last executing test programs: 2.194504735s ago: executing program 3 (id=1384): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x70080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x4}}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newspdinfo={0x24, 0x24, 0x400, 0x70bd29, 0x9ed4, 0x1, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000180)={0x0, 0x1e, &(0x7f0000000140)={&(0x7f0000000000)={0x38, r9, 0x1, 0x70bd2a, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x6, 0x1, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x1}, 0x1c}}, 0x0) 1.763573769s ago: executing program 3 (id=1390): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket(0x8, 0x3, 0x3) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0x8004b707, 0x0) accept$inet(r1, 0x0, 0x0) r2 = socket(0x40000000015, 0x80000, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @remote, 0xfffffffc}, 0x1c) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000640)=@in6={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000780)=@nfc_llcp={0x27, 0x0, 0x1, 0x3, 0x5, 0x7, "db69356e7d47bf7548fa87b2222ec87797a0c5de86d89768d9370256b34c43d398fb737b29b50f1910689923131a3e6f8e0c8169d1e4aa957efbae6fdf6b74"}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)="0cf2c8adbf04f32269b76d1d88ccb1153c56d5052b538a7650c45dd67e03065040029384ade838cd1e6ed88fd3b3ef2ec0a16e265cced071c6415143d5ffba28ec1f2d26ee02ffce8c893f85196950de05b4b7bab803bec8164ee2a7ca5f947fee69c5f76a9b90043c16403a24ebb874760cffc59f9210614118586a13887447510a7004b329629900187f0a1431c5c9af9d802f728ca7ac4c56b8b47443203b783aed91d0537b60f2", 0xa9}], 0x1, &(0x7f0000000900)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x78}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000006c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x10000000000000b3, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x30}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000000a40)=""/83, 0x53}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r5) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="06002dbd7000fddbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x48d6}, 0x20000004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 1.186410875s ago: executing program 1 (id=1398): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffff00, 0xffffffff, 'pim6reg\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x5e, 0x3, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x5, 0x5, 0x6, 0x20], 0x7, 0x1}, {0xffffffffffffffff, [0x56, 0x7, 0x8, 0x5e, 0x1], 0x0, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xfffa, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0x9, 0x8, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde0"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffece}, 0x48) 1.170567742s ago: executing program 0 (id=1399): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r2, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) 1.070952828s ago: executing program 4 (id=1401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2d}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x28, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000200), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f00000001c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "43b9dfb720598c2f"}, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x4000085) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newlinkprop={0x34, 0x6c, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x300a2}, [@IFLA_IFALIAS={0x14, 0x14, 'team0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004840}, 0x600c840) r4 = socket$inet(0x2, 0x3, 0x3) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, 0x0, &(0x7f0000000500)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000007112100000000000950000000000000060fefdcd10441a00c85d05f37bb5af67b5ceb210bac5a9dee6dab9a4159ef0410233ee115228fff976e00a0982148bcf74382aa53885a6e857c075b52fafb5bf889e33844b6d1a0bddd2034795a836fdc0efaf64baf26b3dc20667acb9c6af97d3834000027f8d109ffa89a8dafbb201059448e67fdf5056e13a7fc8e059d9e271aa95b66ea4d1649376bdf1031e153f376bdc9bfabb8895"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000001200)=0xe095, 0xfffffffffffffdc1) recvmsg(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/237, 0xed}], 0x1, &(0x7f0000000500)=""/166, 0xa6}, 0x1ce56b3cc29f7168) sendmsg$inet(r4, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000000)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) 991.143994ms ago: executing program 1 (id=1402): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000}, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 928.211279ms ago: executing program 0 (id=1403): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x46, 0x107, 0x70bd28, 0x25dfdbfc, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="15626db8d3f7006f2e8e51667a11776de74ae1aff797166b2ef4a594eb4f34b5db21d318fcbefee2d164e4c8b7e09e986a158ecfba25c98924161084cae4a11a5b761b063a52a12fbc26094eb3884aeca60b9063e6a4de39acaf201a64c855f73499e85c750e0a4ef19189581376498c17b770e7d93e9e30bd08d614a550962f00b6ce0adb512278", @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a50a000008000b00001000000600010007000000", @ANYRES64=r3], 0x34}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050003000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 925.298319ms ago: executing program 3 (id=1404): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="b108ed564c46382d459e97af1f95f341fbd292339998234c964b6835d72e63") r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xd, &(0x7f0000000040), 0x4) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), 0x0}, 0x20) ioctl$SIOCSIFMTU(r0, 0x8948, &(0x7f0000000080)={'vcan0\x00', 0xfffffffc}) socket$pppl2tp(0x18, 0x1, 0x1) 920.964008ms ago: executing program 2 (id=1405): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ffffff0000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 896.323879ms ago: executing program 4 (id=1406): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000680)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x44004) ioctl$FIONCLEX(r3, 0x5450) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES64=r0, @ANYBLOB="01980000131300001c0012800900010069706970000000000c00028008000300ac1e0001", @ANYRESDEC=r2], 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x2000) 793.810881ms ago: executing program 1 (id=1407): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$inet6(0xa, 0xa, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="71062abd7000fddbdf251a00000004002e80140005000100e3000600010040ff00df6bb22524543a6fa30100000021bcab6fb8276900"/63], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x80}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f00000000c0), 0x2c8, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00012326030000000000000a0000000000000000000000080001000a010102"], 0x24}}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0x65b4e000) writev(r7, &(0x7f00000004c0)=[{&(0x7f0000000400)="b7d7754e874a575e074447d289f439621ec799ab76977b41205c6a3edffdd342a7108536b250baf3d76598482b4fcc88ae379a8e619ceb1864e6d86f451f73a75712fe59700d2438be85918adb632aeaaa6fce55c1b0cb5834eb70c2d3ec9f265b1d017b5702d093fa6f4a3ec9bc1f3c1daa2f838456bd146add07c0d54c12f087cba48db4503baeca42bea133", 0x8d}], 0x1) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) close(r8) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x1000, 0x101, 0x88da, 0x9, 0x94, 0xa, 0x8}, 0x9c) close(r9) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r2}) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006002000800a000008002000", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 744.978539ms ago: executing program 2 (id=1408): read(0xffffffffffffffff, &(0x7f0000000580)=""/63, 0x3f) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtaction={0x14, 0x68, 0x1}, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x11a, 0x4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYRESDEC=r0], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x44840) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/223, 0xdf, 0x1, &(0x7f00000003c0)=""/199, 0xc7}, &(0x7f00000006c0)=0x40) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x2}) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000914e73f"], 0x4e}}, 0x20008000) 744.271497ms ago: executing program 0 (id=1409): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef64bd465b9780e2bbe408ccc58187feb0e3d43347f989007a7c63f6dae682ecb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259620618c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a30536455bb774f7f154263178151ea93f5774b56a7142047326f940e95b8489e1c5650f5c61299a295f79c88456521cffdef93e29f10f4a11f0ca134a375a7ecfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d9823659d1945258fc668950e5aacfa06e1a212661b3f57a266c90e64efc8d8f730867202a9ee94e6a1f851337c2c9671d98a19bdc132c153b3ad843bdd308a07ba8f50a20cfd2c8b94e86ea0af0a9e0e9789ffd38f9b86da101e2266700"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x0, 0x0, 0x10, 0x8, 0x22, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x20008000) 714.375198ms ago: executing program 3 (id=1410): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x24}, 0x94) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x7}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) pipe(&(0x7f0000002740)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x25d401, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xfff1}, {0x0, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4041}, 0x4040000) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70ad22, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xc, 0xf}, {}, {0xfff1, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x4000080) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xffe0, 0xc}, {0x0, 0xfff1}, {0x10}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000811}, 0x4041810) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES8=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRESHEX=r7, @ANYBLOB="0c005a80080089"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB='Z\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000129bd7000fcdbdf250200000008000c010900000007004000020000002c002580060003000100000005000d0008000000000001000200000006000200ff030000050005000000000008000b0105000000eb744614bc63192a5b3999d35077c716dc9a23da3d9511a2cef6b2cf9fc64ab94d3cb13a7367afad6042469b41ee"], 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, 0x0, &(0x7f0000000280)) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 711.215201ms ago: executing program 4 (id=1411): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40010) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184000630677fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x20005}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x40}}, 0x0) 576.760453ms ago: executing program 2 (id=1412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400f5000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084320000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020089000000240001800b0001007470726f7879000014000280080003400000001408000140000000000900010073797a30"], 0xf8}}, 0x0) 476.486416ms ago: executing program 4 (id=1413): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "3d8b00", "eb8e7ba12faf3700", "8000", "c16cb41f00bd22fc"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r1, &(0x7f0000000740)=[{&(0x7f00000002c0)="589224d2c334c1f63d8a621843f389412830dbab71374ae05f97e6e70c4963661dfdab277efd0f190d8751d9d425965e353e53940b202700ca7397ce47d12c2f1442b0af79f7afbc60261390920f78d8f8798aa12e3305b6400000020000000077148704b6cbfbb42d3228e32f061093a3e22906aed35e4407f6f2384f03957aa93423e7c21735d372423f3f1cc868b904373f127f13c5d68b907c74fdcc8d105e2e2538000000", 0xfeb7}], 0x1) close(0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x3, 0x3, 0x3}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{}], "00ba00"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'k'}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000400)=""/188, 0x44, 0xbc, 0x1}, 0x28) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in6=@loopback, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0xa0}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) getsockopt$packet_int(r4, 0x107, 0xb, 0x0, &(0x7f0000000040)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xa, 0xf}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0xffffffff}, @TCA_PIE_ECN={0x8}]}}]}, 0x40}}, 0x40) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x841}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007f000000000000000a00000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c4000000b70900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008900005a00000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 463.307575ms ago: executing program 2 (id=1414): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x58, r1, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x4ee4, 0x8, 0x40]}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r7, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xfffffbff, 0xfffffffd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc01}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x700000, 0x17}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r8, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_FAMILY={0x5, 0xd, 0x25}, @GTPA_FLOW={0x6}]}, 0x4c}}, 0x0) 440.489241ms ago: executing program 1 (id=1415): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x2e90) (async) close(r1) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x53}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000079109000000000197b0ae8ff0000002d50e8f098d7d23acbfe00a8edfaffff000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r3, r2}, 0xc) syz_emit_ethernet(0x6c, &(0x7f0000000140)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x2000000, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x9, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3d5]}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x7}}}}}}}}, 0x0) 372.886534ms ago: executing program 3 (id=1416): r0 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0xc}, {0x6}]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x4886) socket(0x28, 0x5, 0x0) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0xc}, {0x6}]}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x4886) (async) 372.424767ms ago: executing program 0 (id=1417): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000002d00)=@bloom_filter={0x21, 0x0, 0x0, 0x0, 0x24, 0x1, 0x8}, 0x48) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1e, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000082577f58a8f42eca84a11bdffcf700000000000081000000181100004409c8ac7bd19ae5e109257dd2964720039ee8c8fbe71d7077c0105f96702839683125e34c45b04738733a6ac6d86d3a6e7d8afeaa9d0414b478cb2ddf863e5fe99533384e8b55a500a54f8bba4a17e3c34bff8aacf871e26a8675e10c4e048f2f00f29d2440cb3eb7b75dd216dd54d5b8155fad9898b8003a83533b5354ddf1b20aecb50d7f48a7bddfd2a9a43d93a4c83575ee4696b470fdcd023d3579cf74", @ANYRES32=r0, @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x24}, 0x94) 290.827337ms ago: executing program 2 (id=1418): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff02"], 0xfdef) (async) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'erspan0\x00', @remote}) sendto$inet6(r0, &(0x7f0000000080)='\x00cb\\', 0x4, 0x400c800, 0x0, 0x0) 274.497103ms ago: executing program 4 (id=1419): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffe3e}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000080)={'macvtap0\x00', 0x2000}) 219.81697ms ago: executing program 1 (id=1420): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x4, 0x8}, 0xc) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r1, 0x25, 0x2, @val=@perf_event}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x0, 0x1, 0x2, 0x10, 0xffffffffffffffe1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94) 188.130576ms ago: executing program 0 (id=1421): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x400080, &(0x7f0000000040)={@_ha_fsid={[0xff, 0x86]}, {0x7, 0x3dbc, 0x5, 0x4}}, 0x1cc, &(0x7f0000000080), &(0x7f00000000c0)}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x3, 0x89, &(0x7f0000000140)="bab9d6f149bfc13a7650c5c8e52255d5e75ae4d632d44614835258788cd4e5ee50a6845facf513b329eb795bf3601a9d76b988500b474e0f3a1cc9b85c2045241a9b22d061a70116c0880e2e791da3169ca68f86ef9cab8fcff07524c0ebabaf2e6f94eec1b4eeea517f5d4d17ef96c46d49a6b74f098f1ead448208a16a362f7e68d8f7f5cd1af8c4", 0x5, 0x7, 0x9, 0x4, 0xffff, 0x2, 0x4, 'syz1\x00'}) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r2, 0x4) r3 = openat$cgroup_devices(r1, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000380)={'a', ' *:* ', 'rm\x00'}, 0x9) ioctl(r0, 0x665, &(0x7f00000003c0)="e88e4d3c1f6ec4681210332321d8f4c952443b99040d3e4dd2e7a2101bb9cdaec13c35aa5a472b3e9b8121aa2fdbbd7d883c9be3186fd5622a3f666c6b93a208bfff5bda62400f20886b8684d196e66a86276bf2024d16a898145f1c2906eb8164ef95300a2896b169f15b927150eab8afaff994aa3da38a499bd0ce511d538929711697de7938aeb9da3389a3810c619d11337b6625426df08a7609c8c5d7f0e0b0dfeff49c4d9bf359420bd10cbf6df4bdbd14fa63e311e8de7bc40543d170d522b88dd57279fcc78719e19958fc7ef609") sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e4b238333b76"}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x20048810) write$cgroup_devices(r3, &(0x7f0000000600)={'c', ' *:* ', 'w\x00'}, 0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000700)={0x2, 0x2, 0xad, &(0x7f0000000640)=""/173}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r5, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x20000041) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x28}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048045}, 0x40800) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000980)=0xffffffffffffffff, 0x4) openat$cgroup_devices(r0, &(0x7f00000009c0)='devices.allow\x00', 0x2, 0x0) connect$tipc(r0, &(0x7f0000000a00)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4}}, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x2010, r4, 0xb3216000) write$nci(0xffffffffffffffff, &(0x7f0000000a40)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x1}, 0x4) ioctl$XFS_IOC_ERROR_CLEARALL(r3, 0x40085875) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000a80)={0xf6d, {{0xa, 0x4e23, 0x3ff, @remote, 0x349}}}, 0x88) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000b40)=0x8, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000b80)={0x0, 0x4, 0x9}, &(0x7f0000000bc0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000c00)={r7, 0xc}, &(0x7f0000000c40)=0x8) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x40, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x40}}, 0x8050) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000f40)={0x3, &(0x7f0000000d80)=[{@none}, {@fixed}, {}]}) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x80, 0x0, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000180}, 0x20000000) connect$packet(r0, &(0x7f0000001180)={0x11, 0x6, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) 187.134047ms ago: executing program 3 (id=1422): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x3, 0x4}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x4a}, 0x20) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80101, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=')\x00', 0x2}], 0x1) (async) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=')\x00', 0x2}], 0x1) 105.040028ms ago: executing program 4 (id=1423): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x1200, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x4c80, 0x4) sendmmsg$unix(r4, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x51}}], 0x20, 0x20000010}}], 0x1, 0x3400c0c4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000002060108000000000000000000200000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574000007800800064020000000080013406fbb68db163e1d38fbf722cd74eedf484072f9e6bc2349d8ea000000"], 0x64}}, 0x20000000) r5 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) splice(r3, &(0x7f0000000100), r5, &(0x7f0000000140)=0x4, 0x2d80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x1200, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x4c80, 0x4) (async) sendmmsg$unix(r4, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x51}}], 0x20, 0x20000010}}], 0x1, 0x3400c0c4) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000002060108000000000000000000200000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574000007800800064020000000080013406fbb68db163e1d38fbf722cd74eedf484072f9e6bc2349d8ea000000"], 0x64}}, 0x20000000) (async) socket$inet(0x2, 0x3, 0x30) (async) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) (async) splice(r3, &(0x7f0000000100), r5, &(0x7f0000000140)=0x4, 0x2d80, 0x0) (async) 45.067298ms ago: executing program 2 (id=1424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400f5000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084410000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020089000000240001800b0001007470726f7879000014000280080003400000001408000140000000000900010073797a30"], 0xf8}}, 0x0) 44.411078ms ago: executing program 1 (id=1425): r0 = socket(0x10, 0x3, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/29, 0x1d, 0x80000022, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) 0s ago: executing program 0 (id=1426): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, &(0x7f0000000040)=0x13fe4c102fd7fdb3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. [ 65.778584][ T5613] cgroup: Unknown subsys name 'net' [ 65.910699][ T5613] cgroup: Unknown subsys name 'cpuset' [ 65.919381][ T5613] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.254665][ T5613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.397720][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.402841][ T5643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.407513][ T5641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.413133][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.420981][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.430011][ T5643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.437661][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.442496][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.449149][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.454606][ T5645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.462449][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.469897][ T5643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.485114][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.485555][ T5645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.492946][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.501320][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.510859][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.514380][ T5645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.531719][ T5645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.532187][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.539351][ T5645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.554137][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.554638][ T5645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.570747][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.579015][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.191112][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.199226][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.206901][ T5626] bridge_slave_0: entered allmulticast mode [ 71.214461][ T5626] bridge_slave_0: entered promiscuous mode [ 71.267959][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.275157][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.282429][ T5626] bridge_slave_1: entered allmulticast mode [ 71.289510][ T5626] bridge_slave_1: entered promiscuous mode [ 71.304013][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.311175][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.318705][ T5627] bridge_slave_0: entered allmulticast mode [ 71.325618][ T5627] bridge_slave_0: entered promiscuous mode [ 71.333990][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.335876][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.342746][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.347642][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.360920][ T5627] bridge_slave_1: entered allmulticast mode [ 71.368653][ T5627] bridge_slave_1: entered promiscuous mode [ 71.464507][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.481772][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.503185][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.522940][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.568039][ T50] Bluetooth: hci4: command tx timeout [ 71.600508][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.607866][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.615169][ T5628] bridge_slave_0: entered allmulticast mode [ 71.622357][ T5628] bridge_slave_0: entered promiscuous mode [ 71.645242][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.652798][ T50] Bluetooth: hci2: command tx timeout [ 71.652957][ T50] Bluetooth: hci3: command tx timeout [ 71.658394][ T5632] Bluetooth: hci1: command tx timeout [ 71.658558][ T5632] Bluetooth: hci0: command tx timeout [ 71.665742][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.682627][ T5625] bridge_slave_0: entered allmulticast mode [ 71.689712][ T5625] bridge_slave_0: entered promiscuous mode [ 71.699007][ T5626] team0: Port device team_slave_0 added [ 71.706591][ T5626] team0: Port device team_slave_1 added [ 71.712579][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.719755][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.727032][ T5628] bridge_slave_1: entered allmulticast mode [ 71.734221][ T5628] bridge_slave_1: entered promiscuous mode [ 71.742642][ T5627] team0: Port device team_slave_0 added [ 71.750751][ T5627] team0: Port device team_slave_1 added [ 71.756423][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.764086][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.771415][ T5629] bridge_slave_0: entered allmulticast mode [ 71.778370][ T5629] bridge_slave_0: entered promiscuous mode [ 71.785277][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.792630][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.799803][ T5625] bridge_slave_1: entered allmulticast mode [ 71.806781][ T5625] bridge_slave_1: entered promiscuous mode [ 71.848674][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.855823][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.863198][ T5629] bridge_slave_1: entered allmulticast mode [ 71.870260][ T5629] bridge_slave_1: entered promiscuous mode [ 71.925869][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.935983][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.943150][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.969325][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.983433][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.993359][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.000547][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.026728][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.051939][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.061778][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.068779][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.094930][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.107972][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.117759][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.124704][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.150816][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.164540][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.215564][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.229377][ T5625] team0: Port device team_slave_0 added [ 72.264351][ T5625] team0: Port device team_slave_1 added [ 72.282867][ T5628] team0: Port device team_slave_0 added [ 72.319031][ T5629] team0: Port device team_slave_0 added [ 72.335835][ T5628] team0: Port device team_slave_1 added [ 72.346181][ T5627] hsr_slave_0: entered promiscuous mode [ 72.352622][ T5627] hsr_slave_1: entered promiscuous mode [ 72.370451][ T5629] team0: Port device team_slave_1 added [ 72.376617][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.383849][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.409817][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.445367][ T5626] hsr_slave_0: entered promiscuous mode [ 72.451744][ T5626] hsr_slave_1: entered promiscuous mode [ 72.458287][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 72.464516][ T5626] Cannot create hsr debugfs directory [ 72.479302][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.486251][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.512395][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.530604][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.537579][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.563768][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.614398][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.621682][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.647670][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.665971][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.673025][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.699287][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.747903][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.754846][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.780880][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.836292][ T5625] hsr_slave_0: entered promiscuous mode [ 72.842630][ T5625] hsr_slave_1: entered promiscuous mode [ 72.848855][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 72.854576][ T5625] Cannot create hsr debugfs directory [ 72.925282][ T5628] hsr_slave_0: entered promiscuous mode [ 72.931748][ T5628] hsr_slave_1: entered promiscuous mode [ 72.938171][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 72.943895][ T5628] Cannot create hsr debugfs directory [ 73.034508][ T5629] hsr_slave_0: entered promiscuous mode [ 73.040996][ T5629] hsr_slave_1: entered promiscuous mode [ 73.047015][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 73.052795][ T5629] Cannot create hsr debugfs directory [ 73.394232][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.407031][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.414952][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.425748][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.447056][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.458594][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.466860][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.475923][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.549252][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.562740][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.571990][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.582447][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.590567][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.603311][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.612185][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.621444][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.648353][ T5632] Bluetooth: hci4: command tx timeout [ 73.715364][ T5625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.726187][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.728065][ T5632] Bluetooth: hci0: command tx timeout [ 73.733644][ T50] Bluetooth: hci2: command tx timeout [ 73.738779][ T5632] Bluetooth: hci3: command tx timeout [ 73.744874][ T5630] Bluetooth: hci1: command tx timeout [ 73.754004][ T5625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.764948][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.773163][ T5625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.783324][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.791390][ T5625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.801396][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.901679][ T5629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.912695][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.921601][ T5629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.934226][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.945398][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.971622][ T5629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.982692][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.991588][ T5629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.001803][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.060963][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.089026][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.096404][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.134006][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.141151][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.151952][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.161456][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.170023][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.180606][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.189044][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.198831][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.220698][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.231789][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.311492][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.341409][ T5627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.404262][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.429638][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.460974][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.468178][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.496361][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.526915][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.534199][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.546998][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.584471][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.591774][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.626329][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.640733][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.648135][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.679198][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.686315][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.698537][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.725313][ T3387] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.732433][ T3387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.771399][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.841911][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.849187][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.898337][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.905521][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.019851][ T5629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.234306][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.501869][ T5627] veth0_vlan: entered promiscuous mode [ 75.560765][ T5627] veth1_vlan: entered promiscuous mode [ 75.721856][ T5627] veth0_macvtap: entered promiscuous mode [ 75.737697][ T50] Bluetooth: hci4: command tx timeout [ 75.798534][ T5627] veth1_macvtap: entered promiscuous mode [ 75.807661][ T50] Bluetooth: hci3: command tx timeout [ 75.813686][ T5630] Bluetooth: hci0: command tx timeout [ 75.814811][ T4947] Bluetooth: hci1: command tx timeout [ 75.825046][ T5632] Bluetooth: hci2: command tx timeout [ 75.891278][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.935660][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.992003][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.040028][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.052025][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.068196][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.077765][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.110570][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.304216][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.328728][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.348830][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.357024][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.434422][ T5626] veth0_vlan: entered promiscuous mode [ 76.436268][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.473715][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.502155][ T5625] veth0_vlan: entered promiscuous mode [ 76.531938][ T5626] veth1_vlan: entered promiscuous mode [ 76.595910][ T5627] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.620068][ T5625] veth1_vlan: entered promiscuous mode [ 76.654337][ T5628] veth0_vlan: entered promiscuous mode [ 76.711233][ T5628] veth1_vlan: entered promiscuous mode [ 76.743015][ T5626] veth0_macvtap: entered promiscuous mode [ 76.789843][ T5626] veth1_macvtap: entered promiscuous mode [ 76.856751][ T5625] veth0_macvtap: entered promiscuous mode [ 76.884902][ T5629] veth0_vlan: entered promiscuous mode [ 76.895441][ T5628] veth0_macvtap: entered promiscuous mode [ 76.916081][ T5625] veth1_macvtap: entered promiscuous mode [ 76.919887][ T5828] netlink: 'syz.1.6': attribute type 1 has an invalid length. [ 76.933181][ T5628] veth1_macvtap: entered promiscuous mode [ 76.944490][ T5629] veth1_vlan: entered promiscuous mode [ 76.953179][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.984668][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.013615][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.024579][ T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.065274][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.081132][ T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.092623][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.119021][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.140104][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.156101][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.219852][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.242329][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.259267][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.269510][ T5629] veth0_macvtap: entered promiscuous mode [ 77.282754][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.333415][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.352018][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.368321][ T5629] veth1_macvtap: entered promiscuous mode [ 77.401619][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.404020][ T5836] Zero length message leads to an empty skb [ 77.465524][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.484298][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.500343][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.515399][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.531412][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.578431][ T3387] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.588127][ T3387] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.613369][ T1023] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.622555][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.633588][ T1023] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.643013][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.730288][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.741442][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.808774][ T5632] Bluetooth: hci4: command tx timeout [ 77.830570][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.843137][ T5852] netlink: 'syz.1.12': attribute type 1 has an invalid length. [ 77.852455][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.861606][ T5852] netlink: 244 bytes leftover after parsing attributes in process `syz.1.12'. [ 77.880983][ T5852] sctp: [Deprecated]: syz.1.12 (pid 5852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 77.880983][ T5852] Use struct sctp_sack_info instead [ 77.888655][ T5632] Bluetooth: hci2: command tx timeout [ 77.903919][ T4947] Bluetooth: hci1: command tx timeout [ 77.906312][ T5630] Bluetooth: hci0: command tx timeout [ 77.909534][ T4947] Bluetooth: hci3: command tx timeout [ 77.931965][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.953477][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.079945][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.113539][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.140439][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.168655][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.268333][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.296264][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.362082][ T5860] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13'. [ 78.639376][ T5872] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 78.705347][ T5875] Bluetooth: MGMT ver 1.23 [ 78.714245][ T5874] netlink: 1372 bytes leftover after parsing attributes in process `syz.1.16'. [ 78.855801][ T5882] xt_hashlimit: size too large, truncated to 1048576 [ 78.892000][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 78.944941][ T5879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'. [ 79.271207][ T5898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22'. [ 79.942195][ T5934] netlink: 288 bytes leftover after parsing attributes in process `syz.1.31'. [ 80.018674][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 80.183179][ T5944] xt_hashlimit: size too large, truncated to 1048576 [ 80.548674][ T5957] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 80.967038][ T5972] syzkaller0: entered promiscuous mode [ 80.999732][ T5988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.45'. [ 81.003949][ T5972] syzkaller0: entered allmulticast mode [ 81.300042][ T6003] openvswitch: netlink: Flow key attr not present in new flow. [ 82.639740][ T6017] macvlan0: entered promiscuous mode [ 83.061767][ T6044] __nla_validate_parse: 1 callbacks suppressed [ 83.061784][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 83.305392][ T6057] netlink: 'syz.1.64': attribute type 10 has an invalid length. [ 83.363773][ T6069] netlink: 'syz.1.64': attribute type 10 has an invalid length. [ 83.389734][ T6057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.424675][ T6057] team0: Port device netdevsim1 added [ 83.475230][ T6069] team0: Port device netdevsim1 removed [ 83.512798][ T6069] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.531309][ T6069] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 83.590274][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 83.764290][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 83.800360][ T6090] netlink: 64 bytes leftover after parsing attributes in process `syz.1.72'. [ 83.810615][ T6088] openvswitch: netlink: Missing key (keys=40, expected=80) [ 83.841727][ T6094] xt_hashlimit: size too large, truncated to 1048576 [ 84.156257][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 84.385078][ T6118] dvmrp0: entered allmulticast mode [ 84.393961][ T6126] netlink: 'syz.0.81': attribute type 30 has an invalid length. [ 84.508463][ T6128] netlink: 'syz.0.81': attribute type 2 has an invalid length. [ 84.650702][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.85'. [ 84.879947][ T6141] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 84.892430][ T6154] netlink: 'syz.2.89': attribute type 1 has an invalid length. [ 84.919099][ T6141] bond1 (unregistering): Released all slaves [ 85.264373][ T6170] netlink: 52 bytes leftover after parsing attributes in process `syz.0.93'. [ 85.290680][ T6171] warning: `syz.3.94' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.503199][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 85.520670][ T6183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.97'. [ 85.592519][ T6183] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.97'. [ 85.674521][ T6183] syz.3.97 uses obsolete (PF_INET,SOCK_PACKET) [ 85.882773][ T6200] netlink: 'syz.4.106': attribute type 21 has an invalid length. [ 85.994899][ T6207] netlink: 'syz.2.107': attribute type 1 has an invalid length. [ 86.220751][ T6218] netlink: 'syz.4.112': attribute type 1 has an invalid length. [ 86.335902][ T6221] tc_dump_action: action bad kind [ 86.360538][ T6226] x_tables: duplicate underflow at hook 2 [ 86.497049][ T6232] netem: change failed [ 86.530888][ T6232] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 86.731400][ T6248] xt_hashlimit: invalid rate [ 86.742011][ T9] cfg80211: failed to load regulatory.db [ 86.755835][ T6238] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 86.962875][ T6256] netlink: 'syz.2.124': attribute type 1 has an invalid length. [ 86.998480][ T6256] netlink: 'syz.2.124': attribute type 2 has an invalid length. [ 87.084371][ T6265] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.173641][ T6261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.209551][ T6275] Bluetooth: MGMT ver 1.23 [ 87.262172][ T6277] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 87.306916][ T24] IPVS: starting estimator thread 0... [ 87.437337][ T6284] IPVS: using max 27 ests per chain, 64800 per kthread [ 87.610900][ T6301] openvswitch: netlink: Invalid VLAN frame [ 88.036660][ T6323] bond1: option coupled_control: invalid value (115) [ 88.078113][ T6323] bond1 (unregistering): Released all slaves [ 88.245128][ T6341] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 88.283994][ T6339] macvlan2: entered promiscuous mode [ 88.289893][ T6339] macvlan2: entered allmulticast mode [ 88.296107][ T6339] bond1: entered promiscuous mode [ 88.301885][ T6339] bridge1: entered promiscuous mode [ 88.310612][ T6345] __nla_validate_parse: 15 callbacks suppressed [ 88.310628][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 88.325870][ T6339] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 88.338395][ T6339] bond1: left promiscuous mode [ 88.357278][ T6339] bridge1: left promiscuous mode [ 88.903870][ T6333] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 89.090927][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 89.164135][ T6385] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.167'. [ 89.178733][ T6383] bond2 (unregistering): Released all slaves [ 89.295618][ T6382] bond2 (unregistering): Released all slaves [ 89.344712][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 89.356395][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 89.378030][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.170'. [ 89.852235][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 89.933153][ T6424] validate_nla: 4 callbacks suppressed [ 89.933211][ T6424] netlink: 'syz.0.180': attribute type 12 has an invalid length. [ 89.955125][ T5635] IPVS: starting estimator thread 0... [ 90.047519][ T6429] IPVS: using max 35 ests per chain, 84000 per kthread [ 90.114294][ T6434] netlink: 35448 bytes leftover after parsing attributes in process `syz.1.183'. [ 90.132340][ T4947] Bluetooth: hci0: command 0x0401 tx timeout [ 90.169595][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 90.193018][ T6434] netlink: 260 bytes leftover after parsing attributes in process `syz.1.183'. [ 90.209756][ T6434] netlink: 'syz.1.183': attribute type 1 has an invalid length. [ 91.772298][ T6510] netlink: 'syz.1.206': attribute type 15 has an invalid length. [ 91.954615][ T6520] netlink: 'syz.2.210': attribute type 13 has an invalid length. [ 91.979396][ T6520] netlink: 'syz.2.210': attribute type 13 has an invalid length. [ 91.980553][ T1011] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.015555][ T1011] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.052383][ T1011] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.080419][ T1011] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.178537][ T6530] netlink: 'syz.4.213': attribute type 1 has an invalid length. [ 113.617663][ T6549] Bluetooth: MGMT ver 1.23 [ 113.688730][ T6557] __nla_validate_parse: 11 callbacks suppressed [ 113.688749][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.219'. [ 114.063491][ T6584] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 114.090718][ T6583] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 114.126386][ T6583] bond1: (slave lo): Enslaving as an active interface with an up link [ 114.138793][ T6583] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 114.461975][ T6589] macvlan0: entered promiscuous mode [ 114.532737][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 114.576958][ T6589] syzkaller0: entered promiscuous mode [ 114.593592][ T6589] syzkaller0: entered allmulticast mode [ 114.624559][ T6608] openvswitch: netlink: IP tunnel dst address not specified [ 114.636806][ T6608] netlink: 'syz.4.235': attribute type 21 has an invalid length. [ 114.765363][ T6615] netlink: 'syz.2.238': attribute type 17 has an invalid length. [ 114.799854][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 114.821616][ T6615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.238'. [ 115.179377][ T6625] IPVS: persistence engine module ip_vs_pe_À not found [ 116.121392][ T6615] gretap0: entered promiscuous mode [ 116.131006][ T6615] gretap0: left promiscuous mode [ 116.160506][ T6620] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 116.421382][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 116.446411][ T6645] syzkaller1: entered promiscuous mode [ 116.472866][ T6645] syzkaller1: entered allmulticast mode [ 116.502024][ T6654] netlink: 32 bytes leftover after parsing attributes in process `syz.1.250'. [ 116.812583][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 116.837613][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 116.947542][ T6676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.258'. [ 116.982020][ T6676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.993739][ T6679] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 117.073189][ T6680] bond2: entered allmulticast mode [ 117.258147][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 117.294630][ T6680] veth3: entered allmulticast mode [ 117.315421][ T6680] bond2: (slave veth3): Enslaving as an active interface with an up link [ 117.379872][ T6684] bond2 (unregistering): (slave veth3): Releasing backup interface [ 117.394242][ T6706] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 117.423545][ T6684] bond2 (unregistering): Released all slaves [ 117.711291][ T6717] netlink: 'syz.1.273': attribute type 1 has an invalid length. [ 117.721636][ T6717] netlink: 'syz.1.273': attribute type 2 has an invalid length. [ 118.399346][ T6758] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 118.468243][ T6765] netlink: 'syz.2.283': attribute type 10 has an invalid length. [ 118.668714][ T6761] bond1: option all_slaves_active: invalid value (222) [ 118.695630][ T6761] bond1 (unregistering): Released all slaves [ 118.902152][ T6754] bond2: (slave gretap1): making interface the new active one [ 118.911609][ T6754] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 118.926027][ T6765] team0: Port device dummy0 added [ 118.936058][ T6756] syzkaller1: entered promiscuous mode [ 118.944954][ T6756] syzkaller1: entered allmulticast mode [ 119.091543][ T6788] raw_sendmsg: syz.2.289 forgot to set AF_INET. Fix it! [ 119.478790][ T6811] openvswitch: netlink: Key type 42 is out of range max 32 [ 119.530923][ T6811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.587715][ T6815] __nla_validate_parse: 5 callbacks suppressed [ 119.587732][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.297'. [ 119.638763][ T6822] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20001 [ 119.720380][ T6826] batman_adv: batadv0: Adding interface: dummy0 [ 119.742146][ T6826] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.763912][ T6829] xt_hashlimit: size too large, truncated to 1048576 [ 119.789168][ T6826] batman_adv: batadv0: Interface activated: dummy0 [ 119.843556][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 120.043604][ T6843] pimreg: entered allmulticast mode [ 120.473569][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.312'. [ 120.483555][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.312'. [ 120.493440][ T6876] openvswitch: netlink: nsh attr 255 is out of range max 3 [ 120.587695][ T6882] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 120.601169][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 120.634533][ T6882] syzkaller0: entered promiscuous mode [ 120.636233][ T6887] netlink: 52 bytes leftover after parsing attributes in process `syz.2.315'. [ 120.647864][ T6882] syzkaller0: entered allmulticast mode [ 120.729519][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'. [ 120.765123][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 120.775385][ T6891] netlink: 2 bytes leftover after parsing attributes in process `syz.3.316'. [ 120.788205][ T6891] veth1_to_bridge: entered allmulticast mode [ 120.794589][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 121.092302][ T6909] netlink: 'syz.2.322': attribute type 2 has an invalid length. [ 121.835191][ T6954] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 121.926192][ T6951] macvlan2: entered promiscuous mode [ 121.931876][ T6951] macvlan2: entered allmulticast mode [ 122.264988][ T6983] xt_hashlimit: size too large, truncated to 1048576 [ 122.332130][ T6991] bridge0: port 3(gretap0) entered blocking state [ 122.368394][ T6991] bridge0: port 3(gretap0) entered disabled state [ 122.389953][ T6991] gretap0: entered allmulticast mode [ 122.420990][ T6991] gretap0: entered promiscuous mode [ 122.436736][ T6991] bridge0: port 3(gretap0) entered blocking state [ 122.444378][ T6991] bridge0: port 3(gretap0) entered forwarding state [ 122.678209][ T7012] netlink: 'syz.1.346': attribute type 1 has an invalid length. [ 122.742686][ T7012] bond1: entered promiscuous mode [ 122.748316][ T7012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.781995][ T7012] netlink: 'syz.1.346': attribute type 1 has an invalid length. [ 122.805582][ T7013] netlink: 'syz.1.346': attribute type 1 has an invalid length. [ 122.818918][ T7013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.831912][ T7012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.911945][ T7020] openvswitch: netlink: Unknown nsh attribute 0 [ 123.224397][ T7031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.461416][ T7048] bridge1: entered promiscuous mode [ 123.466779][ T7048] bridge1: entered allmulticast mode [ 123.498880][ T7038] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 123.843756][ T7068] sctp: [Deprecated]: syz.4.366 (pid 7068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.843756][ T7068] Use struct sctp_sack_info instead [ 123.909530][ T7068] sctp: [Deprecated]: syz.4.366 (pid 7068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.909530][ T7068] Use struct sctp_sack_info instead [ 124.413758][ T7093] netlink: 'syz.4.379': attribute type 21 has an invalid length. [ 124.437831][ T7093] netlink: 'syz.4.379': attribute type 1 has an invalid length. [ 124.462139][ T7093] netlink: 'syz.4.379': attribute type 11 has an invalid length. [ 124.481150][ T7093] netlink: 'syz.4.379': attribute type 11 has an invalid length. [ 124.845334][ T7116] __nla_validate_parse: 17 callbacks suppressed [ 124.845351][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 124.904290][ T7121] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 124.946312][ T7121] netlink: 96 bytes leftover after parsing attributes in process `syz.4.386'. [ 124.986940][ T7121] netlink: 658 bytes leftover after parsing attributes in process `syz.4.386'. [ 125.114233][ T7121] netlink: 'syz.4.386': attribute type 2 has an invalid length. [ 125.209472][ T7128] netlink: 'syz.4.386': attribute type 16 has an invalid length. [ 125.263965][ T7121] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.268223][ T7128] netlink: 'syz.4.386': attribute type 17 has an invalid length. [ 125.311550][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 125.316981][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.409506][ T4947] Bluetooth: hci3: command 0x0401 tx timeout [ 125.506647][ T7157] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.395'. [ 125.562506][ T7157] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 125.631554][ T7160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.395'. [ 125.658462][ T7137] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 125.955575][ T7128] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.963841][ T7128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.975513][ T7128] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.982735][ T7128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.991649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 126.135884][ T7128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.146699][ T7128] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 126.193209][ T47] bond1: (slave bridge1): link status definitely up, 0 Mbps full duplex [ 126.229435][ T47] bond1: active interface up! [ 126.548431][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 126.599353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 126.842346][ T7208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.408'. [ 126.872708][ T7215] xt_hashlimit: size too large, truncated to 1048576 [ 126.941720][ T7218] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.984703][ T7218] bridge_slave_0 (unregistering): left allmulticast mode [ 127.004705][ T7218] bridge_slave_0 (unregistering): left promiscuous mode [ 127.046676][ T7218] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.056037][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880584c1800: rx timeout, send abort [ 127.556201][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880584c2c00: rx timeout, send abort [ 127.565569][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880584c1800: abort rx timeout. Force session deactivation [ 127.656405][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 127.819819][ T7254] netlink: 180 bytes leftover after parsing attributes in process `syz.1.423'. [ 127.901647][ T7261] validate_nla: 1 callbacks suppressed [ 127.901674][ T7261] netlink: 'syz.2.426': attribute type 63 has an invalid length. [ 128.064626][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880584c2c00: abort rx timeout. Force session deactivation [ 128.941648][ T7319] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 129.114536][ T7330] netlink: 'syz.0.443': attribute type 10 has an invalid length. [ 129.115917][ T7334] netlink: 'syz.3.445': attribute type 5 has an invalid length. [ 129.159456][ T7330] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.201556][ T7330] bond0: (slave team0): Enslaving as an active interface with an up link [ 129.204171][ T7334] trusted_key: syz.3.445 sent an empty control message without MSG_MORE. [ 129.234715][ T7335] syzkaller0: entered promiscuous mode [ 129.262010][ T7335] syzkaller0: entered allmulticast mode [ 129.433689][ T7347] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 129.435738][ T7343] : entered promiscuous mode [ 129.693158][ T7360] netlink: 'syz.4.454': attribute type 1 has an invalid length. [ 129.811034][ T7357] macvlan0: left promiscuous mode [ 129.832214][ T7357] netlink: 'syz.1.453': attribute type 1 has an invalid length. [ 129.868134][ T7357] netlink: 'syz.1.453': attribute type 2 has an invalid length. [ 130.018105][ T7360] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.030787][ T7364] ip_vti0: entered promiscuous mode [ 130.041375][ T7369] netlink: 'syz.2.455': attribute type 11 has an invalid length. [ 130.298333][ T24] IPVS: starting estimator thread 0... [ 130.349621][ T7388] __nla_validate_parse: 2 callbacks suppressed [ 130.349637][ T7388] netlink: 96 bytes leftover after parsing attributes in process `syz.2.462'. [ 130.397274][ T7393] IPVS: using max 34 ests per chain, 81600 per kthread [ 130.700574][ T7414] xt_hashlimit: size too large, truncated to 1048576 [ 130.828620][ T7421] xt_hashlimit: size too large, truncated to 1048576 [ 130.841581][ T7423] gtp0: entered promiscuous mode [ 130.860199][ T7423] gtp0: entered allmulticast mode [ 130.870131][ T7426] netlink: 'syz.3.469': attribute type 64 has an invalid length. [ 130.881062][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 130.904782][ T7426] netlink: 5 bytes leftover after parsing attributes in process `syz.3.469'. [ 131.163145][ T7448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.471'. [ 131.434484][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 131.605430][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.478'. [ 131.743825][ T7470] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 131.763707][ T7469] macvtap0: entered allmulticast mode [ 131.778766][ T7469] veth0_macvtap: entered allmulticast mode [ 131.933522][ T7480] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 131.960398][ T7470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.990035][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.488'. [ 132.005807][ T7489] sctp: [Deprecated]: syz.2.487 (pid 7489) Use of int in maxseg socket option. [ 132.005807][ T7489] Use struct sctp_assoc_value instead [ 132.063238][ T7475] bond2: (slave veth3): Enslaving as an active interface with a down link [ 132.118993][ T7476] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 132.147025][ T7476] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 132.211979][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 132.236091][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 132.404478][ T7503] bond1: Invalid ad_actor_system MAC address. [ 132.442307][ T7503] bond1: option ad_actor_system: invalid value (1) [ 132.489926][ T7503] bond1 (unregistering): Released all slaves [ 132.768896][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.777811][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.788241][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.130745][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'. [ 133.433966][ T146] nci: nci_rsp_packet: unknown rsp opcode 0x400 [ 133.997029][ T7604] netem: incorrect gi model size [ 134.003172][ T7604] netem: change failed [ 134.207461][ T7565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.434287][ T7619] netlink: 'syz.2.521': attribute type 13 has an invalid length. [ 134.468634][ T7619] veth1_macvtap: left promiscuous mode [ 134.488795][ T7619] macsec0: entered allmulticast mode [ 135.443963][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.459043][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.574738][ T7689] netlink: 'syz.3.539': attribute type 8 has an invalid length. [ 135.626145][ T7677] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.633446][ T7677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.644127][ T7677] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.651403][ T7677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.742670][ T7677] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 135.773160][ T7677] bridge1: left promiscuous mode [ 135.785681][ T7677] bridge1: left allmulticast mode [ 135.825784][ T5291] veth0_macvtap: left promiscuous mode [ 135.932465][ T7702] __nla_validate_parse: 10 callbacks suppressed [ 135.932482][ T7702] netlink: 120 bytes leftover after parsing attributes in process `syz.1.545'. [ 136.221521][ T7719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.547'. [ 136.459517][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.552'. [ 136.551535][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'. [ 137.145255][ T7773] syzkaller1: entered promiscuous mode [ 137.164326][ T7773] syzkaller1: entered allmulticast mode [ 137.304328][ T7788] netlink: 'syz.2.565': attribute type 24 has an invalid length. [ 137.483979][ T7793] x_tables: duplicate underflow at hook 1 [ 137.969581][ T7779] netlink: 212176 bytes leftover after parsing attributes in process `syz.1.563'. [ 138.015956][ T7779] openvswitch: netlink: Duplicate or invalid key (type 0). [ 138.045637][ T7779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.046759][ T7812] netlink: 51 bytes leftover after parsing attributes in process `syz.3.572'. [ 138.100168][ T7816] bond1: (slave lo): Releasing backup interface [ 138.110791][ T7816] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 138.151317][ T7816] bond0: (slave team0): Releasing backup interface [ 138.183670][ T7816] bridge_slave_0: left allmulticast mode [ 138.200179][ T7816] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.231233][ T7816] bridge_slave_1: left allmulticast mode [ 138.243674][ T7816] bridge_slave_1: left promiscuous mode [ 138.260486][ T7816] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.288655][ T7816] bond0: (slave bond_slave_0): Releasing backup interface [ 138.299836][ T7832] netlink: 'syz.2.575': attribute type 2 has an invalid length. [ 138.318902][ T7832] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 138.335282][ T7816] bond0: (slave bond_slave_1): Releasing backup interface [ 138.357894][ T7816] team0: Port device team_slave_0 removed [ 138.378025][ T7816] team0: Port device team_slave_1 removed [ 138.386119][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.395812][ T7816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.404673][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.412614][ T7816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.422495][ T7816] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 138.793411][ T7851] netlink: 16 bytes leftover after parsing attributes in process `syz.0.581'. [ 138.849490][ T7853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.581'. [ 138.919486][ T7856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.972071][ T7862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.990031][ T7864] netlink: 40 bytes leftover after parsing attributes in process `syz.3.583'. [ 138.999201][ T7861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.022246][ T7859] netlink: 'syz.3.583': attribute type 2 has an invalid length. [ 139.323621][ T7874] netlink: 248 bytes leftover after parsing attributes in process `syz.3.588'. [ 139.848240][ T7894] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 139.858977][ T7894] syzkaller1: group set to 0 [ 139.867471][ T7898] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 139.883983][ T7896] syzkaller0: entered promiscuous mode [ 139.890460][ T7896] syzkaller0: entered allmulticast mode [ 139.943846][ T7894] IPv6: sit2: Disabled Multicast RS [ 140.146899][ T7909] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 140.474326][ T7926] veth0: entered promiscuous mode [ 140.536512][ T7926] veth0 (unregistering): left promiscuous mode [ 140.763279][ T7943] netlink: 'syz.3.605': attribute type 29 has an invalid length. [ 140.784620][ T7944] netlink: 'syz.3.605': attribute type 29 has an invalid length. [ 141.071133][ T7953] syzkaller1: entered promiscuous mode [ 141.104883][ T7953] syzkaller1: entered allmulticast mode [ 141.134128][ T7963] syzkaller0: entered promiscuous mode [ 141.153233][ T7963] syzkaller0: entered allmulticast mode [ 141.239684][ T7965] veth0: entered promiscuous mode [ 141.311999][ T7965] veth0: left promiscuous mode [ 141.675544][ T7988] __nla_validate_parse: 5 callbacks suppressed [ 141.675562][ T7988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.620'. [ 141.744638][ T7990] netlink: 'syz.2.620': attribute type 83 has an invalid length. [ 142.562369][ T8035] syzkaller0: entered promiscuous mode [ 142.572134][ T8035] syzkaller0: entered allmulticast mode [ 142.634515][ T8048] netlink: 'syz.0.637': attribute type 4 has an invalid length. [ 142.658913][ T8048] netlink: 152 bytes leftover after parsing attributes in process `syz.0.637'. [ 144.145966][ T8048] .`: renamed from bond0 (while UP) [ 144.171444][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'. [ 144.725795][ T8095] netlink: 56 bytes leftover after parsing attributes in process `syz.0.649'. [ 145.072294][ T8095] bond0 (unregistering): Released all slaves [ 145.136155][ T8102] netlink: 40 bytes leftover after parsing attributes in process `syz.3.652'. [ 145.223343][ T8105] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 145.393601][ T8119] IPVS: rr: FWM 3 0x00000003 - no destination available [ 145.501822][ T8122] netlink: 'syz.4.655': attribute type 32 has an invalid length. [ 145.527418][ T8122] netlink: 776 bytes leftover after parsing attributes in process `syz.4.655'. [ 145.560895][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 145.617586][ T8127] netlink: 'syz.3.656': attribute type 1 has an invalid length. [ 145.849360][ T8134] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 145.962658][ T8135] bridge0: port 3(syz_tun) entered blocking state [ 145.987812][ T8135] bridge0: port 3(syz_tun) entered disabled state [ 145.994522][ T8135] syz_tun: entered allmulticast mode [ 146.002744][ T8135] syz_tun: entered promiscuous mode [ 146.013983][ T8135] bridge0: port 3(syz_tun) entered blocking state [ 146.020588][ T8135] bridge0: port 3(syz_tun) entered forwarding state [ 146.983574][ T8173] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 147.025085][ T8173] bond2 (unregistering): Released all slaves [ 147.048147][ T8183] x_tables: unsorted underflow at hook 2 [ 147.102657][ T8183] xt_nat: multiple ranges no longer supported [ 147.552727][ T8206] netlink: 'syz.1.673': attribute type 62 has an invalid length. [ 147.581091][ T8206] netlink: 'syz.1.673': attribute type 62 has an invalid length. [ 147.590982][ T8206] netlink: 'syz.1.673': attribute type 62 has an invalid length. [ 147.910121][ T8220] netlink: 'syz.0.676': attribute type 29 has an invalid length. [ 147.942788][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 147.980679][ T8228] netlink: 'syz.0.676': attribute type 29 has an invalid length. [ 148.003017][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 148.108455][ T8234] netlink: 'syz.4.678': attribute type 2 has an invalid length. [ 148.523595][ T8244] Driver unsupported XDP return value 0 on prog (id 137) dev N/A, expect packet loss! [ 148.570887][ T8249] netlink: 'syz.2.684': attribute type 5 has an invalid length. [ 149.014703][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 149.023331][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.034051][ T8277] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.062936][ T8281] netlink: 68 bytes leftover after parsing attributes in process `syz.3.693'. [ 149.086745][ T8281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.693'. [ 149.138954][ T8272] bond0: entered promiscuous mode [ 149.151600][ T8277] netlink: 43 bytes leftover after parsing attributes in process `syz.2.692'. [ 149.162616][ T8272] bond_slave_0: entered promiscuous mode [ 149.192199][ T8272] bond_slave_1: entered promiscuous mode [ 149.216458][ T8272] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 149.226410][ T8290] xt_policy: output policy not valid in PREROUTING and INPUT [ 149.256912][ T8272] bond0: left promiscuous mode [ 149.268811][ T8272] bond_slave_0: left promiscuous mode [ 149.282201][ T8272] bond_slave_1: left promiscuous mode [ 149.294482][ T8272] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 149.495269][ T8306] netlink: 'syz.0.699': attribute type 39 has an invalid length. [ 149.706821][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'. [ 149.734914][ T8323] netlink: 44 bytes leftover after parsing attributes in process `syz.1.703'. [ 149.760486][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'. [ 149.843812][ T8327] netlink: 'syz.3.704': attribute type 1 has an invalid length. [ 149.888010][ T8331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.950604][ T8327] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.032172][ T8333] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 150.063141][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 150.072827][ T8339] netlink: 'syz.2.707': attribute type 22 has an invalid length. [ 150.132583][ T8327] macvlan3: entered promiscuous mode [ 150.143628][ T8327] macvlan3: entered allmulticast mode [ 150.160091][ T8327] bond4: entered promiscuous mode [ 150.173308][ T8327] veth0_to_bond: entered promiscuous mode [ 150.206216][ T8327] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 150.253126][ T8327] bond4: left promiscuous mode [ 150.271161][ T8327] veth0_to_bond: left promiscuous mode [ 150.745301][ T47] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 151.147671][ T8400] bond5: entered promiscuous mode [ 151.162120][ T8400] 8021q: adding VLAN 0 to HW filter on device bond5 [ 151.846971][ T8438] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 151.861675][ T8438] bond0 (unregistering): Released all slaves [ 153.442417][ T8359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.481813][ T4947] block nbd0: Receive control failed (result -32) [ 153.488992][ T8435] validate_nla: 1 callbacks suppressed [ 153.489009][ T8435] netlink: 'syz.0.722': attribute type 1 has an invalid length. [ 153.539991][ T8435] __nla_validate_parse: 3 callbacks suppressed [ 153.540007][ T8435] netlink: 96 bytes leftover after parsing attributes in process `syz.0.722'. [ 153.583190][ T8435] netlink: 'syz.0.722': attribute type 1 has an invalid length. [ 153.607447][ T8435] netlink: 'syz.0.722': attribute type 8 has an invalid length. [ 153.627507][ T8435] netlink: 582 bytes leftover after parsing attributes in process `syz.0.722'. [ 153.731358][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.726'. [ 153.772175][ T8519] netlink: 132 bytes leftover after parsing attributes in process `syz.3.725'. [ 153.835340][ T8521] netlink: 76 bytes leftover after parsing attributes in process `syz.2.727'. [ 154.031894][ T8536] netlink: 1371 bytes leftover after parsing attributes in process `syz.4.733'. [ 154.035836][ T8535] netlink: 168 bytes leftover after parsing attributes in process `syz.0.731'. [ 154.299885][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.737'. [ 154.325627][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.737'. [ 154.342598][ T8546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.737'. [ 155.099909][ T8579] xt_hashlimit: size too large, truncated to 1048576 [ 155.188318][ T8587] vlan2: entered promiscuous mode [ 155.198244][ T8587] hsr0: entered promiscuous mode [ 155.207822][ T8587] vlan2: entered allmulticast mode [ 155.221863][ T8587] hsr0: entered allmulticast mode [ 155.234654][ T8587] hsr_slave_0: entered allmulticast mode [ 155.253483][ T8587] hsr_slave_1: entered allmulticast mode [ 155.485141][ T8587] netlink: 'syz.3.749': attribute type 11 has an invalid length. [ 155.510343][ T8591] xfrm1: entered promiscuous mode [ 155.534229][ T8591] xfrm1: entered allmulticast mode [ 155.767915][ T8611] veth0_macvtap: left promiscuous mode [ 157.649036][ T8686] syzkaller0: entered promiscuous mode [ 157.666240][ T8686] syzkaller0: entered allmulticast mode [ 158.186754][ T8706] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 159.222773][ T8723] bond2: entered allmulticast mode [ 160.812741][ T8778] netlink: 'syz.4.831': attribute type 11 has an invalid length. [ 160.832658][ T8778] __nla_validate_parse: 6 callbacks suppressed [ 160.832677][ T8778] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.831'. [ 161.026958][ T8781] netlink: 'syz.4.832': attribute type 64 has an invalid length. [ 162.516425][ T8783] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.833'. [ 162.564115][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'. [ 162.886031][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.839'. [ 162.916887][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.839'. [ 163.215450][ T8824] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.845'. [ 163.366517][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 164.023740][ T8862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.860'. [ 164.274183][ T8883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.866'. [ 164.314435][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 164.377907][ T8883] hsr_slave_1 (unregistering): left promiscuous mode [ 164.482461][ T8895] netlink: 'syz.1.870': attribute type 1 has an invalid length. [ 164.590126][ T8895] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.629763][ T8902] netlink: 'syz.2.873': attribute type 1 has an invalid length. [ 164.704701][ T8895] bond3: (slave geneve2): making interface the new active one [ 164.719106][ T8895] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 164.729000][ T146] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 164.740026][ T146] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 164.755980][ T146] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 164.759590][ T8910] netlink: 'syz.2.875': attribute type 1 has an invalid length. [ 164.791569][ T47] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 164.903290][ T8910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.939783][ T8912] bond1: (slave veth0_to_bond): making interface the new active one [ 164.951892][ T8912] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 165.049395][ T8913] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.064095][ T8913] bond1: (slave bond2): Enslaving as an active interface with a down link [ 165.344029][ T8942] Bluetooth: MGMT ver 1.23 [ 165.348723][ T8942] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 165.608421][ T8955] tipc: Started in network mode [ 165.614806][ T8955] tipc: Node identity ac14140f, cluster identity 4711 [ 165.622685][ T8955] tipc: New replicast peer: 255.255.255.255 [ 165.630647][ T8955] tipc: Enabled bearer , priority 10 [ 165.869931][ T8966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.963248][ T8975] netlink: 'syz.3.893': attribute type 3 has an invalid length. [ 165.992014][ T8975] netlink: 'syz.3.893': attribute type 1 has an invalid length. [ 166.002594][ T8972] tc action pedit 'at' offset 56424 out of bounds [ 166.010150][ T8972] tc action pedit 'at' offset 56424 out of bounds [ 166.016648][ T8972] tc action pedit 'at' offset 56424 out of bounds [ 166.023162][ T8972] tc action pedit 'at' offset 56424 out of bounds [ 166.029668][ T8972] tc action pedit 'at' offset 56424 out of bounds [ 166.036097][ T8972] tc action pedit 'at' offset 56424 out of bounds [ 166.042870][ T8972] tc action pedit 'at' offset 56424 out of bounds [ 166.049408][ T8972] tc action pedit 'at' offset 56424 out of bounds [ 166.056268][ T8972] tc action pedit 'at' offset 56424 out of bounds [ 166.063239][ T8972] tc action pedit 'at' offset 56424 out of bounds [ 166.069673][ T8972] 0: reclassify loop, rule prio 0, protocol 800 [ 166.080377][ T8974] __nla_validate_parse: 4 callbacks suppressed [ 166.080393][ T8974] netlink: 140 bytes leftover after parsing attributes in process `syz.4.896'. [ 166.097240][ T8975] netlink: 212 bytes leftover after parsing attributes in process `syz.3.893'. [ 166.112692][ T8975] NCSI netlink: No device for ifindex 813332851 [ 166.166879][ T8981] netlink: 'syz.2.898': attribute type 1 has an invalid length. [ 166.639449][ T5631] tipc: Node number set to 2886997007 [ 166.730448][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.906'. [ 166.759009][ T9017] netlink: 20 bytes leftover after parsing attributes in process `syz.3.908'. [ 166.976437][ T9031] xt_hashlimit: size too large, truncated to 1048576 [ 166.990176][ T9027] geneve2: entered promiscuous mode [ 167.002864][ T9027] geneve2: entered allmulticast mode [ 167.021136][ T1177] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 167.038281][ T1177] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 167.072997][ T9032] erspan0: entered promiscuous mode [ 167.094116][ T9036] sctp: [Deprecated]: syz.2.912 (pid 9036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.094116][ T9036] Use struct sctp_sack_info instead [ 167.103094][ T9032] erspan0: entered allmulticast mode [ 167.186661][ T9040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.912'. [ 167.203069][ T9032] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 167.219020][ T1177] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 167.235930][ T1177] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 167.349270][ T9044] openvswitch: netlink: Missing key (keys=40, expected=100) [ 167.551896][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 167.739914][ T9064] netlink: 9 bytes leftover after parsing attributes in process `syz.4.923'. [ 167.788447][ T9066] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 167.821417][ T9066] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 167.826536][ T9070] openvswitch: netlink: IP tunnel dst address not specified [ 167.933027][ T9064] vlan0: entered promiscuous mode [ 168.134119][ T9078] netlink: 'syz.3.929': attribute type 8 has an invalid length. [ 168.159918][ T9080] xt_hashlimit: size too large, truncated to 1048576 [ 168.354991][ T9095] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20004 [ 169.087690][ T9137] bond0 (unregistering): Released all slaves [ 169.134754][ T9135] syzkaller0: entered promiscuous mode [ 169.141284][ T9135] syzkaller0: entered allmulticast mode [ 169.360183][ T9153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.654783][ T9175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.953'. [ 169.802231][ T9181] tipc: Enabling of bearer rejected, failed to enable media [ 169.995794][ T9186] openvswitch: netlink: EtherType 50a is less than min 600 [ 170.031760][ T9187] xt_hashlimit: size too large, truncated to 1048576 [ 170.050976][ T9195] openvswitch: netlink: EtherType 50a is less than min 600 [ 170.205291][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 170.253585][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.963'. [ 170.281143][ T146] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.309098][ T146] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.335286][ T146] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.351858][ T146] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.363990][ T9204] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 170.384705][ T9204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.413216][ T9204] xt_cgroup: invalid path, errno=-2 [ 170.574593][ T9212] netlink: 'syz.0.967': attribute type 1 has an invalid length. [ 170.609854][ T9217] syzkaller1: entered promiscuous mode [ 170.623333][ T9217] syzkaller1: entered allmulticast mode [ 171.219003][ T9257] __nla_validate_parse: 4 callbacks suppressed [ 171.219020][ T9257] netlink: 52 bytes leftover after parsing attributes in process `syz.2.978'. [ 171.263615][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'. [ 171.293530][ T9261] netlink: 'syz.0.982': attribute type 1 has an invalid length. [ 171.306084][ T9261] netlink: 224 bytes leftover after parsing attributes in process `syz.0.982'. [ 171.576660][ T9267] syzkaller0: entered promiscuous mode [ 171.603034][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 171.621055][ T9267] syzkaller0: entered allmulticast mode [ 171.992709][ T9301] netlink: 165 bytes leftover after parsing attributes in process `syz.3.989'. [ 172.175077][ T9312] xt_hashlimit: size too large, truncated to 1048576 [ 173.000296][ T9341] xt_hashlimit: size too large, truncated to 1048576 [ 173.131869][ T9295] 8021q: adding VLAN 0 to HW filter on device .` [ 173.145798][ T9295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.341938][ T9295] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 173.583397][ T9317] vlan2: entered allmulticast mode [ 173.594561][ T9317] bond0: entered allmulticast mode [ 173.605859][ T9317] bond_slave_0: entered allmulticast mode [ 173.618579][ T9317] bond_slave_1: entered allmulticast mode [ 173.666513][ T146] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.685747][ T146] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.706454][ T146] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 173.746629][ T146] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.790100][ T146] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.821182][ T146] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 173.976179][ T146] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.982779][ T9376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1002'. [ 174.022042][ T146] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.047214][ T146] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 174.061136][ T146] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.071644][ T146] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.124617][ T146] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 174.363954][ T9388] tipc: Failed to remove unknown binding: 66,1,1/0:2324381438/2324381440 [ 174.385332][ T9388] tipc: Failed to remove unknown binding: 66,1,1/0:2324381438/2324381440 [ 174.404761][ T9389] veth1_macvtap: entered promiscuous mode [ 174.438615][ T9389] macsec1: entered promiscuous mode [ 174.466714][ T9389] veth1_macvtap: left promiscuous mode [ 174.479474][ T9391] netlink: 'syz.4.1005': attribute type 142 has an invalid length. [ 174.763343][ T9404] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1009'. [ 175.123922][ T9411] syz.3.1012 (9411) used greatest stack depth: 17944 bytes left [ 175.157840][ T9422] x_tables: duplicate underflow at hook 1 [ 175.227127][ T9428] netlink: 'syz.3.1018': attribute type 28 has an invalid length. [ 175.240262][ T9425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1017'. [ 175.269235][ T9428] netlink: 'syz.3.1018': attribute type 3 has an invalid length. [ 175.298240][ T9428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1018'. [ 175.642000][ T9449] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 175.670917][ T24] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 175.736876][ T9461] pim6reg: entered allmulticast mode [ 175.752650][ T9463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1026'. [ 175.778702][ T9461] bridge0: port 3(syz_tun) entered disabled state [ 175.863105][ T9461] syz_tun (unregistering): left allmulticast mode [ 175.873581][ T9461] syz_tun (unregistering): left promiscuous mode [ 175.881913][ T9461] bridge0: port 3(syz_tun) entered disabled state [ 176.020161][ T9467] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 176.068437][ T9467] bond4 (unregistering): Released all slaves [ 176.438199][ T9487] netlink: 'syz.3.1034': attribute type 1 has an invalid length. [ 176.529932][ T9487] bond6: entered promiscuous mode [ 176.535872][ T9487] 8021q: adding VLAN 0 to HW filter on device bond6 [ 176.598207][ T9487] bond6: (slave bridge4): making interface the new active one [ 176.613256][ T9487] bridge4: entered promiscuous mode [ 176.654787][ T9487] bridge4: left promiscuous mode [ 177.050504][ T9524] netlink: 'syz.3.1041': attribute type 4 has an invalid length. [ 177.418270][ T9541] netlink: 'syz.1.1047': attribute type 1 has an invalid length. [ 177.516742][ T9541] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.556902][ T9546] vlan2: entered promiscuous mode [ 177.562161][ T9546] bond4: entered promiscuous mode [ 177.568017][ T9546] vlan2: entered allmulticast mode [ 177.573256][ T9546] bond4: entered allmulticast mode [ 177.601081][ T9541] bond4: (slave bridge3): making interface the new active one [ 177.608738][ T9541] bridge3: entered promiscuous mode [ 177.614367][ T9541] bridge3: entered allmulticast mode [ 177.622531][ T9541] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 177.633144][ T9543] syzkaller0: entered promiscuous mode [ 177.641824][ T9543] syzkaller0: entered allmulticast mode [ 178.078740][ T42] IPVS: starting estimator thread 0... [ 178.088686][ T9556] IPVS: ip_vs_add_dest(): server weight less than zero [ 178.187396][ T9557] IPVS: using max 32 ests per chain, 76800 per kthread [ 178.257729][ T9562] bridge0: port 1(ipvlan2) entered blocking state [ 178.272436][ T9562] bridge0: port 1(ipvlan2) entered disabled state [ 178.286801][ T9562] ipvlan2: entered allmulticast mode [ 178.303282][ T9562] bridge0: entered allmulticast mode [ 178.320653][ T9562] ipvlan2: left allmulticast mode [ 178.331936][ T9562] bridge0: left allmulticast mode [ 178.569358][ T9581] pimreg: entered allmulticast mode [ 178.601088][ T9586] xt_hashlimit: size too large, truncated to 1048576 [ 178.613395][ T9583] ip6tnl2: entered allmulticast mode [ 178.933564][ T9599] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 179.095903][ T9602] IPVS: length: 257 != 24 [ 179.464341][ T9610] syz_tun: entered allmulticast mode [ 179.503845][ T9610] pimreg: entered allmulticast mode [ 179.540488][ T9608] syz_tun: left allmulticast mode [ 179.685457][ T9622] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 179.811035][ T9626] __nla_validate_parse: 4 callbacks suppressed [ 179.811053][ T9626] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1075'. [ 179.839374][ T9626] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1075'. [ 179.945891][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'. [ 179.979708][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1078'. [ 180.010954][ T9635] netlink: 'syz.4.1078': attribute type 2 has an invalid length. [ 180.261951][ T9645] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac14:14aa [ 180.442898][ T9651] ip6gre1: entered allmulticast mode [ 180.657400][ T9662] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1088'. [ 180.666846][ T9662] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 180.702148][ T9664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1089'. [ 180.883300][ T9669] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 180.942176][ T9669] bond4 (unregistering): Released all slaves [ 181.106263][ T9685] openvswitch: netlink: IP tunnel dst address not specified [ 181.124719][ T9685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.148803][ T9685] syzkaller0: entered promiscuous mode [ 181.161971][ T9685] syzkaller0: entered allmulticast mode [ 181.373049][ T9693] netlink: 'syz.3.1100': attribute type 4 has an invalid length. [ 181.397561][ T9693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1100'. [ 181.483956][ T9698] netlink: 'syz.1.1103': attribute type 7 has an invalid length. [ 181.507095][ T9702] vlan3: entered allmulticast mode [ 181.528559][ T9702] bond0: entered allmulticast mode [ 181.549861][ T9702] bond_slave_0: entered allmulticast mode [ 181.590316][ T9702] bond_slave_1: entered allmulticast mode [ 181.650143][ T7431] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.670038][ T7431] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.738010][ T7431] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.785224][ T7431] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.232017][ T9753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.408098][ T9764] netlink: 'syz.0.1119': attribute type 1 has an invalid length. [ 182.418058][ T9764] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1119'. [ 182.886981][ T9794] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1129'. [ 182.915941][ T9798] veth1_macvtap: entered allmulticast mode [ 182.939773][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1131'. [ 183.183631][ T9804] macvtap0: entered allmulticast mode [ 183.191615][ T9804] veth0_macvtap: entered allmulticast mode [ 183.783302][ T9836] netlink: 'syz.0.1143': attribute type 10 has an invalid length. [ 183.854867][ T9838] FAULT_INJECTION: forcing a failure. [ 183.854867][ T9838] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 183.868314][ T9838] CPU: 1 UID: 0 PID: 9838 Comm: syz.2.1141 Not tainted syzkaller #0 PREEMPT(full) [ 183.868340][ T9838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.868358][ T9838] Call Trace: [ 183.868369][ T9838] [ 183.868377][ T9838] dump_stack_lvl+0xe8/0x150 [ 183.868405][ T9838] should_fail_ex+0x412/0x560 [ 183.868434][ T9838] _copy_from_user+0x2d/0xb0 [ 183.868463][ T9838] ___sys_sendmsg+0x1c6/0x360 [ 183.868490][ T9838] ? __lock_acquire+0x6b5/0x2cf0 [ 183.868514][ T9838] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.868574][ T9838] ? __fget_files+0x2a/0x420 [ 183.868595][ T9838] ? __fget_files+0x3a0/0x420 [ 183.868626][ T9838] __x64_sys_sendmsg+0x1bd/0x2a0 [ 183.868662][ T9838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.868697][ T9838] ? __pfx_ksys_write+0x10/0x10 [ 183.868731][ T9838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.868751][ T9838] do_syscall_64+0x15f/0xf80 [ 183.868776][ T9838] ? trace_irq_disable+0x3b/0x140 [ 183.868803][ T9838] ? clear_bhb_loop+0x40/0x90 [ 183.868824][ T9838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.868842][ T9838] RIP: 0033:0x7f3c1439ce59 [ 183.868868][ T9838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.868883][ T9838] RSP: 002b:00007f3c1519b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.868905][ T9838] RAX: ffffffffffffffda RBX: 00007f3c14615fa0 RCX: 00007f3c1439ce59 [ 183.868918][ T9838] RDX: 00000000200040c8 RSI: 0000200000000480 RDI: 0000000000000003 [ 183.868936][ T9838] RBP: 00007f3c1519b090 R08: 0000000000000000 R09: 0000000000000000 [ 183.868947][ T9838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.868957][ T9838] R13: 00007f3c14616038 R14: 00007f3c14615fa0 R15: 00007fff7578a228 [ 183.868988][ T9838] [ 184.177903][ T9845] netlink: 'syz.2.1147': attribute type 14 has an invalid length. [ 184.676895][ T9870] FAULT_INJECTION: forcing a failure. [ 184.676895][ T9870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.713530][ T9870] CPU: 1 UID: 0 PID: 9870 Comm: syz.0.1156 Not tainted syzkaller #0 PREEMPT(full) [ 184.713556][ T9870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 184.713567][ T9870] Call Trace: [ 184.713574][ T9870] [ 184.713582][ T9870] dump_stack_lvl+0xe8/0x150 [ 184.713609][ T9870] should_fail_ex+0x412/0x560 [ 184.713638][ T9870] _copy_to_user+0x31/0xb0 [ 184.713667][ T9870] simple_read_from_buffer+0xe1/0x170 [ 184.713694][ T9870] proc_fail_nth_read+0x1bb/0x230 [ 184.713722][ T9870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.713747][ T9870] ? rw_verify_area+0x2a6/0x4d0 [ 184.713770][ T9870] ? tun_chr_write_iter+0xe0/0x200 [ 184.713792][ T9870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.713815][ T9870] vfs_read+0x20c/0xa70 [ 184.713844][ T9870] ? __pfx___mutex_lock+0x10/0x10 [ 184.713863][ T9870] ? __pfx_vfs_read+0x10/0x10 [ 184.713889][ T9870] ? __fget_files+0x2a/0x420 [ 184.713915][ T9870] ? __fget_files+0x3a0/0x420 [ 184.713935][ T9870] ? __fget_files+0x2a/0x420 [ 184.713964][ T9870] ksys_read+0x150/0x270 [ 184.713989][ T9870] ? __pfx_ksys_read+0x10/0x10 [ 184.714020][ T9870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.714040][ T9870] do_syscall_64+0x15f/0xf80 [ 184.714065][ T9870] ? trace_irq_disable+0x3b/0x140 [ 184.714091][ T9870] ? clear_bhb_loop+0x40/0x90 [ 184.714113][ T9870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.714131][ T9870] RIP: 0033:0x7f22b535d68e [ 184.714149][ T9870] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.714163][ T9870] RSP: 002b:00007f22b35f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.714182][ T9870] RAX: ffffffffffffffda RBX: 00007f22b35f66c0 RCX: 00007f22b535d68e [ 184.714193][ T9870] RDX: 000000000000000f RSI: 00007f22b35f60a0 RDI: 0000000000000004 [ 184.714204][ T9870] RBP: 00007f22b35f6090 R08: 0000000000000000 R09: 0000000000000000 [ 184.714214][ T9870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.714223][ T9870] R13: 00007f22b5616038 R14: 00007f22b5615fa0 R15: 00007ffc9f5948a8 [ 184.714247][ T9870] [ 184.937020][ T9873] FAULT_INJECTION: forcing a failure. [ 184.937020][ T9873] name failslab, interval 1, probability 0, space 0, times 1 [ 184.957353][ T9873] CPU: 0 UID: 0 PID: 9873 Comm: syz.2.1158 Not tainted syzkaller #0 PREEMPT(full) [ 184.957379][ T9873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 184.957390][ T9873] Call Trace: [ 184.957397][ T9873] [ 184.957405][ T9873] dump_stack_lvl+0xe8/0x150 [ 184.957430][ T9873] should_fail_ex+0x412/0x560 [ 184.957460][ T9873] should_failslab+0xa8/0x100 [ 184.957489][ T9873] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 184.957515][ T9873] ? __alloc_skb+0x186/0x7d0 [ 184.957536][ T9873] ? __alloc_skb+0x1d0/0x7d0 [ 184.957557][ T9873] ? __local_bh_enable_ip+0xd0/0x130 [ 184.957580][ T9873] __alloc_skb+0x1d0/0x7d0 [ 184.957608][ T9873] netlink_sendmsg+0x5d4/0xb40 [ 184.957661][ T9873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.957689][ T9873] ? aa_sock_msg_perm+0xf1/0x1b0 [ 184.957715][ T9873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.957743][ T9873] ____sys_sendmsg+0x972/0x9f0 [ 184.957768][ T9873] ? __might_fault+0xaf/0x130 [ 184.957797][ T9873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.957831][ T9873] ? import_iovec+0x73/0xa0 [ 184.957860][ T9873] ___sys_sendmsg+0x2a5/0x360 [ 184.957885][ T9873] ? __lock_acquire+0x6b5/0x2cf0 [ 184.957909][ T9873] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.957968][ T9873] ? __fget_files+0x2a/0x420 [ 184.957989][ T9873] ? __fget_files+0x3a0/0x420 [ 184.958020][ T9873] __x64_sys_sendmsg+0x1bd/0x2a0 [ 184.958055][ T9873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.958090][ T9873] ? __pfx_ksys_write+0x10/0x10 [ 184.958124][ T9873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.958144][ T9873] do_syscall_64+0x15f/0xf80 [ 184.958169][ T9873] ? trace_irq_disable+0x3b/0x140 [ 184.958196][ T9873] ? clear_bhb_loop+0x40/0x90 [ 184.958219][ T9873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.958237][ T9873] RIP: 0033:0x7f3c1439ce59 [ 184.958254][ T9873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.958269][ T9873] RSP: 002b:00007f3c1519b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.958288][ T9873] RAX: ffffffffffffffda RBX: 00007f3c14615fa0 RCX: 00007f3c1439ce59 [ 184.958305][ T9873] RDX: 00000000200040c8 RSI: 0000200000000480 RDI: 0000000000000003 [ 184.958317][ T9873] RBP: 00007f3c1519b090 R08: 0000000000000000 R09: 0000000000000000 [ 184.958328][ T9873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.958338][ T9873] R13: 00007f3c14616038 R14: 00007f3c14615fa0 R15: 00007fff7578a228 [ 184.958368][ T9873] [ 185.322540][ T9884] __nla_validate_parse: 4 callbacks suppressed [ 185.322559][ T9884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1161'. [ 185.410660][ T9883] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1162'. [ 185.599714][ T9900] batadv1: entered allmulticast mode [ 186.336920][ T9941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1180'. [ 186.395863][ T9945] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 186.431246][ T9945] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1181'. [ 186.566737][ T9958] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1185'. [ 186.959453][ T4947] Bluetooth: hci2: link tx timeout [ 186.968031][ T4947] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.035038][ T9985] netlink: 'syz.1.1193': attribute type 1 has an invalid length. [ 187.072285][ T9985] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1193'. [ 187.088040][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.145785][ T9992] FAULT_INJECTION: forcing a failure. [ 187.145785][ T9992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.171367][ T9992] CPU: 1 UID: 0 PID: 9992 Comm: syz.0.1194 Not tainted syzkaller #0 PREEMPT(full) [ 187.171393][ T9992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 187.171403][ T9992] Call Trace: [ 187.171411][ T9992] [ 187.171418][ T9992] dump_stack_lvl+0xe8/0x150 [ 187.171445][ T9992] should_fail_ex+0x412/0x560 [ 187.171474][ T9992] _copy_from_iter+0x1d3/0x1670 [ 187.171503][ T9992] ? rcu_is_watching+0x15/0xb0 [ 187.171530][ T9992] ? __pfx__copy_from_iter+0x10/0x10 [ 187.171561][ T9992] ? netlink_sendmsg+0x650/0xb40 [ 187.171586][ T9992] ? skb_put+0x11b/0x210 [ 187.171613][ T9992] netlink_sendmsg+0x6c0/0xb40 [ 187.171648][ T9992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.171676][ T9992] ? aa_sock_msg_perm+0xf1/0x1b0 [ 187.171703][ T9992] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.171730][ T9992] ____sys_sendmsg+0x972/0x9f0 [ 187.171757][ T9992] ? __might_fault+0xaf/0x130 [ 187.171786][ T9992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.171821][ T9992] ? import_iovec+0x73/0xa0 [ 187.171850][ T9992] ___sys_sendmsg+0x2a5/0x360 [ 187.171875][ T9992] ? __lock_acquire+0x6b5/0x2cf0 [ 187.171906][ T9992] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.171966][ T9992] ? __fget_files+0x2a/0x420 [ 187.171987][ T9992] ? __fget_files+0x3a0/0x420 [ 187.172018][ T9992] __x64_sys_sendmsg+0x1bd/0x2a0 [ 187.172047][ T9992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.172091][ T9992] ? __pfx_ksys_write+0x10/0x10 [ 187.172125][ T9992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.172145][ T9992] do_syscall_64+0x15f/0xf80 [ 187.172171][ T9992] ? trace_irq_disable+0x3b/0x140 [ 187.172198][ T9992] ? clear_bhb_loop+0x40/0x90 [ 187.172221][ T9992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.172239][ T9992] RIP: 0033:0x7f22b539ce59 [ 187.172258][ T9992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.172272][ T9992] RSP: 002b:00007f22b35f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.172292][ T9992] RAX: ffffffffffffffda RBX: 00007f22b5615fa0 RCX: 00007f22b539ce59 [ 187.172305][ T9992] RDX: 00000000200040c8 RSI: 0000200000000480 RDI: 0000000000000003 [ 187.172316][ T9992] RBP: 00007f22b35f6090 R08: 0000000000000000 R09: 0000000000000000 [ 187.172328][ T9992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.172338][ T9992] R13: 00007f22b5616038 R14: 00007f22b5615fa0 R15: 00007ffc9f5948a8 [ 187.172371][ T9992] [ 187.204982][ T9993] netlink: 'syz.4.1196': attribute type 2 has an invalid length. [ 187.435793][ T9993] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1196'. [ 187.696632][T10010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.737823][T10010] netlink: 'syz.3.1201': attribute type 21 has an invalid length. [ 187.769224][T10010] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.796135][T10010] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 187.807805][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.818727][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.832471][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.859308][ T9324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.877737][T10021] netlink: 'syz.1.1205': attribute type 7 has an invalid length. [ 187.886350][T10021] netlink: 'syz.1.1205': attribute type 7 has an invalid length. [ 188.112017][T10027] FAULT_INJECTION: forcing a failure. [ 188.112017][T10027] name failslab, interval 1, probability 0, space 0, times 0 [ 188.133036][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.175396][T10030] sctp: [Deprecated]: syz.3.1209 (pid 10030) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.175396][T10030] Use struct sctp_sack_info instead [ 188.201032][T10027] CPU: 0 UID: 0 PID: 10027 Comm: syz.4.1208 Not tainted syzkaller #0 PREEMPT(full) [ 188.201059][T10027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.201069][T10027] Call Trace: [ 188.201076][T10027] [ 188.201083][T10027] dump_stack_lvl+0xe8/0x150 [ 188.201110][T10027] should_fail_ex+0x412/0x560 [ 188.201140][T10027] should_failslab+0xa8/0x100 [ 188.201168][T10027] __kmalloc_noprof+0xe8/0x760 [ 188.201197][T10027] ? fib_nl2rule+0x2e9/0x1a00 [ 188.201228][T10027] fib_nl2rule+0x2e9/0x1a00 [ 188.201259][T10027] ? __pfx_fib_nl2rule+0x10/0x10 [ 188.201287][T10027] ? __nla_parse+0x40/0x60 [ 188.201316][T10027] fib_newrule+0x321/0x1030 [ 188.201350][T10027] ? __pfx_fib_newrule+0x10/0x10 [ 188.201372][T10027] ? __dev_queue_xmit+0x2b6/0x3950 [ 188.201423][T10027] ? __pfx_fib_nl_newrule+0x10/0x10 [ 188.201440][T10027] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 188.201467][T10027] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 188.201490][T10027] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.201510][T10027] ? ref_tracker_free+0x693/0x840 [ 188.201535][T10027] ? __pfx_ref_tracker_free+0x10/0x10 [ 188.201557][T10027] ? __asan_memcpy+0x40/0x70 [ 188.201574][T10027] ? __skb_clone+0x63/0x7a0 [ 188.201604][T10027] netlink_rcv_skb+0x232/0x4b0 [ 188.201631][T10027] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.201653][T10027] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.201686][T10027] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.201709][T10027] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.201738][T10027] netlink_unicast+0x75c/0x8e0 [ 188.201769][T10027] netlink_sendmsg+0x813/0xb40 [ 188.201811][T10027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.201836][T10027] ? aa_sock_msg_perm+0xf1/0x1b0 [ 188.201868][T10027] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.201896][T10027] ____sys_sendmsg+0x972/0x9f0 [ 188.201922][T10027] ? __might_fault+0xaf/0x130 [ 188.201948][T10027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.201981][T10027] ? import_iovec+0x73/0xa0 [ 188.202011][T10027] ___sys_sendmsg+0x2a5/0x360 [ 188.202035][T10027] ? __lock_acquire+0x6b5/0x2cf0 [ 188.202058][T10027] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.202117][T10027] ? __fget_files+0x2a/0x420 [ 188.202138][T10027] ? __fget_files+0x3a0/0x420 [ 188.202169][T10027] __x64_sys_sendmsg+0x1bd/0x2a0 [ 188.202197][T10027] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.202232][T10027] ? __pfx_ksys_write+0x10/0x10 [ 188.202266][T10027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.202286][T10027] do_syscall_64+0x15f/0xf80 [ 188.202312][T10027] ? trace_irq_disable+0x3b/0x140 [ 188.202336][T10027] ? clear_bhb_loop+0x40/0x90 [ 188.202357][T10027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.202375][T10027] RIP: 0033:0x7fdb7819ce59 [ 188.202391][T10027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.202405][T10027] RSP: 002b:00007fdb78fa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.202422][T10027] RAX: ffffffffffffffda RBX: 00007fdb78415fa0 RCX: 00007fdb7819ce59 [ 188.202433][T10027] RDX: 00000000200040c8 RSI: 0000200000000480 RDI: 0000000000000003 [ 188.202444][T10027] RBP: 00007fdb78fa6090 R08: 0000000000000000 R09: 0000000000000000 [ 188.202453][T10027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.202463][T10027] R13: 00007fdb78416038 R14: 00007fdb78415fa0 R15: 00007ffeded0b698 [ 188.202489][T10027] [ 188.204283][T10028] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 188.369698][T10036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1207'. [ 188.471248][T10035] bond7: (slave gre0): Device is not bonding slave [ 188.577292][T10035] bond7: option active_slave: invalid value (gre0) [ 189.009832][ T4947] Bluetooth: hci2: command 0x0406 tx timeout [ 189.042301][T10035] bond7 (unregistering): Released all slaves [ 189.106988][T10036] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 189.176930][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.326533][T10054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1216'. [ 189.346373][T10056] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1217'. [ 189.516589][T10068] netlink: 'syz.0.1221': attribute type 11 has an invalid length. [ 189.590756][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032458800: rx timeout, send abort [ 190.090880][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803245b400: rx timeout, send abort [ 190.099295][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032458800: abort rx timeout. Force session deactivation [ 190.208582][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.480136][T10119] __nla_validate_parse: 3 callbacks suppressed [ 190.480154][T10119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1233'. [ 190.533102][T10119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1233'. [ 190.599157][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803245b400: abort rx timeout. Force session deactivation [ 190.645546][T10126] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1234'. [ 190.710664][T10130] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1236'. [ 190.779382][T10130] netlink: 'syz.2.1236': attribute type 1 has an invalid length. [ 190.833444][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1237'. [ 190.907956][T10130] bond3: entered promiscuous mode [ 190.926028][T10130] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.990490][T10130] bond3: (slave bridge1): making interface the new active one [ 190.998255][T10130] bridge1: entered promiscuous mode [ 191.004717][T10130] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 191.085155][T10150] xt_policy: too many policy elements [ 191.515706][T10170] netlink: 'syz.1.1248': attribute type 1 has an invalid length. [ 191.547920][T10172] netlink: 808 bytes leftover after parsing attributes in process `syz.0.1249'. [ 191.579511][T10174] netlink: 'syz.1.1248': attribute type 1 has an invalid length. [ 191.650393][T10170] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.797663][T10180] FAULT_INJECTION: forcing a failure. [ 191.797663][T10180] name failslab, interval 1, probability 0, space 0, times 0 [ 191.827307][T10180] CPU: 1 UID: 0 PID: 10180 Comm: syz.1.1252 Not tainted syzkaller #0 PREEMPT(full) [ 191.827334][T10180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.827354][T10180] Call Trace: [ 191.827362][T10180] [ 191.827369][T10180] dump_stack_lvl+0xe8/0x150 [ 191.827396][T10180] should_fail_ex+0x412/0x560 [ 191.827425][T10180] should_failslab+0xa8/0x100 [ 191.827449][T10180] ? skb_clone+0x212/0x3a0 [ 191.827465][T10180] kmem_cache_alloc_noprof+0x87/0x650 [ 191.827495][T10180] skb_clone+0x212/0x3a0 [ 191.827515][T10180] __netlink_deliver_tap+0x404/0x850 [ 191.827552][T10180] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.827578][T10180] netlink_deliver_tap+0x19c/0x1b0 [ 191.827605][T10180] netlink_sendskb+0x68/0x140 [ 191.827630][T10180] netlink_rcv_skb+0x2b6/0x4b0 [ 191.827656][T10180] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 191.827681][T10180] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.827718][T10180] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.827742][T10180] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.827772][T10180] netlink_unicast+0x75c/0x8e0 [ 191.827805][T10180] netlink_sendmsg+0x813/0xb40 [ 191.827839][T10180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.827867][T10180] ? aa_sock_msg_perm+0xf1/0x1b0 [ 191.827894][T10180] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.827921][T10180] ____sys_sendmsg+0x972/0x9f0 [ 191.827946][T10180] ? __might_fault+0xaf/0x130 [ 191.827975][T10180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.828010][T10180] ? import_iovec+0x73/0xa0 [ 191.828040][T10180] ___sys_sendmsg+0x2a5/0x360 [ 191.828064][T10180] ? __lock_acquire+0x6b5/0x2cf0 [ 191.828088][T10180] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.828148][T10180] ? __fget_files+0x2a/0x420 [ 191.828169][T10180] ? __fget_files+0x3a0/0x420 [ 191.828200][T10180] __x64_sys_sendmsg+0x1bd/0x2a0 [ 191.828230][T10180] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.828265][T10180] ? __pfx_ksys_write+0x10/0x10 [ 191.828295][T10180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.828314][T10180] do_syscall_64+0x15f/0xf80 [ 191.828350][T10180] ? trace_irq_disable+0x3b/0x140 [ 191.828376][T10180] ? clear_bhb_loop+0x40/0x90 [ 191.828399][T10180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.828417][T10180] RIP: 0033:0x7fc28119ce59 [ 191.828434][T10180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.828449][T10180] RSP: 002b:00007fc281f9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.828468][T10180] RAX: ffffffffffffffda RBX: 00007fc281415fa0 RCX: 00007fc28119ce59 [ 191.828481][T10180] RDX: 00000000200040c8 RSI: 0000200000000480 RDI: 0000000000000003 [ 191.828493][T10180] RBP: 00007fc281f9d090 R08: 0000000000000000 R09: 0000000000000000 [ 191.828504][T10180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.828514][T10180] R13: 00007fc281416038 R14: 00007fc281415fa0 R15: 00007ffd93ab6ee8 [ 191.828544][T10180] [ 194.213904][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.214711][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.220612][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.507115][T10232] FAULT_INJECTION: forcing a failure. [ 195.507115][T10232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.526451][T10229] netlink: 'syz.2.1268': attribute type 8 has an invalid length. [ 195.537904][T10232] CPU: 0 UID: 0 PID: 10232 Comm: syz.4.1267 Not tainted syzkaller #0 PREEMPT(full) [ 195.537927][T10232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.537936][T10232] Call Trace: [ 195.537942][T10232] [ 195.537949][T10232] dump_stack_lvl+0xe8/0x150 [ 195.537977][T10232] should_fail_ex+0x412/0x560 [ 195.538006][T10232] _copy_from_user+0x2d/0xb0 [ 195.538029][T10232] kstrtouint_from_user+0xd6/0x180 [ 195.538052][T10232] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 195.538088][T10232] proc_fail_nth_write+0x8e/0x210 [ 195.538110][T10232] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 195.538138][T10232] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 195.538162][T10232] vfs_write+0x29a/0xb90 [ 195.538204][T10232] ? __pfx_vfs_write+0x10/0x10 [ 195.538232][T10232] ? __fget_files+0x2a/0x420 [ 195.538255][T10232] ? __fget_files+0x3a0/0x420 [ 195.538273][T10232] ? __fget_files+0x2a/0x420 [ 195.538300][T10232] ksys_write+0x150/0x270 [ 195.538326][T10232] ? __pfx_ksys_write+0x10/0x10 [ 195.538356][T10232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.538373][T10232] do_syscall_64+0x15f/0xf80 [ 195.538397][T10232] ? trace_irq_disable+0x3b/0x140 [ 195.538423][T10232] ? clear_bhb_loop+0x40/0x90 [ 195.538444][T10232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.538460][T10232] RIP: 0033:0x7fdb7815d68e [ 195.538477][T10232] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.538490][T10232] RSP: 002b:00007fdb78fa5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.538507][T10232] RAX: ffffffffffffffda RBX: 00007fdb78fa66c0 RCX: 00007fdb7815d68e [ 195.538520][T10232] RDX: 0000000000000001 RSI: 00007fdb78fa60a0 RDI: 0000000000000004 [ 195.538530][T10232] RBP: 00007fdb78fa6090 R08: 0000000000000000 R09: 0000000000000000 [ 195.538540][T10232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.538550][T10232] R13: 00007fdb78416038 R14: 00007fdb78415fa0 R15: 00007ffeded0b698 [ 195.538573][T10232] [ 195.551017][T10229] sch_fq: defrate 0 ignored. [ 195.782502][T10230] netlink: 'syz.2.1268': attribute type 8 has an invalid length. [ 195.797810][T10230] sch_fq: defrate 0 ignored. [ 195.819704][T10235] xfrm1: entered allmulticast mode [ 196.029569][T10247] netlink: 'syz.4.1272': attribute type 29 has an invalid length. [ 196.055847][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'. [ 196.070971][T10247] netlink: 'syz.4.1272': attribute type 29 has an invalid length. [ 196.080267][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'. [ 196.271127][T10257] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 196.299916][ T5645] Bluetooth: hci1: command 0x0406 tx timeout [ 196.306101][ T4947] Bluetooth: hci4: command 0x0406 tx timeout [ 196.312588][ T5638] Bluetooth: hci3: command 0x0401 tx timeout [ 196.319734][ T4947] Bluetooth: hci0: command 0x0401 tx timeout [ 196.516435][T10255] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 196.617385][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1278'. [ 197.426664][T10296] xt_cgroup: invalid path, errno=-2 [ 197.476133][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'. [ 197.816823][T10303] tipc: Started in network mode [ 197.838313][T10303] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 197.882413][T10303] tipc: Enabled bearer , priority 10 [ 198.001669][T10309] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1291'. [ 198.063626][T10313] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1291'. [ 198.825184][T10323] netlink: 'syz.2.1296': attribute type 10 has an invalid length. [ 198.882785][T10323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.915015][T10323] team0: Port device netdevsim1 added [ 198.998394][ T9] tipc: Node number set to 1 [ 199.029112][T10323] netlink: 'syz.2.1296': attribute type 10 has an invalid length. [ 199.084813][T10323] team0: Port device netdevsim1 removed [ 199.100811][T10323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.119618][T10323] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 199.148972][T10323] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 199.180153][T10341] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 199.197957][T10340] netlink: 'syz.4.1300': attribute type 21 has an invalid length. [ 199.219935][T10341] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 199.385663][T10350] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1302'. [ 199.456655][T10340] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 199.500817][T10340] bond4 (unregistering): Released all slaves [ 199.506296][T10221] Set syz1 is full, maxelem 65536 reached [ 199.575228][T10350] team0: Port device dummy0 removed [ 200.083677][T10369] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1309'. [ 200.232259][T10372] syzkaller0: entered promiscuous mode [ 200.238553][T10372] syzkaller0: entered allmulticast mode [ 200.263366][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 200.351979][T10380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1311'. [ 200.719936][T10396] syzkaller0: entered promiscuous mode [ 200.736556][T10396] syzkaller0: entered allmulticast mode [ 200.892334][T10399] syzkaller0: entered promiscuous mode [ 200.921374][T10399] syzkaller0: entered allmulticast mode [ 201.002281][T10410] netlink: 'syz.4.1323': attribute type 1 has an invalid length. [ 201.090572][T10410] bond4: entered promiscuous mode [ 201.098131][T10410] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.356011][T10428] __nla_validate_parse: 1 callbacks suppressed [ 201.356031][T10428] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1329'. [ 201.529794][T10433] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1331'. [ 201.583903][T10433] xt_hashlimit: size too large, truncated to 1048576 [ 201.948773][T10459] team0: Device gtp0 is up. Set it down before adding it as a team port [ 202.017052][T10456] team0: Device gtp0 is up. Set it down before adding it as a team port [ 202.244848][T10477] set match dimension is over the limit! [ 204.897618][T10457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.083130][T10508] tc_dump_action: action bad kind [ 205.145669][T10518] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 205.405688][T10533] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 205.415135][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 205.522026][T10542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1358'. [ 205.605530][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 205.655653][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 205.688843][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1361'. [ 205.750669][T10542] h: entered promiscuous mode [ 205.778895][T10556] ipt_rpfilter: unknown options [ 206.405401][T10576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.550698][T10596] xt_hashlimit: max too large, truncated to 1048576 [ 206.734327][T10596] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1375'. [ 206.896201][T10623] netlink: 'syz.0.1383': attribute type 1 has an invalid length. [ 206.930355][T10623] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1383'. [ 206.961810][T10623] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1383'. [ 206.978416][T10623] netlink: 'syz.0.1383': attribute type 1 has an invalid length. [ 206.987921][T10623] netlink: 'syz.0.1383': attribute type 8 has an invalid length. [ 206.992033][T10628] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1383'. [ 207.002563][T10623] netlink: 606 bytes leftover after parsing attributes in process `syz.0.1383'. [ 207.008839][T10628] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1383'. [ 207.023591][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1385'. [ 207.159092][T10639] tls_set_device_offload: netdev not found [ 207.431428][T10652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1389'. [ 207.634992][T10658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1392'. [ 207.655831][T10656] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1393'. [ 207.703323][T10663] netem: change failed [ 208.399801][T10697] netlink: 'syz.1.1407': attribute type 5 has an invalid length. [ 208.410089][T10698] netlink: 'syz.0.1409': attribute type 9 has an invalid length. [ 209.050465][ C0] ------------[ cut here ]------------ [ 209.056000][ C0] len > ((int)(~0U >> 1)) [ 209.056026][ C0] WARNING: ./include/linux/skbuff.h:2863 at qdisc_pkt_len_segs_init+0x4c1/0xa30, CPU#0: syz.4.1423/10744 [ 209.071716][ C0] Modules linked in: [ 209.076970][ C0] CPU: 0 UID: 0 PID: 10744 Comm: syz.4.1423 Not tainted syzkaller #0 PREEMPT(full) [ 209.086438][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.096557][ C0] RIP: 0010:qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 209.102976][ C0] Code: 81 e6 00 00 02 00 31 ff e8 cc ee 47 f8 41 81 e6 00 00 02 00 0f 85 fb 00 00 00 e8 7a ea 47 f8 e9 5b 01 00 00 e8 70 ea 47 f8 90 <0f> 0b 90 e9 e8 fd ff ff 44 89 e7 44 89 f6 e8 1c ec 47 f8 45 39 f4 [ 209.122748][ C0] RSP: 0018:ffffc900000075d0 EFLAGS: 00010246 [ 209.128864][ C0] RAX: ffffffff897dda50 RBX: 1ffff1100a793b83 RCX: ffff888034793d80 [ 209.136838][ C0] RDX: 0000000000000100 RSI: 00000000fffffffa RDI: 0000000000000000 [ 209.144853][ C0] RBP: ffff888053c9db40 R08: ffffc9000000785f R09: 0000000000000000 [ 209.152896][ C0] R10: ffffc900000077f0 R11: fffff52000000f0c R12: 00000000fffffffa [ 209.160925][ C0] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff8880738cef18 [ 209.168961][ C0] FS: 00007fdb78fa66c0(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 209.177958][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.184568][ C0] CR2: 00007f27c95ea540 CR3: 000000005cbee000 CR4: 00000000003526f0 [ 209.192596][ C0] Call Trace: [ 209.195869][ C0] [ 209.198754][ C0] ? lock_acquire+0x106/0x350 [ 209.203467][ C0] __netif_receive_skb_core+0x13bd/0x3170 [ 209.209244][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 209.214202][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 209.219216][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 209.225297][ C0] ? unwind_next_frame+0xa6/0x2550 [ 209.230453][ C0] ? lock_acquire+0x106/0x350 [ 209.235158][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 209.240403][ C0] __netif_receive_skb_list_core+0x24d/0x810 [ 209.246485][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 209.251493][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 209.258162][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 209.264340][ C0] ? lock_acquire+0x106/0x350 [ 209.269092][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 209.275443][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 209.282181][ C0] ? dev_gro_receive+0x1108/0x23c0 [ 209.287357][ C0] ? dev_gro_receive+0x1773/0x23c0 [ 209.292491][ C0] ? kasan_save_free_info+0x46/0x50 [ 209.297732][ C0] napi_complete_done+0x299/0x730 [ 209.302776][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 209.308378][ C0] ? gro_cell_poll+0x16c/0x5d0 [ 209.313179][ C0] gro_cell_poll+0x5a9/0x5d0 [ 209.317828][ C0] ? gro_cell_poll+0x16c/0x5d0 [ 209.322612][ C0] __napi_poll+0xae/0x340 [ 209.326942][ C0] ? skb_defer_free_flush+0x233/0x260 [ 209.332365][ C0] net_rx_action+0x627/0xf70 [ 209.336977][ C0] ? lock_acquire+0x106/0x350 [ 209.341721][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 209.346864][ C0] ? sched_clock+0x3f/0x60 [ 209.351352][ C0] handle_softirqs+0x22a/0x840 [ 209.356133][ C0] ? do_softirq+0x76/0xd0 [ 209.360612][ C0] ? tun_rx_batched+0x185/0x790 [ 209.365480][ C0] do_softirq+0x76/0xd0 [ 209.369721][ C0] [ 209.372660][ C0] [ 209.375587][ C0] __local_bh_enable_ip+0xf8/0x130 [ 209.380753][ C0] ? tun_rx_batched+0x185/0x790 [ 209.385654][ C0] tun_rx_batched+0x617/0x790 [ 209.390428][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 209.395649][ C0] ? tun_get_user+0x2787/0x43e0 [ 209.400565][ C0] ? tun_get_user+0x2787/0x43e0 [ 209.405445][ C0] ? tun_get_user+0x2394/0x43e0 [ 209.410354][ C0] ? tun_get_user+0x2394/0x43e0 [ 209.415227][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 209.420583][ C0] tun_get_user+0x2bbc/0x43e0 [ 209.425639][ C0] ? tun_get_user+0x2787/0x43e0 [ 209.430580][ C0] ? aa_file_perm+0x192/0x15e0 [ 209.435365][ C0] ? aa_file_perm+0x50e/0x15e0 [ 209.440189][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 209.445238][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 209.450223][ C0] ? __pfx___futex_wait+0x10/0x10 [ 209.455269][ C0] ? ref_tracker_alloc+0x35c/0x4c0 [ 209.460431][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 209.465910][ C0] ? tun_get+0x1c/0x2f0 [ 209.470117][ C0] ? tun_get+0x1c/0x2f0 [ 209.474290][ C0] ? tun_get+0x1c/0x2f0 [ 209.478488][ C0] ? tun_get+0x1c/0x2f0 [ 209.482665][ C0] tun_chr_write_iter+0x113/0x200 [ 209.487762][ C0] vfs_write+0x61d/0xb90 [ 209.492074][ C0] ? __pfx_vfs_write+0x10/0x10 [ 209.496846][ C0] ? __fget_files+0x2a/0x420 [ 209.501496][ C0] ksys_write+0x150/0x270 [ 209.505888][ C0] ? __pfx_ksys_write+0x10/0x10 [ 209.510808][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.516913][ C0] do_syscall_64+0x15f/0xf80 [ 209.521603][ C0] ? trace_irq_disable+0x3b/0x140 [ 209.526651][ C0] ? clear_bhb_loop+0x40/0x90 [ 209.531390][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.537414][ C0] RIP: 0033:0x7fdb7819ce59 [ 209.541830][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.561577][ C0] RSP: 002b:00007fdb78fa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 209.570047][ C0] RAX: ffffffffffffffda RBX: 00007fdb78415fa0 RCX: 00007fdb7819ce59 [ 209.578088][ C0] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 209.586138][ C0] RBP: 00007fdb78232d6f R08: 0000000000000000 R09: 0000000000000000 [ 209.594183][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.602210][ C0] R13: 00007fdb78416038 R14: 00007fdb78415fa0 R15: 00007ffeded0b698 [ 209.610237][ C0] [ 209.613264][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 209.620543][ C0] CPU: 0 UID: 0 PID: 10744 Comm: syz.4.1423 Not tainted syzkaller #0 PREEMPT(full) [ 209.629902][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.639959][ C0] Call Trace: [ 209.643232][ C0] [ 209.646178][ C0] vpanic+0x56c/0xa60 [ 209.650189][ C0] ? __pfx__printk+0x10/0x10 [ 209.654782][ C0] ? __pfx_vpanic+0x10/0x10 [ 209.659278][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 209.664560][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 209.669765][ C0] panic+0xc5/0xd0 [ 209.673507][ C0] ? __pfx_panic+0x10/0x10 [ 209.678153][ C0] __warn+0x315/0x4c0 [ 209.682133][ C0] ? qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 209.687763][ C0] ? qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 209.693393][ C0] __report_bug+0x29a/0x540 [ 209.697897][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 209.702837][ C0] ? qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 209.708473][ C0] ? __pfx___report_bug+0x10/0x10 [ 209.713678][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 209.718628][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 209.723567][ C0] ? qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 209.729194][ C0] report_bug+0x16a/0x220 [ 209.733530][ C0] ? qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 209.739161][ C0] ? qdisc_pkt_len_segs_init+0x4c3/0xa30 [ 209.744791][ C0] handle_bug+0x9c/0x200 [ 209.749046][ C0] exc_invalid_op+0x1a/0x50 [ 209.753580][ C0] asm_exc_invalid_op+0x1a/0x20 [ 209.758435][ C0] RIP: 0010:qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 209.764673][ C0] Code: 81 e6 00 00 02 00 31 ff e8 cc ee 47 f8 41 81 e6 00 00 02 00 0f 85 fb 00 00 00 e8 7a ea 47 f8 e9 5b 01 00 00 e8 70 ea 47 f8 90 <0f> 0b 90 e9 e8 fd ff ff 44 89 e7 44 89 f6 e8 1c ec 47 f8 45 39 f4 [ 209.784291][ C0] RSP: 0018:ffffc900000075d0 EFLAGS: 00010246 [ 209.790349][ C0] RAX: ffffffff897dda50 RBX: 1ffff1100a793b83 RCX: ffff888034793d80 [ 209.798321][ C0] RDX: 0000000000000100 RSI: 00000000fffffffa RDI: 0000000000000000 [ 209.806302][ C0] RBP: ffff888053c9db40 R08: ffffc9000000785f R09: 0000000000000000 [ 209.814264][ C0] R10: ffffc900000077f0 R11: fffff52000000f0c R12: 00000000fffffffa [ 209.822226][ C0] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff8880738cef18 [ 209.830194][ C0] ? qdisc_pkt_len_segs_init+0x4c0/0xa30 [ 209.835830][ C0] ? lock_acquire+0x106/0x350 [ 209.840506][ C0] __netif_receive_skb_core+0x13bd/0x3170 [ 209.846235][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 209.851186][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 209.856138][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 209.862202][ C0] ? unwind_next_frame+0xa6/0x2550 [ 209.867319][ C0] ? lock_acquire+0x106/0x350 [ 209.872041][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 209.877242][ C0] __netif_receive_skb_list_core+0x24d/0x810 [ 209.883224][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 209.888161][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 209.894672][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 209.900825][ C0] ? lock_acquire+0x106/0x350 [ 209.905501][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 209.911834][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 209.918530][ C0] ? dev_gro_receive+0x1108/0x23c0 [ 209.923673][ C0] ? dev_gro_receive+0x1773/0x23c0 [ 209.928787][ C0] ? kasan_save_free_info+0x46/0x50 [ 209.933983][ C0] napi_complete_done+0x299/0x730 [ 209.939003][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 209.944544][ C0] ? gro_cell_poll+0x16c/0x5d0 [ 209.949314][ C0] gro_cell_poll+0x5a9/0x5d0 [ 209.953927][ C0] ? gro_cell_poll+0x16c/0x5d0 [ 209.958689][ C0] __napi_poll+0xae/0x340 [ 209.963104][ C0] ? skb_defer_free_flush+0x233/0x260 [ 209.968490][ C0] net_rx_action+0x627/0xf70 [ 209.973079][ C0] ? lock_acquire+0x106/0x350 [ 209.977765][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 209.982929][ C0] ? sched_clock+0x3f/0x60 [ 209.987352][ C0] handle_softirqs+0x22a/0x840 [ 209.992108][ C0] ? do_softirq+0x76/0xd0 [ 209.996433][ C0] ? tun_rx_batched+0x185/0x790 [ 210.001279][ C0] do_softirq+0x76/0xd0 [ 210.005427][ C0] [ 210.008350][ C0] [ 210.011268][ C0] __local_bh_enable_ip+0xf8/0x130 [ 210.016385][ C0] ? tun_rx_batched+0x185/0x790 [ 210.021232][ C0] tun_rx_batched+0x617/0x790 [ 210.025909][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 210.031099][ C0] ? tun_get_user+0x2787/0x43e0 [ 210.035944][ C0] ? tun_get_user+0x2787/0x43e0 [ 210.040799][ C0] ? tun_get_user+0x2394/0x43e0 [ 210.045666][ C0] ? tun_get_user+0x2394/0x43e0 [ 210.050511][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 210.055795][ C0] tun_get_user+0x2bbc/0x43e0 [ 210.060477][ C0] ? tun_get_user+0x2787/0x43e0 [ 210.065336][ C0] ? aa_file_perm+0x192/0x15e0 [ 210.070105][ C0] ? aa_file_perm+0x50e/0x15e0 [ 210.074866][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 210.079888][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 210.084825][ C0] ? __pfx___futex_wait+0x10/0x10 [ 210.089846][ C0] ? ref_tracker_alloc+0x35c/0x4c0 [ 210.094969][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 210.100450][ C0] ? tun_get+0x1c/0x2f0 [ 210.104607][ C0] ? tun_get+0x1c/0x2f0 [ 210.108760][ C0] ? tun_get+0x1c/0x2f0 [ 210.112909][ C0] ? tun_get+0x1c/0x2f0 [ 210.117066][ C0] tun_chr_write_iter+0x113/0x200 [ 210.122101][ C0] vfs_write+0x61d/0xb90 [ 210.126359][ C0] ? __pfx_vfs_write+0x10/0x10 [ 210.131140][ C0] ? __fget_files+0x2a/0x420 [ 210.135731][ C0] ksys_write+0x150/0x270 [ 210.140062][ C0] ? __pfx_ksys_write+0x10/0x10 [ 210.145029][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.151173][ C0] do_syscall_64+0x15f/0xf80 [ 210.155773][ C0] ? trace_irq_disable+0x3b/0x140 [ 210.160843][ C0] ? clear_bhb_loop+0x40/0x90 [ 210.165517][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.171402][ C0] RIP: 0033:0x7fdb7819ce59 [ 210.175811][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.195493][ C0] RSP: 002b:00007fdb78fa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 210.203986][ C0] RAX: ffffffffffffffda RBX: 00007fdb78415fa0 RCX: 00007fdb7819ce59 [ 210.211957][ C0] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 210.219933][ C0] RBP: 00007fdb78232d6f R08: 0000000000000000 R09: 0000000000000000 [ 210.228002][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.235967][ C0] R13: 00007fdb78416038 R14: 00007fdb78415fa0 R15: 00007ffeded0b698 [ 210.243947][ C0] [ 210.247414][ C0] Kernel Offset: disabled [ 210.251753][ C0] Rebooting in 86400 seconds..