last executing test programs: 4m8.738810775s ago: executing program 0 (id=60): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @typedef={0x4}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x4e}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) (async) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x6, 0x0, 0x0) (async) setsockopt$llc_int(r1, 0x10c, 0x6, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0xa, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) recvfrom$ax25(r3, &(0x7f0000000040)=""/61, 0x3d, 0x100, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r7}, 0x10, &(0x7f00000003c0)={0x0}}, 0x844) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0xbc, r8, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcf95}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) 4m8.090076592s ago: executing program 3 (id=69): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0xfffffff9, 0x6, 0x7, 0x7f, 0xb2, 0x7, 0xf9, 0x68, 0x6, [0x3, 0x9, 0xffff7fff, 0x4, 0x8, 0x80, 0x8000]}}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000c, 0x11, r0, 0x180000000) 4m7.997209951s ago: executing program 2 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r1, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200), &(0x7f0000000280)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700020000000000000005000000180001801400020073797a5f74756e0000000000000000001c000380140003800c000180080001000200000004000188040001"], 0x48}}, 0x4814) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m7.400204651s ago: executing program 0 (id=74): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1e2c741e73a016d1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x100, 0x70bd29, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) (async) syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xc, 0x0, 0x0, {[@generic={0x4, 0x7, "5eee37d22a"}]}}}}}}}}, 0x0) 4m7.39972857s ago: executing program 2 (id=75): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000280)={0x0, {{0xa, 0x4e20, 0x4, @mcast2}}, {{0xa, 0x4e23, 0x9, @private2, 0x5}}}, 0x108) syz_emit_ethernet(0xd2, &(0x7f00000006c0)=ANY=[@ANYBLOB="79ee7ca42eeaffffffffffff86dd6a000000009c1100fc020000000000000000000000000000ff02000000000000009c000000000001"], 0x0) 4m7.346605521s ago: executing program 0 (id=77): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x84, 0x2c, 0x0, 0x70bd2b, 0x0, "", [@generic="ed2fcf0cd9b69c7dbca37ef1c9f2f7c8fa756ba39b51e5018cc799f8b6c8d71867077a0e2ccd6a4656296a585ec30aab6452677781198bdad6b25ffcfe217caeab4aa7ecde01db20b08cf6dd104c9da074b7c2f2c554c35a0d28f046eb1f2dbc809da2d85e2f119793bdcfaeca22f061a2"]}, 0x84}], 0x1, 0x0, 0x0, 0x1}, 0x0) 4m7.3363857s ago: executing program 3 (id=78): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b40), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b40), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="df4800000000000000000c0000002c00038028000380140001800800810002000000050002000000000010000180090002007369743000000000180001801400020073697430"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r1, 0x1}, 0x14}}, 0x0) 4m7.241073514s ago: executing program 2 (id=80): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xe, &(0x7f0000001b00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffc, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async, rerun: 64) getsockopt$bt_hci(r6, 0x84, 0x2, 0x0, &(0x7f0000000700)) (async, rerun: 64) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)={0x3c, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000) 4m7.084046123s ago: executing program 3 (id=82): syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="40000000100039040000045dbc96000000000000", @ANYRESHEX=r0, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c00)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x9, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@newchain={0x44, 0x64, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x9, 0xfff3}, {0xfff3, 0xa}, {0x7, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x4f}}, @TCA_RATE={0x6, 0x5, {0x8, 0x60}}, @filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$inet6(0xa, 0x800, 0x7) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x2, 0x4}]}, 0x10) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty}, 0x1c) 4m7.057834463s ago: executing program 0 (id=84): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xeff, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x2100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) (async) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xeff, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x2100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) 4m7.00078264s ago: executing program 2 (id=85): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000002b0007f018ffffff000000f6fa7c00000c00018008080600ffffffff100004800c0001"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x40d0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800b00010065787468647200002c000280050002000000000008000340000001010800044000000000080006400000000108000740000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 4m6.544017372s ago: executing program 3 (id=88): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1f, 0xa, 0x9) getpeername$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8002}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @loopback}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x60}}, 0x0) 4m6.540425568s ago: executing program 0 (id=89): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3c4d1fdb959aba2d}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xa, 0x7e}}}}, [@NL80211_ATTR_DISABLE_HT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000140), &(0x7f0000000180)=0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2885a01}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x1d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x100}, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x7f}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x28}}, 0x64800) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000400)={'bridge_slave_0\x00', {0x2, 0x0, @local}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000004c0)={0x0, 0x8, 0x10}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000540)={r4, @in={{0x2, 0x4e23, @local}}, [0x8, 0xe7d, 0x4, 0x1, 0x6, 0x4, 0xffff, 0xaaf, 0xffffffffffffffff, 0x100000001, 0x7, 0xffffffffffffff07, 0x100, 0x6, 0x6]}, &(0x7f0000000640)=0x100) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000680)={0x8, 0x404, 0xb6a, 0x4, r4}, &(0x7f00000006c0)=0x10) connect(0xffffffffffffffff, &(0x7f0000000700)=@pppoe={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'veth1_vlan\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000780), &(0x7f00000007c0)=0x30) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'tunl0\x00', 0x0, 0x7, 0x8000, 0xd1c, 0x1195, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x65, 0x0, 0x9, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0x59, [@local, @local]}, @timestamp={0x44, 0x8, 0xc, 0x0, 0x4, [0x8001]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x5, "7fe15e"}, @generic={0x89, 0x7, "3c430f9103"}, @lsrr={0x83, 0x1b, 0x41, [@dev={0xac, 0x14, 0x14, 0x3d}, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x10}, @loopback, @remote, @remote]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000940)={@dev, @dev, 0x0}, &(0x7f0000000980)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r0, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000009c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000dc0)={'erspan0\x00', &(0x7f0000000d40)={'sit0\x00', 0x0, 0x700, 0x700, 0xc, 0x3, {{0xa, 0x4, 0x2, 0x7, 0x28, 0x68, 0x0, 0x71, 0x29, 0x0, @loopback, @remote, {[@generic={0x88, 0x11, "4c946fcf87331e4271e340cf9e6a51"}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000e40)=0x0, &(0x7f0000000e80)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000f00)={'ip_vti0\x00', &(0x7f0000000ec0)={'gretap0\x00', 0x0, 0x8, 0x40, 0x1, 0x8c342a4, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x1, 0x2f, 0x0, @broadcast, @multicast2, {[@ssrr={0x89, 0xb, 0xd, [@remote, @local]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000f40)={@empty, @multicast2, 0x0}, &(0x7f0000000f80)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000fc0)={'batadv0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001040)=0x14) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000001080)={@remote, 0x0}, &(0x7f00000010c0)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001280)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)={0x140, r6, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x140}, 0x1, 0x0, 0x0, 0xc085}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4m6.538239128s ago: executing program 2 (id=90): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000280)={0x0, {{0xa, 0x4e20, 0x4, @mcast2}}, {{0xa, 0x4e23, 0x9, @private2, 0x5}}}, 0x108) syz_emit_ethernet(0xd2, &(0x7f00000006c0)=ANY=[@ANYBLOB="79ee7ca42eeaffffffffffff86dd6a000000009c1100fc020000000000000000000000000000ff0200000000000000f5000000000001"], 0x0) 4m6.535145661s ago: executing program 3 (id=91): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) mmap(&(0x7f0000601000/0x3000)=nil, 0x3000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="294add5c906a5b1e7ef7bcca9d008190ff66062a1eb807d1", @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) 4m6.340248329s ago: executing program 3 (id=95): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x18, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* v'], 0xa) r4 = socket(0x28, 0x801, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x4c}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x2, 0x3, 0xf7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000380)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x2, 0x2, 0x7ff, 0xc}, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)={{0x0, 0x100000000, 0x2, 0x440, 0x2, 0x3, 0xc, 0xa25f, 0x8, 0x35cce227, 0x81, 0x737, 0x87, 0xfffffffffffff0ac, 0x140000000000}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000028c0)={0x2, [{r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7, 0x0}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}], 0x81, "3d8f96a537941b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000008c0)={0x8000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x3, "2d09a4baae6f41"}) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f00000018c0)={{r9, 0x1, 0x39a4a13f, 0x4, 0x1, 0x89a, 0x80000001, 0x0, 0x9, 0x8, 0x2, 0x80000001, 0x940, 0x3, 0x4}}) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000038c0)={0x4bc, 0x0, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x6}, 0x3, 0x40, 0x8, 0x7, 0x1, 'syz1\x00', "36c5ea58ac0c15364d2e1d91b4539b400ff84542cc38386bf48ec0c93a27e582", "a4eadf6e32831e6f5dbf6edb1f9bdea5a7bbef0d97b8c5edd623d7c16944ac39", [{0x6, 0x3ff, {0x0, 0x2}}, {0x1, 0xe, {0x6b040385d0b6ba25}}, {0x4, 0x8, {0x2, 0x2}}, {0xd3, 0x0, {0x3}}, {0x6, 0x4, {0x3, 0x6}}, {0xe, 0xce85, {0x3, 0x181}}, {0x3, 0x7ff, {0x3, 0xacbe}}, {0x7, 0x3, {0x2, 0x5e4}}, {0x9a25, 0x8000, {0x2, 0xfffffffa}}, {0x7, 0x9, {0x0, 0x1000}}, {0xfffb, 0x1, {0x0, 0x6}}, {0x401, 0x0, {0x0, 0x10001}}, {0x71b8, 0x1, {0x0, 0x5}}, {0x1, 0x7, {0x3, 0xd0d5}}, {0x6, 0x7, {0x2, 0x4657}}, {0x200, 0x48, {0x3, 0x151941bd}}, {0x7f, 0x40, {0x1, 0x7f}}, {0x8, 0x4, {0x3}}, {0x9b4, 0xb21e, {0x0, 0xe0}}, {0x6, 0x4, {0x2, 0xf}}, {0x6, 0x8, {0x1, 0xb270}}, {0x3, 0x2, {0x0, 0x9}}, {0xd553, 0x9a, {0x0, 0xe7}}, {0xd5dd, 0x6d51, {0x1, 0x8}}, {0x8, 0x4, {0x0, 0x2}}, {0x9, 0xe, {0x0, 0x10001}}, {0xfd26, 0x4ece, {0x7, 0x6}}, {0x3, 0x8, {0x3}}, {0xfffd, 0x3, {0x2}}, {0x0, 0x6, {0x2, 0x8001}}, {0x3, 0x6, {0x1, 0x3}}, {0x80, 0x4000, {0x3, 0x2}}, {0x2e, 0x8, {0x0, 0x225e}}, {0x8, 0x80, {0x2, 0x80000001}}, {0x1ff, 0xfff8, {0x2, 0x440}}, {0x7, 0x4, {0x2, 0x6}}, {0x5, 0x1, {0x3, 0x7fc00000}}, {0x7, 0x4, {0x0, 0xffff}}, {0x800, 0x8, {0x2, 0x4}}, {0x7f, 0x2, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0xe3}, 0xd1, 0xc, 0x1, 0x5, 0x28, 'syz0\x00', "6196c1d801866153eb29a617ca5a78790665316170fe7dc141265defbd8ed885", "4d8cd309632a7f816a863f2b6839eacdfd41bf2cb8b6336daa2f9edf24ca10b2", [{0x7, 0x2, {0x3, 0xfff}}, {0x4, 0xdc7, {0x2, 0x5}}, {0x7, 0x298c, {0x2, 0x8}}, {0x7, 0x400, {0x1, 0x7ff}}, {0x80, 0x3db, {0x3, 0x1000}}, {0x9, 0x9fe3, {0x1, 0x7fff}}, {0x4, 0x0, {0x3, 0x7a23}}, {0x2, 0x7f, {0x3, 0x1ff}}, {0x5, 0x5, {0x0, 0xffffffff}}, {0x0, 0x5, {0x6, 0x4}}, {0x81, 0x8, {0x0, 0x25}}, {0x1810, 0x3, {0x3, 0x9}}, {0x3c3e, 0x7, {0x1, 0x20080}}, {0x2, 0x3, {0x2, 0x5}}, {0xffff, 0x101, {0x2, 0x5}}, {0x6f86, 0xc44, {0x3, 0x5}}, {0x1, 0x5, {0x2, 0x9}}, {0x5, 0x80, {0x2, 0x3}}, {0x3, 0x5, {0x0, 0x200}}, {0x3, 0x1, {0x3, 0x8001}}, {0x32, 0x867, {0x0, 0x8}}, {0x4, 0x6, {0x0, 0x7}}, {0x8, 0x0, {0x0, 0xfff}}, {0x1, 0x0, {0x3, 0x2}}, {0xe5a4, 0xff, {0x2, 0xe}}, {0x0, 0x9e40, {0x0, 0x9}}, {0x8, 0x7, {0x0, 0x1}}, {0x8, 0x4, {0x3}}, {0x0, 0x6, {0x1, 0xff}}, {0x7fff, 0x8863, {0x0, 0xfffffff8}}, {0x8, 0x2, {0x3, 0x9}}, {0x7, 0x3, {0x2, 0x5}}, {0x3, 0x3, {0x3, 0xaf3}}, {0x1, 0xff7f, {0x2, 0x2}}, {0x16, 0x6, {0x2, 0x5c}}, {0x3, 0x2, {0x2, 0x8}}, {0x0, 0xff97, {0x2, 0x7fe00000}}, {0x1, 0x7, {0x1, 0xc}}, {0x4, 0x4, {0x0, 0x6}}, {0x4, 0x7, {0x3, 0x5}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40000}, 0x20002000) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711052000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f0000000000)=[{r4, 0xc013}, {r10, 0xe082}], 0x2, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x8, 0x7800, 0xfffffffc, 0x7f, {{0x13, 0x4, 0x0, 0x2c, 0x4c, 0x67, 0x0, 0x3, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x24, 0xa3, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x4}, {@empty, 0x1b8f5f86}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x8}]}, @timestamp_prespec={0x44, 0xffffffffffffff28, 0xae, 0x3, 0x5, [{@private=0xa010102, 0x1}, {@multicast1, 0x800}]}]}}}}}) 4m6.326984355s ago: executing program 0 (id=96): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x3, &(0x7f0000000540)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x3c, r4, 0x601, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'GPL\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x20}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0x10) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 4m6.219583241s ago: executing program 2 (id=97): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r1, 0x75fb3000) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffffc, @remote}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) 4m5.784625157s ago: executing program 32 (id=96): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x3, &(0x7f0000000540)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x3c, r4, 0x601, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'GPL\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x20}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0x10) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 4m5.6582908s ago: executing program 33 (id=97): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r1, 0x75fb3000) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffffc, @remote}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) 4m5.643415557s ago: executing program 34 (id=95): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x18, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* v'], 0xa) r4 = socket(0x28, 0x801, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x4c}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x2, 0x3, 0xf7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000380)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x2, 0x2, 0x7ff, 0xc}, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)={{0x0, 0x100000000, 0x2, 0x440, 0x2, 0x3, 0xc, 0xa25f, 0x8, 0x35cce227, 0x81, 0x737, 0x87, 0xfffffffffffff0ac, 0x140000000000}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000028c0)={0x2, [{r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7, 0x0}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}], 0x81, "3d8f96a537941b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000008c0)={0x8000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x3, "2d09a4baae6f41"}) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f00000018c0)={{r9, 0x1, 0x39a4a13f, 0x4, 0x1, 0x89a, 0x80000001, 0x0, 0x9, 0x8, 0x2, 0x80000001, 0x940, 0x3, 0x4}}) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000038c0)={0x4bc, 0x0, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x6}, 0x3, 0x40, 0x8, 0x7, 0x1, 'syz1\x00', "36c5ea58ac0c15364d2e1d91b4539b400ff84542cc38386bf48ec0c93a27e582", "a4eadf6e32831e6f5dbf6edb1f9bdea5a7bbef0d97b8c5edd623d7c16944ac39", [{0x6, 0x3ff, {0x0, 0x2}}, {0x1, 0xe, {0x6b040385d0b6ba25}}, {0x4, 0x8, {0x2, 0x2}}, {0xd3, 0x0, {0x3}}, {0x6, 0x4, {0x3, 0x6}}, {0xe, 0xce85, {0x3, 0x181}}, {0x3, 0x7ff, {0x3, 0xacbe}}, {0x7, 0x3, {0x2, 0x5e4}}, {0x9a25, 0x8000, {0x2, 0xfffffffa}}, {0x7, 0x9, {0x0, 0x1000}}, {0xfffb, 0x1, {0x0, 0x6}}, {0x401, 0x0, {0x0, 0x10001}}, {0x71b8, 0x1, {0x0, 0x5}}, {0x1, 0x7, {0x3, 0xd0d5}}, {0x6, 0x7, {0x2, 0x4657}}, {0x200, 0x48, {0x3, 0x151941bd}}, {0x7f, 0x40, {0x1, 0x7f}}, {0x8, 0x4, {0x3}}, {0x9b4, 0xb21e, {0x0, 0xe0}}, {0x6, 0x4, {0x2, 0xf}}, {0x6, 0x8, {0x1, 0xb270}}, {0x3, 0x2, {0x0, 0x9}}, {0xd553, 0x9a, {0x0, 0xe7}}, {0xd5dd, 0x6d51, {0x1, 0x8}}, {0x8, 0x4, {0x0, 0x2}}, {0x9, 0xe, {0x0, 0x10001}}, {0xfd26, 0x4ece, {0x7, 0x6}}, {0x3, 0x8, {0x3}}, {0xfffd, 0x3, {0x2}}, {0x0, 0x6, {0x2, 0x8001}}, {0x3, 0x6, {0x1, 0x3}}, {0x80, 0x4000, {0x3, 0x2}}, {0x2e, 0x8, {0x0, 0x225e}}, {0x8, 0x80, {0x2, 0x80000001}}, {0x1ff, 0xfff8, {0x2, 0x440}}, {0x7, 0x4, {0x2, 0x6}}, {0x5, 0x1, {0x3, 0x7fc00000}}, {0x7, 0x4, {0x0, 0xffff}}, {0x800, 0x8, {0x2, 0x4}}, {0x7f, 0x2, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0xe3}, 0xd1, 0xc, 0x1, 0x5, 0x28, 'syz0\x00', "6196c1d801866153eb29a617ca5a78790665316170fe7dc141265defbd8ed885", "4d8cd309632a7f816a863f2b6839eacdfd41bf2cb8b6336daa2f9edf24ca10b2", [{0x7, 0x2, {0x3, 0xfff}}, {0x4, 0xdc7, {0x2, 0x5}}, {0x7, 0x298c, {0x2, 0x8}}, {0x7, 0x400, {0x1, 0x7ff}}, {0x80, 0x3db, {0x3, 0x1000}}, {0x9, 0x9fe3, {0x1, 0x7fff}}, {0x4, 0x0, {0x3, 0x7a23}}, {0x2, 0x7f, {0x3, 0x1ff}}, {0x5, 0x5, {0x0, 0xffffffff}}, {0x0, 0x5, {0x6, 0x4}}, {0x81, 0x8, {0x0, 0x25}}, {0x1810, 0x3, {0x3, 0x9}}, {0x3c3e, 0x7, {0x1, 0x20080}}, {0x2, 0x3, {0x2, 0x5}}, {0xffff, 0x101, {0x2, 0x5}}, {0x6f86, 0xc44, {0x3, 0x5}}, {0x1, 0x5, {0x2, 0x9}}, {0x5, 0x80, {0x2, 0x3}}, {0x3, 0x5, {0x0, 0x200}}, {0x3, 0x1, {0x3, 0x8001}}, {0x32, 0x867, {0x0, 0x8}}, {0x4, 0x6, {0x0, 0x7}}, {0x8, 0x0, {0x0, 0xfff}}, {0x1, 0x0, {0x3, 0x2}}, {0xe5a4, 0xff, {0x2, 0xe}}, {0x0, 0x9e40, {0x0, 0x9}}, {0x8, 0x7, {0x0, 0x1}}, {0x8, 0x4, {0x3}}, {0x0, 0x6, {0x1, 0xff}}, {0x7fff, 0x8863, {0x0, 0xfffffff8}}, {0x8, 0x2, {0x3, 0x9}}, {0x7, 0x3, {0x2, 0x5}}, {0x3, 0x3, {0x3, 0xaf3}}, {0x1, 0xff7f, {0x2, 0x2}}, {0x16, 0x6, {0x2, 0x5c}}, {0x3, 0x2, {0x2, 0x8}}, {0x0, 0xff97, {0x2, 0x7fe00000}}, {0x1, 0x7, {0x1, 0xc}}, {0x4, 0x4, {0x0, 0x6}}, {0x4, 0x7, {0x3, 0x5}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40000}, 0x20002000) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711052000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f0000000000)=[{r4, 0xc013}, {r10, 0xe082}], 0x2, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x8, 0x7800, 0xfffffffc, 0x7f, {{0x13, 0x4, 0x0, 0x2c, 0x4c, 0x67, 0x0, 0x3, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x24, 0xa3, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x4}, {@empty, 0x1b8f5f86}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x8}]}, @timestamp_prespec={0x44, 0xffffffffffffff28, 0xae, 0x3, 0x5, [{@private=0xa010102, 0x1}, {@multicast1, 0x800}]}]}}}}}) 8.605965822s ago: executing program 4 (id=2646): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xbc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 8.416308105s ago: executing program 4 (id=2651): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'vcan0\x00'}) 8.254298393s ago: executing program 4 (id=2658): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000007140)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000007000000890704c000000200110000000000000000000003"], 0x30}}], 0x2, 0x4800) 8.132668797s ago: executing program 4 (id=2662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000fbdbdf251c0000002000018008000100", @ANYRES32=r3, @ANYBLOB="140002"], 0x34}}, 0x40896) 8.019801907s ago: executing program 4 (id=2666): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) 7.900080886s ago: executing program 4 (id=2670): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 1.176298934s ago: executing program 1 (id=2763): epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20008814) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x38, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x4, 0x6071, 0x0, 0xe7, {[@nop, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0xd, "61a2b04aa599db14abfcf2"}]}}}}}}}, 0x0) 1.131801905s ago: executing program 1 (id=2765): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0xd7, 0x200}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {0xf}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x16cc89b4, 0x200, 0x80, 0x10, 0x80000000, 0x4, 0x2, 0xffff6576, 0xd6a6, 0x9, 0x6, 0x9, 0x8, 0x1d, 0x3, 0x81, 0x7, 0x8, 0x8, 0x3f, 0x7, 0xfffffff7, 0x7fffffff, 0x1, 0x10001, 0xfffffff6, 0x5, 0x0, 0x80000001, 0x2, 0x1, 0x7, 0xb, 0x7, 0x0, 0x9bc100, 0x7, 0x999, 0x6, 0x4, 0xfe, 0x3, 0x8c1, 0xffff, 0x1, 0x9fc, 0x7fffffff, 0x2, 0x8, 0x4, 0x10000, 0x200, 0xe, 0x1, 0x0, 0x40, 0x7, 0xa5d8, 0x4, 0x6, 0x7000000, 0x3, 0x9, 0x4, 0x9, 0x0, 0x6, 0x9, 0x4, 0x80, 0x8, 0x10001, 0x6, 0x8, 0x200, 0x0, 0x7, 0x9, 0xffffffff, 0x100, 0x5, 0xff6, 0x35, 0x53, 0x7fffffff, 0x80000000, 0x200, 0x480000, 0x4, 0xfff, 0x6fd, 0x4, 0x3d4a3d97, 0xd4, 0x56, 0x7, 0x392a, 0x2, 0x2, 0x7, 0xe6, 0x7, 0x6, 0x8, 0xffff1362, 0x7, 0xe47a, 0x6, 0x6, 0x5, 0x9000000, 0x3, 0xc7, 0x708, 0x3, 0x0, 0x10, 0x9, 0x2, 0xd0, 0x1000, 0xf4, 0x432, 0x1ff, 0x401, 0x5, 0x97b2, 0x0, 0x1, 0x7, 0x6fa0, 0x1, 0xdc, 0x10001, 0x9, 0x6, 0x1cd7, 0x6, 0xfffffffd, 0x1, 0x1, 0x9, 0xc, 0x1, 0x10, 0x747, 0x2, 0xffffff25, 0x7, 0x2, 0x97, 0x3, 0x7de8, 0x2, 0x6, 0x5, 0x3, 0x10000, 0x0, 0xf, 0x101, 0x2, 0x200, 0x4, 0x1, 0x3, 0x4, 0x4, 0x1c000000, 0x9, 0x200, 0x3, 0xc, 0xb, 0x9, 0x8000, 0x101, 0x8, 0x0, 0x2, 0x7, 0x6ac, 0x5, 0x1, 0x8, 0x101, 0x1, 0x65, 0xfffffff6, 0x0, 0x9, 0x401, 0x0, 0x3, 0x3744, 0x28, 0x2, 0x7, 0xfff, 0x0, 0x563d, 0x7, 0x8, 0x6, 0xb6, 0x8, 0x6, 0x4d, 0x7fff, 0xff, 0x2, 0x4, 0x3, 0x7, 0x3, 0x8, 0x2, 0xff, 0x0, 0x1, 0x2, 0x3, 0x4, 0x5, 0x4, 0x0, 0x8, 0xd, 0xe, 0x2, 0x4, 0x6, 0x4, 0x1, 0x401, 0x2, 0x5, 0xfff, 0x96b4, 0x2, 0x92ed36b9, 0x8000, 0x40, 0x4, 0x9, 0x9, 0x0, 0x0, 0xf4, 0x5, 0x0, 0x7, 0x7, 0x2, 0x9f14, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 1.115264432s ago: executing program 7 (id=2766): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaadabbbbbbbbbb86dd6a00e80000181100fe8000000000000000000000000000aa000000000000000000000000000000004e1d4e20"], 0x0) 960.238864ms ago: executing program 7 (id=2768): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r4, {0x1}, {0xffff, 0xffff}, {0xfff1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 903.79942ms ago: executing program 5 (id=2770): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @local, 0x2}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000580)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "10103a", 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0xc2, 0x0, 0x0, 0x8, {[@md5sig={0x13, 0x12, "345f8cf949a01b515682f44cecac91ba"}]}}}}}}}}, 0x0) 843.582264ms ago: executing program 6 (id=2771): unshare(0x22020600) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xb) 728.231567ms ago: executing program 5 (id=2772): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x4, 0x4) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x45833af92e4b399e, 0x0) 727.640354ms ago: executing program 1 (id=2773): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd2c, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0xccc01}, 0x0) 722.22277ms ago: executing program 6 (id=2774): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 637.581806ms ago: executing program 5 (id=2775): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f0000001fc0)=""/192, 0xc0}], 0x1}, 0x2}], 0x2, 0x100, 0x0) 612.702552ms ago: executing program 6 (id=2776): unshare(0x4040600) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x4, 0x4) 564.291787ms ago: executing program 1 (id=2777): socket(0x200000000000011, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0xb, 0x100, @void}}}}}}}, 0x0) 529.084233ms ago: executing program 6 (id=2778): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0xe403, r4, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xfffffffc}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 501.761003ms ago: executing program 7 (id=2779): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ad", 0x1) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000005300)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r2, 0xc}, &(0x7f0000000100)=0x8) 447.189171ms ago: executing program 1 (id=2780): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0xb, 0x0, 0x0, {{0xffffffffffffff95}, {0x4, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x0, 0x2, {{0x4, 0x0, 0xffffffffffffffff, 0x9, 0x67b}, 0x3}}, @TCA_VLAN_PARMS={0x0, 0x2, {{0x0, 0xf9, 0x3, 0xfffffff4, 0x4}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x0, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x0, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x0, 0x2, {{0x5, 0x5, 0x5, 0x2, 0xd}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x0, 0x3, 0x5d3}, @TCA_VLAN_PUSH_VLAN_ID={0x0, 0x3, 0xe31}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x0, 0x6, 0x5}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 446.891582ms ago: executing program 5 (id=2781): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 339.49934ms ago: executing program 6 (id=2782): sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x8000000, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)="aff7", 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0x7, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x3d) 315.203026ms ago: executing program 7 (id=2783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000009000000000200000700000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x8, r0}, 0x38) 296.835488ms ago: executing program 5 (id=2784): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200db120001060008001900"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) 228.325113ms ago: executing program 6 (id=2785): unshare(0x64000600) r0 = socket$inet6(0xa, 0x3, 0x5) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x1f9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8000006}, 0x1c) 162.985041ms ago: executing program 7 (id=2786): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0xc655, 0x0, 0x8, 0x8001, r2}, &(0x7f00000004c0)=0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000500)={r3}, &(0x7f0000000440)=0x8) 122.40787ms ago: executing program 1 (id=2787): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 273.772µs ago: executing program 5 (id=2788): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xf, 0xa}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x6}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0x2}}]}}]}, 0x44}}, 0x24040084) 0s ago: executing program 7 (id=2789): recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)={0x2c}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) kernel console output (not intermixed with test programs): ay have been left with an inconsistent configuration, please check. [ 134.708936][ T8412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.175697][ T8437] netlink: 16 bytes leftover after parsing attributes in process `syz.7.597'. [ 135.216095][ T8437] netlink: 16 bytes leftover after parsing attributes in process `syz.7.597'. [ 135.310136][ T8445] GUP no longer grows the stack in syz.6.600 (8445): 200000003000-20000000a000 (200000001000) [ 135.326986][ T8445] CPU: 0 UID: 0 PID: 8445 Comm: syz.6.600 Not tainted syzkaller #0 PREEMPT(full) [ 135.327013][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 135.327024][ T8445] Call Trace: [ 135.327031][ T8445] [ 135.327040][ T8445] dump_stack_lvl+0x189/0x250 [ 135.327079][ T8445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.327100][ T8445] ? __pfx__printk+0x10/0x10 [ 135.327117][ T8445] ? find_vma+0xe7/0x160 [ 135.327154][ T8445] __get_user_pages+0x2470/0x2a00 [ 135.327185][ T8445] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 135.327235][ T8445] ? rcu_is_watching+0x15/0xb0 [ 135.327264][ T8445] __gup_longterm_locked+0xde4/0x1660 [ 135.327295][ T8445] ? try_grab_folio_fast+0x1bf/0x6a0 [ 135.327332][ T8445] ? gup_fast_fallback+0x1b86/0x22d0 [ 135.327358][ T8445] gup_fast_fallback+0x1d65/0x22d0 [ 135.327428][ T8445] ? __pfx_gup_fast_fallback+0x10/0x10 [ 135.327451][ T8445] ? __mutex_lock+0x335/0x1350 [ 135.327486][ T8445] ? is_valid_gup_args+0x11f/0x200 [ 135.327513][ T8445] ? get_user_pages_fast+0x4d/0xb0 [ 135.327539][ T8445] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 135.327579][ T8445] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 135.327597][ T8445] ? wait_for_space+0x248/0x2d0 [ 135.327629][ T8445] iov_iter_get_pages2+0x5e/0xa0 [ 135.327664][ T8445] __se_sys_vmsplice+0x548/0x10d0 [ 135.327705][ T8445] ? futex_private_hash_put+0x4b/0x280 [ 135.327738][ T8445] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 135.327772][ T8445] ? __pfx_futex_wake+0x10/0x10 [ 135.327793][ T8445] ? restore_signal_shadow_stack+0x3b7/0x480 [ 135.327824][ T8445] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 135.327905][ T8445] ? do_syscall_64+0xbe/0xfa0 [ 135.327931][ T8445] do_syscall_64+0xfa/0xfa0 [ 135.327951][ T8445] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.327973][ T8445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.327992][ T8445] ? clear_bhb_loop+0x60/0xb0 [ 135.328016][ T8445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.328035][ T8445] RIP: 0033:0x7f25f698eec9 [ 135.328062][ T8445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.328078][ T8445] RSP: 002b:00007f25f7835038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 135.328105][ T8445] RAX: ffffffffffffffda RBX: 00007f25f6be5fa0 RCX: 00007f25f698eec9 [ 135.328118][ T8445] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 135.328130][ T8445] RBP: 00007f25f6a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 135.328140][ T8445] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 135.328151][ T8445] R13: 00007f25f6be6038 R14: 00007f25f6be5fa0 R15: 00007ffd8b2870c8 [ 135.328182][ T8445] [ 135.728841][ T8460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.736126][ T8460] IPv6: NLM_F_CREATE should be set when creating new route [ 136.403851][ T8505] netlink: 'syz.5.618': attribute type 15 has an invalid length. [ 136.632635][ T8518] __nla_validate_parse: 7 callbacks suppressed [ 136.632654][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'. [ 136.925938][ T8531] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 136.944533][ T8531] bond6 (unregistering): Released all slaves [ 137.069722][ T8540] netlink: 'syz.1.631': attribute type 6 has an invalid length. [ 137.164712][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 137.178973][ T8544] netlink: 'syz.4.634': attribute type 5 has an invalid length. [ 137.187156][ T8544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.634'. [ 137.225138][ T8544] geneve2: entered promiscuous mode [ 137.235184][ T8544] geneve2: entered allmulticast mode [ 137.248329][ T50] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 137.284606][ T50] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 137.299564][ T50] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 137.318473][ T50] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 137.341059][ T8551] sctp: [Deprecated]: syz.7.636 (pid 8551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.341059][ T8551] Use struct sctp_sack_info instead [ 137.376577][ T8551] netlink: 20 bytes leftover after parsing attributes in process `syz.7.636'. [ 137.412371][ T8551] sctp: [Deprecated]: syz.7.636 (pid 8551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.412371][ T8551] Use struct sctp_sack_info instead [ 137.750272][ T8579] pim6reg: entered allmulticast mode [ 137.781719][ T8579] pim6reg: left allmulticast mode [ 138.031763][ T8598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.653'. [ 138.075461][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.7.652'. [ 138.198032][ T8607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.256284][ T8607] bond0: (slave rose0): Enslaving as an active interface with an up link [ 138.280389][ T8615] sctp: [Deprecated]: syz.1.656 (pid 8615) Use of int in max_burst socket option. [ 138.280389][ T8615] Use struct sctp_assoc_value instead [ 138.395235][ T8618] netlink: 28 bytes leftover after parsing attributes in process `syz.5.659'. [ 138.467563][ T8626] netlink: del zone limit has 4 unknown bytes [ 138.984774][ T8661] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.667'. [ 139.009394][ T8661] openvswitch: netlink: Message has 8 unknown bytes. [ 139.235130][ T8677] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20000 [ 139.275398][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'. [ 140.145569][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'. [ 140.758868][ T8759] netlink: 'syz.6.698': attribute type 9 has an invalid length. [ 141.551506][ T8820] netlink: 'syz.1.715': attribute type 10 has an invalid length. [ 141.578426][ T8817] netlink: 'syz.7.713': attribute type 10 has an invalid length. [ 141.623423][ T8817] dummy0: entered promiscuous mode [ 141.650789][ T8819] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 141.664426][ T8817] bridge0: port 3(dummy0) entered blocking state [ 141.680294][ T8817] bridge0: port 3(dummy0) entered disabled state [ 141.705072][ T8817] dummy0: entered allmulticast mode [ 141.736465][ T8832] __nla_validate_parse: 2 callbacks suppressed [ 141.736482][ T8832] netlink: 40 bytes leftover after parsing attributes in process `syz.4.719'. [ 141.737966][ T8817] bridge0: port 3(dummy0) entered blocking state [ 141.758053][ T8817] bridge0: port 3(dummy0) entered forwarding state [ 141.997180][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.7.725'. [ 142.036555][ T8854] dummy0: left allmulticast mode [ 142.045723][ T8854] bridge0: port 3(dummy0) entered disabled state [ 142.086251][ T8868] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 142.100758][ T8854] bridge_slave_1: left allmulticast mode [ 142.126181][ T8854] bridge_slave_1: left promiscuous mode [ 142.156121][ T8854] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.182488][ T8854] : left allmulticast mode [ 142.187193][ T8854] : left promiscuous mode [ 142.196086][ T8854] bridge0: port 1() entered disabled state [ 142.247891][ T8878] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 142.298412][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 142.441779][ T8886] netlink: 16 bytes leftover after parsing attributes in process `syz.6.731'. [ 142.721067][ T8909] netlink: 12 bytes leftover after parsing attributes in process `syz.6.738'. [ 143.210526][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.7.746'. [ 143.225766][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.7.746'. [ 143.550083][ T8953] netlink: 'syz.1.751': attribute type 3 has an invalid length. [ 143.938786][ T8972] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.051880][ T8973] delete_channel: no stack [ 144.282978][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'. [ 144.316436][ T8988] netlink: 72 bytes leftover after parsing attributes in process `syz.4.762'. [ 144.327480][ T8994] netlink: 'syz.5.764': attribute type 33 has an invalid length. [ 144.336515][ T8988] netlink: 72 bytes leftover after parsing attributes in process `syz.4.762'. [ 144.600125][ T9012] netlink: 'syz.1.770': attribute type 25 has an invalid length. [ 144.682262][ T9018] netlink: 'syz.4.773': attribute type 11 has an invalid length. [ 144.756257][ T9022] wg1 speed is unknown, defaulting to 1000 [ 144.777598][ T9022] wg1 speed is unknown, defaulting to 1000 [ 144.788709][ T9022] wg1 speed is unknown, defaulting to 1000 [ 144.835209][ T9021] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 144.847772][ T9022] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.904731][ T9022] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 144.992248][ T9022] wg1 speed is unknown, defaulting to 1000 [ 145.000685][ T9022] wg1 speed is unknown, defaulting to 1000 [ 145.048662][ T9022] wg1 speed is unknown, defaulting to 1000 [ 145.056608][ T9022] wg1 speed is unknown, defaulting to 1000 [ 145.066101][ T9022] wg1 speed is unknown, defaulting to 1000 [ 145.251147][ T9055] tipc: Enabled bearer , priority 0 [ 145.258800][ T9055] syzkaller0: entered promiscuous mode [ 145.279710][ T9055] syzkaller0: entered allmulticast mode [ 145.296810][ T9055] tipc: Resetting bearer [ 145.330551][ T9053] tipc: Resetting bearer [ 145.395926][ T9053] tipc: Disabling bearer [ 145.428576][ T9066] netlink: 'syz.7.789': attribute type 1 has an invalid length. [ 145.485411][ T9066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.535661][ T9066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.542983][ T9066] IPv6: NLM_F_CREATE should be set when creating new route [ 145.543274][ T9073] bond2: (slave geneve2): making interface the new active one [ 145.570524][ T9073] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 145.579944][ T9080] syzkaller0: entered promiscuous mode [ 145.585558][ T9080] syzkaller0: entered allmulticast mode [ 145.603138][ T9069] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 145.615103][ T9074] tipc: Started in network mode [ 145.623742][ T9074] tipc: Node identity aa872c7d2a21, cluster identity 4711 [ 145.632879][ T9074] tipc: Enabled bearer , priority 0 [ 145.689716][ T9082] netlink: 'syz.1.791': attribute type 10 has an invalid length. [ 145.714838][ T9070] tipc: Resetting bearer [ 145.751361][ T9070] netlink: 'syz.5.790': attribute type 11 has an invalid length. [ 145.915283][ T9087] bond0 (unregistering): Released all slaves [ 145.934943][ T9089] netlink: 'syz.1.795': attribute type 15 has an invalid length. [ 145.989290][ T9089] netlink: 'syz.1.795': attribute type 15 has an invalid length. [ 145.998522][ T60] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 146.020917][ T9068] tipc: Resetting bearer [ 146.042416][ T9068] tipc: Disabling bearer [ 146.065236][ T60] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 146.095412][ T60] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 146.131437][ T60] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 146.797479][ T9158] __nla_validate_parse: 12 callbacks suppressed [ 146.797496][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 146.838117][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 146.856498][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 146.874656][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 146.885534][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 146.895159][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 146.904784][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 146.917501][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 146.932550][ T9169] IPVS: length: 99 != 8 [ 146.946487][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 146.956714][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 147.132843][ T9180] x_tables: duplicate underflow at hook 2 [ 147.444482][ T9200] netlink: 'syz.5.832': attribute type 21 has an invalid length. [ 147.454792][ T9200] netlink: 'syz.5.832': attribute type 4 has an invalid length. [ 147.464821][ T9200] netlink: 'syz.5.832': attribute type 5 has an invalid length. [ 147.554481][ T5937] IPVS: starting estimator thread 0... [ 147.650020][ T9207] IPVS: using max 24 ests per chain, 57600 per kthread [ 148.064193][ T9231] veth0: entered promiscuous mode [ 148.163111][ T9230] veth0: left promiscuous mode [ 148.307563][ T9246] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 148.331335][ T9246] bond4 (unregistering): Released all slaves [ 148.568276][ T43] IPVS: starting estimator thread 0... [ 148.584834][ T9261] syzkaller1: entered allmulticast mode [ 148.603343][ T9267] ip6gre0: Master is either lo or non-ether device [ 148.662506][ T9264] IPVS: using max 32 ests per chain, 76800 per kthread [ 148.697791][ T9275] tipc: Enabled bearer , priority 0 [ 148.751375][ T9270] validate_nla: 3 callbacks suppressed [ 148.751392][ T9270] netlink: 'syz.5.856': attribute type 1 has an invalid length. [ 148.820449][ T9280] Set syz1 is full, maxelem 65536 reached [ 148.924661][ T9275] tipc: Disabling bearer [ 149.854351][ T9316] team0: Device gtp0 is up. Set it down before adding it as a team port [ 150.034100][ T9329] sctp: [Deprecated]: syz.5.874 (pid 9329) Use of int in max_burst socket option. [ 150.034100][ T9329] Use struct sctp_assoc_value instead [ 150.074290][ T9331] netlink: 'syz.4.875': attribute type 11 has an invalid length. [ 150.087845][ T9336] sctp: [Deprecated]: syz.5.874 (pid 9336) Use of int in max_burst socket option. [ 150.087845][ T9336] Use struct sctp_assoc_value instead [ 150.493655][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.508605][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.520992][ T9363] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 150.554756][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.601551][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.793892][ T9382] netlink: 'syz.4.888': attribute type 11 has an invalid length. [ 151.109330][ T43] IPVS: starting estimator thread 0... [ 151.127056][ T9398] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 151.211662][ T9399] IPVS: using max 30 ests per chain, 72000 per kthread [ 151.516136][ T9414] dvmrp0: entered allmulticast mode [ 151.536568][ T9414] dvmrp0: left allmulticast mode [ 151.542176][ T9414] pimreg: left allmulticast mode [ 151.686003][ T9378] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 151.695480][ T9378] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 151.734299][ T9378] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 151.758979][ T9378] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 151.786586][ T9417] hsr_slave_1 (unregistering): left promiscuous mode [ 151.888882][ T9378] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 151.908350][ T9378] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 151.932119][ T9378] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 151.938053][ T9378] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 151.978254][ T9428] netlink: 'syz.5.903': attribute type 16 has an invalid length. [ 151.987166][ T9428] netlink: 'syz.5.903': attribute type 17 has an invalid length. [ 152.054583][ T9428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.136863][ T9406] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 152.441742][ T9453] __nla_validate_parse: 84 callbacks suppressed [ 152.441760][ T9453] netlink: 68 bytes leftover after parsing attributes in process `syz.4.911'. [ 152.502405][ T9453] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.684912][ T9464] veth1_macvtap: left promiscuous mode [ 152.929784][ T9482] netlink: 60 bytes leftover after parsing attributes in process `syz.7.920'. [ 152.983729][ T9489] netlink: 'syz.7.920': attribute type 8 has an invalid length. [ 153.588328][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.935'. [ 153.684284][ T9529] netlink: 9896 bytes leftover after parsing attributes in process `syz.6.938'. [ 153.712884][ T9533] netlink: 12 bytes leftover after parsing attributes in process `syz.5.939'. [ 153.944532][ T9546] netlink: 'syz.4.945': attribute type 1 has an invalid length. [ 153.962985][ T9546] netlink: 'syz.4.945': attribute type 4 has an invalid length. [ 153.979578][ T9546] netlink: 9422 bytes leftover after parsing attributes in process `syz.4.945'. [ 154.142342][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 154.163972][ T9554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.457713][ T9579] xt_bpf: check failed: parse error [ 154.813979][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.965'. [ 154.884529][ T9616] netlink: 'syz.5.967': attribute type 1 has an invalid length. [ 154.895372][ T9621] netlink: 28 bytes leftover after parsing attributes in process `syz.6.965'. [ 154.945344][ T9621] netlink: 28 bytes leftover after parsing attributes in process `syz.6.965'. [ 154.967579][ T9621] bridge0: entered promiscuous mode [ 154.975201][ T9621] bridge0: left promiscuous mode [ 155.245728][ T9642] netem: incorrect ge model size [ 155.258677][ T9642] netem: change failed [ 155.359769][ T9653] netlink: 'syz.5.979': attribute type 8 has an invalid length. [ 155.402424][ T9656] gre0: entered promiscuous mode [ 155.766495][ T5891] IPVS: starting estimator thread 0... [ 155.772653][ T9685] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 155.869168][ T9686] IPVS: using max 29 ests per chain, 69600 per kthread [ 156.007564][ T9707] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 156.137289][ T9716] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 156.157582][ T9716] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 156.166808][ T9716] gretap1: entered promiscuous mode [ 156.172612][ T9716] gretap1: entered allmulticast mode [ 156.209600][ T9721] netlink: 'syz.5.999': attribute type 20 has an invalid length. [ 156.245918][ T9721] netlink: 'syz.5.999': attribute type 20 has an invalid length. [ 156.254261][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.278971][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.326358][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.373244][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.538364][ T9725] syzkaller0: entered promiscuous mode [ 156.592948][ T9725] syzkaller0: entered allmulticast mode [ 156.767660][ T9748] tipc: New replicast peer: 255.255.255.255 [ 156.784308][ T9748] tipc: Enabled bearer , priority 10 [ 156.800598][ T9748] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 156.807068][ T9748] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 157.704780][ T9773] __nla_validate_parse: 11 callbacks suppressed [ 157.704800][ T9773] netlink: 144 bytes leftover after parsing attributes in process `syz.7.1014'. [ 158.362832][ T9782] netlink: 'syz.1.1016': attribute type 1 has an invalid length. [ 158.414928][ T9782] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1016'. [ 158.548408][ T9795] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1020'. [ 158.570618][ T9794] netlink: 'syz.6.1017': attribute type 29 has an invalid length. [ 158.601212][ T9794] netlink: 'syz.6.1017': attribute type 29 has an invalid length. [ 158.622865][ T9794] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1017'. [ 158.635114][ T9797] netlink: 'syz.5.1022': attribute type 1 has an invalid length. [ 158.651315][ T9797] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1022'. [ 158.825038][ T9816] ªªªªªªç†áíÞ‚Ï: renamed from lo (while UP) [ 158.888284][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1030'. [ 158.932939][ T9818] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1030'. [ 159.074769][ T9829] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1034'. [ 159.084709][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1034'. [ 159.150128][ T9836] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 159.160162][ T9836] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1037'. [ 159.331360][ T9851] validate_nla: 1 callbacks suppressed [ 159.331380][ T9851] netlink: 'syz.4.1041': attribute type 8 has an invalid length. [ 159.548181][ T9870] netlink: 'syz.1.1044': attribute type 10 has an invalid length. [ 159.565688][ T9870] batadv0: entered promiscuous mode [ 159.573898][ T9870] batadv0: entered allmulticast mode [ 159.581358][ T9870] bridge0: port 2(batadv0) entered blocking state [ 159.588236][ T9870] bridge0: port 2(batadv0) entered disabled state [ 159.598858][ T9870] bridge0: port 2(batadv0) entered blocking state [ 159.605445][ T9870] bridge0: port 2(batadv0) entered forwarding state [ 159.660128][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 159.669986][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 159.831864][ T9888] x_tables: duplicate underflow at hook 2 [ 159.994843][ T9899] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 160.157241][ T9910] pim6reg: entered allmulticast mode [ 160.172821][ T9913] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 160.504581][ T9936] veth1_to_bond: entered allmulticast mode [ 160.583276][ T9926] veth1_to_bond: left allmulticast mode [ 160.863346][ T9945] dvmrp1: entered allmulticast mode [ 160.907647][ T9943] netlink: 'syz.6.1066': attribute type 3 has an invalid length. [ 161.151039][ T9975] netlink: 'syz.5.1075': attribute type 10 has an invalid length. [ 161.188010][ T9981] netlink: 'syz.5.1075': attribute type 10 has an invalid length. [ 161.198276][ T9975] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.236059][ T9975] bridge_slave_1: left allmulticast mode [ 161.258991][ T9975] bridge_slave_1: left promiscuous mode [ 161.277763][ T9975] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.313875][ T50] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 161.314301][ T9975] bridge_slave_1: entered promiscuous mode [ 161.340488][ T9975] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 161.727491][T10019] syzkaller0: entered promiscuous mode [ 161.743477][T10019] syzkaller0: entered allmulticast mode [ 162.558751][T10050] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20000 [ 162.664409][T10058] netlink: 'syz.6.1097': attribute type 2 has an invalid length. [ 162.686496][T10056] raw_sendmsg: syz.4.1095 forgot to set AF_INET. Fix it! [ 162.725077][T10065] __nla_validate_parse: 81 callbacks suppressed [ 162.725094][T10065] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1099'. [ 162.780627][T10065] tls_set_device_offload_rx: netdev not found [ 163.055234][T10091] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1109'. [ 163.065089][T10091] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1109'. [ 163.074607][T10091] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1109'. [ 163.094318][T10091] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1109'. [ 163.164002][T10100] netem: change failed [ 163.393779][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1116'. [ 163.408676][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1118'. [ 163.564532][T10124] gre2: entered promiscuous mode [ 163.579712][T10124] gre2: entered allmulticast mode [ 163.591399][T10130] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1122'. [ 163.615731][T10130] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1122'. [ 163.772611][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'. [ 164.033700][T10151] macvtap1: entered allmulticast mode [ 164.039277][T10151] veth0_macvtap: entered allmulticast mode [ 164.292237][T10160] netlink: 'syz.5.1132': attribute type 3 has an invalid length. [ 164.305244][T10160] xt_l2tp: invalid flags combination: 8 [ 164.450893][T10174] netlink: 'syz.6.1136': attribute type 1 has an invalid length. [ 164.490949][T10174] bond3: entered promiscuous mode [ 164.496406][T10174] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.504178][T10178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.512612][T10178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.528549][T10178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.539502][T10178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.564161][T10178] bridge0: port 2(batadv0) entered disabled state [ 164.608300][T10178] bridge0: port 2(batadv0) entered disabled state [ 165.065277][T10212] netlink: 'syz.7.1148': attribute type 10 has an invalid length. [ 165.075707][T10212] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 165.356681][T10231] netlink: 'syz.5.1156': attribute type 1 has an invalid length. [ 165.895260][T10266] Cannot find del_set index 4 as target [ 166.034401][T10270] tipc: Enabled bearer , priority 0 [ 166.047759][T10270] syzkaller0: entered promiscuous mode [ 166.056043][T10270] syzkaller0: entered allmulticast mode [ 166.088701][T10270] tipc: Resetting bearer [ 166.120602][T10269] tipc: Resetting bearer [ 166.172510][T10269] tipc: Disabling bearer [ 166.200231][T10278] netlink: 'syz.4.1172': attribute type 1 has an invalid length. [ 166.244308][T10278] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 166.275190][T10278] bond7: option packets_per_slave: allowed values 0 - 65535 [ 166.303105][T10278] bond7 (unregistering): Released all slaves [ 166.533723][T10312] netlink: 'syz.7.1180': attribute type 5 has an invalid length. [ 166.591717][T10317] netlink: 'syz.7.1180': attribute type 5 has an invalid length. [ 166.992420][T10344] IPVS: ip_vs_add_dest(): server weight less than zero [ 167.015646][T10344] netlink: 'syz.5.1192': attribute type 10 has an invalid length. [ 167.131761][T10351] pimreg: entered allmulticast mode [ 167.330532][T10364] can: request_module (can-proto-5) failed. [ 167.331324][T10367] veth0: entered promiscuous mode [ 167.394935][T10366] veth0: left promiscuous mode [ 167.743085][T10399] __nla_validate_parse: 19 callbacks suppressed [ 167.743102][T10399] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1204'. [ 167.766225][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1205'. [ 167.778574][T10402] tipc: Enabling of bearer rejected, failed to enable media [ 167.821752][T10400] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1204'. [ 168.007504][T10415] xt_TCPMSS: Only works on TCP SYN packets [ 168.027788][T10415] xt_TCPMSS: Only works on TCP SYN packets [ 168.039645][T10415] xt_TCPMSS: Only works on TCP SYN packets [ 168.049546][T10415] xt_TCPMSS: Only works on TCP SYN packets [ 168.061364][T10421] netlink: 'syz.1.1212': attribute type 1 has an invalid length. [ 168.069930][T10415] xt_TCPMSS: Only works on TCP SYN packets [ 168.078553][T10421] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1212'. [ 168.086588][T10415] xt_TCPMSS: Only works on TCP SYN packets [ 168.088003][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'. [ 168.104072][T10415] xt_TCPMSS: Only works on TCP SYN packets [ 168.104192][T10422] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1211'. [ 168.110274][T10415] xt_TCPMSS: Only works on TCP SYN packets [ 168.125458][T10415] xt_TCPMSS: Only works on TCP SYN packets [ 168.132085][T10422] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1211'. [ 168.144827][T10415] xt_TCPMSS: Only works on TCP SYN packets [ 168.302762][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1216'. [ 168.345666][T10431] ip6t_srh: unknown srh invflags 4000 [ 168.358342][T10429] netlink: 'syz.1.1216': attribute type 1 has an invalid length. [ 168.372755][T10431] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1214'. [ 168.479784][T10436] `: (slave bond_slave_0): Releasing backup interface [ 168.507497][T10436] `: (slave bond_slave_1): Releasing backup interface [ 168.544393][T10436] team0: Port device team_slave_0 removed [ 168.568568][T10436] team0: Port device team_slave_1 removed [ 168.584740][T10436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.596649][T10436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.623158][T10436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.631059][T10436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.643352][T10436] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 169.113399][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1229'. [ 169.341891][T10501] IPv6: sit1: Disabled Multicast RS [ 169.347865][T10501] sit1: entered allmulticast mode [ 169.549899][T10511] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 169.836307][T10525] xt_CONNSECMARK: invalid mode: 0 [ 170.142208][T10533] Unsupported xt match [ 170.142227][T10533] unable to load match [ 170.202142][T10539] nbd: socks must be embedded in a SOCK_ITEM attr [ 170.252801][T10542] netlink: 'syz.1.1247': attribute type 2 has an invalid length. [ 170.293046][T10545] netlink: 'syz.4.1249': attribute type 7 has an invalid length. [ 170.651422][T10576] netlink: 'syz.4.1260': attribute type 1 has an invalid length. [ 170.688682][T10575] netlink: 'syz.6.1259': attribute type 16 has an invalid length. [ 170.696792][T10575] netlink: 'syz.6.1259': attribute type 3 has an invalid length. [ 170.732019][T10579] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 171.154988][T10608] IPVS: Scheduler module ip_vs_sip not found [ 171.320408][T10627] netlink: 'syz.7.1274': attribute type 3 has an invalid length. [ 171.382197][T10632] xt_SECMARK: invalid mode: 9 [ 171.400742][T10634] netlink: 'syz.7.1276': attribute type 1 has an invalid length. [ 171.479951][T10637] netlink: 'syz.6.1277': attribute type 1 has an invalid length. [ 171.500367][T10641] atomic_op ffff88805bbaa998 conn xmit_atomic 0000000000000000 [ 171.606199][T10638] gretap1: entered promiscuous mode [ 171.624700][T10650] netlink: 'syz.1.1281': attribute type 1 has an invalid length. [ 171.624700][T10651] netlink: 'syz.1.1281': attribute type 1 has an invalid length. [ 171.658574][T10651] gre1: entered promiscuous mode [ 171.663991][T10651] gre1: entered allmulticast mode [ 171.685627][T10650] gre1: entered promiscuous mode [ 171.692850][T10650] gre1: entered allmulticast mode [ 171.997134][T10673] SET target dimension over the limit! [ 172.618033][T10713] syzkaller0: entered promiscuous mode [ 172.625832][T10713] syzkaller0: entered allmulticast mode [ 173.074533][T10734] __nla_validate_parse: 50 callbacks suppressed [ 173.074550][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1305'. [ 173.903035][T10726] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1303'. [ 174.003521][T10738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.040762][T10738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.080978][T10738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.100092][T10744] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1309'. [ 174.123204][T10738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.152408][T10738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.168253][T10748] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1310'. [ 194.213429][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.506808][T10777] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1319'. [ 243.523344][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1319'. [ 243.569903][T10777] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1319'. [ 243.664607][T10795] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 243.803497][T10777] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1319'. [ 243.830884][T10777] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1319'. [ 243.887882][T10777] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1319'. [ 243.972204][T10777] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1319'. [ 243.983793][T10777] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1319'. [ 244.002398][T10777] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1319'. [ 244.032974][T10777] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1319'. [ 244.071046][T10825] xt_policy: output policy not valid in PREROUTING and INPUT [ 244.305540][T10838] IPVS: ip_vs_edit_dest(): server weight less than zero [ 244.468120][T10843] bond2: Removing last ns target with arp_interval on [ 244.825246][T10871] bridge0: entered allmulticast mode [ 245.007137][T10886] vxcan1: tx address claim with dlc 0 [ 245.328927][T10906] validate_nla: 1 callbacks suppressed [ 245.328944][T10906] netlink: 'syz.7.1353': attribute type 4 has an invalid length. [ 245.344959][T10904] netlink: 'syz.6.1352': attribute type 11 has an invalid length. [ 245.605962][T10924] netlink: 'syz.4.1357': attribute type 11 has an invalid length. [ 245.657975][T10927] netlink: 'syz.6.1360': attribute type 1 has an invalid length. [ 245.943972][T10945] vlan2: entered promiscuous mode [ 245.971579][T10945] `: entered promiscuous mode [ 245.986883][T10945] `: (slave vlan2): Opening slave failed [ 246.028969][T10947] vlan2: entered promiscuous mode [ 246.040655][T10947] `: (slave vlan2): Opening slave failed [ 246.064412][T10953] tipc: Invalid UDP bearer configuration [ 246.064467][T10953] tipc: Enabling of bearer rejected, failed to enable media [ 246.145405][T10958] bridge0 (unregistering): left allmulticast mode [ 246.228043][T10962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.239447][T10966] netlink: 'syz.1.1370': attribute type 10 has an invalid length. [ 246.330232][T10968] netlink: 'syz.7.1371': attribute type 1 has an invalid length. [ 246.338293][T10968] netlink: 'syz.7.1371': attribute type 1 has an invalid length. [ 246.381049][T10974] netlink: 'syz.7.1371': attribute type 1 has an invalid length. [ 246.384560][T10972] tipc: Enabled bearer , priority 0 [ 246.391528][T10974] netlink: 'syz.7.1371': attribute type 1 has an invalid length. [ 246.416525][T10972] syzkaller0: entered promiscuous mode [ 246.423206][T10972] syzkaller0: entered allmulticast mode [ 246.443782][T10972] tipc: Resetting bearer [ 246.455235][T10969] tipc: Resetting bearer [ 246.473965][T10969] tipc: Disabling bearer [ 246.597275][T10987] lo: entered allmulticast mode [ 246.604931][T10987] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 247.037068][T11017] tipc: Enabled bearer , priority 0 [ 247.048819][T11018] syzkaller0: entered promiscuous mode [ 247.055854][T11018] syzkaller0: entered allmulticast mode [ 247.068992][T11016] tipc: Resetting bearer [ 247.096802][T11016] tipc: Disabling bearer [ 247.566040][T11042] vlan3: entered allmulticast mode [ 247.577462][T11042] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 248.923620][T11125] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 248.938327][T11125] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.082091][T11132] __nla_validate_parse: 56 callbacks suppressed [ 249.082107][T11132] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1410'. [ 249.239800][T11141] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1414'. [ 249.456634][T11157] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1417'. [ 249.482667][T11158] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1419'. [ 249.637296][T11176] SET target dimension over the limit! [ 249.794937][T11183] netlink: 'syz.7.1426': attribute type 1 has an invalid length. [ 249.822343][T11183] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1426'. [ 249.849296][T11183] netlink: 'syz.7.1426': attribute type 1 has an invalid length. [ 250.090526][T11206] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 250.118487][T11210] netlink: 'syz.6.1432': attribute type 24 has an invalid length. [ 250.240307][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1434'. [ 250.460856][T11230] netlink: 'syz.1.1439': attribute type 62 has an invalid length. [ 250.490516][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1439'. [ 250.550371][T11237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1438'. [ 250.561525][T11238] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 250.719233][T11247] netlink: 'syz.7.1444': attribute type 1 has an invalid length. [ 250.727192][T11247] netlink: 172 bytes leftover after parsing attributes in process `syz.7.1444'. [ 250.819717][T11250] SET target dimension over the limit! [ 251.081243][T11277] tipc: Started in network mode [ 251.089875][T11277] tipc: Node identity ae984c67e2a5, cluster identity 4711 [ 251.097796][T11277] tipc: Enabled bearer , priority 0 [ 251.118604][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1454'. [ 251.238200][T11272] tipc: Disabling bearer [ 251.291495][T11295] netlink: 'syz.4.1454': attribute type 1 has an invalid length. [ 251.362247][T11282] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 251.377287][T11282] bond7 (unregistering): Released all slaves [ 251.595613][T11309] lo: entered allmulticast mode [ 251.601679][T11309] tunl0: entered allmulticast mode [ 251.622338][T11309] gre0: entered allmulticast mode [ 251.654289][T11309] gretap0: entered allmulticast mode [ 251.695926][T11309] erspan0: entered allmulticast mode [ 251.714042][T11309] ip_vti0: entered allmulticast mode [ 251.748255][T11309] ip6_vti0: entered allmulticast mode [ 251.770738][T11309] sit0: entered allmulticast mode [ 251.796218][T11309] ip6tnl0: entered allmulticast mode [ 251.818347][T11309] ip6gre0: entered allmulticast mode [ 251.867537][T11309] bridge0: port 3(syz_tun) entered disabled state [ 251.900059][T11309] ip6gretap0: entered allmulticast mode [ 251.918936][T11309] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.937870][T11309] bridge0: entered allmulticast mode [ 251.963144][T11309] bond0: entered allmulticast mode [ 251.973792][T11309] bond_slave_0: entered allmulticast mode [ 251.980158][T11309] bond_slave_1: entered allmulticast mode [ 251.986174][T11309] bridge_slave_1: entered allmulticast mode [ 252.000628][T11309] team0: entered allmulticast mode [ 252.005904][T11309] team_slave_0: entered allmulticast mode [ 252.012092][T11309] team_slave_1: entered allmulticast mode [ 252.033686][T11309] dummy0: entered allmulticast mode [ 252.070107][T11309] nlmon0: entered allmulticast mode [ 252.087368][T11309] caif0: entered allmulticast mode [ 252.101299][T11309] batadv0: entered allmulticast mode [ 252.121683][T11309] vxcan0: entered allmulticast mode [ 252.130627][T11309] vxcan1: entered allmulticast mode [ 252.138040][T11309] veth0: entered allmulticast mode [ 252.148215][T11309] veth1: entered allmulticast mode [ 252.163630][T11309] wg0: entered allmulticast mode [ 252.172800][T11309] wg1: entered allmulticast mode [ 252.183042][T11309] wg2: entered allmulticast mode [ 252.191477][T11309] veth0_to_bridge: entered allmulticast mode [ 252.204453][T11309] veth1_to_bridge: entered allmulticast mode [ 252.214904][T11309] veth0_to_bond: entered allmulticast mode [ 252.224469][T11309] veth1_to_bond: entered allmulticast mode [ 252.233855][T11309] veth0_to_team: entered allmulticast mode [ 252.245117][T11309] veth1_to_team: entered allmulticast mode [ 252.250286][T11328] netlink: 'syz.1.1464': attribute type 1 has an invalid length. [ 252.257029][T11309] veth0_to_batadv: entered allmulticast mode [ 252.262850][T11328] nbd: error processing sock list [ 252.267885][T11309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.278994][T11328] block nbd0: shutting down sockets [ 252.283967][T11331] netlink: 'syz.1.1464': attribute type 2 has an invalid length. [ 252.296938][T11331] netlink: 'syz.1.1464': attribute type 1 has an invalid length. [ 252.298180][T11309] batadv_slave_0: entered allmulticast mode [ 252.315149][T11309] veth1_to_batadv: entered allmulticast mode [ 252.324759][T11309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.333357][T11309] batadv_slave_1: entered allmulticast mode [ 252.342771][T11309] xfrm0: entered allmulticast mode [ 252.352679][T11309] veth0_to_hsr: entered allmulticast mode [ 252.361784][T11309] hsr_slave_0: entered allmulticast mode [ 252.373952][T11309] veth1_to_hsr: entered allmulticast mode [ 252.385052][T11309] hsr_slave_1: entered allmulticast mode [ 252.395180][T11309] hsr0: entered allmulticast mode [ 252.405839][T11309] veth1_virt_wifi: entered allmulticast mode [ 252.416201][T11309] veth0_virt_wifi: entered allmulticast mode [ 252.426303][T11309] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 252.434991][T11309] veth1_vlan: entered allmulticast mode [ 252.443776][T11309] veth0_vlan: entered allmulticast mode [ 252.464950][T11309] ªªªªªª: entered allmulticast mode [ 252.473939][T11309] vlan1: entered allmulticast mode [ 252.481218][T11309] macvlan0: entered allmulticast mode [ 252.492995][T11309] macvlan1: entered allmulticast mode [ 252.504590][T11309] ipvlan0: entered allmulticast mode [ 252.510387][T11309] ipvlan1: entered allmulticast mode [ 252.518848][T11309] veth1_macvtap: entered allmulticast mode [ 252.530051][T11309] veth0_macvtap: entered allmulticast mode [ 252.541425][T11309] macvtap0: entered allmulticast mode [ 252.550615][T11309] macsec0: entered allmulticast mode [ 252.556906][T11309] geneve0: entered allmulticast mode [ 252.568174][T11309] geneve1: entered allmulticast mode [ 252.579201][T11309] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 252.591661][T11309] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 252.601551][T11309] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 252.613444][T11309] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 252.622597][T11309] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 252.629906][T11309] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 252.637207][T11309] ieee802154 phy1 wpan1: entered allmulticast mode [ 252.643930][T11309] syztnl1: entered allmulticast mode [ 252.649563][T11309] bridge1: entered allmulticast mode [ 252.654924][T11309] bond1: entered allmulticast mode [ 252.660149][T11309] syztnl2: entered allmulticast mode [ 252.665501][T11309] vti60: entered allmulticast mode [ 252.670849][T11309] vlan0: left promiscuous mode [ 252.675812][T11309] vlan0: entered allmulticast mode [ 252.681645][T11309] bond3: left promiscuous mode [ 252.686406][T11309] macvlan2: left promiscuous mode [ 252.691544][T11309] bond0: left promiscuous mode [ 252.696310][T11309] bond_slave_0: left promiscuous mode [ 252.701958][T11309] bond_slave_1: left promiscuous mode [ 252.708139][T11309] bond3: entered allmulticast mode [ 252.713502][T11309] macvlan2: entered allmulticast mode [ 252.721353][T11309] sit1: entered allmulticast mode [ 252.726450][T11309] vxlan0: entered allmulticast mode [ 252.734366][T11309] vxlan1: entered allmulticast mode [ 252.742994][T11309] gre1: entered allmulticast mode [ 252.750310][T11309] macvlan3: entered allmulticast mode [ 252.756870][T11309] bridge2: entered allmulticast mode [ 252.765060][T11309] macvlan4: entered allmulticast mode [ 252.775572][T11309] ipip0: entered allmulticast mode [ 252.781676][T11309] geneve2: entered allmulticast mode [ 252.787969][T11309] gtp0: entered allmulticast mode [ 252.807582][ T43] syz1: Port: 1 Link DOWN [ 252.816070][ T812] wg1 speed is unknown, defaulting to 1000 [ 252.823207][ T812] syz2: Port: 1 Link DOWN [ 252.828357][ T13] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.851552][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.869986][ T13] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.878878][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.906066][T11344] tipc: Enabled bearer , priority 0 [ 252.936399][ T13] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.962189][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.979269][ T13] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.996357][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.021992][T11344] tipc: Disabling bearer [ 253.081237][T11354] tipc: Enabling of bearer rejected, failed to enable media [ 253.547868][T11386] xt_recent: Unsupported userspace flags (000000b1) [ 253.655960][T11394] 8021q: VLANs not supported on ip6_vti0 [ 254.317207][T11412] __nla_validate_parse: 2 callbacks suppressed [ 254.317226][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 254.333151][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1486'. [ 255.654364][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.144594][T11458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1500'. [ 256.195341][T11468] netlink: 'syz.5.1502': attribute type 10 has an invalid length. [ 256.210757][T11468] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 256.393651][T11482] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1507'. [ 256.486051][T11491] ip6gre0: Master is either lo or non-ether device [ 256.577639][T11497] netlink: 'syz.4.1514': attribute type 7 has an invalid length. [ 256.780497][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1519'. [ 256.882634][T11522] netlink: 'syz.6.1521': attribute type 12 has an invalid length. [ 257.045955][T11530] xt_nat: multiple ranges no longer supported [ 257.068472][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1525'. [ 257.163232][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1529'. [ 257.322454][T11551] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1532'. [ 257.403358][T11553] netlink: 'syz.1.1534': attribute type 1 has an invalid length. [ 257.430903][T11553] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1534'. [ 257.665880][T11567] netlink: zone id is out of range [ 257.687242][T11567] netlink: zone id is out of range [ 257.697005][T11567] netlink: del zone limit has 4 unknown bytes [ 257.705626][T11569] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 257.715540][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'. [ 258.370935][T11606] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 258.463593][T11615] netlink: 'syz.7.1552': attribute type 2 has an invalid length. [ 259.343455][T11669] __nla_validate_parse: 2 callbacks suppressed [ 259.343472][T11669] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1567'. [ 259.668539][T11688] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1575'. [ 259.763395][T11670] netlink: 'syz.4.1570': attribute type 16 has an invalid length. [ 259.779906][T11670] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1570'. [ 259.805133][T11694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1577'. [ 259.888902][T11694] netlink: 'syz.6.1577': attribute type 1 has an invalid length. [ 259.911762][T11694] netlink: 'syz.6.1577': attribute type 2 has an invalid length. [ 260.088423][T11707] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 260.132242][T11707] bond3 (unregistering): Released all slaves [ 260.280958][T11719] syz.4.1583: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 260.339412][T11719] CPU: 1 UID: 0 PID: 11719 Comm: syz.4.1583 Not tainted syzkaller #0 PREEMPT(full) [ 260.339446][T11719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 260.339459][T11719] Call Trace: [ 260.339468][T11719] [ 260.339478][T11719] dump_stack_lvl+0x189/0x250 [ 260.339507][T11719] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 260.339540][T11719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.339562][T11719] ? __pfx__printk+0x10/0x10 [ 260.339582][T11719] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 260.339611][T11719] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 260.339646][T11719] warn_alloc+0x214/0x310 [ 260.339675][T11719] ? stack_depot_save_flags+0x40/0x860 [ 260.339704][T11719] ? __pfx_warn_alloc+0x10/0x10 [ 260.339742][T11719] ? kasan_save_track+0x3e/0x80 [ 260.339768][T11719] ? __kasan_kmalloc+0x93/0xb0 [ 260.339798][T11719] ? xsk_setsockopt+0x4dc/0x8d0 [ 260.339817][T11719] ? do_sock_setsockopt+0x179/0x1b0 [ 260.339838][T11719] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 260.339858][T11719] ? do_syscall_64+0xfa/0xfa0 [ 260.339880][T11719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.339911][T11719] __vmalloc_node_range_noprof+0x125/0x12d0 [ 260.339968][T11719] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 260.340001][T11719] ? __kasan_kmalloc+0x93/0xb0 [ 260.340040][T11719] vmalloc_user_noprof+0xad/0xf0 [ 260.340068][T11719] ? xskq_create+0xbf/0x170 [ 260.340091][T11719] xskq_create+0xbf/0x170 [ 260.340117][T11719] xsk_init_queue+0xb0/0x110 [ 260.340141][T11719] xsk_setsockopt+0x4dc/0x8d0 [ 260.340165][T11719] ? __pfx_xsk_setsockopt+0x10/0x10 [ 260.340190][T11719] ? __pfx_aa_sk_perm+0x10/0x10 [ 260.340217][T11719] ? aa_sock_opt_perm+0xff/0x1b0 [ 260.340246][T11719] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 260.340264][T11719] ? __pfx_xsk_setsockopt+0x10/0x10 [ 260.340285][T11719] do_sock_setsockopt+0x179/0x1b0 [ 260.340311][T11719] __x64_sys_setsockopt+0x13f/0x1b0 [ 260.340339][T11719] do_syscall_64+0xfa/0xfa0 [ 260.340362][T11719] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.340385][T11719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.340405][T11719] ? clear_bhb_loop+0x60/0xb0 [ 260.340429][T11719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.340448][T11719] RIP: 0033:0x7f189a58eec9 [ 260.340467][T11719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.340484][T11719] RSP: 002b:00007f18987f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 260.340506][T11719] RAX: ffffffffffffffda RBX: 00007f189a7e5fa0 RCX: 00007f189a58eec9 [ 260.340522][T11719] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 260.340534][T11719] RBP: 00007f189a611f91 R08: 0000000000000004 R09: 0000000000000000 [ 260.340546][T11719] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.340558][T11719] R13: 00007f189a7e6038 R14: 00007f189a7e5fa0 R15: 00007ffcfc83e3b8 [ 260.340593][T11719] [ 260.340681][T11719] Mem-Info: [ 260.643845][T11719] active_anon:6735 inactive_anon:0 isolated_anon:0 [ 260.643845][T11719] active_file:2762 inactive_file:39931 isolated_file:0 [ 260.643845][T11719] unevictable:768 dirty:72 writeback:0 [ 260.643845][T11719] slab_reclaimable:11427 slab_unreclaimable:102647 [ 260.643845][T11719] mapped:28838 shmem:4265 pagetables:960 [ 260.643845][T11719] sec_pagetables:0 bounce:0 [ 260.643845][T11719] kernel_misc_reclaimable:0 [ 260.643845][T11719] free:1320571 free_pcp:15248 free_cma:0 [ 260.690917][T11719] Node 0 active_anon:25140kB inactive_anon:0kB active_file:11048kB inactive_file:159524kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115352kB dirty:288kB writeback:0kB shmem:13724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12420kB pagetables:3780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 260.728928][T11719] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 260.759632][T11719] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.851717][T11719] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 260.857530][T11719] Node 0 DMA32 free:1387460kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18204kB inactive_anon:0kB active_file:11048kB inactive_file:159524kB unevictable:1536kB writepending:288kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:42376kB local_pcp:24364kB free_cma:0kB [ 260.905026][T11719] lowmem_reserve[]: 0 0 1 1 1 [ 260.920893][T11719] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.990886][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1588'. [ 261.011763][T11719] lowmem_reserve[]: 0 0 0 0 0 [ 261.016617][T11719] Node 1 Normal free:3886876kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20448kB local_pcp:10432kB free_cma:0kB [ 261.049311][T11719] lowmem_reserve[]: 0 0 0 0 0 [ 261.069105][T11719] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 261.115359][T11750] tipc: Enabling of bearer rejected, failed to enable media [ 261.129474][T11719] Node 0 DMA32: 1214*4kB (UM) 1396*8kB (UME) 339*16kB (UME) 2445*32kB (UME) 1040*64kB (UME) 341*128kB (UME) 109*256kB (UME) 46*512kB (UME) 22*1024kB (U) 22*2048kB (UM) 259*4096kB (UM) = 1389800kB [ 261.166403][T11719] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 261.219106][T11719] Node 1 Normal: 199*4kB (UE) 50*8kB (UME) 45*16kB (UME) 87*32kB (UME) 27*64kB (UME) 6*128kB (UME) 5*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3886876kB [ 261.262102][T11719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.279544][T11719] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 261.300482][T11719] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.331051][T11719] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.345117][T11719] 44075 total pagecache pages [ 261.351609][T11719] 0 pages in swap cache [ 261.352557][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'. [ 261.355958][T11719] Free swap = 124996kB [ 261.368983][T11719] Total swap = 124996kB [ 261.374826][T11719] 2097051 pages RAM [ 261.378734][T11719] 0 pages HighMem/MovableOnly [ 261.383486][T11719] 424543 pages reserved [ 261.387735][T11719] 0 pages cma reserved [ 261.410537][T11760] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 261.418911][T11760] bond4: option packets_per_slave: allowed values 0 - 65535 [ 261.434979][T11760] bond4 (unregistering): Released all slaves [ 261.553431][T11764] gtp0: entered promiscuous mode [ 261.589451][T11764] gtp0: entered allmulticast mode [ 261.837694][T11790] netlink: 'syz.1.1601': attribute type 10 has an invalid length. [ 261.866394][T11790] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 262.305931][T11808] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.374481][T11817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1612'. [ 262.448416][T11808] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.454348][T11824] netlink: 'syz.7.1614': attribute type 1 has an invalid length. [ 262.494664][T11824] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.538958][T11825] vlan0: entered allmulticast mode [ 262.544470][T11825] bridge0: entered allmulticast mode [ 262.574741][T11808] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.607998][T11824] bond3: (slave veth3): Enslaving as an active interface with a down link [ 262.686834][T11832] netlink: 'syz.7.1614': attribute type 1 has an invalid length. [ 262.695123][T11832] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1614'. [ 262.735508][T11824] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 262.745742][T11824] bond3: (slave wlan1): Opening slave failed [ 262.773393][T11808] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.855930][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1618'. [ 262.874497][T11841] netlink: 'syz.5.1618': attribute type 30 has an invalid length. [ 262.885109][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1618'. [ 265.155202][ T1139] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.217634][ T1139] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.232975][ T1139] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.234388][T11857] __nla_validate_parse: 2 callbacks suppressed [ 265.234403][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1624'. [ 265.247667][T11860] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20003 [ 265.267277][ T1139] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.290725][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1624'. [ 265.376114][T11868] netlink: 'syz.5.1625': attribute type 9 has an invalid length. [ 265.469354][T11881] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1625'. [ 265.855010][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1634'. [ 265.866415][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1634'. [ 266.117173][T11919] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1636'. [ 266.545511][T11936] netlink: 'syz.5.1642': attribute type 9 has an invalid length. [ 266.570909][T11936] netlink: 'syz.5.1642': attribute type 6 has an invalid length. [ 266.629480][T11936] netlink: 'syz.5.1642': attribute type 5 has an invalid length. [ 266.811474][T11945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1649'. [ 267.072875][T11967] macvtap0: entered promiscuous mode [ 267.078209][T11967] vlan0: entered promiscuous mode [ 267.095485][T11967] macvtap0: entered allmulticast mode [ 267.102759][T11967] vlan0: entered allmulticast mode [ 267.108927][T11967] veth0_vlan: entered allmulticast mode [ 267.127700][T11971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1657'. [ 267.148147][T11967] macvtap1: entered promiscuous mode [ 267.154549][T11967] macvtap1: entered allmulticast mode [ 267.203435][T11967] bond4: ARP target 1.0.0.0 is already present [ 267.219624][T11967] bond4: option arp_ip_target: invalid value (1) [ 267.228395][T11967] bond4 (unregistering): Released all slaves [ 267.262216][T11982] tipc: Enabling of bearer rejected, failed to enable media [ 267.273099][T11982] netlink: 'syz.5.1661': attribute type 1 has an invalid length. [ 267.284713][T11982] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1661'. [ 267.293939][T11982] netlink: 'syz.5.1661': attribute type 1 has an invalid length. [ 267.302973][T11982] netlink: 'syz.5.1661': attribute type 2 has an invalid length. [ 267.313356][T11982] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1661'. [ 268.282642][T12034] syzkaller1: entered promiscuous mode [ 268.288150][T12034] syzkaller1: entered allmulticast mode [ 268.382583][T12040] bond4: entered allmulticast mode [ 268.397531][T12040] 8021q: adding VLAN 0 to HW filter on device bond4 [ 268.520592][T12055] bridge_slave_0: left allmulticast mode [ 268.526365][T12055] bridge_slave_0: left promiscuous mode [ 268.535107][T12055] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.485650][T12119] bridge_slave_1: default FDB implementation only supports local addresses [ 269.574417][T12126] netlink: 'syz.4.1704': attribute type 3 has an invalid length. [ 269.582723][T12127] netlink: 'syz.4.1704': attribute type 3 has an invalid length. [ 269.646175][T12129] bond4: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 269.693364][T12129] bond4 (unregistering): Released all slaves [ 269.761650][T12140] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.211004][T12165] 8021q: adding VLAN 0 to HW filter on device bond5 [ 270.428682][T12189] IPVS: set_ctl: invalid protocol: 58 172.30.1.8:20003 [ 270.466495][T12191] __nla_validate_parse: 14 callbacks suppressed [ 270.466512][T12191] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1726'. [ 270.526522][T12193] 8021q: VLANs not supported on ip6_vti0 [ 270.880285][T12224] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1735'. [ 270.891493][T12221] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1735'. [ 270.923967][T12218] lo: left allmulticast mode [ 270.943775][T12218] tunl0: left allmulticast mode [ 270.950075][T12218] gre0: left allmulticast mode [ 270.962587][T12218] gretap0: left allmulticast mode [ 270.975021][T12218] erspan0: left allmulticast mode [ 270.986267][T12218] ip_vti0: left allmulticast mode [ 270.993163][T12233] sctp: [Deprecated]: syz.7.1737 (pid 12233) Use of int in max_burst socket option deprecated. [ 270.993163][T12233] Use struct sctp_assoc_value instead [ 271.009361][T12218] ip6_vti0: left allmulticast mode [ 271.015750][T12218] sit0: left allmulticast mode [ 271.025707][T12234] x_tables: duplicate underflow at hook 1 [ 271.028492][T12218] ip6tnl0: left allmulticast mode [ 271.037261][T12218] ip6gre0: left allmulticast mode [ 271.070921][T12218] syz_tun: left allmulticast mode [ 271.076046][T12218] syz_tun: left promiscuous mode [ 271.081316][T12218] bridge0: port 3(syz_tun) entered disabled state [ 271.095880][T12218] ip6gretap0: left allmulticast mode [ 271.102850][T12218] bond0: (slave bridge0): Releasing backup interface [ 271.117409][T12218] bond0: left allmulticast mode [ 271.124861][T12218] team0: left allmulticast mode [ 271.131200][T12218] dummy0: left allmulticast mode [ 271.136625][T12218] nlmon0: left allmulticast mode [ 271.142181][T12218] caif0: left allmulticast mode [ 271.147305][T12218] batadv0: left allmulticast mode [ 271.153432][T12218] vxcan0: left allmulticast mode [ 271.158619][T12218] vxcan1: left allmulticast mode [ 271.164331][T12218] veth0: left allmulticast mode [ 271.172125][T12218] veth1: left allmulticast mode [ 271.177932][T12218] wg0: left allmulticast mode [ 271.183957][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1738'. [ 271.185500][T12218] wg1: left allmulticast mode [ 271.197801][T12218] wg2: left allmulticast mode [ 271.203171][T12218] veth0_to_bridge: left allmulticast mode [ 271.210846][T12218] bridge_slave_0: left allmulticast mode [ 271.216858][T12218] bridge_slave_0: left promiscuous mode [ 271.224928][T12218] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.242942][T12218] veth1_to_bridge: left allmulticast mode [ 271.251563][T12218] bridge_slave_1: left allmulticast mode [ 271.259868][T12218] bond0: (slave bridge_slave_1): Releasing backup interface [ 271.273656][T12218] veth0_to_bond: left allmulticast mode [ 271.281414][T12218] bond_slave_0: left allmulticast mode [ 271.288797][T12218] bond0: (slave bond_slave_0): Releasing backup interface [ 271.301718][T12218] veth1_to_bond: left allmulticast mode [ 271.308096][T12218] bond_slave_1: left allmulticast mode [ 271.315921][T12218] bond0: (slave bond_slave_1): Releasing backup interface [ 271.325065][T12218] veth0_to_team: left allmulticast mode [ 271.332232][T12218] team_slave_0: left allmulticast mode [ 271.338865][T12218] team0: Port device team_slave_0 removed [ 271.345376][T12218] veth1_to_team: left allmulticast mode [ 271.351742][T12218] team_slave_1: left allmulticast mode [ 271.358392][T12218] team0: Port device team_slave_1 removed [ 271.365343][T12218] veth0_to_batadv: left allmulticast mode [ 271.371691][T12218] batadv_slave_0: left allmulticast mode [ 271.377416][T12218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.386075][T12218] veth1_to_batadv: left allmulticast mode [ 271.392389][T12218] batadv_slave_1: left allmulticast mode [ 271.398125][T12218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.407574][T12218] xfrm0: left allmulticast mode [ 271.412938][T12218] veth0_to_hsr: left allmulticast mode [ 271.418904][T12218] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 271.444473][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1738'. [ 271.728048][T12264] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1747'. [ 271.763446][T12266] netlink: 'syz.1.1746': attribute type 10 has an invalid length. [ 271.776756][T12268] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1748'. [ 271.840434][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1749'. [ 271.964741][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1749'. [ 271.964792][T12277] nftables ruleset with unbound set [ 271.993913][T12283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1751'. [ 272.082725][T12290] syz.4.1755: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 272.098947][T12290] CPU: 1 UID: 0 PID: 12290 Comm: syz.4.1755 Not tainted syzkaller #0 PREEMPT(full) [ 272.098974][T12290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 272.098986][T12290] Call Trace: [ 272.098993][T12290] [ 272.099002][T12290] dump_stack_lvl+0x189/0x250 [ 272.099035][T12290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.099055][T12290] ? __pfx__printk+0x10/0x10 [ 272.099076][T12290] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 272.099104][T12290] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 272.099133][T12290] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 272.099162][T12290] warn_alloc+0x214/0x310 [ 272.099190][T12290] ? stack_depot_save_flags+0x40/0x860 [ 272.099220][T12290] ? __pfx_warn_alloc+0x10/0x10 [ 272.099250][T12290] ? kasan_save_track+0x3e/0x80 [ 272.099276][T12290] ? __kasan_kmalloc+0x93/0xb0 [ 272.099305][T12290] ? xsk_setsockopt+0x4dc/0x8d0 [ 272.099324][T12290] ? do_sock_setsockopt+0x179/0x1b0 [ 272.099344][T12290] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 272.099365][T12290] ? do_syscall_64+0xfa/0xfa0 [ 272.099388][T12290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.099418][T12290] __vmalloc_node_range_noprof+0x125/0x12d0 [ 272.099487][T12290] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 272.099521][T12290] ? __kasan_kmalloc+0x93/0xb0 [ 272.099555][T12290] vmalloc_user_noprof+0xad/0xf0 [ 272.099582][T12290] ? xskq_create+0xbf/0x170 [ 272.099606][T12290] xskq_create+0xbf/0x170 [ 272.099631][T12290] xsk_init_queue+0xb0/0x110 [ 272.099655][T12290] xsk_setsockopt+0x4dc/0x8d0 [ 272.099677][T12290] ? __pfx_xsk_setsockopt+0x10/0x10 [ 272.099701][T12290] ? __pfx_aa_sk_perm+0x10/0x10 [ 272.099726][T12290] ? aa_sock_opt_perm+0xff/0x1b0 [ 272.099754][T12290] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 272.099773][T12290] ? __pfx_xsk_setsockopt+0x10/0x10 [ 272.099794][T12290] do_sock_setsockopt+0x179/0x1b0 [ 272.099821][T12290] __x64_sys_setsockopt+0x13f/0x1b0 [ 272.099849][T12290] do_syscall_64+0xfa/0xfa0 [ 272.099871][T12290] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.099895][T12290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.099914][T12290] ? clear_bhb_loop+0x60/0xb0 [ 272.099938][T12290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.099957][T12290] RIP: 0033:0x7f189a58eec9 [ 272.099975][T12290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.099993][T12290] RSP: 002b:00007f18987f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 272.100013][T12290] RAX: ffffffffffffffda RBX: 00007f189a7e5fa0 RCX: 00007f189a58eec9 [ 272.100029][T12290] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 272.100041][T12290] RBP: 00007f189a611f91 R08: 0000000000000004 R09: 0000000000000000 [ 272.100054][T12290] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.100067][T12290] R13: 00007f189a7e6038 R14: 00007f189a7e5fa0 R15: 00007ffcfc83e3b8 [ 272.100102][T12290] [ 272.439355][T12290] Mem-Info: [ 272.448854][T12290] active_anon:3888 inactive_anon:0 isolated_anon:0 [ 272.448854][T12290] active_file:2762 inactive_file:39935 isolated_file:0 [ 272.448854][T12290] unevictable:768 dirty:77 writeback:0 [ 272.448854][T12290] slab_reclaimable:11549 slab_unreclaimable:102888 [ 272.448854][T12290] mapped:28798 shmem:1370 pagetables:950 [ 272.448854][T12290] sec_pagetables:0 bounce:0 [ 272.448854][T12290] kernel_misc_reclaimable:0 [ 272.448854][T12290] free:1323959 free_pcp:13569 free_cma:0 [ 272.513881][T12299] netlink: 'syz.6.1757': attribute type 11 has an invalid length. [ 272.540041][T12290] Node 0 active_anon:15652kB inactive_anon:0kB active_file:11048kB inactive_file:159540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115192kB dirty:308kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12740kB pagetables:3640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 272.590120][T12290] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 272.639774][T12290] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 272.670030][T12290] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 272.675846][T12290] Node 0 DMA32 free:1393472kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15652kB inactive_anon:0kB active_file:11048kB inactive_file:159540kB unevictable:1536kB writepending:308kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:35268kB local_pcp:14216kB free_cma:0kB [ 272.712827][T12290] lowmem_reserve[]: 0 0 1 1 1 [ 272.717599][T12290] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 272.795109][T12290] lowmem_reserve[]: 0 0 0 0 0 [ 272.832414][T12290] Node 1 Normal free:3886876kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20448kB local_pcp:10432kB free_cma:0kB [ 272.919382][T12290] lowmem_reserve[]: 0 0 0 0 0 [ 272.924156][T12290] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 272.957955][T12290] Node 0 DMA32: 370*4kB (UM) 1238*8kB (UME) 545*16kB (UME) 2235*32kB (UME) 1137*64kB (UME) 368*128kB (UME) 118*256kB (UME) 46*512kB (UME) 23*1024kB (U) 22*2048kB (UM) 259*4096kB (UM) = 1394728kB [ 272.977521][T12290] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 272.989459][T12290] Node 1 Normal: 199*4kB (UE) 50*8kB (UME) 45*16kB (UME) 87*32kB (UME) 27*64kB (UME) 6*128kB (UME) 5*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3886876kB [ 273.007933][T12290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.017699][T12290] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 273.028247][T12290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.038161][T12290] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 273.069090][T12290] 44564 total pagecache pages [ 273.073902][T12290] 0 pages in swap cache [ 273.078060][T12290] Free swap = 124996kB [ 273.095731][T12290] Total swap = 124996kB [ 273.105842][T12290] 2097051 pages RAM [ 273.126116][T12290] 0 pages HighMem/MovableOnly [ 273.169462][T12290] 424543 pages reserved [ 273.173657][T12290] 0 pages cma reserved [ 273.437571][T12343] netlink: 'syz.4.1768': attribute type 14 has an invalid length. [ 273.450558][T12343] netlink: 'syz.4.1768': attribute type 13 has an invalid length. [ 273.670705][T12348] vlan0: entered promiscuous mode [ 273.855586][T12364] ieee802154 phy0 wpan0: encryption failed: -22 [ 274.567856][T12397] 8021q: VLANs not supported on ip6_vti0 [ 275.023491][T12422] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 275.193957][T12437] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.391274][T12444] netlink: 'syz.7.1801': attribute type 1 has an invalid length. [ 275.570934][T12446] syzkaller0: entered promiscuous mode [ 275.582340][T12446] syzkaller0: entered allmulticast mode [ 275.820755][T12477] __nla_validate_parse: 13 callbacks suppressed [ 275.820774][T12477] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1810'. [ 276.891329][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1808'. [ 277.174641][T12502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1819'. [ 277.186682][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1819'. [ 277.218944][T12501] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1817'. [ 277.328658][T12511] veth1_to_bond: entered allmulticast mode [ 277.345254][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1823'. [ 277.356336][T12509] netlink: 'syz.1.1822': attribute type 16 has an invalid length. [ 277.440322][T12511] veth1_to_bond (unregistering): left allmulticast mode [ 277.454838][T12514] veth0_to_bond: entered allmulticast mode [ 277.533732][T12525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1825'. [ 277.643364][T12529] sctp: [Deprecated]: syz.4.1826 (pid 12529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.643364][T12529] Use struct sctp_sack_info instead [ 277.663034][T12530] netlink: 'syz.4.1826': attribute type 2 has an invalid length. [ 277.680505][T12530] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1826'. [ 277.690432][T12530] nbd: must specify at least one socket [ 277.939428][T12549] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1833'. [ 277.965018][T12555] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1834'. [ 278.131602][T12568] netlink: 'syz.6.1836': attribute type 6 has an invalid length. [ 278.140873][T12571] tipc: New replicast peer: 255.255.255.255 [ 278.147509][T12571] tipc: Enabled bearer , priority 10 [ 278.355558][T12593] netlink: 'syz.5.1843': attribute type 2 has an invalid length. [ 278.652803][T12611] xt_TPROXY: Can be used only with -p tcp or -p udp [ 278.753544][T12623] wg1: Master is either lo or non-ether device [ 278.833195][T12631] xt_policy: neither incoming nor outgoing policy selected [ 278.858016][T12631] netlink: 'syz.6.1855': attribute type 12 has an invalid length. [ 278.898694][T12640] netlink: 'syz.4.1860': attribute type 1 has an invalid length. [ 278.946001][T12640] 8021q: adding VLAN 0 to HW filter on device bond7 [ 278.961470][T12641] syzkaller1: entered promiscuous mode [ 278.966988][T12641] syzkaller1: entered allmulticast mode [ 278.984055][T12631] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 278.994717][T12640] bond7: (slave gretap2): making interface the new active one [ 279.004295][T12640] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 279.260878][ T43] tipc: Node number set to 1279085671 [ 279.282272][T12668] ipt_rpfilter: unknown options [ 279.494588][T12684] tipc: Enabled bearer , priority 0 [ 279.507824][T12684] syzkaller0: entered promiscuous mode [ 279.514201][T12684] syzkaller0: entered allmulticast mode [ 279.547196][T12684] tipc: Resetting bearer [ 279.566838][T12688] netlink: 'syz.7.1872': attribute type 2 has an invalid length. [ 279.580170][T12683] tipc: Resetting bearer [ 279.602017][T12683] tipc: Disabling bearer [ 280.098109][T12720] netlink: 'syz.5.1882': attribute type 1 has an invalid length. [ 280.271863][T11080] syzkaller0: tun_net_xmit 76 [ 280.277819][T11080] syzkaller0: tun_net_xmit 48 [ 280.294033][T12725] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 280.304563][T12725] syzkaller0: Linktype set failed because interface is up [ 280.319355][ T5945] syzkaller0: tun_net_xmit 76 [ 280.555575][T12743] bond5 (unregistering): Released all slaves [ 280.707481][T12751] netlink: 'syz.5.1892': attribute type 1 has an invalid length. [ 280.800764][ T5945] syzkaller0: tun_net_xmit 76 [ 280.859251][ T24] syzkaller0: tun_net_xmit 76 [ 280.870325][T12755] netlink: 'syz.7.1893': attribute type 1 has an invalid length. [ 280.899632][ T812] syzkaller0: tun_net_xmit 76 [ 280.950125][T12758] __nla_validate_parse: 11 callbacks suppressed [ 280.950144][T12758] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1894'. [ 280.973021][T12762] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1893'. [ 281.037885][T12766] netlink: 'syz.6.1895': attribute type 23 has an invalid length. [ 281.053339][T12764] netlink: 'syz.7.1893': attribute type 1 has an invalid length. [ 284.031758][T12755] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 284.291913][T12791] netlink: 'syz.5.1901': attribute type 33 has an invalid length. [ 284.330896][T12792] tipc: Enabled bearer , priority 0 [ 284.338407][T12792] syzkaller0: entered promiscuous mode [ 284.345337][T12792] syzkaller0: entered allmulticast mode [ 284.416204][T12791] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 284.441951][T12791] bond4 (unregistering): Released all slaves [ 284.528297][T12801] tipc: Resetting bearer [ 284.541427][T12799] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1902'. [ 284.640246][T12810] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1905'. [ 284.650979][T12790] tipc: Resetting bearer [ 284.667524][T12790] tipc: Disabling bearer [ 284.913038][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1913'. [ 285.023101][T12840] netlink: 'syz.7.1915': attribute type 1 has an invalid length. [ 285.057498][T12842] netlink: 'syz.7.1915': attribute type 1 has an invalid length. [ 285.196509][T12848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1917'. [ 285.213169][T12853] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1918'. [ 285.226996][T12854] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1919'. [ 285.296910][T12856] netlink: 'syz.6.1920': attribute type 1 has an invalid length. [ 285.313303][T12856] netlink: 'syz.6.1920': attribute type 11 has an invalid length. [ 285.350881][T12856] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1920'. [ 285.824101][T12896] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1933'. [ 286.072738][T12911] __nla_validate_parse: 2 callbacks suppressed [ 286.072758][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1938'. [ 286.116960][T12920] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1940'. [ 286.478212][T12944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1947'. [ 286.568086][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1952'. [ 286.614732][T12956] bond7: option lp_interval: invalid value (0) [ 286.621051][T12956] bond7: option lp_interval: allowed values 1 - 2147483647 [ 286.631760][T12956] bond7 (unregistering): Released all slaves [ 286.714089][T12965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1953'. [ 286.911880][T12983] netlink: 'syz.4.1959': attribute type 1 has an invalid length. [ 286.965443][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1961'. [ 287.052998][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1964'. [ 287.063078][T12994] netlink: 'syz.4.1964': attribute type 5 has an invalid length. [ 287.076353][T12994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1964'. [ 287.250953][T13011] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 287.358420][T13016] netlink: 'syz.6.1971': attribute type 27 has an invalid length. [ 287.667257][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1977'. [ 287.858560][T13043] bridge_slave_0: entered promiscuous mode [ 288.026141][T13057] tcpmss_tg4_check: 55 callbacks suppressed [ 288.026158][T13057] xt_TCPMSS: Only works on TCP SYN packets [ 288.637997][T13087] netlink: 'syz.7.1995': attribute type 1 has an invalid length. [ 288.675120][T13087] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1995'. [ 288.708290][T13087] openvswitch: netlink: Message has 512 unknown bytes. [ 289.191548][T13116] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 289.677171][T13150] netlink: 'syz.5.2013': attribute type 1 has an invalid length. [ 289.972621][T13157] ipvlan1: left allmulticast mode [ 290.106391][T13165] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 290.120041][T13165] netlink: 'syz.1.2020': attribute type 10 has an invalid length. [ 290.127913][T13165] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 290.156161][T13167] gretap0: entered promiscuous mode [ 290.181300][T13167] vlan4: entered promiscuous mode [ 290.398624][T13192] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 290.625825][T13206] team0: No ports can be present during mode change [ 290.789409][T13221] netlink: 'syz.6.2038': attribute type 1 has an invalid length. [ 290.833538][T13222] bond5 (unregistering): Released all slaves [ 290.988075][T13240] syzkaller1: entered promiscuous mode [ 290.994738][T13240] syzkaller1: entered allmulticast mode [ 291.003031][T13247] netlink: 'syz.6.2044': attribute type 10 has an invalid length. [ 291.122283][T13240] syz.7.2043: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 291.148294][T13255] __nla_validate_parse: 16 callbacks suppressed [ 291.148312][T13255] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2046'. [ 291.166235][T13240] CPU: 0 UID: 0 PID: 13240 Comm: syz.7.2043 Not tainted syzkaller #0 PREEMPT(full) [ 291.166277][T13240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 291.166290][T13240] Call Trace: [ 291.166297][T13240] [ 291.166306][T13240] dump_stack_lvl+0x189/0x250 [ 291.166333][T13240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.166352][T13240] ? __pfx__printk+0x10/0x10 [ 291.166371][T13240] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 291.166396][T13240] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 291.166423][T13240] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 291.166448][T13240] warn_alloc+0x214/0x310 [ 291.166479][T13240] ? __pfx_warn_alloc+0x10/0x10 [ 291.166513][T13240] ? __get_vm_area_node+0x28f/0x300 [ 291.166538][T13240] ? nf_tables_newset+0x1330/0x2540 [ 291.166567][T13240] __vmalloc_node_range_noprof+0x690/0x12d0 [ 291.166626][T13240] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 291.166652][T13240] ? nf_tables_newset+0x1330/0x2540 [ 291.166687][T13240] ? rcu_is_watching+0x15/0xb0 [ 291.166709][T13240] ? nf_tables_newset+0x1330/0x2540 [ 291.166734][T13240] __kvmalloc_node_noprof+0x674/0x910 [ 291.166763][T13240] ? nf_tables_newset+0x1330/0x2540 [ 291.166792][T13240] ? nft_set_lookup+0x128/0x150 [ 291.166818][T13240] ? nft_hash_privsize+0x7f/0xf0 [ 291.166842][T13240] nf_tables_newset+0x1330/0x2540 [ 291.166882][T13240] ? __pfx_nf_tables_newset+0x10/0x10 [ 291.166930][T13240] ? __nla_parse+0x40/0x60 [ 291.166962][T13240] nfnetlink_rcv+0x11d9/0x2590 [ 291.167029][T13240] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 291.167075][T13240] ? ref_tracker_free+0x63a/0x7d0 [ 291.167126][T13240] ? __netlink_deliver_tap+0x807/0x850 [ 291.167146][T13240] ? netlink_deliver_tap+0x2e/0x1b0 [ 291.167184][T13240] netlink_unicast+0x82f/0x9e0 [ 291.167222][T13240] ? __pfx_netlink_unicast+0x10/0x10 [ 291.167254][T13240] ? netlink_sendmsg+0x642/0xb30 [ 291.167272][T13240] ? skb_put+0x11b/0x210 [ 291.167297][T13240] netlink_sendmsg+0x805/0xb30 [ 291.167328][T13240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.167353][T13240] ? aa_sock_msg_perm+0xf1/0x1d0 [ 291.167380][T13240] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.167398][T13240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.167420][T13240] __sock_sendmsg+0x21c/0x270 [ 291.167450][T13240] ____sys_sendmsg+0x505/0x830 [ 291.167477][T13240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.167518][T13240] ? import_iovec+0x74/0xa0 [ 291.167541][T13240] ___sys_sendmsg+0x21f/0x2a0 [ 291.167572][T13240] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.167635][T13240] ? __fget_files+0x2a/0x420 [ 291.167652][T13240] ? __fget_files+0x3a0/0x420 [ 291.167685][T13240] __x64_sys_sendmsg+0x19b/0x260 [ 291.167711][T13240] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.167753][T13240] ? do_syscall_64+0xbe/0xfa0 [ 291.167781][T13240] do_syscall_64+0xfa/0xfa0 [ 291.167805][T13240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.167824][T13240] ? asm_sysvec_call_function_single+0x1a/0x20 [ 291.167843][T13240] ? clear_bhb_loop+0x60/0xb0 [ 291.167866][T13240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.167885][T13240] RIP: 0033:0x7f1f9e38eec9 [ 291.167903][T13240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.167919][T13240] RSP: 002b:00007f1f9f280038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.167939][T13240] RAX: ffffffffffffffda RBX: 00007f1f9e5e5fa0 RCX: 00007f1f9e38eec9 [ 291.167955][T13240] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 291.167967][T13240] RBP: 00007f1f9e411f91 R08: 0000000000000000 R09: 0000000000000000 [ 291.167979][T13240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.167990][T13240] R13: 00007f1f9e5e6038 R14: 00007f1f9e5e5fa0 R15: 00007ffe0691a6d8 [ 291.168024][T13240] [ 291.168032][T13240] Mem-Info: [ 291.372905][T13259] xfrm1: entered allmulticast mode [ 291.375634][T13240] active_anon:3964 inactive_anon:0 isolated_anon:0 [ 291.375634][T13240] active_file:2827 inactive_file:39943 isolated_file:0 [ 291.375634][T13240] unevictable:768 dirty:85 writeback:0 [ 291.375634][T13240] slab_reclaimable:11740 slab_unreclaimable:102838 [ 291.375634][T13240] mapped:28830 shmem:1370 pagetables:959 [ 291.375634][T13240] sec_pagetables:0 bounce:0 [ 291.375634][T13240] kernel_misc_reclaimable:0 [ 291.375634][T13240] free:1321312 free_pcp:14050 free_cma:0 [ 291.616530][T13240] Node 0 active_anon:15556kB inactive_anon:0kB active_file:11308kB inactive_file:159572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115320kB dirty:340kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12716kB pagetables:3772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 291.669765][T13263] netlink: 'syz.5.2050': attribute type 32 has an invalid length. [ 291.700463][T13240] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 291.765756][T13240] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.772738][T13269] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2053'. [ 291.843055][T13240] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 291.860331][T13240] Node 0 DMA32 free:1382756kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15452kB inactive_anon:0kB active_file:11308kB inactive_file:159572kB unevictable:1536kB writepending:348kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:36992kB local_pcp:15916kB free_cma:0kB [ 291.902334][T13240] lowmem_reserve[]: 0 0 1 1 1 [ 291.907414][T13240] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.945395][T13240] lowmem_reserve[]: 0 0 0 0 0 [ 291.955587][T13275] netlink: 'syz.5.2054': attribute type 1 has an invalid length. [ 291.983376][T13240] Node 1 Normal free:3886876kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20552kB local_pcp:10464kB free_cma:0kB [ 292.018569][T13240] lowmem_reserve[]: 0 0 0 0 0 [ 292.023822][T13240] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 292.041000][T13240] Node 0 DMA32: 989*4kB (M) 1006*8kB (UM) 316*16kB (UM) 1890*32kB (UME) 1156*64kB (UME) 381*128kB (UME) 121*256kB (UM) 45*512kB (UME) 24*1024kB (U) 21*2048kB (UM) 259*4096kB (UM) = 1382756kB [ 292.046292][T13281] bond4: (slave gretap1): making interface the new active one [ 292.063345][T13240] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 292.080929][T13281] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 292.090402][T13240] Node 1 Normal: 199*4kB (UE) 50*8kB (UME) 45*16kB (UME) 87*32kB (UME) 27*64kB (UME) 6*128kB (UME) 5*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3886876kB [ 292.102034][T13285] tap0: tun_chr_ioctl cmd 1074025677 [ 292.128439][T13240] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.138692][T13275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.148755][T13240] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 292.148862][T13285] tap0: linktype set to 65534 [ 292.172688][T13240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.187921][T13273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.190226][T13240] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 292.214915][T13240] 44187 total pagecache pages [ 292.219718][T13240] 0 pages in swap cache [ 292.223952][T13240] Free swap = 124996kB [ 292.228181][T13240] Total swap = 124996kB [ 292.232509][T13240] 2097051 pages RAM [ 292.236402][T13240] 0 pages HighMem/MovableOnly [ 292.241568][T13240] 424543 pages reserved [ 292.268546][T13240] 0 pages cma reserved [ 292.297838][T13290] netlink: 'syz.4.2060': attribute type 30 has an invalid length. [ 292.380124][T13290] bond8: option arp_missed_max: invalid value (0) [ 292.386591][T13290] bond8: option arp_missed_max: allowed values 1 - 255 [ 292.412681][T13290] bond8 (unregistering): Released all slaves [ 292.743067][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2064'. [ 292.915301][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2066'. [ 292.973605][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2066'. [ 293.001581][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2068'. [ 293.022168][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2068'. [ 293.187611][T13336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2072'. [ 293.216539][T13337] netlink: 'syz.4.2070': attribute type 11 has an invalid length. [ 293.236261][T13337] netlink: 'syz.4.2070': attribute type 11 has an invalid length. [ 293.260544][T13337] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2070'. [ 293.272410][T13338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2072'. [ 294.576993][T13404] netlink: 'syz.4.2099': attribute type 12 has an invalid length. [ 295.047202][T13446] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 295.142281][T13443] team0: Port device team_slave_1 removed [ 295.586674][T13490] bond5: Unable to set up delay as MII monitoring is disabled [ 295.606605][T13490] bond5 (unregistering): Released all slaves [ 296.216958][T13526] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 296.391856][T13539] tipc: Enabling of bearer rejected, failed to enable media [ 296.463271][T13546] __nla_validate_parse: 15 callbacks suppressed [ 296.463290][T13546] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2142'. [ 296.713124][T13565] xt_bpf: check failed: parse error [ 297.172994][T13592] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2156'. [ 297.182591][T13592] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2156'. [ 297.278045][T13596] 8021q: VLANs not supported on sit0 [ 297.533606][T13616] netlink: 'syz.6.2164': attribute type 1 has an invalid length. [ 297.545846][T13617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2166'. [ 297.827538][T13634] Cannot find set identified by id 65534 to match [ 297.890922][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880309a8800: rx timeout, send abort [ 297.899601][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880309a8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 297.970557][T13637] netlink: 'syz.6.2172': attribute type 178 has an invalid length. [ 298.009883][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2173'. [ 298.063191][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2173'. [ 298.107869][T13646] netlink: 'syz.5.2175': attribute type 1 has an invalid length. [ 298.119428][T13646] netlink: 'syz.5.2175': attribute type 3 has an invalid length. [ 298.135857][T13646] netlink: 'syz.5.2175': attribute type 235 has an invalid length. [ 298.188640][T13651] veth1_to_bond: entered allmulticast mode [ 298.201213][T13651] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2177'. [ 298.223643][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2177'. [ 298.330696][T13651] veth1_to_bond (unregistering): left allmulticast mode [ 298.455245][T13674] wg1: entered promiscuous mode [ 298.466936][T13674] wg1: entered allmulticast mode [ 298.502848][T13674] netlink: 'syz.7.2184': attribute type 1 has an invalid length. [ 298.611227][T13686] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2187'. [ 298.831870][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2192'. [ 298.841935][T13708] netlink: 'syz.6.2192': attribute type 11 has an invalid length. [ 298.894588][T13712] netlink: 'syz.7.2193': attribute type 83 has an invalid length. [ 299.375792][T13750] netlink: 'syz.6.2206': attribute type 5 has an invalid length. [ 299.511957][T13764] netlink: 'syz.6.2206': attribute type 1 has an invalid length. [ 299.597969][T13765] team1: entered promiscuous mode [ 299.603190][T13765] team1: entered allmulticast mode [ 299.625807][T13765] team2: entered promiscuous mode [ 299.638206][T13765] team2: entered allmulticast mode [ 299.672970][T13765] team3: entered promiscuous mode [ 299.678084][T13765] team3: entered allmulticast mode [ 299.692505][T13770] netlink: 'syz.1.2211': attribute type 14 has an invalid length. [ 299.711926][T13765] team4: entered promiscuous mode [ 299.717032][T13765] team4: entered allmulticast mode [ 299.757368][T13765] team5: entered promiscuous mode [ 299.763120][T13765] team5: entered allmulticast mode [ 299.798238][T13765] team6: entered promiscuous mode [ 299.804994][T13765] team6: entered allmulticast mode [ 299.844586][T13765] team7: entered promiscuous mode [ 299.849845][T13765] team7: entered allmulticast mode [ 299.887739][T13765] team8: entered promiscuous mode [ 299.894473][T13765] team8: entered allmulticast mode [ 299.926383][T13765] team9: entered promiscuous mode [ 299.932096][T13765] team9: entered allmulticast mode [ 299.977020][T13765] team10: entered promiscuous mode [ 299.982504][T13765] team10: entered allmulticast mode [ 300.014553][T13765] team11: entered promiscuous mode [ 300.023876][T13765] team11: entered allmulticast mode [ 300.056301][T13765] team12: entered promiscuous mode [ 300.061529][T13765] team12: entered allmulticast mode [ 300.115349][T13765] team13: entered promiscuous mode [ 300.124778][T13765] team13: entered allmulticast mode [ 300.177708][T13765] team14: entered promiscuous mode [ 300.184681][T13765] team14: entered allmulticast mode [ 300.228772][T13765] team15: entered promiscuous mode [ 300.262333][T13765] team15: entered allmulticast mode [ 300.346704][T13765] team16: entered promiscuous mode [ 300.354721][T13765] team16: entered allmulticast mode [ 301.474113][T13845] sctp: [Deprecated]: syz.5.2235 (pid 13845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.474113][T13845] Use struct sctp_sack_info instead [ 301.595913][T13845] __nla_validate_parse: 32 callbacks suppressed [ 301.595932][T13845] netlink: 252 bytes leftover after parsing attributes in process `syz.5.2235'. [ 301.716595][T13860] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2239'. [ 301.823354][T13865] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2239'. [ 301.855665][T13848] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2236'. [ 301.864735][T13848] A link change request failed with some changes committed already. Interface ªªªªªªç†áíÞ‚Ï may have been left with an inconsistent configuration, please check. [ 302.046296][T13869] ieee802154 phy0 wpan0: encryption failed: -22 [ 302.083753][T13877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2244'. [ 302.177260][T13881] syz_tun: entered allmulticast mode [ 302.393148][T13871] syz_tun: left allmulticast mode [ 302.496816][T13900] 8021q: VLANs not supported on gre0 [ 302.578070][T13905] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2255'. [ 302.731752][T13905] hsr_slave_1 (unregistering): left promiscuous mode [ 302.784575][T13909] validate_nla: 6 callbacks suppressed [ 302.784592][T13909] netlink: 'syz.7.2257': attribute type 2 has an invalid length. [ 303.181009][T13938] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2267'. [ 303.352250][T13949] netlink: 'syz.5.2272': attribute type 1 has an invalid length. [ 303.454620][T13949] bond5: entered promiscuous mode [ 303.466416][T13949] 8021q: adding VLAN 0 to HW filter on device bond5 [ 303.485875][T13965] netlink: 404 bytes leftover after parsing attributes in process `syz.7.2276'. [ 303.497813][T13965] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2276'. [ 303.507178][T13965] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2276'. [ 303.702881][T13977] netlink: 'syz.4.2281': attribute type 9 has an invalid length. [ 303.707312][T13970] netlink: 'syz.7.2278': attribute type 9 has an invalid length. [ 303.846505][T13992] xt_TCPMSS: Only works on TCP SYN packets [ 303.869701][T13992] netlink: 'syz.5.2284': attribute type 30 has an invalid length. [ 304.277391][T14020] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 304.293391][T14021] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 304.512537][T14040] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 304.584310][T14042] veth0: entered promiscuous mode [ 304.589861][T14042] veth0: left promiscuous mode [ 304.923251][T14066] ieee802154 phy0 wpan0: encryption failed: -22 [ 305.510982][T14097] netlink: 'syz.1.2311': attribute type 29 has an invalid length. [ 305.655660][T14104] netlink: 'syz.5.2315': attribute type 16 has an invalid length. [ 305.709225][T14104] netlink: 'syz.5.2315': attribute type 17 has an invalid length. [ 305.817574][T14104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.836643][T14104] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.844752][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 305.865346][T14104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.883744][ T24] syz1: Port: 1 Link ACTIVE [ 305.900849][T14114] nbd: couldn't find a device at index 1 [ 306.279298][ T43] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 306.347752][T14136] bond7 (unregistering): Released all slaves [ 306.656854][T14163] netlink: 'syz.4.2332': attribute type 2 has an invalid length. [ 306.769735][T11080] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.271026][T14203] netlink: 'syz.1.2344': attribute type 1 has an invalid length. [ 307.288160][T14205] __nla_validate_parse: 13 callbacks suppressed [ 307.288178][T14205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2345'. [ 307.308155][T14205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2345'. [ 307.629723][T14227] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2351'. [ 307.701701][T14235] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2353'. [ 307.740304][T14235] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2353'. [ 307.812264][T11080] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.829760][T11080] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.881480][T14247] validate_nla: 2 callbacks suppressed [ 307.881498][T14247] netlink: 'syz.7.2359': attribute type 1 has an invalid length. [ 307.991758][T14257] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2361'. [ 308.035839][T14251] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 308.127506][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2365'. [ 308.179449][ T43] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 308.271036][T14278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2366'. [ 308.351215][T14285] veth0_to_team: entered promiscuous mode [ 308.358201][T14285] veth0_to_team: entered allmulticast mode [ 308.576405][T14300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2372'. [ 309.245497][T14333] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.402067][T14342] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2381'. [ 309.459656][ T60] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.472835][T11083] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.490544][T11083] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.498757][T11083] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.783357][T14363] veth0: entered promiscuous mode [ 309.870108][T14366] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20003 [ 309.912648][T14362] veth0: left promiscuous mode [ 309.977722][T14371] tipc: Enabled bearer , priority 0 [ 309.991853][T14371] syzkaller0: entered promiscuous mode [ 309.998749][T14371] syzkaller0: entered allmulticast mode [ 310.013878][T14371] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 310.072168][T14371] tipc: Resetting bearer [ 310.097177][T14369] tipc: Resetting bearer [ 310.185293][T14369] tipc: Disabling bearer [ 310.219424][T14383] team0: entered promiscuous mode [ 310.241104][T14389] netlink: 'syz.6.2394': attribute type 10 has an invalid length. [ 310.572424][T14412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.900308][T14443] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 311.253857][T14468] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 311.276531][T14471] netlink: 'syz.5.2416': attribute type 1 has an invalid length. [ 311.454484][T14485] netlink: 'syz.6.2419': attribute type 1 has an invalid length. [ 311.603065][T14485] 8021q: adding VLAN 0 to HW filter on device bond6 [ 311.628060][T14500] bridge0: port 1(bridge_slave_1) entered blocking state [ 311.637741][T14500] bridge0: port 1(bridge_slave_1) entered disabled state [ 311.645535][T14500] bridge_slave_1: entered allmulticast mode [ 311.681610][T14506] tipc: Enabled bearer , priority 0 [ 311.723721][T14506] syzkaller0: entered promiscuous mode [ 311.761199][T14506] syzkaller0: entered allmulticast mode [ 311.785027][T14511] IPVS: Error connecting to the multicast addr [ 311.833429][T14521] netlink: 'syz.4.2431': attribute type 83 has an invalid length. [ 311.834485][T14506] tipc: Resetting bearer [ 311.852948][T14506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.861365][T14506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.922072][T14505] tipc: Resetting bearer [ 311.975068][T14505] tipc: Disabling bearer [ 312.208502][T14541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.338871][T14553] netlink: 'syz.6.2442': attribute type 1 has an invalid length. [ 312.346784][T14553] __nla_validate_parse: 10 callbacks suppressed [ 312.346801][T14553] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2442'. [ 312.379648][T14553] netlink: 'syz.6.2442': attribute type 2 has an invalid length. [ 312.391191][T14553] netlink: 'syz.6.2442': attribute type 1 has an invalid length. [ 312.472653][T14561] netlink: 'syz.4.2445': attribute type 1 has an invalid length. [ 312.490348][T14561] nbd: error processing sock list [ 312.505695][T14561] block nbd2: shutting down sockets [ 312.601715][T14571] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2447'. [ 313.185692][T14605] netlink: 'syz.6.2458': attribute type 3 has an invalid length. [ 313.398956][T14619] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2463'. [ 313.422820][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2464'. [ 313.476074][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2464'. [ 313.491758][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2464'. [ 313.564463][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2464'. [ 313.778230][T14637] x_tables: duplicate underflow at hook 1 [ 314.016855][T14654] netlink: 'syz.5.2472': attribute type 1 has an invalid length. [ 314.026278][T14654] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2472'. [ 314.035932][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2472'. [ 314.181796][T14663] netlink: 'syz.6.2476': attribute type 29 has an invalid length. [ 314.193978][T14664] netlink: 'syz.6.2476': attribute type 29 has an invalid length. [ 314.195019][T14663] netlink: 596 bytes leftover after parsing attributes in process `syz.6.2476'. [ 314.404308][T14679] netlink: 'syz.6.2479': attribute type 1 has an invalid length. [ 314.446188][T14679] bond7: entered promiscuous mode [ 314.455779][T14679] 8021q: adding VLAN 0 to HW filter on device bond7 [ 314.536478][T14681] 8021q: adding VLAN 0 to HW filter on device bond7 [ 314.543901][T14681] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 314.554580][T14681] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 314.580894][T14681] bond7: (slave wireguard0): making interface the new active one [ 314.592493][T14681] wireguard0: entered promiscuous mode [ 314.600290][T14681] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 314.744005][T14679] bond7 (unregistering): (slave wireguard0): Releasing backup interface [ 314.752984][T14679] wireguard0: left promiscuous mode [ 314.767452][T14679] bond7 (unregistering): Released all slaves [ 315.115216][T14716] sch_fq: defrate 0 ignored. [ 315.186016][T14726] netlink: 'syz.1.2492': attribute type 22 has an invalid length. [ 315.207600][ T60] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 315.226403][T14726] netlink: 'syz.1.2492': attribute type 22 has an invalid length. [ 315.245810][ T60] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 315.268652][ T60] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 315.295234][ T60] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 316.183888][T14797] nbd: illegal input index -8454144 [ 316.373676][T14804] gre0: left promiscuous mode [ 316.559878][T14804] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 316.909419][T14845] netlink: 'syz.4.2528': attribute type 7 has an invalid length. [ 316.973232][T14845] netlink: 'syz.4.2528': attribute type 7 has an invalid length. [ 317.060565][T14851] tipc: Enabled bearer , priority 0 [ 317.103688][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.111279][T14856] netlink: 'syz.1.2532': attribute type 1 has an invalid length. [ 317.148600][T14851] syzkaller0: entered promiscuous mode [ 317.155148][T14851] syzkaller0: entered allmulticast mode [ 317.161481][T14851] tipc: Resetting bearer [ 317.210334][T14856] 8021q: adding VLAN 0 to HW filter on device bond5 [ 317.222565][T14850] tipc: Resetting bearer [ 318.393530][T14850] tipc: Disabling bearer [ 318.435234][T14870] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 318.520636][T14880] --map-set only usable from mangle table [ 318.616225][T14889] __nla_validate_parse: 18 callbacks suppressed [ 318.616242][T14889] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2543'. [ 318.668831][T14889] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2543'. [ 318.736856][T14895] block nbd2: Unsupported socket: should be TCP or UNIX. [ 318.774238][T14897] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2546'. [ 318.782618][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2547'. [ 318.793160][T14899] mac80211_hwsim hwsim15 ÿ: renamed from wlan1 [ 318.825157][T14897] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2546'. [ 318.836566][T14897] netlink: 'syz.7.2546': attribute type 1 has an invalid length. [ 319.009637][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 319.031174][T14914] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2552'. [ 319.067677][T14914] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2552'. [ 319.292115][T14930] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 319.366772][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2555'. [ 319.501497][T14940] netlink: 71 bytes leftover after parsing attributes in process `syz.5.2557'. [ 319.780531][T14954] netlink: 'syz.4.2561': attribute type 33 has an invalid length. [ 319.794340][T14954] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2561'. [ 320.131496][T14973] smc: net device gre0 applied user defined pnetid SYZ1 [ 320.153304][T14973] smc: net device gre0 erased user defined pnetid SYZ1 [ 320.406871][T14990] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 321.236959][T15036] tipc: Enabled bearer , priority 0 [ 321.245531][T15037] syzkaller0: entered promiscuous mode [ 321.252087][T15037] syzkaller0: entered allmulticast mode [ 321.279390][T15036] tipc: Resetting bearer [ 321.290570][T15035] tipc: Resetting bearer [ 321.308788][T15035] tipc: Disabling bearer [ 321.406449][T15042] syzkaller0: entered promiscuous mode [ 321.412378][T15042] syzkaller0: entered allmulticast mode [ 321.725598][T15055] tipc: Enabling of bearer rejected, failed to enable media [ 322.160753][T15066] team0 (unregistering): Port device team_slave_0 removed [ 322.196077][T15082] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.203331][T15082] bridge0: port 2(bridge_slave_1) entered listening state [ 322.210790][T15082] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.217946][T15082] bridge0: port 1(bridge_slave_0) entered listening state [ 322.246809][T15082] bridge0: entered promiscuous mode [ 325.595154][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.607227][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.615547][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.626500][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.635156][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 325.648634][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.662751][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.674825][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.683085][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.697491][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 325.768594][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.781477][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.796286][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 325.872743][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.885690][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.900638][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 326.027355][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.044097][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.069372][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 326.163514][ T12] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.187408][ T12] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.213383][ T12] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 326.411403][T15258] wg1 speed is unknown, defaulting to 1000 [ 326.561293][ T12] bridge_slave_1: left allmulticast mode [ 326.566994][ T12] bridge_slave_1: left promiscuous mode [ 326.599779][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.630170][ T12] bridge_slave_0: left allmulticast mode [ 326.635845][ T12] bridge_slave_0: left promiscuous mode [ 326.661481][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.905406][T15318] __nla_validate_parse: 39 callbacks suppressed [ 326.905425][T15318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2713'. [ 326.936072][T15320] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2714'. [ 327.286029][ T12] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 327.312430][ T12] bond7 (unregistering): (slave gretap2): Releasing active interface [ 327.729139][ T52] Bluetooth: hci3: command tx timeout [ 328.372109][ T12] bond1 (unregistering): (slave bond2): Releasing backup interface [ 328.383274][ T12] bond2 (unregistering): left promiscuous mode [ 328.392611][ T12] bond1 (unregistering): Released all slaves [ 328.587819][ T12] bond2 (unregistering): Released all slaves [ 328.718195][ T12] bond3 (unregistering): (slave bond4): Releasing backup interface [ 328.727709][ T12] bond3 (unregistering): Released all slaves [ 328.836077][ T12] bond4 (unregistering): Released all slaves [ 328.945575][ T12] bond5 (unregistering): Released all slaves [ 328.964176][ T12] bond0 (unregistering): Released all slaves [ 328.984360][ T12] bond6 (unregistering): Released all slaves [ 329.096561][ T12] bond7 (unregistering): Released all slaves [ 329.396630][ T12] tipc: Left network mode [ 329.455495][ T12] IPVS: stopping master sync thread 11238 ... [ 329.612580][T15258] chnl_net:caif_netlink_parms(): no params data found [ 329.811648][ T52] Bluetooth: hci3: command tx timeout [ 330.038661][T15426] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.052525][T15426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 330.077084][T15429] netlink: 296 bytes leftover after parsing attributes in process `syz.5.2752'. [ 330.200863][T15431] ip6tnl2: entered promiscuous mode [ 330.228614][T15431] ip6tnl2: entered allmulticast mode [ 330.258217][T15258] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.302559][T15258] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.327025][T15258] bridge_slave_0: entered allmulticast mode [ 330.371021][T15258] bridge_slave_0: entered promiscuous mode [ 330.385838][T15258] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.399336][T15258] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.409701][T15258] bridge_slave_1: entered allmulticast mode [ 330.424687][T15258] bridge_slave_1: entered promiscuous mode [ 330.465218][ T12] hsr_slave_0: left promiscuous mode [ 330.484076][ T12] hsr_slave_1: left promiscuous mode [ 330.493934][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.511614][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.533386][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.551125][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.555826][T15449] netlink: 'syz.5.2761': attribute type 1 has an invalid length. [ 330.585297][ T12] veth0_macvtap: left allmulticast mode [ 330.592890][ T12] veth1_macvtap: left promiscuous mode [ 330.598432][ T12] veth0_macvtap: left promiscuous mode [ 330.611272][T15451] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2761'. [ 330.696018][ T12] pimreg (unregistering): left allmulticast mode [ 330.921654][ T12] team0 (unregistering): Port device team_slave_1 removed [ 330.953927][ T12] team0 (unregistering): Port device team_slave_0 removed [ 331.296021][T15449] bond7: entered promiscuous mode [ 331.301580][T15449] 8021q: adding VLAN 0 to HW filter on device bond7 [ 331.309140][T15451] bond7: entered allmulticast mode [ 331.360952][T15457] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2762'. [ 331.373878][T15454] bond7: (slave bridge6): making interface the new active one [ 331.396955][T15454] bridge6: entered promiscuous mode [ 331.416089][T15454] bridge6: entered allmulticast mode [ 331.440784][T15454] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 331.452127][T15462] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2762'. [ 331.502255][T15258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.601066][T15457] bond8: entered promiscuous mode [ 331.607011][T15457] 8021q: adding VLAN 0 to HW filter on device bond8 [ 331.615953][T15462] bond8: entered allmulticast mode [ 331.640332][T15466] bridge0: entered promiscuous mode [ 331.645842][T15466] bridge0: entered allmulticast mode [ 331.663603][T15466] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 331.684008][T15258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.875269][T15486] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 331.893785][ T52] Bluetooth: hci3: command tx timeout [ 331.900245][T15258] team0: Port device team_slave_0 added [ 331.985672][T15258] team0: Port device team_slave_1 added [ 332.166669][T15258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.178666][T15258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.184065][T15502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2780'. [ 332.205065][T15258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.232035][T15258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.282230][T15258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.323847][T15258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.350247][T15514] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2784'. [ 332.386024][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2784'. [ 332.388086][ T12] IPVS: stop unused estimator thread 0... [ 332.466279][T15514] IPv6: sit3: Disabled Multicast RS [ 332.490402][T15514] sit3: entered allmulticast mode [ 332.580854][ T12] Oops: general protection fault, probably for non-canonical address 0xdffffc00000002b3: 0000 [#1] SMP KASAN PTI [ 332.583932][T15258] hsr_slave_0: entered promiscuous mode [ 332.592769][ T12] KASAN: probably user-memory-access in range [0x0000000000001598-0x000000000000159f] [ 332.592789][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 332.592809][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.592821][ T12] Workqueue: netns cleanup_net [ 332.609258][T15258] hsr_slave_1: entered promiscuous mode [ 332.617208][ T12] [ 332.617223][ T12] RIP: 0010:__xfrm_policy_unlink+0x351/0x3a0 [ 332.645876][ T12] Code: bf 07 00 00 00 44 89 f6 e8 fc f3 d2 f7 41 83 fe 06 77 39 e8 b1 ef d2 f7 4e 8d 34 b5 00 00 00 00 4d 01 ee 4c 89 f0 48 c1 e8 03 <0f> b6 04 28 84 c0 75 30 41 ff 0e 48 89 d8 48 83 c4 28 5b 41 5c 41 [ 332.665479][ T12] RSP: 0018:ffffc900001177b8 EFLAGS: 00010202 [ 332.671539][ T12] RAX: 00000000000002b3 RBX: ffff8880278b3000 RCX: ffff88801c2bdac0 [ 332.679498][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 332.687463][ T12] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 332.695424][ T12] R10: dffffc0000000000 R11: fffff52000022ef4 R12: ffff88807e560180 [ 332.703386][ T12] R13: 0000000000001598 R14: 0000000000001598 R15: 0000000000000000 [ 332.711524][ T12] FS: 0000000000000000(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 332.720441][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.727014][ T12] CR2: 00007f1f9e44f727 CR3: 0000000077c5c000 CR4: 00000000003526f0 [ 332.734972][ T12] Call Trace: [ 332.738245][ T12] [ 332.741174][ T12] xfrm_policy_flush+0x2fc/0x530 [ 332.746112][ T12] xfrm_policy_fini+0x43/0x3e0 [ 332.750877][ T12] xfrm_net_exit+0x25/0x70 [ 332.755333][ T12] ops_undo_list+0x49a/0x990 [ 332.759996][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 332.765094][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 332.770286][ T12] cleanup_net+0x4d8/0x820 [ 332.774698][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 332.779620][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.784802][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 332.790507][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 332.796211][ T12] process_scheduled_works+0xae1/0x17b0 [ 332.801753][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.807739][ T12] worker_thread+0x8a0/0xda0 [ 332.812324][ T12] kthread+0x711/0x8a0 [ 332.816383][ T12] ? __pfx_worker_thread+0x10/0x10 [ 332.821481][ T12] ? __pfx_kthread+0x10/0x10 [ 332.826061][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.831243][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.836439][ T12] ? __pfx_kthread+0x10/0x10 [ 332.841016][ T12] ret_from_fork+0x4bc/0x870 [ 332.845591][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 332.850692][ T12] ? __switch_to_asm+0x39/0x70 [ 332.855450][ T12] ? __switch_to_asm+0x33/0x70 [ 332.860200][ T12] ? __pfx_kthread+0x10/0x10 [ 332.864783][ T12] ret_from_fork_asm+0x1a/0x30 [ 332.869542][ T12] [ 332.872547][ T12] Modules linked in: [ 332.876518][ T12] ---[ end trace 0000000000000000 ]--- [ 332.882019][ T12] RIP: 0010:__xfrm_policy_unlink+0x351/0x3a0 [ 332.888012][ T12] Code: bf 07 00 00 00 44 89 f6 e8 fc f3 d2 f7 41 83 fe 06 77 39 e8 b1 ef d2 f7 4e 8d 34 b5 00 00 00 00 4d 01 ee 4c 89 f0 48 c1 e8 03 <0f> b6 04 28 84 c0 75 30 41 ff 0e 48 89 d8 48 83 c4 28 5b 41 5c 41 [ 332.907647][ T12] RSP: 0018:ffffc900001177b8 EFLAGS: 00010202 [ 332.913739][ T12] RAX: 00000000000002b3 RBX: ffff8880278b3000 RCX: ffff88801c2bdac0 [ 332.921732][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 332.929746][ T12] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 332.937721][ T12] R10: dffffc0000000000 R11: fffff52000022ef4 R12: ffff88807e560180 [ 332.945706][ T12] R13: 0000000000001598 R14: 0000000000001598 R15: 0000000000000000 [ 332.953691][ T12] FS: 0000000000000000(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 332.962633][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.969236][ T12] CR2: 00007f1f9e44f727 CR3: 0000000077c5c000 CR4: 00000000003526f0 [ 332.977225][ T12] Kernel panic - not syncing: Fatal exception in interrupt [ 332.984661][ T12] Kernel Offset: disabled [ 332.988968][ T12] Rebooting in 86400 seconds..