last executing test programs: 2.916116476s ago: executing program 0 (id=1494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) (async) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r1, &(0x7f0000004280), 0x1, 0x4004004) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) (async, rerun: 32) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='highspeed', 0x9) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x1f00, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0xffffff02, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) (async) sendmmsg$inet6(r2, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}}], 0x1, 0x20040001) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x6a, 0x3, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.70306398s ago: executing program 1 (id=1499): socketpair(0x6, 0x5, 0x7, &(0x7f0000000040)) (async) socketpair(0x6, 0x5, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x8, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4080}, 0x800) (async) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x8, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4080}, 0x800) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) 2.033016096s ago: executing program 0 (id=1502): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0xf9, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f4ff00000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x22, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 2.030544868s ago: executing program 1 (id=1504): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040800) recvmmsg(0xffffffffffffffff, &(0x7f0000005ac0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/202, 0xca}, {&(0x7f0000000d00)=""/4124, 0x101c}, {&(0x7f0000000480)=""/112, 0x70}, {&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f0000000500)=""/268, 0x10c}, {&(0x7f0000000340)=""/239, 0xef}], 0x6}, 0x5}], 0x1, 0x40000002, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x8004) recvmmsg(r0, &(0x7f0000005840), 0x4000000000000ef, 0x20dc, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.845218677s ago: executing program 1 (id=1505): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000000)={r3, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x4}, 0x8) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) recvmmsg(r0, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000006200)=""/153, 0x99}, {&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/170, 0xaa}], 0x4, &(0x7f00000002c0)=""/73, 0x49}, 0x18000}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/160, 0xa0}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/167, 0xa7}, {&(0x7f00000034c0)=""/9, 0x9}, {&(0x7f0000003500)=""/138, 0x8a}], 0x7}, 0x7b8}, {{&(0x7f0000003640)=@alg, 0x80, &(0x7f00000039c0)}, 0x4}, {{&(0x7f0000003a00)=@hci, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/150, 0x96}, {&(0x7f0000003b40)=""/92, 0x5c}, {&(0x7f0000003bc0)=""/142, 0x8e}], 0x3, &(0x7f0000003cc0)=""/251, 0xfb}, 0x5710925a}, {{&(0x7f0000000040)=@nl=@proc, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003e40)=""/154, 0x9a}, {&(0x7f0000003f00)=""/4096, 0x1000}], 0x2, &(0x7f0000004f40)=""/98, 0x62}, 0x3}, {{&(0x7f0000004fc0)=@ax25={{}, [@netrom, @null, @null, @null, @rose, @null, @netrom]}, 0x80, &(0x7f0000006040)=[{&(0x7f00000062c0)=""/4096, 0x1000}], 0x1}, 0x400}], 0x6, 0x10142, 0x0) 1.443436941s ago: executing program 2 (id=1512): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xea, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x5e}}]}, 0x30}}, 0x4014) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000070000004000000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x71, r7}, 0x38) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={r7, &(0x7f0000000540), 0xffff800016adffff}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000380)=""/108, 0x6c, 0x0, &(0x7f00000006c0)=""/246, 0xf6}}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4e47, 0x0, 0x0, 0x0, 0xb2c}, [@jmp={0x5, 0x1, 0x1, 0x3, 0x7, 0x40, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000240)='syzkaller\x00', 0xfffffff8, 0x0, 0x0, 0x41100, 0x4, '\x00', r4, @fallback=0x24, r6, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x8001, 0xc}, 0x10, r8, 0xffffffffffffffff, 0xa, &(0x7f0000000540)=[r9, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x5, 0x3, 0x8, 0xa}, {0x2, 0x2, 0x1, 0x6}, {0x0, 0x2, 0x10, 0xb}, {0x4, 0x1, 0x5, 0x4}, {0x0, 0x5, 0x5, 0x96101e0ede11c9}, {0x0, 0x5, 0x6, 0x8}, {0x3, 0x3, 0x2, 0xb}, {0x3, 0x4, 0xb, 0xb}, {0x0, 0x4, 0xd}, {0x3, 0x3, 0xb, 0xa}], 0x10, 0x4}, 0x94) 1.214403358s ago: executing program 3 (id=1514): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/209, 0x0, 0xd1, 0x1}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000000000000000064000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r1], 0x48}}, 0x0) 1.132887457s ago: executing program 3 (id=1516): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) 1.130426049s ago: executing program 2 (id=1517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x1, @remote, @local, {[@routing={0x2c, 0x0, 0x0, 0x1}]}}}}}, 0x0) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c40), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, r4, 0x1, 0x70bd29, 0x10000000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) close(0xffffffffffffffff) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x8, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0xc, 0xfbc}, @timestamp={0x8, 0xa, 0x2, 0x80000000}, @timestamp={0x8, 0xa, 0x10001, 0xffffff01}, @exp_fastopen={0xfe, 0xf, 0xf989, "444e38caa511b9096239c2"}, @md5sig={0x13, 0x12, "0cb9e122bd2f7556522830127a3fa7b7"}]}}}}}}}, 0x0) 1.016575087s ago: executing program 0 (id=1518): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000080), 0x4) close(r1) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="f4000900062b2b25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f0000000100)="42e946", 0x3}], 0x2}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) 987.209405ms ago: executing program 4 (id=1519): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES8=r1], 0x38}}, 0x0) 974.703107ms ago: executing program 3 (id=1520): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)=r3}, 0x20) (async, rerun: 64) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xc, [@func={0xd, 0x0, 0x0, 0xc, 0x5}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x2f, 0x0, 0x22}]}, {0x0, [0x0, 0x2e, 0x2e, 0x5f, 0x30, 0x2e, 0x0, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000480)=""/40, 0x40, 0x28, 0x0, 0x1}, 0x28) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x3, 0x0}, 0x8) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r7, 0x0) (async) r8 = accept(r7, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) shutdown(r8, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r8}, 0x47) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x4, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xf, 0xeca, 0x1, 0x200, 0x800, 0x1, 0x55, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r13, 0x0, 0xa002a0}, 0x38) r14 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r15 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r15, 0x6f6) (async) writev(r14, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r14) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r13}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x14, &(0x7f0000000340)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ldst={0x1, 0x2, 0x3, 0x1, 0x5, 0xffffffffffffffc4, 0xfffffffffffffff0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x8a}, @alu={0x4, 0x0, 0x7, 0x9, 0xb, 0x4, 0xffffffffffffffff}, @exit, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @generic={0x4, 0xc, 0x6, 0xfff, 0x9}], &(0x7f00000002c0)='GPL\x00', 0x4b1, 0x21, &(0x7f0000000400)=""/33, 0x40f00, 0x32, '\x00', r1, @fallback=0x3, r5, 0x8, &(0x7f0000000500)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x9, 0xff, 0x6}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[r2, r9, r10, r11, r12, r13], 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9d4b, 0x56d, 0x6, 0x4802, r11, 0x7, '\x00', 0x0, r5, 0x3, 0x3}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010003904000000000000000000000000ec5114e55b5ab1f31f973721700c54adf056a0f016aadaf1de1b42f14d0fe27bee0f06eceb18a569373b7121f390a057f4fe991092fc539177f4515c22a49c4a78619b6dcd46ce94fe9a6dad64fabbbeb9d0219e1f43003d7109d11a5af8df13de55b86084a67bb0660d56a66c94be1213fdc101eb66f31180efa3124dcc87934f3f7ca87e2f74a1b88aef239c46dc82a257b3b2cd6a514b2109aa526942e41d15062d381b5ba26dfa0dd761306f28132786ea4753cf2771", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800800150000000000"], 0x3c}}, 0x0) 832.137643ms ago: executing program 1 (id=1521): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$unix(r2, 0x0, 0x2041) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffffff4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000000), 0x0, 0x10) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000005c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010b0000000000000a02000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000f8ff00000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) 830.4434ms ago: executing program 2 (id=1522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000e0ffffff0a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 764.168021ms ago: executing program 4 (id=1523): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030428bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="010089c35799d634ab39f7c94814330100006e0000140035007764616e300000", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0xba01}, 0x0) 761.420442ms ago: executing program 0 (id=1524): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) connect$rose(r0, &(0x7f0000002a00)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) 687.345129ms ago: executing program 2 (id=1525): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuset.memory_pressure\x00', 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000000c0)=@raw=[@generic={0xe9, 0x3, 0xc, 0x7fff, 0xded}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x80000000}], &(0x7f0000000200)='GPL\x00', 0x1, 0x5b, &(0x7f0000000240)=""/91, 0x41000, 0x42, '\x00', r1, 0x0, r2, 0x8, &(0x7f00000003c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x4, 0xfff, 0x3}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000440)=[{0x0, 0x3, 0x10, 0x8}, {0x2, 0x5, 0x8, 0x4}, {0x1, 0x3, 0xd, 0x4}, {0x4, 0x3, 0xa, 0xd}, {0x4, 0x2, 0x8, 0x3}], 0x10, 0x7}, 0x94) 592.909171ms ago: executing program 3 (id=1526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000009000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000030a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000"], 0xc8}}, 0x0) 592.027581ms ago: executing program 4 (id=1527): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/209, 0x0, 0xd1, 0x1}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000000000000000065000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r1], 0x48}}, 0x0) 561.603964ms ago: executing program 0 (id=1528): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000200000000000000000050019"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020", 0x5, 0x0, 0x0, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 477.349652ms ago: executing program 2 (id=1529): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040800) recvmmsg(0xffffffffffffffff, &(0x7f0000005ac0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/202, 0xca}, {&(0x7f0000000d00)=""/4124, 0x101c}, {&(0x7f0000000480)=""/112, 0x70}, {&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f0000000500)=""/268, 0x10c}, {&(0x7f0000000340)=""/239, 0xef}], 0x6}, 0x5}], 0x1, 0x40000002, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x8004) recvmmsg(r0, &(0x7f0000005840), 0x4000000000000ef, 0x20dc, 0x0) socket$nl_route(0x10, 0x3, 0x0) 424.881846ms ago: executing program 3 (id=1530): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) 403.817767ms ago: executing program 4 (id=1531): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x4, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x8004) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000540)={0x1, 'veth1_vlan\x00', {}, 0x97b}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x890) sendmsg$tipc(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d094123312d8e57ba04baa6bd65614db8042adffb6ab8753a988e8907f2e4a7cf0ba22e27c5b0b3310667ca89cc8ef65d49f8e9d83528c5ae0660f654dba8835406dcb6228c751ae3f7c06b44a16a415ae255995feee14e0b284505355da4eec5c733c5267a6a7798452266fef199410d7064ccef14f9b758f6c81056dac8670fb90ba8bb42ec291ab016d367f21e8950b638d308f1b1f5435c1fdedd46855371adecca406af67ab4e4ea3bca7bc2e8e5e3b401383e1e6ba62c3995cbf25d3438577ac1af3c6af4c3ece4b7845964138eaf4ea7187ef0fc374779c466b7f", 0xde}, {&(0x7f0000000080)="2f20c8587f24d89927ad498b96698019c673969f6df8eda526300256f5566a865a8480fd8e11850c6b337d1c57cec88993356df71e000b35", 0x38}, {&(0x7f0000000400)="fb253b8de72fc1a5c1dcfbac1cba19b818cc8f1df76b2d62f9a8a06f04b3666606622c898efadddeb41034ffb288c7bb13c5f3117a9f773e0654c1a674328e0126af12be61844d05bf0ffe379dd4b5966f09069466c0b42e28b41644223ecca199eb6661e1eed120a04588bdce76ba1141d67586117315411094ead4d02d567ac9fdbcad0474aaed663e35433d04f39a3a6e07b55087ab2243ff6bd4b132147ade23c6821744fb1406aaa98f321850b18824e7af", 0xb4}, {&(0x7f0000000b80)="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", 0x1000}], 0x4, &(0x7f00000004c0)="e453b180e5ec43c4002eaf0cdde78c9c12e6f176641d229cd5ff8e19e190deef5e79e6ea80695bcab8a2b56db0c94a40a0576ae0d9b58bb364025c876c90cf13a8010970bd73703db5d7740e9a8d9fb15558f9e748911453793a19aab98e1c9f0d1a34df72342b47d440", 0x6a, 0x1}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 358.432206ms ago: executing program 3 (id=1532): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x7, 0x1, 0xd}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r1, 0x8, 0x8, [0x8, 0xa, 0x8, 0x4, 0x4, 0x6, 0x0, 0x1]}, &(0x7f00000000c0)=0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x61}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80c0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000002c0)=0x6, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r0, 0x80000000, 0x0, 0xffff}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r5, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x801}, 0x40000) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x25}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000005c0)=0x1, &(0x7f0000000600)=0x4) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000680)={'syzkaller1\x00', &(0x7f0000000640)=@ethtool_pauseparam={0x13, 0x0, 0x7f, 0x3}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000700)={r2, 0x3c, &(0x7f00000006c0)=[@in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0x5, @local, 0x1}]}, &(0x7f0000000740)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000780)={0x0, 0x3, 0x20}, &(0x7f00000007c0)=0xc) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000c94}, 0x0) close(r7) recvfrom(r6, &(0x7f0000000900)=""/213, 0xd5, 0x40, &(0x7f0000000a00)=@can, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b00)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x8, 0x9, 0x56, @remote, @local, 0x80, 0x7800, 0x3, 0x3}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r4, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000bc0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0], 0x0, 0xc1, &(0x7f0000000c80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0xd4, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000ec0)={@rand_addr, @dev, 0x0}, &(0x7f0000000f00)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000fc0)={'syztnl0\x00', &(0x7f0000000f40)={'syztnl2\x00', 0x0, 0x29, 0x24, 0xa, 0x1, 0x24, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x7, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0xffff, 0x7, {{0x6, 0x4, 0x3, 0x35, 0x18, 0x68, 0x0, 0xf6, 0x2f, 0x0, @local, @empty, {[@noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001380)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f0000001140)={0x1c4, r8, 0x8, 0x401, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8094}, 0x24000004) 314.671894ms ago: executing program 2 (id=1533): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) sendto$llc(0xffffffffffffffff, &(0x7f0000000040)="3a56b81a9387f7822bad05d4c14f4266fcfc6b88f515f2ca5992b2cae34a3b5f379fbc86210896224fcc06e96ae782d242957695121412ea788b98e23be1d028d2b25abae1cab0ed35a9ec25557e49c87951ac649fc1161f730eadb28ff6222d1936a347498f399c49cd2aa8ba9ee7ee23", 0x71, 0x20000050, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6360, 0x7, 0x8, 0x4}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xffff01e4, 0x8}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x2400c000) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x400, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x5, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xffff}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0d}]}, 0x3c}}, 0x20000000) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 204.919098ms ago: executing program 1 (id=1534): socket(0x2a, 0x2, 0x0) (async) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x44, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x80f514e10c300148) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 154.568861ms ago: executing program 4 (id=1535): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x98, 0x98, 0x168, 0x0, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0xff, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x6, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x11, 0x2}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) 111.906761ms ago: executing program 0 (id=1536): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f00000027c0)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)=""/149, 0x95}, {&(0x7f00000000c0)=""/14, 0xe}], 0x2, &(0x7f00000003c0)=""/122, 0x7a}, 0x8001}, {{&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/169, 0xa9}, {&(0x7f0000000180)=""/33, 0x21}], 0x2, &(0x7f0000000580)=""/66, 0x42}, 0x7}, {{&(0x7f0000000680)=@isdn, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)=""/102, 0x66}], 0x1, &(0x7f00000007c0)=""/101, 0x65}, 0x74}, {{&(0x7f0000000840)=@generic, 0x80, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/180, 0xb4}, {&(0x7f0000000980)=""/135, 0x87}], 0x2}, 0x9b8d}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a80)=""/152, 0x98}, {&(0x7f0000000b40)=""/122, 0x7a}], 0x2, &(0x7f0000000c00)=""/88, 0x58}}, {{&(0x7f0000000c80)=@hci, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d00)=""/72, 0x48}, {&(0x7f0000000d80)=""/127, 0x7f}], 0x2, &(0x7f0000000e40)=""/98, 0x62}, 0x7826}, {{&(0x7f0000000ec0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000000f40)=""/68, 0x44}, {&(0x7f0000000fc0)=""/67, 0x43}, {&(0x7f0000001040)=""/40, 0x28}, {&(0x7f0000001080)=""/70, 0x46}, {&(0x7f0000001100)=""/145, 0x91}, {&(0x7f00000011c0)=""/47, 0x2f}, {&(0x7f0000001200)=""/94, 0x5e}, {&(0x7f0000001280)=""/204, 0xcc}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x9, &(0x7f0000002440)=""/210, 0xd2}, 0x4}, {{&(0x7f0000002540)=@hci, 0x80, &(0x7f0000002680)=[{&(0x7f00000025c0)=""/130, 0x82}], 0x1, &(0x7f00000026c0)=""/239, 0xef}, 0xfffffffc}], 0x8, 0x40000100, &(0x7f00000029c0)={0x0, 0x3938700}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 300.832ยตs ago: executing program 1 (id=1537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x6) getsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000840), &(0x7f0000000880)=0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MAX={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 0s ago: executing program 4 (id=1538): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) connect$rose(r0, &(0x7f0000002a00)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.126' (ED25519) to the list of known hosts. [ 80.599807][ T5816] cgroup: Unknown subsys name 'net' [ 80.776448][ T5816] cgroup: Unknown subsys name 'cpuset' [ 80.785876][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.441485][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.770567][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.778012][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.779931][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.787509][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.801405][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.805822][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.809869][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.820489][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.831316][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.832857][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.839442][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.848050][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.859964][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.871074][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.873606][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.883337][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.886176][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.895994][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.902400][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.913654][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.921564][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.929840][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.937602][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.945816][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.971918][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.580375][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 85.668911][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 85.874829][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 85.929007][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 85.951927][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.960108][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.968823][ T5826] bridge_slave_0: entered allmulticast mode [ 85.977201][ T5826] bridge_slave_0: entered promiscuous mode [ 86.028236][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.035829][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.043927][ T5826] bridge_slave_1: entered allmulticast mode [ 86.051877][ T5826] bridge_slave_1: entered promiscuous mode [ 86.125825][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.133715][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.141912][ T5827] bridge_slave_0: entered allmulticast mode [ 86.149307][ T5827] bridge_slave_0: entered promiscuous mode [ 86.181371][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 86.193868][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.201251][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.208564][ T5827] bridge_slave_1: entered allmulticast mode [ 86.216387][ T5827] bridge_slave_1: entered promiscuous mode [ 86.227255][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.279946][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.391039][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.425679][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.433032][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.441161][ T5831] bridge_slave_0: entered allmulticast mode [ 86.448582][ T5831] bridge_slave_0: entered promiscuous mode [ 86.464389][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.475899][ T5826] team0: Port device team_slave_0 added [ 86.481869][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.488976][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.497502][ T5829] bridge_slave_0: entered allmulticast mode [ 86.505725][ T5829] bridge_slave_0: entered promiscuous mode [ 86.513696][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.521185][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.528400][ T5831] bridge_slave_1: entered allmulticast mode [ 86.535955][ T5831] bridge_slave_1: entered promiscuous mode [ 86.572366][ T5826] team0: Port device team_slave_1 added [ 86.583010][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.590483][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.597879][ T5829] bridge_slave_1: entered allmulticast mode [ 86.605651][ T5829] bridge_slave_1: entered promiscuous mode [ 86.694168][ T5827] team0: Port device team_slave_0 added [ 86.727752][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.751368][ T5827] team0: Port device team_slave_1 added [ 86.758077][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.765836][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.792155][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.806616][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.818151][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.827868][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.835769][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.843375][ T5828] bridge_slave_0: entered allmulticast mode [ 86.851186][ T5828] bridge_slave_0: entered promiscuous mode [ 86.870905][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.878063][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.904333][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.917750][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.939158][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.946639][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.954088][ T5828] bridge_slave_1: entered allmulticast mode [ 86.961786][ T5828] bridge_slave_1: entered promiscuous mode [ 86.981423][ T5845] Bluetooth: hci3: command tx timeout [ 86.987291][ T5834] Bluetooth: hci1: command tx timeout [ 86.993372][ T5845] Bluetooth: hci4: command tx timeout [ 87.042435][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.049408][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.076054][ T5834] Bluetooth: hci0: command tx timeout [ 87.076064][ T5845] Bluetooth: hci2: command tx timeout [ 87.087799][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.100648][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.107624][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.133877][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.160212][ T5831] team0: Port device team_slave_0 added [ 87.182399][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.201217][ T5829] team0: Port device team_slave_0 added [ 87.209085][ T5831] team0: Port device team_slave_1 added [ 87.229498][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.241883][ T5829] team0: Port device team_slave_1 added [ 87.327564][ T5826] hsr_slave_0: entered promiscuous mode [ 87.334325][ T5826] hsr_slave_1: entered promiscuous mode [ 87.379133][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.386340][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.413155][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.425775][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.432950][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.459379][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.472773][ T5828] team0: Port device team_slave_0 added [ 87.479281][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.486416][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.513144][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.529264][ T5827] hsr_slave_0: entered promiscuous mode [ 87.536004][ T5827] hsr_slave_1: entered promiscuous mode [ 87.542730][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 87.548635][ T5827] Cannot create hsr debugfs directory [ 87.566644][ T5828] team0: Port device team_slave_1 added [ 87.573008][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.579992][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.606813][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.734992][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.742612][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.769230][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.819655][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.826858][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.854355][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.893150][ T5831] hsr_slave_0: entered promiscuous mode [ 87.899584][ T5831] hsr_slave_1: entered promiscuous mode [ 87.906359][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 87.912477][ T5831] Cannot create hsr debugfs directory [ 87.962291][ T5829] hsr_slave_0: entered promiscuous mode [ 87.969088][ T5829] hsr_slave_1: entered promiscuous mode [ 87.975692][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 87.981580][ T5829] Cannot create hsr debugfs directory [ 88.067779][ T5828] hsr_slave_0: entered promiscuous mode [ 88.074703][ T5828] hsr_slave_1: entered promiscuous mode [ 88.081323][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 88.087162][ T5828] Cannot create hsr debugfs directory [ 88.526286][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.547758][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.566291][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.593334][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.655961][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.677497][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.689751][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.712994][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.785929][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.807494][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.830940][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.843916][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.932601][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.945424][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.965580][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.990526][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.061960][ T5834] Bluetooth: hci1: command tx timeout [ 89.062207][ T5845] Bluetooth: hci4: command tx timeout [ 89.067483][ T5843] Bluetooth: hci3: command tx timeout [ 89.123505][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.140359][ T5843] Bluetooth: hci2: command tx timeout [ 89.149839][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.152629][ T5843] Bluetooth: hci0: command tx timeout [ 89.172280][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.183036][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.194657][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.250920][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.299781][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.349721][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.362247][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.369535][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.379845][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.387089][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.399499][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.442233][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.452406][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.459676][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.478368][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.485650][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.506742][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.545732][ T3784] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.553006][ T3784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.582074][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.594081][ T3784] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.601388][ T3784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.647304][ T3784] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.654494][ T3784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.690144][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.703899][ T3784] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.711112][ T3784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.794981][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.859884][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.867117][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.918959][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.926304][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.167875][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.268880][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.419326][ T5826] veth0_vlan: entered promiscuous mode [ 90.465084][ T5826] veth1_vlan: entered promiscuous mode [ 90.568135][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.587405][ T5826] veth0_macvtap: entered promiscuous mode [ 90.598033][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.625593][ T5826] veth1_macvtap: entered promiscuous mode [ 90.707348][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.754398][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.793696][ T1964] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.810961][ T1964] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.836088][ T1964] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.858356][ T1964] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.896346][ T5827] veth0_vlan: entered promiscuous mode [ 90.929022][ T5829] veth0_vlan: entered promiscuous mode [ 90.942984][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.976419][ T5827] veth1_vlan: entered promiscuous mode [ 91.016113][ T5829] veth1_vlan: entered promiscuous mode [ 91.049061][ T1964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.082711][ T1964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.140659][ T5834] Bluetooth: hci3: command tx timeout [ 91.140669][ T5845] Bluetooth: hci1: command tx timeout [ 91.152943][ T5843] Bluetooth: hci4: command tx timeout [ 91.161314][ T3784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.175104][ T5827] veth0_macvtap: entered promiscuous mode [ 91.183898][ T5829] veth0_macvtap: entered promiscuous mode [ 91.191322][ T3784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.208621][ T5831] veth0_vlan: entered promiscuous mode [ 91.218409][ T5827] veth1_macvtap: entered promiscuous mode [ 91.239100][ T5843] Bluetooth: hci2: command tx timeout [ 91.246646][ T5829] veth1_macvtap: entered promiscuous mode [ 91.251617][ T5834] Bluetooth: hci0: command tx timeout [ 91.309819][ T5831] veth1_vlan: entered promiscuous mode [ 91.321762][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.328024][ T5828] veth0_vlan: entered promiscuous mode [ 91.383691][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.405212][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.417270][ T5828] veth1_vlan: entered promiscuous mode [ 91.464362][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.485109][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.510915][ T1964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.520158][ T1964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.536569][ T1964] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.564332][ T1964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.597292][ T1964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.607834][ T1964] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.629310][ T1964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.651390][ T5831] veth0_macvtap: entered promiscuous mode [ 91.659858][ T1964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.677587][ T5950] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.702791][ T5950] syzkaller0: entered allmulticast mode [ 91.720379][ T5831] veth1_macvtap: entered promiscuous mode [ 91.763499][ T5828] veth0_macvtap: entered promiscuous mode [ 91.780183][ T5828] veth1_macvtap: entered promiscuous mode [ 91.809538][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.856520][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.872056][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.879931][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.924447][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.948220][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.959378][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.967746][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.976134][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.987163][ T1093] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.988869][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.014421][ T1093] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.041254][ T1093] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.061844][ T1093] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.120357][ T1093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.129442][ T1093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.190648][ T1093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.210780][ T3784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.218781][ T3784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.254989][ T1093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.502170][ T1964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.534698][ T1964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.643349][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.679532][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.697925][ T5961] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.723940][ T5961] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.778270][ T5961] netlink: 'syz.2.3': attribute type 5 has an invalid length. [ 92.799647][ T5965] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.808523][ T5961] netlink: 'syz.2.3': attribute type 6 has an invalid length. [ 92.819536][ T5961] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.831925][ T3526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.847305][ T5966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7'. [ 92.847898][ T3526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.915624][ T5966] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 92.941064][ T5968] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 92.976704][ T3526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.989591][ T3526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.220942][ T5834] Bluetooth: hci3: command tx timeout [ 93.227394][ T5834] Bluetooth: hci4: command tx timeout [ 93.233706][ T5843] Bluetooth: hci1: command tx timeout [ 93.301321][ T5834] Bluetooth: hci0: command tx timeout [ 93.306828][ T5843] Bluetooth: hci2: command tx timeout [ 93.492838][ T5980] bond1: Removing last ns target with arp_interval on [ 93.523145][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 93.545130][ T5914] IPVS: starting estimator thread 0... [ 93.660406][ T5990] IPVS: using max 28 ests per chain, 67200 per kthread [ 93.797377][ T5999] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 93.869929][ T5995] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 93.913483][ T5995] bond1: (slave lo): Enslaving as a backup interface with an up link [ 93.965307][ T5995] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 94.213876][ T6014] xt_addrtype: ipv6 does not support BROADCAST matching [ 94.383357][ T6020] Zero length message leads to an empty skb [ 94.417253][ T6022] sctp: [Deprecated]: syz.1.21 (pid 6022) Use of int in maxseg socket option. [ 94.417253][ T6022] Use struct sctp_assoc_value instead [ 94.447616][ T6020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.574226][ T6029] netlink: 'syz.0.23': attribute type 1 has an invalid length. [ 94.591660][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 94.610425][ T6029] netlink: 244 bytes leftover after parsing attributes in process `syz.0.23'. [ 94.653155][ T6029] FAULT_INJECTION: forcing a failure. [ 94.653155][ T6029] name failslab, interval 1, probability 0, space 0, times 1 [ 94.723857][ T6029] CPU: 1 UID: 0 PID: 6029 Comm: syz.0.23 Not tainted syzkaller #0 PREEMPT(full) [ 94.723887][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.723908][ T6029] Call Trace: [ 94.723917][ T6029] [ 94.723927][ T6029] dump_stack_lvl+0xe8/0x150 [ 94.723969][ T6029] should_fail_ex+0x414/0x560 [ 94.724010][ T6029] should_failslab+0xa8/0x100 [ 94.724039][ T6029] __kmalloc_cache_noprof+0x84/0x700 [ 94.724062][ T6029] ? ioam6_genl_addns+0x87e/0x1900 [ 94.724085][ T6029] ? ioam6_genl_addns+0x18b/0x1900 [ 94.724120][ T6029] ioam6_genl_addns+0x87e/0x1900 [ 94.724155][ T6029] ? ioam6_genl_addns+0x18b/0x1900 [ 94.724181][ T6029] ? __pfx_ioam6_genl_addns+0x10/0x10 [ 94.724209][ T6029] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 94.724240][ T6029] genl_family_rcv_msg_doit+0x215/0x300 [ 94.724268][ T6029] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 94.724302][ T6029] ? bpf_lsm_capable+0x9/0x20 [ 94.724327][ T6029] ? security_capable+0x7e/0x2e0 [ 94.724359][ T6029] genl_rcv_msg+0x60e/0x790 [ 94.724400][ T6029] ? __pfx_genl_rcv_msg+0x10/0x10 [ 94.724432][ T6029] ? __pfx_ioam6_genl_addns+0x10/0x10 [ 94.724471][ T6029] netlink_rcv_skb+0x208/0x470 [ 94.724499][ T6029] ? __pfx_genl_rcv_msg+0x10/0x10 [ 94.724534][ T6029] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 94.724559][ T6029] ? genl_rcv+0x19/0x40 [ 94.724611][ T6029] ? down_read+0x274/0x2e0 [ 94.724633][ T6029] ? genl_rcv+0xd/0x40 [ 94.724667][ T6029] genl_rcv+0x28/0x40 [ 94.724698][ T6029] netlink_unicast+0x82f/0x9e0 [ 94.724733][ T6029] ? __pfx_netlink_unicast+0x10/0x10 [ 94.724756][ T6029] ? __alloc_skb+0x198/0x3a0 [ 94.724778][ T6029] ? netlink_sendmsg+0x642/0xb30 [ 94.724804][ T6029] ? skb_put+0x11b/0x210 [ 94.724832][ T6029] netlink_sendmsg+0x805/0xb30 [ 94.724876][ T6029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.724908][ T6029] ? aa_sock_msg_perm+0xf1/0x1b0 [ 94.724938][ T6029] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 94.724958][ T6029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.724987][ T6029] __sock_sendmsg+0x21c/0x270 [ 94.725022][ T6029] ____sys_sendmsg+0x505/0x820 [ 94.725054][ T6029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.725090][ T6029] ? import_iovec+0x74/0xa0 [ 94.725127][ T6029] ___sys_sendmsg+0x21f/0x2a0 [ 94.725155][ T6029] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.725219][ T6029] ? __fget_files+0x2a/0x420 [ 94.725244][ T6029] ? __fget_files+0x3a0/0x420 [ 94.725279][ T6029] __x64_sys_sendmsg+0x19b/0x260 [ 94.725308][ T6029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 94.725345][ T6029] ? __pfx_ksys_write+0x10/0x10 [ 94.725379][ T6029] do_syscall_64+0xec/0xf80 [ 94.725401][ T6029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.725422][ T6029] ? trace_irq_disable+0x37/0x100 [ 94.725449][ T6029] ? clear_bhb_loop+0x60/0xb0 [ 94.725475][ T6029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.725496][ T6029] RIP: 0033:0x7fafca98f749 [ 94.725522][ T6029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.725540][ T6029] RSP: 002b:00007fafc8bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.725563][ T6029] RAX: ffffffffffffffda RBX: 00007fafcabe5fa0 RCX: 00007fafca98f749 [ 94.725579][ T6029] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 94.725592][ T6029] RBP: 00007fafc8bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 94.725605][ T6029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.725618][ T6029] R13: 00007fafcabe6038 R14: 00007fafcabe5fa0 R15: 00007ffd1275ab48 [ 94.725653][ T6029] [ 95.274904][ T6036] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 95.314159][ T6036] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 95.324616][ T6045] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.29'. [ 95.340616][ T6047] : renamed from veth0_macvtap (while UP) [ 95.446252][ T6050] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.641534][ T6057] bond2: Unable to set up delay as MII monitoring is disabled [ 95.663698][ T6057] bond2 (unregistering): Released all slaves [ 96.355742][ T6089] netlink: 'syz.0.39': attribute type 1 has an invalid length. [ 96.383246][ T6089] FAULT_INJECTION: forcing a failure. [ 96.383246][ T6089] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.421931][ T6089] CPU: 1 UID: 0 PID: 6089 Comm: syz.0.39 Not tainted syzkaller #0 PREEMPT(full) [ 96.421959][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.421973][ T6089] Call Trace: [ 96.421981][ T6089] [ 96.421990][ T6089] dump_stack_lvl+0xe8/0x150 [ 96.422025][ T6089] should_fail_ex+0x414/0x560 [ 96.422064][ T6089] _copy_to_user+0x31/0xb0 [ 96.422094][ T6089] simple_read_from_buffer+0xe1/0x170 [ 96.422126][ T6089] proc_fail_nth_read+0x1b3/0x220 [ 96.422153][ T6089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.422180][ T6089] ? rw_verify_area+0x2a6/0x4d0 [ 96.422213][ T6089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.422237][ T6089] vfs_read+0x200/0xa30 [ 96.422256][ T6089] ? fdget_pos+0x247/0x320 [ 96.422288][ T6089] ? __pfx___mutex_lock+0x10/0x10 [ 96.422313][ T6089] ? __pfx_vfs_read+0x10/0x10 [ 96.422335][ T6089] ? __fget_files+0x2a/0x420 [ 96.422366][ T6089] ? __fget_files+0x3a0/0x420 [ 96.422391][ T6089] ? __fget_files+0x2a/0x420 [ 96.422428][ T6089] ksys_read+0x145/0x250 [ 96.422450][ T6089] ? __pfx_ksys_read+0x10/0x10 [ 96.422483][ T6089] do_syscall_64+0xec/0xf80 [ 96.422505][ T6089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.422525][ T6089] ? trace_irq_disable+0x37/0x100 [ 96.422554][ T6089] ? clear_bhb_loop+0x60/0xb0 [ 96.422580][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.422601][ T6089] RIP: 0033:0x7fafca98e15c [ 96.422619][ T6089] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 96.422636][ T6089] RSP: 002b:00007fafc8bf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.422658][ T6089] RAX: ffffffffffffffda RBX: 00007fafcabe5fa0 RCX: 00007fafca98e15c [ 96.422674][ T6089] RDX: 000000000000000f RSI: 00007fafc8bf60a0 RDI: 0000000000000003 [ 96.422688][ T6089] RBP: 00007fafc8bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 96.422701][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.422713][ T6089] R13: 00007fafcabe6038 R14: 00007fafcabe5fa0 R15: 00007ffd1275ab48 [ 96.422755][ T6089] [ 96.822651][ T6094] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 96.849539][ T6096] __nla_validate_parse: 1 callbacks suppressed [ 96.849558][ T6096] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.42'. [ 97.066732][ T6102] netlink: 56 bytes leftover after parsing attributes in process `syz.3.45'. [ 97.097599][ T6107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.47'. [ 97.151837][ T107] cfg80211: failed to load regulatory.db [ 97.163841][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 97.350637][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 97.506753][ T6125] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.740108][ T6131] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.57'. [ 97.813579][ T6134] syzkaller1: entered promiscuous mode [ 97.819213][ T6134] syzkaller1: entered allmulticast mode [ 98.308777][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 98.318476][ T6151] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 98.952781][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 98.988763][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 99.154824][ T6190] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.276315][ T6190] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 99.414805][ T6196] netlink: 80 bytes leftover after parsing attributes in process `syz.1.80'. [ 99.521071][ T6203] netlink: 'syz.3.82': attribute type 5 has an invalid length. [ 99.537573][ T6207] FAULT_INJECTION: forcing a failure. [ 99.537573][ T6207] name failslab, interval 1, probability 0, space 0, times 0 [ 99.571201][ T6207] CPU: 0 UID: 0 PID: 6207 Comm: syz.0.84 Not tainted syzkaller #0 PREEMPT(full) [ 99.571241][ T6207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.571261][ T6207] Call Trace: [ 99.571276][ T6207] [ 99.571290][ T6207] dump_stack_lvl+0xe8/0x150 [ 99.571328][ T6207] should_fail_ex+0x414/0x560 [ 99.571369][ T6207] should_failslab+0xa8/0x100 [ 99.571397][ T6207] kmem_cache_alloc_noprof+0x88/0x710 [ 99.571429][ T6207] ? __netlink_lookup+0xbd/0x8a0 [ 99.571458][ T6207] ? skb_clone+0x212/0x3a0 [ 99.571491][ T6207] skb_clone+0x212/0x3a0 [ 99.571523][ T6207] __netlink_deliver_tap+0x404/0x850 [ 99.571564][ T6207] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.571593][ T6207] netlink_deliver_tap+0x19c/0x1b0 [ 99.571622][ T6207] netlink_unicast+0x7fa/0x9e0 [ 99.571659][ T6207] ? __pfx_netlink_unicast+0x10/0x10 [ 99.571686][ T6207] ? netlink_sendmsg+0x642/0xb30 [ 99.571711][ T6207] ? skb_put+0x11b/0x210 [ 99.571745][ T6207] netlink_sendmsg+0x805/0xb30 [ 99.571784][ T6207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.571816][ T6207] ? aa_sock_msg_perm+0xf1/0x1b0 [ 99.571847][ T6207] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 99.571867][ T6207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.571896][ T6207] __sock_sendmsg+0x21c/0x270 [ 99.571930][ T6207] ____sys_sendmsg+0x505/0x820 [ 99.571962][ T6207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.571996][ T6207] ? import_iovec+0x74/0xa0 [ 99.572027][ T6207] ___sys_sendmsg+0x21f/0x2a0 [ 99.572054][ T6207] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.572118][ T6207] ? __fget_files+0x2a/0x420 [ 99.572143][ T6207] ? __fget_files+0x3a0/0x420 [ 99.572182][ T6207] __x64_sys_sendmsg+0x19b/0x260 [ 99.572211][ T6207] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.572248][ T6207] ? __pfx_ksys_write+0x10/0x10 [ 99.572282][ T6207] do_syscall_64+0xec/0xf80 [ 99.572305][ T6207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.572325][ T6207] ? trace_irq_disable+0x37/0x100 [ 99.572353][ T6207] ? clear_bhb_loop+0x60/0xb0 [ 99.572380][ T6207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.572400][ T6207] RIP: 0033:0x7fafca98f749 [ 99.572420][ T6207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.572438][ T6207] RSP: 002b:00007fafc8bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.572460][ T6207] RAX: ffffffffffffffda RBX: 00007fafcabe5fa0 RCX: 00007fafca98f749 [ 99.572476][ T6207] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000003 [ 99.572490][ T6207] RBP: 00007fafc8bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 99.572504][ T6207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.572516][ T6207] R13: 00007fafcabe6038 R14: 00007fafcabe5fa0 R15: 00007ffd1275ab48 [ 99.572552][ T6207] [ 100.237668][ T6227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.384601][ T6222] syzkaller1: entered promiscuous mode [ 100.405988][ T6222] syzkaller1: entered allmulticast mode [ 100.435879][ T6227] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 100.834033][ T6255] netlink: 'syz.2.99': attribute type 5 has an invalid length. [ 100.913087][ T6260] Cannot find add_set index 0 as target [ 101.351972][ T6279] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 101.394420][ T6279] xt_SECMARK: invalid mode: 9 [ 101.522005][ T6283] netlink: 'syz.0.110': attribute type 24 has an invalid length. [ 101.590928][ T6289] netlink: 'syz.4.114': attribute type 10 has an invalid length. [ 101.652454][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.678577][ T6289] bridge_slave_1: left allmulticast mode [ 101.685209][ T6289] bridge_slave_1: left promiscuous mode [ 101.693779][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.711787][ T6296] Bluetooth: MGMT ver 1.23 [ 101.766807][ T6297] x_tables: unsorted entry at hook 2 [ 101.779124][ T6289] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 102.047876][ T6312] syzkaller0: entered promiscuous mode [ 102.054967][ T6312] syzkaller0: entered allmulticast mode [ 102.189127][ T6319] delete_channel: no stack [ 102.207658][ T6322] xt_SECMARK: invalid mode: 9 [ 102.360233][ T6324] __nla_validate_parse: 6 callbacks suppressed [ 102.366869][ T6328] Cannot find add_set index 0 as target [ 102.400459][ T6324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.125'. [ 102.441026][ T6324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.125'. [ 102.472862][ T6333] netlink: 'syz.1.129': attribute type 10 has an invalid length. [ 102.494218][ T6324] gretap0: entered promiscuous mode [ 102.510496][ T6324] gretap0: left promiscuous mode [ 102.552646][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.571787][ T6333] bridge_slave_1: left allmulticast mode [ 102.580752][ T6333] bridge_slave_1: left promiscuous mode [ 102.586902][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.623796][ T6333] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 102.842201][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 103.117710][ T6364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.445427][ T6372] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.608363][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 103.649609][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 103.809887][ T6402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.154'. [ 103.838152][ T6402] netlink: 'syz.0.154': attribute type 7 has an invalid length. [ 103.866190][ T6403] netlink: 'syz.3.153': attribute type 10 has an invalid length. [ 103.883621][ T6403] netlink: 40 bytes leftover after parsing attributes in process `syz.3.153'. [ 103.899754][ T6405] netlink: 104 bytes leftover after parsing attributes in process `syz.0.154'. [ 103.912616][ T6402] netlink: 20 bytes leftover after parsing attributes in process `syz.0.154'. [ 103.925275][ T6372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.939255][ T6405] openvswitch: netlink: Invalid VLAN frame [ 103.945777][ T6372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.090472][ T6403] dummy0: entered promiscuous mode [ 104.103654][ T6403] bridge0: port 3(dummy0) entered blocking state [ 104.110340][ T6403] bridge0: port 3(dummy0) entered disabled state [ 104.117118][ T6403] dummy0: entered allmulticast mode [ 104.125385][ T6403] bridge0: port 3(dummy0) entered blocking state [ 104.131902][ T6403] bridge0: port 3(dummy0) entered forwarding state [ 104.153229][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.173573][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.362644][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.373145][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.549955][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 104.701668][ T6418] bridge1: port 1(veth3) entered blocking state [ 104.720454][ T6418] bridge1: port 1(veth3) entered disabled state [ 104.727001][ T6418] veth3: entered allmulticast mode [ 104.798435][ T6418] veth3: entered promiscuous mode [ 104.846381][ T6434] Cannot find add_set index 0 as target [ 104.865526][ T6427] bridge1: port 2(veth0_to_bond) entered blocking state [ 104.875669][ T6427] bridge1: port 2(veth0_to_bond) entered disabled state [ 104.890880][ T6427] veth0_to_bond: entered allmulticast mode [ 104.909186][ T6427] veth0_to_bond: entered promiscuous mode [ 105.015988][ T6435] netlink: 'syz.1.163': attribute type 18 has an invalid length. [ 105.076411][ T3526] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.088454][ T3526] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.105930][ T3526] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.127617][ T3526] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.524123][ T6465] netlink: 'syz.1.174': attribute type 5 has an invalid length. [ 105.645031][ T6469] openvswitch: netlink: IPv6 tunnel dst address is zero [ 105.661966][ T6470] openvswitch: netlink: IPv6 tunnel dst address is zero [ 105.699543][ T6472] trusted_key: syz.3.178 sent an empty control message without MSG_MORE. [ 105.748713][ T6472] netlink: 'syz.3.178': attribute type 33 has an invalid length. [ 106.064219][ T6487] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 106.271730][ T6500] netlink: 'syz.0.188': attribute type 5 has an invalid length. [ 106.469631][ T6509] warning: `syz.0.193' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.569052][ T6513] Cannot find add_set index 0 as target [ 106.702253][ T6517] netlink: 'syz.1.196': attribute type 16 has an invalid length. [ 106.744405][ T6517] netlink: 'syz.1.196': attribute type 17 has an invalid length. [ 107.002573][ T6517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.013064][ T6517] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.028993][ T6517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.080471][ T6529] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 107.159070][ T43] IPVS: starting estimator thread 0... [ 107.180620][ T6518] syz.4.197 (6518) used greatest stack depth: 17688 bytes left [ 107.264807][ T6535] IPVS: using max 27 ests per chain, 64800 per kthread [ 107.325997][ T6538] netlink: 'syz.4.204': attribute type 5 has an invalid length. [ 107.470225][ T6541] __nla_validate_parse: 9 callbacks suppressed [ 107.486483][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 107.496662][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 107.618013][ T6553] Cannot find add_set index 0 as target [ 107.897260][ T6564] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 107.927633][ T6562] netlink: 56 bytes leftover after parsing attributes in process `syz.3.212'. [ 107.999674][ T6572] netlink: 'syz.0.217': attribute type 5 has an invalid length. [ 108.035118][ T6562] bond1 (unregistering): Released all slaves [ 108.399527][ T6590] netlink: 36 bytes leftover after parsing attributes in process `syz.2.222'. [ 108.529112][ T6594] syzkaller0: entered promiscuous mode [ 108.573364][ T6594] syzkaller0: entered allmulticast mode [ 108.741715][ T6610] netlink: 260 bytes leftover after parsing attributes in process `syz.2.229'. [ 108.842658][ T6613] netlink: 'syz.4.230': attribute type 5 has an invalid length. [ 109.339455][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 110.343245][ T6614] tipc: Started in network mode [ 110.363052][ T6614] tipc: Node identity ac14140f, cluster identity 4711 [ 110.391049][ T6614] tipc: New replicast peer: 255.255.255.255 [ 110.428497][ T6614] tipc: Enabled bearer , priority 10 [ 110.475243][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.483758][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.593558][ T6631] netlink: 52 bytes leftover after parsing attributes in process `syz.1.234'. [ 110.738211][ T6634] bond0: entered promiscuous mode [ 110.802709][ T6634] bond_slave_0: entered promiscuous mode [ 110.856051][ T6634] bond_slave_1: entered promiscuous mode [ 110.907936][ T6634] batadv0: entered promiscuous mode [ 110.950905][ T6634] hsr1: entered allmulticast mode [ 110.981066][ T6634] bond0: entered allmulticast mode [ 111.009547][ T6634] bond_slave_0: entered allmulticast mode [ 111.029860][ T6634] bond_slave_1: entered allmulticast mode [ 111.068780][ T6634] batadv0: entered allmulticast mode [ 111.088934][ T6645] netlink: 'syz.4.239': attribute type 1 has an invalid length. [ 111.098909][ T6634] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 111.186193][ T6645] netlink: 244 bytes leftover after parsing attributes in process `syz.4.239'. [ 111.435364][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 111.466547][ T6656] xt_SECMARK: invalid mode: 9 [ 111.553855][ T10] tipc: Node number set to 2886997007 [ 111.610478][ T6662] netlink: 'syz.0.246': attribute type 83 has an invalid length. [ 111.793039][ T6672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.248'. [ 111.985470][ T6685] netlink: 'syz.1.251': attribute type 5 has an invalid length. [ 112.022787][ T6688] bond0: entered promiscuous mode [ 112.028141][ T6688] bond_slave_0: entered promiscuous mode [ 112.034590][ T6688] bond_slave_1: entered promiscuous mode [ 112.053967][ T6688] batadv0: entered promiscuous mode [ 112.067295][ T6688] debugfs: 'hsr1' already exists in 'hsr' [ 112.091653][ T6688] Cannot create hsr debugfs directory [ 112.113487][ T6688] hsr1: entered allmulticast mode [ 112.130381][ T6688] bond0: entered allmulticast mode [ 112.136569][ T6688] bond_slave_0: entered allmulticast mode [ 112.177449][ T6688] bond_slave_1: entered allmulticast mode [ 112.211595][ T6688] batadv0: entered allmulticast mode [ 112.217994][ T6688] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 112.239572][ T6694] netlink: 'syz.4.253': attribute type 17 has an invalid length. [ 112.363813][ T6701] netlink: 'syz.3.257': attribute type 10 has an invalid length. [ 112.379856][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.389243][ T6701] bridge_slave_1: left allmulticast mode [ 112.408613][ T6701] bridge_slave_1: left promiscuous mode [ 112.417538][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.443932][ T6701] bridge_slave_1: entered promiscuous mode [ 112.450952][ T6701] bridge_slave_1: entered allmulticast mode [ 112.458463][ T6701] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 112.643131][ T6711] netlink: 'syz.3.261': attribute type 4 has an invalid length. [ 112.667758][ T6711] __nla_validate_parse: 2 callbacks suppressed [ 112.667842][ T6711] netlink: 152 bytes leftover after parsing attributes in process `syz.3.261'. [ 112.703967][ T6711] `: renamed from bond0 (while UP) [ 112.807421][ T6723] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.265'. [ 113.002601][ T6734] xt_SECMARK: invalid mode: 9 [ 113.170581][ T6739] netlink: 'syz.1.271': attribute type 10 has an invalid length. [ 113.401508][ T6749] netlink: 'syz.3.274': attribute type 16 has an invalid length. [ 113.542213][ T6753] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 113.633283][ T6753] bond1 (unregistering): Released all slaves [ 113.761891][ T6765] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 113.801093][ T6765] bond0 (unregistering): Released all slaves [ 113.835097][ T6781] xt_SECMARK: invalid mode: 9 [ 113.888355][ T6782] netlink: 'syz.0.278': attribute type 32 has an invalid length. [ 113.959774][ T6773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.281'. [ 113.973432][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 113.991329][ T6786] vlan2: entered promiscuous mode [ 114.000663][ T6780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.278'. [ 114.020643][ T6786] vlan2: entered allmulticast mode [ 114.030048][ T6786] hsr_slave_1: entered allmulticast mode [ 114.198230][ T6795] netlink: 'syz.1.286': attribute type 10 has an invalid length. [ 114.522212][ T6816] netlink: 76 bytes leftover after parsing attributes in process `syz.2.292'. [ 114.557057][ T6816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.292'. [ 114.568620][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'. [ 114.779878][ T6831] netlink: 224 bytes leftover after parsing attributes in process `syz.1.296'. [ 114.841308][ T6830] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 115.305440][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 115.498100][ T6870] sctp: [Deprecated]: syz.3.309 (pid 6870) Use of int in maxseg socket option. [ 115.498100][ T6870] Use struct sctp_assoc_value instead [ 115.672383][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.834374][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.862594][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.069076][ T6875] bond1: (slave ip6gretap1): making interface the new active one [ 116.078299][ T6875] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 116.090926][ T4466] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.113729][ T4466] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.178570][ T4466] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.183911][ T6862] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 116.292431][ T4466] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.443753][ T6898] validate_nla: 4 callbacks suppressed [ 116.443773][ T6898] netlink: 'syz.3.320': attribute type 1 has an invalid length. [ 116.548245][ T6902] netlink: 'syz.1.321': attribute type 10 has an invalid length. [ 116.633423][ T6904] bond0: (slave bridge1): making interface the new active one [ 116.644536][ T6904] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 116.656012][ T6902] batman_adv: batadv0: Adding interface: netdevsim0 [ 116.683677][ T6902] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.770408][ T6902] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 117.044209][ T6924] syzkaller0: entered promiscuous mode [ 117.049775][ T6924] syzkaller0: entered allmulticast mode [ 117.096643][ T6930] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 117.325483][ T6943] sctp: [Deprecated]: syz.2.334 (pid 6943) Use of int in maxseg socket option. [ 117.325483][ T6943] Use struct sctp_assoc_value instead [ 117.389368][ T5843] Bluetooth: hci0: command 0x0401 tx timeout [ 117.593047][ T6958] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.646565][ T6958] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.678324][ T6959] __nla_validate_parse: 3 callbacks suppressed [ 117.678344][ T6959] netlink: 68 bytes leftover after parsing attributes in process `syz.0.340'. [ 117.720785][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.340'. [ 117.744826][ T6966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.343'. [ 117.765324][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 117.780814][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 117.808345][ T6969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.343'. [ 117.957936][ T6977] netlink: 27 bytes leftover after parsing attributes in process `syz.2.347'. [ 118.034443][ T6982] netlink: 240 bytes leftover after parsing attributes in process `syz.1.345'. [ 118.057697][ T6973] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 118.129782][ T6983] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 118.167683][ T6986] netlink: 'syz.0.350': attribute type 4 has an invalid length. [ 118.180723][ T6986] netlink: 152 bytes leftover after parsing attributes in process `syz.0.350'. [ 118.216911][ T6989] netlink: 'syz.3.352': attribute type 5 has an invalid length. [ 118.224756][ T6987] tls_set_device_offload_rx: netdev not found [ 118.380932][ T6994] netlink: 1 bytes leftover after parsing attributes in process `syz.4.354'. [ 118.458869][ T7002] veth0: entered promiscuous mode [ 118.499483][ T7005] netlink: 'syz.4.354': attribute type 1 has an invalid length. [ 118.965633][ T7028] netlink: 'syz.4.363': attribute type 10 has an invalid length. [ 119.029748][ T7032] netlink: 'syz.2.366': attribute type 4 has an invalid length. [ 119.062793][ T7035] SET target dimension over the limit! [ 119.237343][ T7043] netlink: 'syz.1.370': attribute type 1 has an invalid length. [ 119.260327][ T7043] netlink: 'syz.1.370': attribute type 7 has an invalid length. [ 119.279102][ T7043] netlink: 'syz.1.370': attribute type 8 has an invalid length. [ 120.044810][ T7088] sctp: [Deprecated]: syz.2.384 (pid 7088) Use of int in maxseg socket option. [ 120.044810][ T7088] Use struct sctp_assoc_value instead [ 120.141045][ T7086] veth3: entered allmulticast mode [ 120.177764][ T7086] tunl0: entered promiscuous mode [ 121.594096][ T7170] xt_SECMARK: invalid mode: 9 [ 122.134407][ T10] IPVS: starting estimator thread 0... [ 122.233322][ T7196] IPVS: using max 24 ests per chain, 57600 per kthread [ 122.380774][ T7207] bond2: ARP target 1.0.0.0 is already present [ 122.387083][ T7207] bond2: option arp_ip_target: invalid value (1) [ 122.398805][ T7207] bond2 (unregistering): Released all slaves [ 122.642874][ T7217] validate_nla: 3 callbacks suppressed [ 122.642890][ T7217] netlink: 'syz.3.425': attribute type 1 has an invalid length. [ 122.690506][ T7221] __nla_validate_parse: 23 callbacks suppressed [ 122.690524][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 122.708376][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 122.744286][ T7217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.855307][ T7225] bond1: (slave veth3): Enslaving as an active interface with a down link [ 123.039111][ T7239] SET target dimension over the limit! [ 123.131848][ T7243] netlink: 'syz.1.432': attribute type 72 has an invalid length. [ 123.159215][ T7246] netlink: 'syz.3.434': attribute type 1 has an invalid length. [ 123.259284][ T7247] netlink: 44 bytes leftover after parsing attributes in process `syz.3.434'. [ 123.277548][ T7246] bond2: entered promiscuous mode [ 123.283131][ T7246] bond2: entered allmulticast mode [ 123.288733][ T7246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.439154][ T7266] netlink: 'syz.1.438': attribute type 1 has an invalid length. [ 123.448768][ T7266] netlink: 224 bytes leftover after parsing attributes in process `syz.1.438'. [ 123.464790][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.435'. [ 123.488388][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.435'. [ 123.520720][ T7269] ip6t_srh: unknown srh match flags 4000 [ 123.599629][ T7275] netlink: 'syz.2.440': attribute type 5 has an invalid length. [ 123.699424][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 123.735027][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 123.816377][ T7280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.884077][ T7288] SET target dimension over the limit! [ 124.088744][ T7299] netlink: 'syz.3.448': attribute type 72 has an invalid length. [ 124.311546][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 124.338294][ T7311] netlink: 576 bytes leftover after parsing attributes in process `syz.2.451'. [ 124.534622][ T7323] netlink: 'syz.0.454': attribute type 33 has an invalid length. [ 125.285537][ T61] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.306880][ T61] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.341337][ T61] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.360012][ T61] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.421806][ T7325] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 125.526100][ T7372] netlink: 'syz.4.465': attribute type 1 has an invalid length. [ 126.186306][ T7410] Cannot find set identified by id 3 to match [ 126.274445][ T7415] netlink: 'syz.2.479': attribute type 5 has an invalid length. [ 126.284252][ T7408] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 126.488308][ T7419] .: renamed from bridge_slave_1 (while UP) [ 126.664824][ T7425] team0: Port device team_slave_0 removed [ 126.674586][ T5843] Bluetooth: hci0: command 0x0401 tx timeout [ 126.718185][ T7419] netdevsim netdevsim0: Direct firmware load for %›Œั failed with error -2 [ 126.728790][ T7419] netdevsim netdevsim0: Falling back to sysfs fallback for: %›Œั [ 127.792625][ T7509] validate_nla: 1 callbacks suppressed [ 127.792643][ T7509] netlink: 'syz.1.508': attribute type 1 has an invalid length. [ 127.812093][ T7509] __nla_validate_parse: 21 callbacks suppressed [ 127.812110][ T7509] netlink: 280 bytes leftover after parsing attributes in process `syz.1.508'. [ 127.905882][ T7516] netlink: 512 bytes leftover after parsing attributes in process `syz.4.510'. [ 128.097402][ T7525] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.513'. [ 128.176336][ T7527] tipc: Started in network mode [ 128.182522][ T7527] tipc: Node identity fe6c480ac1d2, cluster identity 4711 [ 128.189932][ T7527] tipc: Enabled bearer , priority 0 [ 128.203426][ T7527] syzkaller0: entered promiscuous mode [ 128.229997][ T7527] syzkaller0: entered allmulticast mode [ 128.246122][ T7533] netlink: 'syz.1.516': attribute type 10 has an invalid length. [ 128.288452][ T7528] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 128.370582][ T7527] tipc: Resetting bearer [ 128.424834][ T7527] tipc: Resetting bearer [ 128.480955][ T7527] tipc: Disabling bearer [ 128.552235][ T7546] xt_SECMARK: invalid mode: 9 [ 128.960501][ T7565] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.967665][ T7565] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.981699][ T7565] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.160457][ T7583] netlink: 'syz.3.535': attribute type 4 has an invalid length. [ 129.179617][ T7583] netlink: 152 bytes leftover after parsing attributes in process `syz.3.535'. [ 129.262164][ T7590] raw_sendmsg: syz.4.536 forgot to set AF_INET. Fix it! [ 129.571931][ T7602] netlink: 'syz.2.541': attribute type 5 has an invalid length. [ 129.904281][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'. [ 129.949529][ T7625] bond2: option xmit_hash_policy: invalid value (64) [ 129.976284][ T7625] bond2 (unregistering): Released all slaves [ 130.073688][ T7632] openvswitch: netlink: Key type 249 is out of range max 32 [ 130.217893][ T7635] netlink: 'syz.0.552': attribute type 10 has an invalid length. [ 130.327185][ T7647] netlink: 56 bytes leftover after parsing attributes in process `syz.4.555'. [ 130.358940][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'. [ 130.375530][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 130.426964][ T7653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.556'. [ 130.442729][ T7647] macsec1: entered promiscuous mode [ 130.448164][ T7647] bridge0: entered promiscuous mode [ 130.456923][ T7647] macsec1: entered allmulticast mode [ 130.462651][ T7647] bridge0: entered allmulticast mode [ 130.469454][ T7647] bridge0: port 2(macsec1) entered blocking state [ 130.476471][ T7647] bridge0: port 2(macsec1) entered disabled state [ 130.492028][ T7647] bridge0: left allmulticast mode [ 130.498237][ T7647] bridge0: left promiscuous mode [ 130.685998][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 130.700466][ T7667] Cannot find set identified by id 3 to match [ 130.973129][ T7685] netlink: 'syz.3.567': attribute type 1 has an invalid length. [ 131.153235][ T7692] netlink: 'syz.4.569': attribute type 10 has an invalid length. [ 131.209666][ T7692] team0: Port device dummy0 added [ 131.459984][ T7707] netlink: 'syz.2.576': attribute type 3 has an invalid length. [ 131.960115][ T7731] xt_SECMARK: invalid mode: 9 [ 131.972093][ T7730] netlink: 'syz.2.584': attribute type 9 has an invalid length. [ 131.989095][ T7730] netlink: 'syz.2.584': attribute type 11 has an invalid length. [ 132.929972][ T7778] syzkaller1: entered promiscuous mode [ 132.947514][ T7778] syzkaller1: entered allmulticast mode [ 133.219648][ T7804] pim6reg: entered allmulticast mode [ 133.332586][ T7807] __nla_validate_parse: 11 callbacks suppressed [ 133.332608][ T7807] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.608'. [ 133.354541][ T7807] tipc: Failed to remove unknown binding: 66,0,0/0:511563074/511563075 [ 133.368643][ T7807] tipc: Failed to remove unknown binding: 66,0,0/0:511563074/511563075 [ 133.739798][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.617'. [ 133.854741][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 133.907960][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 133.961642][ T7825] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.970900][ T7825] bond_slave_0: left promiscuous mode [ 133.976467][ T7825] bond_slave_0: left allmulticast mode [ 133.989639][ T7825] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.998787][ T7825] bond_slave_1: left promiscuous mode [ 134.004479][ T7825] bond_slave_1: left allmulticast mode [ 134.013080][ T7825] ` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 134.022936][ T7825] bridge_slave_1: left promiscuous mode [ 134.028699][ T7825] bridge_slave_1: left allmulticast mode [ 134.035910][ T7825] ` (unregistering): Released all slaves [ 134.055143][ T7836] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 134.063153][ T7836] netlink: 184 bytes leftover after parsing attributes in process `syz.1.620'. [ 134.073176][ T7842] netlink: 52 bytes leftover after parsing attributes in process `syz.4.623'. [ 134.146997][ T7847] validate_nla: 7 callbacks suppressed [ 134.147018][ T7847] netlink: 'syz.1.624': attribute type 4 has an invalid length. [ 134.190404][ T7847] netlink: 152 bytes leftover after parsing attributes in process `syz.1.624'. [ 134.313522][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 134.775420][ T7882] netlink: 'syz.3.638': attribute type 5 has an invalid length. [ 134.802145][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 134.824473][ T7880] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 134.869071][ T7880] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 134.899685][ T7880] team0: Failed to send options change via netlink (err -105) [ 134.920308][ T7880] team0: Port device batadv1 added [ 134.951705][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 135.091987][ T7901] Cannot find set identified by id 3 to match [ 135.217400][ T7909] netlink: 'syz.2.647': attribute type 13 has an invalid length. [ 135.374353][ T7917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.382084][ T7917] IPv6: NLM_F_CREATE should be set when creating new route [ 135.389351][ T7917] IPv6: NLM_F_CREATE should be set when creating new route [ 135.415974][ T7920] netlink: ct family unspecified [ 135.440568][ T7923] netlink: 'syz.4.651': attribute type 5 has an invalid length. [ 135.560496][ T7929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.591200][ T7933] Cannot find set identified by id 3 to match [ 135.841463][ T7944] netlink: 'syz.0.662': attribute type 83 has an invalid length. [ 135.931067][ T7947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.990168][ T7947] syzkaller0: entered promiscuous mode [ 135.995937][ T7947] syzkaller0: entered allmulticast mode [ 136.017570][ T7953] netlink: 'syz.2.666': attribute type 9 has an invalid length. [ 136.060776][ T7947] tipc: Enabled bearer , priority 0 [ 136.067910][ T7947] netlink: 'syz.4.663': attribute type 21 has an invalid length. [ 136.116803][ T7946] tipc: Resetting bearer [ 136.158467][ T7946] tipc: Disabling bearer [ 136.323393][ T7968] Cannot find add_set index 0 as target [ 136.478026][ T7978] netlink: 'syz.3.676': attribute type 1 has an invalid length. [ 136.600851][ T7988] xt_SECMARK: invalid mode: 9 [ 136.803445][ T8002] sock: sock_set_timeout: `syz.0.683' (pid 8002) tries to set negative timeout [ 137.032230][ T8015] Cannot find set identified by id 3 to match [ 137.154666][ T8022] netlink: 'syz.2.689': attribute type 1 has an invalid length. [ 137.282858][ T8029] xt_SECMARK: invalid mode: 9 [ 137.342014][ T8032] Driver unsupported XDP return value 0 on prog (id 129) dev N/A, expect packet loss! [ 137.383454][ T8037] netlink: 'syz.1.695': attribute type 4 has an invalid length. [ 137.392211][ T8028] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 137.592529][ T8048] 8021q: VLANs not supported on vcan0 [ 137.611133][ T8048] 8021q: VLANs not supported on vcan0 [ 137.617016][ T8048] 8021q: VLANs not supported on vcan0 [ 137.705564][ T8057] Cannot find set identified by id 3 to match [ 138.014426][ T8074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.016742][ T8074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.047940][ T8074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.086804][ T8074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.111268][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.126692][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.156117][ T8079] Cannot find add_set index 0 as target [ 138.388627][ T8093] __nla_validate_parse: 19 callbacks suppressed [ 138.388648][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 138.470687][ T8093] vlan2: entered allmulticast mode [ 138.480434][ T8093] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 138.648037][ T8103] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.721'. [ 138.658161][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 138.867075][ T8118] Cannot find set identified by id 3 to match [ 139.167035][ T8139] netlink: 32 bytes leftover after parsing attributes in process `syz.2.734'. [ 139.284837][ T8147] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 139.368213][ T8148] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.738'. [ 139.398675][ T8153] validate_nla: 4 callbacks suppressed [ 139.398697][ T8153] netlink: 'syz.0.739': attribute type 5 has an invalid length. [ 139.586414][ T8161] Cannot find set identified by id 3 to match [ 139.692583][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.746'. [ 139.813751][ T8173] bond2 (unregistering): Released all slaves [ 140.145456][ T8189] netlink: 'syz.0.752': attribute type 5 has an invalid length. [ 140.657917][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.760'. [ 140.883520][ T8218] netlink: 'syz.1.764': attribute type 5 has an invalid length. [ 141.164638][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'. [ 141.235187][ T8239] netlink: 788 bytes leftover after parsing attributes in process `syz.2.773'. [ 141.387109][ T8249] netlink: 'syz.0.778': attribute type 1 has an invalid length. [ 141.437066][ T8249] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 141.449695][ T8249] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 141.496618][ T8252] gretap1: entered promiscuous mode [ 141.519998][ T8252] bond2: (slave gretap1): making interface the new active one [ 141.536626][ T8252] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 141.546721][ T8249] netlink: 44 bytes leftover after parsing attributes in process `syz.0.778'. [ 141.585616][ T8256] netlink: 'syz.2.780': attribute type 5 has an invalid length. [ 141.749903][ T8270] xt_SECMARK: invalid mode: 9 [ 142.129852][ T8281] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.889607][ T8323] netlink: 'syz.4.804': attribute type 4 has an invalid length. [ 143.055135][ T8331] netlink: 'syz.0.807': attribute type 3 has an invalid length. [ 143.063863][ T8331] netlink: 'syz.0.807': attribute type 3 has an invalid length. [ 143.072870][ T8331] netlink: 'syz.0.807': attribute type 3 has an invalid length. [ 143.081195][ T8331] netlink: 'syz.0.807': attribute type 3 has an invalid length. [ 143.152685][ T8329] syzkaller0: entered promiscuous mode [ 143.168264][ T8329] syzkaller0: entered allmulticast mode [ 143.243504][ T8330] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 144.567153][ T8353] __nla_validate_parse: 4 callbacks suppressed [ 144.567174][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'. [ 144.597310][ T8356] xt_SECMARK: invalid mode: 9 [ 144.616898][ T8353] bond3: option xmit_hash_policy: invalid value (64) [ 144.637366][ T8353] bond3 (unregistering): Released all slaves [ 144.682900][ T8359] validate_nla: 44 callbacks suppressed [ 144.682919][ T8359] netlink: 'syz.4.814': attribute type 1 has an invalid length. [ 144.751494][ T8362] netlink: 'syz.0.817': attribute type 4 has an invalid length. [ 144.759199][ T8362] netlink: 152 bytes leftover after parsing attributes in process `syz.0.817'. [ 144.843909][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 145.016725][ T8369] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.621421][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 145.714765][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 146.194424][ T8453] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.845'. [ 146.252971][ T8462] netlink: 52 bytes leftover after parsing attributes in process `syz.2.845'. [ 146.283905][ T8453] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 147.386756][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'. [ 147.412542][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'. [ 147.936337][ T8542] netlink: 5808 bytes leftover after parsing attributes in process `syz.0.879'. [ 148.182706][ T8557] xt_ecn: cannot match TCP bits for non-tcp packets [ 148.287174][ T8566] FAULT_INJECTION: forcing a failure. [ 148.287174][ T8566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.304559][ T8566] CPU: 1 UID: 0 PID: 8566 Comm: syz.1.885 Not tainted syzkaller #0 PREEMPT(full) [ 148.304588][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.304600][ T8566] Call Trace: [ 148.304626][ T8566] [ 148.304636][ T8566] dump_stack_lvl+0xe8/0x150 [ 148.304681][ T8566] should_fail_ex+0x414/0x560 [ 148.304721][ T8566] _copy_from_user+0x2d/0xb0 [ 148.304749][ T8566] ___sys_recvmsg+0x12e/0x510 [ 148.304783][ T8566] ? __pfx____sys_recvmsg+0x10/0x10 [ 148.304815][ T8566] ? __fget_files+0x2a/0x420 [ 148.304861][ T8566] ? __fget_files+0x3a0/0x420 [ 148.304898][ T8566] do_recvmmsg+0x307/0x770 [ 148.304933][ T8566] ? __pfx_do_recvmmsg+0x10/0x10 [ 148.304974][ T8566] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 148.305018][ T8566] __x64_sys_recvmmsg+0x190/0x240 [ 148.305049][ T8566] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 148.305088][ T8566] do_syscall_64+0xec/0xf80 [ 148.305110][ T8566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.305130][ T8566] ? trace_irq_disable+0x37/0x100 [ 148.305158][ T8566] ? clear_bhb_loop+0x60/0xb0 [ 148.305184][ T8566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.305205][ T8566] RIP: 0033:0x7ffb1c18f749 [ 148.305229][ T8566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.305246][ T8566] RSP: 002b:00007ffb1cf71038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 148.305280][ T8566] RAX: ffffffffffffffda RBX: 00007ffb1c3e5fa0 RCX: 00007ffb1c18f749 [ 148.305296][ T8566] RDX: 0000000000000001 RSI: 00002000000018c0 RDI: 0000000000000003 [ 148.305309][ T8566] RBP: 00007ffb1cf71090 R08: 0000000000000000 R09: 0000000000000000 [ 148.305323][ T8566] R10: 0000000040000062 R11: 0000000000000246 R12: 0000000000000001 [ 148.305336][ T8566] R13: 00007ffb1c3e6038 R14: 00007ffb1c3e5fa0 R15: 00007ffeb723bfa8 [ 148.305372][ T8566] [ 148.781418][ T8582] xt_l2tp: v2 tid > 0xffff: 1114244 [ 149.117324][ T8605] netlink: 'syz.4.901': attribute type 5 has an invalid length. [ 149.249564][ T8611] tipc: Started in network mode [ 149.258201][ T8611] tipc: Node identity c2a464287156, cluster identity 4711 [ 149.268993][ T8611] tipc: Enabled bearer , priority 0 [ 149.337975][ T8616] syzkaller0: entered promiscuous mode [ 149.345417][ T8616] syzkaller0: entered allmulticast mode [ 149.463874][ T8620] syzkaller0: entered promiscuous mode [ 149.469604][ T8620] syzkaller0: entered allmulticast mode [ 149.529045][ T8611] tipc: Resetting bearer [ 149.601467][ T8608] tipc: Resetting bearer [ 149.659317][ T8625] netlink: 'syz.0.909': attribute type 23 has an invalid length. [ 149.675977][ T8608] tipc: Disabling bearer [ 149.868899][ T8636] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 149.923774][ T8636] vlan2: entered promiscuous mode [ 149.928882][ T8636] bridge0: entered promiscuous mode [ 150.356549][ T8666] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 150.437919][ T8667] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 151.008735][ T8700] netlink: 'syz.4.933': attribute type 1 has an invalid length. [ 151.112199][ T8708] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 151.124586][ T8700] __nla_validate_parse: 6 callbacks suppressed [ 151.124609][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.933'. [ 151.150888][ T8708] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 151.189496][ T8708] bond4: (slave xfrm1): making interface the new active one [ 151.208002][ T8712] netlink: 'syz.1.936': attribute type 39 has an invalid length. [ 151.217840][ T8708] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 151.237719][ T8700] bond4 (unregistering): (slave xfrm1): Releasing backup interface [ 151.249897][ T8700] bond4 (unregistering): Released all slaves [ 151.350995][ T8713] bond2: Removing last ns target with arp_interval on [ 151.358394][ T8716] netlink: 'syz.3.937': attribute type 29 has an invalid length. [ 151.367194][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 151.821565][ T8742] syzkaller1: entered promiscuous mode [ 151.837535][ T8742] syzkaller1: entered allmulticast mode [ 151.992371][ T8753] xt_ecn: cannot match TCP bits for non-tcp packets [ 152.009596][ T8755] xt_SECMARK: invalid mode: 9 [ 152.320401][ T8770] Cannot find set identified by id 3 to match [ 152.680791][ T8788] xt_SECMARK: invalid mode: 9 [ 152.945035][ T8802] tipc: Enabled bearer , priority 2 [ 153.000403][ T8805] Cannot find add_set index 0 as target [ 153.117462][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'. [ 153.126523][ T8811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.972'. [ 153.162072][ T8814] netlink: 'syz.2.969': attribute type 4 has an invalid length. [ 153.191014][ T8814] netlink: 152 bytes leftover after parsing attributes in process `syz.2.969'. [ 153.233583][ T8818] netlink: 'syz.3.971': attribute type 10 has an invalid length. [ 153.362682][ T7378] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.950344][ T5933] tipc: Node number set to 3019007016 [ 154.237863][ T8842] block nbd1: not configured, cannot reconfigure [ 154.362838][ T8847] netlink: 'syz.3.981': attribute type 10 has an invalid length. [ 154.665944][ T8870] x_tables: duplicate underflow at hook 2 [ 155.028425][ T8893] xt_SECMARK: invalid mode: 9 [ 155.200056][ T8904] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.997'. [ 155.250757][ T8905] syzkaller0: entered promiscuous mode [ 155.271761][ T8905] syzkaller0: entered allmulticast mode [ 155.728380][ T8935] xt_SECMARK: invalid mode: 9 [ 155.872998][ T8943] netlink: 'syz.4.1009': attribute type 1 has an invalid length. [ 155.894344][ T8943] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1009'. [ 156.170751][ T8960] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 156.368690][ T8971] xt_SECMARK: invalid mode: 9 [ 156.376143][ T8968] IPv6: sit1: Disabled Multicast RS [ 156.713156][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1026'. [ 156.984552][ T9004] xt_SECMARK: invalid mode: 9 [ 157.115009][ T4466] nci: nci_rx_work: unknown MT 0x1 [ 157.120403][ T9012] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1031'. [ 157.185936][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1034'. [ 157.204559][ T9016] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1033'. [ 157.436850][ T9027] netlink: 'syz.0.1037': attribute type 11 has an invalid length. [ 157.446706][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1037'. [ 157.465259][ T6269] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.469927][ T9027] netlink: 'syz.0.1037': attribute type 11 has an invalid length. [ 157.482764][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1037'. [ 157.491579][ T6269] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.510739][ T6269] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.522187][ T6269] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.627461][ T9033] Bluetooth: MGMT ver 1.23 [ 157.808243][ T9041] team0: Device ip6gre1 is of different type [ 157.834596][ T9043] xt_SECMARK: invalid mode: 9 [ 157.915971][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1044'. [ 158.125568][ T9055] Cannot find set identified by id 3 to match [ 158.266510][ T9063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1052'. [ 158.308376][ T9067] xt_SECMARK: invalid mode: 9 [ 158.400674][ T9076] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1055'. [ 158.451657][ T9081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1055'. [ 158.700910][ T9098] openvswitch: netlink: Flow key attr not present in new flow. [ 158.824773][ T9081] team0: Port device team_slave_0 removed [ 158.860730][ T9104] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 159.018961][ T9113] Cannot find set identified by id 3 to match [ 159.234804][ T9124] xt_SECMARK: invalid mode: 9 [ 159.308264][ T9126] netlink: 'syz.0.1068': attribute type 5 has an invalid length. [ 159.403757][ T9128] Cannot find set identified by id 0 to match [ 159.700561][ T5843] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 159.700590][ T5834] Bluetooth: hci2: command 0x0401 tx timeout [ 159.858597][ T9161] xt_SECMARK: invalid mode: 9 [ 160.071247][ T9172] x_tables: ip_tables: udp match: only valid for protocol 17 [ 160.426165][ T9189] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 160.453998][ T9189] team0: Port device batadv1 added [ 160.542537][ T9199] x_tables: duplicate underflow at hook 2 [ 160.555605][ T9201] netlink: 'syz.1.1098': attribute type 4 has an invalid length. [ 160.581103][ T9201] `: renamed from bond0 [ 160.593304][ T9201] `: entered allmulticast mode [ 160.600138][ T9201] bond_slave_0: entered allmulticast mode [ 160.614564][ T9201] bond_slave_1: entered allmulticast mode [ 160.632918][ T9201] bridge_slave_1: entered allmulticast mode [ 161.233802][ T9238] netlink: 'syz.3.1112': attribute type 5 has an invalid length. [ 161.684979][ T9262] netlink: 'syz.1.1120': attribute type 1 has an invalid length. [ 161.892316][ T9274] Cannot find set identified by id 3 to match [ 161.899207][ T9277] netlink: 'syz.1.1128': attribute type 4 has an invalid length. [ 161.907301][ T9277] __nla_validate_parse: 17 callbacks suppressed [ 161.907319][ T9277] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1128'. [ 161.992190][ T9281] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 162.006759][ T9281] bond3: entered promiscuous mode [ 162.012657][ T9281] bond3: entered allmulticast mode [ 162.019654][ T9281] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.119447][ T9287] wlan0 speed is unknown, defaulting to 1000 [ 162.137014][ T9287] wlan0 speed is unknown, defaulting to 1000 [ 162.148335][ T9287] wlan0 speed is unknown, defaulting to 1000 [ 162.168452][ T9287] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 162.247699][ T9287] wlan0 speed is unknown, defaulting to 1000 [ 162.263714][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1132'. [ 162.296142][ T9287] wlan0 speed is unknown, defaulting to 1000 [ 162.317907][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 162.348964][ T9287] wlan0 speed is unknown, defaulting to 1000 [ 162.355128][ T9298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.475647][ T9298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.535198][ T9287] wlan0 speed is unknown, defaulting to 1000 [ 162.570088][ T9302] bond4: option lp_interval: invalid value (0) [ 162.577447][ T9302] bond4: option lp_interval: allowed values 1 - 2147483647 [ 162.592704][ T9302] bond4 (unregistering): Released all slaves [ 162.614549][ T9313] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1138'. [ 162.640535][ T9287] wlan0 speed is unknown, defaulting to 1000 [ 163.316760][ T9341] syzkaller0: entered promiscuous mode [ 163.330481][ T9341] syzkaller0: entered allmulticast mode [ 163.562925][ T9359] block nbd0: not configured, cannot reconfigure [ 163.603689][ T9358] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 163.711589][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'. [ 163.770568][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 163.780906][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 163.921157][ T9381] netlink: 'syz.2.1159': attribute type 1 has an invalid length. [ 163.952527][ T9381] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1159'. [ 163.986245][ T9383] netlink: 'syz.2.1159': attribute type 1 has an invalid length. [ 164.028512][ T9383] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1159'. [ 164.251112][ T9405] netlink: 'syz.3.1165': attribute type 13 has an invalid length. [ 164.506364][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 164.777270][ T9441] netlink: 'syz.2.1175': attribute type 4 has an invalid length. [ 164.815102][ T9441] `: renamed from bond0 (while UP) [ 165.058604][ T9457] sctp: [Deprecated]: syz.0.1178 (pid 9457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.058604][ T9457] Use struct sctp_sack_info instead [ 165.385185][ T9475] netlink: 'syz.2.1186': attribute type 10 has an invalid length. [ 165.407755][ T9475] bridge_slave_1: left allmulticast mode [ 165.442888][ T9475] bridge_slave_1: left promiscuous mode [ 165.459132][ T9475] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.500564][ T9475] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 165.720858][ T9496] netlink: 'syz.4.1192': attribute type 10 has an invalid length. [ 165.729872][ T9496] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 165.739733][ T9496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.772587][ T9496] netlink: 'syz.4.1192': attribute type 1 has an invalid length. [ 166.774048][ T9552] bridge_slave_0 (unregistering): left allmulticast mode [ 166.785355][ T9552] bridge_slave_0 (unregistering): left promiscuous mode [ 166.822445][ T9552] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.912791][ T9567] sctp: [Deprecated]: syz.1.1213 (pid 9567) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.912791][ T9567] Use struct sctp_sack_info instead [ 166.991472][ T9572] netlink: 'syz.0.1216': attribute type 2 has an invalid length. [ 166.999444][ T9572] __nla_validate_parse: 16 callbacks suppressed [ 166.999464][ T9572] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1216'. [ 167.226645][ T9587] Cannot find set identified by id 3 to match [ 167.403606][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1222'. [ 167.412970][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1222'. [ 167.905720][ T9615] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1230'. [ 168.044940][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'. [ 168.060340][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'. [ 168.134229][ T9628] netlink: 'syz.2.1235': attribute type 2 has an invalid length. [ 168.147997][ T9628] netlink: 'syz.2.1235': attribute type 1 has an invalid length. [ 168.863440][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'. [ 168.873287][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'. [ 168.874628][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'. [ 168.895455][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1250'. [ 169.680921][ T9721] tipc: Enabled bearer , priority 0 [ 169.709334][ T9721] syzkaller0: entered promiscuous mode [ 169.723996][ T9721] syzkaller0: entered allmulticast mode [ 169.801531][ T9726] tipc: Resetting bearer [ 169.981773][ T9734] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 169.989292][ T9734] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 170.185383][ T9719] tipc: Resetting bearer [ 170.266835][ T9719] tipc: Disabling bearer [ 170.296488][ T9749] erspan0: entered promiscuous mode [ 170.558124][ T9764] Cannot find set identified by id 3 to match [ 170.602676][ T9768] netlink: 'syz.1.1277': attribute type 10 has an invalid length. [ 170.732548][ T9768] bond0 (unregistering): Released all slaves [ 171.108928][ T9797] ipvlan2: entered allmulticast mode [ 171.114755][ T9797] batadv_slave_1: entered allmulticast mode [ 171.148140][ T9797] ipvlan3: entered allmulticast mode [ 171.164470][ T9797] ipvlan4: entered allmulticast mode [ 171.178270][ T9797] ipvlan5: entered allmulticast mode [ 171.194838][ T9797] ipvlan6: entered allmulticast mode [ 171.212745][ T9797] ipvlan7: entered allmulticast mode [ 171.234766][ T9797] ipvlan8: entered allmulticast mode [ 171.248518][ T9797] ipvlan9: entered allmulticast mode [ 171.264398][ T9797] ipvlan10: entered allmulticast mode [ 171.277408][ T9797] ipvlan11: entered allmulticast mode [ 171.290036][ T9797] ipvlan12: entered allmulticast mode [ 171.311072][ T9797] ipvlan13: entered allmulticast mode [ 171.324218][ T9797] ipvlan14: entered allmulticast mode [ 171.347210][ T9797] ipvlan15: entered allmulticast mode [ 171.364490][ T9797] ipvlan16: entered allmulticast mode [ 171.383953][ T9797] ipvlan17: entered allmulticast mode [ 171.402173][ T9797] ipvlan18: entered allmulticast mode [ 171.419712][ T9803] Cannot find set identified by id 3 to match [ 171.433539][ T9797] ipvlan19: entered allmulticast mode [ 171.448725][ T9797] ipvlan20: entered allmulticast mode [ 171.472213][ T9797] ipvlan21: entered allmulticast mode [ 171.488130][ T9797] ipvlan22: entered allmulticast mode [ 171.506677][ T9797] ipvlan23: entered allmulticast mode [ 171.539380][ T9797] ipvlan24: entered allmulticast mode [ 171.575788][ T9797] ipvlan25: entered allmulticast mode [ 171.593267][ T9797] ipvlan26: entered allmulticast mode [ 171.617116][ T9797] ipvlan27: entered allmulticast mode [ 171.642833][ T9797] ipvlan28: entered allmulticast mode [ 171.659206][ T9797] ipvlan29: entered allmulticast mode [ 171.677931][ T9797] ipvlan30: entered allmulticast mode [ 171.698842][ T9797] ipvlan31: entered allmulticast mode [ 171.729477][ T9797] ipvlan32: entered allmulticast mode [ 171.768264][ T9797] ipvlan33: entered allmulticast mode [ 171.804951][ T9797] ipvlan34: entered allmulticast mode [ 172.326110][ T9836] Cannot find add_set index 0 as target [ 172.611801][ T9851] __nla_validate_parse: 14 callbacks suppressed [ 172.611821][ T9851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1308'. [ 172.642888][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1306'. [ 172.832360][ T9863] netlink: 'syz.1.1311': attribute type 9 has an invalid length. [ 172.844223][ T9862] netlink: 'syz.1.1311': attribute type 9 has an invalid length. [ 172.858456][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1310'. [ 172.976066][ T9873] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.048719][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1315'. [ 173.064350][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1315'. [ 173.084606][ T7349] IPVS: starting estimator thread 0... [ 173.194275][ T9880] IPVS: using max 29 ests per chain, 69600 per kthread [ 173.264183][ T9887] netlink: 'syz.1.1319': attribute type 1 has an invalid length. [ 173.323996][ T9887] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 173.336040][ T9887] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 173.386466][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1320'. [ 173.408973][ T9893] gretap1: entered promiscuous mode [ 173.419984][ T9893] bond0: (slave gretap1): making interface the new active one [ 173.428558][ T9893] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 173.438248][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1319'. [ 173.465737][ T9887] macvlan4: entered promiscuous mode [ 173.472942][ T9887] macvlan4: entered allmulticast mode [ 173.791259][ T9902] tipc: Enabling of bearer rejected, failed to enable media [ 173.880711][ T9918] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1327'. [ 173.920460][ T9918] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1327'. [ 174.039893][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 174.381744][ T9940] Cannot find set identified by id 3 to match [ 174.698256][ T9961] netlink: 'syz.2.1340': attribute type 2 has an invalid length. [ 174.731485][ T9961] netlink: 'syz.2.1340': attribute type 1 has an invalid length. [ 174.749380][ T9967] netlink: 'syz.2.1340': attribute type 1 has an invalid length. [ 174.811026][ T9967] netlink: 'syz.2.1340': attribute type 2 has an invalid length. [ 174.819762][ T9961] netlink: 'syz.2.1340': attribute type 1 has an invalid length. [ 174.852277][ T9967] netlink: 'syz.2.1340': attribute type 1 has an invalid length. [ 174.987611][ T9983] xt_SECMARK: invalid mode: 9 [ 175.246727][ T9996] x_tables: duplicate underflow at hook 3 [ 175.589127][T10020] x_tables: unsorted entry at hook 1 [ 175.604759][T10016] bond3: (slave ipvlan35): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 175.617571][T10016] bond3: (slave ipvlan35): The slave device specified does not support setting the MAC address [ 175.635111][T10016] bond3: (slave ipvlan35): Error -95 calling set_mac_address [ 175.700110][T10022] validate_nla: 1 callbacks suppressed [ 175.700127][T10022] netlink: 'syz.0.1356': attribute type 1 has an invalid length. [ 175.817020][T10033] xt_SECMARK: invalid mode: 9 [ 176.454840][T10068] syzkaller0: entered promiscuous mode [ 176.466314][T10071] Cannot find del_set index 4 as target [ 176.480943][T10068] syzkaller0: entered allmulticast mode [ 176.521238][T10074] netlink: 'syz.4.1372': attribute type 1 has an invalid length. [ 176.783131][T10089] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 177.086489][T10113] openvswitch: netlink: Flow actions attr not present in new flow. [ 177.136846][T10113] IPVS: set_ctl: invalid protocol: 161 172.20.20.170:20000 [ 177.196565][T10118] --map-set only usable from mangle table [ 178.012046][T10155] __nla_validate_parse: 13 callbacks suppressed [ 178.012070][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'. [ 178.079101][T10157] netlink: 'syz.3.1394': attribute type 1 has an invalid length. [ 178.099940][T10157] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1394'. [ 178.209856][T10163] pim6reg1: entered promiscuous mode [ 178.250410][T10163] pim6reg1: entered allmulticast mode [ 178.273155][T10163] x_tables: duplicate underflow at hook 1 [ 178.309540][T10163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1396'. [ 178.582010][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 178.630451][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 178.884553][T10190] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1406'. [ 178.910608][T10189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1405'. [ 178.929972][T10189] netlink: 'syz.4.1405': attribute type 21 has an invalid length. [ 178.969187][T10196] tipc: Started in network mode [ 178.974279][T10196] tipc: Node identity 080211000001, cluster identity 4711 [ 178.984724][T10196] tipc: Enabled bearer , priority 0 [ 178.994367][T10196] syzkaller0: mtu less than device minimum [ 179.160003][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1409'. [ 179.404586][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1416'. [ 179.545985][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'. [ 179.698696][T10238] tunl0: left promiscuous mode [ 179.732974][T10238] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 179.805412][T10250] netlink: 'syz.1.1424': attribute type 1 has an invalid length. [ 179.900850][T10253] sctp: [Deprecated]: syz.3.1423 (pid 10253) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.900850][T10253] Use struct sctp_sack_info instead [ 179.949978][T10255] bond4: (slave veth3): Enslaving as an active interface with a down link [ 179.961313][T10251] batman_adv: batadv0: Adding interface: dummy0 [ 179.970028][T10251] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.010710][T10251] batman_adv: batadv0: Interface activated: dummy0 [ 180.024873][T10250] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 180.036256][T10255] bond4: entered promiscuous mode [ 180.047122][T10255] bond4: entered allmulticast mode [ 180.110405][ T5944] tipc: Node number set to 134418688 [ 180.274369][T10273] netlink: 'syz.4.1430': attribute type 33 has an invalid length. [ 180.348812][T10279] ieee802154 phy1 wpan1: encryption failed: -22 [ 180.522348][T10281] team0: Port device dummy0 removed [ 180.555071][T10287] xt_hashlimit: max too large, truncated to 1048576 [ 180.810884][T10299] bond5: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 180.829311][T10299] bond5 (unregistering): Released all slaves [ 181.080722][T10327] SET target dimension over the limit! [ 181.439200][T10345] Cannot find set identified by id 3 to match [ 181.487088][T10349] netlink: 'syz.1.1451': attribute type 12 has an invalid length. [ 181.990054][T10378] xt_CT: No such helper "pptp" [ 182.079427][T10386] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 182.202329][T10392] Cannot find add_set index 0 as target [ 182.236165][T10396] netlink: 'syz.4.1465': attribute type 2 has an invalid length. [ 182.822076][T10437] Cannot find set identified by id 3 to match [ 182.984040][T10445] : renamed from hsr0 (while UP) [ 183.113081][T10452] netlink: 'syz.0.1485': attribute type 10 has an invalid length. [ 183.129750][T10452] __nla_validate_parse: 13 callbacks suppressed [ 183.129769][T10452] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1485'. [ 183.310300][T10468] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1491'. [ 183.525319][T10478] xt_bpf: check failed: parse error [ 183.698448][T10479] bridge0: port 2(.) entered disabled state [ 183.705268][T10479] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.918540][T10479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.939761][T10479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.080465][T10489] macsec0: entered promiscuous mode [ 184.085770][T10489] macsec0: entered allmulticast mode [ 184.112847][T10490] veth1_macvtap: entered allmulticast mode [ 184.129257][T10490] macsec0: left promiscuous mode [ 184.144830][T10490] macsec0: left allmulticast mode [ 184.164905][T10490] veth1_macvtap: left allmulticast mode [ 184.193096][ T7363] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.215836][ T7363] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.249967][ T7363] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.300044][ T7363] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.338651][ T7363] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.348902][ T7363] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.385441][ T7363] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.404331][ T7363] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.415592][T10521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1503'. [ 184.440518][T10521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.749282][T10542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.935992][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'. [ 184.967630][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'. [ 185.609372][T10587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1523'. [ 185.866105][T10602] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1528'. [ 186.026723][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1531'. [ 186.037594][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1531'. [ 186.049794][T10612] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1531'. [ 186.172724][T10616] syzkaller0: entered promiscuous mode [ 186.189560][T10616] syzkaller0: entered allmulticast mode [ 186.218011][T10619] policy can only be matched on NF_INET_PRE_ROUTING [ 186.218034][T10619] unable to load match [ 186.256304][T10626] Cannot find set identified by id 3 to match [ 186.357579][T10628] ------------[ cut here ]------------ [ 186.363281][T10628] WARNING: net/core/flow_dissector.c:1131 at __skb_flow_dissect+0xb57/0x68b0, CPU#1: syz.0.1536/10628 [ 186.374372][T10628] Modules linked in: [ 186.378519][T10628] CPU: 1 UID: 0 PID: 10628 Comm: syz.0.1536 Not tainted syzkaller #0 PREEMPT(full) [ 186.388157][T10628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.398590][T10628] RIP: 0010:__skb_flow_dissect+0xb57/0x68b0 [ 186.404811][T10628] Code: 55 00 00 80 3d 94 c5 36 06 01 0f 85 b3 55 00 00 e8 be 8d 8b f8 e9 83 f9 ff ff e8 b4 8d 8b f8 e9 b0 03 00 00 e8 aa 8d 8b f8 90 <0f> 0b 90 e9 16 ff ff ff e8 9c 8d 8b f8 c6 05 5d c5 36 06 01 48 c7 [ 186.424884][T10628] RSP: 0000:ffffc90003816f40 EFLAGS: 00010287 [ 186.431050][T10628] RAX: ffffffff8935c70e RBX: 0000000000000001 RCX: 0000000000080000 [ 186.439071][T10628] RDX: ffffc9000c3a9000 RSI: 000000000000062c RDI: 000000000000062d [ 186.447417][T10628] RBP: ffffc90003817558 R08: ffffffff893562c8 R09: ffffffff8df41aa0 [ 186.455484][T10628] R10: ffffc900038175e0 R11: fffff52000702ec6 R12: dffffc0000000000 [ 186.463558][T10628] R13: ffffffff893562c8 R14: 0000000000000000 R15: ffffffff8f825fd0 [ 186.471626][T10628] FS: 00007fafc8bf66c0(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 186.480660][T10628] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.487295][T10628] CR2: 00007fd30d5d40d8 CR3: 0000000077bc8000 CR4: 00000000003526f0 [ 186.495373][T10628] Call Trace: [ 186.498690][T10628] [ 186.501743][T10628] ? stack_trace_save+0x9c/0xe0 [ 186.506654][T10628] ? __pfx_stack_trace_save+0x10/0x10 [ 186.512165][T10628] ? __lock_acquire+0x6b6/0x2cf0 [ 186.517196][T10628] ? __pfx___skb_flow_dissect+0x10/0x10 [ 186.523109][T10628] ? __update_page_owner_handle+0x5a/0x570 [ 186.529071][T10628] ? __page_table_check_zero+0x6a/0x3e0 [ 186.534704][T10628] ? lock_acquire+0x107/0x340 [ 186.539454][T10628] ? __page_table_check_zero+0x6a/0x3e0 [ 186.545171][T10628] ? __page_table_check_zero+0x6a/0x3e0 [ 186.550799][T10628] ? __page_table_check_zero+0x397/0x3e0 [ 186.556474][T10628] ? __page_table_check_zero+0x6a/0x3e0 [ 186.562155][T10628] ? post_alloc_hook+0x247/0x290 [ 186.567157][T10628] ? get_page_from_freelist+0x24e0/0x2580 [ 186.572996][T10628] ? rht_lock+0x8b/0x180 [ 186.577307][T10628] ? __lock_acquire+0x6b6/0x2cf0 [ 186.582423][T10628] ? rcu_is_watching+0x15/0xb0 [ 186.587337][T10628] ? trace_mm_page_alloc+0x3e/0x140 [ 186.592653][T10628] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 186.598778][T10628] ? pfn_valid+0x125/0x4d0 [ 186.603461][T10628] ? lock_acquire+0x107/0x340 [ 186.608189][T10628] ? __lock_acquire+0x6b6/0x2cf0 [ 186.613240][T10628] __bond_xmit_hash+0x2d7/0xba0 [ 186.618159][T10628] ? __pfx___bond_xmit_hash+0x10/0x10 [ 186.623645][T10628] ? pfn_valid+0x125/0x4d0 [ 186.628210][T10628] ? lock_acquire+0x107/0x340 [ 186.632985][T10628] ? pfn_valid+0x125/0x4d0 [ 186.637469][T10628] bond_xdp_get_xmit_slave+0x1fd/0x710 [ 186.643046][T10628] xdp_master_redirect+0x13f/0x2c0 [ 186.648316][T10628] bpf_test_run_xdp_live+0x14b8/0x1b20 [ 186.653914][T10628] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 186.659651][T10628] ? bpf_test_run_xdp_live+0x393/0x1b20 [ 186.665308][T10628] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 186.671238][T10628] ? 0xffffffffa0201a0c [ 186.675466][T10628] ? 0xffffffffa0201a58 [ 186.679669][T10628] ? 0xffffffffa02030d0 [ 186.683916][T10628] ? 0xffffffffa0203118 [ 186.688204][T10628] ? 0xffffffffa0203190 [ 186.692438][T10628] ? 0xffffffffa02031d8 [ 186.696684][T10628] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 186.702684][T10628] ? _copy_from_user+0x94/0xb0 [ 186.707683][T10628] ? bpf_test_init+0x113/0x150 [ 186.712528][T10628] ? xdp_convert_md_to_buff+0x5b/0x330 [ 186.718056][T10628] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 186.723568][T10628] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 186.729459][T10628] ? __fget_files+0x2a/0x420 [ 186.734228][T10628] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 186.740094][T10628] bpf_prog_test_run+0x2c7/0x340 [ 186.745218][T10628] __sys_bpf+0x562/0x860 [ 186.749521][T10628] ? __pfx___sys_bpf+0x10/0x10 [ 186.754438][T10628] ? _copy_from_user+0x94/0xb0 [ 186.759298][T10628] ? rcu_is_watching+0x15/0xb0 [ 186.764162][T10628] __x64_sys_bpf+0x7c/0x90 [ 186.768702][T10628] do_syscall_64+0xec/0xf80 [ 186.773289][T10628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.779413][T10628] ? trace_irq_disable+0x37/0x100 [ 186.784550][T10628] ? clear_bhb_loop+0x60/0xb0 [ 186.789291][T10628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.795272][T10628] RIP: 0033:0x7fafca98f749 [ 186.799742][T10628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.819867][T10628] RSP: 002b:00007fafc8bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 186.828400][T10628] RAX: ffffffffffffffda RBX: 00007fafcabe5fa0 RCX: 00007fafca98f749 [ 186.836482][T10628] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 186.844568][T10628] RBP: 00007fafcaa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 186.852718][T10628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.860790][T10628] R13: 00007fafcabe6038 R14: 00007fafcabe5fa0 R15: 00007ffd1275ab48 [ 186.868859][T10628] [ 186.871955][T10628] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 186.879458][T10628] CPU: 1 UID: 0 PID: 10628 Comm: syz.0.1536 Not tainted syzkaller #0 PREEMPT(full) [ 186.888891][T10628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.898971][T10628] Call Trace: [ 186.902269][T10628] [ 186.905224][T10628] vpanic+0x1e0/0x670 [ 186.909240][T10628] panic+0xb9/0xc0 [ 186.912987][T10628] ? __pfx_panic+0x10/0x10 [ 186.917462][T10628] __warn+0x317/0x4b0 [ 186.921473][T10628] ? __skb_flow_dissect+0xb57/0x68b0 [ 186.926792][T10628] ? __skb_flow_dissect+0xb57/0x68b0 [ 186.932113][T10628] __report_bug+0x288/0x500 [ 186.936639][T10628] ? __lock_acquire+0x6b6/0x2cf0 [ 186.941599][T10628] ? __skb_flow_dissect+0xb57/0x68b0 [ 186.946917][T10628] ? __pfx___report_bug+0x10/0x10 [ 186.951970][T10628] ? __lock_acquire+0x6b6/0x2cf0 [ 186.956944][T10628] ? unwind_next_frame+0xa5/0x23d0 [ 186.962088][T10628] ? is_bpf_text_address+0x26/0x2b0 [ 186.967429][T10628] ? lock_acquire+0x107/0x340 [ 186.972215][T10628] ? __skb_flow_dissect+0xb57/0x68b0 [ 186.977668][T10628] report_bug+0x16a/0x220 [ 186.982026][T10628] ? __skb_flow_dissect+0xb57/0x68b0 [ 186.987334][T10628] ? __skb_flow_dissect+0xb59/0x68b0 [ 186.992668][T10628] handle_bug+0x98/0x200 [ 186.996953][T10628] exc_invalid_op+0x1a/0x50 [ 187.001492][T10628] asm_exc_invalid_op+0x1a/0x20 [ 187.006381][T10628] RIP: 0010:__skb_flow_dissect+0xb57/0x68b0 [ 187.012332][T10628] Code: 55 00 00 80 3d 94 c5 36 06 01 0f 85 b3 55 00 00 e8 be 8d 8b f8 e9 83 f9 ff ff e8 b4 8d 8b f8 e9 b0 03 00 00 e8 aa 8d 8b f8 90 <0f> 0b 90 e9 16 ff ff ff e8 9c 8d 8b f8 c6 05 5d c5 36 06 01 48 c7 [ 187.032233][T10628] RSP: 0000:ffffc90003816f40 EFLAGS: 00010287 [ 187.038337][T10628] RAX: ffffffff8935c70e RBX: 0000000000000001 RCX: 0000000000080000 [ 187.046345][T10628] RDX: ffffc9000c3a9000 RSI: 000000000000062c RDI: 000000000000062d [ 187.054355][T10628] RBP: ffffc90003817558 R08: ffffffff893562c8 R09: ffffffff8df41aa0 [ 187.062363][T10628] R10: ffffc900038175e0 R11: fffff52000702ec6 R12: dffffc0000000000 [ 187.070486][T10628] R13: ffffffff893562c8 R14: 0000000000000000 R15: ffffffff8f825fd0 [ 187.078495][T10628] ? __skb_flow_dissect+0x408/0x68b0 [ 187.083828][T10628] ? __skb_flow_dissect+0x408/0x68b0 [ 187.089136][T10628] ? __skb_flow_dissect+0x684e/0x68b0 [ 187.094595][T10628] ? stack_trace_save+0x9c/0xe0 [ 187.099480][T10628] ? __pfx_stack_trace_save+0x10/0x10 [ 187.104891][T10628] ? __lock_acquire+0x6b6/0x2cf0 [ 187.109866][T10628] ? __pfx___skb_flow_dissect+0x10/0x10 [ 187.115806][T10628] ? __update_page_owner_handle+0x5a/0x570 [ 187.121818][T10628] ? __page_table_check_zero+0x6a/0x3e0 [ 187.127396][T10628] ? lock_acquire+0x107/0x340 [ 187.132142][T10628] ? __page_table_check_zero+0x6a/0x3e0 [ 187.137988][T10628] ? __page_table_check_zero+0x6a/0x3e0 [ 187.143566][T10628] ? __page_table_check_zero+0x397/0x3e0 [ 187.149226][T10628] ? __page_table_check_zero+0x6a/0x3e0 [ 187.154806][T10628] ? post_alloc_hook+0x247/0x290 [ 187.159777][T10628] ? get_page_from_freelist+0x24e0/0x2580 [ 187.165529][T10628] ? rht_lock+0x8b/0x180 [ 187.169894][T10628] ? __lock_acquire+0x6b6/0x2cf0 [ 187.174953][T10628] ? rcu_is_watching+0x15/0xb0 [ 187.179746][T10628] ? trace_mm_page_alloc+0x3e/0x140 [ 187.184969][T10628] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 187.190980][T10628] ? pfn_valid+0x125/0x4d0 [ 187.195516][T10628] ? lock_acquire+0x107/0x340 [ 187.200231][T10628] ? __lock_acquire+0x6b6/0x2cf0 [ 187.205220][T10628] __bond_xmit_hash+0x2d7/0xba0 [ 187.210141][T10628] ? __pfx___bond_xmit_hash+0x10/0x10 [ 187.215593][T10628] ? pfn_valid+0x125/0x4d0 [ 187.220311][T10628] ? lock_acquire+0x107/0x340 [ 187.225027][T10628] ? pfn_valid+0x125/0x4d0 [ 187.229486][T10628] bond_xdp_get_xmit_slave+0x1fd/0x710 [ 187.234990][T10628] xdp_master_redirect+0x13f/0x2c0 [ 187.240142][T10628] bpf_test_run_xdp_live+0x14b8/0x1b20 [ 187.245636][T10628] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 187.251305][T10628] ? bpf_test_run_xdp_live+0x393/0x1b20 [ 187.256883][T10628] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 187.262738][T10628] ? 0xffffffffa0201a0c [ 187.266912][T10628] ? 0xffffffffa0201a58 [ 187.271174][T10628] ? 0xffffffffa02030d0 [ 187.275345][T10628] ? 0xffffffffa0203118 [ 187.279524][T10628] ? 0xffffffffa0203190 [ 187.283705][T10628] ? 0xffffffffa02031d8 [ 187.287895][T10628] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 187.293854][T10628] ? _copy_from_user+0x94/0xb0 [ 187.298673][T10628] ? bpf_test_init+0x113/0x150 [ 187.303485][T10628] ? xdp_convert_md_to_buff+0x5b/0x330 [ 187.308983][T10628] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 187.314389][T10628] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 187.320312][T10628] ? __fget_files+0x2a/0x420 [ 187.324965][T10628] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 187.330802][T10628] bpf_prog_test_run+0x2c7/0x340 [ 187.335773][T10628] __sys_bpf+0x562/0x860 [ 187.340047][T10628] ? __pfx___sys_bpf+0x10/0x10 [ 187.344836][T10628] ? _copy_from_user+0x94/0xb0 [ 187.349651][T10628] ? rcu_is_watching+0x15/0xb0 [ 187.354471][T10628] __x64_sys_bpf+0x7c/0x90 [ 187.358923][T10628] do_syscall_64+0xec/0xf80 [ 187.363550][T10628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.369638][T10628] ? trace_irq_disable+0x37/0x100 [ 187.374693][T10628] ? clear_bhb_loop+0x60/0xb0 [ 187.379560][T10628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.385479][T10628] RIP: 0033:0x7fafca98f749 [ 187.389927][T10628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.409641][T10628] RSP: 002b:00007fafc8bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.418265][T10628] RAX: ffffffffffffffda RBX: 00007fafcabe5fa0 RCX: 00007fafca98f749 [ 187.426261][T10628] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 187.434272][T10628] RBP: 00007fafcaa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 187.442266][T10628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.450351][T10628] R13: 00007fafcabe6038 R14: 00007fafcabe5fa0 R15: 00007ffd1275ab48 [ 187.458534][T10628] [ 187.462161][T10628] Kernel Offset: disabled [ 187.466581][T10628] Rebooting in 86400 seconds..