b95d04e [ 863.832868][T32166] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 863.832882][T32166] RSP: 002b:00007f893c8bafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 863.832903][T32166] RAX: ffffffffffffffda RBX: 00007f893c8bb6c0 RCX: 00007f893b95d04e [ 863.832915][T32166] RDX: 000000000000000f RSI: 00007f893c8bb0a0 RDI: 0000000000000007 [ 863.832925][T32166] RBP: 00007f893c8bb090 R08: 0000000000000000 R09: 0000000000000000 [ 863.832934][T32166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.832944][T32166] R13: 00007f893bc16128 R14: 00007f893bc16090 R15: 00007fff9fe2eb68 [ 863.832968][T32166] [ 866.182654][T32128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 866.431010][T32169] netlink: 'syz.3.6845': attribute type 4 has an invalid length. [ 866.441587][T32172] __nla_validate_parse: 22 callbacks suppressed [ 866.441610][T32172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6846'. [ 866.468937][T32173] syzkaller0: entered promiscuous mode [ 866.479755][T32173] syzkaller0: entered allmulticast mode [ 866.630311][T32172] bond1: entered promiscuous mode [ 866.640082][T32172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 866.736102][T32190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6851'. [ 866.788469][T32172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 866.796050][T32172] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 866.822320][T32172] bond1: (slave sit1): Error -95 calling set_mac_address [ 866.834315][T32185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6851'. [ 866.844079][T32189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6852'. [ 866.872914][T32189] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6852'. [ 866.913386][T32189] netlink: 'syz.0.6852': attribute type 5 has an invalid length. [ 866.960868][T32189] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6852'. [ 867.012857][T32198] lo: Caught tx_queue_len zero misconfig [ 867.128922][T32202] dvmrp0: entered allmulticast mode [ 867.166423][T29525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.212314][T32208] netlink: 'syz.4.6858': attribute type 29 has an invalid length. [ 867.262024][T32208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6858'. [ 867.598530][T32229] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6862'. [ 867.620189][T32238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6864'. [ 867.637619][T32238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 867.673525][T32241] mac80211_hwsim hwsim63 syzkaller0: entered promiscuous mode [ 867.697846][T32241] mac80211_hwsim hwsim63 syzkaller0: entered allmulticast mode [ 867.791729][ T9401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.872681][T32250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6866'. [ 867.986990][T32254] tipc: Enabled bearer , priority 0 [ 868.096337][T32263] GUP no longer grows the stack in syz.2.6872 (32263): 200000003000-20000000a000 (200000001000) [ 868.123350][T32263] CPU: 0 UID: 0 PID: 32263 Comm: syz.2.6872 Not tainted syzkaller #0 PREEMPT(full) [ 868.123384][T32263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 868.123399][T32263] Call Trace: [ 868.123417][T32263] [ 868.123427][T32263] dump_stack_lvl+0xe8/0x150 [ 868.123467][T32263] __get_user_pages+0x2453/0x29d0 [ 868.123521][T32263] ? __gup_longterm_locked+0xc4e/0x1630 [ 868.123550][T32263] ? down_read_killable+0x1bb/0x340 [ 868.123583][T32263] ? try_get_folio+0xec/0x650 [ 868.123617][T32263] __gup_longterm_locked+0xdcf/0x1630 [ 868.123675][T32263] gup_fast_fallback+0x1d82/0x22e0 [ 868.123743][T32263] ? __pfx_gup_fast_fallback+0x10/0x10 [ 868.123774][T32263] ? is_valid_gup_args+0x11f/0x200 [ 868.123805][T32263] ? get_user_pages_fast+0x4d/0xb0 [ 868.123836][T32263] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 868.123869][T32263] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 868.123909][T32263] iov_iter_get_pages2+0x5e/0xa0 [ 868.123936][T32263] __se_sys_vmsplice+0x7b3/0x1490 [ 868.123989][T32263] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 868.124025][T32263] ? __pfx_futex_wake+0x10/0x10 [ 868.124057][T32263] ? lockdep_hardirqs_on+0x7a/0x110 [ 868.124142][T32263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.124168][T32263] do_syscall_64+0x15f/0xf80 [ 868.124195][T32263] ? trace_irq_disable+0x3b/0x140 [ 868.124220][T32263] ? clear_bhb_loop+0x40/0x90 [ 868.124248][T32263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.124271][T32263] RIP: 0033:0x7fcf9139c819 [ 868.124293][T32263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.124314][T32263] RSP: 002b:00007fcf92304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 868.124337][T32263] RAX: ffffffffffffffda RBX: 00007fcf91615fa0 RCX: 00007fcf9139c819 [ 868.124354][T32263] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 868.124368][T32263] RBP: 00007fcf91432c91 R08: 0000000000000000 R09: 0000000000000000 [ 868.124383][T32263] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 868.124396][T32263] R13: 00007fcf91616038 R14: 00007fcf91615fa0 R15: 00007ffc0481c818 [ 868.124441][T32263] [ 868.405351][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.902488][T32281] syzkaller0: entered promiscuous mode [ 868.941631][T32281] syzkaller0: entered allmulticast mode [ 869.128667][T32296] ip6gretap0: entered promiscuous mode [ 869.150684][T32296] ip6gretap0: entered allmulticast mode [ 870.166877][T32342] vlan2: entered allmulticast mode [ 870.200047][T32342] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 870.433236][T32357] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20003 [ 870.464780][T32360] erspan0: entered promiscuous mode [ 870.638812][T32369] vlan0: entered allmulticast mode [ 870.644220][T32369] veth0_vlan: entered allmulticast mode [ 871.335404][T32393] tipc: Enabling of bearer rejected, media not registered [ 871.483061][T32411] sctp: [Deprecated]: syz.0.6912 (pid 32411) Use of struct sctp_assoc_value in delayed_ack socket option. [ 871.483061][T32411] Use struct sctp_sack_info instead [ 871.483770][T32401] bond1 (unregistering): Released all slaves [ 871.512124][T32411] sctp: [Deprecated]: syz.0.6912 (pid 32411) Use of struct sctp_assoc_value in delayed_ack socket option. [ 871.512124][T32411] Use struct sctp_sack_info instead [ 871.533842][T32411] sctp: [Deprecated]: syz.0.6912 (pid 32411) Use of struct sctp_assoc_value in delayed_ack socket option. [ 871.533842][T32411] Use struct sctp_sack_info instead [ 871.556647][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.571498][T32413] sctp: [Deprecated]: syz.0.6912 (pid 32413) Use of struct sctp_assoc_value in delayed_ack socket option. [ 871.571498][T32413] Use struct sctp_sack_info instead [ 872.012293][T32395] syzkaller0: entered promiscuous mode [ 872.018476][T32395] syzkaller0: entered allmulticast mode [ 872.028721][T32418] netlink: 'syz.0.6915': attribute type 4 has an invalid length. [ 872.227958][T32421] __nla_validate_parse: 8 callbacks suppressed [ 872.227979][T32421] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.6916'. [ 872.328033][T32423] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 872.603490][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.728294][T32449] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6924'. [ 872.795631][T32455] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6924'. [ 872.808169][T32454] veth0: entered promiscuous mode [ 873.009140][T32454] veth0: left promiscuous mode [ 873.065619][T32462] IPv6: sit1: Disabled Multicast RS [ 873.102393][T32462] sit1: entered allmulticast mode [ 873.536752][T32498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6936'. [ 873.652268][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.674370][T32498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6936'. [ 873.875802][ T9401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.922695][T32513] xt_hashlimit: size too large, truncated to 1048576 [ 874.350753][T32535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6943'. [ 874.540931][T32547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.676157][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.716381][T32550] xt_policy: too many policy elements [ 874.765052][T32555] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 875.017089][T32575] netlink: 'syz.3.6951': attribute type 2 has an invalid length. [ 875.176512][T32577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6952'. [ 875.326629][T32577] erspan0: entered promiscuous mode [ 875.343718][T32589] IPVS: length: 53 != 8 [ 875.350149][T32577] macvtap1: entered promiscuous mode [ 875.369445][T32577] macvtap1: entered allmulticast mode [ 875.385241][T32577] erspan0: entered allmulticast mode [ 875.391370][T32594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6954'. [ 875.442719][T32586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6954'. [ 875.543447][T32601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6959'. [ 875.718438][T29525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.757573][T29525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.935772][ T9401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.250310][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.810468][ T9412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.836957][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.450811][T32609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6960'. [ 879.459953][T32609] netlink: 50 bytes leftover after parsing attributes in process `syz.3.6960'. [ 879.469066][T32609] netlink: 50 bytes leftover after parsing attributes in process `syz.3.6960'. [ 879.480960][T32611] veth0_to_bond: entered allmulticast mode [ 879.793633][ T9402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.804571][ T9401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.815046][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.876642][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.013588][T32641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 880.041938][T32621] syzkaller0: entered promiscuous mode [ 880.048419][T32641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 880.057943][T32621] syzkaller0: entered allmulticast mode [ 880.077769][T32641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 880.120697][T32641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.840142][ T9401] net_ratelimit: 31 callbacks suppressed [ 882.840159][ T9401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.998600][T29525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.433046][T32682] tipc: Trying to set illegal importance in message [ 883.646172][T32692] netlink: 'syz.1.6978': attribute type 4 has an invalid length. [ 883.714865][T32697] netlink: 'syz.1.6978': attribute type 4 has an invalid length. [ 883.920135][ T62] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 884.037773][ T9412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.273121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 884.286618][ T9401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.076464][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.883764][ T9402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.117756][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.747193][T32694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6979'. [ 886.986320][T32713] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6981'. [ 887.029259][T32718] netlink: 448 bytes leftover after parsing attributes in process `syz.3.6984'. [ 887.073396][T32722] netlink: 'syz.3.6984': attribute type 1 has an invalid length. [ 887.103697][T32722] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 887.283932][T32727] ip6tnl0: Caught tx_queue_len zero misconfig [ 887.302258][T32735] netlink: 'syz.4.6987': attribute type 30 has an invalid length. [ 887.314326][T32733] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.6988'. [ 887.324176][T32733] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 887.898643][T32761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.945143][T32759] syzkaller0: entered promiscuous mode [ 887.961608][T32759] syzkaller0: entered allmulticast mode [ 888.147490][ T307] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7000'. [ 888.617671][ T314] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.7001'. [ 890.858001][ T313] bond3: Unable to set up delay as MII monitoring is disabled [ 890.873572][ T313] bond3 (unregistering): Released all slaves [ 891.202613][ T337] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 891.251641][ T347] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7006'. [ 891.442790][ T353] netlink: 'syz.4.7011': attribute type 15 has an invalid length. [ 891.462817][ T356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 891.694897][ T366] netlink: 'syz.4.7016': attribute type 29 has an invalid length. [ 891.722435][ T366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7016'. [ 891.804929][ T367] syzkaller0: entered promiscuous mode [ 891.812313][ T367] syzkaller0: entered allmulticast mode [ 892.139029][ T381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7019'. [ 892.738565][ T399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7023'. [ 894.861641][ T381] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 894.941839][ T5924] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 895.027930][ T402] netlink: 'syz.0.7024': attribute type 2 has an invalid length. [ 895.051629][ T401] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7024'. [ 895.074900][ T402] netlink: 'syz.0.7024': attribute type 2 has an invalid length. [ 895.125434][ T402] netlink: 'syz.0.7024': attribute type 1 has an invalid length. [ 895.191161][ T415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7028'. [ 895.329357][ T402] 8021q: adding VLAN 0 to HW filter on device bond5 [ 895.657367][ T437] syz.4.7034: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 895.709473][ T437] CPU: 0 UID: 0 PID: 437 Comm: syz.4.7034 Not tainted syzkaller #0 PREEMPT(full) [ 895.709505][ T437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 895.709520][ T437] Call Trace: [ 895.709529][ T437] [ 895.709539][ T437] dump_stack_lvl+0xe8/0x150 [ 895.709578][ T437] warn_alloc+0x249/0x340 [ 895.709614][ T437] ? stack_trace_save+0xa9/0x100 [ 895.709643][ T437] ? __pfx_warn_alloc+0x10/0x10 [ 895.709684][ T437] ? kasan_save_track+0x4f/0x80 [ 895.709716][ T437] ? kasan_save_track+0x3e/0x80 [ 895.709747][ T437] ? __kasan_kmalloc+0x93/0xb0 [ 895.709769][ T437] ? __kmalloc_cache_noprof+0x31c/0x660 [ 895.709802][ T437] ? xskq_create+0x56/0x170 [ 895.709826][ T437] ? xsk_setsockopt+0x54c/0x990 [ 895.709846][ T437] ? do_sock_setsockopt+0x17c/0x1b0 [ 895.709877][ T437] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 895.709908][ T437] ? do_syscall_64+0x15f/0xf80 [ 895.709941][ T437] __vmalloc_node_range_noprof+0x132/0x1730 [ 895.710010][ T437] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 895.710051][ T437] ? __kasan_kmalloc+0x93/0xb0 [ 895.710079][ T437] vmalloc_user_noprof+0xad/0xe0 [ 895.710111][ T437] ? xskq_create+0xbf/0x170 [ 895.710137][ T437] xskq_create+0xbf/0x170 [ 895.710165][ T437] xsk_init_queue+0x8a/0xe0 [ 895.710191][ T437] xsk_setsockopt+0x54c/0x990 [ 895.710218][ T437] ? __pfx_xsk_setsockopt+0x10/0x10 [ 895.710241][ T437] ? __pfx_aa_sk_perm+0x10/0x10 [ 895.710274][ T437] ? aa_sock_opt_perm+0xff/0x1a0 [ 895.710308][ T437] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 895.710341][ T437] ? __pfx_xsk_setsockopt+0x10/0x10 [ 895.710365][ T437] do_sock_setsockopt+0x17c/0x1b0 [ 895.710404][ T437] __x64_sys_setsockopt+0x13d/0x1b0 [ 895.710445][ T437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.710470][ T437] do_syscall_64+0x15f/0xf80 [ 895.710497][ T437] ? trace_irq_disable+0x3b/0x140 [ 895.710539][ T437] ? clear_bhb_loop+0x40/0x90 [ 895.710568][ T437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.710605][ T437] RIP: 0033:0x7fdb2f79c819 [ 895.710626][ T437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.710664][ T437] RSP: 002b:00007fdb3062a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 895.710689][ T437] RAX: ffffffffffffffda RBX: 00007fdb2fa16090 RCX: 00007fdb2f79c819 [ 895.710706][ T437] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 895.710720][ T437] RBP: 00007fdb2f832c91 R08: 0000000000000004 R09: 0000000000000000 [ 895.710734][ T437] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 895.710748][ T437] R13: 00007fdb2fa16128 R14: 00007fdb2fa16090 R15: 00007ffdff132f38 [ 895.710785][ T437] [ 895.711206][ T437] Mem-Info: [ 896.053798][ T442] netlink: 'syz.4.7034': attribute type 30 has an invalid length. [ 896.082353][ T437] active_anon:5642 inactive_anon:0 isolated_anon:0 [ 896.082353][ T437] active_file:2678 inactive_file:40619 isolated_file:0 [ 896.082353][ T437] unevictable:768 dirty:39 writeback:0 [ 896.082353][ T437] slab_reclaimable:11663 slab_unreclaimable:110936 [ 896.082353][ T437] mapped:29408 shmem:1363 pagetables:1417 [ 896.082353][ T437] sec_pagetables:0 bounce:0 [ 896.082353][ T437] kernel_misc_reclaimable:0 [ 896.082353][ T437] free:1295438 free_pcp:23832 free_cma:0 [ 896.147260][ T437] Node 0 active_anon:22668kB inactive_anon:0kB active_file:10712kB inactive_file:162280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:39808kB dirty:156kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13172kB pagetables:5624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 896.236646][ T457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7040'. [ 896.259403][ T437] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:77824kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 896.296349][ T437] Node 0 DMA free:11168kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:44kB free_cma:0kB [ 896.329524][ T437] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 896.335582][ T437] Node 0 DMA32 free:1456308kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23868kB inactive_anon:0kB active_file:10712kB inactive_file:162280kB unevictable:1536kB writepending:156kB zspages:0kB present:3129332kB managed:2551504kB mlocked:0kB bounce:0kB free_pcp:40764kB local_pcp:20852kB free_cma:0kB [ 896.373190][ T437] lowmem_reserve[]: 0 0 0 0 0 [ 896.378160][ T437] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 896.411417][ T437] lowmem_reserve[]: 0 0 0 0 0 [ 896.423557][ T442] bond3: option arp_missed_max: invalid value (0) [ 896.434766][ T437] Node 1 Normal free:3714076kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:53332kB local_pcp:23860kB free_cma:0kB [ 896.450600][ T442] bond3: option arp_missed_max: allowed values 1 - 255 [ 896.472411][ T437] lowmem_reserve[]: 0 0 0 0 0 [ 896.479867][ T437] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 1*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (M) 1*4096kB (U) = 11168kB [ 896.500977][ T437] Node 0 DMA32: 10325*4kB (UM) 7630*8kB (UME) 4828*16kB (UME) 506*32kB (UME) 321*64kB (UME) 983*128kB (UME) 869*256kB (UME) 551*512kB (UME) 337*1024kB (UME) 129*2048kB (UM) 0*4096kB = 1456004kB [ 896.526694][ T437] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 896.539358][ T437] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 7*16kB (UM) 6*32kB (UM) 8*64kB (UM) 6*128kB (UM) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 904*4096kB (UM) = 3714128kB [ 896.561113][ T437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 896.571485][ T437] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 896.581448][ T437] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 896.599037][ T437] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 896.609062][ T437] 45931 total pagecache pages [ 896.616775][ T437] 0 pages in swap cache [ 896.621902][ T437] Free swap = 124996kB [ 896.626252][ T437] Total swap = 124996kB [ 896.631457][ T437] 2097051 pages RAM [ 896.635644][ T437] 0 pages HighMem/MovableOnly [ 896.640873][ T437] 427407 pages reserved [ 896.645175][ T437] 0 pages cma reserved [ 896.651817][ T442] bond3 (unregistering): Released all slaves [ 896.962161][ T451] xt_hashlimit: size too large, truncated to 1048576 [ 897.278324][ T477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7047'. [ 897.491865][ T490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7051'. [ 897.525384][ T494] netlink: 'syz.3.7053': attribute type 2 has an invalid length. [ 897.699642][ T502] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 897.822444][ T506] x_tables: duplicate underflow at hook 1 [ 898.004748][ T518] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 898.407562][ T533] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7066'. [ 898.439833][ T533] netlink: 'syz.4.7066': attribute type 1 has an invalid length. [ 898.699907][ T545] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7070'. [ 898.717146][ T550] bond3: (slave bridge3): making interface the new active one [ 898.772593][ T550] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 898.874202][ T558] netlink: 183060 bytes leftover after parsing attributes in process `syz.0.7071'. [ 898.983570][ T567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 899.318437][ T585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7079'. [ 899.449826][ T591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7080'. [ 899.548418][ T599] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7084'. [ 899.784887][ T625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7088'. [ 899.806662][T30924] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 900.524708][ T662] netlink: 'syz.3.7098': attribute type 1 has an invalid length. [ 900.663822][ T664] xt_CT: You must specify a L4 protocol and not use inversions on it [ 900.787489][ T668] netlink: 'syz.1.7102': attribute type 1 has an invalid length. [ 900.804301][ T668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7102'. [ 900.819331][ T668] netlink: 'syz.1.7102': attribute type 2 has an invalid length. [ 900.832409][ T668] netlink: 'syz.1.7102': attribute type 2 has an invalid length. [ 900.845561][ T668] netlink: 'syz.1.7102': attribute type 2 has an invalid length. [ 901.151195][ T671] tipc: Resetting bearer [ 901.211535][ T693] x_tables: duplicate underflow at hook 1 [ 901.575232][ T696] syzkaller0: entered promiscuous mode [ 901.582845][ T696] syzkaller0: entered allmulticast mode [ 901.590653][T30924] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.727969][T30924] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.740268][T30924] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.819722][ T705] x_tables: unsorted underflow at hook 3 [ 901.905539][ T717] netlink: 'syz.2.7111': attribute type 16 has an invalid length. [ 901.957365][ T717] netlink: 'syz.2.7111': attribute type 17 has an invalid length. [ 902.162140][ T732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 904.892651][T30924] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.915951][ T717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 905.111492][ T743] __nla_validate_parse: 4 callbacks suppressed [ 905.111514][ T743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7117'. [ 905.190203][ T754] netlink: 'syz.4.7121': attribute type 12 has an invalid length. [ 905.242127][ T753] xt_hashlimit: size too large, truncated to 1048576 [ 905.547062][ T773] netlink: 'syz.2.7127': attribute type 21 has an invalid length. [ 905.698948][ T773] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 905.761799][ T773] bond3 (unregistering): Released all slaves [ 905.955284][T29525] IPVS: starting estimator thread 0... [ 906.072148][ T791] IPVS: using max 28 ests per chain, 67200 per kthread [ 906.167227][ T796] netlink: 766 bytes leftover after parsing attributes in process `syz.2.7130'. [ 906.516342][ T811] netlink: 'syz.1.7132': attribute type 10 has an invalid length. [ 906.691345][ T811] veth0_macvtap: left promiscuous mode [ 906.727753][ T825] netlink: 'syz.0.7137': attribute type 1 has an invalid length. [ 906.843988][ T825] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 907.106963][ T840] sctp: [Deprecated]: syz.0.7141 (pid 840) Use of int in maxseg socket option. [ 907.106963][ T840] Use struct sctp_assoc_value instead [ 907.513851][ T868] ip6t_srh: unknown srh match flags 4000 [ 907.924333][ T887] xt_hashlimit: size too large, truncated to 1048576 [ 907.938091][ T889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7157'. [ 908.319683][ T904] wireguard0: entered promiscuous mode [ 908.364076][ T904] wireguard0: entered allmulticast mode [ 908.381714][ T909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7162'. [ 908.758997][ T939] netlink: 'syz.0.7166': attribute type 4 has an invalid length. [ 908.771933][ T945] netlink: 'syz.3.7168': attribute type 7 has an invalid length. [ 908.808589][ T945] netlink: 'syz.3.7168': attribute type 8 has an invalid length. [ 908.969121][ T956] vlan3: entered allmulticast mode [ 908.980296][ T956] bridge_slave_0: entered allmulticast mode [ 909.006582][ T965] netlink: 54 bytes leftover after parsing attributes in process `syz.1.7171'. [ 909.017946][ T965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7171'. [ 909.095334][ T956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7171'. [ 909.160537][ T959] tipc: Enabling of bearer rejected, already enabled [ 909.373103][ T982] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7178'. [ 909.580029][ T993] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 909.651942][ T1000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7183'. [ 909.782435][ T1006] netlink: 808 bytes leftover after parsing attributes in process `syz.0.7185'. [ 909.934242][ T1023] netlink: 'syz.4.7189': attribute type 1 has an invalid length. [ 909.974696][ T5145] Bluetooth: hci1: link tx timeout [ 909.983097][ T5145] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 910.109839][ T1029] bond4: (slave bridge4): Enslaving as a backup interface with an up link [ 910.134080][ T1032] openvswitch: netlink: Missing valid actions attribute. [ 910.149834][ T1032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 910.508794][ T1049] __nla_validate_parse: 1 callbacks suppressed [ 910.508814][ T1049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7194'. [ 910.787294][ T1065] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 911.375190][ T1130] bridge3: entered promiscuous mode [ 911.388291][ T1130] bridge3: entered allmulticast mode [ 912.029735][ T1026] Bluetooth: hci1: command 0x0406 tx timeout [ 912.293441][ T1134] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7207'. [ 913.628157][ T1076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 913.656700][ T1116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7203'. [ 913.838479][ T1136] xt_hl: Unknown TTL match mode: 255 [ 914.056764][ T1158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7212'. [ 914.137818][ T1164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7214'. [ 914.175104][ T1148] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 914.214209][ T1168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 914.234660][ T1148] bond3 (unregistering): Released all slaves [ 914.294325][ T1154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7212'. [ 914.307482][ T1154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7212'. [ 914.516889][ T1178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 914.538072][ T1169] veth0_to_bond: left allmulticast mode [ 914.574496][ T1181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7218'. [ 914.584204][ T1178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7217'. [ 914.595855][ T1178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7217'. [ 914.763534][ T1185] ipt_rpfilter: unknown options [ 914.830915][ T1190] xt_hashlimit: size too large, truncated to 1048576 [ 914.944315][T30893] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 915.066562][ T1205] xt_addrtype: ipv6 does not support BROADCAST matching [ 915.552080][ T1228] __nla_validate_parse: 6 callbacks suppressed [ 915.552102][ T1228] netlink: 948 bytes leftover after parsing attributes in process `syz.0.7230'. [ 915.581987][ T1228] netlink: 12536 bytes leftover after parsing attributes in process `syz.0.7230'. [ 915.744241][ T1241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7235'. [ 915.803917][ T1247] netlink: 87 bytes leftover after parsing attributes in process `syz.4.7237'. [ 916.068305][ T1260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7239'. [ 916.667243][ T1283] netlink: 'syz.4.7245': attribute type 1 has an invalid length. [ 916.694468][ T1282] netlink: 'syz.4.7245': attribute type 1 has an invalid length. [ 916.717733][ T1283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7245'. [ 916.757884][ T1282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7245'. [ 916.827319][ T1279] syzkaller0: entered promiscuous mode [ 916.846182][ T1279] syzkaller0: entered allmulticast mode [ 917.472683][ T1325] netlink: 'syz.0.7253': attribute type 1 has an invalid length. [ 917.532703][ T1325] netlink: 'syz.0.7253': attribute type 1 has an invalid length. [ 917.551690][ T1327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7254'. [ 917.564292][ T1325] netlink: 'syz.0.7253': attribute type 2 has an invalid length. [ 917.584638][ T1325] netlink: 'syz.0.7253': attribute type 2 has an invalid length. [ 917.592829][ T1325] netlink: 'syz.0.7253': attribute type 1 has an invalid length. [ 918.076121][ T1334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.352149][ T1331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 920.592861][ T1343] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 920.619383][ T1343] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 920.849476][ T1368] x_tables: duplicate underflow at hook 2 [ 921.057710][ T1386] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.7271'. [ 921.086198][ T1386] openvswitch: netlink: Missing key (keys=40, expected=100) [ 921.122184][ T1392] netlink: 'syz.1.7273': attribute type 1 has an invalid length. [ 921.132047][ T1392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7273'. [ 921.179665][ T1390] xt_nfacct: accounting object `syz1' does not exist [ 921.613442][ T1415] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7279'. [ 921.820486][ T1428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7285'. [ 921.841258][ T1428] vlan2: entered allmulticast mode [ 921.846614][ T1428] mac80211_hwsim hwsim66 wlan0: entered allmulticast mode [ 921.917015][ T1431] "syz.1.7284" (1431) uses obsolete ecb(arc4) skcipher [ 921.966910][ T1432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 922.004147][ T1436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7287'. [ 922.020831][ T1436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7287'. [ 922.204719][ T1442] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7288'. [ 922.219937][ T1442] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7288'. [ 922.393402][ T1453] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7291'. [ 922.467170][ T1457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7292'. [ 922.586388][ T1463] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 922.627953][ T5924] IPVS: starting estimator thread 0... [ 922.740289][ T1469] IPVS: using max 36 ests per chain, 86400 per kthread [ 923.065274][ T1489] sctp: [Deprecated]: syz.1.7301 (pid 1489) Use of int in maxseg socket option. [ 923.065274][ T1489] Use struct sctp_assoc_value instead [ 923.188219][ T1498] netlink: 'syz.0.7302': attribute type 1 has an invalid length. [ 923.273512][ T1503] netlink: 'syz.1.7304': attribute type 2 has an invalid length. [ 923.469647][ T1402] Bluetooth: hci5: command 0x0406 tx timeout [ 923.479124][ T1402] Bluetooth: hci4: command 0x0406 tx timeout [ 924.349295][ T1558] netlink: 'syz.4.7319': attribute type 1 has an invalid length. [ 924.534833][ T1569] openvswitch: netlink: Flow actions attr not present in new flow. [ 924.553180][ T1568] openvswitch: netlink: Flow actions attr not present in new flow. [ 925.062306][ T29] audit: type=1800 audit(1776938099.969:9): pid=1603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7330" name="memory.events" dev="tmpfs" ino=825 res=0 errno=0 [ 925.156455][T30388] IPVS: ip_vs_send_async error -101 [ 925.163641][ T1604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.185448][ T29] audit: type=1804 audit(1776938100.029:10): pid=1603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7330" name="/newroot/159/memory.events" dev="tmpfs" ino=825 res=1 errno=0 [ 925.454997][ T1622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.895264][ T1643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 926.188413][ T1665] Cannot find del_set index 3 as target [ 926.362764][ T1675] __nla_validate_parse: 9 callbacks suppressed [ 926.362786][ T1675] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7354'. [ 926.408855][ T1678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7355'. [ 926.431485][ T1678] bridge_slave_1: left allmulticast mode [ 926.448072][ T1678] bridge_slave_1: left promiscuous mode [ 926.470844][ T1678] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.491739][ T1678] bridge_slave_0: left allmulticast mode [ 926.500557][ T1678] bridge_slave_0: left promiscuous mode [ 926.525211][ T1678] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.596888][ T1683] syzkaller0: entered promiscuous mode [ 926.603000][ T1683] syzkaller0: entered allmulticast mode [ 926.904098][ T1699] netlink: 'syz.3.7358': attribute type 7 has an invalid length. [ 926.915673][ T1699] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7358'. [ 927.693247][ T1707] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 927.705543][ T1707] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 927.726159][ T1707] gretap1: entered promiscuous mode [ 927.739839][ T1707] gretap1: entered allmulticast mode [ 927.773744][ T1702] erspan0: entered promiscuous mode [ 927.800279][ T1702] erspan0: entered allmulticast mode [ 928.590289][ T1026] Bluetooth: hci3: command 0x0405 tx timeout [ 929.266605][ T1667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 929.497035][ T1721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7365'. [ 929.746006][ T1733] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7368'. [ 929.862073][ T1730] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7365'. [ 929.880086][ T1742] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 930.069761][ T1746] netlink: 'syz.2.7371': attribute type 5 has an invalid length. [ 930.077767][ T1746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7371'. [ 930.082535][ T1734] nbd1: detected capacity change from 0 to 63 [ 930.125651][ T5145] block nbd1: Receive control failed (result -32) [ 930.133512][ T1026] block nbd1: Receive control failed (result -32) [ 930.144512][ T1745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7371'. [ 930.154334][T32732] block nbd1: Dead connection, failed to find a fallback [ 930.163492][T32732] block nbd1: shutting down sockets [ 930.174533][T32732] blk_print_req_error: 135 callbacks suppressed [ 930.174554][T32732] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 930.192105][T32732] buffer_io_error: 138 callbacks suppressed [ 930.192124][T32732] Buffer I/O error on dev nbd1, logical block 0, async page read [ 930.219970][T32732] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 930.229106][T32732] Buffer I/O error on dev nbd1, logical block 1, async page read [ 930.237513][T32732] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 930.248896][T32732] Buffer I/O error on dev nbd1, logical block 2, async page read [ 930.258504][T32732] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 930.268026][T32732] Buffer I/O error on dev nbd1, logical block 3, async page read [ 930.277080][T32732] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 930.286648][T32732] Buffer I/O error on dev nbd1, logical block 0, async page read [ 930.294648][T32732] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 930.305701][T32732] Buffer I/O error on dev nbd1, logical block 1, async page read [ 930.319046][T32732] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 930.356906][T32732] Buffer I/O error on dev nbd1, logical block 2, async page read [ 930.376280][ T1750] ipt_REJECT: TCP_RESET invalid for non-tcp [ 930.379800][T32732] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 930.422709][T32732] Buffer I/O error on dev nbd1, logical block 3, async page read [ 930.438387][T32732] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 930.468237][T32732] Buffer I/O error on dev nbd1, logical block 0, async page read [ 930.497575][T32732] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 930.522900][ T1761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7374'. [ 930.543555][T32732] Buffer I/O error on dev nbd1, logical block 1, async page read [ 930.554506][ T1761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7374'. [ 930.596426][T32732] ldm_validate_partition_table(): Disk read failed. [ 930.637866][T32732] Dev nbd1: unable to read RDB block 0 [ 930.676458][T32732] nbd1: unable to read partition table [ 930.734020][T32732] ldm_validate_partition_table(): Disk read failed. [ 930.766559][T32732] Dev nbd1: unable to read RDB block 0 [ 930.782541][T32732] nbd1: unable to read partition table [ 930.869391][ T1775] delete_channel: no stack [ 931.077006][ T1785] netlink: 'syz.1.7380': attribute type 2 has an invalid length. [ 931.346166][ T1806] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 931.846557][ T1839] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20265 [ 932.242052][ T1861] netlink: 'syz.2.7400': attribute type 3 has an invalid length. [ 932.261364][ T1861] __nla_validate_parse: 7 callbacks suppressed [ 932.261385][ T1861] netlink: 766 bytes leftover after parsing attributes in process `syz.2.7400'. [ 932.312893][ T1861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7400'. [ 932.437107][ T1871] netlink: 'syz.0.7403': attribute type 16 has an invalid length. [ 932.447532][ T1871] netlink: 'syz.0.7403': attribute type 17 has an invalid length. [ 932.559634][ T1882] netlink: 'syz.2.7400': attribute type 1 has an invalid length. [ 932.702896][ T1871] erspan0: left promiscuous mode [ 932.759025][ T1871] ip6gretap0: left promiscuous mode [ 932.766006][ T1871] ip6gretap0: left allmulticast mode [ 932.788467][ T1871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.799101][ T1871] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.814751][ T1871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 933.138240][ T1909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7413'. [ 933.457002][ T1941] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7420'. [ 933.486933][ T1941] netlink: 'syz.4.7420': attribute type 1 has an invalid length. [ 933.977918][ T1964] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7426'. [ 934.094675][ T1964] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 934.644046][ T2002] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 934.859842][ T2018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7446'. [ 934.885380][ T2018] tunl0: Caught tx_queue_len zero misconfig [ 934.912089][ T2018] netlink: 'syz.2.7446': attribute type 1 has an invalid length. [ 935.001972][ T2026] netlink: 'syz.4.7448': attribute type 1 has an invalid length. [ 935.014821][ T2026] netlink: 'syz.4.7448': attribute type 3 has an invalid length. [ 935.023321][ T2026] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7448'. [ 935.358418][ T2046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7454'. [ 935.392951][ T2046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7454'. [ 935.515988][ T2053] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 935.540507][ T2053] bond3 (unregistering): Released all slaves [ 935.562155][ T2057] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7458'. [ 935.704444][ T2064] netlink: 'syz.3.7461': attribute type 16 has an invalid length. [ 935.712743][ T2064] netlink: 'syz.3.7461': attribute type 3 has an invalid length. [ 935.917590][ T2068] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 936.346746][ T2098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.628293][ T2113] tipc: Enabled bearer , priority 0 [ 936.651407][ T2113] syzkaller0: entered promiscuous mode [ 936.665022][ T2113] syzkaller0: entered allmulticast mode [ 936.691952][ T2113] tipc: Resetting bearer [ 936.718024][ T2112] tipc: Resetting bearer [ 936.769956][ T2112] tipc: Disabling bearer [ 937.467618][ T2145] veth5: entered promiscuous mode [ 937.473487][ T2145] veth5: entered allmulticast mode [ 937.505637][ T2144] veth7: entered promiscuous mode [ 937.511881][ T2144] veth7: entered allmulticast mode [ 937.576428][ T2161] sctp: [Deprecated]: syz.2.7486 (pid 2161) Use of struct sctp_assoc_value in delayed_ack socket option. [ 937.576428][ T2161] Use struct sctp_sack_info instead [ 937.877570][ T2181] netlink: 'syz.1.7491': attribute type 1 has an invalid length. [ 937.924631][ T2182] netlink: 'syz.1.7491': attribute type 9 has an invalid length. [ 937.950414][ T2181] netlink: 'syz.1.7491': attribute type 11 has an invalid length. [ 937.976992][ T2181] __nla_validate_parse: 9 callbacks suppressed [ 937.977011][ T2181] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7491'. [ 938.513106][ T2218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 938.785361][ T2228] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 939.189631][ T2244] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7512'. [ 939.554965][ T2260] bond0: entered promiscuous mode [ 939.582623][ T2260] bond_slave_0: entered promiscuous mode [ 939.596671][ T2265] netlink: 'syz.3.7518': attribute type 10 has an invalid length. [ 939.612667][ T2264] vcan0: tx address claim with dlc 0 [ 939.631102][ T2260] bond_slave_1: entered promiscuous mode [ 939.638808][ T2260] batadv0: entered promiscuous mode [ 939.646638][ T2260] debugfs: 'hsr1' already exists in 'hsr' [ 939.653003][ T2260] Cannot create hsr debugfs directory [ 939.664795][ T2260] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 939.711736][ T2260] bond0: left promiscuous mode [ 939.724362][ T2260] bond_slave_0: left promiscuous mode [ 939.742751][ T2260] bond_slave_1: left promiscuous mode [ 939.750905][ T2260] batadv0: left promiscuous mode [ 939.843620][ T2275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 939.990397][ T2277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 939.997723][ T2277] IPv6: NLM_F_CREATE should be set when creating new route [ 940.013468][ T2281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7525'. [ 940.035227][ T2280] netlink: 'syz.2.7523': attribute type 1 has an invalid length. [ 940.052651][ T2280] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7523'. [ 940.231149][ T2288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 941.252620][ T2350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7547'. [ 941.287185][ T2350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7547'. [ 941.413824][ T2354] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7549'. [ 941.466105][ T2354] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7549'. [ 941.681911][ T2375] sctp: [Deprecated]: syz.4.7558 (pid 2375) Use of int in maxseg socket option. [ 941.681911][ T2375] Use struct sctp_assoc_value instead [ 941.697625][ T2373] Bluetooth: MGMT ver 1.23 [ 941.708672][ T2377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7555'. [ 941.790642][ T2383] netlink: 300 bytes leftover after parsing attributes in process `syz.3.7555'. [ 941.962388][ T2389] netlink: 'syz.1.7561': attribute type 4 has an invalid length. [ 943.906095][ T2500] __nla_validate_parse: 1 callbacks suppressed [ 943.906116][ T2500] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7581'. [ 943.953130][ T2500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7581'. [ 943.966927][ T2500] netlink: 31 bytes leftover after parsing attributes in process `syz.2.7581'. [ 943.986415][ T2500] netlink: 'syz.2.7581': attribute type 3 has an invalid length. [ 944.009265][ T2500] netlink: 'syz.2.7581': attribute type 2 has an invalid length. [ 944.035540][ T2500] netlink: 31 bytes leftover after parsing attributes in process `syz.2.7581'. [ 944.287014][ T2525] syzkaller0: entered promiscuous mode [ 944.315854][ T2525] syzkaller0: entered allmulticast mode [ 944.743612][ T2546] netlink: 'syz.1.7590': attribute type 21 has an invalid length. [ 944.748096][ T2549] netlink: 'syz.2.7592': attribute type 8 has an invalid length. [ 944.773305][ T2546] netlink: 'syz.1.7590': attribute type 1 has an invalid length. [ 944.805083][ T2552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7593'. [ 945.021621][ T2555] syzkaller0: entered promiscuous mode [ 945.064401][ T2555] syzkaller0: entered allmulticast mode [ 945.087815][ T2572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7596'. [ 945.133206][ T2574] netlink: 'syz.0.7597': attribute type 21 has an invalid length. [ 945.148778][ T2581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7599'. [ 946.072810][ T1768] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 948.156751][ T2574] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 948.384901][ T2606] netlink: 'syz.2.7607': attribute type 9 has an invalid length. [ 948.385994][ T2614] netlink: 'syz.0.7606': attribute type 10 has an invalid length. [ 948.480145][ T2619] netlink: 'syz.0.7606': attribute type 10 has an invalid length. [ 948.489977][ T2618] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7604'. [ 948.507003][ T2619] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7606'. [ 948.569926][ T2614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.599476][ T2614] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 948.618536][ T2619] batadv0: entered promiscuous mode [ 948.638662][ T2619] batadv0: entered allmulticast mode [ 948.667840][ T2619] bond0: (slave batadv0): Releasing backup interface [ 948.707479][ T2619] bridge0: port 1(batadv0) entered blocking state [ 948.722927][ T2619] bridge0: port 1(batadv0) entered disabled state [ 948.732996][ T2634] x_tables: duplicate underflow at hook 4 [ 948.740857][ T1768] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 948.742235][ T2622] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 948.750800][ T1768] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 948.773811][ T2634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7612'. [ 948.981070][ T2648] __nla_validate_parse: 3 callbacks suppressed [ 948.981092][ T2648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7616'. [ 949.201339][ T2667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7620'. [ 949.593570][ T2690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7624'. [ 949.635874][ T2690] hsr_slave_0: left promiscuous mode [ 949.689509][ T2690] hsr_slave_1: left promiscuous mode [ 949.933133][ T2714] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7629'. [ 950.049007][ T2727] netlink: 'syz.1.7631': attribute type 11 has an invalid length. [ 950.193629][ T2732] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7634'. [ 950.273451][ T2744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7633'. [ 950.507184][ T2757] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7638'. [ 951.151674][ T2811] Cannot find set identified by id 65534 to match [ 951.193993][ T2811] openvswitch: netlink: IP tunnel dst address not specified [ 951.271660][ T2824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7651'. [ 951.467129][ T2836] netlink: 428 bytes leftover after parsing attributes in process `syz.1.7655'. [ 951.516961][ T2836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7655'. [ 952.682072][ T2899] netlink: 'syz.0.7669': attribute type 30 has an invalid length. [ 952.736017][ T2905] netlink: 'syz.0.7669': attribute type 30 has an invalid length. [ 952.771830][ T1770] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.787661][ T1770] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.875227][ T1770] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.905205][ T1770] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.932895][ T2908] veth0: entered promiscuous mode [ 952.955511][ T2917] netlink: 'syz.2.7673': attribute type 1 has an invalid length. [ 953.063372][ T2906] veth0: left promiscuous mode [ 953.101522][ T2923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 953.408872][ T2939] sctp: [Deprecated]: syz.0.7680 (pid 2939) Use of int in max_burst socket option. [ 953.408872][ T2939] Use struct sctp_assoc_value instead [ 953.553567][ T2945] openvswitch: netlink: Key type 343 is out of range max 32 [ 953.945526][ T2961] netlink: 'syz.4.7688': attribute type 1 has an invalid length. [ 954.697668][ T2994] __nla_validate_parse: 7 callbacks suppressed [ 954.697692][ T2994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7698'. [ 954.864930][ T3000] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7702'. [ 954.907281][ T3002] netlink: 'syz.2.7703': attribute type 4 has an invalid length. [ 954.952688][ T3002] netlink: 'syz.2.7703': attribute type 4 has an invalid length. [ 955.004288][ T3004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7704'. [ 955.353119][ T3029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7712'. [ 955.476648][ T3032] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7714'. [ 955.496310][ T3036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7717'. [ 955.737648][ T3048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7720'. [ 955.767419][ T3048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7720'. [ 955.961615][ T3063] netlink: 'syz.3.7725': attribute type 12 has an invalid length. [ 955.979746][ T3063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7725'. [ 956.023305][ T3066] netlink: 'syz.3.7725': attribute type 1 has an invalid length. [ 956.130516][ T3070] netlink: 'syz.1.7727': attribute type 2 has an invalid length. [ 956.148598][ T3070] netlink: 'syz.1.7727': attribute type 8 has an invalid length. [ 956.171635][ T3070] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7727'. [ 956.253417][ T3075] netlink: 'syz.3.7728': attribute type 1 has an invalid length. [ 956.363335][ T3084] netlink: 'syz.1.7731': attribute type 1 has an invalid length. [ 956.583925][ T3098] x_tables: duplicate underflow at hook 3 [ 956.674753][ T3100] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 956.821291][ T3100] syzkaller0: entered promiscuous mode [ 960.001345][ T3149] netlink: 'syz.2.7747': attribute type 4 has an invalid length. [ 960.012140][ T3150] __nla_validate_parse: 3 callbacks suppressed [ 960.012160][ T3150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7750'. [ 960.025731][ T3138] bond6: Unable to set down delay as MII monitoring is disabled [ 960.035002][ T3150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7750'. [ 960.057421][ T3138] bond6 (unregistering): Released all slaves [ 960.093242][ T3152] netlink: 'syz.1.7748': attribute type 3 has an invalid length. [ 960.588717][ T3177] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7757'. [ 960.836788][ T3195] bond8 (unregistering): Released all slaves [ 961.143315][ T3222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7765'. [ 961.284391][ T3225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 961.391988][ T3235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7766'. [ 961.520262][ T3242] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7765'. [ 962.014638][ T3229] netem: change failed [ 962.188417][ T3253] netlink: 'syz.1.7770': attribute type 64 has an invalid length. [ 962.219454][ T3253] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7770'. [ 962.443286][ T3261] netlink: 'syz.1.7770': attribute type 39 has an invalid length. [ 962.493295][ T3253] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 962.695358][ T3276] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7773'. [ 962.707829][ T3274] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 963.170855][ T3301] netlink: 'syz.3.7784': attribute type 3 has an invalid length. [ 963.211914][ T3301] netlink: 'syz.3.7784': attribute type 3 has an invalid length. [ 963.248796][ T3301] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7784'. [ 963.377485][ T3314] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7788'. [ 963.403179][ T3315] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 963.421807][ T3314] bond0: entered promiscuous mode [ 963.443567][ T3314] bond_slave_0: entered promiscuous mode [ 963.460550][ T3314] bond_slave_1: entered promiscuous mode [ 963.496134][ T3314] bond0: left promiscuous mode [ 963.512293][ T3314] bond_slave_0: left promiscuous mode [ 963.532355][ T3314] bond_slave_1: left promiscuous mode [ 963.597088][ T3321] netem: invalid attributes len -24 [ 963.610428][ T3321] netem: change failed [ 963.755796][ T3334] sit0: entered promiscuous mode [ 963.818068][ T3334] netlink: 'syz.4.7792': attribute type 1 has an invalid length. [ 964.796811][ T3389] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 964.969962][ T3404] syzkaller1: entered promiscuous mode [ 964.975694][ T3404] syzkaller1: entered allmulticast mode [ 965.805955][ T3448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.841840][ T3407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 965.886346][ T3456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 966.136650][ T3466] IPVS: sh: FWM 3 0x00000003 - no destination available [ 966.358917][ T3477] __nla_validate_parse: 7 callbacks suppressed [ 966.358940][ T3477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7822'. [ 966.544674][ T3477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7822'. [ 966.716684][ T3495] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7828'. [ 967.059874][ T3509] netlink: 13 bytes leftover after parsing attributes in process `syz.2.7834'. [ 967.360505][ T3520] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 967.723468][ T3549] netlink: 'syz.2.7844': attribute type 2 has an invalid length. [ 967.764035][ T3551] netlink: 'syz.3.7843': attribute type 1 has an invalid length. [ 967.926796][ T3563] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7846'. [ 968.160280][ T3569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7848'. [ 968.191989][ T3569] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7848'. [ 968.210465][ T3569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7848'. [ 968.364544][ T3577] netlink: 'syz.2.7849': attribute type 4 has an invalid length. [ 968.373508][ T3577] netlink: 'syz.2.7849': attribute type 4 has an invalid length. [ 968.600012][ T3588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7851'. [ 968.657384][ T3588] bond0: entered promiscuous mode [ 968.679844][ T3588] bond_slave_0: entered promiscuous mode [ 968.700579][ T3588] bond_slave_1: entered promiscuous mode [ 968.725648][ T3588] bond0: left promiscuous mode [ 968.739812][ T3588] bond_slave_0: left promiscuous mode [ 968.761066][ T3588] bond_slave_1: left promiscuous mode [ 968.827077][ T3602] netlink: 'syz.1.7855': attribute type 1 has an invalid length. [ 968.836402][ T3602] netlink: 'syz.1.7855': attribute type 1 has an invalid length. [ 969.394253][ T3633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7861'. [ 969.557020][ T3633] macvtap1: entered promiscuous mode [ 969.572051][ T3633] vlan0: entered promiscuous mode [ 969.580757][ T3633] macvtap1: entered allmulticast mode [ 969.589478][ T3633] vlan0: entered allmulticast mode [ 969.599480][ T3633] veth0_vlan: entered allmulticast mode [ 969.815445][ T3658] netlink: 'syz.4.7868': attribute type 1 has an invalid length. [ 969.824799][ T3658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 969.841580][ T3659] veth0: entered promiscuous mode [ 969.977450][ T3656] veth0: left promiscuous mode [ 970.147472][ T3674] "syz.4.7875" (3674) uses obsolete ecb(arc4) skcipher [ 970.167509][ T3677] netlink: 'syz.0.7877': attribute type 1 has an invalid length. [ 970.338108][ T3687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 970.604227][ T3711] netlink: 'syz.2.7885': attribute type 4 has an invalid length. [ 970.807177][ T3719] netlink: ct family unspecified [ 971.075176][ T3732] netlink: 'syz.2.7894': attribute type 4 has an invalid length. [ 971.332144][ T3746] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 971.342001][ T24] syz1: Port: 1 Link ACTIVE [ 971.367681][ T3746] __nla_validate_parse: 8 callbacks suppressed [ 971.367703][ T3746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7900'. [ 971.778240][ T3774] syzkaller1: entered promiscuous mode [ 971.793463][ T3774] syzkaller1: entered allmulticast mode [ 971.871129][ T3781] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 971.884798][ T3781] netlink: 596 bytes leftover after parsing attributes in process `syz.2.7909'. [ 972.033404][ T3789] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7911'. [ 972.486222][ T3816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7919'. [ 972.525460][ T3816] macvlan2: entered allmulticast mode [ 972.531085][ T3816] hsr0: entered allmulticast mode [ 972.537542][ T3816] hsr_slave_0: entered allmulticast mode [ 972.544841][ T3816] hsr_slave_1: entered allmulticast mode [ 972.552001][ T3816] hsr0: entered promiscuous mode [ 972.922083][ T3840] validate_nla: 3 callbacks suppressed [ 972.922105][ T3840] netlink: 'syz.0.7925': attribute type 1 has an invalid length. [ 973.004647][ T3840] 8021q: adding VLAN 0 to HW filter on device bond9 [ 973.027159][ T3847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7927'. [ 973.055983][ T3842] bond9: (slave geneve4): making interface the new active one [ 973.071449][ T3842] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 973.097000][T30893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.114051][T30893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.133396][ T3847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7927'. [ 973.133887][T30893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.152899][T30893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.226927][ T3855] netlink: 'syz.0.7930': attribute type 10 has an invalid length. [ 973.280936][ T3855] batadv0: left allmulticast mode [ 973.286241][ T3857] netlink: 'syz.0.7930': attribute type 2 has an invalid length. [ 973.303428][ T3855] batadv0: left promiscuous mode [ 973.310077][ T3857] netlink: 'syz.0.7930': attribute type 10 has an invalid length. [ 973.318343][ T3855] bridge0: port 1(batadv0) entered disabled state [ 973.325573][ T3857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7930'. [ 973.365162][ T3855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.377348][ T3855] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 973.427668][ T3857] batadv0: entered promiscuous mode [ 973.440456][ T3857] batadv0: entered allmulticast mode [ 973.470549][ T3857] bond0: (slave batadv0): Releasing backup interface [ 973.483442][ T3857] bridge0: port 1(batadv0) entered blocking state [ 973.493333][ T3857] bridge0: port 1(batadv0) entered disabled state [ 973.555251][ T3862] vlan3: entered allmulticast mode [ 973.572820][ T3862] bond0: entered allmulticast mode [ 973.796307][ T3877] xt_nfacct: accounting object `syz1' does not exist [ 973.875399][ T3881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7938'. [ 973.888423][ T3880] syzkaller0: entered promiscuous mode [ 973.904017][ T3880] syzkaller0: entered allmulticast mode [ 973.922515][ T3881] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7938'. [ 974.246601][ T3890] : renamed from hsr0 (while UP) [ 974.595607][ T3904] erspan0: entered promiscuous mode [ 975.207098][ T3936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 975.245122][ T3938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7961'. [ 975.366792][ T3947] netlink: 'syz.2.7962': attribute type 1 has an invalid length. [ 975.647707][ T3950] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 975.681518][ T3950] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 975.696529][ T3950] bond3: (slave vxcan3): making interface the new active one [ 975.712142][ T3950] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 975.837610][ T3968] syzkaller0: entered promiscuous mode [ 975.859054][ T3968] syzkaller0: entered allmulticast mode [ 975.936690][ T3974] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 976.232055][ T3992] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 976.240943][ T3992] bond4: option packets_per_slave: allowed values 0 - 65535 [ 976.253532][ T3992] bond4 (unregistering): Released all slaves [ 976.267745][ T3997] netlink: 'syz.0.7976': attribute type 10 has an invalid length. [ 976.302219][ T3997] batadv0: left allmulticast mode [ 976.307358][ T3997] batadv0: left promiscuous mode [ 976.313444][ T3997] bridge0: port 1(batadv0) entered disabled state [ 976.344743][ T3997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.371764][ T3997] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 976.529938][ T4007] __nla_validate_parse: 7 callbacks suppressed [ 976.529959][ T4007] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7980'. [ 976.767809][ T4020] netlink: 'syz.3.7983': attribute type 2 has an invalid length. [ 976.778744][ T4020] netlink: 'syz.3.7983': attribute type 2 has an invalid length. [ 976.792600][ T4018] bond1 (unregistering): Released all slaves [ 976.941749][ T4029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7986'. [ 977.776105][ T4070] netlink: 'syz.4.7996': attribute type 1 has an invalid length. [ 978.280910][ T4090] netlink: 'syz.0.8002': attribute type 1 has an invalid length. [ 978.502931][ T4101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8004'. [ 978.656945][ T4110] netlink: 212 bytes leftover after parsing attributes in process `syz.1.8008'. [ 978.685526][ T4110] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 978.778036][ T4121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8010'. [ 978.854310][T30917] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xca [ 979.469520][ T5145] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 981.642410][ T4110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 982.636985][ T4158] gre1: entered promiscuous mode [ 982.722510][ T4174] syzkaller0: entered promiscuous mode [ 982.733213][ T4174] syzkaller0: entered allmulticast mode [ 983.134885][ T4201] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8032'. [ 983.152659][ T4203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8033'. [ 985.926547][ T4224] xt_limit: Overflow, try lower: 271964/0 [ 986.383752][ T4231] syzkaller0: entered promiscuous mode [ 986.391317][ T4231] syzkaller0: entered allmulticast mode [ 986.634982][ T4260] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8049'. [ 986.716838][ T4265] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8051'. [ 986.811611][ T4268] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 989.633423][ T4289] vlan3: entered promiscuous mode [ 989.650898][ T4289] bridge0: entered promiscuous mode [ 989.820551][ T4299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 990.177954][ T4315] bond4: entered allmulticast mode [ 990.311493][ T4333] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 990.334830][ T4316] syzkaller0: entered promiscuous mode [ 990.352077][ T4316] syzkaller0: entered allmulticast mode [ 990.377588][ T4316] netlink: 'syz.2.8067': attribute type 39 has an invalid length. [ 990.554475][ T4340] tipc: Started in network mode [ 990.582102][ T4340] tipc: Node identity 0aa77f89ec4a, cluster identity 4711 [ 990.604966][ T4340] tipc: Enabled bearer , priority 0 [ 990.622467][ T4344] tipc: Started in network mode [ 990.627658][ T4344] tipc: Node identity 080211000001, cluster identity 4711 [ 990.635347][ T4344] tipc: Enabled bearer , priority 0 [ 990.684046][ T4340] syzkaller0: entered promiscuous mode [ 990.690325][ T4340] syzkaller0: entered allmulticast mode [ 990.744010][ T4351] tipc: Enabling of bearer rejected, already enabled [ 990.840137][ T4356] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8083'. [ 990.897790][ T4340] tipc: Resetting bearer [ 990.920396][ T4338] tipc: Resetting bearer [ 990.953188][ T4338] tipc: Disabling bearer [ 991.144115][ T4377] netlink: 'syz.1.8088': attribute type 2 has an invalid length. [ 991.631588][ T24] tipc: Node number set to 134418688 [ 991.741812][ T4401] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 991.756488][ T4402] geneve2: entered promiscuous mode [ 991.766613][ T4402] geneve2: entered allmulticast mode [ 991.793027][T30922] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 991.819333][T30922] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 991.836343][T30922] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 991.847945][T30922] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 991.872222][ T4404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8096'. [ 991.893753][ T4404] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8096'. [ 991.913885][ T4404] Bluetooth: hci1: too big key_count value 32778 [ 992.193935][ T4415] netlink: 'syz.2.8101': attribute type 1 has an invalid length. [ 992.298675][ T4422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8101'. [ 992.315975][ T4415] 8021q: adding VLAN 0 to HW filter on device bond5 [ 992.332522][ T4424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8104'. [ 993.158658][ T4463] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8117'. [ 993.171800][ T4461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8113'. [ 993.241232][ T4468] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.8119'. [ 993.267893][ T4470] netlink: 277 bytes leftover after parsing attributes in process `syz.4.8120'. [ 993.801626][ T4493] ipt_rpfilter: unknown options [ 994.428537][ T4519] Only authenc() type AEADs are supported by ESSIV [ 994.454593][ T4517] gretap2: entered promiscuous mode [ 994.466560][ T4517] batman_adv: batadv0: Adding interface: gretap2 [ 994.475742][ T4517] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.513357][ T4517] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 994.548258][ T4523] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8136'. [ 994.581967][ T4523] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.589404][ T4523] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.434010][ T4559] delete_channel: no stack [ 995.559027][ T4576] netlink: 'syz.3.8154': attribute type 1 has an invalid length. [ 995.693276][ T4580] veth7: entered allmulticast mode [ 995.703694][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.741808][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.805558][ T4587] ip6gretap0: entered promiscuous mode [ 995.859592][ T4594] __nla_validate_parse: 6 callbacks suppressed [ 995.859615][ T4594] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8159'. [ 995.887802][ T4594] syzkaller1: entered promiscuous mode [ 995.894051][ T4594] syzkaller1: entered allmulticast mode [ 995.909057][ T4594] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8159'. [ 996.178451][ T4608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8164'. [ 996.201851][ T4608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8164'. [ 996.213683][ T4607] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 996.222717][ T4610] IPv6: addrconf: prefix option has invalid lifetime [ 996.226132][ T4607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 996.368567][ T4614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8168'. [ 996.416722][ T4614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 996.473176][ T4617] netlink: 'syz.1.8169': attribute type 1 has an invalid length. [ 996.503221][ T4624] netlink: 'syz.2.8167': attribute type 39 has an invalid length. [ 996.605099][ T4617] 8021q: adding VLAN 0 to HW filter on device bond5 [ 996.946337][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8174'. [ 996.978867][ T4639] netlink: 'syz.1.8174': attribute type 5 has an invalid length. [ 997.000902][ T4639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8174'. [ 997.065344][ T4648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8175'. [ 997.112655][T30922] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 997.143106][T30922] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.183701][T30922] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.215726][T30922] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.263432][ T4656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8179'. [ 997.459858][ T4667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 997.946643][ T4692] netlink: 'syz.3.8189': attribute type 5 has an invalid length. [ 997.962806][ T4694] netlink: 788 bytes leftover after parsing attributes in process `syz.1.8190'. [ 998.780111][ T4741] syzkaller0: entered promiscuous mode [ 998.794043][ T4741] syzkaller0: entered allmulticast mode [ 999.456338][ T4753] IPVS: Scheduler module ip_vs_sip not found [ 999.782993][ T4797] delete_channel: no stack [ 1000.436570][ T4837] tipc: Failed to remove unknown binding: 66,1,1/134418688:2125833423/2125833425 [ 1000.591261][ T4823] syzkaller1: entered promiscuous mode [ 1000.597061][ T4823] syzkaller1: entered allmulticast mode [ 1000.606109][ T4823] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 1000.825803][ T4843] xt_hashlimit: size too large, truncated to 1048576 [ 1001.013130][ T4848] netlink: 'syz.3.8222': attribute type 20 has an invalid length. [ 1001.021424][ T4848] __nla_validate_parse: 5 callbacks suppressed [ 1001.021444][ T4848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8222'. [ 1001.049087][ T1769] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1001.050110][ T4848] netlink: 'syz.3.8222': attribute type 20 has an invalid length. [ 1001.058957][ T1769] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1001.067364][ T4848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8222'. [ 1001.080455][ T1769] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1001.094904][ T1769] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1001.350176][ T4859] netlink: 'syz.0.8223': attribute type 4 has an invalid length. [ 1002.712184][ T4791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1002.912168][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8225'. [ 1002.978107][ T4867] netlink: 'syz.3.8227': attribute type 1 has an invalid length. [ 1003.168887][ T4873] bond1: (slave geneve2): making interface the new active one [ 1003.182445][ T4873] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1003.195794][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1003.223899][ T4885] IPv6: sit2: Disabled Multicast RS [ 1003.282375][ T4886] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode [ 1003.303858][ T4890] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8232'. [ 1003.326403][ T4886] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode [ 1003.349930][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1003.378522][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1003.413527][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1003.567149][ T4899] netlink: 'syz.0.8236': attribute type 1 has an invalid length. [ 1003.692144][ T4907] netlink: 'syz.0.8236': attribute type 1 has an invalid length. [ 1003.722243][ T4904] sctp: [Deprecated]: syz.1.8237 (pid 4904) Use of int in max_burst socket option. [ 1003.722243][ T4904] Use struct sctp_assoc_value instead [ 1003.737743][ T4908] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8238'. [ 1003.759645][ T4899] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1003.881930][ T4913] nbd: illegal input index 2958377 [ 1003.894505][ T4899] bond10: (slave veth9): Enslaving as an active interface with a down link [ 1003.925842][ T4907] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1004.080247][ T4909] bond10: (slave veth11): Enslaving as an active interface with a down link [ 1004.110135][ T4909] netlink: 'syz.0.8236': attribute type 1 has an invalid length. [ 1004.128947][ T4909] netlink: 'syz.0.8236': attribute type 2 has an invalid length. [ 1004.174562][ T4924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8244'. [ 1004.198270][ T4924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8244'. [ 1004.430859][ T4935] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8248'. [ 1004.488764][ T4941] team0: Device gtp1 is up. Set it down before adding it as a team port [ 1004.518597][ T4943] netlink: 'syz.1.8250': attribute type 1 has an invalid length. [ 1004.644567][ T4949] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1005.354413][ T4988] IPv6: addrconf: prefix option has invalid lifetime [ 1005.381565][ T4988] IPv6: addrconf: prefix option has invalid lifetime [ 1005.494444][ T4998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8268'. [ 1005.513590][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8271'. [ 1005.638270][ T5007] tipc: Started in network mode [ 1005.660848][ T5007] tipc: Node identity c22874599a11, cluster identity 4711 [ 1005.683043][ T5007] tipc: Enabled bearer , priority 0 [ 1005.864472][ T5010] syzkaller0: entered promiscuous mode [ 1005.871020][ T5010] syzkaller0: entered allmulticast mode [ 1005.877439][ T5010] tipc: Resetting bearer [ 1005.888673][ T5003] tipc: Resetting bearer [ 1006.278822][ T5037] __nla_validate_parse: 1 callbacks suppressed [ 1006.278837][ T5037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8277'. [ 1008.346169][ T5003] tipc: Disabling bearer [ 1008.371665][ T5033] ±ÿ: renamed from team_slave_1 [ 1008.383828][ T9412] tipc: Node number set to 1480160345 [ 1008.471161][ T5039] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1008.673771][ T5046] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8281'. [ 1008.689548][ T5048] netlink: 176 bytes leftover after parsing attributes in process `syz.3.8282'. [ 1008.722223][ T5046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8281'. [ 1008.749893][ T5048] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8282'. [ 1008.766600][ T5054] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8283'. [ 1009.200740][ T5074] gre2: entered promiscuous mode [ 1009.431521][ T5085] netlink: 'syz.1.8291': attribute type 1 has an invalid length. [ 1009.677741][ T5098] netlink: 'syz.0.8294': attribute type 1 has an invalid length. [ 1009.709723][ T5098] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8294'. [ 1009.747171][ T5098] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8294'. [ 1009.773716][ T5098] netlink: 'syz.0.8294': attribute type 1 has an invalid length. [ 1009.784739][ T5098] netlink: 618 bytes leftover after parsing attributes in process `syz.0.8294'. [ 1009.797081][ T5101] syzkaller0: entered promiscuous mode [ 1009.804269][ T5101] syzkaller0: entered allmulticast mode [ 1009.886247][ T5108] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8298'. [ 1010.324690][ T5134] syzkaller0: entered allmulticast mode [ 1010.380786][ T5091] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1010.681487][ T5158] netlink: 'syz.2.8312': attribute type 1 has an invalid length. [ 1010.766193][ T5158] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1011.337612][ T5209] __nla_validate_parse: 6 callbacks suppressed [ 1011.337633][ T5209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8321'. [ 1011.365638][ T5203] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1011.411559][ T5210] tipc: Enabling of bearer rejected, already enabled [ 1011.444315][ T5203] nbd: must specify a device to reconfigure [ 1011.475852][ T5213] macvtap1: entered promiscuous mode [ 1011.486948][ T5213] macvtap1: entered allmulticast mode [ 1011.493327][ T5213] : entered allmulticast mode [ 1011.543093][ T5207] macvtap2: entered promiscuous mode [ 1011.555731][ T5207] macvtap2: entered allmulticast mode [ 1011.681583][ T5210] tipc: Resetting bearer [ 1011.878838][ T5238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8330'. [ 1011.907397][ T5238] bridge_slave_1: entered promiscuous mode [ 1011.935540][ T5243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8331'. [ 1012.056914][ T5239] veth9: entered allmulticast mode [ 1012.373904][ T5266] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8338'. [ 1012.622719][ T5280] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8340'. [ 1117.669123][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1117.676162][ C0] rcu: 1-...!: (2 ticks this GP) idle=e284/1/0x4000000000000000 softirq=180172/180172 fqs=3 [ 1117.687766][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P30482/1:b..l P5275/1:b..l [ 1117.697064][ C0] rcu: (detected by 0, t=10502 jiffies, g=220189, q=789 ncpus=2) [ 1117.704939][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1117.704977][ C1] NMI backtrace for cpu 1 [ 1117.704996][ C1] CPU: 1 UID: 0 PID: 5280 Comm: syz.1.8340 Not tainted syzkaller #0 PREEMPT(full) [ 1117.705018][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1117.705030][ C1] RIP: 0010:__lock_acquire+0x6a0/0x2cf0 [ 1117.705062][ C1] Code: 1a 48 8b 7c 24 08 4c 89 ee ba 04 00 00 00 e8 87 44 00 00 85 c0 0f 84 99 0d 00 00 41 8b 45 20 a9 00 00 18 00 0f 84 bc 00 00 00 <4c> 8b 74 24 08 4c 89 f7 4c 89 ee ba 08 00 00 00 e8 5b 44 00 00 31 [ 1117.705080][ C1] RSP: 0018:ffffc90000a08b80 EFLAGS: 00000006 [ 1117.705096][ C1] RAX: 00000000000c4000 RBX: ffff88804f666868 RCX: ffffffff93e6a4b0 [ 1117.705110][ C1] RDX: 0000000000000000 RSI: ffff88804f666848 RDI: ffff88804f665c40 [ 1117.705123][ C1] RBP: 0000000000000000 R08: ffffffff84b9bfec R09: ffffffff9a757060 [ 1117.705136][ C1] R10: ffff888045bac308 R11: ffffed1008b75863 R12: 0000000000000002 [ 1117.705149][ C1] R13: ffff88804f666848 R14: ffff88804f665c40 R15: 0000000000000003 [ 1117.705162][ C1] FS: 00007f893c8dc6c0(0000) GS:ffff888125343000(0000) knlGS:0000000000000000 [ 1117.705178][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1117.705190][ C1] CR2: 00002000000012c0 CR3: 00000000aaa32000 CR4: 00000000003526f0 [ 1117.705207][ C1] Call Trace: [ 1117.705217][ C1] [ 1117.705231][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1117.705271][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1117.705301][ C1] ? debug_object_deactivate+0x6c/0x3a0 [ 1117.705335][ C1] lock_acquire+0x106/0x350 [ 1117.705358][ C1] ? debug_object_deactivate+0x6c/0x3a0 [ 1117.705384][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1117.705407][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 1117.705429][ C1] ? debug_object_deactivate+0x6c/0x3a0 [ 1117.705454][ C1] debug_object_deactivate+0x6c/0x3a0 [ 1117.705483][ C1] __hrtimer_run_queues+0x23a/0xa20 [ 1117.705520][ C1] hrtimer_interrupt+0x44b/0x950 [ 1117.705562][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1117.705593][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1117.705617][ C1] [ 1117.705624][ C1] [ 1117.705631][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1117.705652][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1117.705673][ C1] Code: f7 e8 0d 1c ec f5 f7 c3 00 02 00 00 74 05 e8 10 38 17 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 a4 ad dd f5 65 8b 05 9d d0 87 07 85 c0 74 18 5b 41 5e e9 41 48 [ 1117.705690][ C1] RSP: 0018:ffffc90004136ee8 EFLAGS: 00000206 [ 1117.705705][ C1] RAX: 0000000000000006 RBX: 0000000000000282 RCX: 0000000080000202 [ 1117.705717][ C1] RDX: 0000000000000002 RSI: ffffffff8dfb6c9c RDI: 0000000000000001 [ 1117.705729][ C1] RBP: ffffc900041371d0 R08: ffffffff903219b7 R09: 1ffffffff2064336 [ 1117.705743][ C1] R10: dffffc0000000000 R11: fffffbfff2064337 R12: ffff888045bac290 [ 1117.705756][ C1] R13: dffffc0000000000 R14: ffff888045bac2a8 R15: ffff888045bac2f8 [ 1117.705780][ C1] taprio_change+0x30fe/0x3e50 [ 1117.705819][ C1] ? __pfx_taprio_change+0x10/0x10 [ 1117.705857][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1117.705891][ C1] taprio_init+0x96f/0xbe0 [ 1117.705924][ C1] ? __pfx_taprio_init+0x10/0x10 [ 1117.705950][ C1] ? qdisc_alloc+0x6ec/0x9e0 [ 1117.705985][ C1] ? __pfx_taprio_init+0x10/0x10 [ 1117.706012][ C1] qdisc_create+0x7c4/0xf20 [ 1117.706036][ C1] ? lockdep_rtnl_is_held+0x26/0x40 [ 1117.706061][ C1] tc_modify_qdisc+0x16f0/0x2290 [ 1117.706085][ C1] ? rcu_is_watching+0x15/0xb0 [ 1117.706118][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1117.706140][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 1117.706172][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1117.706194][ C1] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1117.706221][ C1] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1117.706246][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1117.706270][ C1] ? ref_tracker_free+0x693/0x840 [ 1117.706299][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 1117.706338][ C1] netlink_rcv_skb+0x232/0x4b0 [ 1117.706365][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1117.706391][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1117.706424][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1117.706450][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1117.706479][ C1] netlink_unicast+0x75c/0x8e0 [ 1117.706508][ C1] netlink_sendmsg+0x813/0xb40 [ 1117.706540][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1117.706569][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1117.706595][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1117.706625][ C1] ____sys_sendmsg+0x972/0x9f0 [ 1117.706652][ C1] ? __might_fault+0xaf/0x130 [ 1117.706680][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1117.706713][ C1] ? import_iovec+0x73/0xa0 [ 1117.706732][ C1] ___sys_sendmsg+0x2a5/0x360 [ 1117.706759][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1117.706785][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1117.706815][ C1] ? futex_wake+0x4ac/0x580 [ 1117.706847][ C1] ? __fget_files+0x2a/0x420 [ 1117.706869][ C1] ? __fget_files+0x3a0/0x420 [ 1117.706897][ C1] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1117.706926][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1117.706959][ C1] ? rcu_is_watching+0x15/0xb0 [ 1117.706989][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.707009][ C1] do_syscall_64+0x15f/0xf80 [ 1117.707032][ C1] ? clear_bhb_loop+0x40/0x90 [ 1117.707053][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.707074][ C1] RIP: 0033:0x7f893b99c819 [ 1117.707091][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.707107][ C1] RSP: 002b:00007f893c8dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1117.707125][ C1] RAX: ffffffffffffffda RBX: 00007f893bc15fa0 RCX: 00007f893b99c819 [ 1117.707139][ C1] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000006 [ 1117.707151][ C1] RBP: 00007f893ba32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1117.707162][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.707173][ C1] R13: 00007f893bc16038 R14: 00007f893bc15fa0 R15: 00007fff9fe2eb68 [ 1117.707196][ C1] [ 1117.707971][ C0] task:syz.3.8341 state:R running task stack:25112 pid:5275 tgid:5275 ppid:28614 task_flags:0x40004c flags:0x00080000 [ 1118.311224][ C0] Call Trace: [ 1118.314539][ C0] [ 1118.317679][ C0] __schedule+0x17b4/0x5680 [ 1118.322258][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1118.327340][ C0] ? __pfx___schedule+0x10/0x10 [ 1118.332263][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1118.337691][ C0] preempt_schedule_common+0x82/0xd0 [ 1118.343044][ C0] preempt_schedule_thunk+0x16/0x30 [ 1118.348398][ C0] _raw_spin_unlock+0x3f/0x50 [ 1118.353173][ C0] unmap_page_range+0x3b71/0x48f0 [ 1118.358339][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1118.363771][ C0] ? mas_find+0xb0e/0xd30 [ 1118.368144][ C0] ? unmap_vmas+0x1c4/0x6a0 [ 1118.372689][ C0] unmap_vmas+0x48f/0x6a0 [ 1118.377075][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1118.382000][ C0] exit_mmap+0x280/0x9e0 [ 1118.386302][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1118.391130][ C0] ? uprobe_clear_state+0x53/0x290 [ 1118.396291][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1118.401025][ C0] ? uprobe_clear_state+0x27c/0x290 [ 1118.406364][ C0] __mmput+0x118/0x430 [ 1118.410512][ C0] exit_mm+0x18e/0x250 [ 1118.414625][ C0] do_exit+0x6a2/0x23c0 [ 1118.418821][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1118.424674][ C0] ? __pfx_do_exit+0x10/0x10 [ 1118.429303][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1118.434735][ C0] ? preempt_schedule_common+0x82/0xd0 [ 1118.440258][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1118.445700][ C0] do_group_exit+0x21b/0x2d0 [ 1118.450351][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.456456][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1118.461535][ C0] x64_sys_call+0x221a/0x2240 [ 1118.466335][ C0] do_syscall_64+0x15f/0xf80 [ 1118.470995][ C0] ? trace_irq_disable+0x3b/0x140 [ 1118.476067][ C0] ? clear_bhb_loop+0x40/0x90 [ 1118.480784][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.486710][ C0] RIP: 0033:0x7f483dd9c819 [ 1118.491156][ C0] RSP: 002b:00007ffebe5d9b58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1118.499611][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f483dd9c819 [ 1118.507614][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1118.515619][ C0] RBP: 00007ffebe5d9bbc R08: 0000000000000000 R09: 00000000000927c0 [ 1118.523627][ C0] R10: 00007f483e016038 R11: 0000000000000246 R12: 00000000000001f2 [ 1118.531634][ C0] R13: 00000000000927c0 R14: 00000000000f72e0 R15: 00007ffebe5d9c10 [ 1118.539661][ C0] [ 1118.542707][ C0] task:syz-executor state:R running task stack:22264 pid:30482 tgid:30482 ppid:30468 task_flags:0x400140 flags:0x00080000 [ 1118.556357][ C0] Call Trace: [ 1118.559673][ C0] [ 1118.562646][ C0] __schedule+0x17b4/0x5680 [ 1118.567211][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1118.572360][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1118.577349][ C0] ? do_syscall_64+0x15f/0xf80 [ 1118.582160][ C0] ? __pfx___schedule+0x10/0x10 [ 1118.587105][ C0] preempt_schedule_irq+0x4d/0xa0 [ 1118.592184][ C0] irqentry_exit+0x14f/0x730 [ 1118.596823][ C0] ? trace_irq_disable+0x3b/0x140 [ 1118.601894][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1118.607934][ C0] RIP: 0010:lock_release+0x7f/0x3c0 [ 1118.613180][ C0] Code: d6 a5 90 0e 00 0f 84 1c 02 00 00 65 8b 05 e9 6e 9c 11 85 c0 0f 85 0d 02 00 00 65 4c 8b 3d 31 29 9c 11 41 83 bf 8c 0b 00 00 00 <0f> 85 f7 01 00 00 49 81 3e c0 a4 01 94 0f 84 ea 01 00 00 9c 5b fa [ 1118.632824][ C0] RSP: 0018:ffffc9000581eed0 EFLAGS: 00000246 [ 1118.638932][ C0] RAX: 0000000000000000 RBX: ffffffff914cbc01 RCX: 0000000080000001 [ 1118.646946][ C0] RDX: ffffc9000581f001 RSI: ffffffff8c27efe0 RDI: ffffffff8c27efa0 [ 1118.655063][ C0] RBP: dffffc0000000000 R08: ffffc9000581fee0 R09: 0000000000000000 [ 1118.663062][ C0] R10: ffffc9000581f058 R11: fffff52000b03e0d R12: ffffc9000581fef0 [ 1118.671071][ C0] R13: ffffffff81766536 R14: ffffffff8e95d020 R15: ffff88806a725c40 [ 1118.679081][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1118.684302][ C0] ? deref_stack_reg+0x19f/0x230 [ 1118.689287][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1118.694449][ C0] unwind_next_frame+0x1bba/0x2550 [ 1118.699630][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1118.704796][ C0] ? __x64_sys_getsockopt+0x1a4/0x240 [ 1118.710237][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1118.716437][ C0] arch_stack_walk+0x11b/0x150 [ 1118.721245][ C0] ? do_syscall_64+0x15f/0xf80 [ 1118.726072][ C0] stack_trace_save+0xa9/0x100 [ 1118.730951][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1118.736387][ C0] save_stack+0x122/0x230 [ 1118.740768][ C0] ? __pfx_save_stack+0x10/0x10 [ 1118.745665][ C0] ? __free_frozen_pages+0xc2b/0xdb0 [ 1118.750999][ C0] ? __kasan_populate_vmalloc+0x137/0x1d0 [ 1118.756763][ C0] ? alloc_vmap_area+0xd47/0x1480 [ 1118.761828][ C0] ? __get_vm_area_node+0x1f8/0x300 [ 1118.767070][ C0] ? __vmalloc_node_range_noprof+0x372/0x1730 [ 1118.773199][ C0] ? vzalloc_noprof+0xb2/0xe0 [ 1118.777929][ C0] ? alloc_counters+0x64/0x5d0 [ 1118.782726][ C0] ? do_ipt_get_ctl+0xada/0x1240 [ 1118.787701][ C0] ? nf_getsockopt+0x26e/0x290 [ 1118.792504][ C0] ? ip_getsockopt+0x19e/0x230 [ 1118.797305][ C0] ? do_sock_getsockopt+0x51d/0x7e0 [ 1118.802544][ C0] ? __x64_sys_getsockopt+0x1a4/0x240 [ 1118.807970][ C0] ? page_ext_put+0x97/0xc0 [ 1118.812537][ C0] __reset_page_owner+0x71/0x1f0 [ 1118.817521][ C0] __free_frozen_pages+0xc2b/0xdb0 [ 1118.822683][ C0] ? ___free_pages+0xb2/0x220 [ 1118.827408][ C0] __kasan_populate_vmalloc+0x137/0x1d0 [ 1118.833007][ C0] alloc_vmap_area+0xd47/0x1480 [ 1118.837912][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1118.843238][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1118.848058][ C0] ? __get_vm_area_node+0x13f/0x300 [ 1118.853296][ C0] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 1118.859318][ C0] ? alloc_counters+0x64/0x5d0 [ 1118.864126][ C0] __get_vm_area_node+0x1f8/0x300 [ 1118.869207][ C0] __vmalloc_node_range_noprof+0x372/0x1730 [ 1118.875152][ C0] ? alloc_counters+0x64/0x5d0 [ 1118.879969][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1118.885934][ C0] ? rcu_is_watching+0x15/0xb0 [ 1118.890804][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1118.897202][ C0] ? xt_find_table_lock+0x51/0x3f0 [ 1118.902367][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1118.907613][ C0] ? net_generic+0x1e/0x240 [ 1118.912169][ C0] ? alloc_counters+0x64/0x5d0 [ 1118.916982][ C0] vzalloc_noprof+0xb2/0xe0 [ 1118.921537][ C0] ? alloc_counters+0x64/0x5d0 [ 1118.926349][ C0] alloc_counters+0x64/0x5d0 [ 1118.930996][ C0] ? xt_find_table_lock+0x365/0x3f0 [ 1118.936235][ C0] do_ipt_get_ctl+0xada/0x1240 [ 1118.941099][ C0] ? do_ip_getsockopt+0x131d/0x1d40 [ 1118.946355][ C0] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 1118.951597][ C0] ? do_ip_getsockopt+0x131d/0x1d40 [ 1118.956846][ C0] ? __mutex_trylock_common+0x158/0x260 [ 1118.962445][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1118.968383][ C0] ? rcu_is_watching+0x15/0xb0 [ 1118.973199][ C0] ? trace_contention_end+0x3d/0x140 [ 1118.978535][ C0] ? nf_getsockopt+0x224/0x290 [ 1118.983343][ C0] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1118.989021][ C0] ? nf_getsockopt+0x34/0x290 [ 1118.993747][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1118.998816][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1119.004843][ C0] ? __might_fault+0xaf/0x130 [ 1119.009573][ C0] nf_getsockopt+0x26e/0x290 [ 1119.014222][ C0] ip_getsockopt+0x19e/0x230 [ 1119.018883][ C0] ? __pfx_ip_getsockopt+0x10/0x10 [ 1119.024053][ C0] ? sock_common_getsockopt+0x2d/0xb0 [ 1119.029625][ C0] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1119.035619][ C0] do_sock_getsockopt+0x51d/0x7e0 [ 1119.040707][ C0] ? __asan_memcpy+0x40/0x70 [ 1119.045353][ C0] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1119.050948][ C0] ? fd_install+0x94/0x3d0 [ 1119.055431][ C0] __x64_sys_getsockopt+0x1a4/0x240 [ 1119.060679][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.066782][ C0] do_syscall_64+0x15f/0xf80 [ 1119.071415][ C0] ? trace_irq_disable+0x3b/0x140 [ 1119.076476][ C0] ? clear_bhb_loop+0x40/0x90 [ 1119.081197][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.087139][ C0] RIP: 0033:0x7fdb2f79dfea [ 1119.091682][ C0] RSP: 002b:00007ffdff132ba8 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 1119.100135][ C0] RAX: ffffffffffffffda RBX: 00007ffdff132c30 RCX: 00007fdb2f79dfea [ 1119.108143][ C0] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 1119.116154][ C0] RBP: 0000000000000003 R08: 00007ffdff132bcc R09: 0000000000000000 [ 1119.124161][ C0] R10: 00007ffdff132c30 R11: 0000000000000216 R12: 00007fdb2f9ebac0 [ 1119.132166][ C0] R13: 00007ffdff132bcc R14: 0000000000000000 R15: 00007fdb2f9ec180 [ 1119.140194][ C0] [ 1119.143257][ C0] rcu: rcu_preempt kthread starved for 10496 jiffies! g220189 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1119.154603][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1119.164686][ C0] rcu: RCU grace-period kthread stack dump: [ 1119.170598][ C0] task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1119.184136][ C0] Call Trace: [ 1119.187441][ C0] [ 1119.190405][ C0] __schedule+0x17b4/0x5680 [ 1119.194998][ C0] ? __pfx___schedule+0x10/0x10 [ 1119.199919][ C0] ? schedule+0x90/0x360 [ 1119.204207][ C0] schedule+0x164/0x360 [ 1119.208407][ C0] schedule_timeout+0x158/0x2c0 [ 1119.213295][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1119.218706][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1119.224029][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1119.229870][ C0] ? prepare_to_swait_event+0x340/0x370 [ 1119.235482][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 1119.240390][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1119.246593][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1119.251917][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1119.257168][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1119.263031][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1119.267666][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1119.272905][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1119.278760][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1119.283747][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 1119.288821][ C0] kthread+0x388/0x470 [ 1119.292939][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1119.298181][ C0] ? __pfx_kthread+0x10/0x10 [ 1119.302819][ C0] ret_from_fork+0x514/0xb70 [ 1119.307462][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1119.312617][ C0] ? __switch_to+0xc79/0x1410 [ 1119.317340][ C0] ? __pfx_kthread+0x10/0x10 [ 1119.322069][ C0] ret_from_fork_asm+0x1a/0x30 [ 1119.326900][ C0] [ 1119.329950][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1119.336302][ C0] CPU: 0 UID: 0 PID: 30893 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 1119.345894][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1119.355986][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1119.362532][ C0] RIP: 0010:smp_call_function_many_cond+0xe32/0x1210 [ 1119.369253][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 77 e7 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 22 e3 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 06 e3 [ 1119.388892][ C0] RSP: 0018:ffffc900043b7700 EFLAGS: 00000293 [ 1119.394992][ C0] RAX: ffffffff81b97aea RBX: 1ffff110170e8165 RCX: ffff8880325bdc40 [ 1119.403003][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1119.411010][ C0] RBP: ffffc900043b7840 R08: ffffffff903219b7 R09: 1ffffffff2064336 [ 1119.419019][ C0] R10: dffffc0000000000 R11: fffffbfff2064337 R12: ffff8880b8740b28 [ 1119.427032][ C0] R13: dffffc0000000000 R14: ffff8880b863c148 R15: 0000000000000001 [ 1119.435036][ C0] FS: 0000000000000000(0000) GS:ffff888125243000(0000) knlGS:0000000000000000 [ 1119.443998][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1119.450614][ C0] CR2: 00007fadc701c368 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 1119.458620][ C0] Call Trace: [ 1119.461931][ C0] [ 1119.464905][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1119.469998][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1119.476371][ C0] ? kmem_cache_alloc_bulk_noprof+0xae/0x7e0 [ 1119.482389][ C0] ? __pfx___text_poke+0x10/0x10 [ 1119.487405][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1119.492468][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1119.497628][ C0] smp_text_poke_batch_finish+0x5f5/0x1160 [ 1119.503475][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 1119.509671][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1119.514749][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1119.521042][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 1119.527335][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1119.533366][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 1119.539303][ C0] static_key_enable+0x1a/0x20 [ 1119.544128][ C0] toggle_allocation_gate+0xab/0x290 [ 1119.549473][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1119.555411][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1119.561194][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1119.566955][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1119.572719][ C0] process_scheduled_works+0xb5d/0x1860 [ 1119.578343][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1119.584373][ C0] ? assign_work+0x3d5/0x5e0 [ 1119.589015][ C0] worker_thread+0xa53/0xfc0 [ 1119.593782][ C0] kthread+0x388/0x470 [ 1119.597902][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1119.603058][ C0] ? __pfx_kthread+0x10/0x10 [ 1119.607691][ C0] ret_from_fork+0x514/0xb70 [ 1119.612335][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1119.617504][ C0] ? __switch_to+0xc79/0x1410 [ 1119.622232][ C0] ? __pfx_kthread+0x10/0x10 [ 1119.626858][ C0] ret_from_fork_asm+0x1a/0x30 [ 1119.631684][ C0]