last executing test programs: 21.205764047s ago: executing program 0 (id=6201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f00000008c0)={{&(0x7f0000000680)=[{0xffffffffffffffff, 0x8, 0x2, {0x3, 0x8b59}, 0x2, 0x0, 0xffffffff}, {0xffffffff, 0x4, 0xed10, {0x8c, 0xe}, 0x5, 0x1, 0x101}, {0x8000000000000000, 0x9, 0x9, {0x9, 0xc1c}, 0x6, 0x9e, 0x8}, {0x4, 0x6, 0x7, {0x9, 0x5}, 0x5, 0x3, 0x5}, {0x10ae, 0x1, 0x1ff, {0xff, 0x5}, 0x4, 0x1, 0x7d}, {0x0, 0x2, 0x6, {0x9, 0x4}, 0x0, 0x8}, {0x7, 0x100, 0x9, {0x4}, 0x401, 0x6, 0x81}, {0x3, 0x8, 0xe2d, {0x8, 0x3}, 0x1d, 0x3, 0xfffffff3}, {0x3, 0x9, 0x2, {0x3, 0x5}, 0x9c9b, 0x9, 0x4}], 0x9, 0x40, 0x1, 0x1}, {&(0x7f00000003c0), 0x0, 0x10, 0x7, 0x31}, {&(0x7f00000003c0)=[0x7, 0x7, 0xf8e, 0x3, 0x0, 0x2, 0x4, 0x2], 0x8}, {&(0x7f00000004c0)=[{0x2, 0x7, 0x7, 0x9, 0x2800}, {0x10, 0x423f, 0x6, 0x8dd, 0x2}, {0x3, 0xeba, 0x6, 0x7, 0x6}, {0xd9, 0x8, 0x3a9, 0x7, 0xffff}, {0xc979, 0x4, 0x0, 0x7, 0x8000}, {0x9, 0xde, 0x7fffffffffffffff, 0x8}, {0x7, 0x1, 0x3, 0x80000000, 0x4}, {0x1ff, 0x2, 0xffffffffffffffff, 0x2, 0x1}], 0x8, 0x28, 0x3, 0x3}, {&(0x7f0000000600)=[0x6, 0x7f], 0x2, 0x8, 0x2, 0x9}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2b}, @in6=@private2, {}, {0x0, 0x0, 0x0, 0x400}, {0x0, 0x31638d34}, 0x0, 0x4, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x65}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) 21.039292068s ago: executing program 0 (id=6203): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x5}]}}}]}, 0x3c}}, 0x0) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) (async) listen(r1, 0x0) (async) close(r1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@private2, @in=@private}}, {{@in=@multicast2}, 0x0, @in6=@private1}}, &(0x7f0000000000)=0xe8) 20.586946287s ago: executing program 0 (id=6209): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0xfffffe49, 0x0, 0xffffffffffffffff, 0x6}, 0x42) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x7c, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x28}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x94}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44884}, 0x4000) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r8, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r11, @ANYBLOB="875e3f9cd4ba7385297b0ac439336d77ae000000000000ccdc00"/40], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) r12 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r12, &(0x7f00000000c0), &(0x7f0000000100)=0x20) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r12, 0x40049366, &(0x7f0000000080)) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r14, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0}, 0x94) 20.378031628s ago: executing program 0 (id=6214): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 20.246688064s ago: executing program 0 (id=6217): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0}, 0x90) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r1, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x3, @loopback, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x30}}}], 0x40}}], 0x1, 0x400c404) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) syz_emit_ethernet(0xce, &(0x7f00000014c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000030800983a00fc010000000000000000000000000000fe8000000000000000000000000000aa02009078000000006000001000002b00fc000000000000000000000000000000fc0000000000000000000000000000000004040201000000fc02000000000000000000000a000000fe88000000000000000000000000000188070000000000000836349b87ce38bba5523c9b78f7ca490019a5ef26e6a711f728f2ea3c8b2680e515725df04a14ecc58ed6327da04df7b0fa417872e49c23"], 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000108010400000000000000000000000214000480080001400000000d0800064000000006080004400000000408000540000000052c0004800800014000006ee3080001400000000808000140000000050800024000000001080001400040810000000900010073797a30000000005400048008000b40ffff7fff080004400000000d08000240000100000800024000000080080003400000b85c080006400000000308000640000000000800094000000002080001000000000000800240000000080900010073797a30000000001400048008000140000003ff08000140000003c3"], 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x801) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = socket(0x2, 0x2, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001240)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000300000008000400ac1414000800020000000000080001"], 0x2c}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00030fbd7000fddbdf25000000001400fe800000000000000047faf1133f2c6a8e7122979b00"], 0x28}, 0x1, 0x0, 0x0, 0x9082}, 0x40000) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYRES8=r2], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x47, '\x00', r8, @xdp, 0x0, 0x0, 0x0, 0xffffffffffffff3a, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001480)={{r6}, &(0x7f0000001400), &(0x7f0000001440)=r12}, 0x20) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x84) 19.784863709s ago: executing program 0 (id=6221): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}}) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000200001"], 0xb8}}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/109, 0x6d}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 7.132142576s ago: executing program 3 (id=6301): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) recvmmsg(r3, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000040)=""/149, 0x95}, {&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/170, 0xaa}], 0x4, &(0x7f00000002c0)=""/73, 0x49}, 0x18000}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/160, 0xa0}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/167, 0xa7}, {&(0x7f00000034c0)=""/9, 0x9}, {&(0x7f0000003500)=""/138, 0xfffffffffffffe9b}], 0x7}, 0x7b8}, {{&(0x7f0000003640)=@alg, 0x80, &(0x7f00000039c0)=[{&(0x7f00000036c0)=""/213, 0xd5}, {&(0x7f00000037c0)=""/10, 0xa}, {&(0x7f0000003800)=""/199, 0xc7}, {&(0x7f0000003900)=""/183, 0xb7}], 0x4}, 0x4}, {{&(0x7f0000003a00)=@hci, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/150, 0x96}, {&(0x7f0000003b40)=""/99, 0x63}, {&(0x7f0000003bc0)=""/142, 0x8e}], 0x3, &(0x7f0000003cc0)=""/251, 0xfb}, 0x5710925a}, {{&(0x7f0000003dc0)=@nl=@proc, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003e40)=""/154, 0x9a}, {&(0x7f0000003f00)=""/4096, 0x1000}], 0x2, &(0x7f0000004f40)=""/98, 0x62}, 0x3}, {{&(0x7f0000004fc0)=@ax25={{}, [@netrom, @null, @null, @null, @rose, @null, @netrom]}, 0x80, &(0x7f0000006040)=[{&(0x7f0000005040)=""/4096, 0x1000}], 0x1}, 0x400}], 0x6, 0x10142, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240"], 0xc4}}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x0, 0xd}}}, 0x24}}, 0x4000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@fallback=r6, r6, 0x2f, 0x2024, 0x4}, 0x20) recvmmsg$unix(r4, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) 6.927611331s ago: executing program 3 (id=6304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x14}, 0x20) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r2) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4$alg(r1, 0x0, 0x0, 0x800) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) sendmsg$alg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f5a9496032", 0x5}, {&(0x7f00000002c0)=']', 0x1}], 0x2}, 0x55) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002040)={0x4c, r6, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x4c}}, 0x804) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f0000000800)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0x2, 0x5, 0xffffffffffffffff, 0x3, 0xefbe]}, &(0x7f0000000880)=0x78) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r10, 0x10040) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa32080045000034006500000206907864010001acd385361414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c04000090780000080a00000008000000000000"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0482c9", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="080003000000000008000100", @ANYRES32=r9, @ANYBLOB="1400020069705f767469300000000000000000000800030002000000080003000100000008000100", @ANYRES32=r11, @ANYBLOB="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"], 0x45c}, 0x1, 0x0, 0x0, 0x4880}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.926021947s ago: executing program 4 (id=6305): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010025bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a2906000380000008001b00000000000b44bd24394c6accf3545d2b686cfc89a14049ea84607f047ed53907b9e5e157310536680a7e"], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x80003, 0x0) (async) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010025bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a2906000380000008001b00000000000b44bd24394c6accf3545d2b686cfc89a14049ea84607f047ed53907b9e5e157310536680a7e"], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1) (async) 6.447212169s ago: executing program 4 (id=6309): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000305000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001200feffffff"], 0x3c}}, 0x0) 6.399767743s ago: executing program 3 (id=6310): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0xb, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000840)=""/219, 0x27, 0xdb, 0x1, 0x8, 0x10000}, 0x28) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000540)=@raw=[@ldst={0x1, 0x3, 0x0, 0x0, 0x9, 0x10, 0x4}, @tail_call, @generic={0x6, 0xf, 0x5, 0x2, 0x80000001}, @alu={0x7, 0x0, 0x3, 0x7, 0x9, 0xfffffffffffffff0}, @exit], &(0x7f00000005c0)='syzkaller\x00', 0xd3a9, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x17, r3, 0x8, &(0x7f0000000740)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x0, 0x1000, 0x3}, 0x10, 0x6c9d, 0xffffffffffffffff, 0x4, &(0x7f00000007c0)=[0x1], &(0x7f0000000940)=[{0x3, 0x4, 0x0, 0x7}, {0x5, 0x3, 0xe, 0x9}, {0x5, 0x3, 0x10, 0xa}, {0x4, 0x5, 0xb, 0x3}], 0x10, 0x8}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRESDEC=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd1, &(0x7f0000000a40)=""/209, 0x41100, 0x0, '\x00', r6, @fallback=0x4, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @multicast1}}}, 0x88) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="0000000061000000380012800e000100697036677265746170000000240002800800040004000000060010000000000005001700", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES64=0x0, @ANYBLOB='\x00g\x00'], 0x74}}, 0x800) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x5f, 0x61]}}, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x10000, @value=r8}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_sctp(0x2, 0x419aad9e08572d0c, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r10, 0x84, 0x3, &(0x7f0000000000)=0x7fff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.243187937s ago: executing program 4 (id=6313): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1416, 0x1}, 0x10}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r3, &(0x7f00000006c0), 0x0}, 0x20) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x2, 0x41c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, 0x0}, 0x494) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x81}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x101}}]}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x6c}}, 0x0) setsockopt$inet6_int(r9, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r9, 0x0, 0x30, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @private0, 0x409}, 0x1c) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000040)={0x2099, 0x3, 0x20000006, 0x7ffffff9}, 0x10) write(r12, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700000001000000", 0x18) setsockopt$inet6_opts(r8, 0x29, 0x39, &(0x7f0000000080)=@hopopts={0x1, 0x7, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x1, 0x0, [0x9, 0x5, 0x6, 0x3, 0xe]}}]}, 0x48) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000800)={{r2}, "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"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 3.219274722s ago: executing program 1 (id=6314): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="d825000000638df1894fdb17da017a5376514400", @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) 3.160307678s ago: executing program 3 (id=6316): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x0, 0x1, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x634]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x29, @local, 0x4e24, 0x2, 'lblcr\x00', 0x39, 0x10, 0x4e}, 0x2c) 3.051981272s ago: executing program 1 (id=6317): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) 2.994210756s ago: executing program 1 (id=6318): socket$inet_udp(0x2, 0x2, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000007c0)={r1, 0x5}, &(0x7f0000001800)=0x8) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 2.907751029s ago: executing program 3 (id=6319): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0xffffff1f, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8a2}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2.906815668s ago: executing program 4 (id=6320): bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a5cfe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f"], 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0x1, 0x99}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r0, &(0x7f0000000880)}, 0x20) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x810) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x1}]}, 0x18}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x110, 0x6, 0xa, 0x409, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8848}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xdada}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1b}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x16c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) (async) setsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000100)=0x5f, 0x4) (async) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000300)=""/140, &(0x7f0000000140)=0x8c) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x0, 0x5b}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, 0x0, &(0x7f0000000080)=0x20) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r6, 0x20, &(0x7f00000001c0)={&(0x7f00000004c0)=""/87, 0x57, 0x0, &(0x7f0000000580)=""/89, 0x59}}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES8], 0x3c}}, 0x0) (async) socket$inet6(0xa, 0x4, 0x6) 2.787265785s ago: executing program 4 (id=6321): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000400)={@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x5, 0x6, [@bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2.590419413s ago: executing program 3 (id=6322): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) pipe(0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4008054) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x3}) write$nci(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='P'], 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000040)=0x8) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010100}, 0x10) 2.523846914s ago: executing program 4 (id=6323): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) close(0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='$', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000500)="24db9a3b2fe2b73863bdb110d8dc41ec6e3829bc3e80b3f9e67419c8ac7feb44ed1c40f2d3fcf3b576571cc8692749226aaf9be0485b49e715cb311459710efcae8a2c3f05b8ff00b5765adde6bf6a803fcff74ab08deb4b4afd68bae9d8dfde2991000000", 0x65}], 0xc}}], 0x40000000000000f, 0x4000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) sendto$inet(r4, &(0x7f0000000b00)="e81df3", 0x3, 0x61, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010029bd7000fddbdf250218c002", @ANYRES32=r10, @ANYBLOB="08000200ffffffff14000600bbff0048cb"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x34, r12, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x65b}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000240)={0x30, r7, 0x10d, 0x70bd2d, 0x2, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x30}}, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 2.26630167s ago: executing program 1 (id=6324): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000f3ff00000010"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x3, 0x0, @val=@perf_event={0x400}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000f3ff00000010"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x3, 0x0, @val=@perf_event={0x400}}, 0x18) (async) 2.051133406s ago: executing program 1 (id=6327): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f000000a440)=0x20, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x5f5e0ff}, @fwd={0x3, 0x2}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4096, 0x35, 0x1000, 0xa}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="ad43000000000000600004"], 0x14}}, 0x0) 1.990055335s ago: executing program 1 (id=6328): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x83, 0x9, 0x6df}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000040)) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x30, r4, 0x1, 0x709d2d, 0x3, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.818498815s ago: executing program 2 (id=6331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @random="b524732b4e4a"}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="89e7ee2c78dad9b4b473fec988a8", 0xe}, {&(0x7f0000000380)="2acfb759abd3", 0x6}], 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000b1"], 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000305fbffffffffffffff0000000000"], 0x14}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) (async) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @random="b524732b4e4a"}) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="89e7ee2c78dad9b4b473fec988a8", 0xe}, {&(0x7f0000000380)="2acfb759abd3", 0x6}], 0x2) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000b1"], 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_netfilter(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000305fbffffffffffffff0000000000"], 0x14}}, 0x0) (async) 248.419388ms ago: executing program 2 (id=6332): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x9, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 163.821113ms ago: executing program 2 (id=6333): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x20, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x90}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) 151.399268ms ago: executing program 2 (id=6334): socket$netlink(0x10, 0x3, 0x5) 85.828828ms ago: executing program 2 (id=6335): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r1, 0xd7735000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000100)=0xfffffffe, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x200, {0x0, 0x0, 0x0, 0x0, 0x0, 0x410}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xfffff800}]}}}]}, 0x3c}}, 0x8000) 0s ago: executing program 2 (id=6336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) recvmmsg(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10003, 0x0) connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_DEFRAGMENT(r6, 0xc010f508, &(0x7f0000000040)={0x10001, 0x9}) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf251700000008000300", @ANYRES32=r7, @ANYBLOB="0a000600"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x40000) kernel console output (not intermixed with test programs): 7] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4613'. [ 556.566845][T22965] 8021q: adding VLAN 0 to HW filter on device bond8 [ 556.591792][T22975] xt_hashlimit: size too large, truncated to 1048576 [ 556.625737][T22967] netlink: 'syz.3.4613': attribute type 26 has an invalid length. [ 556.667090][T22967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4613'. [ 556.718331][T22969] syzkaller0: entered promiscuous mode [ 556.723888][T22969] syzkaller0: entered allmulticast mode [ 556.732441][T22971] lo: entered allmulticast mode [ 556.771221][T22965] vlan3: entered promiscuous mode [ 556.806331][T22965] bond8: entered promiscuous mode [ 556.817354][T22965] vlan3: entered allmulticast mode [ 556.830643][T22965] bond8: entered allmulticast mode [ 556.857811][T22971] lo: left allmulticast mode [ 556.920731][T22989] bond8: (slave bridge8): making interface the new active one [ 556.931873][T22989] bridge8: entered promiscuous mode [ 556.939811][T22989] bridge8: entered allmulticast mode [ 556.949324][T22989] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 557.358835][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.755222][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.760181][ C0] hrtimer: interrupt took 277681 ns [ 557.765126][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.999001][ T160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.017502][T19906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.041111][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.075843][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 558.155548][ T1153] wlan1: Trigger new scan to find an IBSS to join [ 558.399471][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.036599][ T36] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 559.046163][T23026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4617'. [ 559.055534][T19906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.067836][T23026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4617'. [ 559.093313][T23026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.107950][T23026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.126186][T23026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.133639][T23026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.276757][T23036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.171253][T23001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 560.375117][T23051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4625'. [ 560.626198][T23065] tipc: Enabled bearer , priority 0 [ 560.693734][T23065] syzkaller0: entered promiscuous mode [ 560.701260][T23065] syzkaller0: entered allmulticast mode [ 560.708384][T23065] tipc: Resetting bearer [ 560.722537][T23064] tipc: Resetting bearer [ 560.828414][T23080] netlink: 'syz.3.4631': attribute type 1 has an invalid length. [ 560.852795][T23080] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4631'. [ 560.922573][T23085] sctp: [Deprecated]: syz.2.4633 (pid 23085) Use of int in max_burst socket option. [ 560.922573][T23085] Use struct sctp_assoc_value instead [ 561.916864][T19903] net_ratelimit: 4 callbacks suppressed [ 561.916881][T19903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.089865][T19903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.558324][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.671647][T23064] tipc: Disabling bearer [ 562.794278][T23105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.803483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.830344][T23105] bond5: (slave vlan0): Opening slave failed [ 562.935127][T23110] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4639'. [ 562.947022][T23119] bridge0: port 1(gretap0) entered blocking state [ 562.976995][T23119] bridge0: port 1(gretap0) entered disabled state [ 562.987007][T23119] gretap0: entered allmulticast mode [ 562.994189][T23119] gretap0: entered promiscuous mode [ 562.999732][T23118] netlink: 'syz.4.4640': attribute type 1 has an invalid length. [ 563.018454][T23118] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4640'. [ 563.092754][T23126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.203614][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.210907][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.233527][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.237614][T23133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4643'. [ 563.252033][T19906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.261919][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.351485][T23137] netlink: 'syz.2.4645': attribute type 2 has an invalid length. [ 563.386159][T23137] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4645'. [ 563.415909][T23137] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 563.459391][T23137] netlink: 'syz.2.4645': attribute type 11 has an invalid length. [ 563.506779][T23143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4649'. [ 563.576564][T23147] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4650'. [ 563.897354][T23163] 8021q: adding VLAN 0 to HW filter on device bond10 [ 564.210460][T23189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4663'. [ 564.223870][T23184] netlink: 'syz.2.4662': attribute type 8 has an invalid length. [ 564.695829][T23217] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 564.718412][T23217] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4670'. [ 565.027674][T23231] netlink: 'syz.2.4674': attribute type 29 has an invalid length. [ 565.038851][T23231] netlink: 'syz.2.4674': attribute type 29 has an invalid length. [ 565.167440][T23246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4679'. [ 565.176863][T23246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4679'. [ 565.421656][T23259] netlink: 'syz.1.4683': attribute type 1 has an invalid length. [ 565.509934][T23263] netlink: 'syz.1.4685': attribute type 1 has an invalid length. [ 565.522717][T23263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4685'. [ 565.929570][T23287] netlink: 'syz.4.4692': attribute type 9 has an invalid length. [ 566.031684][T23289] bridge6: entered promiscuous mode [ 566.047422][T23289] bridge6: entered allmulticast mode [ 566.083877][T23300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4698'. [ 566.120840][T23302] syzkaller0: entered allmulticast mode [ 566.145916][T23302] syzkaller0 (unregistering): left allmulticast mode [ 566.317265][T23309] bond16: Removing last arp target with arp_interval on [ 566.422410][T23323] netlink: 'syz.2.4702': attribute type 10 has an invalid length. [ 566.451625][T23323] team0: Port device dummy0 added [ 566.515261][T23331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4704'. [ 566.633819][T23336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4706'. [ 566.777937][T23336] 8021q: adding VLAN 0 to HW filter on device bond11 [ 567.061044][T23356] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 567.067626][T23356] syzkaller1: Refused to change device type [ 567.403484][T23373] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4718'. [ 567.416220][T23372] net_ratelimit: 7 callbacks suppressed [ 567.416241][T23372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.440580][T23372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.449606][T23372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.460915][T23372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.473114][T23372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.517167][T23369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.675688][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.755327][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.783789][T23401] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4723'. [ 568.133762][T23428] openvswitch: netlink: Flow actions attr not present in new flow. [ 568.231314][T23428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.240959][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.472021][T23436] macvtap2: entered promiscuous mode [ 568.487774][T23436] vlan0: entered promiscuous mode [ 568.495486][T23436] macvtap2: entered allmulticast mode [ 568.500932][T23436] vlan0: entered allmulticast mode [ 568.525346][T23436] veth0_vlan: entered allmulticast mode [ 568.787436][T23468] netlink: 'syz.4.4742': attribute type 4 has an invalid length. [ 568.925175][T23470] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 569.053302][T23472] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 569.634319][T23524] netlink: 'syz.1.4757': attribute type 1 has an invalid length. [ 569.655498][T23524] __nla_validate_parse: 8 callbacks suppressed [ 569.655519][T23524] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4757'. [ 569.699123][T23529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4757'. [ 570.023793][T23551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4763'. [ 570.656087][T23583] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4769'. [ 570.757771][T23583] x_tables: duplicate underflow at hook 2 [ 570.961933][T23609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4776'. [ 571.189300][T23620] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.204027][T23609] 8021q: adding VLAN 0 to HW filter on device bond17 [ 571.230777][T23625] netlink: 'syz.2.4779': attribute type 8 has an invalid length. [ 571.256331][T23615] macvlan2: entered promiscuous mode [ 571.266841][T23627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4780'. [ 571.285641][T23615] macvlan2: entered allmulticast mode [ 571.558521][ T160] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.637601][ T160] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.677440][ T160] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.715085][ T160] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.841398][ T51] block nbd0: Receive control failed (result -107) [ 571.851893][T23659] block nbd0: reconnected socket [ 571.969435][T12161] erspan0: left allmulticast mode [ 571.974546][T12161] erspan0: left promiscuous mode [ 572.030012][T12161] bridge0: port 1(erspan0) entered disabled state [ 572.220844][T12161] gretap0 (unregistering): left promiscuous mode [ 572.263386][T12161] bond1 (unregistering): (slave gretap1): Releasing active interface [ 572.671070][T12161] bond0 (unregistering): left promiscuous mode [ 572.684206][T12161] bond0 (unregistering): Released all slaves [ 572.697794][T12161] bond1 (unregistering): Released all slaves [ 572.718900][T12161] bond2 (unregistering): Released all slaves [ 572.745723][T12161] bond3 (unregistering): Released all slaves [ 572.770148][T12161] bond4 (unregistering): Released all slaves [ 572.794309][T12161] bond5 (unregistering): Released all slaves [ 572.816788][T12161] bond6 (unregistering): Released all slaves [ 572.837621][T12161] bond7 (unregistering): Released all slaves [ 572.862288][T12161] bond8 (unregistering): Released all slaves [ 572.891897][T12161] bond9 (unregistering): Released all slaves [ 572.915920][T12161] bond10 (unregistering): Released all slaves [ 572.927849][T23682] x_tables: duplicate entry at hook 2 [ 572.938694][T12161] bond11 (unregistering): Released all slaves [ 572.992003][T23672] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 573.143881][T23689] netlink: 'syz.0.4796': attribute type 1 has an invalid length. [ 573.165173][T12161] tipc: Disabling bearer [ 573.176996][T12161] tipc: Left network mode [ 573.271413][T23698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4800'. [ 573.312275][T23689] 8021q: adding VLAN 0 to HW filter on device bond4 [ 573.329834][T23702] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.351836][T23706] netlink: 'syz.2.4798': attribute type 1 has an invalid length. [ 573.375979][T23706] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4798'. [ 573.389040][T23699] vlan3: entered promiscuous mode [ 573.394165][T23699] bond4: entered promiscuous mode [ 573.408789][T23706] NCSI netlink: No device for ifindex 0 [ 573.414801][T23699] vlan3: entered allmulticast mode [ 573.430046][T23699] bond4: entered allmulticast mode [ 573.578613][T23714] netlink: 'syz.4.4802': attribute type 4 has an invalid length. [ 573.629820][T23718] netlink: 'syz.4.4802': attribute type 4 has an invalid length. [ 574.003176][T23742] net_ratelimit: 4 callbacks suppressed [ 574.003198][T23742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.017783][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.070685][T23747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.106206][T23753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4813'. [ 574.222550][T23750] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4809'. [ 574.573824][T12161] hsr_slave_0: left promiscuous mode [ 574.601720][T12161] hsr_slave_1: left promiscuous mode [ 574.621298][T12161] pim6reg527 (unregistering): left allmulticast mode [ 575.059036][T23793] netlink: 'syz.3.4823': attribute type 1 has an invalid length. [ 575.130973][T23796] netlink: 'syz.0.4824': attribute type 29 has an invalid length. [ 575.152238][T23793] bond6: entered promiscuous mode [ 575.171489][T23796] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 575.181306][T23797] __nla_validate_parse: 3 callbacks suppressed [ 575.181322][T23797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4823'. [ 575.185327][T23796] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 575.205635][T23793] 8021q: adding VLAN 0 to HW filter on device bond6 [ 575.216717][T23796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4824'. [ 575.234974][T23796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4824'. [ 575.245583][T23796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4824'. [ 575.254586][T23796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4824'. [ 575.266423][T23797] ipvlan2: entered allmulticast mode [ 575.272316][T23802] netlink: 'syz.1.4825': attribute type 1 has an invalid length. [ 575.276165][T23797] bond6: entered allmulticast mode [ 575.380247][T23802] netlink: 'syz.1.4825': attribute type 2 has an invalid length. [ 575.395524][T23804] bond6: (slave bridge7): making interface the new active one [ 575.414254][T23804] bridge7: entered promiscuous mode [ 575.442505][T23804] bridge7: entered allmulticast mode [ 575.458119][T23804] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 575.718482][T23825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4830'. [ 575.912175][T12161] IPVS: stop unused estimator thread 0... [ 575.979889][T23827] : renamed from team_slave_1 [ 576.008109][T23829] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 576.110820][T23831] netlink: 'syz.1.4832': attribute type 75 has an invalid length. [ 576.209694][T23837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4834'. [ 576.228530][T23838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4833'. [ 576.268072][T23837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4834'. [ 576.413427][T23843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4835'. [ 576.516330][T23840] bond18: Unable to set peer notification delay as MII monitoring is disabled [ 576.557698][T23840] bond18 (unregistering): Released all slaves [ 576.648131][T23843] gretap0: left allmulticast mode [ 576.656747][T23843] gretap0: left promiscuous mode [ 576.691772][T23843] bridge0: port 1(gretap0) entered disabled state [ 577.035556][T23866] hsr_slave_0: left promiscuous mode [ 577.042292][T23866] hsr_slave_1: left promiscuous mode [ 577.279183][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.340995][ T51] block nbd1: Receive control failed (result -32) [ 577.544607][T23890] openvswitch: netlink: IPv4 tunnel dst address is zero [ 577.989425][T23919] IPv6: NLM_F_CREATE should be specified when creating new route [ 578.044951][ T1098] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.074802][ T1098] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.104430][ T1098] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.126042][ T58] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.695490][T23959] validate_nla: 1 callbacks suppressed [ 578.695509][T23959] netlink: 'syz.0.4864': attribute type 1 has an invalid length. [ 578.909511][ T58] nci: nci_ntf_packet: unknown ntf opcode 0x39 [ 578.934789][T23969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 579.020351][T23980] netlink: 'syz.0.4868': attribute type 8 has an invalid length. [ 579.262894][T23988] bond5: Unable to set down delay as MII monitoring is disabled [ 579.290273][T23988] bond5 (unregistering): Released all slaves [ 579.435241][T23998] tipc: Started in network mode [ 579.440216][T23998] tipc: Node identity 56392b0c51a7, cluster identity 4711 [ 579.470126][T23998] tipc: Enabled bearer , priority 0 [ 579.531801][T24004] syzkaller0: entered promiscuous mode [ 579.537573][T24004] syzkaller0: entered allmulticast mode [ 579.543984][T24004] tipc: Resetting bearer [ 579.645787][T23984] tipc: Resetting bearer [ 581.118840][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.127731][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.410864][T23984] tipc: Disabling bearer [ 581.432059][ T798] tipc: Node number set to 127806220 [ 581.717927][T24043] syzkaller0: entered promiscuous mode [ 581.731366][T24051] __nla_validate_parse: 25 callbacks suppressed [ 581.731388][T24051] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4882'. [ 581.748284][T24043] syzkaller0: entered allmulticast mode [ 581.764690][T24052] netlink: 'syz.0.4884': attribute type 10 has an invalid length. [ 581.893882][T24059] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4888'. [ 583.679823][T24083] xt_hashlimit: size too large, truncated to 1048576 [ 583.690183][T24085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4895'. [ 583.763603][T24089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 583.840585][T24096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4896'. [ 583.883497][T24096] netlink: 'syz.0.4896': attribute type 7 has an invalid length. [ 583.975036][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.986713][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.017818][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.053056][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.324199][T24122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4902'. [ 584.575520][T24140] netlink: 'syz.0.4908': attribute type 4 has an invalid length. [ 584.583737][T24140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4908'. [ 584.677057][T24143] openvswitch: netlink: Unknown key attributes 2 [ 584.819858][T24153] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 585.073687][T24162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4913'. [ 585.245216][T24167] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4913'. [ 585.454552][T24150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.897619][T24189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4917'. [ 585.968951][T24194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4920'. [ 585.979996][T24194] chnl_net:caif_netlink_parms(): no params data found [ 587.175082][T24288] __nla_validate_parse: 1 callbacks suppressed [ 587.175104][T24288] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4954'. [ 587.211099][T24290] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001 [ 587.225162][ T24] IPVS: starting estimator thread 0... [ 587.345681][T24291] IPVS: using max 25 ests per chain, 60000 per kthread [ 587.361939][T24294] netlink: 'syz.2.4956': attribute type 1 has an invalid length. [ 587.412106][T24298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4956'. [ 587.465298][T24294] 8021q: adding VLAN 0 to HW filter on device bond12 [ 587.472700][T24298] bond12: option updelay: invalid value (18446744072807255432) [ 587.480605][T24298] bond12: option updelay: allowed values 0 - 2147483647 [ 587.500959][T24294] bond12: (slave ip6gretap1): making interface the new active one [ 587.526516][T24294] bond12: (slave ip6gretap1): Enslaving as an active interface with an up link [ 587.605377][T24311] netlink: 'syz.4.4959': attribute type 29 has an invalid length. [ 587.614501][T24311] netlink: 'syz.4.4959': attribute type 29 has an invalid length. [ 587.645850][T24311] netlink: 'syz.4.4959': attribute type 29 has an invalid length. [ 587.654194][T24311] netlink: 'syz.4.4959': attribute type 29 has an invalid length. [ 587.675555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.709827][T24311] netlink: 'syz.4.4959': attribute type 29 has an invalid length. [ 587.746867][T24311] netlink: 'syz.4.4959': attribute type 29 has an invalid length. [ 587.763631][T24316] netlink: 'syz.0.4961': attribute type 3 has an invalid length. [ 587.938597][T24326] sit2: entered promiscuous mode [ 587.943668][T24326] sit2: entered allmulticast mode [ 587.994409][T24328] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4966'. [ 588.057067][T24332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4967'. [ 588.165999][T24341] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4970'. [ 588.185880][T24341] NCSI netlink: No device for ifindex 131092 [ 588.220296][T24341] : renamed from veth1_vlan [ 588.356840][T24352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4972'. [ 588.374189][T24357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4973'. [ 588.633417][T24373] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4978'. [ 588.764688][T24378] syzkaller0: entered promiscuous mode [ 588.772231][T24378] syzkaller0: entered allmulticast mode [ 588.788723][T24378] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4980'. [ 590.734347][T24414] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4987'. [ 590.755057][T24414] netlink: ct family unspecified [ 590.772481][T24412] batadv_slave_1: entered promiscuous mode [ 590.779551][T24410] batadv_slave_1: left promiscuous mode [ 591.136945][T24441] hsr_slave_0 (unregistering): left promiscuous mode [ 591.272764][T24446] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 591.281039][T24446] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 591.289076][T24446] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 591.297154][T24446] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 591.305419][T24446] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 591.313479][T24446] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 591.321486][T24446] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 591.329517][T24446] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 592.022852][T24501] validate_nla: 7 callbacks suppressed [ 592.022872][T24501] netlink: 'syz.4.5016': attribute type 1 has an invalid length. [ 592.201263][T24505] bond9: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 592.248879][T24505] bond9: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 592.285567][T24516] __nla_validate_parse: 15 callbacks suppressed [ 592.285588][T24516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5020'. [ 592.344064][T24505] bond9: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 592.401109][T24501] bond9: (slave vcan0): The slave device specified does not support setting the MAC address [ 592.422387][T24501] bond9: (slave vcan0): making interface the new active one [ 592.430655][T24501] bond9: (slave vcan0): Enslaving as an active interface with an up link [ 592.440570][T24513] netlink: 404 bytes leftover after parsing attributes in process `syz.4.5016'. [ 592.751806][T24549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5029'. [ 592.848380][T24553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5030'. [ 592.860227][T24553] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 592.928177][T24560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 592.943879][T24560] IPv6: NLM_F_CREATE should be set when creating new route [ 593.114143][T24571] xfrm2: entered promiscuous mode [ 593.120653][T24571] xfrm2: entered allmulticast mode [ 593.288268][T24576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5038'. [ 593.456376][T24585] netlink: 15 bytes leftover after parsing attributes in process `syz.2.5041'. [ 593.506818][T24584] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5041'. [ 593.570647][T24584] syzkaller1: entered promiscuous mode [ 593.578992][T24584] syzkaller1: entered allmulticast mode [ 593.663605][T24597] pim6reg: entered allmulticast mode [ 593.681137][T24599] pim6reg: left allmulticast mode [ 593.718350][T24587] xt_CT: No such helper "pptp" [ 593.730469][T24597] pim6reg: entered allmulticast mode [ 593.894286][T24611] bond18: Unable to set up delay as MII monitoring is disabled [ 593.915560][T24611] bond18 (unregistering): Released all slaves [ 593.952605][T24614] netlink: 'syz.0.5049': attribute type 1 has an invalid length. [ 594.232570][ T127] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.245234][ T127] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 46256 - 0 [ 594.254260][ T127] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.284946][ T127] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 46256 - 0 [ 594.294271][ T127] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.325964][ T127] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 46256 - 0 [ 594.344208][ T127] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.354313][ T127] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 46256 - 0 [ 596.697903][T24604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 596.852441][T24642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5056'. [ 596.937382][T24642] bridge11: port 1(veth3) entered blocking state [ 596.964687][T24642] bridge11: port 1(veth3) entered disabled state [ 596.973796][T24642] veth3: entered allmulticast mode [ 596.984472][T24647] netlink: 'syz.3.5058': attribute type 1 has an invalid length. [ 596.987143][T24642] veth3: entered promiscuous mode [ 597.001468][T24648] bridge11: port 2(veth0_to_bond) entered blocking state [ 597.011329][T24648] bridge11: port 2(veth0_to_bond) entered disabled state [ 597.022427][T24648] veth0_to_bond: entered allmulticast mode [ 597.042877][T24648] veth0_to_bond: entered promiscuous mode [ 597.108926][T24647] 8021q: adding VLAN 0 to HW filter on device bond7 [ 597.122685][T24656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5059'. [ 597.146337][T24650] net_ratelimit: 47 callbacks suppressed [ 597.146357][T24650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 597.270570][T24655] vlan3: entered promiscuous mode [ 597.282256][T24655] bond7: entered promiscuous mode [ 597.297073][T24655] vlan3: entered allmulticast mode [ 597.302326][T24655] bond7: entered allmulticast mode [ 597.493638][T24679] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 597.816610][T24692] tipc: Started in network mode [ 597.822193][T24692] tipc: Node identity d24ffa738bfe, cluster identity 4711 [ 597.860176][T24692] tipc: Enabled bearer , priority 0 [ 597.874724][T24701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5072'. [ 597.897185][T24701] netlink: 'syz.3.5072': attribute type 11 has an invalid length. [ 597.915441][T24701] netlink: 'syz.3.5072': attribute type 4 has an invalid length. [ 597.930020][T24701] netlink: 'syz.3.5072': attribute type 5 has an invalid length. [ 597.961103][T24701] netlink: 'syz.3.5072': attribute type 6 has an invalid length. [ 597.973578][T24701] netlink: 199748 bytes leftover after parsing attributes in process `syz.3.5072'. [ 598.010636][T24695] syzkaller0: entered promiscuous mode [ 598.016821][T24695] syzkaller0: entered allmulticast mode [ 598.023103][T24695] tipc: Resetting bearer [ 598.067353][ T127] tipc: Resetting bearer [ 598.073975][T24701] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 598.099479][T24691] tipc: Resetting bearer [ 599.614275][T24691] tipc: Disabling bearer [ 599.645432][T24713] bond8: invalid ARP target 0.0.0.0 specified for addition [ 599.652688][T24713] bond8: option arp_ip_target: invalid value (0) [ 599.660827][T24713] bond8 (unregistering): Released all slaves [ 599.700325][T19906] tipc: Node number set to 1504836211 [ 599.901482][T24724] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 600.204082][T24751] netlink: 'syz.2.5084': attribute type 1 has an invalid length. [ 600.232987][T24751] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 600.383861][T24759] bond10: entered promiscuous mode [ 600.466398][T24765] macvlan5: entered promiscuous mode [ 600.471852][T24765] macvlan5: entered allmulticast mode [ 600.478728][T24765] bond10: (slave macvlan5): Opening slave failed [ 600.772440][T24792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5093'. [ 601.000269][T24813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5100'. [ 601.099534][T24821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5103'. [ 601.254132][T24831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5104'. [ 601.352731][T24834] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 601.580401][T24850] netlink: 'syz.3.5109': attribute type 1 has an invalid length. [ 601.706657][T24857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5110'. [ 601.716885][T24856] netlink: 'syz.1.5112': attribute type 1 has an invalid length. [ 601.726643][T24856] netlink: 'syz.1.5112': attribute type 1 has an invalid length. [ 601.735213][T24856] netlink: 'syz.1.5112': attribute type 1 has an invalid length. [ 601.743360][T24856] netlink: 'syz.1.5112': attribute type 2 has an invalid length. [ 601.752651][T24856] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5112'. [ 601.768610][T24852] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 601.786438][T24857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5110'. [ 601.824710][T24850] veth5: entered promiscuous mode [ 601.836270][T24850] bond8: (slave veth5): Enslaving as a backup interface with a down link [ 601.993044][T24869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.095233][T24878] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 602.134908][T24878] bond13: (slave lo): Enslaving as an active interface with an up link [ 602.143950][T24878] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 602.300343][T24889] netlink: 'syz.3.5120': attribute type 1 has an invalid length. [ 602.351546][T24889] bond9: entered promiscuous mode [ 602.357337][T24889] bond9: entered allmulticast mode [ 602.362967][T24889] 8021q: adding VLAN 0 to HW filter on device bond9 [ 602.373262][T24889] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5120'. [ 602.384001][T24889] syzkaller1: entered promiscuous mode [ 602.390763][T24889] syzkaller1: entered allmulticast mode [ 602.809569][T24915] syzkaller0: entered promiscuous mode [ 602.818825][T24915] syzkaller0: entered allmulticast mode [ 603.009918][T24921] validate_nla: 1 callbacks suppressed [ 603.009938][T24921] netlink: 'syz.3.5131': attribute type 1 has an invalid length. [ 603.053002][T24919] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 603.091103][T24921] netlink: 'syz.3.5131': attribute type 4 has an invalid length. [ 603.115524][T24921] __nla_validate_parse: 1 callbacks suppressed [ 603.115544][T24921] netlink: 9422 bytes leftover after parsing attributes in process `syz.3.5131'. [ 603.244756][T24931] netlink: 'syz.0.5133': attribute type 1 has an invalid length. [ 603.265152][T24931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5133'. [ 603.312663][T24933] netlink: 'syz.4.5134': attribute type 1 has an invalid length. [ 603.374706][T24939] netlink: 'syz.1.5137': attribute type 23 has an invalid length. [ 603.553771][T24947] syzkaller1: left promiscuous mode [ 603.559466][T24947] syzkaller1: left allmulticast mode [ 603.768114][T24966] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5145'. [ 604.351510][T25005] netlink: 'syz.4.5154': attribute type 1 has an invalid length. [ 604.618000][T25021] veth5: entered allmulticast mode [ 604.750102][T25026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.759085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.972423][T25032] xfrm1: entered allmulticast mode [ 605.068651][T25038] netlink: 'syz.2.5166': attribute type 1 has an invalid length. [ 605.179214][T25042] ipt_REJECT: TCP_RESET invalid for non-tcp [ 605.252616][T25048] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5169'. [ 605.270134][T25048] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5169'. [ 605.406114][T25061] sctp: [Deprecated]: syz.4.5172 (pid 25061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 605.406114][T25061] Use struct sctp_sack_info instead [ 605.426432][T25061] sctp: [Deprecated]: syz.4.5172 (pid 25061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 605.426432][T25061] Use struct sctp_sack_info instead [ 605.446781][T25063] sctp: [Deprecated]: syz.4.5172 (pid 25063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 605.446781][T25063] Use struct sctp_sack_info instead [ 607.417075][T25009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.427143][T25019] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5159'. [ 607.660933][T25082] wireguard0: entered promiscuous mode [ 607.682483][T25082] wireguard0: entered allmulticast mode [ 607.752989][T25079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5176'. [ 607.939340][T25101] netlink: 'syz.2.5183': attribute type 5 has an invalid length. [ 607.978240][T25101] netlink: 'syz.2.5183': attribute type 1 has an invalid length. [ 608.012599][T25101] 8021q: adding VLAN 0 to HW filter on device bond14 [ 608.202061][T25128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.312110][T25134] netlink: 'syz.3.5192': attribute type 1 has an invalid length. [ 608.354296][T25134] 8021q: adding VLAN 0 to HW filter on device bond10 [ 608.368075][T25137] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 608.452244][T25144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 608.465833][T25087] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 608.598322][T25155] ipt_REJECT: TCP_RESET invalid for non-tcp [ 608.669900][T25159] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20004 [ 608.831250][T25165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5201'. [ 608.843509][T25173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5202'. [ 608.999231][T25188] netlink: 'syz.1.5207': attribute type 22 has an invalid length. [ 609.010852][T25191] x_tables: duplicate underflow at hook 1 [ 609.047745][T25184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 609.059981][T25188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5207'. [ 609.170718][T25188] netlink: 'syz.1.5207': attribute type 22 has an invalid length. [ 609.180126][T25188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5207'. [ 609.240338][T25201] gre0: entered promiscuous mode [ 609.249182][T25201] gre0: entered allmulticast mode [ 609.488505][T25219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 609.502493][T25215] syzkaller0: entered promiscuous mode [ 609.515448][T25215] syzkaller0: entered allmulticast mode [ 609.765191][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 609.827531][T25233] netlink: 'syz.2.5217': attribute type 1 has an invalid length. [ 609.858991][T25234] netlink: 'syz.2.5217': attribute type 1 has an invalid length. [ 609.902918][T25238] sctp: [Deprecated]: syz.1.5218 (pid 25238) Use of int in maxseg socket option. [ 609.902918][T25238] Use struct sctp_assoc_value instead [ 610.199324][T25248] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5220'. [ 610.258606][T25253] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode [ 610.618371][T25265] syzkaller1: entered promiscuous mode [ 610.623924][T25265] syzkaller1: entered allmulticast mode [ 610.657264][T25265] openvswitch: netlink: IP tunnel dst address not specified [ 610.921103][T25286] netlink: 'syz.4.5233': attribute type 39 has an invalid length. [ 611.161748][T25303] x_tables: unsorted underflow at hook 2 [ 611.175310][T25303] netlink: 'syz.4.5238': attribute type 1 has an invalid length. [ 611.195014][T25303] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5238'. [ 611.224286][T25307] netlink: 'syz.3.5240': attribute type 1 has an invalid length. [ 611.348625][T25318] tipc: Trying to set illegal importance in message [ 611.429206][T25315] 8021q: adding VLAN 0 to HW filter on device bond12 [ 611.438989][T25315] bond11: (slave bond12): making interface the new active one [ 611.447219][T25315] bond11: (slave bond12): Enslaving as an active interface with an up link [ 611.478452][T25315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5240'. [ 611.488307][T25323] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5242'. [ 611.533030][T25307] bond11: (slave gretap1): Enslaving as a backup interface with an up link [ 611.578197][T25315] 8021q: adding VLAN 0 to HW filter on device bond11 [ 611.671815][T25331] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 611.698358][T25331] bridge0: entered allmulticast mode [ 611.827344][T25341] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 611.851400][T25341] bond0: (slave gre0): Error -95 calling set_mac_address [ 612.497553][T25387] xt_TCPMSS: Only works on TCP SYN packets [ 612.583958][T25389] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5264'. [ 612.594375][T25389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5264'. [ 613.342606][T25426] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 613.507853][T25432] x_tables: duplicate underflow at hook 2 [ 613.585001][T25440] netlink: 'syz.2.5278': attribute type 39 has an invalid length. [ 613.604151][T25441] xt_connbytes: Forcing CT accounting to be enabled [ 613.648629][T25445] netlink: 'syz.3.5279': attribute type 15 has an invalid length. [ 613.676845][T25446] netlink: 'syz.3.5279': attribute type 15 has an invalid length. [ 613.694555][T25445] syzkaller0: entered promiscuous mode [ 613.700885][T25445] syzkaller0: entered allmulticast mode [ 613.934631][T25455] __nla_validate_parse: 7 callbacks suppressed [ 613.934660][T25455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5282'. [ 614.216833][T25467] Bluetooth: MGMT ver 1.23 [ 614.241293][T25471] x_tables: unsorted underflow at hook 2 [ 614.535556][T25478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5291'. [ 614.547015][T25491] veth0: entered promiscuous mode [ 614.554385][T25491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5294'. [ 614.644061][T25497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5294'. [ 614.668493][T25478] batman_adv: batadv0: Removing interface: ipvlan2 [ 614.699050][T25491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5294'. [ 614.838561][T25504] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5294'. [ 615.833925][T25535] xt_l2tp: v2 sid > 0xffff: 1114112 [ 615.841714][T25535] xt_l2tp: v2 sid > 0xffff: 1114112 [ 615.848193][T25535] xt_l2tp: v2 sid > 0xffff: 1114112 [ 615.854142][T25535] xt_l2tp: v2 sid > 0xffff: 1114112 [ 615.864244][T25537] ip6gre1: entered allmulticast mode [ 616.235167][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 616.235165][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 617.440350][T25485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 617.758943][T25561] syzkaller0: entered promiscuous mode [ 617.774173][T25561] syzkaller0: entered allmulticast mode [ 617.781329][T25559] xt_l2tp: v2 doesn't support IP mode [ 617.796616][T25562] netlink: 'syz.2.5308': attribute type 1 has an invalid length. [ 617.799817][T25559] netlink: 'syz.0.5309': attribute type 1 has an invalid length. [ 617.805211][T25562] netlink: 280 bytes leftover after parsing attributes in process `syz.2.5308'. [ 617.898423][T25547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5305'. [ 617.914532][T25547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5305'. [ 618.056183][T25580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5312'. [ 618.379955][T25601] netlink: 'syz.4.5317': attribute type 1 has an invalid length. [ 618.662546][T25611] syzkaller0: entered promiscuous mode [ 618.668492][T25611] syzkaller0: entered allmulticast mode [ 618.716764][T25614] syzkaller0: entered promiscuous mode [ 618.722324][T25614] syzkaller0: entered allmulticast mode [ 618.733906][T25614] netlink: 'syz.3.5323': attribute type 12 has an invalid length. [ 620.252283][T25614] bond13: option primary_reselect: invalid value (255) [ 620.261180][T25614] bond13 (unregistering): Released all slaves [ 620.483100][T25646] __nla_validate_parse: 3 callbacks suppressed [ 620.483118][T25646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5333'. [ 620.583073][T25657] openvswitch: netlink: Key type 16372 is out of range max 32 [ 620.747488][T25668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5337'. [ 620.757372][T25668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5337'. [ 620.995208][T25682] tipc: Invalid UDP bearer configuration [ 620.995264][T25682] tipc: Enabling of bearer rejected, failed to enable media [ 621.103078][T25690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5345'. [ 621.128286][T25692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5344'. [ 621.137754][T25692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5344'. [ 621.183405][T25694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5343'. [ 621.659583][T25723] netlink: 'syz.3.5353': attribute type 1 has an invalid length. [ 621.710659][T25724] netlink: 'syz.2.5352': attribute type 83 has an invalid length. [ 621.763415][T25691] netlink: 'syz.1.5343': attribute type 1 has an invalid length. [ 621.772362][T25691] netlink: 'syz.1.5343': attribute type 1 has an invalid length. [ 621.826691][T25723] bond13: entered promiscuous mode [ 621.832762][T25723] 8021q: adding VLAN 0 to HW filter on device bond13 [ 621.842620][T25730] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 621.882000][T25723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5353'. [ 621.894653][T25731] ipvlan3: entered allmulticast mode [ 621.901776][T25731] bond13: entered allmulticast mode [ 622.204518][T25745] netlink: 'syz.3.5359': attribute type 1 has an invalid length. [ 622.291519][T25745] bond14: entered promiscuous mode [ 622.305779][T25745] 8021q: adding VLAN 0 to HW filter on device bond14 [ 622.371156][T25752] : entered promiscuous mode [ 622.551597][T25752] 8021q: adding VLAN 0 to HW filter on device bond14 [ 622.567913][T25752] bond14: (slave vti0): The slave device specified does not support setting the MAC address [ 622.590660][T25752] bond14: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 622.626004][T25752] bond14: (slave vti0): making interface the new active one [ 622.643698][T25752] vti0: entered promiscuous mode [ 622.662410][T25752] bond14: (slave vti0): Enslaving as an active interface with an up link [ 622.968745][T25790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.977656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.005407][T25790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.016277][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.045139][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.130080][T25793] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 623.143023][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.152615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.182868][T25795] netlink: 'syz.3.5374': attribute type 1 has an invalid length. [ 623.204984][T25795] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5374'. [ 623.221769][T25793] netlink: 'syz.1.5373': attribute type 21 has an invalid length. [ 623.254902][T25793] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5373'. [ 623.815389][T25820] xt_CT: You must specify a L4 protocol and not use inversions on it [ 623.917584][T25818] syzkaller0: entered promiscuous mode [ 623.923929][T25818] syzkaller0: entered allmulticast mode [ 624.396517][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 624.640501][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.987448][T25830] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 626.322963][T25869] __nla_validate_parse: 1 callbacks suppressed [ 626.322986][T25869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5394'. [ 626.514711][T25878] netlink: 'syz.2.5397': attribute type 1 has an invalid length. [ 626.528579][T25878] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5397'. [ 626.553465][T25878] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5397'. [ 626.574068][T25878] netlink: 'syz.2.5397': attribute type 1 has an invalid length. [ 626.583653][T25878] netlink: 'syz.2.5397': attribute type 8 has an invalid length. [ 626.604065][T25878] netlink: 582 bytes leftover after parsing attributes in process `syz.2.5397'. [ 626.656972][T25892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5400'. [ 626.718797][T25888] can: request_module (can-proto-5) failed. [ 626.809413][T25896] IPv6: NLM_F_CREATE should be specified when creating new route [ 626.866015][T25898] syzkaller1: entered promiscuous mode [ 626.877432][T25898] syzkaller1: entered allmulticast mode [ 626.922915][T25907] netlink: 'syz.0.5406': attribute type 9 has an invalid length. [ 626.937658][T25905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.955856][T25907] netlink: 'syz.0.5406': attribute type 11 has an invalid length. [ 626.969696][T25905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.979231][T25907] netlink: 'syz.0.5406': attribute type 12 has an invalid length. [ 627.001585][T25907] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.5406'. [ 627.045392][T25907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5406'. [ 627.176781][T25912] bond11: option resend_igmp: invalid value (32767) [ 627.184367][T25912] bond11: option resend_igmp: allowed values 0 - 255 [ 627.210693][T25912] bond11 (unregistering): Released all slaves [ 627.367911][T25930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5411'. [ 627.611497][T25947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5416'. [ 627.793929][T25957] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5420'. [ 627.813838][T25952] macsec1: entered promiscuous mode [ 628.181983][T25983] netlink: 'syz.1.5424': attribute type 6 has an invalid length. [ 628.223703][T25985] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 628.231031][T25985] IPv6: NLM_F_CREATE should be set when creating new route [ 628.238379][T25985] IPv6: NLM_F_CREATE should be set when creating new route [ 628.245674][T25985] IPv6: NLM_F_CREATE should be set when creating new route [ 628.438779][T26007] syzkaller0: entered promiscuous mode [ 628.469939][T26007] syzkaller0: entered allmulticast mode [ 628.832069][T26037] : renamed from hsr0 (while UP) [ 628.976928][T26043] netlink: 'syz.3.5441': attribute type 1 has an invalid length. [ 629.064232][T26043] 8021q: adding VLAN 0 to HW filter on device bond15 [ 629.075876][T26051] bond15: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 629.175050][T26051] bond15: entered allmulticast mode [ 629.630290][T26081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.679603][T26081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.724113][T26081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.771699][T26081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.810004][T26081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.949026][T26078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.979474][T26078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.280957][T26110] xt_connbytes: Forcing CT accounting to be enabled [ 631.036275][T26155] netlink: 'syz.0.5465': attribute type 1 has an invalid length. [ 631.099137][T26152] netlink: 'syz.3.5464': attribute type 10 has an invalid length. [ 631.135413][T26160] lo: entered allmulticast mode [ 631.140858][T26160] lo: left allmulticast mode [ 631.175374][T26163] tipc: Enabling of bearer rejected, failed to enable media [ 631.209604][T26152] veth0_macvtap: left promiscuous mode [ 631.418357][T26176] __nla_validate_parse: 6 callbacks suppressed [ 631.418378][T26176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5471'. [ 631.591930][T26185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5473'. [ 631.790443][T26199] netlink: 'syz.4.5478': attribute type 1 has an invalid length. [ 631.856326][T26199] bond11: (slave bridge12): making interface the new active one [ 631.873298][T26199] bond11: (slave bridge12): Enslaving as an active interface with an up link [ 631.963031][T26211] IPv6: NLM_F_CREATE should be specified when creating new route [ 631.978143][T26211] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 632.063962][T26214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5482'. [ 632.077052][T26219] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5482'. [ 632.198316][T26225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 632.235596][T26226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 632.540107][T26251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5486'. [ 632.649547][T26260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5494'. [ 632.731901][T26261] nbd: couldn't find device at index 2 [ 632.889439][T26270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5496'. [ 632.939325][T26269] bond18: (slave bond_slave_1): Device is not our slave [ 632.946566][T26269] bond18: option active_slave: invalid value (bond_slave_1) [ 632.973686][T26269] bond18 (unregistering): Released all slaves [ 633.036918][T26279] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5499'. [ 633.341900][T26304] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.5508'. [ 633.351859][T26293] syzkaller1: entered promiscuous mode [ 633.358582][T26293] syzkaller1: entered allmulticast mode [ 633.378330][T26293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5506'. [ 633.475412][T26299] syzkaller0: entered promiscuous mode [ 633.481045][T26299] syzkaller0: entered allmulticast mode [ 635.094584][T26313] hsr_slave_0 (unregistering): left promiscuous mode [ 635.334156][T26330] xt_hashlimit: size too large, truncated to 1048576 [ 635.419999][T26339] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 635.977312][T26364] netlink: 'syz.3.5528': attribute type 4 has an invalid length. [ 636.000117][T26372] set match dimension is over the limit! [ 636.601846][T26405] netlink: 'syz.4.5539': attribute type 1 has an invalid length. [ 636.618490][T26405] netlink: 'syz.4.5539': attribute type 3 has an invalid length. [ 636.635179][T26405] __nla_validate_parse: 7 callbacks suppressed [ 636.635201][T26405] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5539'. [ 637.120772][T26428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5544'. [ 637.163152][T26434] netlink: 'syz.4.5545': attribute type 2 has an invalid length. [ 637.343504][T26441] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5548'. [ 637.502766][T26445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5546'. [ 637.745084][T26459] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5552'. [ 637.801566][T26462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5554'. [ 637.899575][T26467] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 637.921506][T26469] netlink: 'syz.1.5556': attribute type 2 has an invalid length. [ 637.950128][T26469] netlink: 'syz.1.5556': attribute type 1 has an invalid length. [ 637.964166][T26471] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 638.072984][T26474] netlink: zone id is out of range [ 638.105395][T26474] netlink: zone id is out of range [ 638.110583][T26474] netlink: zone id is out of range [ 638.132459][T26474] netlink: zone id is out of range [ 638.140512][T26474] netlink: zone id is out of range [ 638.146574][T26474] netlink: zone id is out of range [ 638.152028][T26474] netlink: zone id is out of range [ 638.162015][T26474] netlink: set zone limit has 4 unknown bytes [ 638.256964][T26488] team0 (unregistering): Port device batadv1 removed [ 638.372728][T26495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5566'. [ 638.384254][T26495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5566'. [ 638.399278][T26493] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5565'. [ 638.525382][T26504] syzkaller0: entered promiscuous mode [ 638.530937][T26504] syzkaller0: entered allmulticast mode [ 638.586168][T26504] delete_channel: no stack [ 638.665678][T26507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5570'. [ 638.815453][T26520] netlink: 'syz.0.5573': attribute type 4 has an invalid length. [ 638.921418][T26527] syzkaller0: entered promiscuous mode [ 638.937259][T26527] syzkaller0: entered allmulticast mode [ 638.979519][T26527] 0: reclassify loop, rule prio 0, protocol 800 [ 639.005209][T26527] openvswitch: netlink: Unknown key attributes 2 [ 639.079970][T26537] netlink: 'syz.1.5578': attribute type 1 has an invalid length. [ 639.255460][T26545] bond18: (slave bridge0): making interface the new active one [ 639.266195][T26545] bond18: (slave bridge0): Enslaving as an active interface with an up link [ 639.393153][T26558] SET target dimension over the limit! [ 661.385790][T26610] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5587'. [ 661.447214][T26616] ieee802154 phy1 wpan1: encryption failed: -22 [ 661.524220][T26625] netlink: 'syz.0.5593': attribute type 23 has an invalid length. [ 661.748788][T26637] sctp: [Deprecated]: syz.0.5597 (pid 26637) Use of int in max_burst socket option. [ 661.748788][T26637] Use struct sctp_assoc_value instead [ 661.899411][T26641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5598'. [ 661.958270][T26646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5598'. [ 661.972706][T26646] xt_CT: You must specify a L4 protocol and not use inversions on it [ 661.999192][T26650] netlink: 'syz.4.5601': attribute type 2 has an invalid length. [ 662.211415][T26663] netlink: 'syz.3.5605': attribute type 8 has an invalid length. [ 662.254413][T26663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5605'. [ 662.393797][T26670] bond15: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 662.408174][T26670] bond15: entered promiscuous mode [ 662.413377][T26670] bond15: entered allmulticast mode [ 662.422593][T26670] 8021q: adding VLAN 0 to HW filter on device bond15 [ 662.518443][T26681] netlink: 'syz.0.5610': attribute type 4 has an invalid length. [ 662.605100][T26681] netlink: 'syz.0.5610': attribute type 4 has an invalid length. [ 663.009943][T26701] syzkaller0: entered promiscuous mode [ 663.016075][T26701] syzkaller0: entered allmulticast mode [ 663.026665][T26705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 663.407488][T26719] netlink: 'syz.3.5621': attribute type 1 has an invalid length. [ 663.533261][T26736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 663.644238][T26736] syzkaller1: entered promiscuous mode [ 663.649987][T26736] syzkaller1: entered allmulticast mode [ 663.739614][T26747] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 663.783255][T26751] netlink: 'syz.0.5629': attribute type 1 has an invalid length. [ 663.834848][T26754] syzkaller0: entered promiscuous mode [ 663.840671][T26754] syzkaller0: entered allmulticast mode [ 663.849450][T26751] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 663.981200][T26762] netlink: 'syz.2.5634': attribute type 1 has an invalid length. [ 664.016388][T26769] netlink: 'syz.1.5633': attribute type 2 has an invalid length. [ 664.036039][T26762] bond16: entered promiscuous mode [ 664.041709][T26762] 8021q: adding VLAN 0 to HW filter on device bond16 [ 664.060840][T26769] 9: entered promiscuous mode [ 664.175513][T26775] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5637'. [ 664.187683][T26775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5637'. [ 664.198306][T26775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5637'. [ 664.286868][T26780] netlink: 'syz.1.5637': attribute type 9 has an invalid length. [ 664.308918][T26780] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5637'. [ 664.405663][T26784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5639'. [ 664.417121][T26784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5639'. [ 664.438180][T26784] bridge_slave_0: entered allmulticast mode [ 664.736377][T26798] veth0_macvtap: mtu less than device minimum [ 665.157444][T26828] openvswitch: netlink: Flow actions attr not present in new flow. [ 665.179255][T26831] openvswitch: netlink: Flow actions attr not present in new flow. [ 665.501827][T26849] pimreg: entered allmulticast mode [ 665.934430][T26884] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 665.944656][T26877] bond18: (slave bridge0): Releasing active interface [ 666.101281][T26877] tipc: Enabled bearer , priority 0 [ 666.188053][T26901] 9: entered promiscuous mode [ 666.201516][T26877] syzkaller0: entered promiscuous mode [ 666.214481][T26877] syzkaller0: entered allmulticast mode [ 666.384204][T26887] tipc: Resetting bearer [ 666.415912][T26918] __nla_validate_parse: 19 callbacks suppressed [ 666.415933][T26918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5676'. [ 666.470614][T26876] tipc: Resetting bearer [ 666.492663][T26876] tipc: Disabling bearer [ 667.159213][T26946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5683'. [ 667.185186][T26946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5683'. [ 667.209352][T26946] validate_nla: 3 callbacks suppressed [ 667.209429][T26946] netlink: 'syz.1.5683': attribute type 3 has an invalid length. [ 667.235320][T26956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5686'. [ 667.466302][T26971] geneve3: entered promiscuous mode [ 667.494206][ T1098] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 41458 - 0 [ 667.506231][ T1098] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 41458 - 0 [ 667.542583][ T1098] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 41458 - 0 [ 667.562277][ T1098] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 41458 - 0 [ 667.678793][T26981] syzkaller1: entered promiscuous mode [ 667.697240][T26981] syzkaller1: entered allmulticast mode [ 667.946909][T26997] netlink: 'syz.2.5698': attribute type 32 has an invalid length. [ 667.957084][T26997] netlink: 'syz.2.5698': attribute type 32 has an invalid length. [ 668.118692][T27007] xt_TPROXY: Can be used only with -p tcp or -p udp [ 668.152725][T27007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5701'. [ 668.360429][T27022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5704'. [ 668.952185][ T51] block nbd3: Receive control failed (result -32) [ 671.115961][T27010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 671.176637][T27039] netlink: 'syz.4.5707': attribute type 2 has an invalid length. [ 671.192615][T27039] netlink: 'syz.4.5707': attribute type 2 has an invalid length. [ 671.285451][T27046] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5709'. [ 671.531187][T27062] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5714'. [ 671.649353][T27066] netlink: 'syz.1.5715': attribute type 10 has an invalid length. [ 671.688017][T27076] netlink: 'syz.1.5715': attribute type 10 has an invalid length. [ 671.736512][T27078] tipc: New replicast peer: 255.255.255.255 [ 671.748146][T27078] tipc: Enabled bearer , priority 10 [ 671.821174][T27086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5721'. [ 671.980598][T27097] sctp: [Deprecated]: syz.1.5724 (pid 27097) Use of int in max_burst socket option deprecated. [ 671.980598][T27097] Use struct sctp_assoc_value instead [ 672.023169][T27103] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.5727'. [ 672.042242][T27097] bond19: invalid ARP target 0.0.0.0 specified for addition [ 672.050105][T27097] bond19: option arp_ip_target: invalid value (0) [ 672.059715][T27097] bond19 (unregistering): Released all slaves [ 672.088863][T27103] netlink: set zone limit has 4 unknown bytes [ 672.102274][T27106] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.5726'. [ 672.131636][T27103] netlink: zone id is out of range [ 672.140159][T27103] netlink: zone id is out of range [ 672.161858][T27103] netlink: zone id is out of range [ 672.168162][T27103] netlink: zone id is out of range [ 672.173547][T27103] netlink: zone id is out of range [ 672.179215][T27103] netlink: zone id is out of range [ 672.201147][T27103] netlink: zone id is out of range [ 672.206994][T27103] netlink: zone id is out of range [ 672.212345][T27103] netlink: zone id is out of range [ 672.458818][T27127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5731'. [ 672.565312][T27135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5734'. [ 672.580318][T27133] netlink: 'syz.3.5735': attribute type 30 has an invalid length. [ 672.618459][T27136] netlink: 'syz.0.5736': attribute type 5 has an invalid length. [ 672.628940][T27133] bond16: option arp_missed_max: invalid value (0) [ 672.636477][T27133] bond16: option arp_missed_max: allowed values 1 - 255 [ 672.645898][T27133] bond16 (unregistering): Released all slaves [ 672.850518][T27149] netlink: 'syz.3.5739': attribute type 10 has an invalid length. [ 672.959947][T27150] netlink: 'syz.3.5739': attribute type 10 has an invalid length. [ 673.206955][T27170] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.5747'. [ 673.225412][T27173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5748'. [ 673.231465][T27170] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.5747'. [ 673.240054][T27173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5748'. [ 673.370277][T27180] !: renamed from dummy0 [ 673.608669][T27196] bridge_slave_0: invalid flags given to default FDB implementation [ 673.724259][T27200] IPv6: sit3: Disabled Multicast RS [ 674.112357][T27219] ip6t_srh: unknown srh invflags 4000 [ 674.120016][T27220] ip6t_srh: unknown srh invflags 4000 [ 674.576353][T27242] netlink: 'syz.4.5768': attribute type 1 has an invalid length. [ 674.598490][T27242] NCSI netlink: No device for ifindex 0 [ 674.920071][T27272] xt_hashlimit: size too large, truncated to 1048576 [ 676.248756][T27325] netlink: 'syz.0.5790': attribute type 30 has an invalid length. [ 676.494233][T27356] netlink: 'syz.4.5794': attribute type 1 has an invalid length. [ 676.674098][T27366] netlink: 'syz.2.5797': attribute type 13 has an invalid length. [ 676.699886][T27366] __nla_validate_parse: 76 callbacks suppressed [ 676.699912][T27366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5797'. [ 676.730538][T27356] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5794'. [ 676.759235][T27370] netlink: 'syz.1.5796': attribute type 4 has an invalid length. [ 676.903199][T27380] veth0: entered promiscuous mode [ 676.910357][T27380] veth0: left promiscuous mode [ 677.528175][T27404] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 677.538311][T27404] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 677.571419][T27407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5808'. [ 677.970387][T27432] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5814'. [ 678.034432][T27436] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5817'. [ 678.424536][T27472] pim6reg: entered allmulticast mode [ 678.463699][T27477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5826'. [ 678.542544][T27484] tipc: Enabling of bearer rejected, media not registered [ 678.579606][T27484] netlink: 'syz.3.5827': attribute type 64 has an invalid length. [ 678.722767][T27489] syzkaller1: entered promiscuous mode [ 678.728592][T27489] syzkaller1: entered allmulticast mode [ 679.109498][T27512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5837'. [ 679.129109][T27512] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5837'. [ 679.141139][T27511] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5838'. [ 679.173798][T27516] x_tables: duplicate underflow at hook 1 [ 679.207069][T27517] x_tables: duplicate underflow at hook 2 [ 679.737991][T27536] syzkaller0: entered promiscuous mode [ 679.743707][T27536] syzkaller0: entered allmulticast mode [ 681.609256][T27569] syzkaller1: entered promiscuous mode [ 681.634952][T27569] syzkaller1: entered allmulticast mode [ 681.687982][T27569] netlink: 'syz.3.5853': attribute type 9 has an invalid length. [ 681.874109][T27587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5856'. [ 681.997999][T27591] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5856'. [ 682.026712][T27587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5856'. [ 682.126739][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 682.137876][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 682.149461][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 682.158025][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 682.168100][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 682.973538][T27597] chnl_net:caif_netlink_parms(): no params data found [ 683.036678][T27635] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5867'. [ 683.091007][T27640] netlink: 'syz.3.5869': attribute type 24 has an invalid length. [ 683.144297][T27597] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.157570][T27597] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.166194][T27597] bridge_slave_0: entered allmulticast mode [ 683.175570][T27597] bridge_slave_0: entered promiscuous mode [ 683.183587][T27642] tipc: Enabled bearer , priority 0 [ 683.208121][T27597] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.225240][T27597] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.232690][T27597] bridge_slave_1: entered allmulticast mode [ 683.251424][T27597] bridge_slave_1: entered promiscuous mode [ 683.262530][T27643] syzkaller0: entered promiscuous mode [ 683.269470][T27643] syzkaller0: entered allmulticast mode [ 683.329313][T27652] syzkaller1: left promiscuous mode [ 683.334606][T27652] syzkaller1: left allmulticast mode [ 683.372035][T27643] tipc: Resetting bearer [ 683.396617][T27597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.420100][T27597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.490677][T27638] tipc: Resetting bearer [ 683.512403][T27638] tipc: Disabling bearer [ 683.589254][T27597] team0: Port device team_slave_0 added [ 683.615940][T27597] team0: Port device team_slave_1 added [ 683.754244][T27597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.764737][T27597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.797871][T27597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.825832][T27597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.837319][T27597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.859653][T27683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5881'. [ 683.867606][T27597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.052954][T27597] hsr_slave_0: entered promiscuous mode [ 684.060455][T27597] hsr_slave_1: entered promiscuous mode [ 684.174053][T27696] netlink: 'syz.4.5886': attribute type 2 has an invalid length. [ 684.235076][ T51] Bluetooth: hci3: command tx timeout [ 684.315065][T27698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5887'. [ 684.324192][T27698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5887'. [ 684.497463][T27711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5892'. [ 684.541148][T27717] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5893'. [ 684.594056][T27717] GUP no longer grows the stack in syz.0.5893 (27717): 200000003000-200000005000 (200000001000) [ 684.613490][T27717] CPU: 1 UID: 0 PID: 27717 Comm: syz.0.5893 Not tainted syzkaller #0 PREEMPT(full) [ 684.613525][T27717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 684.613545][T27717] Call Trace: [ 684.613554][T27717] [ 684.613564][T27717] dump_stack_lvl+0xe8/0x150 [ 684.613612][T27717] __get_user_pages+0x2453/0x29d0 [ 684.613648][T27717] ? __lock_acquire+0x6b5/0x2cf0 [ 684.613699][T27717] ? __gup_longterm_locked+0xc4e/0x1630 [ 684.613733][T27717] ? down_read_killable+0x1bb/0x340 [ 684.613767][T27717] __gup_longterm_locked+0xdcf/0x1630 [ 684.613829][T27717] gup_fast_fallback+0x1d82/0x22e0 [ 684.613900][T27717] ? __pfx_gup_fast_fallback+0x10/0x10 [ 684.613937][T27717] ? is_valid_gup_args+0x11f/0x200 [ 684.613973][T27717] ? get_user_pages_fast+0x4d/0xb0 [ 684.614008][T27717] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 684.614052][T27717] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 684.614081][T27717] iov_iter_get_pages2+0x5e/0xa0 [ 684.614118][T27717] __se_sys_vmsplice+0x7b3/0x1490 [ 684.614175][T27717] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 684.614214][T27717] ? __pfx_futex_wake+0x10/0x10 [ 684.614324][T27717] do_syscall_64+0x14d/0xf80 [ 684.614344][T27717] ? trace_irq_disable+0x3b/0x150 [ 684.614378][T27717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.614401][T27717] ? clear_bhb_loop+0x40/0x90 [ 684.614429][T27717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.614456][T27717] RIP: 0033:0x7fa63d19c799 [ 684.614478][T27717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.614498][T27717] RSP: 002b:00007fa63e0d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 684.614524][T27717] RAX: ffffffffffffffda RBX: 00007fa63d415fa0 RCX: 00007fa63d19c799 [ 684.614540][T27717] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 684.614554][T27717] RBP: 00007fa63d232c99 R08: 0000000000000000 R09: 0000000000000000 [ 684.614567][T27717] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 684.614580][T27717] R13: 00007fa63d416038 R14: 00007fa63d415fa0 R15: 00007ffef92f5fc8 [ 684.614625][T27717] [ 684.938433][T27726] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5898'. [ 685.136916][T27736] bond7: (slave gre0): Device is not bonding slave [ 685.143507][T27736] bond7: option active_slave: invalid value (gre0) [ 685.165943][T27736] bond7 (unregistering): Released all slaves [ 685.196193][T27740] netlink: 'syz.1.5901': attribute type 75 has an invalid length. [ 685.205491][T27740] netlink: 'syz.1.5901': attribute type 10 has an invalid length. [ 685.246794][T27740] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 685.256910][T27742] syzkaller0: entered promiscuous mode [ 685.262468][T27742] syzkaller0: entered allmulticast mode [ 685.432039][T27597] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 685.449344][T27597] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 685.464509][T27597] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 685.496734][T27597] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 685.510664][T27751] xt_CT: You must specify a L4 protocol and not use inversions on it [ 685.678865][T27597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.719338][T27597] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.747671][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.755108][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.781948][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.789232][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.081568][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.317302][ T51] Bluetooth: hci3: command tx timeout [ 686.431142][T27597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.631746][T27597] veth0_vlan: entered promiscuous mode [ 686.671076][T27597] veth1_vlan: entered promiscuous mode [ 686.748870][T27597] veth0_macvtap: entered promiscuous mode [ 686.760226][T27597] veth1_macvtap: entered promiscuous mode [ 686.807668][T27597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.853449][T27597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.872249][T27834] netlink: 'syz.3.5922': attribute type 29 has an invalid length. [ 686.892975][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.902819][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.913627][T27834] netlink: 'syz.3.5922': attribute type 29 has an invalid length. [ 686.923360][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.932885][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.943765][T27834] netlink: 'syz.3.5922': attribute type 29 has an invalid length. [ 686.960660][T27834] netlink: 'syz.3.5922': attribute type 29 has an invalid length. [ 686.969311][T27834] netlink: 'syz.3.5922': attribute type 29 has an invalid length. [ 688.395362][ T51] Bluetooth: hci3: command tx timeout [ 689.735803][T27829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 689.845195][T12161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.853077][T12161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.933294][T12161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.951579][T12161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.022669][T27857] tipc: Enabled bearer , priority 0 [ 690.052286][T27857] syzkaller0: entered promiscuous mode [ 690.080531][T27857] syzkaller0: entered allmulticast mode [ 690.139975][T27866] __nla_validate_parse: 5 callbacks suppressed [ 690.139998][T27866] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5928'. [ 690.174510][T27865] tipc: Resetting bearer [ 690.189518][T27869] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5857'. [ 690.226730][T27854] tipc: Resetting bearer [ 690.254657][T27854] tipc: Disabling bearer [ 690.265393][T27875] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5927'. [ 690.450431][T27863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.477268][ T51] Bluetooth: hci3: command tx timeout [ 690.788960][T27904] tipc: Enabling of bearer rejected, failed to enable media [ 690.908767][T27912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5937'. [ 691.122917][T27927] netlink: 'syz.0.5939': attribute type 3 has an invalid length. [ 691.131655][T27927] netlink: 'syz.0.5939': attribute type 3 has an invalid length. [ 691.158733][T27925] netlink: 'syz.4.5940': attribute type 1 has an invalid length. [ 691.201585][T27925] bond13: entered promiscuous mode [ 691.213123][T27925] bond13: entered allmulticast mode [ 691.235707][T27925] 8021q: adding VLAN 0 to HW filter on device bond13 [ 691.309001][T27931] macvlan5: entered promiscuous mode [ 691.340011][T27931] macvlan5: entered allmulticast mode [ 691.359189][T27931] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 691.393995][T27937] netlink: 'syz.3.5942': attribute type 1 has an invalid length. [ 691.564857][T27937] 8021q: adding VLAN 0 to HW filter on device bond16 [ 691.573775][T27940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5944'. [ 691.591266][T27940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5944'. [ 691.606089][T27940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5944'. [ 691.628688][T27942] vlan4: entered promiscuous mode [ 691.633815][T27942] bond16: entered promiscuous mode [ 691.642450][T27942] vlan4: entered allmulticast mode [ 691.649194][T27942] bond16: entered allmulticast mode [ 691.868198][T27963] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 691.996803][T27964] syzkaller1: entered promiscuous mode [ 692.002365][T27964] syzkaller1: entered allmulticast mode [ 692.038427][T27975] x_tables: duplicate underflow at hook 1 [ 692.047146][T27972] netlink: 'syz.4.5951': attribute type 2 has an invalid length. [ 692.060059][T27964] netlink: 'syz.1.5949': attribute type 1 has an invalid length. [ 692.260911][T27985] netlink: 'syz.3.5953': attribute type 1 has an invalid length. [ 692.286690][T27985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5953'. [ 692.491990][T28002] block nbd0: Unsupported socket: should be TCP or UNIX. [ 692.504518][T28001] netlink: 'syz.0.5959': attribute type 4 has an invalid length. [ 693.279052][T28022] : renamed from pim6reg (while UP) [ 693.411619][T28033] xt_l2tp: unknown flags: 10 [ 693.461817][T28036] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5969'. [ 693.511044][T28036] net_ratelimit: 57 callbacks suppressed [ 693.511066][T28036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.575577][T28036] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5969'. [ 693.588316][T28040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.704256][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 693.718565][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 693.728804][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 693.738178][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 693.745983][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 694.485390][T28042] chnl_net:caif_netlink_parms(): no params data found [ 694.733768][T28042] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.741360][T28042] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.749383][T28042] bridge_slave_0: entered allmulticast mode [ 694.758521][T28042] bridge_slave_0: entered promiscuous mode [ 694.790521][T28042] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.800493][T28042] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.808223][T28042] bridge_slave_1: entered allmulticast mode [ 694.818303][T28042] bridge_slave_1: entered promiscuous mode [ 694.898098][T28042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.921598][T28042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.986918][T28042] team0: Port device team_slave_0 added [ 694.996963][T28042] team0: Port device team_slave_1 added [ 695.064203][T28042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.071956][T28042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.099042][T28042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.130484][T28042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.145096][T28042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.201863][T28042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.261587][T28108] netlink: 'syz.1.5992': attribute type 1 has an invalid length. [ 695.315542][T28042] hsr_slave_0: entered promiscuous mode [ 695.322621][T28042] hsr_slave_1: entered promiscuous mode [ 695.333307][T28042] debugfs: 'hsr0' already exists in 'hsr' [ 695.344908][T28042] Cannot create hsr debugfs directory [ 695.382511][T28113] syz.2.5994 uses old SIOCAX25GETINFO [ 695.787308][T28125] netlink: 'syz.1.5997': attribute type 1 has an invalid length. [ 695.836748][ T5846] Bluetooth: hci5: command tx timeout [ 695.907799][T28125] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 695.929525][T28128] __nla_validate_parse: 4 callbacks suppressed [ 695.929550][T28128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5998'. [ 695.999354][T28128] chnl_net:caif_netlink_parms(): no params data found [ 696.138618][T28142] syzkaller0: entered promiscuous mode [ 696.144167][T28142] syzkaller0: entered allmulticast mode [ 696.271351][T28151] pimreg3: entered allmulticast mode [ 696.280243][T28147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6004'. [ 696.470307][T28162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6005'. [ 696.720051][T28042] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 696.750731][T28042] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 696.787735][T28042] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 696.828952][T28042] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 697.157973][T28042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.182813][T28209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6020'. [ 697.219197][T28214] netlink: 'syz.0.6021': attribute type 18 has an invalid length. [ 697.227500][T28042] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.263817][T28216] openvswitch: netlink: Missing valid actions attribute. [ 697.273261][T28216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.301601][T28216] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 697.338500][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.345861][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.393500][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.400935][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.540645][T28229] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6026'. [ 697.915519][ T5846] Bluetooth: hci5: command tx timeout [ 697.955552][T28261] IPVS: length: 249 != 24 [ 698.020434][T28042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.150024][T28273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6035'. [ 698.193563][T28279] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 698.215197][T28280] netlink: 'syz.0.6035': attribute type 1 has an invalid length. [ 698.266536][T28273] IPv6: Can't replace route, no match found [ 698.294684][T28280] netlink: 'syz.0.6035': attribute type 1 has an invalid length. [ 698.394449][T28285] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6037'. [ 698.446885][T28287] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6037'. [ 698.470175][T28289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6038'. [ 698.482583][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.496498][T28285] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.504087][T28285] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.580809][T28295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.646824][T28300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6041'. [ 698.913126][T28312] netlink: 'syz.3.6046': attribute type 1 has an invalid length. [ 698.943094][T28312] netlink: 'syz.3.6046': attribute type 1 has an invalid length. [ 698.951990][T28312] netlink: 'syz.3.6046': attribute type 8 has an invalid length. [ 698.961947][T28042] veth0_vlan: entered promiscuous mode [ 698.970075][T28314] veth0_macvtap: left promiscuous mode [ 699.029761][T28042] veth1_vlan: entered promiscuous mode [ 699.102510][T28042] veth0_macvtap: entered promiscuous mode [ 699.156364][T28042] veth1_macvtap: entered promiscuous mode [ 699.199490][T28042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.236211][T28328] syzkaller0: entered promiscuous mode [ 699.251591][T28328] syzkaller0: entered allmulticast mode [ 699.293574][T28042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.364666][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.377737][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.445193][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.461190][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.538024][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.556433][T28332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.608513][T28307] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 699.637127][T28342] netlink: 'syz.3.6052': attribute type 33 has an invalid length. [ 699.659912][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.661976][T28342] bridge_slave_0: invalid flags given to default FDB implementation [ 699.680452][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.729509][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.740655][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.802932][T28344] tipc: Started in network mode [ 699.808331][T28344] tipc: Node identity 7e86deab853c, cluster identity 4711 [ 699.816224][T28344] tipc: Enabled bearer , priority 0 [ 699.864668][T28344] syzkaller0: entered promiscuous mode [ 699.870606][T28344] syzkaller0: entered allmulticast mode [ 699.878768][T28344] tipc: Resetting bearer [ 699.894496][T28343] tipc: Resetting bearer [ 700.001536][ T5846] Bluetooth: hci5: command tx timeout [ 700.315903][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.558967][T19911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.886758][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 701.440707][T19911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.608687][T19911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.678659][T28343] tipc: Disabling bearer [ 701.691083][ T9] tipc: Node number set to 4223327915 [ 702.075595][ T5846] Bluetooth: hci5: command tx timeout [ 702.636933][T19911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.728664][T19903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.676062][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.555891][T19903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.717274][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.755755][T19911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.557459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.795626][T19911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.595966][T19903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.835712][T19911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.875101][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.916282][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.635372][T19903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.956747][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.995187][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.316019][T19903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.035607][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.675202][T19903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.755249][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 714.077603][T19911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.115700][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.158002][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.715204][T19903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.196937][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.236309][T19911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.275150][T19911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.756537][T19903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.181978][T28356] __nla_validate_parse: 7 callbacks suppressed [ 720.181998][T28356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6057'. [ 720.201615][T28356] : renamed from team_slave_1 (while UP) [ 720.218211][T28351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6053'. [ 720.271713][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.323869][T28351] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 720.335973][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.348588][T28370] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6053'. [ 720.498772][T28378] netlink: 'syz.2.6060': attribute type 1 has an invalid length. [ 720.507553][T28378] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6060'. [ 720.518539][T28378] netlink: 'syz.2.6060': attribute type 1 has an invalid length. [ 720.534478][T28378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6060'. [ 720.580104][T28381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.638429][T28375] syzkaller0: entered promiscuous mode [ 720.647626][T28375] syzkaller0: entered allmulticast mode [ 720.713693][T28379] netlink: 'syz.4.6061': attribute type 1 has an invalid length. [ 720.766348][T28390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6061'. [ 720.785230][T28390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6061'. [ 721.355149][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.919112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.928112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.937423][T19903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.396317][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.683510][T28414] tipc: Started in network mode [ 722.692888][T28414] tipc: Node identity b673e1a2194a, cluster identity 4711 [ 722.715390][T28414] tipc: Enabled bearer , priority 0 [ 722.855564][T28417] syzkaller0: entered promiscuous mode [ 722.870458][T28417] syzkaller0: entered allmulticast mode [ 722.903564][T28417] tipc: Resetting bearer [ 722.924038][T28423] dvmrp0: left allmulticast mode [ 723.085061][T28414] tipc: Resetting bearer [ 723.098987][T28437] ip6t_srh: unknown srh invflags 4000 [ 723.193508][T28446] netlink: 'syz.4.6076': attribute type 9 has an invalid length. [ 723.201705][T28446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6076'. [ 724.476460][ T24] net_ratelimit: 2 callbacks suppressed [ 724.476483][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.761992][T28414] tipc: Disabling bearer [ 724.795683][T28444] gre0: left allmulticast mode [ 724.942686][T28444] : left promiscuous mode [ 724.991952][T28444] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 725.006943][T28444] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 725.022969][T28444] bridge1: left promiscuous mode [ 725.028513][T28444] bridge1: left allmulticast mode [ 725.038809][T28444] vlan0: left promiscuous mode [ 725.044169][T28444] vlan0: left allmulticast mode [ 725.050034][T28444] hsr_slave_1: left allmulticast mode [ 725.068102][T28444] bond0: left promiscuous mode [ 725.073121][T28444] bond0: left allmulticast mode [ 725.080207][T28444] bond1: left allmulticast mode [ 725.089666][T28444] vlan3: left promiscuous mode [ 725.094474][T28444] bond4: left promiscuous mode [ 725.104360][T28444] vlan3: left allmulticast mode [ 725.109726][T28444] bond4: left allmulticast mode [ 725.125585][T28444] wireguard0: left promiscuous mode [ 725.131087][T28444] wireguard0: left allmulticast mode [ 725.137732][T28444] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 725.145226][T28444] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 725.154524][T28444] geneve3: left promiscuous mode [ 725.184004][ T6415] tipc: Node number set to 2939806114 [ 725.201263][T28451] gretap0: entered promiscuous mode [ 725.208215][T28452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6077'. [ 725.219693][T28452] gretap0: left promiscuous mode [ 725.229252][T12161] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.238555][T12161] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.260476][T12161] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 41458 - 0 [ 725.270536][T28463] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6080'. [ 725.285916][T12161] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.301818][T12161] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.312249][T12161] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 41458 - 0 [ 725.327146][T12161] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.347165][T12161] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.357162][T12161] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 41458 - 0 [ 725.414032][T12161] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.444407][T12161] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.454541][T12161] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 41458 - 0 [ 725.464706][T12161] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.474066][T12161] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.484513][T12161] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.494018][T12161] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.593852][T28481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 725.682193][T28490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6086'. [ 725.763947][T28481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6085'. [ 725.796669][T28493] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6087'. [ 726.291035][T28522] netlink: 'syz.0.6097': attribute type 4 has an invalid length. [ 726.324181][T28522] x_tables: duplicate underflow at hook 3 [ 726.360407][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 726.370691][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 726.382944][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 726.425398][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 726.434216][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 726.461391][T28532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6098'. [ 726.759774][T28545] netlink: 'syz.3.6102': attribute type 4 has an invalid length. [ 726.810751][T28551] netlink: 'syz.0.6105': attribute type 29 has an invalid length. [ 726.883832][T28552] netlink: 'syz.0.6105': attribute type 29 has an invalid length. [ 726.909994][T28554] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6106'. [ 727.260926][T28577] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6111'. [ 727.272050][T28524] chnl_net:caif_netlink_parms(): no params data found [ 727.292730][T28579] Bluetooth: MGMT ver 1.23 [ 727.419803][T28583] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6114'. [ 727.466036][T28524] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.473302][T28524] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.480880][T28524] bridge_slave_0: entered allmulticast mode [ 727.489223][T28524] bridge_slave_0: entered promiscuous mode [ 727.509078][T28583] netlink: 'syz.3.6114': attribute type 3 has an invalid length. [ 727.511057][T28524] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.541272][T28524] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.573339][T28524] bridge_slave_1: entered allmulticast mode [ 727.608805][T28524] bridge_slave_1: entered promiscuous mode [ 727.703944][T28524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.723860][T28524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.805946][T28607] xt_hashlimit: max too large, truncated to 1048576 [ 727.849556][T28524] team0: Port device team_slave_0 added [ 727.873362][T28524] team0: Port device team_slave_1 added [ 727.921610][T28524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.929017][T28524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.956554][T28524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.970341][T28524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.977537][T28524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.004452][T28524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.081968][T28524] hsr_slave_0: entered promiscuous mode [ 728.090355][T28524] hsr_slave_1: entered promiscuous mode [ 728.097565][T28524] debugfs: 'hsr0' already exists in 'hsr' [ 728.103519][T28524] Cannot create hsr debugfs directory [ 728.159177][T28619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6120'. [ 728.283304][T28524] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.295128][T28524] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 728.305477][T28524] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 728.363444][T28524] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.373395][T28524] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 728.383919][T28524] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 728.451247][T28524] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.461752][T28524] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 728.472863][T28524] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 728.501945][T28524] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.513389][T28524] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 728.523315][T28524] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 728.555792][ T5846] Bluetooth: hci2: command tx timeout [ 729.355343][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 730.393828][T28600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 730.404332][T28603] digital: digital_start_poll: Unknown protocol [ 730.447256][T28524] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 730.506725][T28524] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 730.592407][T28524] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 730.603561][T28638] __nla_validate_parse: 1 callbacks suppressed [ 730.603581][T28638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6125'. [ 730.620018][T28638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6125'. [ 730.632268][T28524] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 730.645177][ T51] Bluetooth: hci2: command 0x041b tx timeout [ 730.671344][T28636] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6123'. [ 730.731784][T28636] syzkaller0: entered promiscuous mode [ 730.740646][T28636] syzkaller0: entered allmulticast mode [ 730.806210][T28654] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6127'. [ 730.826825][T28654] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6127'. [ 730.839737][T28654] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6127'. [ 730.849681][T28654] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6127'. [ 730.865763][T28654] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6127'. [ 730.895471][T28654] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6127'. [ 730.922443][T28654] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6127'. [ 731.141998][T28669] netlink: 'syz.0.6132': attribute type 1 has an invalid length. [ 732.499894][T28665] veth3: entered allmulticast mode [ 732.650059][T28682] netlink: 'syz.3.6136': attribute type 3 has an invalid length. [ 732.715052][ T51] Bluetooth: hci2: command 0x041b tx timeout [ 732.756285][T28524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.828553][T28524] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.858388][T28690] syzkaller1: entered promiscuous mode [ 732.864675][T28690] syzkaller1: entered allmulticast mode [ 732.908698][T27983] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.915991][T27983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.983046][T27983] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.991044][T27983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.014098][T28701] netlink: 'syz.0.6142': attribute type 11 has an invalid length. [ 733.022536][T28701] netlink: 'syz.0.6142': attribute type 4 has an invalid length. [ 733.432526][T28524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.520540][T28524] veth0_vlan: entered promiscuous mode [ 733.536382][T28524] veth1_vlan: entered promiscuous mode [ 733.561405][T28721] netlink: 'syz.2.6146': attribute type 1 has an invalid length. [ 733.572035][T28721] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 733.587806][T28524] veth0_macvtap: entered promiscuous mode [ 733.620330][T28524] veth1_macvtap: entered promiscuous mode [ 733.644319][T28524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.669600][T28524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.690411][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.700353][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.722003][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.749656][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.942585][T28738] xt_ecn: cannot match TCP bits for non-tcp packets [ 733.951544][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.975871][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.042691][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.064980][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.335567][T28755] syzkaller1: entered promiscuous mode [ 734.350573][T28755] syzkaller1: entered allmulticast mode [ 734.670319][T28773] netlink: 'syz.4.6162': attribute type 1 has an invalid length. [ 734.780717][T28777] team0 (unregistering): Port device team_slave_0 removed [ 734.797059][ T51] Bluetooth: hci2: command 0x041b tx timeout [ 734.825734][T28777] team0 (unregistering): Port device team_slave_1 removed [ 735.224445][T28808] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 735.380458][T28818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 735.387826][T28818] IPv6: NLM_F_CREATE should be set when creating new route [ 735.395167][T28818] IPv6: NLM_F_CREATE should be set when creating new route [ 735.402981][T28818] IPv6: NLM_F_CREATE should be set when creating new route [ 735.487315][T28823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 735.827756][T28851] __nla_validate_parse: 75 callbacks suppressed [ 735.827778][T28851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6184'. [ 735.951539][T28857] macvtap1: entered promiscuous mode [ 735.958296][T28857] macvtap1: entered allmulticast mode [ 735.963862][T28857] veth1_vlan: entered allmulticast mode [ 736.047430][T28861] netlink: 'syz.0.6190': attribute type 1 has an invalid length. [ 736.079849][T28861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6190'. [ 736.108360][T28861] netlink: 'syz.0.6190': attribute type 7 has an invalid length. [ 736.130588][T28861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6190'. [ 736.178990][T28866] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6191'. [ 736.204386][T28870] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6191'. [ 736.231917][T28867] syzkaller0: entered promiscuous mode [ 736.238412][T28867] syzkaller0: entered allmulticast mode [ 736.482272][T28888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6199'. [ 736.503745][T28881] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.549260][T28895] netlink: 'syz.4.6199': attribute type 32 has an invalid length. [ 736.559609][T28895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6199'. [ 736.598650][T28895] bond1: Setting coupled_control to off (0) [ 736.716953][T28881] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.879603][ T51] Bluetooth: hci2: command 0x041b tx timeout [ 736.899280][T28881] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.006940][T28881] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.065237][T28916] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6208'. [ 737.074643][T28917] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6208'. [ 737.180970][T28919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6209'. [ 737.264133][T27983] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.276583][T27983] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.301329][T27983] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.357351][ T160] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.388211][T28930] bond0: Device is already in use. [ 737.426053][T28931] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 737.433791][T28931] team0: Device macvlan2 is already an upper device of the team interface [ 737.500872][T28934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.521766][T28934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.602925][T28931] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 737.980674][T28954] bridge_slave_0: left allmulticast mode [ 737.986717][T28954] bridge_slave_0: left promiscuous mode [ 737.992697][T28954] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.009133][T28954] bridge_slave_1: left allmulticast mode [ 738.016214][T28954] bridge_slave_1: left promiscuous mode [ 738.022773][T28954] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.051025][T28960] netlink: 'syz.1.6222': attribute type 1 has an invalid length. [ 738.060066][T28960] netlink: 'syz.1.6222': attribute type 1 has an invalid length. [ 738.066913][T28954] bond0: (slave bond_slave_0): Releasing backup interface [ 738.097235][T28954] bond0: (slave bond_slave_1): Releasing backup interface [ 738.134638][T28954] team0: Port device team_slave_0 removed [ 738.149318][T28954] team0: Port device 26 removed [ 738.160851][T28954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.171222][T28954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.183821][T28954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.199432][T28954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.214451][T28954] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 738.248192][T28955] team0: Mode changed to "loadbalance" [ 738.288991][T28968] syzkaller0: entered promiscuous mode [ 738.306507][T28968] syzkaller0: entered allmulticast mode [ 738.612283][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 738.622732][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 738.646477][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 738.654578][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 738.662840][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 738.991676][T28993] syzkaller0: entered promiscuous mode [ 738.997348][T28993] syzkaller0: entered allmulticast mode [ 739.183393][T28975] chnl_net:caif_netlink_parms(): no params data found [ 739.353999][T29002] netlink: 'syz.1.6232': attribute type 32 has an invalid length. [ 739.401121][T29002] bond1: Setting coupled_control to off (0) [ 739.444999][T29012] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 739.590664][T29020] rdma_op ffff888027c6d9f0 conn xmit_rdma 0000000000000000 [ 740.062838][T29037] xt_l2tp: unknown flags: 10 [ 740.721397][ T51] Bluetooth: hci0: command tx timeout [ 741.330424][T28975] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.348207][T28975] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.361540][T28975] bridge_slave_0: entered allmulticast mode [ 741.369885][T28975] bridge_slave_0: entered promiscuous mode [ 741.387742][T28975] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.405351][T28975] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.412863][T28975] bridge_slave_1: entered allmulticast mode [ 741.429487][T29054] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20002 [ 741.440806][T28975] bridge_slave_1: entered promiscuous mode [ 741.537513][T29056] __nla_validate_parse: 10 callbacks suppressed [ 741.537534][T29056] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6247'. [ 741.605823][T28975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.633126][T28975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.667740][T29052] delete_channel: no stack [ 741.753024][T28975] team0: Port device team_slave_0 added [ 741.795756][T28975] team0: Port device team_slave_1 added [ 741.909302][T28975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.917909][T28975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.944216][T28975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.964045][T28975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.972986][T28975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.000272][T28975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.027287][T29075] nbd: socks must be embedded in a SOCK_ITEM attr [ 742.074655][T29075] block nbd4: shutting down sockets [ 742.612976][ T160] bond0 (unregistering): Released all slaves [ 742.650198][ T160] bond1 (unregistering): Released all slaves [ 742.671521][ T160] bond2 (unregistering): Released all slaves [ 742.694257][ T160] bond3 (unregistering): Released all slaves [ 742.722124][ T160] bond4 (unregistering): Released all slaves [ 742.742276][ T160] bond5 (unregistering): Released all slaves [ 742.789601][ T160] bond6 (unregistering): Released all slaves [ 742.795961][ T51] Bluetooth: hci0: command tx timeout [ 742.841380][T28975] hsr_slave_0: entered promiscuous mode [ 742.876963][T28975] hsr_slave_1: entered promiscuous mode [ 742.889445][T28975] debugfs: 'hsr0' already exists in 'hsr' [ 742.905086][T28975] Cannot create hsr debugfs directory [ 743.061538][ T160] 9: left promiscuous mode [ 743.224226][T29096] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6257'. [ 743.320233][ T160] tipc: Left network mode [ 743.475902][T29096] syzkaller0: entered promiscuous mode [ 743.481656][T29096] syzkaller0: entered allmulticast mode [ 743.528737][T29125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6260'. [ 743.967698][T29145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6264'. [ 744.878630][T29155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6266'. [ 744.887856][ T51] Bluetooth: hci0: command tx timeout [ 745.758316][T29168] netlink: 'syz.4.6270': attribute type 30 has an invalid length. [ 745.824106][T29172] netlink: 'syz.3.6272': attribute type 11 has an invalid length. [ 745.842175][T29172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6272'. [ 745.866986][T29168] bond2: option arp_missed_max: invalid value (0) [ 745.873608][T29168] bond2: option arp_missed_max: allowed values 1 - 255 [ 745.882752][T29168] bond2 (unregistering): Released all slaves [ 746.127449][T29185] tipc: Enabled bearer , priority 0 [ 746.181952][T29185] syzkaller0: entered promiscuous mode [ 746.199638][T29185] syzkaller0: entered allmulticast mode [ 746.263512][T29192] netlink: 'syz.4.6275': attribute type 1 has an invalid length. [ 746.282133][T29185] tipc: Resetting bearer [ 746.328803][T29184] tipc: Resetting bearer [ 746.367719][T29184] tipc: Disabling bearer [ 746.419445][T29197] bond2: (slave bridge2): making interface the new active one [ 746.429933][T29197] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 746.680986][ T160]  (unregistering): left allmulticast mode [ 746.813971][T29215] netlink: 'syz.1.6280': attribute type 2 has an invalid length. [ 746.920157][T29220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6280'. [ 746.955096][ T51] Bluetooth: hci0: command tx timeout [ 747.520065][T29232] xt_hashlimit: max too large, truncated to 1048576 [ 747.531328][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.662881][T29239] netlink: 'syz.2.6285': attribute type 9 has an invalid length. [ 747.717180][T29242] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6285'. [ 748.385119][T29260] syzkaller0: entered promiscuous mode [ 748.399277][T29260] syzkaller0: entered allmulticast mode [ 748.407480][T28975] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 748.850499][T29300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6296'. [ 750.290965][T28975] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 750.338801][T28975] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 750.407512][T28975] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 750.428505][ T160] IPVS: stop unused estimator thread 0... [ 750.585569][T29331] xt_bpf: check failed: parse error [ 750.681749][T29337] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6302'. [ 750.807709][T28975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.887070][T29344] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6303'. [ 750.920172][T29342] Bluetooth: MGMT ver 1.23 [ 751.126888][T29356] netlink: 'syz.1.6308': attribute type 16 has an invalid length. [ 751.135040][T29356] netlink: 'syz.1.6308': attribute type 17 has an invalid length. [ 751.210613][T28975] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.286933][T29355] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.317512][T29355] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.430730][T29356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 751.454422][T27983] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.464340][T27983] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.526655][T29362] bond3: option min_links: invalid value (18446744073709551614) [ 751.534478][T29362] bond3: option min_links: allowed values 0 - 2147483647 [ 754.298298][T29362] bond3 (unregistering): Released all slaves [ 754.375625][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.382834][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.402587][T27983] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 754.411922][T27983] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.447582][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.454847][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.473187][T27983] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 754.537898][T27983] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.559977][T27983] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 754.580508][T27983] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.592653][T29382] "syz.2.6315" (29382) uses obsolete ecb(arc4) skcipher [ 754.598888][T29384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6316'. [ 754.623183][T29384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6316'. [ 754.720313][T28975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 754.869209][T29399] netlink: 'syz.3.6319': attribute type 1 has an invalid length. [ 755.001260][T29404] bond17: (slave ip6gretap2): making interface the new active one [ 755.024605][T29404] bond17: (slave ip6gretap2): Enslaving as an active interface with an up link [ 755.290515][T28975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.327474][T29418] netlink: 'syz.3.6322': attribute type 10 has an invalid length. [ 755.358214][T28975] veth0_vlan: entered promiscuous mode [ 755.375293][T28975] veth1_vlan: entered promiscuous mode [ 755.412055][T28975] veth0_macvtap: entered promiscuous mode [ 755.423396][T28975] veth1_macvtap: entered promiscuous mode [ 755.464623][T28975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.490498][T28975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.512976][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.538095][T29426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6325'. [ 755.546503][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.575441][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.607337][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.859957][T29446] netlink: 1020 bytes leftover after parsing attributes in process `syz.2.6330'. [ 757.755277][ C1] ------------[ cut here ]------------ [ 757.761345][ C1] ODEBUG: free active (active state 0) object: ffff88804dd21090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 757.774540][ C1] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#1: swapper/1/0 [ 757.784873][ C1] Modules linked in: [ 757.789119][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 757.798126][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 757.808531][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 757.815384][ C1] Code: 89 44 24 20 e8 27 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 c0 bb 27 8c 48 c7 c2 40 c1 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 757.835071][ C1] RSP: 0018:ffffc90000a08b68 EFLAGS: 00010246 [ 757.841203][ C1] RAX: ffffffff8a95ffe0 RBX: ffffffff9a4ed100 RCX: 0000000000000000 [ 757.849265][ C1] RDX: ffffffff8c27c140 RSI: ffffffff8c27bbc0 RDI: ffffffff901c58a0 [ 757.857312][ C1] RBP: ffffffff8bcf3ce0 R08: ffff88804dd21090 R09: ffffffff8bcf5000 [ 757.865372][ C1] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff88804dd21200 [ 757.873398][ C1] R13: ffffffff901c58a0 R14: ffff88804dd21000 R15: ffff88804dd21090 [ 757.881564][ C1] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 757.890589][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 757.897303][ C1] CR2: 000020000000cf3d CR3: 000000008c0a6000 CR4: 00000000003526f0 [ 757.905360][ C1] Call Trace: [ 757.908680][ C1] [ 757.911570][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 757.917322][ C1] kfree+0x13a/0x630 [ 757.921270][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 757.926488][ C1] rose_timer_expiry+0x4cb/0x600 [ 757.931477][ C1] ? call_timer_fn+0x178/0x640 [ 757.936365][ C1] call_timer_fn+0x192/0x640 [ 757.941014][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 757.946586][ C1] ? call_timer_fn+0xd4/0x640 [ 757.951332][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 757.956563][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 757.961827][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 757.967364][ C1] __run_timer_base+0x652/0x8b0 [ 757.972270][ C1] ? ktime_get+0x45/0x200 [ 757.976711][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 757.982140][ C1] ? sched_clock_cpu+0x74/0x440 [ 757.987099][ C1] run_timer_softirq+0xb7/0x170 [ 757.992001][ C1] handle_softirqs+0x22a/0x870 [ 757.996864][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 758.001703][ C1] __irq_exit_rcu+0x5f/0x150 [ 758.006386][ C1] irq_exit_rcu+0x9/0x30 [ 758.010679][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 758.016422][ C1] [ 758.019392][ C1] [ 758.022375][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 758.028472][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 758.034170][ C1] Code: ee 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 62 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 758.053961][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 758.060115][ C1] RAX: 000000000025b9b1 RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 758.068186][ C1] RDX: 0000000000000001 RSI: ffffffff8def5786 RDI: ffffffff8c27b580 [ 758.076231][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 758.084273][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901196b0 [ 758.092338][ C1] R13: 1ffff11003ad9000 R14: 0000000000000001 R15: 0000000000000001 [ 758.100485][ C1] ? do_idle+0x1bd/0x500 [ 758.104853][ C1] default_idle+0x9/0x20 [ 758.109145][ C1] default_idle_call+0x72/0xb0 [ 758.113970][ C1] do_idle+0x1bd/0x500 [ 758.118241][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 758.123595][ C1] ? __pfx_do_idle+0x10/0x10 [ 758.128470][ C1] cpu_startup_entry+0x43/0x60 [ 758.133302][ C1] start_secondary+0x101/0x110 [ 758.138170][ C1] common_startup_64+0x13e/0x147 [ 758.143174][ C1] [ 758.146303][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 758.153720][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 758.162772][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 758.173016][ C1] Call Trace: [ 758.176352][ C1] [ 758.179238][ C1] vpanic+0x56c/0xa60 [ 758.183280][ C1] ? __pfx__printk+0x10/0x10 [ 758.187913][ C1] ? __pfx_vpanic+0x10/0x10 [ 758.192471][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 758.197824][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 758.203085][ C1] panic+0xc5/0xd0 [ 758.206862][ C1] ? __pfx_panic+0x10/0x10 [ 758.211342][ C1] ? common_startup_64+0x13e/0x147 [ 758.216514][ C1] __warn+0x315/0x4f0 [ 758.220554][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 758.226331][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 758.232106][ C1] __report_bug+0x29a/0x540 [ 758.236679][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 758.242650][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 758.248412][ C1] ? __pfx___report_bug+0x10/0x10 [ 758.253479][ C1] ? run_timer_softirq+0xb7/0x170 [ 758.258544][ C1] ? handle_softirqs+0x22a/0x870 [ 758.263511][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 758.268389][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 758.274229][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 758.280406][ C1] ? pv_native_safe_halt+0xf/0x20 [ 758.285460][ C1] ? default_idle+0x9/0x20 [ 758.289906][ C1] ? default_idle_call+0x72/0xb0 [ 758.294873][ C1] report_bug_entry+0x19a/0x290 [ 758.299852][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 758.305626][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 758.311385][ C1] handle_bug+0xce/0x200 [ 758.315663][ C1] exc_invalid_op+0x1a/0x50 [ 758.320302][ C1] asm_exc_invalid_op+0x1a/0x20 [ 758.325192][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 758.331651][ C1] Code: 89 44 24 20 e8 27 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 c0 bb 27 8c 48 c7 c2 40 c1 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 758.351496][ C1] RSP: 0018:ffffc90000a08b68 EFLAGS: 00010246 [ 758.357603][ C1] RAX: ffffffff8a95ffe0 RBX: ffffffff9a4ed100 RCX: 0000000000000000 [ 758.365728][ C1] RDX: ffffffff8c27c140 RSI: ffffffff8c27bbc0 RDI: ffffffff901c58a0 [ 758.373806][ C1] RBP: ffffffff8bcf3ce0 R08: ffff88804dd21090 R09: ffffffff8bcf5000 [ 758.381827][ C1] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff88804dd21200 [ 758.389825][ C1] R13: ffffffff901c58a0 R14: ffff88804dd21000 R15: ffff88804dd21090 [ 758.397826][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 758.403230][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 758.408901][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 758.414576][ C1] kfree+0x13a/0x630 [ 758.418488][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 758.423624][ C1] rose_timer_expiry+0x4cb/0x600 [ 758.428589][ C1] ? call_timer_fn+0x178/0x640 [ 758.433386][ C1] call_timer_fn+0x192/0x640 [ 758.438020][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 758.443506][ C1] ? call_timer_fn+0xd4/0x640 [ 758.448205][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 758.453349][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 758.458577][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 758.464063][ C1] __run_timer_base+0x652/0x8b0 [ 758.468939][ C1] ? ktime_get+0x45/0x200 [ 758.473302][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 758.478703][ C1] ? sched_clock_cpu+0x74/0x440 [ 758.483598][ C1] run_timer_softirq+0xb7/0x170 [ 758.488475][ C1] handle_softirqs+0x22a/0x870 [ 758.493269][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 758.498069][ C1] __irq_exit_rcu+0x5f/0x150 [ 758.502688][ C1] irq_exit_rcu+0x9/0x30 [ 758.506955][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 758.512649][ C1] [ 758.515595][ C1] [ 758.518549][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 758.524552][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 758.530217][ C1] Code: ee 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 62 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 758.549851][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 758.556472][ C1] RAX: 000000000025b9b1 RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 758.564470][ C1] RDX: 0000000000000001 RSI: ffffffff8def5786 RDI: ffffffff8c27b580 [ 758.572532][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 758.580528][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901196b0 [ 758.588530][ C1] R13: 1ffff11003ad9000 R14: 0000000000000001 R15: 0000000000000001 [ 758.596529][ C1] ? do_idle+0x1bd/0x500 [ 758.600817][ C1] default_idle+0x9/0x20 [ 758.605081][ C1] default_idle_call+0x72/0xb0 [ 758.610045][ C1] do_idle+0x1bd/0x500 [ 758.614137][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 758.619369][ C1] ? __pfx_do_idle+0x10/0x10 [ 758.623998][ C1] cpu_startup_entry+0x43/0x60 [ 758.628795][ C1] start_secondary+0x101/0x110 [ 758.633580][ C1] common_startup_64+0x13e/0x147 [ 758.638559][ C1] [ 758.642206][ C1] Kernel Offset: disabled [ 758.646540][ C1] Rebooting in 86400 seconds..