last executing test programs: 10.721847349s ago: executing program 4 (id=9235): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000008e00000095"], &(0x7f0000000400)='GPL\x00'}, 0x94) 10.556396182s ago: executing program 4 (id=9236): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) (async) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) (async, rerun: 32) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) (rerun: 32) write$cgroup_pid(r2, &(0x7f0000000140)=r3, 0x12) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x2}, 0x1c) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000000)={&(0x7f0000000040)=0x1, 0x7, &(0x7f0000000040), &(0x7f0000000080)}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0xc, 0x5e, 0x1, 0x18, @dev={0xfe, 0x80, '\x00', 0xb}, @mcast1, 0x40, 0x8, 0x6, 0xffff0001}}) connect$packet(r1, &(0x7f0000000380)={0x11, 0x17, r5, 0x1, 0xff, 0x6, @local}, 0x14) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x509, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x41) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) (async, rerun: 32) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x804) (async, rerun: 32) sendmsg$802154_raw(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)="2ba44d", 0x3}, 0x1, 0x0, 0x0, 0x2000}, 0xa80c) 10.375096181s ago: executing program 4 (id=9241): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000240"], 0x10c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0) (async) close(r0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000240"], 0x10c}}, 0x0) (async) 3.252304321s ago: executing program 0 (id=9320): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) readv(r0, &(0x7f0000000a00)=[{&(0x7f0000000040)=""/121, 0x79}, {&(0x7f00000000c0)=""/167, 0xa7}, {&(0x7f0000000180)=""/124, 0x7c}, {&(0x7f0000000240)=""/12, 0xc}, {&(0x7f00000007c0)=""/245, 0xf5}, {&(0x7f00000008c0)=""/110, 0x6e}, {&(0x7f0000000940)=""/140, 0x8c}], 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 3.212527369s ago: executing program 3 (id=9321): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x6, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0xff93, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x3, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x6}, @qdisc_kind_options=@q_cbs={{}, {0x0, 0x2, @TCA_CBS_PARMS={0x0, 0x1, {0x6, '\x00', 0xff, 0x8, 0x3, 0x8}}}}, @TCA_RATE={0x0, 0x5, {0x4, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newchain={0x2c, 0x64, 0x2, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x7ae43bbd53d17ab9, 0x2}, {0x4, 0x6}, {0x4, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000140)=@newqdisc={0x98, 0x24, 0x300, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x8, 0xfff1}, {0xfff2, 0x7}, {0x3, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffff17}, @qdisc_kind_options=@q_htb={{0x8}, {0x44, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x130f4800, 0x1ff}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x40, 0x6}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_RATE={0x6, 0x5, {0x5}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_RATE={0x6, 0x5, {0x9, 0x72}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8858}, 0x80) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000100009050000000000000000b1ff2e5c5360538c5698b6b7f39c417223b4d07456d68ee6758887d396e5c839d5a9000080afc7872d3c4a648166b916526af53872845d1f1ac1df1d4db700301c32882813fb5aad2faf74aaeeb870af1ed5a0fd551829fcd1dcccc26cf6a064e1c271394e2ef9ba127e7a8091b7ae725cf193b9cf29aa4de9082491d489819b"], 0xe0}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x1, 0x70bd25, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000040) r5 = socket(0x2a, 0x2, 0x0) bind$xdp(r5, &(0x7f00000000c0)={0x2c, 0x1, 0x0, 0x26, r5}, 0x10) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24044000}, 0x8011) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000c80)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r16 = syz_open_procfs$namespace(r13, &(0x7f0000001780)='ns/ipc\x00') r17 = getpid() sendmmsg$unix(r12, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, r15}}}, @cred={{0x1c, 0x1, 0x2, {r17, r14}}}, @rights={{0x18, 0x1, 0x1, [r16, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmsg$netlink(r4, &(0x7f0000000d40)={&(0x7f00000004c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x10}, 0xc, &(0x7f0000000b00)=[{&(0x7f00000008c0)={0x240, 0x32, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x4, 0xe7}, @nested={0x225, 0x72, 0x0, 0x1, [@typed={0x8, 0x138, 0x0, 0x0, @uid}, @nested={0x4, 0x30}, @generic="c36bf6d6ed01eb006c661f5b795d51c30f18ac953b799edcaa234ceb383ab9f0fc7fad1b299fe154837cdb0dd4d47784de05b6ed1561bea9755d866e619138638d7dcc2e13baf35af14247f12fe22a660c64ea9f838d9fdcf89ced785a4a5ac88dcf70a80505c3dc47133c82cf932e79a8da6198420cbdbb367aebb5e3276d4bbc07c154d7099ccff597b7cdd877a92b60f302cef310ce1cb6f5328b6f235c5deea86beac2e280ecbcb9bc34ef4f40f9aa838d890bcaa5b27bb73da3e335", @generic="46292529c028a6fe098d15b95e01bcca7816613b050351564949ae63f72bf9927742801fa886f92d19df0b916924a378988eb4a6c688f35446f646db64c4f6ebe4cc156d9167e991f7af488eda277148896072faea0691a5522a7758a75ee434f29c5adf08da5b72b048c37551fe9adefa7603f7ef310334bf9a5e4eb1c5c9d5038cd75c6a3dc765fe8e0919", @nested={0x4, 0x12e}, @generic="02acd2f91166a8d8c57f740dce59e3c3a3199b2dce0daef63facb661a3811766f26d4785423874b189578d8c6e8547ec13bf4e1ff3873a767543543993eeb938e38460b6a0d0f08039c5dcf97b3424ae89168901a6f8518f5fc1b1c1a9210c1a5a7682b67a3bd77bf89bb9136434ac987040b233378a396268141a65fc66422634ac571e5a682d98760d76d1f7d6fb36abc469c60944dcf01982fa53be2932f2832b5708c1d56e971b75628d9a22ba0d8cfbe128d377889ec59aa99b29296e2f4a7509b072a3b2"]}, @typed={0x4, 0xde}]}, 0x240}], 0x1, &(0x7f0000000cc0)=[@rights={{0x28, 0x1, 0x1, [r0, r8, r0, r6, r0, r6]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11, r15}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x80, 0x4008000}, 0x40) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r10], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000410001032bbd7000fddbdf2503"], 0x18}}, 0x840) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 3.119502146s ago: executing program 1 (id=9322): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) read(r2, &(0x7f0000000100)=""/41, 0x29) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) (async) close(r3) r4 = socket(0x10, 0x803, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000071119e00000000008510000002000000850000007d00000095000000000000009500a5050000000082380a6c16cb23efcad64db91e674db95df8d0896824cb2691d06528024707d13584c797578afdc601c7f4a6f818b7f25410420f86e4b78db803197e79375fd430e64a4ed0ec3494217ffe488acb70e2fc2a3ed88e4e93d3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) (async) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0xa) (async) r8 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f00000006c0)) recvmmsg(r8, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f00000014c0)=""/4104, 0x1008}, {&(0x7f0000000940)=""/53, 0x35}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffff00, 0xffffffff, 'pim6reg\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x5e, 0x3, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x5, 0x5, 0x6, 0x20], 0x7, 0x1}, {0xffffffffffffffff, [0x56, 0x7, 0x8, 0x5e, 0x1], 0x0, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xfffa, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0x9, 0x8, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffff00, 0xffffffff, 'pim6reg\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x5e, 0x3, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x5, 0x5, 0x6, 0x20], 0x7, 0x1}, {0xffffffffffffffff, [0x56, 0x7, 0x8, 0x5e, 0x1], 0x0, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xfffa, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0x9, 0x8, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r9 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x8, &(0x7f0000001340)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x8, &(0x7f0000001340)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) 2.906613785s ago: executing program 3 (id=9323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000500)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x150, 0x15, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x104, 0x8, "2b733a884295a32ede8d6b9813737035e6b31d3831fdb686c576e7a63b8aeb373a7c6a4c426c2f7cdbdd20d0bef172350c458b26d6c337941c5a201c0ae835c508539c9edc2540369b59b38109f19654b98352fa88029281d2fd0e4e92b5d7196fe35740aae62c04593b3fd105ecad1898657f5b512f0ce2570509bd190f924f6c44c02795874de4f41d1eeb465c952e71680087f693d0d815df09368e6814378d0a09ec1562f32abadf19782c642603d22914051c8ccc263691b6be22158c9c67c25dfded0b13224a506d92b67afc71e5911a2af3ecadfc3943e3f3c66e5d7bc23a8d747cd70bf4c3b9b423f203c04c8ec042a53088cd86929e0b9138979b83"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 2.777175523s ago: executing program 1 (id=9324): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) socket$kcm(0xa, 0x2, 0x0) (async) r4 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=0x109) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x10e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700), 0x8, 0xa0, 0x8, 0xfffffffffffffd9a, 0x0}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x58, r7, 0x1, 0x80000000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000008c0)={0x104, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x23, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x2}, @value=@ver_80211n={0x0, 0x6, 0x2, 0x2, 0x0, 0x3}}, @ntf_ch_w={0x7, 0x0, 0x1}}}, @NL80211_ATTR_FRAME={0xbd, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x56cf}, @device_b, @device_a, @from_mac=@broadcast, {0x8, 0x3}}, @tdls_teardown={0xc, 0x3, {0x2, {0x37, 0x87, {0x4, 0x2, "ccc07de01fa4748e505d1fa3e656fe11", "5191dd5afbcb7b1ccfbc2af8a3220650db4b1dc45eb6d7cb35f5d170c018ac79", "8c4ec756788334f5ebb45a3633d350b0799e7884ca8f3cae30fb295dc0ebe534", [{0x3, 0x11, "c82f210d61153752fb4b839c42c466c806"}, {0x1, 0x20, "fd1c70089fb5e1160f4993e188ad65767d0f0951250dd20bc855de7e62bde6f1"}]}}, {0x65, 0x12, {@initial, @device_b}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x9]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4000051) (async) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000008c0)={0x104, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x23, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x2}, @value=@ver_80211n={0x0, 0x6, 0x2, 0x2, 0x0, 0x3}}, @ntf_ch_w={0x7, 0x0, 0x1}}}, @NL80211_ATTR_FRAME={0xbd, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x56cf}, @device_b, @device_a, @from_mac=@broadcast, {0x8, 0x3}}, @tdls_teardown={0xc, 0x3, {0x2, {0x37, 0x87, {0x4, 0x2, "ccc07de01fa4748e505d1fa3e656fe11", "5191dd5afbcb7b1ccfbc2af8a3220650db4b1dc45eb6d7cb35f5d170c018ac79", "8c4ec756788334f5ebb45a3633d350b0799e7884ca8f3cae30fb295dc0ebe534", [{0x3, 0x11, "c82f210d61153752fb4b839c42c466c806"}, {0x1, 0x20, "fd1c70089fb5e1160f4993e188ad65767d0f0951250dd20bc855de7e62bde6f1"}]}}, {0x65, 0x12, {@initial, @device_b}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x9]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4000051) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}}, 0x0) (async) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x15}, 0x4e21, 0x3, 'sh\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x6, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@in={0x2, 0x4e22, @local}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@in={0x2, 0x4e22, @local}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2.715758152s ago: executing program 0 (id=9325): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8084}, 0x410) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4) accept(0xffffffffffffffff, &(0x7f0000000080)=@ethernet={0x0, @link_local}, &(0x7f0000000100)=0x80) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4) close(r2) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8084}, 0x410) (async) socket$inet6(0xa, 0x80003, 0xff) (async) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4) (async) accept(0xffffffffffffffff, &(0x7f0000000080)=@ethernet={0x0, @link_local}, &(0x7f0000000100)=0x80) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4) (async) close(r2) (async) 2.688728959s ago: executing program 3 (id=9326): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) socket$inet6(0xa, 0x3, 0x8000000003c) (async) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x8, &(0x7f0000000100), 0x12d) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000e40)={@in6={{0xa, 0x4e22, 0x26e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x0, 0x0, 0x9, 0x0, "5472c36bad083abff48a0eedb747e088c5c11f5a5d44c5e047004a2f7c5739902bdfc460e1610cbf56b38c88f371e735b45d5163828b94176467a05dd7b9efa340f941c6d223c9b9a5e979e3738aa85f"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000e40)={@in6={{0xa, 0x4e22, 0x26e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x0, 0x0, 0x9, 0x0, "5472c36bad083abff48a0eedb747e088c5c11f5a5d44c5e047004a2f7c5739902bdfc460e1610cbf56b38c88f371e735b45d5163828b94176467a05dd7b9efa340f941c6d223c9b9a5e979e3738aa85f"}, 0xd8) listen(r6, 0x0) (async) listen(r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x28000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@loopback]}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000f40)="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", 0x6b1}], 0x2, 0x0, 0x0, 0x2c}, 0x880) 2.656071142s ago: executing program 0 (id=9327): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b40000000000000079b03f0000000000620040000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000108000140000000002c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000408000240000000940900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000140)=0x9, 0x4) 2.507571089s ago: executing program 1 (id=9328): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r4, 0xff06, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000040c0), 0x0, 0x40) recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000840)=""/102, 0x66}], 0x1}, 0x80000009}], 0x1, 0x101, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000090280500140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=r8], 0x44}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7, 0x37) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080"], 0x38}}, 0x0) 2.501242405s ago: executing program 0 (id=9330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=@can_delroute={0x3c, 0x19, 0x1, 0x1000, 0x0, {0x1d, 0x1, 0x1}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "89543896f10eee1e"}, 0x2}}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffa, 0x0, 0xfffffffffffffff8}}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001600010700000000a400000002"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x854) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f0000000e80)=0x57bb, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b7050000000000006110480000000000dc0500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9805837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8afef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb246ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4030b34c27a2f7fcd66ddde687c1255d0779ffec72ada8598e222d66bc90dacf240fe12755f780048804400f49d77b81534a8f1b0de80c49c7d9c87888801d819daaddb0c57513fdf7d0e942a799143dccc213cac7e8092d691a7894678472ba1970b4d6e393158dafeebae0a9d89e6e639115ddc7b54139b5b47f3d583c16b4d2da0a5c7b5ea751d03cc71fdd61140d66ff1ccfcbe83e40156854900"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) shutdown(r4, 0x1) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0x2e0, 0x440, 0x440, 0x2e0, 0x2e0, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@ipv6={@empty, @local, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'bridge_slave_0\x00', 'dummy0\x00', {0xff}, {}, 0x84, 0x5, 0x6, 0x4c}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x3a}, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0x0, 0xff, 0xffffffff], 'rose0\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0xc1, 0x5}, 0x0, 0x120, 0x160, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x10, 0x10001, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2b}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xee5f356c6f495b18, 0x100fffe00, 0xff], [0x0, 0xff, 0xffffff00, 0xffffff00], 'veth1_macvtap\x00', 'dummy0\x00', {}, {}, 0x1d, 0x6, 0x4, 0x19}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, @common=@ipv6header={{0x28}, {0x22, 0x2, 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) writev(r5, &(0x7f0000001540), 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60000000040621030000000000000000030000070900020073797a32000000000900020073797a31000000000900030073797a30000000000900030073797a3020000000050001000700000005000100070000004500020073797a30000000009268e75307ca24fbefb8a905f1e80d2db1327223c4425b72d1e41f1301c2a3d606c9f04a3680876dca0d459f39aa74fb889a48fcbbdc98ed87f14fc16d228d73998d484f8a86e92df6544be5232a83945a51d1f7b93fa4e5a5bdcd2cc2c26ab304f800"/216], 0x60}, 0x1, 0x0, 0x0, 0x8081}, 0x80) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="380001002000010200000000000000e70900200000000000000000001400020005ebffffffffffffff00000000000002a914bae127b23a5bbcf81f3e5fbbb27ad2f2ea4447c491a4360a8e6c71bb99b74cfd6cc6ebe75d635b534ffe9ec1c3c34ac01a43118c00c86d7dd0"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.366092099s ago: executing program 2 (id=9331): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000911216000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e}, 0x20) clock_gettime(0x4, &(0x7f0000000040)) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5421, &(0x7f00000003c0)=0x3d49) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000007000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) read$alg(r3, &(0x7f0000000140)=""/116, 0x74) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0xc0189436, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x18081, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0, @void, @value=r8}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r9, r7, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r9, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r6}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000006c0)={r1, 0x7ff, 0x4, 0x1}) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000700), 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r10, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xc, 0x3ff, 0x9, 0x98, 0x50002, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000640)={{r2}, 0x2, &(0x7f0000000600)=[0x2, 0x3], 0x2, 0x5, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x51}, @generic={0x0, 0x7, 0xd, 0x0, 0x9}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x10, 0x63, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[r1, 0xffffffffffffffff, r2, r3, r9, r10, r12], &(0x7f0000000500)=[{0x2, 0x3, 0xf, 0x9}, {0x5, 0x3, 0x0, 0x2}, {0x1, 0x2, 0x1, 0x4}], 0x10, 0x2}, 0x94) syz_emit_ethernet(0xb3, &(0x7f0000000240)={@local, @broadcast, @void, {@mpls_mc={0x8848, {[{0x1, 0x0, 0x1}, {0xfff01, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x3}, {0xb0}, {0x4}, {0x7, 0x0, 0x1}, {0x9}, {0x2, 0x0, 0x1}], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x29, 0x81, 0x66, 0x0, 0x5, 0x1, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4}]}}, @redirect={0x5, 0x3, 0x0, @rand_addr=0x64010101, {0x17, 0x4, 0x1, 0x0, 0xc, 0x65, 0x80, 0x0, 0x29, 0xffc0, @loopback, @loopback, {[@timestamp={0x44, 0x18, 0xd1, 0x0, 0x9, [0x6, 0x3, 0xff, 0x2, 0x2]}, @end, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0x17, 0x54, [@rand_addr=0x64010100, @remote, @local, @broadcast, @rand_addr=0x64010100]}, @noop, @generic={0x88, 0xf, "178fdba5c30d25189544ee9e45"}, @noop]}}, "a7d2a51873"}}}}}}, 0x0) 2.18362024s ago: executing program 2 (id=9332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000ce830100000f00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001900010026bd700000000000e00000020000000000010000000000000000000000000000000000000000000000000000fffd00000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000700000000020000fbffffffffffffff000000000000000000000000000000000000000000000000feffffffffffffff00"/112], 0xb8}}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000feffffffe00000020000000000000000000026e4297b00000000000000000000000000004e200000000000000a"], 0xb8}}, 0x24000080) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000200)='prio\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 2.147658819s ago: executing program 3 (id=9333): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001300), 0x4) connect$inet6(r0, &(0x7f0000001380)={0xa, 0x4e22, 0x1000, @private0, 0x9b}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x5, 0x0, 0x2, 0x10004003, 0x7, 0x0, 0x7}}) 2.070961782s ago: executing program 2 (id=9334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x4894) (async) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRES16=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) accept$packet(r2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r6, @ANYBLOB="20000280", @ANYRES32=r5, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r8, 0xd1a}, 0x8) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000050010000090a010400000000000000000100000008000a4000000000200111800a0001006d6174636800000010010280f4000300722c2029ea597c6b7d2e5b2f9352340e0a796c971c95eda638625904b195bab81a59582612e1721817eddfb118f525734066edf7937a5f4799a431b2e5186b69a7c1746c21e2e33ff33b2d24962e65adb00bbcdc5ddb97ca144f63ed702b229528d8c77caa912d8b9458910d6eec35202690748efa3217d14214012abc9bbd8a48ed47cd2d09564fce3b9b3c64eaff3ef055a816e0c525d04fe21e5fd8969f0e7869dba5998419bb65516436cbfba160791b5e833645be86caf0d15724abed0538a185716027261b48fc5132c476291a953801aaf20be6df49fb9c41a01cd9b02f22cc12510fbb01f509d3fe4de2f5200e000100636f6e6e747261636b00000008000240000000010900010073797a3000000000080005400000000c2c0000000c0a010300000000000000000100000008000440000000000900010073797a300000000004000380140000001000010000000000000000000000000a9617d5461bc650718762bb89d92a01e2a488654b75e842f22da330587ae4a353b81fb945aaed01308e548e7769541c57d2d2ec6972a0634faca084bd9ffd4ace2f034398d0b38b8a3012097d331d7804f83e69577fa76757c69c69c23f8c76fbb9416ff2aa87903563e672bdb0f0cd1c58b58794dcdcdc7e77499a5017fe11833b211dbef3583b79fb7a7fbdea7da3077434d23388f1f9d8966df0d56079aacfecef34264b9346ba5b0dc065c64305bf2d"], 0x1c4}}, 0x4000080) 1.548853409s ago: executing program 1 (id=9335): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x16}}}}}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, 0x0, 0x1) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r5, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES64=r6], 0x48}, 0x1, 0x0, 0x0, 0x2400008c}, 0x0) sendmsg$sock(r0, &(0x7f0000001c80)={&(0x7f0000000180)=@xdp={0x2c, 0x5, r5, 0x21}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000200)="efb0a39120e41183207677d657ec845d989e74e8531f13e052d9bce7a47f395c5081d5d62603d3511029a966751869da5a52af3dc319da673abc", 0x3a}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="7ec891a8706d1970e1d4e32b29a784efc9d9e08468b738fc475c0afb5728e132207cf9cc141f4ac11de16d7ee7e41e30aa18129142d3a630ee655808bd775d5acdca85", 0x43}], 0x3, &(0x7f0000001c40)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x30}, 0x4000000) syz_emit_ethernet(0x101b, &(0x7f0000001cc0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@llc={0x4, {@snap={0x0, 0x0, "8b67", "1a8a02", 0xd, "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"}}}}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8a}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) readv(r0, &(0x7f0000000580)=[{&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/52, 0x34}], 0x6) 1.51437384s ago: executing program 0 (id=9336): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000000)={0x1, 0x113, 0x9, 0x6, 0x800}) r3 = socket(0xa, 0x1, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom(r4, 0x0, 0x0, 0x40002042, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.40855132s ago: executing program 1 (id=9337): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="adaa000000000000711014000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x8, 0x10, 0x8, 0x7, {{0x1a, 0x4, 0x2, 0x0, 0x68, 0x67, 0x0, 0xbb, 0x4, 0x0, @local, @multicast1, {[@ra={0x94, 0x4}, @cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x0, 0xa, "731a8297e1547dc8"}, {0x6, 0x6, "f51df7c3"}, {0x7, 0x2}, {0x7, 0x7, "a12380e9d6"}, {0x7, 0xd, "4bd049b9b1f813ea2e87b9"}, {0x6, 0x11, "423db90b0b3f4a6aaae64bd6abc316"}]}, @timestamp_prespec={0x44, 0xc, 0xe8, 0x3, 0x1, [{@remote, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bind$packet(r0, &(0x7f0000000140)={0x11, 0xc, r1, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1.374387248s ago: executing program 4 (id=9245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) socket(0x5, 0x6, 0x0) (async) r1 = socket(0x5, 0x6, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, r6, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f978617c318500", 0x3a}, 0x60) (async) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, r6, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f978617c318500", 0x3a}, 0x60) recvmmsg(r2, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) 1.283848247s ago: executing program 0 (id=9338): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="260a00000000000061117c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r3, 0x29, 0x8, 0x0, 0x0) (async) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000005280), 0x1, 0x0) poll(&(0x7f00000052c0)=[{r4, 0x24}], 0x1, 0x9) (async) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x4, @void}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, r6, 0x4, r6}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf251200000018000180140002007465616d5f736c6176655f31000000000800060000001c00f452a45d283662804a71f1dcae7aa09492c0457e2cfa1985022fc4b0d3f7f21779e1a83e4fa6fcc2493da0ef50a2b5e36456513554896853aff06cc65ced2a674dcc88c4a4c835073ccc7df6e20277ff39f80db790f3a59f0fa7076adbb1af1164d3115635d24d05e9f5214d0e96cacbae0d40595729c6b58737b0b2df9222e32be1c5f6bc3ebdfc85d711931454d0f5f4753bcd6abf1a96"], 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040800) 1.283325684s ago: executing program 1 (id=9339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="fb46edac81e9c86512098475f87966db620ac4ff00000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) 1.211272541s ago: executing program 3 (id=9340): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000025c0)='ns/cgroup\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000552d60000000000000200000008", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r7, 0x0, 0xd, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r7, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x45833af92e4a39df, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x168, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, [0x0, 0x0, 0x0, 0x1]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="400002d4bbc8c7f1ca6bfd007505000000501cec341b806173387365725f6c696e6b757000006c860000000000000000000000000000000000050003", @ANYRES32=r2, @ANYBLOB], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x90}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r9, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5, r8, 0x0, 0xffffffff00000000}, 0x38) preadv(r0, 0x0, 0x0, 0x0, 0x0) 1.126098718s ago: executing program 2 (id=9341): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00008188e6b62aa73772cc9f1ba1ff48430000005e6cb0431406b6e9a100000e000a000f0000000280000012945d8255218079f2f20d7b5affba2ea6b73b0b861c000000", 0x45}], 0x1}, 0x6001) 1.019880226s ago: executing program 4 (id=9342): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xffffffff, @empty, 0xa9}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000004240)=0x80000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x200, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x100, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x1, 0x0, 0x9, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff00c}, {0x6}]}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r3, 0x26, 0x1, 0xf51, &(0x7f0000001440), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000240)='westwood', 0xfcb5) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x30, r5, 0xfffff000) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='htcp', 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) 964.45603ms ago: executing program 2 (id=9343): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="610506be03020603097a03074ffd0745c9524de2028101046c8a3a07a3bbbf4f21af29b437a5d4b53cc8d414e21690ea09bd70bc7057d6f5ababa0370596a64cf06a2ef1067f8225b9191412d466d4213cbcfee893bd9ce7e3498eb539e6c20b0897daa9aeca439b91f56346e763c94b86286128edb2"], 0x85) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request={0x2}}}}}}, 0x0) r4 = socket$inet_sctp(0x2, 0x0, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000040)={0x6, 'lo\x00', {0x843a}, 0x8}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x10001, @private2, 0x1000}}, [0x0, 0x7fff, 0xffffffffffffffff, 0x2, 0x5, 0x6, 0x6, 0x3, 0xd149, 0x6, 0x2, 0x800, 0x32c4, 0x7, 0x68f5]}, &(0x7f0000000380)=0x100) pipe(&(0x7f0000000440)={0xffffffffffffffff}) write$cgroup_subtree(r6, &(0x7f0000000480)={[{0x2b, 'net_prio'}, {0x2d, 'devices'}, {0x2d, 'net_prio'}, {0x2d, 'cpuset'}, {0x2d, 'cpu'}, {0x2b, 'net_cls'}, {0x2b, 'freezer'}, {0x2d, 'net_cls'}, {0x2b, 'rlimit'}, {0x2b, 'net'}]}, 0x52) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000003c0)={r5, 0x1, 0x8, [0x8, 0x7ff, 0x6, 0xfd98, 0x89b, 0x2, 0x0, 0x100]}, &(0x7f0000000400)=0x18) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000031c0)={&(0x7f00000001c0)=@isdn={0x22, 0x5, 0x8, 0x5, 0x8}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="9eb8a2", 0x3}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="180000"], 0x18}, 0x8080) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) 243.838444ms ago: executing program 3 (id=9344): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001900), &(0x7f0000001940)=0x4) r1 = socket$inet(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001800)={'filter\x00', 0x0, 0x3, 0x1000, [0x3, 0x4, 0x3, 0x0, 0x4, 0x3ff], 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000800)=""/4096}, &(0x7f0000001880)=0x78) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)=0x80) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r3, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './bus\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4004044) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000240)=0x18ca, 0x4) listen(0xffffffffffffffff, 0x8b) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000740)='ns/net\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3], [0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}}]}, 0x8c}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700), 0x101043, 0x0) r8 = socket(0xa, 0x3, 0xff) ioctl$XFS_IOC_OPEN_BY_HANDLE(r4, 0xc038586b, &(0x7f0000000700)={r7, &(0x7f0000000280)='taprio\x00', 0x4000, &(0x7f00000002c0)={@align=0x80000000, {0x5, 0xb, 0x9, 0x7fffffffffffffff}}, 0x10000, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x6}) sendmsg$inet6(r8, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x4, @empty}, 0x1c, 0x0}, 0x20008b98) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a2000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6b020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x274}, 0x1, 0x0, 0x0, 0x10}, 0x2400c006) 105.917924ms ago: executing program 4 (id=9345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) unshare(0x22020600) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) write$nci(r1, &(0x7f00000006c0)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x1, 0x3, 0x0, 0xf, "0fa5ee05d290dc63f7e5cb9bde6dd975"}, 0x13) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080101000000000000000005000007060002408863000004000480090001007379343000000000050003002f"], 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x40080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 2 (id=9346): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0), &(0x7f0000000100)=0x8) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r1], 0x7c}}, 0x0) kernel console output (not intermixed with test programs): 749.850338][ T1845] gretap0: entered promiscuous mode [ 749.859094][ T1845] hsr0: entered promiscuous mode [ 749.906718][ T1863] netlink: 'syz.3.7677': attribute type 30 has an invalid length. [ 750.067888][ T1863] bond6: option arp_missed_max: invalid value (0) [ 750.087196][ T1863] bond6: option arp_missed_max: allowed values 1 - 255 [ 750.101033][ T1863] bond6 (unregistering): Released all slaves [ 750.381092][ T1880] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 750.463130][ T1889] netlink: 'syz.4.7685': attribute type 6 has an invalid length. [ 750.466852][ T1887] netlink: 'syz.1.7684': attribute type 11 has an invalid length. [ 750.512453][ T1889] netlink: 'syz.4.7685': attribute type 1 has an invalid length. [ 750.538583][ T1889] netlink: 'syz.4.7685': attribute type 30 has an invalid length. [ 750.787404][ T1906] bond6: entered promiscuous mode [ 750.793148][ T1906] 8021q: adding VLAN 0 to HW filter on device bond6 [ 751.599648][ T1957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.705340][ T1969] syzkaller0: entered promiscuous mode [ 751.721741][ T1969] syzkaller0: entered allmulticast mode [ 752.585732][ T2022] validate_nla: 6 callbacks suppressed [ 752.585753][ T2022] netlink: 'syz.3.7717': attribute type 1 has an invalid length. [ 752.640028][ T2022] bond7: entered promiscuous mode [ 752.646887][ T2022] 8021q: adding VLAN 0 to HW filter on device bond7 [ 752.659444][ T2029] __nla_validate_parse: 10 callbacks suppressed [ 752.659463][ T2029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7720'. [ 752.694205][ T2022] 8021q: adding VLAN 0 to HW filter on device bond7 [ 752.707430][ T2022] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 752.718195][ T2022] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 752.738797][ T2022] bond7: (slave ip6gre2): making interface the new active one [ 752.748169][ T2022] ip6gre2: entered promiscuous mode [ 752.755786][ T2022] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 752.961700][ T2044] tap0: tun_chr_ioctl cmd 1074025672 [ 752.967253][ T2044] tap0: ignored: set checksum disabled [ 753.097061][ T2048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7726'. [ 755.336199][ T2011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 755.350753][ T2054] netlink: 'syz.2.7727': attribute type 1 has an invalid length. [ 755.403384][ T2054] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7727'. [ 755.420760][ T2058] x_tables: unsorted entry at hook 1 [ 755.671908][ T2065] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7731'. [ 755.881766][ T2087] netlink: 'syz.3.7739': attribute type 21 has an invalid length. [ 755.903173][ T2087] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7739'. [ 756.092340][ T2095] lo: left allmulticast mode [ 756.103091][ T2095] tunl0: left allmulticast mode [ 756.116107][ T2095] gre0: left allmulticast mode [ 756.121101][ T2095] gretap0: left allmulticast mode [ 756.126884][ T2095] erspan0: left allmulticast mode [ 756.132130][ T2095] ip_vti0: left allmulticast mode [ 756.148043][ T2095] ip6_vti0: left allmulticast mode [ 756.153599][ T2097] openvswitch: netlink: Duplicate or invalid key (type 0). [ 756.170543][ T2095] sit0: left promiscuous mode [ 756.178815][ T2097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 756.180786][ T2095] ip6tnl0: left allmulticast mode [ 756.199186][ T2099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7742'. [ 756.209700][ T2095] ip6gre0: left allmulticast mode [ 756.215512][ T2095] syz_tun: left allmulticast mode [ 756.220922][ T2095] ip6gretap0: left allmulticast mode [ 756.227274][ T2095] bridge0: left allmulticast mode [ 756.261082][ T2095] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 756.393281][ T2106] tipc: Enabling of bearer rejected, failed to enable media [ 756.446289][ T2112] syzkaller0: entered promiscuous mode [ 756.457791][ T2112] syzkaller0: entered allmulticast mode [ 756.642168][ T2126] sctp: [Deprecated]: syz.0.7750 (pid 2126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 756.642168][ T2126] Use struct sctp_sack_info instead [ 756.802767][ T2139] netlink: 'syz.2.7754': attribute type 1 has an invalid length. [ 756.803267][ T2138] syzkaller0: entered promiscuous mode [ 756.819210][ T2138] syzkaller0: entered allmulticast mode [ 756.827833][ T2143] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:20001 [ 756.898389][ T2139] bond9: entered promiscuous mode [ 756.904217][ T2139] 8021q: adding VLAN 0 to HW filter on device bond9 [ 756.993787][ T2139] bond9: (slave bridge6): making interface the new active one [ 757.013375][ T2139] bridge6: entered promiscuous mode [ 757.042796][ T2139] bridge6: left promiscuous mode [ 757.196292][ T2160] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7760'. [ 757.400157][ T2170] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7763'. [ 757.431345][ T2170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7763'. [ 758.809229][ T2220] gretap4: entered promiscuous mode [ 758.815353][ T2220] batman_adv: batadv0: Adding interface: gretap4 [ 758.821769][ T2220] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.847403][ T2220] batman_adv: batadv0: Not using interface gretap4 (retrying later): interface not active [ 759.162209][ T2227] netlink: 'syz.4.7779': attribute type 32 has an invalid length. [ 759.174196][ T2227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7779'. [ 759.232235][ T2229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7780'. [ 759.242328][ T2229] netlink: 'syz.4.7780': attribute type 7 has an invalid length. [ 759.251447][ T2229] netlink: 'syz.4.7780': attribute type 8 has an invalid length. [ 759.259387][ T2229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7780'. [ 759.440230][ T2238] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7782'. [ 759.449785][ T2238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7782'. [ 759.468283][ T2238] veth0_macvtap: left promiscuous mode [ 759.573118][ T2241] openvswitch: netlink: IP tunnel dst address not specified [ 759.582035][ T2241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.599493][ T2241] syzkaller0: entered promiscuous mode [ 759.605103][ T2241] syzkaller0: entered allmulticast mode [ 759.882949][ T2245] vlan0 (unregistering): left allmulticast mode [ 759.889484][ T2245] veth0_vlan (unregistering): left allmulticast mode [ 759.897113][ T2245] vlan0 (unregistering): left promiscuous mode [ 760.163034][ T2160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 760.196929][ T2190] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7766'. [ 760.372361][ T2250] netlink: 'syz.1.7787': attribute type 4 has an invalid length. [ 760.569079][T29613] hid-generic 0005:10CF:0000.0002: hidraw0: BLUETOOTH HID v0.07 Device [syz0] on aa:aa:aa:aa:aa:aa [ 760.978413][ T2281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7797'. [ 760.988715][ T2281] netlink: 'syz.1.7797': attribute type 3 has an invalid length. [ 761.000810][ T2272] lo: entered allmulticast mode [ 761.016087][ T2272] tunl0: entered allmulticast mode [ 761.021316][ T2281] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7797'. [ 761.039856][ T2281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7797'. [ 761.055173][ T2272] gre0: entered allmulticast mode [ 761.088902][ T2272] gretap0: entered allmulticast mode [ 761.179997][ T2272] erspan0: entered allmulticast mode [ 761.192203][ T2272] ip_vti0: entered allmulticast mode [ 761.206407][ T2272] ip6_vti0: entered allmulticast mode [ 761.223500][ T2272] sit0: entered allmulticast mode [ 761.265800][ T2272] ip6tnl0: entered allmulticast mode [ 761.299821][ T2272] ip6gre0: entered allmulticast mode [ 761.324971][ T2272] syz_tun: entered allmulticast mode [ 761.512637][ T2290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7802'. [ 761.532479][ T2290] bond0: ARP target 8.4.0.0 is already present [ 761.552071][ T2290] bond0: option arp_ip_target: invalid value (1032) [ 761.572143][ T2290] xt_hashlimit: size too large, truncated to 1048576 [ 761.720685][ T2312] bond0: (slave bond_slave_1): Releasing backup interface [ 761.759506][ T2312] netlink: 'syz.3.7807': attribute type 2 has an invalid length. [ 762.106343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.108471][ T2319] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 762.530639][ T2346] syzkaller0: entered promiscuous mode [ 762.536550][ T2346] syzkaller0: entered allmulticast mode [ 762.577807][ T2357] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 762.605968][ T2357] bond2: (slave lo): Enslaving as an active interface with an up link [ 762.614938][ T2357] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 764.664878][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 765.476720][ T2393] __nla_validate_parse: 1 callbacks suppressed [ 765.476743][ T2393] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7829'. [ 765.500828][ T2393] netlink: 27 bytes leftover after parsing attributes in process `syz.0.7829'. [ 765.511217][ T2397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7831'. [ 765.511972][ T2394] netlink: 'syz.1.7830': attribute type 3 has an invalid length. [ 765.546761][ T2398] netlink: 'syz.4.7832': attribute type 8 has an invalid length. [ 765.603687][ T2397] 8021q: adding VLAN 0 to HW filter on device bond8 [ 765.626408][ T2399] bond8: (slave batadv1): Opening slave failed [ 765.653060][ T2406] netlink: 'syz.0.7833': attribute type 1 has an invalid length. [ 765.661164][ T2406] netlink: 232 bytes leftover after parsing attributes in process `syz.0.7833'. [ 765.672161][ T2406] netlink: 'syz.0.7833': attribute type 1 has an invalid length. [ 765.896959][ T2413] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7835'. [ 766.017291][ T2413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7835'. [ 766.316185][ T2448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7842'. [ 766.353651][ T2449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7842'. [ 766.391617][ T2455] netlink: 'syz.3.7843': attribute type 2 has an invalid length. [ 766.413127][ T2448] macsec2: entered promiscuous mode [ 766.419939][ T2448] macsec2: entered allmulticast mode [ 766.426396][ T2448] bridge0: entered allmulticast mode [ 766.432903][ T2448] bridge0: port 3(macsec2) entered blocking state [ 766.440184][ T2448] bridge0: port 3(macsec2) entered disabled state [ 766.451312][ T2448] bridge0: left allmulticast mode [ 766.498618][ T2449] macsec2: entered promiscuous mode [ 766.504021][ T2449] macsec2: entered allmulticast mode [ 766.531697][ T2449] bridge0: entered allmulticast mode [ 766.553413][ T2449] bridge0: port 3(macsec2) entered blocking state [ 766.574039][ T2449] bridge0: port 3(macsec2) entered disabled state [ 766.622308][ T2449] bridge0: left allmulticast mode [ 766.631108][ T2477] openvswitch: netlink: IPv4 tun info is not correct [ 766.654087][ T2455] : entered promiscuous mode [ 766.662464][ T2464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7843'. [ 766.682959][ T2464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7843'. [ 766.882461][ T2487] geneve3: entered promiscuous mode [ 767.187218][ T2491] syzkaller0: entered promiscuous mode [ 767.212428][ T2491] syzkaller0: entered allmulticast mode [ 769.801409][ T2537] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 769.938935][ T2555] netlink: 'syz.1.7864': attribute type 11 has an invalid length. [ 769.965641][ T2559] netlink: 'syz.1.7864': attribute type 11 has an invalid length. [ 770.263614][ T2572] sctp: [Deprecated]: syz.4.7866 (pid 2572) Use of int in max_burst socket option. [ 770.263614][ T2572] Use struct sctp_assoc_value instead [ 770.284122][ T2588] netlink: 'syz.1.7869': attribute type 1 has an invalid length. [ 770.308746][ T2588] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 770.506319][ T2610] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 770.525384][ T2615] xt_hashlimit: max too large, truncated to 1048576 [ 770.535336][ T2615] No such timeout policy "syz1" [ 770.693322][ T2622] netlink: 'syz.4.7876': attribute type 3 has an invalid length. [ 770.722976][ T2625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 770.846786][ T2631] __nla_validate_parse: 4 callbacks suppressed [ 770.846809][ T2631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7879'. [ 770.925618][ T2634] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7880'. [ 770.968686][ T2633] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7880'. [ 771.116256][ T2643] netlink: 'syz.4.7884': attribute type 28 has an invalid length. [ 771.145467][ T2643] netlink: 'syz.4.7884': attribute type 3 has an invalid length. [ 771.158039][ T2643] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7884'. [ 771.194333][ T2649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7885'. [ 771.217214][ T2649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.264226][ T2649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.683360][ T2672] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7889'. [ 771.791358][ T2674] netlink: 'syz.4.7892': attribute type 1 has an invalid length. [ 771.809029][ T2681] netlink: 'syz.2.7891': attribute type 5 has an invalid length. [ 771.836539][ T2674] 8021q: adding VLAN 0 to HW filter on device bond7 [ 771.871962][ T2674] bond7: (slave veth7): Enslaving as an active interface with a down link [ 771.930354][ T2675] bond7: (slave veth9): Enslaving as an active interface with a down link [ 771.982900][ T2674] bond7: (slave veth11): Enslaving as an active interface with a down link [ 772.119089][ T2703] syzkaller0: entered promiscuous mode [ 772.124857][ T2703] syzkaller0: entered allmulticast mode [ 772.194632][ T2707] mac80211_hwsim hwsim64 ÿ: renamed from wlan1 [ 772.792376][ T2728] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 773.061459][ T2747] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7907'. [ 773.067164][ T2743] netlink: 'syz.0.7906': attribute type 1 has an invalid length. [ 773.121302][ T2743] bond7: (slave geneve3): making interface the new active one [ 773.131425][ T2743] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 773.148028][T13233] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 773.161295][T13233] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 773.170648][T13233] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 773.191411][T13233] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 773.219933][ T2752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7909'. [ 773.233540][ T2752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7909'. [ 773.253403][T13233] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.262578][ T2752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7909'. [ 773.272217][T13233] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.282594][T13233] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.291589][T13233] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.432194][ T2768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.457124][ T2769] netlink: 'syz.0.7913': attribute type 39 has an invalid length. [ 775.041650][ T2695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 775.064996][ T5630] Bluetooth: hci1: command 0x0405 tx timeout [ 775.238052][ T2780] netlink: 'syz.4.7914': attribute type 64 has an invalid length. [ 775.342558][ T2781] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 775.442772][ T2796] netlink: 'syz.2.7918': attribute type 2 has an invalid length. [ 775.571178][ T2803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 775.645092][ T2799] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 775.676628][T21065] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 775.745683][ T2807] netlink: 'syz.1.7922': attribute type 1 has an invalid length. [ 775.872652][ T2807] bond3: entered promiscuous mode [ 775.878756][ T2807] 8021q: adding VLAN 0 to HW filter on device bond3 [ 775.947920][ T2807] bond3: (slave bridge4): making interface the new active one [ 775.956586][ T2807] bridge4: entered promiscuous mode [ 775.963293][ T2807] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 775.985600][ T2820] __nla_validate_parse: 2 callbacks suppressed [ 775.985620][ T2820] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7924'. [ 776.127859][ T30] audit: type=1804 audit(1784361534.229:9): pid=2824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7925" name="/newroot/418/cgroup.controllers" dev="tmpfs" ino=2148 res=1 errno=0 [ 776.153301][ T30] audit: type=1800 audit(1784361534.229:10): pid=2824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7925" name="cgroup.controllers" dev="tmpfs" ino=2148 res=0 errno=0 [ 776.247924][ T2829] syzkaller0: entered promiscuous mode [ 776.262976][ T2829] syzkaller0: entered allmulticast mode [ 776.341653][ T2834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7930'. [ 776.415874][ T2842] netlink: 'syz.2.7932': attribute type 12 has an invalid length. [ 776.489188][ T2842] bond11: option primary_reselect: invalid value (255) [ 776.502419][ T2842] bond11 (unregistering): Released all slaves [ 776.509153][T21065] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 776.626126][ T2854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7933'. [ 776.726394][ T2868] netlink: 'syz.0.7938': attribute type 17 has an invalid length. [ 776.734642][ T2868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7938'. [ 776.743728][ T2868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7938'. [ 776.743811][ T2869] ip6t_srh: unknown srh invflags 4000 [ 776.916465][ T2892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7942'. [ 777.031516][ T2898] bond0: (slave team0): Releasing backup interface [ 777.632429][ T2921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7951'. [ 777.654608][ T2921] netlink: 'syz.3.7951': attribute type 5 has an invalid length. [ 777.692823][ T2921] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7951'. [ 777.720528][ T2925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7950'. [ 778.250636][ T2952] syzkaller0: entered promiscuous mode [ 778.257338][ T2955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7959'. [ 778.273392][ T2952] syzkaller0: entered allmulticast mode [ 778.922190][ T2973] 8021q: adding VLAN 0 to HW filter on device bond10 [ 778.952572][ T2973] bond10 (unregistering): Released all slaves [ 779.032634][ T2974] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 779.063859][ T2989] bond11: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 779.099678][ T2989] bond11 (unregistering): Released all slaves [ 779.352015][ T3001] netlink: 'syz.1.7969': attribute type 34 has an invalid length. [ 779.411456][ T3003] xt_ipcomp: unknown flags 1D [ 779.481671][ T3012] xt_limit: Overflow, try lower: 271964/0 [ 779.579166][ T3012] vlan2: entered allmulticast mode [ 779.594931][ T3012] bridge5: entered allmulticast mode [ 779.641510][ T3017] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.649407][ T3017] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.722984][ T3021] netlink: 'syz.4.7976': attribute type 2 has an invalid length. [ 779.792008][ T3035] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 779.835168][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.842432][ T3017] bridge0: port 2(bridge_slave_1) entered listening state [ 779.849907][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.857049][ T3017] bridge0: port 1(bridge_slave_0) entered listening state [ 779.886047][ T3017] bridge0: entered promiscuous mode [ 779.891426][ T3017] bridge0: entered allmulticast mode [ 779.893325][ T3036] netlink: 'syz.1.7978': attribute type 1 has an invalid length. [ 779.927261][ T3024] bond0: entered promiscuous mode [ 779.935590][ T3024] batadv0: entered promiscuous mode [ 779.942206][ T3024] debugfs: 'hsr0' already exists in 'hsr' [ 779.951595][ T3024] Cannot create hsr debugfs directory [ 779.957470][ T3024] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 779.968999][ T3024] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 779.980301][ T3024] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 780.094755][ T3024] bond0: left promiscuous mode [ 780.202629][ T3024] batadv0: left promiscuous mode [ 780.459167][ T3044] veth5: entered allmulticast mode [ 780.971788][ T3084] netlink: 'syz.4.7991': attribute type 12 has an invalid length. [ 780.999627][ T3086] netlink: 'syz.3.7990': attribute type 1 has an invalid length. [ 781.236923][ T3100] netlink: zone id is out of range [ 781.249802][ T3103] netlink: zone id is out of range [ 781.263718][ T3101] veth0_to_bridge: entered promiscuous mode [ 781.293942][ T3107] __nla_validate_parse: 9 callbacks suppressed [ 781.293962][ T3107] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7998'. [ 781.341263][ T3101] veth0_to_bridge: left promiscuous mode [ 781.352687][ T3111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7998'. [ 781.406600][ T3116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8000'. [ 781.430030][ T3115] syzkaller0: entered promiscuous mode [ 781.450717][ T3115] syzkaller0: entered allmulticast mode [ 781.478927][ T3118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8001'. [ 781.845953][ T3135] lo speed is unknown, defaulting to 1000 [ 781.892250][ T3145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8008'. [ 782.015060][ T3155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8011'. [ 782.132937][ T3160] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 782.271612][ T3168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8014'. [ 782.321985][ T3166] bond11: (slave gre0): Device is not bonding slave [ 782.332437][ T3166] bond11: option active_slave: invalid value (gre0) [ 782.356626][ T3166] bond11 (unregistering): Released all slaves [ 782.411244][ T3176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8016'. [ 782.645354][ T3172] 8021q: adding VLAN 0 to HW filter on device bond10 [ 782.649476][ T3189] netlink: 'syz.2.8019': attribute type 23 has an invalid length. [ 782.661689][ T3176] netlink: 'syz.0.8016': attribute type 1 has an invalid length. [ 782.670050][ T3176] netlink: 'syz.0.8016': attribute type 2 has an invalid length. [ 782.926276][ T3221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8023'. [ 782.942212][ T3204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.943690][ T3222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8025'. [ 782.973330][ T3214] ip6gre2: entered promiscuous mode [ 783.000646][ T3214] ip6gre2: entered allmulticast mode [ 783.216153][ T3236] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 783.664019][ T3270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.493895][ T3304] pim6reg: entered allmulticast mode [ 784.680025][ T3313] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 784.963672][ T3333] bond11: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 784.976974][ T3333] bond11 (unregistering): Released all slaves [ 785.040186][ T3338] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 785.411990][ T3361] syzkaller0: entered promiscuous mode [ 785.417712][ T3361] syzkaller0: entered allmulticast mode [ 785.621403][ T3378] netlink: 'syz.3.8072': attribute type 10 has an invalid length. [ 785.665732][ T3380] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 785.673042][ T3380] IPv6: NLM_F_CREATE should be set when creating new route [ 785.706688][ T3374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.734368][ T3374] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 785.753952][ T3374] bond0 (unregistering): (slave bond1): Releasing backup interface [ 785.773789][ T3374] bond0 (unregistering): Released all slaves [ 786.279259][ T3403] netlink: 'syz.2.8080': attribute type 4 has an invalid length. [ 786.283191][ T3406] netlink: 'syz.1.8081': attribute type 12 has an invalid length. [ 786.326514][ T3403] netlink: 'syz.2.8080': attribute type 4 has an invalid length. [ 786.375980][ T3408] netlink: 'syz.3.8082': attribute type 9 has an invalid length. [ 786.416816][ T3414] __nla_validate_parse: 12 callbacks suppressed [ 786.416838][ T3414] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8084'. [ 786.455150][ T3415] netlink: 'syz.4.8083': attribute type 2 has an invalid length. [ 786.571851][ T3421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8085'. [ 786.615812][ T3423] syzkaller1: entered promiscuous mode [ 786.621593][ T3423] syzkaller1: entered allmulticast mode [ 786.692455][ T3428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8089'. [ 786.744193][ T3429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8089'. [ 787.340538][ T3463] netlink: 'syz.3.8096': attribute type 63 has an invalid length. [ 787.467204][ T3471] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8097'. [ 787.645830][ T3483] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.8103'. [ 787.675228][ T3483] veth0_to_bond: default FDB implementation only supports local addresses [ 787.718269][ T3491] netlink: 'syz.4.8105': attribute type 21 has an invalid length. [ 787.783404][ T3491] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8105'. [ 788.060634][ T3514] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8108'. [ 788.117081][ T3518] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8109'. [ 788.269573][ T3527] netlink: 'syz.4.8110': attribute type 6 has an invalid length. [ 788.416682][ T3542] netlink: 'syz.2.8113': attribute type 4 has an invalid length. [ 789.457719][ T3602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8130'. [ 789.604250][ T3611] xt_hashlimit: size too large, truncated to 1048576 [ 790.958125][ T3689] ipt_REJECT: TCP_RESET invalid for non-tcp [ 791.638852][ T3722] syzkaller0: entered promiscuous mode [ 791.652660][ T3722] syzkaller0: entered allmulticast mode [ 791.686291][ T3720] netlink: 'syz.2.8163': attribute type 21 has an invalid length. [ 791.709458][ T3720] __nla_validate_parse: 7 callbacks suppressed [ 791.709480][ T3720] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8163'. [ 792.039084][ T3736] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.8166'. [ 792.092165][ T3740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8165'. [ 792.672985][ T3779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8175'. [ 792.755328][ T3782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8176'. [ 792.826152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 792.971717][ T3793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8179'. [ 793.062278][ T3800] pimreg3: entered allmulticast mode [ 793.626412][ T3832] netlink: 284 bytes leftover after parsing attributes in process `syz.0.8191'. [ 793.673292][ T3839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8190'. [ 793.714277][ T3839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8190'. [ 794.221897][ T3870] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8201'. [ 794.232256][ T3870] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 794.608301][ T3894] pim6reg: entered allmulticast mode [ 794.991004][ T3915] netlink: 'syz.0.8218': attribute type 1 has an invalid length. [ 796.177328][ T3969] x_tables: duplicate entry at hook 3 [ 796.233477][ T3970] veth7: entered promiscuous mode [ 796.301508][ T3978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.358018][ T3981] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20000 [ 796.578422][ T3999] sctp: [Deprecated]: syz.3.8242 (pid 3999) Use of int in max_burst socket option. [ 796.578422][ T3999] Use struct sctp_assoc_value instead [ 796.593798][ T3982] v: renamed from veth0_vlan [ 796.719800][ T4006] __nla_validate_parse: 24 callbacks suppressed [ 796.719822][ T4006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8245'. [ 796.790156][ T4006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8245'. [ 797.159128][ T4028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8253'. [ 797.168895][ T4028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8253'. [ 797.177890][ T4028] netlink: 'syz.4.8253': attribute type 14 has an invalid length. [ 797.186635][ T4028] netlink: 'syz.4.8253': attribute type 13 has an invalid length. [ 797.243607][ T3986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 797.499631][ T4037] x_tables: unsorted underflow at hook 2 [ 797.658311][ T4048] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8257'. [ 797.733604][ T4054] --map-set only usable from mangle table [ 797.959415][ T4070] tipc: Enabling of bearer rejected, failed to enable media [ 798.173887][ T4079] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8267'. [ 798.178390][ T4081] netlink: 260 bytes leftover after parsing attributes in process `syz.0.8268'. [ 798.297081][ T4084] sctp: [Deprecated]: syz.4.8269 (pid 4084) Use of int in max_burst socket option deprecated. [ 798.297081][ T4084] Use struct sctp_assoc_value instead [ 798.432393][ T4097] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8273'. [ 798.437207][ T4093] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 798.473815][ T4096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8272'. [ 798.584838][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 798.609652][ T4096] 8021q: adding VLAN 0 to HW filter on device bond8 [ 798.651291][ T5288] v: left promiscuous mode [ 798.680351][T29585] v: entered promiscuous mode [ 798.893185][ T4124] xt_CT: You must specify a L4 protocol and not use inversions on it [ 799.030259][ T4122] openvswitch: netlink: Multiple metadata blocks provided [ 799.100550][ T4139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8281'. [ 799.872477][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 799.880190][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 801.733438][ T4159] bond11 (unregistering): Released all slaves [ 801.776313][ T4162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8287'. [ 801.802450][ T4174] netlink: 264 bytes leftover after parsing attributes in process `syz.1.8288'. [ 802.158105][ T4194] syzkaller0: entered promiscuous mode [ 802.177586][ T4194] syzkaller0: entered allmulticast mode [ 802.406911][ T4206] netlink: 'syz.3.8297': attribute type 9 has an invalid length. [ 802.461880][ T4212] netlink: 'syz.3.8297': attribute type 9 has an invalid length. [ 805.230324][ T4246] veth0: entered promiscuous mode [ 805.239449][ T4248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8305'. [ 805.251990][ T4252] veth0: left promiscuous mode [ 805.449253][ T4270] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8310'. [ 805.450513][ T4266] openvswitch: netlink: Duplicate or invalid key (type 0). [ 805.459607][ T4269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8310'. [ 805.476452][ T4272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8310'. [ 805.486636][ T4270] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8310'. [ 805.515285][ T4266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.685748][ T4285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8315'. [ 805.720189][ T4289] netlink: 216 bytes leftover after parsing attributes in process `syz.4.8316'. [ 805.765524][ T4289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8316'. [ 805.866999][ T4298] tipc: Started in network mode [ 805.882195][ T4298] tipc: Node identity ce24182af7d7, cluster identity 4711 [ 805.896696][ T4298] tipc: Enabled bearer , priority 0 [ 806.022887][ T4298] syzkaller0: entered promiscuous mode [ 806.034187][ T4298] syzkaller0: entered allmulticast mode [ 806.041968][ T4298] tipc: Resetting bearer [ 806.073272][ T4305] tipc: Resetting bearer [ 806.246042][ T4325] xt_l2tp: missing protocol rule (udp|l2tpip) [ 806.270762][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.576464][ T4305] tipc: Disabling bearer [ 808.589087][ T4321] tc_dump_action: action bad kind [ 808.599395][ T4331] syzkaller0: entered promiscuous mode [ 808.614792][ T4331] syzkaller0: entered allmulticast mode [ 808.638071][T29613] tipc: Node number set to 972232746 [ 808.644165][ T36] syzkaller0: tun_net_xmit 70 [ 808.781845][ T4346] netlink: 'syz.0.8329': attribute type 2 has an invalid length. [ 808.790898][ T4350] __nla_validate_parse: 4 callbacks suppressed [ 808.790918][ T4350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8331'. [ 808.824917][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.834069][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.843026][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.851169][T13225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.860069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.869518][T29596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.879721][T13233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.041632][ T4363] netlink: 'syz.2.8334': attribute type 61 has an invalid length. [ 809.246011][ T4375] netlink: 'syz.2.8339': attribute type 2 has an invalid length. [ 809.257542][ T4373] tipc: Enabling of bearer rejected, failed to enable media [ 809.605052][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8347'. [ 809.614831][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8347'. [ 809.646384][ T4398] netlink: 'syz.0.8347': attribute type 1 has an invalid length. [ 809.684457][ T4398] bond9: entered promiscuous mode [ 809.690864][ T4398] 8021q: adding VLAN 0 to HW filter on device bond9 [ 809.713920][ T4405] netlink: 'syz.2.8349': attribute type 2 has an invalid length. [ 809.718887][ T4406] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 809.734677][ T4406] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 809.745694][ T4406] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 809.758508][ T4408] netlink: 'syz.3.8350': attribute type 1 has an invalid length. [ 809.887594][ T4419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8352'. [ 809.919624][ T4420] "syz.2.8353" (4420) uses obsolete ecb(arc4) skcipher [ 809.981654][ T4420] "syz.2.8353" (4420) uses obsolete ecb(arc4) skcipher [ 810.020988][ T4431] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8356'. [ 810.043969][ T4433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8354'. [ 810.063094][ T4423] macvtap1: entered allmulticast mode [ 810.066365][ T4433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8354'. [ 810.104581][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 810.111933][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 810.135655][ T4423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8352'. [ 810.160380][ T4432] bond4: (slave vti0): refused to change device type [ 810.337559][ T4447] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8358'. [ 810.363583][ T4447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8358'. [ 810.400783][ T4449] set match dimension is over the limit! [ 810.548694][ T79] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 810.754917][ C1] net_ratelimit: 3 callbacks suppressed [ 810.754932][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.099876][ T4478] gtp0: entered promiscuous mode [ 811.108318][ T4478] gtp0: entered allmulticast mode [ 811.246979][ T4483] pim6reg: left allmulticast mode [ 811.260400][ T4451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 811.395299][T13225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.583002][ T4497] pimreg: entered allmulticast mode [ 811.946817][T29596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.025838][T13235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.535184][ T4522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.581751][ T4522] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 813.609919][ T4590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.642471][ T4593] sctp: [Deprecated]: syz.4.8402 (pid 4593) Use of int in max_burst socket option. [ 813.642471][ T4593] Use struct sctp_assoc_value instead [ 813.764380][ T4598] veth0: entered promiscuous mode [ 813.791839][ T4596] veth0: left promiscuous mode [ 813.946593][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.046652][ T4613] syzkaller0: entered promiscuous mode [ 814.058648][ T4613] syzkaller0: entered allmulticast mode [ 814.172558][ T4614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 814.278614][ T4633] __nla_validate_parse: 9 callbacks suppressed [ 814.278636][ T4633] netlink: 112 bytes leftover after parsing attributes in process `syz.4.8405'. [ 814.409893][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8411'. [ 814.532134][ T4644] bond5: invalid ARP target 0.0.0.0 specified for addition [ 814.550384][ T4644] bond5: option arp_ip_target: invalid value (0) [ 814.576809][ T4644] bond5 (unregistering): Released all slaves [ 814.590573][T13229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.600329][T13235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.621483][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.632746][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.679626][ T4643] bond5: invalid ARP target 0.0.0.0 specified for addition [ 814.688033][ T4643] bond5: option arp_ip_target: invalid value (0) [ 814.698382][ T4643] bond5 (unregistering): Released all slaves [ 815.168062][ T4671] lo speed is unknown, defaulting to 1000 [ 815.240857][ T4681] netlink: 'syz.3.8422': attribute type 2 has an invalid length. [ 815.270034][ T4681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8422'. [ 815.295851][ T4681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8422'. [ 815.526012][ T4687] tipc: Enabled bearer , priority 10 [ 815.598107][ T4694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8426'. [ 815.802014][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8429'. [ 815.817599][ T4703] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 815.831350][ T4703] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8429'. [ 815.865804][ T4706] xt_socket: unknown flags 0x50 [ 815.881467][ T4706] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8431'. [ 816.018424][ T4720] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 816.114249][ T4725] netlink: 'syz.3.8437': attribute type 1 has an invalid length. [ 816.322345][ T4745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8441'. [ 816.333248][ T4743] xt_l2tp: unknown flags: 10 [ 816.533632][ T4757] x_tables: duplicate underflow at hook 3 [ 816.726477][ T4772] netlink: 'syz.1.8452': attribute type 58 has an invalid length. [ 816.734636][ T4772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8452'. [ 817.067506][ T36] bond0: (slave bond_slave_0): interface is now down [ 817.068585][ T4782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.087074][ T36] bond0: (slave bond_slave_1): interface is now down [ 817.093794][ T36] bond0: (slave bridge1): interface is now down [ 817.150348][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.158542][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.175670][ T36] bond0: now running without any active interface! [ 817.234108][ T4788] netlink: 'syz.3.8458': attribute type 1 has an invalid length. [ 817.265423][ T4792] Cannot find del_set index 3 as target [ 817.276625][ T4788] netlink: 'syz.3.8458': attribute type 1 has an invalid length. [ 817.540325][ T4808] openvswitch: netlink: Duplicate key (type 6). [ 817.706213][T29596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.958246][ T4826] syzkaller0: entered promiscuous mode [ 817.971469][ T4826] syzkaller0: entered allmulticast mode [ 818.059911][ T4828] syzkaller1: entered promiscuous mode [ 818.093136][ T4828] syzkaller1: entered allmulticast mode [ 818.216479][ T4828] syzkaller0: entered promiscuous mode [ 818.234137][ T4828] syzkaller0: entered allmulticast mode [ 818.416097][ T4839] syzkaller0: entered promiscuous mode [ 818.432606][ T4839] syzkaller0: entered allmulticast mode [ 818.987704][T13233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.706983][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.597445][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.748952][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.221742][ T4883] __nla_validate_parse: 5 callbacks suppressed [ 821.221762][ T4883] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8482'. [ 821.348835][ T4888] syzkaller0: entered promiscuous mode [ 821.366943][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8484'. [ 821.379821][ T4888] syzkaller0: entered allmulticast mode [ 821.394056][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8484'. [ 821.463499][ T4890] syzkaller0: entered promiscuous mode [ 821.484594][ T4890] syzkaller0: entered allmulticast mode [ 821.556759][ T4901] netlink: 'syz.2.8490': attribute type 49 has an invalid length. [ 821.642831][ T4901] ip6gretap0: entered promiscuous mode [ 821.658107][ T4901] ip6gretap0: entered allmulticast mode [ 821.659954][ T4910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8494'. [ 821.872587][ T4922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8497'. [ 822.228195][ T4944] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8500'. [ 822.259982][ T4935] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8499'. [ 822.289570][ T4935] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8499'. [ 822.324736][ T4935] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8499'. [ 822.646764][ T4964] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8506'. [ 822.718527][ T4984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 822.905940][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.914934][T13233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.350224][ T5014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 823.645693][ T5027] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 823.652285][ T5036] netlink: 'syz.2.8522': attribute type 8 has an invalid length. [ 823.786663][T29596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.972272][ T5051] netlink: 'syz.4.8528': attribute type 1 has an invalid length. [ 824.101140][ T5051] bond8: entered promiscuous mode [ 824.125779][ T5051] 8021q: adding VLAN 0 to HW filter on device bond8 [ 824.295139][ T5064] 8021q: adding VLAN 0 to HW filter on device bond8 [ 824.327482][ T5064] bond8: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 824.339541][ T5076] sctp: [Deprecated]: syz.1.8530 (pid 5076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 824.339541][ T5076] Use struct sctp_sack_info instead [ 824.374720][ T5064] bond8: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 824.421651][ T5064] bond8: (slave ip6gre4): making interface the new active one [ 824.425080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.444094][ T5078] netlink: 'syz.3.8533': attribute type 3 has an invalid length. [ 824.444644][ T5064] ip6gre4: entered promiscuous mode [ 824.468034][ T5064] bond8: (slave ip6gre4): Enslaving as an active interface with an up link [ 824.517743][ T5061] pimreg3: entered allmulticast mode [ 824.808204][ T5095] x_tables: duplicate underflow at hook 1 [ 824.832052][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.189818][ T5109] tipc: Invalid UDP bearer configuration [ 825.189879][ T5109] tipc: Enabling of bearer rejected, failed to enable media [ 825.428902][ T5137] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 825.470461][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.620322][ T5142] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000 [ 825.646571][ T5142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.665943][ T12] net_ratelimit: 2 callbacks suppressed [ 828.665965][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.865514][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.945180][T13233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.505394][T13229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.905316][T29596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.428058][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.706119][T13233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.945789][T29596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.266394][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.985184][T29613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.545774][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.184656][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.185942][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.191912][ C1] bridge0: topology change detected, propagating [ 840.192234][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.213637][ C1] bridge0: topology change detected, propagating [ 841.465311][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.025634][T29613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.386227][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.585060][T13233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.065579][T29596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.660286][ T5218] xt_hashlimit: size too large, truncated to 1048576 [ 845.835561][ T5230] __nla_validate_parse: 16 callbacks suppressed [ 845.835584][ T5230] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8561'. [ 845.947339][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.163391][ T5214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 846.644341][ T5261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.665619][ T5260] xt_cgroup: invalid path, errno=-2 [ 846.846509][ T5277] netlink: 'syz.4.8572': attribute type 1 has an invalid length. [ 846.852629][ T5276] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 846.855092][ T5277] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8572'. [ 846.873819][ T5277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8572'. [ 846.886838][ T5276] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 846.906609][ T5276] gretap2: entered promiscuous mode [ 846.917457][ T5280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8574'. [ 846.931658][ T5276] gretap2: entered allmulticast mode [ 846.973469][ T5276] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8574'. [ 846.982268][ T5284] Unsupported ieee802154 address type: 0 [ 847.226695][T13233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.377821][ T5311] netlink: 'syz.1.8579': attribute type 10 has an invalid length. [ 847.400595][ T5311] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 847.499562][ T5311] xt_bpf: check failed: parse error [ 847.631652][ T5320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8582'. [ 847.745921][ T5326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8585'. [ 847.762699][ T5328] netlink: 'syz.4.8584': attribute type 1 has an invalid length. [ 847.968029][ T5335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8585'. [ 847.991575][ T5317] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.998788][ T5317] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.030754][ T5336] netlink: 'syz.0.8585': attribute type 10 has an invalid length. [ 848.289321][ T5317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.315229][ T5317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.629779][ T5317] batman_adv: batadv0: Interface deactivated: gretap1 [ 848.803916][ T5328] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 848.912989][T13229] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.993980][T13229] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 849.034313][T13229] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.054901][T13229] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 849.075268][ T5351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8590'. [ 849.090986][T13229] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.123493][T13229] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 849.153089][T13229] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.163921][ T5358] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8591'. [ 849.173943][T13229] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 849.195439][ T5353] tipc: Enabling of bearer rejected, already enabled [ 849.260029][ T5367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.348244][ T5374] syzkaller0: entered promiscuous mode [ 849.363985][ T5374] syzkaller0: entered allmulticast mode [ 849.407425][ T5374] tipc: Started in network mode [ 849.418918][ T5374] tipc: Node identity c6c865957b3, cluster identity 4711 [ 849.448280][ T5374] tipc: Enabled bearer , priority 0 [ 849.499864][ T5359] tipc: Resetting bearer [ 849.551630][ T5359] tipc: Disabling bearer [ 849.950973][ T5403] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 850.044308][ T5407] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 850.175598][ T5412] bond11: option min_links: invalid value (18446744073709551614) [ 850.202579][ T5412] bond11: option min_links: allowed values 0 - 2147483647 [ 850.228408][ T5412] bond11 (unregistering): Released all slaves [ 850.274352][ T5417] openvswitch: netlink: Missing key (keys=40, expected=100) [ 850.563413][ T5435] bond11: option fail_over_mac: invalid value (16) [ 850.600195][ T5435] bond11 (unregistering): Released all slaves [ 850.765990][ T5435] bond11: option fail_over_mac: invalid value (16) [ 850.777636][ T5435] bond11 (unregistering): Released all slaves [ 850.915849][ T5435] bond11: option fail_over_mac: invalid value (16) [ 850.925383][ T5449] netlink: 'syz.4.8613': attribute type 1 has an invalid length. [ 850.925652][ T5435] bond11 (unregistering): Released all slaves [ 851.063710][ T5435] bond11: option fail_over_mac: invalid value (16) [ 851.079783][ T5435] bond11 (unregistering): Released all slaves [ 851.199489][ T5435] bond11: option fail_over_mac: invalid value (16) [ 851.208147][ T5435] bond11 (unregistering): Released all slaves [ 851.514069][ T5476] dvmrp0: entered allmulticast mode [ 851.523834][ T5469] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 851.771162][ T5485] xt_hashlimit: invalid interval [ 851.940707][ T5496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 852.190678][ T5512] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 852.262708][ T5515] syzkaller1: entered promiscuous mode [ 852.270692][ T5515] syzkaller1: entered allmulticast mode [ 852.284150][ T5515] __nla_validate_parse: 2 callbacks suppressed [ 852.284169][ T5515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8636'. [ 852.317657][ T5515] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8636'. [ 852.317961][ T5517] syz_tun: entered allmulticast mode [ 852.385834][ T5517] syz_tun: left allmulticast mode [ 852.392679][ T5519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 852.394921][ T5517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8637'. [ 852.450340][ T5517] vlan3: entered allmulticast mode [ 852.457970][ T5517] bridge7: entered allmulticast mode [ 852.468152][ T5517] bridge7: port 1(erspan0) entered blocking state [ 852.474968][ T5517] bridge7: port 1(erspan0) entered disabled state [ 852.481669][ T5517] erspan0: entered allmulticast mode [ 852.490513][ T5517] erspan0: left allmulticast mode [ 852.728751][ T5536] netlink: 608 bytes leftover after parsing attributes in process `syz.2.8645'. [ 852.764715][ T5536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8645'. [ 852.791697][ T5538] netlink: 'syz.3.8646': attribute type 1 has an invalid length. [ 852.851529][ T5538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8646'. [ 852.863891][ T5548] netlink: 666 bytes leftover after parsing attributes in process `syz.2.8649'. [ 852.991379][T13225] bond0: (slave veth0_to_bond): interface is now down [ 853.015790][T13225] bond0: now running without any active interface! [ 853.072719][ T5550] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 853.085382][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8653'. [ 853.172493][ T5565] syzkaller0: entered promiscuous mode [ 853.178605][ T5565] syzkaller0: entered allmulticast mode [ 853.258564][ T5569] syzkaller0: entered promiscuous mode [ 853.268407][ T5569] syzkaller0: entered allmulticast mode [ 853.508427][ T5585] netlink: 'syz.2.8660': attribute type 1 has an invalid length. [ 853.520705][ T5589] netlink: 'syz.4.8662': attribute type 1 has an invalid length. [ 853.558986][ T5589] 8021q: adding VLAN 0 to HW filter on device bond9 [ 853.983862][ T5629] IPv6: NLM_F_CREATE should be specified when creating new route [ 853.999992][ T5601] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 854.285645][ T5655] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8674'. [ 854.413929][ T5661] bond11: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 854.441140][ T5661] bond11 (unregistering): Released all slaves [ 854.530972][ T5664] syzkaller0: entered promiscuous mode [ 854.537692][ T5664] syzkaller0: entered allmulticast mode [ 854.586198][ T5674] sock: sock_set_timeout: `syz.3.8681' (pid 5674) tries to set negative timeout [ 854.621854][ T5674] syzkaller1: entered promiscuous mode [ 854.635341][ T5674] syzkaller1: entered allmulticast mode [ 854.777469][ T5679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8684'. [ 854.857167][ T5683] vlan0: entered promiscuous mode [ 854.862550][ T5683] bridge0: entered promiscuous mode [ 855.051336][ T5689] netlink: 'syz.2.8687': attribute type 4 has an invalid length. [ 855.593296][ T5724] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20002 [ 855.862156][ T5738] openvswitch: netlink: Missing valid actions attribute. [ 855.884825][ T5738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 856.088764][ T5762] openvswitch: netlink: IP tunnel dst address not specified [ 856.125936][ T5762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 856.178784][ T5766] syzkaller0: entered promiscuous mode [ 856.199100][ T5766] syzkaller0: entered allmulticast mode [ 856.223379][ T5763] syzkaller0: entered promiscuous mode [ 856.254541][ T5763] syzkaller0: entered allmulticast mode [ 856.501441][ T5771] openvswitch: netlink: Flow actions attr not present in new flow. [ 856.593692][ T5764] netlink: 'syz.2.8706': attribute type 16 has an invalid length. [ 856.632669][ T5764] netlink: 'syz.2.8706': attribute type 17 has an invalid length. [ 856.702010][ T5764] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 856.792345][ T5789] netlink: 'syz.4.8714': attribute type 29 has an invalid length. [ 856.832865][ T5792] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 857.882949][ T5852] netlink: 'syz.2.8730': attribute type 2 has an invalid length. [ 858.016080][ T5851] __nla_validate_parse: 10 callbacks suppressed [ 858.016103][ T5851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8729'. [ 858.041734][ T5858] netlink: 'syz.0.8731': attribute type 2 has an invalid length. [ 858.071758][ T5862] netlink: 'syz.2.8732': attribute type 1 has an invalid length. [ 858.089271][ T5855] netlink: 'syz.1.8729': attribute type 1 has an invalid length. [ 858.098654][ T5858] : entered promiscuous mode [ 858.262839][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8736'. [ 858.279682][ T5862] 8021q: adding VLAN 0 to HW filter on device bond11 [ 858.486590][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8737'. [ 858.574836][ T5896] netlink: 'syz.1.8741': attribute type 11 has an invalid length. [ 859.239340][ T5933] netlink: 'syz.1.8753': attribute type 1 has an invalid length. [ 859.262014][ T5933] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8753'. [ 859.307501][ T5938] openvswitch: netlink: Missing valid actions attribute. [ 859.334652][ T5938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 859.498773][ T5947] syzkaller1: entered promiscuous mode [ 859.506492][ T5947] syzkaller1: entered allmulticast mode [ 859.801041][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8763'. [ 859.813259][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8763'. [ 859.825217][ T5972] netlink: 'syz.1.8763': attribute type 5 has an invalid length. [ 859.845802][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8763'. [ 859.865400][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8763'. [ 859.882016][ T5972] netlink: 'syz.1.8763': attribute type 5 has an invalid length. [ 859.906073][ T5977] netlink: 'syz.0.8765': attribute type 11 has an invalid length. [ 860.030364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 860.107058][T13233] bridge_slave_1: left allmulticast mode [ 860.123108][T13233] bridge_slave_1: left promiscuous mode [ 860.131772][T13233] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.181094][T13233] dvmrp8: left allmulticast mode [ 860.199151][T13233] pimreg3: left allmulticast mode [ 860.272806][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8767'. [ 860.283227][ T6005] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8767'. [ 860.540571][T13233] bond2 (unregistering): (slave gretap1): Releasing active interface [ 860.651961][T13233] bond5 (unregistering): (slave geneve3): Releasing active interface [ 860.803129][T13233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.816602][T13233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.826951][T13233] bond0 (unregistering): Released all slaves [ 860.838769][T13233] bond1 (unregistering): Released all slaves [ 860.859400][T13233] bond2 (unregistering): Released all slaves [ 860.875429][T13233] bond3 (unregistering): Released all slaves [ 860.890741][T13233] bond4 (unregistering): Released all slaves [ 860.907283][T13233] bond5 (unregistering): Released all slaves [ 860.925527][T13233] bond6 (unregistering): Released all slaves [ 860.942422][T13233] bond7 (unregistering): Released all slaves [ 860.960562][T13233] bond8 (unregistering): Released all slaves [ 861.001503][T13233] bond9 (unregistering): Released all slaves [ 861.017695][T13233] bond10 (unregistering): Released all slaves [ 861.032759][T13233] bond11 (unregistering): Released all slaves [ 861.120409][ T6012] bond12: option arp_all_targets: invalid value (18446744073709551613) [ 861.135213][ T6012] bond12 (unregistering): Released all slaves [ 861.332497][T13233] : left promiscuous mode [ 861.520814][T13233] tipc: Left network mode [ 861.978615][T13233] IPVS: stopping master sync thread 20035 ... [ 861.997482][T13233] IPVS: stopping backup sync thread 26449 ... [ 862.716314][T13233] hsr_slave_0: left promiscuous mode [ 862.739157][T13233] hsr_slave_1: left promiscuous mode [ 862.768709][T13233] veth1_vlan: left promiscuous mode [ 862.788037][T13233] veth0_vlan: left promiscuous mode [ 862.967303][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 862.981717][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 862.995161][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 863.009473][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 863.019957][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 863.363040][ T6126] __nla_validate_parse: 1 callbacks suppressed [ 863.363062][ T6126] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8804'. [ 863.527551][T13233] team0 (unregistering): Port device team_slave_1 removed [ 863.655758][T13235] smbdirect: ib_dev[syz2] removed [ 863.657512][ T6113] mac80211_hwsim hwsim72 syzkaller0: entered promiscuous mode [ 863.678708][ T6113] mac80211_hwsim hwsim72 syzkaller0: entered allmulticast mode [ 863.697068][ T6118] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 863.782092][ T6131] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8805'. [ 863.883826][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8805'. [ 863.981071][ T6136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 864.407820][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.417621][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.677599][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.752658][ T6142] bond3: left promiscuous mode [ 864.760869][ T6142] bridge1: left promiscuous mode [ 864.872175][ T6142] bond5: left promiscuous mode [ 864.883418][ T6142] geneve2: left promiscuous mode [ 864.891440][ T6142] geneve2: left allmulticast mode [ 864.896717][ T6142] gretap2: left promiscuous mode [ 864.913344][ T6142] hsr0: left promiscuous mode [ 865.091386][ T6142] bond8: left promiscuous mode [ 865.096573][ T6142] ip6gre4: left promiscuous mode [ 865.114018][ T6142] vlan0: left promiscuous mode [ 865.120140][ T6142] bridge0: left promiscuous mode [ 865.138132][ T6144] geneve3: entered promiscuous mode [ 865.143372][ T6144] geneve3: entered allmulticast mode [ 865.145526][ T5633] Bluetooth: hci3: command tx timeout [ 865.172677][T13225] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.182029][T13225] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.193894][T13225] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 865.203490][T13225] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.213111][T13225] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.222261][T13225] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 865.244258][T13225] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.253330][T13225] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.265917][T13225] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 865.289649][ T79] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.317580][ T79] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.346434][ T79] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 865.496090][ T6167] netlink: 'syz.0.8814': attribute type 1 has an invalid length. [ 865.570411][ T6167] 8021q: adding VLAN 0 to HW filter on device bond10 [ 865.643826][ T6167] bond10: (slave geneve4): making interface the new active one [ 865.661072][ T6167] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 865.672775][T13239] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 6081 - 0 [ 865.683065][T13239] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 6081 - 0 [ 865.733502][T13239] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 6081 - 0 [ 865.758742][T13239] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 6081 - 0 [ 865.863662][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8820'. [ 865.881583][ T6187] syzkaller0: entered promiscuous mode [ 865.888096][ T6187] syzkaller0: entered allmulticast mode [ 865.930243][ T6187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8819'. [ 866.047120][ T6196] sctp: [Deprecated]: syz.0.8821 (pid 6196) Use of struct sctp_assoc_value in delayed_ack socket option. [ 866.047120][ T6196] Use struct sctp_sack_info instead [ 866.183907][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.191640][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.199089][ T6105] bridge_slave_0: entered allmulticast mode [ 866.207723][ T6105] bridge_slave_0: entered promiscuous mode [ 866.218405][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.225866][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.233162][ T6105] bridge_slave_1: entered allmulticast mode [ 866.242253][ T6105] bridge_slave_1: entered promiscuous mode [ 866.311029][ T6105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.325493][ T6105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.408082][ T6105] team0: Port device team_slave_0 added [ 866.421827][ T6105] team0: Port device team_slave_1 added [ 866.495520][ T6105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.507424][ T6105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.534367][ T6105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.565988][ T6105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.573139][ T6105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.600237][ T6105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.705024][ T6105] hsr_slave_0: entered promiscuous mode [ 866.712035][ T6105] hsr_slave_1: entered promiscuous mode [ 866.720922][ T6105] debugfs: 'hsr0' already exists in 'hsr' [ 866.727293][ T6105] Cannot create hsr debugfs directory [ 867.079402][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8836'. [ 867.148081][ T6105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 867.226285][ T5633] Bluetooth: hci3: command tx timeout [ 867.353492][ T6105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 867.419111][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8841'. [ 867.452104][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8841'. [ 867.508605][ T6105] bond0: (slave netdevsim1): Releasing backup interface [ 867.520563][ T6272] netlink: 'syz.3.8844': attribute type 1 has an invalid length. [ 867.540794][ T6105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 867.600879][ T6272] 8021q: adding VLAN 0 to HW filter on device bond12 [ 867.623880][ T6272] syzkaller0: entered promiscuous mode [ 867.630649][ T6272] syzkaller0: entered allmulticast mode [ 867.641172][ T6272] syz_tun: left allmulticast mode [ 867.659874][ T6272] bond12: (slave syz_tun): Enslaving as a backup interface with an up link [ 867.773682][ T6105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 867.845272][ T6286] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 867.898022][ T6286] xt_hl: Unknown TTL match mode: 255 [ 868.000682][ T6294] netlink: 'syz.1.8850': attribute type 1 has an invalid length. [ 868.122667][ T6105] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 868.149371][ T6105] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 868.168970][ T6105] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 868.180758][ T6105] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 868.187831][ T6301] Cannot find set identified by id 65534 to match [ 868.203277][ T6105] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 868.233630][ T6105] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 868.257042][ T6105] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 868.269518][ T6105] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 868.288060][ T6303] syzkaller0: entered promiscuous mode [ 868.304584][ T6303] syzkaller0: entered allmulticast mode [ 868.333012][ T6314] netlink: 'syz.0.8856': attribute type 1 has an invalid length. [ 868.446404][ T6314] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 868.763414][ T6105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.807438][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8860'. [ 868.813904][ T6105] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.852845][ T6339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.857720][ T6337] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 868.881562][T13225] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.888811][T13225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.932996][T13235] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.940232][T13235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.004006][ T6348] syzkaller0: entered promiscuous mode [ 869.011694][ T6348] syzkaller0: entered allmulticast mode [ 869.306369][ T5633] Bluetooth: hci3: command tx timeout [ 869.603358][ T6377] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8870'. [ 869.620857][ T6377] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8870'. [ 869.640267][ T6377] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8870'. [ 869.658676][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.994809][ T6105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.179793][ T6105] veth0_vlan: entered promiscuous mode [ 870.241830][ T6105] veth1_vlan: entered promiscuous mode [ 870.333625][ T6105] veth0_macvtap: entered promiscuous mode [ 870.384185][ T6105] veth1_macvtap: entered promiscuous mode [ 870.473517][ T6423] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8881'. [ 870.547984][ T6422] tipc: MTU too low for tipc bearer [ 870.555753][T13233] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 870.566566][T13233] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 870.566627][ T6429] netlink: 'syz.3.8883': attribute type 1 has an invalid length. [ 870.576695][T13233] netdevsim netdevsim0 netdevsim0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 870.610768][T13233] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 870.631020][T13233] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 870.653071][T13233] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 870.731264][ T6429] 8021q: adding VLAN 0 to HW filter on device bond13 [ 870.759021][ T6428] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 870.772020][ T6432] bond13: entered promiscuous mode [ 870.779776][ T6432] bond13: entered allmulticast mode [ 870.789514][T13233] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 870.809792][T13233] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 870.824155][T13233] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 870.841856][T13233] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 870.851658][T13233] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 870.863471][T13233] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 870.893103][ T6105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.933625][ T6105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.953714][ T30] audit: type=1804 audit(1784361629.049:11): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8889" name="/newroot/503/cgroup.controllers" dev="tmpfs" ino=2580 res=1 errno=0 [ 870.953962][ T6444] nft_compat: unsupported protocol 0 [ 870.996759][T13235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.010280][ T30] audit: type=1800 audit(1784361629.049:12): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8889" name="cgroup.controllers" dev="tmpfs" ino=2580 res=0 errno=0 [ 871.056600][T13235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.069145][T13235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.111785][T13235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.170065][ T6452] netlink: 'syz.4.8892': attribute type 1 has an invalid length. [ 871.233347][ T6452] netlink: 'syz.4.8892': attribute type 1 has an invalid length. [ 871.264430][ T6452] netlink: 'syz.4.8892': attribute type 1 has an invalid length. [ 871.288364][ T6452] netlink: 'syz.4.8892': attribute type 2 has an invalid length. [ 871.310952][ T6452] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8892'. [ 871.347587][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8894'. [ 871.385704][ T5633] Bluetooth: hci3: command tx timeout [ 871.414142][ T6465] bond5: entered promiscuous mode [ 871.422875][ T6465] 8021q: adding VLAN 0 to HW filter on device bond5 [ 871.462832][T13233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.475924][T13233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.581137][T13235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.608687][T13235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.680042][ T6478] netlink: 'syz.3.8896': attribute type 32 has an invalid length. [ 871.965085][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8796'. [ 872.055667][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 872.071961][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 872.082810][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 872.091283][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 872.102949][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 872.436304][ T6507] syz.0.8903: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 872.459999][T27211] bond12: (slave syz_tun): Removing an active aggregator [ 872.482323][ T6507] CPU: 1 UID: 0 PID: 6507 Comm: syz.0.8903 Not tainted syzkaller #0 PREEMPT(full) [ 872.482364][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 872.482379][ T6507] Call Trace: [ 872.482388][ T6507] [ 872.482398][ T6507] dump_stack_lvl+0xe8/0x150 [ 872.482436][ T6507] warn_alloc+0x24c/0x270 [ 872.482473][ T6507] ? __pfx_warn_alloc+0x10/0x10 [ 872.482498][ T6507] ? xsk_init_queue+0x8a/0xe0 [ 872.482526][ T6507] ? do_sock_setsockopt+0x17c/0x1b0 [ 872.482559][ T6507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.482606][ T6507] __vmalloc_node_range_noprof+0x12c/0x1730 [ 872.482667][ T6507] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 872.482693][ T6507] ? rcu_is_watching+0x15/0xb0 [ 872.482729][ T6507] ? __kasan_kmalloc+0x22/0xb0 [ 872.482761][ T6507] ? __kmalloc_cache_noprof+0x32d/0x660 [ 872.482789][ T6507] ? __pfx___mutex_lock+0x10/0x10 [ 872.482909][ T6507] vmalloc_user_noprof+0xad/0xe0 [ 872.482936][ T6507] ? xskq_create+0xbf/0x170 [ 872.482968][ T6507] xskq_create+0xbf/0x170 [ 872.483002][ T6507] xsk_init_queue+0x8a/0xe0 [ 872.483033][ T6507] xsk_setsockopt+0x52a/0x960 [ 872.483060][ T6507] ? __fget_files+0x2a/0x420 [ 872.483088][ T6507] ? __pfx_xsk_setsockopt+0x10/0x10 [ 872.483116][ T6507] ? __pfx_aa_sk_perm+0x10/0x10 [ 872.483155][ T6507] ? aa_sock_opt_perm+0xff/0x1a0 [ 872.483181][ T6507] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 872.483203][ T6507] ? __pfx_xsk_setsockopt+0x10/0x10 [ 872.483233][ T6507] do_sock_setsockopt+0x17c/0x1b0 [ 872.483270][ T6507] __x64_sys_setsockopt+0x13d/0x1b0 [ 872.483306][ T6507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.483330][ T6507] do_syscall_64+0x174/0x580 [ 872.483369][ T6507] ? trace_irq_disable+0x3b/0x140 [ 872.483398][ T6507] ? clear_bhb_loop+0x40/0x90 [ 872.483425][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.483447][ T6507] RIP: 0033:0x7f9b8dd9de99 [ 872.483467][ T6507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.483485][ T6507] RSP: 002b:00007f9b8ed28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 872.483510][ T6507] RAX: ffffffffffffffda RBX: 00007f9b8e025fa0 RCX: 00007f9b8dd9de99 [ 872.483526][ T6507] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 872.483540][ T6507] RBP: 00007f9b8de33eaf R08: 0000000000000004 R09: 0000000000000000 [ 872.483553][ T6507] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.483566][ T6507] R13: 00007f9b8e026038 R14: 00007f9b8e025fa0 R15: 00007ffdd4582368 [ 872.483603][ T6507] [ 872.484234][ T6507] Mem-Info: [ 872.484262][T27211] bond12: (slave syz_tun): Releasing backup interface [ 872.503109][ T6507] active_anon:5954 inactive_anon:1 isolated_anon:0 [ 872.503109][ T6507] active_file:34 inactive_file:43667 isolated_file:0 [ 872.503109][ T6507] unevictable:768 dirty:95 writeback:0 [ 872.503109][ T6507] slab_reclaimable:12529 slab_unreclaimable:110997 [ 872.503109][ T6507] mapped:29505 shmem:1293 pagetables:3481 [ 872.503109][ T6507] sec_pagetables:0 bounce:0 [ 872.503109][ T6507] kernel_misc_reclaimable:0 [ 872.503109][ T6507] free:1303740 free_pcp:10319 free_cma:0 [ 872.800307][ T6507] Node 0 active_anon:24116kB inactive_anon:4kB active_file:136kB inactive_file:174468kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120320kB dirty:380kB writeback:0kB shmem:3636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14736kB pagetables:14084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 872.864531][ T6507] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 872.922041][ T6507] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 873.011068][ T6507] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 873.035931][ T6507] Node 0 DMA32 free:1259280kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23996kB inactive_anon:4kB active_file:136kB inactive_file:174468kB unevictable:1536kB writepending:380kB zspages:0kB present:3129332kB managed:2548728kB mlocked:0kB bounce:0kB free_pcp:41560kB local_pcp:20392kB free_cma:0kB [ 873.105074][ T6507] lowmem_reserve[]: 0 0 0 0 0 [ 873.140665][ T6507] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 873.212191][ T6507] lowmem_reserve[]: 0 0 0 0 0 [ 873.223224][ T6507] Node 1 Normal free:3940004kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 873.259133][ T6507] lowmem_reserve[]: 0 0 0 0 0 [ 873.271620][ T6507] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 873.298179][ T6507] Node 0 DMA32: 1971*4kB (UME) 2205*8kB (UME) 462*16kB (UME) 984*32kB (UME) 352*64kB (UM) 460*128kB (UME) 416*256kB (UM) 244*512kB (UM) 124*1024kB (UME) 19*2048kB (UME) 175*4096kB (UM) = 1259924kB [ 873.325509][ T6507] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 873.342416][ T6507] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 5*16kB (UM) 4*32kB (UM) 9*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 960*4096kB (M) = 3940004kB [ 873.360627][ T6507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 873.373341][ T6507] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 873.383270][ T6507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 873.393553][ T6507] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 873.404915][ T6507] 44991 total pagecache pages [ 873.410441][ T6507] 0 pages in swap cache [ 873.415566][ T6507] Free swap = 124996kB [ 873.417915][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8911'. [ 873.419815][ T6507] Total swap = 124996kB [ 873.455626][ T6507] 2097051 pages RAM [ 873.455986][ T6544] block nbd0: Unsupported socket: should be TCP or UNIX. [ 873.460098][ T6507] 0 pages HighMem/MovableOnly [ 873.494734][ T6507] 428188 pages reserved [ 873.520170][ T6507] 0 pages cma reserved [ 873.640392][ T6557] netlink: 'syz.2.8914': attribute type 3 has an invalid length. [ 873.665462][ T6557] netlink: 'syz.2.8914': attribute type 1 has an invalid length. [ 873.679754][ T6557] netlink: 212 bytes leftover after parsing attributes in process `syz.2.8914'. [ 873.690410][ T6557] NCSI netlink: No device for ifindex 813332851 [ 873.999942][ T6567] tipc: Enabling of bearer rejected, failed to enable media [ 874.186600][ T5630] Bluetooth: hci0: command tx timeout [ 874.420946][ T6592] netlink: 'syz.0.8922': attribute type 29 has an invalid length. [ 874.758253][ T6493] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.782626][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.797979][ T6493] bridge_slave_0: entered allmulticast mode [ 874.817288][ T6493] bridge_slave_0: entered promiscuous mode [ 874.875287][ T6622] __nla_validate_parse: 1 callbacks suppressed [ 874.875307][ T6622] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8930'. [ 874.905756][ T6622] netlink: 'syz.2.8930': attribute type 7 has an invalid length. [ 874.922033][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8930'. [ 874.933573][ T6627] x_tables: duplicate underflow at hook 3 [ 874.936962][ T6620] bond6: Unable to set up delay as MII monitoring is disabled [ 874.950877][ T6620] bond6 (unregistering): Released all slaves [ 875.002345][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.009756][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.022283][ T6493] bridge_slave_1: entered allmulticast mode [ 875.030421][ T6493] bridge_slave_1: entered promiscuous mode [ 875.098106][ T6493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.144007][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8931'. [ 875.188244][ T6493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.200610][ T6631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8931'. [ 875.217444][ T6635] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 875.236771][ T6639] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 875.288361][ T6493] team0: Port device team_slave_0 added [ 875.298076][ T6493] team0: Port device team_slave_1 added [ 875.472025][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.486688][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.561394][ T6493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.600882][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.615508][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.659830][ T6493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.865340][ T6493] hsr_slave_0: entered promiscuous mode [ 875.872254][ T6493] hsr_slave_1: entered promiscuous mode [ 875.886384][ T6493] debugfs: 'hsr0' already exists in 'hsr' [ 875.892890][ T6493] Cannot create hsr debugfs directory [ 876.042519][ T6681] validate_nla: 1 callbacks suppressed [ 876.042539][ T6681] netlink: 'syz.2.8944': attribute type 1 has an invalid length. [ 876.266835][ T5630] Bluetooth: hci0: command tx timeout [ 876.313718][ T6700] netlink: 'syz.4.8950': attribute type 1 has an invalid length. [ 876.325429][ T6700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 876.348247][ T6493] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 876.351443][ T6700] xt_hl: Unknown TTL match mode: 255 [ 876.827286][ T6733] netlink: 'syz.4.8957': attribute type 1 has an invalid length. [ 876.843183][ T6733] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8957'. [ 876.911409][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8959'. [ 876.987805][ T6738] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 877.030215][ T6738] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 877.081734][ T6738] gretap1: entered promiscuous mode [ 877.109273][ T6738] gretap1: entered allmulticast mode [ 877.390358][ T6764] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 877.580785][ T6778] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8970'. [ 877.601628][ T6776] netlink: 'syz.0.8968': attribute type 11 has an invalid length. [ 877.633161][ T6780] pim6reg: entered allmulticast mode [ 877.759171][ T6493] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 877.801165][ T6493] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 877.818909][ T6493] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 877.837219][ T6493] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 877.846350][ T6493] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 877.860549][ T6493] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 877.875644][ T6493] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 877.894263][ T6493] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 878.072582][ T6493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.120541][ T6493] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.143700][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.150922][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.186827][T13225] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.194075][T13225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.202086][ T6809] netlink: 244 bytes leftover after parsing attributes in process `syz.4.8978'. [ 878.344952][ T5630] Bluetooth: hci0: command tx timeout [ 878.957545][ T6840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8988'. [ 879.002644][ T6840] : renamed from dummy0 [ 879.093116][ T6848] netlink: ct family unspecified [ 879.121883][ T6848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.193940][ T6852] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8992'. [ 879.341465][ T6493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.425799][ T6855] bond11: option resend_igmp: invalid value (32763) [ 879.435018][ T6855] bond11: option resend_igmp: allowed values 0 - 255 [ 879.443814][ T6855] bond11 (unregistering): Released all slaves [ 879.612990][ T6493] veth0_vlan: entered promiscuous mode [ 879.646982][ T6493] veth1_vlan: entered promiscuous mode [ 879.742669][ T6493] veth0_macvtap: entered promiscuous mode [ 879.767503][ T6493] veth1_macvtap: entered promiscuous mode [ 879.835391][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.877434][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.912446][T13239] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.922152][T13239] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.955851][T13239] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.971669][T13239] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.998976][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9001'. [ 880.027260][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9001'. [ 880.072730][ T6889] sctp: [Deprecated]: syz.2.9003 (pid 6889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 880.072730][ T6889] Use struct sctp_sack_info instead [ 880.247721][T13233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.274543][T13233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.362814][T13235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.380646][T13235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.426182][ T5630] Bluetooth: hci0: command tx timeout [ 880.619183][ T6912] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 880.744091][ T6917] syzkaller0: entered promiscuous mode [ 880.750063][ T6917] syzkaller0: entered allmulticast mode [ 881.165270][ T6926] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9015'. [ 881.252021][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 881.269150][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 881.277641][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 881.294273][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 881.302462][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 881.432845][ T6941] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20002 [ 881.714765][ T6953] netlink: 'syz.3.9020': attribute type 17 has an invalid length. [ 881.752993][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9020'. [ 881.790171][ T6953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9020'. [ 881.913040][ T6964] netlink: 'syz.4.9022': attribute type 11 has an invalid length. [ 881.925106][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9022'. [ 881.941587][ T6964] netlink: 'syz.4.9022': attribute type 11 has an invalid length. [ 881.979317][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9022'. [ 882.162295][ T6987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.610271][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9034'. [ 882.615812][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9034'. [ 883.100832][ T7040] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9043'. [ 883.174159][ T6937] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.181789][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.190906][ T6937] bridge_slave_0: entered allmulticast mode [ 883.199772][ T6937] bridge_slave_0: entered promiscuous mode [ 883.218587][ T6937] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.228689][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.236285][ T6937] bridge_slave_1: entered allmulticast mode [ 883.244641][ T6937] bridge_slave_1: entered promiscuous mode [ 883.291008][ T6937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.322920][ T6937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.359221][ T7047] netlink: 'syz.1.9045': attribute type 1 has an invalid length. [ 883.385189][ T5630] Bluetooth: hci5: command tx timeout [ 883.407274][ T7047] 8021q: adding VLAN 0 to HW filter on device bond6 [ 883.437453][ T6937] team0: Port device team_slave_0 added [ 883.488411][ T6937] team0: Port device team_slave_1 added [ 883.514135][ T7047] bond6: (slave gretap2): making interface the new active one [ 883.525717][ T7047] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 883.536617][ T7053] netlink: 'syz.2.9046': attribute type 4 has an invalid length. [ 883.661322][ T7053] .`: renamed from bond0 (while UP) [ 883.731620][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.759384][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.801156][ T7064] netlink: 'syz.1.9048': attribute type 1 has an invalid length. [ 883.805734][ T6937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 883.927500][ T7064] bond7: entered promiscuous mode [ 883.948120][ T7064] 8021q: adding VLAN 0 to HW filter on device bond7 [ 883.966895][ T7072] netlink: zone id is out of range [ 883.967197][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 883.983745][ T7072] netlink: zone id is out of range [ 884.000601][ T7072] netlink: zone id is out of range [ 884.009289][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.044910][ T7072] netlink: zone id is out of range [ 884.057918][ T7072] netlink: zone id is out of range [ 884.063223][ T7072] netlink: zone id is out of range [ 884.084743][ T6937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.095718][ T7072] netlink: zone id is out of range [ 884.095752][ T7072] netlink: zone id is out of range [ 884.097590][ T7072] netlink: zone id is out of range [ 884.421321][ T7068] macvtap2: entered allmulticast mode [ 884.640724][ T7076] bond7: (slave bridge9): making interface the new active one [ 884.651948][ T7076] bridge9: entered promiscuous mode [ 884.660457][ T7076] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 884.723559][ T7115] team0: Port device team_slave_0 removed [ 884.739744][ T7124] netlink: 'syz.2.9053': attribute type 10 has an invalid length. [ 884.793038][ T7126] netlink: 'syz.1.9054': attribute type 1 has an invalid length. [ 884.853834][ T6937] hsr_slave_0: entered promiscuous mode [ 884.864088][ T6937] hsr_slave_1: entered promiscuous mode [ 884.872023][ T6937] debugfs: 'hsr0' already exists in 'hsr' [ 884.880774][ T6937] Cannot create hsr debugfs directory [ 884.922461][ T7126] bond8: entered promiscuous mode [ 884.929468][ T7126] 8021q: adding VLAN 0 to HW filter on device bond8 [ 885.113819][ T7144] __nla_validate_parse: 7 callbacks suppressed [ 885.113840][ T7144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9058'. [ 885.135564][ T7130] bond8: (slave bridge10): making interface the new active one [ 885.161097][ T7130] bridge10: entered promiscuous mode [ 885.196422][ T7130] bond8: (slave bridge10): Enslaving as an active interface with an up link [ 885.466882][ T5630] Bluetooth: hci5: command tx timeout [ 885.523877][ T7159] Cannot find set identified by id 0 to match [ 885.643750][ T7163] netlink: 'syz.4.9066': attribute type 4 has an invalid length. [ 885.677844][ T7165] netlink: 'syz.1.9067': attribute type 1 has an invalid length. [ 885.699900][ T7170] Bluetooth: MGMT ver 1.23 [ 886.573069][ T7198] eql: remember to turn off Van-Jacobson compression on your slave devices [ 886.605513][ T6937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 886.642226][ T6937] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 886.657504][ T6937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 886.671968][ T6937] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 886.685509][ T6937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 886.703763][ T6937] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 886.719923][ T6937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 886.753666][ T6937] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 886.985441][ T7218] bridge5: entered promiscuous mode [ 886.999537][ T7218] bridge5: entered allmulticast mode [ 887.046171][ T7218] team0: Port device bridge5 added [ 887.168289][ T6937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.212951][ T6937] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.255677][ T7107] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.262907][ T7107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.299772][ T7110] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.307020][ T7110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 887.341577][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9084'. [ 887.375083][ T7229] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9084'. [ 887.544966][ T5630] Bluetooth: hci5: command tx timeout [ 887.659904][ T7243] geneve2: entered promiscuous mode [ 887.837503][ T7255] syzkaller0: entered promiscuous mode [ 887.857339][ T7255] syzkaller0: entered allmulticast mode [ 887.878668][ T7264] sctp: [Deprecated]: syz.4.9093 (pid 7264) Use of int in maxseg socket option. [ 887.878668][ T7264] Use struct sctp_assoc_value instead [ 887.906439][ T7263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9094'. [ 887.929934][ T7255] pimreg3: entered allmulticast mode [ 887.944940][ T7263] validate_nla: 2 callbacks suppressed [ 887.944957][ T7263] netlink: 'syz.2.9094': attribute type 7 has an invalid length. [ 887.984158][ T7263] netlink: 'syz.2.9094': attribute type 8 has an invalid length. [ 887.993091][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9094'. [ 888.092936][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9095'. [ 888.276305][ T7280] net_ratelimit: 4 callbacks suppressed [ 888.276325][ T7280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 888.392698][ T6937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.476825][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9100'. [ 888.513287][ T6937] veth0_vlan: entered promiscuous mode [ 888.549178][ T6937] veth1_vlan: entered promiscuous mode [ 888.614256][ T7298] netlink: 'syz.2.9103': attribute type 2 has an invalid length. [ 888.645522][ T6937] veth0_macvtap: entered promiscuous mode [ 888.686828][ T6937] veth1_macvtap: entered promiscuous mode [ 888.710240][ T7298] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 888.728885][ T7298] bond0: (slave lo): Enslaving as an active interface with an up link [ 888.741374][ T7298] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 888.783223][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9104'. [ 888.796150][ T6937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.847407][ T6937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.870672][T13239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.881186][T13239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.901750][T13239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.917515][T13239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.206152][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.217259][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9108'. [ 889.229397][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.300956][ T7110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.335562][ T7110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.491464][ T7330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9113'. [ 889.545160][ T7330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 889.552449][ T7330] IPv6: NLM_F_CREATE should be set when creating new route [ 889.949134][ T7353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 889.966587][ T7355] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 889.971000][ T7357] netlink: 'syz.2.9120': attribute type 10 has an invalid length. [ 890.152868][ T7363] bridge0: port 3(vlan2) entered blocking state [ 890.163919][ T7363] bridge0: port 3(vlan2) entered disabled state [ 890.171350][ T7363] vlan2: entered allmulticast mode [ 890.180050][ T7363] geneve0: entered allmulticast mode [ 890.181301][ T7368] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 890.189814][ T7363] vlan2: entered promiscuous mode [ 890.236139][ T7363] geneve0: entered promiscuous mode [ 890.268731][ T5630] Bluetooth: hci5: command tx timeout [ 890.381583][ T7384] __nla_validate_parse: 5 callbacks suppressed [ 890.381604][ T7384] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9127'. [ 890.578265][ T7395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9131'. [ 890.903275][ T7408] x_tables: duplicate underflow at hook 1 [ 891.188100][ T7429] netlink: 'syz.3.9143': attribute type 1 has an invalid length. [ 891.232656][ T7429] bond1: (slave veth0_to_bond): making interface the new active one [ 891.246329][ T7429] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 891.271325][ T7429] macvlan2: entered promiscuous mode [ 891.277149][ T7429] macvlan2: entered allmulticast mode [ 891.285600][ T7429] bond1: entered promiscuous mode [ 891.309650][ T7429] veth0_to_bond: entered promiscuous mode [ 891.338028][ T7429] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 891.348039][ T7429] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 891.368793][ T7429] bond1: left promiscuous mode [ 891.373632][ T7429] veth0_to_bond: left promiscuous mode [ 891.388037][ T7443] netlink: 'syz.2.9145': attribute type 18 has an invalid length. [ 891.428416][ T7442] gre2: entered promiscuous mode [ 891.962725][ T7463] netlink: 'syz.0.9144': attribute type 1 has an invalid length. [ 892.133539][ T7463] bond1 (unregistering): Released all slaves [ 892.200634][ T7483] netlink: 'syz.2.9157': attribute type 1 has an invalid length. [ 892.218281][ T7483] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9157'. [ 892.290460][ T7486] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.9157'. [ 892.335952][ T7486] veth0_to_bond: default FDB implementation only supports local addresses [ 892.518421][ T7491] netlink: 'syz.1.9160': attribute type 10 has an invalid length. [ 892.532342][ T7491] netlink: 'syz.1.9160': attribute type 10 has an invalid length. [ 892.859868][ T7508] 8021q: VLANs not supported on ip6gre0 [ 893.233887][ T7526] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9168'. [ 893.556640][ T7536] xt_ecn: cannot match TCP bits for non-tcp packets [ 893.681745][ T7547] netlink: 'syz.1.9175': attribute type 21 has an invalid length. [ 893.839621][ T7547] bond9: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 893.888058][ T7547] bond9 (unregistering): Released all slaves [ 894.011579][ T7558] netlink: 'syz.3.9181': attribute type 5 has an invalid length. [ 894.174752][ T7556] bond1: option all_slaves_active: invalid value (222) [ 894.212991][ T7556] bond1 (unregistering): Released all slaves [ 894.300483][ T7585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9183'. [ 894.326588][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9183'. [ 894.345261][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9183'. [ 894.376507][ T7586] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9183'. [ 894.386553][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9183'. [ 894.535848][ T7599] tap0: tun_chr_ioctl cmd 2148553947 [ 894.546981][ T7601] openvswitch: netlink: IP tunnel dst address not specified [ 894.554985][ T7601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 894.612828][ T7604] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 895.437352][ T7625] netlink: 'syz.4.9194': attribute type 1 has an invalid length. [ 895.447195][ T7625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.517368][ T7628] syzkaller0: entered promiscuous mode [ 895.523394][ T7628] syzkaller0: entered allmulticast mode [ 897.374092][ T7588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 897.601204][ T7640] __nla_validate_parse: 1 callbacks suppressed [ 897.601226][ T7640] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9198'. [ 897.617336][ T7640] tipc: Started in network mode [ 897.635928][ T7640] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 897.652714][ T7640] tipc: Enabled bearer , priority 10 [ 897.712462][ T7643] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 897.741869][ T7643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9200'. [ 897.742775][ T7650] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9202'. [ 897.771021][ T7647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.776444][ T7650] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9202'. [ 897.817325][ T7650] netlink: 'syz.4.9202': attribute type 6 has an invalid length. [ 897.833435][ T7650] netlink: 'syz.4.9202': attribute type 5 has an invalid length. [ 897.844723][ T7650] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9202'. [ 898.318367][ T7682] tipc: Started in network mode [ 898.333514][ T7682] tipc: Node identity 167ebf204046, cluster identity 4711 [ 898.354717][ T7682] tipc: Enabled bearer , priority 0 [ 898.408376][ T7682] syzkaller0: entered promiscuous mode [ 898.418188][ T7695] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9214'. [ 898.437421][ T7682] syzkaller0: entered allmulticast mode [ 898.452402][ T7682] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 898.473873][ T7695] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9214'. [ 898.513145][ T7680] tipc: Resetting bearer [ 898.580780][ T7680] tipc: Disabling bearer [ 898.768895][T29604] tipc: Node number set to 10136234 [ 898.881752][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9222'. [ 898.951324][ T7723] batadv_slave_0: entered promiscuous mode [ 898.966547][ T7732] netlink: 'syz.1.9223': attribute type 1 has an invalid length. [ 898.967020][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9222'. [ 898.991659][ T7723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.019150][ T7723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.150471][ T7740] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 899.159781][ T7746] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 899.292739][ T30] audit: type=1107 audit(1784361657.389:13): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='E6ûßv”ßãž´?çU”+ý“a!®]›aLÑ' [ 899.809930][ T7777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9240'. [ 899.925784][ T7777] veth3: entered allmulticast mode [ 900.001589][ T7789] netlink: 'syz.3.9244': attribute type 1 has an invalid length. [ 900.169639][ T7786] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.177480][ T7786] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.360645][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 900.386880][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 900.399285][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 900.411227][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 900.420495][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 900.579759][ T7786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.694163][ T7787] bond0: (slave veth0_to_bond): Releasing backup interface [ 900.848211][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.878665][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.911740][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.914487][ T7813] netlink: 'syz.1.9248': attribute type 1 has an invalid length. [ 900.930725][ T1168] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.957287][ T7815] netlink: 'syz.0.9250': attribute type 1 has an invalid length. [ 901.089418][ T7815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 901.113658][ T7820] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 901.196985][ T7815] macvlan2: entered promiscuous mode [ 901.224708][ T7815] macvlan2: entered allmulticast mode [ 901.260346][ T7815] bond1: entered promiscuous mode [ 901.281022][ T7815] veth0_to_bond: entered promiscuous mode [ 901.320772][ T7815] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 901.347149][ T7815] bond1: left promiscuous mode [ 901.352003][ T7815] veth0_to_bond: left promiscuous mode [ 901.353055][ T7836] netlink: 'syz.2.9254': attribute type 1 has an invalid length. [ 901.455287][ T7836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 901.601726][ T7840] bond1: (slave geneve3): making interface the new active one [ 901.631412][ T7840] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 901.893321][ T7866] netlink: 'syz.2.9259': attribute type 5 has an invalid length. [ 902.142717][ T7866] geneve4: entered promiscuous mode [ 902.151696][ T7866] geneve4: entered allmulticast mode [ 902.229892][ T7110] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 902.254981][ T7110] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 902.263977][ T7110] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 902.287247][ T7110] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 902.505557][ T5630] Bluetooth: hci2: command tx timeout [ 902.515549][ T7891] syzkaller0: entered promiscuous mode [ 902.536033][ T7891] syzkaller0: entered allmulticast mode [ 903.153579][ T7801] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.169371][ T7911] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 903.169956][ T7801] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.204944][ T7801] bridge_slave_0: entered allmulticast mode [ 903.218298][ T7801] bridge_slave_0: entered promiscuous mode [ 903.278057][ T7801] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.294853][ T7801] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.306101][ T7914] __nla_validate_parse: 11 callbacks suppressed [ 903.306121][ T7914] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9271'. [ 903.315596][ T7801] bridge_slave_1: entered allmulticast mode [ 903.342736][ T7801] bridge_slave_1: entered promiscuous mode [ 903.820487][ T7801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.862293][ T7801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.971491][ T7801] team0: Port device team_slave_0 added [ 903.989701][ T7801] team0: Port device team_slave_1 added [ 904.034361][ T7927] block nbd2: not configured, cannot reconfigure [ 904.071698][ T7801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.091503][ T7801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.124310][ T7801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.164852][ T7801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.182618][ T7801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.215981][ T7801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.243302][ T7925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9274'. [ 904.277157][ T7936] bridge_slave_1: left allmulticast mode [ 904.283485][ T7936] bridge_slave_1: left promiscuous mode [ 904.290048][ T7936] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.301303][ T7936] bridge_slave_0: left allmulticast mode [ 904.307292][ T7936] bridge_slave_0: left promiscuous mode [ 904.313165][ T7936] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.436691][ T7801] hsr_slave_0: entered promiscuous mode [ 904.447839][ T7801] hsr_slave_1: entered promiscuous mode [ 904.457208][ T7801] debugfs: 'hsr0' already exists in 'hsr' [ 904.463040][ T7801] Cannot create hsr debugfs directory [ 904.589397][ T5630] Bluetooth: hci2: command tx timeout [ 904.646501][ T7945] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9280'. [ 904.820391][ T7951] netlink: 'syz.0.9282': attribute type 10 has an invalid length. [ 904.838304][ T7951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9282'. [ 904.908814][ T7801] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 905.084738][T29596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.098519][ T7801] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 905.154207][ T7971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9287'. [ 905.279882][ T7801] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 905.356638][ T7970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9285'. [ 905.369827][ T7970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9285'. [ 905.404073][ T7981] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 905.432966][ T7985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 905.452329][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9293'. [ 905.515247][ T7990] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.9293'. [ 905.526613][ T7801] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 905.566269][ T7993] tipc: Started in network mode [ 905.578998][ T7993] tipc: Node identity ac14140f, cluster identity 4711 [ 905.591489][ T7993] tipc: New replicast peer: 255.255.255.255 [ 905.598753][ T7993] tipc: Enabled bearer , priority 10 [ 905.613763][ T7993] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9295'. [ 905.712502][ T7993] macvtap1: entered promiscuous mode [ 905.726532][ T8001] ipt_REJECT: TCP_RESET invalid for non-tcp [ 905.741277][ T7993] macvtap1: entered allmulticast mode [ 905.759908][ T7993] veth1_vlan: entered allmulticast mode [ 906.089512][ T7801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 906.109650][T29596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.130339][ T7801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 906.148015][ T7801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 906.178957][ T7801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 906.198663][ T7801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 906.233008][ T7801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 906.245217][ T7801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 906.276873][ T7801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 906.360115][ T8045] netlink: 'syz.2.9310': attribute type 2 has an invalid length. [ 906.484296][ T7801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.539094][ T7801] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.582061][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.589347][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.590376][ T8058] netlink: 'syz.1.9314': attribute type 19 has an invalid length. [ 906.612395][T29604] tipc: Node number set to 2886997007 [ 906.630857][ T8058] netlink: 'syz.1.9314': attribute type 19 has an invalid length. [ 906.655624][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.662839][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.664849][ T5630] Bluetooth: hci2: command tx timeout [ 906.910063][T29603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.060052][ T8077] netlink: 'syz.3.9321': attribute type 83 has an invalid length. [ 907.148971][T29596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.528871][ T8099] xt_hashlimit: size too large, truncated to 1048576 [ 907.663035][ T8104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.763513][ T8116] xt_TPROXY: Can be used only with -p tcp or -p udp [ 907.858332][ T7801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.008670][ T8124] sctp: [Deprecated]: syz.3.9333 (pid 8124) Use of int in max_burst socket option deprecated. [ 908.008670][ T8124] Use struct sctp_assoc_value instead [ 908.190654][T29596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.230143][ T7801] veth0_vlan: entered promiscuous mode [ 908.243254][ T7801] veth1_vlan: entered promiscuous mode [ 908.283323][ T7801] veth0_macvtap: entered promiscuous mode [ 908.293798][ T7801] veth1_macvtap: entered promiscuous mode [ 908.312643][ T7801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.328717][ T7801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.346441][T13239] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.357037][T13239] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.369217][T13239] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.378828][T13239] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.527134][ T7110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.560319][ T7110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.622403][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.640397][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.666475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.675792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.692386][ T8139] vlan2: entered promiscuous mode [ 908.702422][ T8139] gretap0: entered promiscuous mode [ 908.745010][ T5630] Bluetooth: hci2: command tx timeout [ 909.295804][ T8174] ipt_REJECT: ECHOREPLY no longer supported. [ 910.046025][ T8170] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 915.706172][T29619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.468672][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.504856][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.513306][T29619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.506406][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.934379][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1013.941010][ C1] rcu: 1-...!: (1 GPs behind) idle=0c44/1/0x4000000000000000 softirq=184327/184329 fqs=1490 [ 1013.952151][ C1] rcu: (t=10502 jiffies g=208361 q=4133 ncpus=2) [ 1013.958563][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 7522 jiffies! g208361 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1013.970872][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=74361 [ 1013.978748][ C1] rcu: rcu_preempt kthread starved for 7525 jiffies! g208361 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1013.990108][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1014.000075][ C1] rcu: RCU grace-period kthread stack dump: [ 1014.005971][ C1] task:rcu_preempt state:I stack:27608 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1014.017875][ C1] Call Trace: [ 1014.021151][ C1] [ 1014.024078][ C1] __schedule+0x17d9/0x56c0 [ 1014.028606][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1014.033556][ C1] ? __pfx___schedule+0x10/0x10 [ 1014.038409][ C1] ? schedule+0x90/0x2b0 [ 1014.042662][ C1] schedule+0x164/0x2b0 [ 1014.046830][ C1] schedule_timeout+0x152/0x2c0 [ 1014.051680][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1014.057066][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1014.062357][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1014.068213][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1014.073758][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1014.078615][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1014.084769][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1014.090061][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1014.095262][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1014.101091][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1014.105683][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1014.110874][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1014.115821][ C1] ? __kthread_parkme+0x196/0x1f0 [ 1014.120855][ C1] kthread+0x388/0x470 [ 1014.124926][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1014.130140][ C1] ? __pfx_kthread+0x10/0x10 [ 1014.134728][ C1] ret_from_fork+0x514/0xb70 [ 1014.139337][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1014.144445][ C1] ? __switch_to+0xc89/0x1420 [ 1014.149126][ C1] ? __pfx_kthread+0x10/0x10 [ 1014.153709][ C1] ret_from_fork_asm+0x1a/0x30 [ 1014.158471][ C1] [ 1014.161480][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1014.167788][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1014.173003][ C0] NMI backtrace for cpu 0 [ 1014.173018][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1014.173036][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1014.173046][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1014.173071][ C0] Code: 5c 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 3a 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1014.173085][ C0] RSP: 0018:ffffc90000007468 EFLAGS: 00000246 [ 1014.173101][ C0] RAX: ffffffff8176219a RBX: 0000000000000003 RCX: ffffffff8e88ef40 [ 1014.173114][ C0] RDX: 0000000000000100 RSI: ffffffff8e22a902 RDI: ffffffff8c4bd380 [ 1014.173126][ C0] RBP: 0000000000000003 R08: ffffffff905777f7 R09: 1ffffffff20aeefe [ 1014.173138][ C0] R10: dffffc0000000000 R11: fffffbfff20aeeff R12: 0000000000000200 [ 1014.173150][ C0] R13: 0000000000000000 R14: ffff88808500a158 R15: dffffc0000000000 [ 1014.173163][ C0] FS: 0000000000000000(0000) GS:ffff888124f57000(0000) knlGS:0000000000000000 [ 1014.173177][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1014.173189][ C0] CR2: 00007ffc0e8a7f52 CR3: 0000000036e70000 CR4: 00000000003526f0 [ 1014.173207][ C0] Call Trace: [ 1014.173215][ C0] [ 1014.173221][ C0] kvm_wait+0x10f/0x150 [ 1014.173242][ C0] __pv_queued_spin_lock_slowpath+0x74a/0xbc0 [ 1014.173271][ C0] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1014.173303][ C0] do_raw_spin_lock+0x26c/0x2f0 [ 1014.173320][ C0] ? __dev_queue_xmit+0xd56/0x3820 [ 1014.173385][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1014.173408][ C0] __dev_queue_xmit+0xd56/0x3820 [ 1014.173428][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1014.173451][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 1014.173473][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1014.173492][ C0] ? ip6_output+0x337/0x540 [ 1014.173532][ C0] ? lock_acquire+0x106/0x350 [ 1014.173553][ C0] ? ip6_output+0x337/0x540 [ 1014.173577][ C0] ? ip6_finish_output2+0xd41/0x13c0 [ 1014.173602][ C0] ? ip6_output+0x11e/0x540 [ 1014.173627][ C0] ip6_output+0x337/0x540 [ 1014.173646][ C0] ? __pfx_ip6_output+0x10/0x10 [ 1014.173663][ C0] ndisc_send_skb+0xcb2/0x1650 [ 1014.173721][ C0] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 1014.173743][ C0] ? ndisc_send_skb+0x203/0x1650 [ 1014.173768][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 1014.173793][ C0] ? __pfx_dst_output+0x10/0x10 [ 1014.173827][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 1014.173865][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1014.173886][ C0] ? lock_acquire+0x106/0x350 [ 1014.173909][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1014.173929][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1014.173951][ C0] call_timer_fn+0x192/0x5e0 [ 1014.173973][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1014.173992][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1014.174014][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1014.174042][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1014.174062][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1014.174082][ C0] __run_timer_base+0x652/0x8b0 [ 1014.174103][ C0] ? ktime_get+0x45/0x220 [ 1014.174129][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1014.174152][ C0] ? ktime_get+0x1f5/0x220 [ 1014.174172][ C0] ? lapic_next_event+0x11/0x20 [ 1014.174191][ C0] run_timer_softirq+0xb7/0x170 [ 1014.174213][ C0] handle_softirqs+0x225/0x840 [ 1014.174234][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1014.174256][ C0] __irq_exit_rcu+0xca/0x220 [ 1014.174275][ C0] irq_exit_rcu+0x9/0x30 [ 1014.174292][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1014.174314][ C0] [ 1014.174319][ C0] [ 1014.174326][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1014.174344][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1014.174370][ C0] Code: 5c 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 3a 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1014.174384][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000246 [ 1014.174399][ C0] RAX: 000000000025295f RBX: ffffffff819ab33c RCX: 0000000080000001 [ 1014.174411][ C0] RDX: 0000000000000001 RSI: ffffffff8e22a902 RDI: ffffffff8c4bd380 [ 1014.174422][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 1014.174435][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 1014.174446][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 1014.174461][ C0] ? do_idle+0x1cc/0x540 [ 1014.174488][ C0] default_idle+0x9/0x20 [ 1014.174502][ C0] default_idle_call+0x72/0xb0 [ 1014.174519][ C0] do_idle+0x1cc/0x540 [ 1014.174540][ C0] ? __pfx_do_idle+0x10/0x10 [ 1014.174562][ C0] ? do_idle+0x4cd/0x540 [ 1014.174584][ C0] cpu_startup_entry+0x43/0x60 [ 1014.174604][ C0] rest_init+0x2de/0x300 [ 1014.174631][ C0] start_kernel+0x392/0x3e0 [ 1014.174684][ C0] x86_64_start_reservations+0x24/0x30 [ 1014.174721][ C0] x86_64_start_kernel+0x137/0x1b0 [ 1014.174740][ C0] common_startup_64+0x13e/0x157 [ 1014.174766][ C0] [ 1014.175018][ C1] CPU: 1 UID: 0 PID: 8156 Comm: syz.1.9339 Not tainted syzkaller #0 PREEMPT(full) [ 1014.175039][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1014.175049][ C1] RIP: 0010:rcu_lockdep_current_cpu_online+0xbf/0x120 [ 1014.175070][ C1] Code: 20 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 d4 6a 88 00 48 8b 1b 48 83 c3 70 48 89 d8 48 c1 e8 03 42 80 3c 30 00 <74> 08 48 89 df e8 b7 6a 88 00 4c 85 3b 75 1a 48 c7 c7 00 01 b6 8e [ 1014.175084][ C1] RSP: 0018:ffffc9000427f4f0 EFLAGS: 00000246 [ 1014.175099][ C1] RAX: 1ffffffff1d6bf0e RBX: ffffffff8eb5f870 RCX: 0000000000000202 [ 1014.175119][ C1] RDX: ffff8880236f1f00 RSI: ffffffff8c4bd360 RDI: ffff8880b873c1a8 [ 1014.175132][ C1] RBP: ffffc9000427f610 R08: ffff8880236f1f00 R09: 0000000000000004 [ 1014.175144][ C1] R10: 0000000000000008 R11: 0000000000000002 R12: ffff88808500a000 [ 1014.175156][ C1] R13: ffff88808500a290 R14: dffffc0000000000 R15: 0000000000000002 [ 1014.175168][ C1] FS: 00007fcae4c4d6c0(0000) GS:ffff888125057000(0000) knlGS:0000000000000000 [ 1014.175183][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1014.175195][ C1] CR2: 000020000000f000 CR3: 00000000578e6000 CR4: 00000000003526f0 [ 1014.175212][ C1] Call Trace: [ 1014.175219][ C1] [ 1014.175228][ C1] rcu_read_lock_bh_held+0x23/0x50 [ 1014.175248][ C1] hfsc_enqueue+0x557/0xf50 [ 1014.175308][ C1] ? __pfx_hfsc_enqueue+0x10/0x10 [ 1014.175325][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1014.175347][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1014.175371][ C1] dev_qdisc_enqueue+0x4e/0x260 [ 1014.175408][ C1] ? __dev_queue_xmit+0x1b2b/0x3820 [ 1014.175430][ C1] __dev_queue_xmit+0x1b45/0x3820 [ 1014.175461][ C1] ? __pskb_pull_tail+0xc05/0x1890 [ 1014.175514][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 1014.175533][ C1] ? __asan_memcpy+0x40/0x70 [ 1014.175554][ C1] ? __pskb_pull_tail+0x1235/0x1890 [ 1014.175576][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1014.175602][ C1] ? virtio_net_hdr_to_skb+0xa2a/0x1620 [ 1014.175659][ C1] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 1014.175684][ C1] ? packet_xmit+0x68/0x330 [ 1014.175709][ C1] packet_sendmsg+0x3d95/0x5040 [ 1014.175759][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1014.175798][ C1] ? __pfx_packet_sendmsg+0x10/0x10 [ 1014.175826][ C1] ? __might_fault+0xaf/0x130 [ 1014.175846][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 1014.175876][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1014.175900][ C1] ? __pfx_packet_sendmsg+0x10/0x10 [ 1014.175917][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 1014.175942][ C1] __sys_sendto+0x408/0x5a0 [ 1014.175972][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1014.176021][ C1] ? rcu_is_watching+0x15/0xb0 [ 1014.176053][ C1] __x64_sys_sendto+0xde/0x100 [ 1014.176077][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.176097][ C1] do_syscall_64+0x174/0x580 [ 1014.176132][ C1] ? clear_bhb_loop+0x40/0x90 [ 1014.176155][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.176171][ C1] RIP: 0033:0x7fcae3d9de99 [ 1014.176190][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.176204][ C1] RSP: 002b:00007fcae4c4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1014.176221][ C1] RAX: ffffffffffffffda RBX: 00007fcae4025fa0 RCX: 00007fcae3d9de99 [ 1014.176234][ C1] RDX: 000000000000fd1e RSI: 00002000000002c0 RDI: 0000000000000004 [ 1014.176245][ C1] RBP: 00007fcae3e33eaf R08: 0000200000000140 R09: 0000000000000014 [ 1014.176257][ C1] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1014.176267][ C1] R13: 00007fcae4026038 R14: 00007fcae4025fa0 R15: 00007ffec86d2ac8 [ 1014.176297][ C1] [ 1016.016246][ C0] sched: DL replenish lagged too much