last executing test programs: 9.38565697s ago: executing program 2 (id=3277): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000100000000000200000f8ffffffffffffff0008000000", @ANYRES32=r0, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) 8.495325938s ago: executing program 2 (id=3280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000098500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10) 8.209315696s ago: executing program 2 (id=3283): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200000038000480340001800900010068617368000000002400028008000540000000070800074000000001080005400000532808000340000000900900010073797a30000000000900020073797a3200000000050007"], 0x94}}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x47}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) socket$kcm(0x21, 0x2, 0x2) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 7.800779778s ago: executing program 2 (id=3289): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002300)=""/3, 0x3}, {&(0x7f0000002340)=""/252, 0xfc}], 0x2}, 0x7}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r1) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r2, 0x5a5, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.646233891s ago: executing program 2 (id=3298): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) unshare(0x26020480) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x6, 0x4, 0xfffffffffffffffd, &(0x7f0000000000)) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r2, r0, 0x4, r0}, 0x10) 6.512828329s ago: executing program 2 (id=3299): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) unshare(0x8040480) (async) unshare(0x8040480) listen(r1, 0x802) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x1d, &(0x7f0000000940)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x1d, &(0x7f0000000940)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.623388237s ago: executing program 3 (id=3315): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="a03f030100008005d25a806c8c6394f90324fc60100000000a0002", 0x1b}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x2, {0x0, 0xf0, 0x2}, {0x1, 0x1}, 0xfd}], 0x20) (async) r3 = socket(0x10, 0x803, 0x0) (async) unshare(0x22020600) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2e, &(0x7f0000000040)=0xf49d, 0x4) (async) getsockopt(r3, 0x1, 0x13, &(0x7f0000000140)=""/63, &(0x7f00000001c0)=0x3f) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r5) (async, rerun: 64) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') (rerun: 64) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r6, 0x700, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x2b}, @GTPA_FAMILY={0x5, 0xd, 0x2c}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x1e}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000804) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, 0x0, 0x0, 0x41) (async) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async, rerun: 64) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={&(0x7f0000f4dff4), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x54, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@migrate={0x4}]}, 0x54}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x81133573713dfe30}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b2b, &(0x7f0000000040)={'team0\x00', @random="010000000002"}) 4.473665769s ago: executing program 3 (id=3317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xfff3}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "7c1afa6b76001fe2156a0a7c8e9c7397"}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @empty}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xfff3}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "7c1afa6b76001fe2156a0a7c8e9c7397"}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @empty}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3.744617013s ago: executing program 3 (id=3323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000200000f8500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10) 3.567953299s ago: executing program 3 (id=3327): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r2, &(0x7f0000000300)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1f8b, 0x1}, 0xe) close(r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), 0x0}, 0x20) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400060007000000ffffffff00020000070a00000800020000000000"], 0x34}}, 0x0) sendto$packet(r0, &(0x7f0000000040)="c51d37314d6bc8ace323d9168840cb", 0xf, 0x14000000, &(0x7f0000000140)={0x11, 0xc, r1, 0x1, 0xff, 0x6, @local}, 0x14) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x14, 0x601, 0x0, 0x0, {0x29, 0xfa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r9, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0x9e3d206e4ff0beee}, {0xd, 0x6}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x240480c4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000006080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006040)={&(0x7f0000004000)={0x2028, 0x29, 0x2, 0x70bd28, 0x25dfdbfc, {0x8}, [@nested={0x1ffc, 0xfd, 0x0, 0x1, [@generic="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", @generic="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"]}, @nested={0x18, 0xa6, 0x0, 0x1, [@typed={0x14, 0x8a, 0x0, 0x0, @ipv6=@remote}]}]}, 0x2028}, 0x1, 0x0, 0x0, 0x10}, 0x10000) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010002000000000000001200000018000180140002006e657464657673696d30000000000000080006"], 0x34}, 0x1, 0x0, 0x0, 0x20004055}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x54, r12, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x3143}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xc}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x3ff}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x81}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) 3.253679494s ago: executing program 0 (id=3330): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$igmp(0x2, 0x3, 0x2) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r0, 0x4) listen(r0, 0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) unshare(0x8000400) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40010) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={r3, 0x0, 0x1000, 0xf4, &(0x7f0000000700)="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", &(0x7f0000001700)=""/244, 0x400, 0x0, 0xc1, 0x77, &(0x7f0000001800)="9f049cc7e68188d6f71deef84eb3932d3eff6b00b4f45fa4eb8f9b661e1ded3ed8b8416a4eddf3ddc9cb7a46d7266f7c16d1195122736d2c8686bb1d12d062f90ecf3f39b081a00f51d70f09f96216a3cbc198f2c3e59f44bd08e1ad8f1a811bea38203137df7be759c9cd409d9ef90b0797d6087ff428a11ffa37b45a2c17ae0a5c6c59748124d98d2fc0aa307c54a9d3b2e5804f6b24654a5a916e57ffcaa1a1e93865aea458915d3133a6bed956220352efebecdbb7c41a656c69f743058a4f", &(0x7f0000001900)="9ab67183ec4445e10fc9aab33cfe49171ecd9dc9d5e3fad60a871fb342d41af9c556c79433751dc9ff93329408d0df2a20c321fa0fb8710423c09f5c116ee93b0e616842c0c01a6f7ce34e256bbbb19c5252b23c6a21f23d4b11da35772e326c5f9dfebb49f0658b94074dfc9eaeb88376cf6bfdf3f46b"}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4b0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0xc011) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500452c00004000002f9078ac1e0001e0000001000065580018907804000000e5ffffff86ddffff00000000"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.939425377s ago: executing program 4 (id=3332): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000500)={r2, 0xb8, "645b7cba297a86ff5329338f72df215d45e2d4f23ac6aa14a07cbadfa0cb55def5da2d40ab8805f79041cfb7d3ea9a714e8dbf05939d0bfa7ed99e53879d6c44352a341dc7e171d4967e4e32ebea79b28550481c23ba573abaa88b5de5d82b7a8ef1d489b4c25f5de0f5f736baa252903d3c55de48a98246bf147b50c991176a4c279f642b8b9f33ac329f254d8d678d2ddfa0ac9beaf520f1c7d57c5e29df157744b442701a27f69bfe49733f83b4e8489a73881c15ad43"}, &(0x7f0000000280)=0xc0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r6 = accept(r4, 0x0, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r6}, 0x20) close(r7) recvmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000011c0)="d1", 0x1}], 0x1}, 0x404c0c4) recvmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000140)=0x1, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x21ef}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004945}, 0x40080c0) 2.897291634s ago: executing program 1 (id=3333): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="f4000000000000000000000000006de100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.772503359s ago: executing program 1 (id=3334): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000440)=0x4b0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket(0xa, 0x801, 0x0) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7, r6}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000300", @ANYRES32=r2], 0x34}}, 0x4008000) 2.720586992s ago: executing program 0 (id=3335): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d0000000120067fb27bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="820000007002080008000f00080000001800128008000100736974000c00028006001200", @ANYBLOB="0400140008001d00027f"], 0xd0}, 0x1, 0x8800000000000000, 0x0, 0x4000800}, 0x4800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x50}, 0x8010) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r3) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x400000007}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x400000004}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="030725bd7000000000001f0000001e9febd23f69cf300c4d38acb6b8ddc37c5ac4d92d129475e40873fefcc457115758083509ac53774177eb911e"], 0x14}, 0x1, 0x0, 0x0, 0x2000c094}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1) getsockopt$inet_opts(r8, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xd8\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x44800) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r9, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x4}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004001}, 0x1) 2.656237911s ago: executing program 3 (id=3336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000148500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10) 2.624765509s ago: executing program 0 (id=3337): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0xfffffffd}}) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000080), &(0x7f0000000040)=0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000002eb89f2d9a2374b72effffff000003e4", @ANYRES32=0x0, @ANYBLOB="83000400000000002000128008000100736974001400028006000d000900000008000300e0000001"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x2, 0x4, 0x348, 0xffffffff, 0x1a8, 0x1a8, 0x0, 0xfeffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) 2.593233826s ago: executing program 4 (id=3338): r0 = socket$unix(0x1, 0x5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async) r3 = socket(0x1e, 0x4, 0x0) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) (async, rerun: 32) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) (async) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) (async) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) (async) recvmmsg$unix(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x0, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) readv(r10, &(0x7f0000000780)=[{&(0x7f0000000100)=""/39}, {&(0x7f0000000380)=""/210}, {&(0x7f0000000540)=""/139}, {&(0x7f0000000600)=""/47}, {&(0x7f0000000280)=""/90}, {&(0x7f0000000740)=""/49}], 0x1000000000000149) (async) recvmmsg(r2, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0) (async) preadv(r5, &(0x7f0000003c00)=[{&(0x7f0000001480)=""/255, 0xff}, {&(0x7f00000000c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x5, 0x23a1, 0x1) (async) close(r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async, rerun: 64) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) 2.372510586s ago: executing program 3 (id=3339): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d00200000001ef540574773755e5e48dc7edb27394d97ad76e9d5a0bfc624177363d041a1d277a0385d27eae1b70fb6"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340919128f5db36125c506203ad5c52a0611d0b97b6a01b300cac5718fc85b5ca56cabc6f6b8ff54fcdc7765c0a7c05ed66748ded1a4b362f5357262df3dafd299917bd0bb81c342fae79567abd0d5838ed75d31555b39a3d57decfb1cfa24e4bb22affbf095", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x4c854}, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000200)=0x1, 0x1) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r1], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000978e6a2ae5e62d0e93f7fc62c2f5ca2abfe782ef25bc05ce18fa07bdd256c69512ebc0", @ANYRES16=r6, @ANYBLOB="040026bd7000fddbdf256d000000"], 0x14}}, 0x20008894) bind$inet(r7, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24}, 0x24}}, 0x0) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000800)=""/21, 0x15}], 0x2}}], 0x2, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x13a0}, 0x1, 0x0, 0x0, 0x20000045}, 0xc000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x20000043}, 0x0) 2.35766619s ago: executing program 0 (id=3340): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff03"], 0x82) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdf41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xc3}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x0, 0x0) preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0xffff) write(r4, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000000)={0x6, 'veth0_to_hsr\x00', {0x5}, 0x3}) 2.095309111s ago: executing program 1 (id=3341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0xf27, 0x101, 0x6, 0x2e1, 0x80]}}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x8000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001081c400170db00000000000000", @ANYRES32=0x0, @ANYBLOB="312000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) listen(0xffffffffffffffff, 0x1) (async) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r8 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e1e, @rand_addr=0x64010102}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000180)={r9, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280)={r9, 0x2634}, 0x8) (rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) recvmmsg(r7, &(0x7f0000008380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2140, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000400)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0xb8, @local, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="9e", 0x1}], 0x1}}], 0x2, 0x40090) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.939705028s ago: executing program 1 (id=3342): r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000240)={0x77359400}, 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f00000020c0)={0x1f, 0x3, 0x2}, 0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@typedef={0x4, 0x0, 0x0, 0x8, 0x5}, @typedef={0x3, 0x0, 0x0, 0x8, 0x3}, @union={0x3, 0x5, 0x0, 0x5, 0x0, 0x8000, [{0x3, 0x5, 0x3e55025f}, {0xe, 0x2}, {0xe, 0x2, 0x6}, {0x3, 0x1, 0x10}, {0x7, 0x0, 0x5}]}, @volatile={0xc, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x2e]}}, &(0x7f00000004c0)=""/54, 0x87, 0x36, 0x1, 0x7}, 0x28) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000002140), &(0x7f0000002180)=0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000002100)=0x1, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @loopback}, {0x20000010304}, 0x4, {0x2, 0x4e22, @rand_addr=0x64010102}}) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000021c0)={r5, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001fc0)={0x0, 0x15, &(0x7f00000007c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x7, 0x5, 0x5, 0x8, 0x10}, @exit, @ldst={0x2, 0x1, 0x4, 0x9, 0x8, 0xffffffffffffffff, 0x8}, @alu={0x4, 0x1, 0x3, 0x5, 0xa, 0x1, 0xffffffffffffffff}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcf76}}, @call={0x85, 0x0, 0x0, 0xb4}, @tail_call], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x88, &(0x7f0000000200)=""/136, 0x41100, 0x23, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000580)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xc, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001f40)=[r4, r7, 0xffffffffffffffff], &(0x7f0000001f80)=[{0x4, 0x2, 0x5}, {0x2, 0x4, 0xb, 0x6}], 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300"], 0x98}}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001440)=ANY=[], 0x60}}, 0x4000) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x48000}, 0x20004880) 708.806843ms ago: executing program 4 (id=3343): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="f4000000000000000000000000006de100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 521.527812ms ago: executing program 4 (id=3344): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x10, 0x1, 0x9, 0x7f, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x63, 0x0, 0xa3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast1}}}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r4}, 0x94) (async) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) (async) syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaabb00000000000000fa0000000005000000d30574559f0deeac1f8d21e3d5e67b8179593e6ec9991244f533edde27cd79b1e39b82f588ed29a93571343e567a1d1c421598940b6e4b46ace4f5"], &(0x7f0000000380)={0x0, 0x4, [0x9d, 0xdb8, 0x536, 0xa01]}) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r6, &(0x7f00000002c0), &(0x7f0000000840)=""/165}, 0x20) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x80000000, 0xbd, &(0x7f00000003c0)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000180)=""/220, 0x4a, 0xdc, 0x1}, 0x20) (async) r9 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000180)={r0, r8}) (async) r10 = socket$igmp6(0xa, 0x3, 0x2) shutdown(r10, 0x0) recvmmsg(r10, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x40010000, 0x0) (async) sendmmsg$inet(r9, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="89", 0x1}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) 511.119088ms ago: executing program 1 (id=3345): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffbff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x4, 0x1, 0x2, 0x4, 0x8, 0x40, 0x4}]}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x1a, r1, 0x8, &(0x7f0000000640)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x10, 0x101, 0x5d6e}, 0x10, 0x2b38, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000006c0)=[{0x4, 0x5, 0x5, 0x4}], 0x10, 0x8}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 32) r4 = accept4(r3, 0x0, 0x0, 0x0) (rerun: 32) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0x3, 0xffe0}, {0x9}}}, 0x24}}, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0) (async, rerun: 32) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r7, 0x8463}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) close(r6) (async, rerun: 64) close(r5) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000400)={{0x2, 0x4e22, @empty}, {0x306, @random="e2bd0cb261a9"}, 0x46, {0x2, 0x4e21, @loopback}, 'pim6reg\x00'}) (async) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000ff0600000000000014000500fc00000000000000000000000000009b0000000000010108000c0003000000080008000000000014000500fe80c22a3459c9c800a13f30d46a3b554e9e000000000000000000000000003d080008008c1e0101b7de77399677c44f54bb104a33e22e00"/129], 0x68}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000004) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r5, 0x58, &(0x7f00000026c0)}, 0x10) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, 0x43, 0x107, 0xffffdffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x58}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x14c, 0x0, 0x1, [@nested={0x8, 0x9a, 0x0, 0x1, [@typed={0x4, 0x105}]}]}]}]}, 0x28}}, 0xc000) r11 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r11, 0x0, 0x0) 336.232475ms ago: executing program 0 (id=3346): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x40, r1, 0x821, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x3, @mcast1, 0xfffffc35}, 0x1c, &(0x7f0000003780)=[{&(0x7f0000001600)="64155361f1d0f2e3c41cae7c1339f97299f9a285cf3d774fd740352e8e4c60294e0d08144167e78e4923fb522db94598881adaa212ac3e652837ec9d3409afa1d81ad91c1c92bbe1b9cad346674bc019db46db63e393c22bb5860e51e632", 0x5e}, {&(0x7f0000001680)="727959c8b479b72d3ace7cd8f78d75e45e995fa1447da053dc82d2a5ebfc9e33eb304ea41ec4efccb045a401e4fcc606f0465574ce5b1e9bee88531f3120c1336b51657f05769d0bfca1811602a92ed08683537c61c7b1abfe18e5da231d2f5dc372c4eed1d1a5b35f487f6ca7", 0x6d}, {&(0x7f0000002600)="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", 0x1000}, {&(0x7f0000003600)="62df12c34c8cae6f90c74b86d479faaaee79cccb83f5ace3f9db4622af355804132ddf135a8ce0ba395d3c0c0cc9426d633218e7cc53cdcb67762c9a4e162869eb76dd9d41b2515a9eec0ed329c8cc4cb87e1f89e1bcd1791ba71518c9b830b118ba16ada0a8581eb9b195cb9219ca488b16dc2b3c3c92d57a7f3a64cd7fbfd257d26478806e8b30e5d74d96f84a399f6dbfb66e44ea61e81be7be21d7cf586b44fe3c0a0e819a1759781477b5d097322324326b37464be4e99d3dce22c02fe074117915850b6d5fd9", 0xc9}, {&(0x7f0000003700)="6f1a6da803ee3c30f2c125036271fdeadeb6856b3a24a80ea25c75829103fdf554a9f512b0c8c2bcbeba5ead8c4e532591929912685eb072333b0168767c304fe301e28c948114ccb06250e7321f764a9f78694b6c9c90020ddefd9ab673f1be392038f6e8ef004cc46bc55519c8e6d4950ee48075d963ae9452e8", 0x7b}], 0x5, &(0x7f0000003c40)=[@hopopts={{0x108, 0x29, 0x36, {0x62, 0x1d, '\x00', [@hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @loopback}, @generic={0x6, 0xc2, "c0e780063693b575fe0c29dee92453f8d5294adf519ab30249010b6d4484560fc782e45213bfd3eb6ad0396a5a3d1d91c6d106d9fb5ab68bd0ee62f7da7d9cb3703b5128004e94e608169f6cd29b326c1453dcbe97d4bb97d2a7fa199e26a524ca08603749bb04bdfa2da1e70a745cfb109d1c56c285e22e009fadeb25ec70b4e31b3ed9e0ba495b9e38264a3c2caf4549a9c4c5e5d81f32cc030b10844b4e1dc16be15c7a33b43059d67a666ace77dd2f1673866c963af4d681c4872a9cf1cf37d2"}, @pad1, @enc_lim={0x4, 0x1, 0x1c}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @dstopts={{0x28, 0x29, 0x37, {0x6, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @jumbo={0xc2, 0x4, 0x58ac}]}}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x5e, 0x8, '\x00', [@pad1, @generic={0xc, 0x0, "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"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x7, 0x5, [0x9, 0x9]}}, @pad1, @ra={0x5, 0x2, 0xff50}, @jumbo={0xc2, 0x4, 0xbf0}, @hao={0xc9, 0x10, @mcast1}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x1d, 0x10, 0x0, 0xad, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @empty]}}}, @dstopts_2292={{0x118, 0x29, 0x4, {0x11, 0x20, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @pad1, @generic={0x6, 0xef, "1394761475f74050d0a720216f42dcbae3f5efbb3b0550ba31858438bce5bbee8288fd8f4eff34bc87540e085e037e9eb4eec202f0e7a0cde35c8325fb001fb5f38f058ee66bfb7b3ec017a439f1380c108b8500811b4561355aff5ba60b0c3ce0d610abe97b865f37c51397f6b8835a74f37a3b6c8216efe2632fd7534b88a48219736ee39be8630020bf24daf46463befdb427c07dbb2af4771d9e4a79c8e8debd3116a4a2cfedeca958ee7731e1dc07d6728ad50ff5a9bb9879f6e345f4c147c22c780a2a6105391e03507ee69e05d3abbf7a1a90dd0eae8dd7db82bbec82dbf6eb9dc5efa4118e0c98e2fe6f68"}, @jumbo={0xc2, 0x4, 0x7}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x21, 0x3, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0xfffffffffffffcd0, @private0}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x4, 0x0, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x3d8}}], 0x1, 0x44880) shutdown(r2, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b54c2be7983a4e4e11a8906105f36f652d7135bda20b939abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff9719993882242846b", 0x49}, {&(0x7f0000000500)="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", 0x108}, {&(0x7f00000007c0)="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", 0xffffff50}], 0x4}}], 0x1, 0x4044805) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) r7 = socket(0x2d, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000440)={0x2d, 0x2, 0x7ffe}, 0xc) splice(r3, 0x0, r6, 0x0, 0x8000000000025a5, 0x0) shutdown(r5, 0x0) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 308.66074ms ago: executing program 4 (id=3347): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d0000000120067fb27bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="820000007002080008000f00080000001800128008000100736974000c00028006001200", @ANYBLOB="0400140008001d00027f"], 0xd0}, 0x1, 0xa6ffffffffffffff, 0x0, 0x4000800}, 0x4800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x50}, 0x8010) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r3) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x400000007}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x400000004}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="030725bd7000000000001f0000001e9febd23f69cf300c4d38acb6b8ddc37c5ac4d92d129475e40873fefcc457115758083509ac53774177eb911e"], 0x14}, 0x1, 0x0, 0x0, 0x2000c094}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1) getsockopt$inet_opts(r8, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xd8\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x44800) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r9, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x4}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004001}, 0x1) 305.686546ms ago: executing program 1 (id=3348): socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket(0x10, 0x80003, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f0000000000), 0x0) (async) close(0x3) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) r4 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$XFS_IOC_SWAPEXT(r2, 0xc0c0586d, &(0x7f0000000280)={0x0, r2, r4, 0x5, 0xf, '\x00', {0xffffffff, 0x7, 0x8, 0x8, 0xabb4, 0xb391, 0x5, 0x7, {0xfffffffffffffffd, 0x40}, {0x4, 0x5}, {0x6, 0x1}, 0x7fffffffffffffff, 0x5, 0x1, 0xfffffffe, 0x7, 0x9, 0x7f, 0x4, 0x0, 0xb, '\x00', 0x80, 0x5, 0x40, 0x9a}}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) (async) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0xc8, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) (async) recvmmsg(r7, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xa8}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f00000018c0)=""/4122, 0x101a}, {&(0x7f0000000080)=""/112, 0x70}, {&(0x7f0000000240)=""/86, 0x56}, {&(0x7f0000000000)=""/71, 0x47}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/3, 0x3}], 0x6}, 0x7}], 0x2, 0x2042, 0x0) (async) socket$netlink(0x10, 0x3, 0x8) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x429, &(0x7f00000017c0)=ANY=[@ANYBLOB="aaaaaaaaaa2faaaaaaaaaaaa88a82e008100480086dd65c1c11803eb3a0100000000000000000000ffff64010101fe8000000000000000000000000000bb621700000000000004018800010000010007180000000304068000040000000000000002000000000000000401070401020738000000020c76f7ff01000000000000000600000000000000060000000000000001000000010000009400000000000000a3000000000000007f4fe5c8148fa0a759b14fd14cfb992103661622d55719ae4f9da216cdb9e3c607e9505356ae2dbb65a91fd1b32ad85d7d6bf6ba16ecac7c65c4be0bd1af3c57195fef5da4396508ec88032b5d5ff1bc0f0502c0362f1004080c08ff7ffe8000000000000000000000000000bbfe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000001fc020000000000000000000000000001fc02000000000000000000000000000100000000000000000000000000000001fe80000000000000000000000000003901020000000000000001000104000000000101000105000000000000000000005e12040901280100fc000000000000000000000000000001fc000000000000000000000000000001fc000000000000000000000000000001fe800000000000000000000000000036fc020000000000000000000000000000ff020000000000000000000000000001fe880000000000000000000000000001fc010000000000000000000000000001fe8800000000000000000000000000010012040904400100fe8000000000000000000000000000bbfe800000000000000000000000000016ff02000000000000000000000000000100000000000000fe80000000000000000007000000000000000000000000000000ffffac14142efc010000000000000000000000000000ff01000000000000000000000000000100000000000000000000ffffac1414aa3201000000000000c20400040400010600000000000000000206040301207f00fc020000000000000000000000000001fe800000000000000000000000000019200100000000000000000000000000006704040207080008fe8000000000000000000000000000bbff010000000000000000000000000001020a000000000000c91000000000000000000000ffffe0000001000100061ac4003edd32e1a7d6a418712cee876390c986d81175ae645f162401010007180000000304d3060003000000000000001f03000000000000000100000000000000006c0007396600000080009078007f399a68cd7def99bed079b35d8b1e3ee91929a09d17cc079dcd5641601cd6b174fa0e82b7855e59a59c7536d486048e9ccbae1f8c92cb9169402a04e6bc32b1127842b8c2fa1524ee570b2b8ba77bc6953637f16662fb05d2d3215cef228d622fd9e379cca02cea03ac6242483e000000000000000000ee85963a364791428ca4eec547a5b46d2c269b5618117f82b74738ed8f84ebb6fbf2f4ca264d5fd3abb55a844c897fd34234931ea0acb65251e3c7f725e5d646f2480740d57d6c97fd82bc08aec4ed5520516583c92c3e2aec95603e321ebabdaa3b45ebcb4021c5b2f2494c1f987b2885a14274ba63af12d292343207e615760a26e2ac74173dd676190efc86073a5fd25c0707b3736339"], 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x100, 0x2, 0x2, 0x0, 0x7f, 0x6}, 0x20) 32.41752ms ago: executing program 4 (id=3349): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) (async) mmap(&(0x7f0000f96000/0x4000)=nil, 0x4000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102385, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r4, 0x10c, 0x9, &(0x7f00000001c0)=0xf, 0x4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x90) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x4004000) r7 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5000000}, [@ldst={0x2, 0x1, 0x2, 0x4, 0xa, 0x58}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}]}, &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r8, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa001, 0x0) 0s ago: executing program 0 (id=3350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5, 0xfffffffc, 0xfffffffe, 0x3, 0x18000, 0x9, 0x3c8, 0x9}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0x400, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x8, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xa, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045090}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdba}, 0xb6) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000003017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) kernel console output (not intermixed with test programs): __pfx_proc_fail_nth_read+0x10/0x10 [ 337.942045][T14405] ? rw_verify_area+0x24a/0x4c0 [ 337.942070][T14405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 337.942090][T14405] vfs_read+0x213/0xa80 [ 337.942122][T14405] ? __pfx___mutex_lock+0x10/0x10 [ 337.942145][T14405] ? __pfx_vfs_read+0x10/0x10 [ 337.942170][T14405] ? __fget_files+0x2a/0x420 [ 337.942194][T14405] ? __fget_files+0x3a2/0x420 [ 337.942213][T14405] ? __fget_files+0x2a/0x420 [ 337.942242][T14405] ksys_read+0x150/0x270 [ 337.942268][T14405] ? __pfx_ksys_read+0x10/0x10 [ 337.942299][T14405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.942318][T14405] do_syscall_64+0x174/0x580 [ 337.942336][T14405] ? trace_irq_disable+0x3b/0x140 [ 337.942361][T14405] ? clear_bhb_loop+0x40/0x90 [ 337.942391][T14405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.942408][T14405] RIP: 0033:0x7fd69b95d68e [ 337.942425][T14405] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 337.942440][T14405] RSP: 002b:00007fd69c934fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 337.942459][T14405] RAX: ffffffffffffffda RBX: 00007fd69c9356c0 RCX: 00007fd69b95d68e [ 337.942471][T14405] RDX: 000000000000000f RSI: 00007fd69c9350a0 RDI: 0000000000000005 [ 337.942482][T14405] RBP: 00007fd69c935090 R08: 0000000000000000 R09: 0000000000000000 [ 337.942493][T14405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.942503][T14405] R13: 00007fd69bc16038 R14: 00007fd69bc15fa0 R15: 00007ffe249ab2a8 [ 337.942530][T14405] [ 338.182552][T14407] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2140'. [ 338.207949][T14407] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2140'. [ 338.255776][T14407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2140'. [ 338.696478][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2148'. [ 338.838064][T14430] sch_fq: defrate 4294967293 ignored. [ 338.886806][T14443] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 338.921018][T14445] team_slave_1: entered promiscuous mode [ 339.073370][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2150'. [ 339.129086][T14452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2150'. [ 339.210286][T14452] netlink: 'syz.3.2150': attribute type 19 has an invalid length. [ 339.277152][T14457] bond10: entered allmulticast mode [ 339.283427][T14457] 8021q: adding VLAN 0 to HW filter on device bond10 [ 339.306324][T14460] tipc: Enabled bearer , priority 0 [ 339.342973][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2154'. [ 339.382082][T14460] syzkaller0: entered promiscuous mode [ 339.388146][T14460] syzkaller0: entered allmulticast mode [ 339.394733][T14460] tipc: Resetting bearer [ 339.408693][T14465] netlink: 476 bytes leftover after parsing attributes in process `syz.4.2154'. [ 339.447715][T14465] netlink: 476 bytes leftover after parsing attributes in process `syz.4.2154'. [ 339.475167][T14459] tipc: Resetting bearer [ 341.745550][T14490] netlink: 'syz.3.2157': attribute type 1 has an invalid length. [ 343.595930][T14459] tipc: Disabling bearer [ 343.614885][ T10] tipc: Node number set to 1215012749 [ 343.694992][T14490] 8021q: adding VLAN 0 to HW filter on device bond11 [ 343.732150][T14492] bond11: (slave veth11): Enslaving as an active interface with a down link [ 343.773927][T14495] bond11: (slave dummy0): making interface the new active one [ 343.784560][T14495] dummy0: entered promiscuous mode [ 343.790264][T14495] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 343.896112][T14505] netlink: 'syz.0.2160': attribute type 1 has an invalid length. [ 343.921486][T14508] netlink: 'syz.4.2161': attribute type 1 has an invalid length. [ 343.950491][T14508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2161'. [ 343.962196][T14505] 8021q: adding VLAN 0 to HW filter on device bond11 [ 344.058144][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2163'. [ 344.068603][T14512] bond11: (slave geneve2): making interface the new active one [ 344.085801][T14512] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 344.269833][T14527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.311246][T14527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2166'. [ 344.323149][T14532] xt_bpf: check failed: parse error [ 344.801836][T14549] openvswitch: netlink: IP tunnel dst address not specified [ 344.971982][T14556] syz_tun: entered allmulticast mode [ 345.089949][T14560] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2178'. [ 345.108798][T14562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2179'. [ 345.119428][T14554] syz_tun: left allmulticast mode [ 345.423259][T14574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2182'. [ 345.510462][T14580] netlink: 'syz.1.2183': attribute type 2 has an invalid length. [ 345.551420][T14580] netlink: 'syz.1.2183': attribute type 1 has an invalid length. [ 345.583677][T14580] netlink: 'syz.1.2183': attribute type 2 has an invalid length. [ 345.657377][T14580] netlink: 'syz.1.2183': attribute type 2 has an invalid length. [ 345.671505][T14580] netlink: 'syz.1.2183': attribute type 1 has an invalid length. [ 345.694048][T14580] netlink: 'syz.1.2183': attribute type 2 has an invalid length. [ 345.735873][T14589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2187'. [ 345.767700][T14589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2187'. [ 345.980773][T14599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2189'. [ 346.016696][T14599] bond12: entered promiscuous mode [ 346.024209][T14599] 8021q: adding VLAN 0 to HW filter on device bond12 [ 346.076259][T14599] block nbd0: Unsupported socket: should be TCP or UNIX. [ 346.314721][T14604] netlink: 'syz.3.2190': attribute type 1 has an invalid length. [ 346.333248][T14604] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.2190'. [ 346.582528][T14613] xt_TCPMSS: Only works on TCP SYN packets [ 346.966153][T14622] pimreg: left allmulticast mode [ 347.602386][T14648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.864789][T14703] vlan3: entered promiscuous mode [ 348.877223][T14703] veth0: entered promiscuous mode [ 349.231202][T14712] netlink: 'syz.2.2226': attribute type 1 has an invalid length. [ 349.245716][T14712] __nla_validate_parse: 14 callbacks suppressed [ 349.245813][T14712] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2226'. [ 349.262728][T14712] netlink: 'syz.2.2226': attribute type 1 has an invalid length. [ 349.270876][T14712] netlink: 'syz.2.2226': attribute type 8 has an invalid length. [ 349.279734][T14712] netlink: 582 bytes leftover after parsing attributes in process `syz.2.2226'. [ 349.292610][T14721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2229'. [ 349.309703][T14712] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2226'. [ 349.319363][T14721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2229'. [ 349.846294][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 349.875905][T14744] tipc: Enabling not permitted [ 349.895354][T14744] tipc: Enabling of bearer rejected, failed to enable media [ 350.013289][T14759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2241'. [ 350.025360][T14759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2241'. [ 350.216568][T14764] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2243'. [ 350.277444][T14764] netlink: 'syz.4.2243': attribute type 11 has an invalid length. [ 350.324264][T14769] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2246'. [ 350.520338][T14782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.210559][T14811] netlink: 'syz.3.2258': attribute type 10 has an invalid length. [ 351.263209][T14815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.613684][T14826] netlink: 'syz.3.2259': attribute type 10 has an invalid length. [ 352.388360][T14840] sctp: [Deprecated]: syz.2.2260 (pid 14840) Use of int in max_burst socket option deprecated. [ 352.388360][T14840] Use struct sctp_assoc_value instead [ 353.350233][T14879] syzkaller0: entered promiscuous mode [ 353.367176][T14879] syzkaller0: entered allmulticast mode [ 353.721630][T14889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.951557][T14898] netlink: 'syz.4.2276': attribute type 2 has an invalid length. [ 353.984082][T14898] netlink: 'syz.4.2276': attribute type 8 has an invalid length. [ 354.053405][T14898] netlink: 'syz.4.2276': attribute type 2 has an invalid length. [ 354.073397][T14898] netlink: 'syz.4.2276': attribute type 8 has an invalid length. [ 354.476161][T14922] pim6reg: entered allmulticast mode [ 354.842639][ T1114] dummy0: left promiscuous mode [ 354.852833][T14939] netlink: 'syz.4.2285': attribute type 2 has an invalid length. [ 354.915215][T14942] __nla_validate_parse: 9 callbacks suppressed [ 354.915232][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2286'. [ 355.843152][T14997] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2298'. [ 355.883185][T14997] netlink: 'syz.1.2298': attribute type 30 has an invalid length. [ 355.969553][T15003] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2299'. [ 355.973769][T14997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2298'. [ 356.122927][T15005] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2300'. [ 356.495389][T15011] 8021q: adding VLAN 0 to HW filter on device bond14 [ 356.793274][T15026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2304'. [ 357.252057][T15045] netlink: 'syz.4.2308': attribute type 3 has an invalid length. [ 357.408099][T15055] trusted_key: syz.0.2310 sent an empty control message without MSG_MORE. [ 357.467967][T15055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2310'. [ 357.517149][T15062] netlink: 'syz.4.2311': attribute type 1 has an invalid length. [ 357.655210][T15065] bond14: (slave geneve2): making interface the new active one [ 357.669739][T15065] bond14: (slave geneve2): Enslaving as an active interface with an up link [ 357.688123][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 357.700939][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 357.751563][T15062] bond14 (unregistering): (slave geneve2): Releasing active interface [ 357.785671][T15062] bond14 (unregistering): Released all slaves [ 357.839506][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 357.850951][T15073] netlink: 'syz.1.2313': attribute type 4 has an invalid length. [ 357.889899][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 357.902625][T15070] netlink: 'syz.1.2313': attribute type 4 has an invalid length. [ 358.680985][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2321'. [ 358.725439][T15104] netlink: 356 bytes leftover after parsing attributes in process `syz.0.2321'. [ 358.741186][T15111] ipt_REJECT: TCP_RESET invalid for non-tcp [ 358.906194][T15114] lo speed is unknown, defaulting to 1000 [ 359.813530][T15130] lo speed is unknown, defaulting to 1000 [ 360.021876][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2338'. [ 360.393124][T15170] netlink: 'syz.3.2340': attribute type 7 has an invalid length. [ 360.435455][T15170] : entered promiscuous mode [ 360.462811][T15151] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 360.773796][T15175] syzkaller0: left promiscuous mode [ 360.789044][T15175] syzkaller0: left allmulticast mode [ 361.561376][T15197] netlink: 'syz.3.2348': attribute type 3 has an invalid length. [ 361.596653][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2347'. [ 361.602307][T15200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2349'. [ 361.977924][T15216] bridge0: port 3(vlan6) entered blocking state [ 361.984836][T15216] bridge0: port 3(vlan6) entered disabled state [ 361.992827][T15216] vlan6: entered allmulticast mode [ 361.998292][T15216] geneve0: entered allmulticast mode [ 362.007612][T15216] vlan6: entered promiscuous mode [ 362.013309][T15216] geneve0: entered promiscuous mode [ 362.089733][T15213] infiniband syz0: set active [ 362.094802][T15213] infiniband syz0: added ipvlan0 [ 362.110944][T15213] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 362.126292][T15213] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 362.143896][T15213] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 362.174212][T15213] RDS/IB: syz0: added [ 362.179656][T15213] smc: adding ib device syz0 with port count 1 [ 362.186478][T15213] smc: ib device syz0 port 1 has no pnetid [ 362.294731][T15194] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 362.353699][ T30] audit: type=1804 audit(1781626618.555:10): pid=15221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2353" name="/newroot/487/cgroup.controllers" dev="tmpfs" ino=2498 res=1 errno=0 [ 362.407809][ T30] audit: type=1800 audit(1781626618.555:11): pid=15221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2353" name="cgroup.controllers" dev="tmpfs" ino=2498 res=0 errno=0 [ 362.507974][T15231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2355'. [ 362.516594][T15226] bond13: Unable to set up delay as MII monitoring is disabled [ 362.536049][T15226] bond13 (unregistering): Released all slaves [ 362.599115][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2356'. [ 362.691238][T15235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2357'. [ 363.038297][T15249] xt_TCPMSS: Only works on TCP SYN packets [ 363.099200][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2361'. [ 363.121544][T15250] lo: entered allmulticast mode [ 363.128075][T15250] tunl0: entered allmulticast mode [ 363.141793][T15250] gre0: entered allmulticast mode [ 363.153008][T15250] gretap0: entered allmulticast mode [ 363.171762][T15250] erspan0: entered allmulticast mode [ 363.177347][T15250] ip_vti0: entered allmulticast mode [ 363.191524][T15250] ip6_vti0: entered allmulticast mode [ 363.202204][T15250] sit0: entered allmulticast mode [ 363.221549][T15250] ip6tnl0: entered allmulticast mode [ 363.227088][T15250] ip6gre0: entered allmulticast mode [ 363.241544][T15250] syz_tun: entered allmulticast mode [ 363.248523][T15250] ip6gretap0: entered allmulticast mode [ 363.262460][T15250] vcan0: entered allmulticast mode [ 363.268017][T15250] dummy0: left promiscuous mode [ 363.273729][T15250] nlmon0: entered allmulticast mode [ 363.279151][T15250] batadv0: entered allmulticast mode [ 363.284775][T15250] veth0: entered allmulticast mode [ 363.290111][T15250] veth1: entered allmulticast mode [ 363.311605][T15250] wg0: entered allmulticast mode [ 363.321832][T15250] wg1: entered allmulticast mode [ 363.331539][T15250] wg2: entered allmulticast mode [ 363.341696][T15250] veth0_to_bridge: entered allmulticast mode [ 363.361611][T15250] bridge_slave_0: entered allmulticast mode [ 363.369204][T15250] veth1_to_bridge: entered allmulticast mode [ 363.381862][T15250] bridge_slave_1: entered allmulticast mode [ 363.401659][T15250] veth0_to_bond: entered allmulticast mode [ 363.407717][T15250] bond_slave_0: entered allmulticast mode [ 363.421630][T15250] veth1_to_bond: entered allmulticast mode [ 363.431525][T15250] bond_slave_1: entered allmulticast mode [ 363.451521][T15250] veth0_to_team: entered allmulticast mode [ 363.457572][T15250] team_slave_0: entered allmulticast mode [ 363.471782][T15250] veth1_to_team: entered allmulticast mode [ 363.480569][T15250] team_slave_1: left promiscuous mode [ 363.492695][T15250] team_slave_1: entered allmulticast mode [ 363.505168][T15250] veth1_to_batadv: entered allmulticast mode [ 363.518534][T15250] batadv_slave_1: entered allmulticast mode [ 363.531914][T15250] xfrm0: entered allmulticast mode [ 363.541688][T15250] veth0_to_hsr: entered allmulticast mode [ 363.549636][T15250] hsr_slave_0: entered allmulticast mode [ 363.556100][T15250] hsr0: entered allmulticast mode [ 363.562626][T15250] veth1_virt_wifi: entered allmulticast mode [ 363.569269][T15250] veth0_virt_wifi: entered allmulticast mode [ 363.576138][T15250] virt_wifi0: entered allmulticast mode [ 363.582436][T15250] veth1_vlan: entered allmulticast mode [ 363.588681][T15250] veth0_vlan: entered allmulticast mode [ 363.595892][T15250] vlan0: entered allmulticast mode [ 363.603397][T15250] vlan1: entered allmulticast mode [ 363.618804][T15250] macvlan0: entered allmulticast mode [ 363.626592][T15250] macvlan1: entered allmulticast mode [ 363.633664][T15250] ipvlan0: entered allmulticast mode [ 363.639910][T15250] ipvlan1: entered allmulticast mode [ 363.646774][T15250] veth1_macvtap: entered allmulticast mode [ 363.654488][T15250] veth0_macvtap: entered allmulticast mode [ 363.660992][T15250] macvtap0: entered allmulticast mode [ 363.668613][T15250] macsec0: entered allmulticast mode [ 363.674765][T15250] geneve0: entered allmulticast mode [ 363.701140][T15250] geneve1: entered allmulticast mode [ 363.708196][T15250] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 363.718364][T15250] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 363.727832][T15250] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 363.753330][T15250] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 363.763120][T15250] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 363.771237][T15250] : entered allmulticast mode [ 363.777936][T15250] bridge1: entered allmulticast mode [ 363.793728][T15250] gtp0: entered allmulticast mode [ 363.802648][T15250] bond1: entered allmulticast mode [ 363.812387][T15250] gretap1: entered allmulticast mode [ 363.824248][T15250] bridge2: entered allmulticast mode [ 363.830801][T15250] bridge3: entered allmulticast mode [ 363.837631][T15250] bridge4: entered allmulticast mode [ 363.844449][T15250] bond2: entered allmulticast mode [ 363.850343][T15250] : entered allmulticast mode [ 363.859229][T15250] macvtap1: entered allmulticast mode [ 363.909186][T15250] bridge5: entered allmulticast mode [ 363.924518][T15250] erspan1: entered allmulticast mode [ 363.940841][T15250] wireguard0: entered allmulticast mode [ 363.954019][T15250] bridge6: entered allmulticast mode [ 363.969813][T15250] mac80211_hwsim hwsim20 wlan2: entered allmulticast mode [ 363.987391][T15250] team1: left promiscuous mode [ 364.003161][T15250] mac80211_hwsim hwsim21 wlan3: entered allmulticast mode [ 364.022181][T15250] bridge7: entered allmulticast mode [ 364.028333][T15250] ipip0: entered allmulticast mode [ 364.039921][T15250] bridge8: entered allmulticast mode [ 364.054673][T15250] bridge9: entered allmulticast mode [ 364.065853][T15250] bond3: left promiscuous mode [ 364.081062][T15250] bond3: entered allmulticast mode [ 364.088407][T15250] bridge10: entered allmulticast mode [ 364.095926][T15269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2365'. [ 364.107634][T15250] bond4: left promiscuous mode [ 364.117132][T15250] bond4: entered allmulticast mode [ 364.127891][T15250] ip6gre1: entered allmulticast mode [ 364.139331][T15250] bridge11: entered allmulticast mode [ 364.148187][T15250] veth2: entered allmulticast mode [ 364.155804][T15250] veth3: entered allmulticast mode [ 364.174170][T15250] bridge12: entered allmulticast mode [ 364.180389][T15250] bond5: entered allmulticast mode [ 364.186208][T15250] bond6: left promiscuous mode [ 364.191038][T15250] bond6: entered allmulticast mode [ 364.203314][T15250] ip6gre2: entered allmulticast mode [ 364.212541][T15250] bond7: left promiscuous mode [ 364.221846][T15250] bond7: entered allmulticast mode [ 364.230467][T15250] bond8: left promiscuous mode [ 364.240724][T15250] bond8: entered allmulticast mode [ 364.252392][T15250] mac80211_hwsim hwsim10 veth1_to_bod: entered allmulticast mode [ 364.270728][T15250] macsec1: entered allmulticast mode [ 364.276303][T15250] sit1: entered allmulticast mode [ 364.292593][T15250] tun0: entered allmulticast mode [ 364.299495][T15250] bond9: entered allmulticast mode [ 364.309611][T15250] bond10: entered allmulticast mode [ 364.322804][T15250] veth4: entered allmulticast mode [ 364.338587][T15250] veth5: entered allmulticast mode [ 364.346539][T15250] ip6tnl1: entered allmulticast mode [ 364.361555][T15250] bond11: entered allmulticast mode [ 364.368205][T15250] bond12: left promiscuous mode [ 364.380153][T15250] bond12: entered allmulticast mode [ 364.392902][T15250] ip6erspan0: entered allmulticast mode [ 364.406745][T15250] bond13: left promiscuous mode [ 364.418153][T15250] bond13: entered allmulticast mode [ 364.433639][T15250] ipip1: entered allmulticast mode [ 364.445664][T15250] bridge0: entered allmulticast mode [ 364.458385][T15250] geneve2: entered allmulticast mode [ 364.471061][T15250] veth6: entered allmulticast mode [ 364.484532][T15250] veth7: entered allmulticast mode [ 364.549888][T15266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.945124][T15275] lo speed is unknown, defaulting to 1000 [ 364.983826][T15278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2369'. [ 364.993679][T15277] dvmrp0: entered allmulticast mode [ 365.020190][T15280] sctp: [Deprecated]: syz.4.2370 (pid 15280) Use of int in max_burst socket option. [ 365.020190][T15280] Use struct sctp_assoc_value instead [ 365.199120][T15285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2371'. [ 365.321812][T15290] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2372'. [ 365.791428][T15306] tipc: Enabled bearer , priority 0 [ 365.825058][T15306] syzkaller0: entered promiscuous mode [ 365.844693][T15306] syzkaller0: entered allmulticast mode [ 365.879699][T15306] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 366.017465][T15306] tipc: Resetting bearer [ 366.362008][T15324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 366.473959][ T5292] veth1_vlan: left promiscuous mode [ 366.517130][T15328] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2381'. [ 366.737784][T15332] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 366.769807][T15339] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2382'. [ 366.804224][T15332] bond13 (unregistering): Released all slaves [ 366.815726][T15339] netlink: 'syz.4.2382': attribute type 9 has an invalid length. [ 366.876105][T15339] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2382'. [ 366.890940][T15345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2383'. [ 367.174782][T15351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.409835][T15359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2385'. [ 367.536953][T15367] bond0: (slave team0): Releasing backup interface [ 367.587506][T15367] bond11: (slave dummy0): Releasing active interface [ 367.656249][T15367] bridge_slave_1: left allmulticast mode [ 367.670212][T15367] bridge_slave_1: left promiscuous mode [ 367.693132][T15367] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.726981][T15367] bond0: (slave bond_slave_0): Releasing backup interface [ 367.770515][T15367] bond0: (slave bond_slave_1): Releasing backup interface [ 367.838402][T15367] team0: Port device team_slave_0 removed [ 367.858455][T15367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.866582][T15367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.877091][T15367] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 367.889390][T15367] batman_adv: batadv0: Removing interface: syzkaller0 [ 367.910096][T15367] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 368.002177][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2391'. [ 368.329753][T15402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2396'. [ 368.375319][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 368.597821][T15405] bond12: entered promiscuous mode [ 368.607874][T15405] 8021q: adding VLAN 0 to HW filter on device bond12 [ 368.726660][T15410] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.855357][T15413] sctp: [Deprecated]: syz.3.2398 (pid 15413) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.855357][T15413] Use struct sctp_sack_info instead [ 368.870459][T15410] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 368.916481][T15415] syzkaller0: entered promiscuous mode [ 368.928656][T15415] syzkaller0: entered allmulticast mode [ 368.969698][T15409] tipc: Enabled bearer , priority 0 [ 369.015092][T15406] tipc: Resetting bearer [ 369.087084][T15406] tipc: Disabling bearer [ 369.182273][T15434] lo speed is unknown, defaulting to 1000 [ 369.385710][T15443] bond_slave_0: left promiscuous mode [ 369.411166][T15443] bond_slave_1: left promiscuous mode [ 369.439790][T15443] team_slave_0: left promiscuous mode [ 369.619135][T15443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.749732][T15443] veth0_macvtap: left allmulticast mode [ 369.977946][T15443] bond0: left allmulticast mode [ 369.987634][T15443] bond_slave_0: left allmulticast mode [ 369.999842][T15443] bond_slave_1: left allmulticast mode [ 370.008238][T15443] team0: left allmulticast mode [ 370.020379][T15443] team_slave_0: left allmulticast mode [ 370.167862][T15465] bond14: entered promiscuous mode [ 370.200576][T15465] 8021q: adding VLAN 0 to HW filter on device bond14 [ 370.244972][ T24] syz0: Port: 1 Link DOWN [ 370.254195][T15474] __nla_validate_parse: 6 callbacks suppressed [ 370.254214][T15474] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2412'. [ 370.285354][T15474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2412'. [ 370.369134][ T1178] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.399695][ T1178] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.442467][ T1178] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 370.477373][ T1178] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 370.512841][ T1178] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.536532][ T1178] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.574496][ T1178] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 370.613724][ T1178] netdevsim netdevsim2 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 370.655640][ T1178] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.698987][ T1178] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.728342][ T1178] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 370.744188][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2418'. [ 370.761944][ T1178] netdevsim netdevsim2 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 370.778973][ T1178] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.799199][ T1178] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.818787][ T1178] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 370.838764][ T1178] netdevsim netdevsim2 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 371.061778][T15506] netlink: zone id is out of range [ 371.077532][T15506] netlink: zone id is out of range [ 371.084839][T15506] netlink: zone id is out of range [ 371.100259][T15506] netlink: zone id is out of range [ 371.110394][T15506] netlink: zone id is out of range [ 371.125310][T15506] netlink: zone id is out of range [ 371.140802][T15506] netlink: zone id is out of range [ 371.666391][T15521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2423'. [ 371.733324][T15521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2423'. [ 371.965839][T15532] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2425'. [ 371.978715][T15532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2425'. [ 373.313690][T15567] netlink: 'syz.4.2433': attribute type 11 has an invalid length. [ 373.378819][T15567] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2433'. [ 373.437394][T15576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2434'. [ 373.746309][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2436'. [ 373.875040][T15602] FAULT_INJECTION: forcing a failure. [ 373.875040][T15602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.916891][T15602] CPU: 1 UID: 0 PID: 15602 Comm: syz.2.2439 Not tainted syzkaller #0 PREEMPT(full) [ 373.916935][T15602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 373.916948][T15602] Call Trace: [ 373.917022][T15602] [ 373.917083][T15602] dump_stack_lvl+0xe8/0x150 [ 373.917223][T15602] should_fail_ex+0x40c/0x560 [ 373.917386][T15602] _copy_from_user+0x2d/0xb0 [ 373.917437][T15602] ___sys_sendmsg+0x1c6/0x360 [ 373.917566][T15602] ? __lock_acquire+0x683/0x2cd0 [ 373.917637][T15602] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.917689][T15602] ? __fget_files+0x2a/0x420 [ 373.917735][T15602] ? __fget_files+0x3a2/0x420 [ 373.917764][T15602] __x64_sys_sendmsg+0x1bd/0x2a0 [ 373.917786][T15602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.917814][T15602] ? __pfx_ksys_write+0x10/0x10 [ 373.917852][T15602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.917914][T15602] do_syscall_64+0x174/0x580 [ 373.918020][T15602] ? trace_irq_disable+0x3b/0x140 [ 373.918062][T15602] ? clear_bhb_loop+0x40/0x90 [ 373.918084][T15602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.918102][T15602] RIP: 0033:0x7f0e3eb9ce59 [ 373.918147][T15602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.918190][T15602] RSP: 002b:00007f0e3f9a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.918234][T15602] RAX: ffffffffffffffda RBX: 00007f0e3ee16090 RCX: 00007f0e3eb9ce59 [ 373.918248][T15602] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 373.918265][T15602] RBP: 00007f0e3f9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 373.918277][T15602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.918287][T15602] R13: 00007f0e3ee16128 R14: 00007f0e3ee16090 R15: 00007fffb7132218 [ 373.918314][T15602] [ 375.065849][T15641] Bluetooth: MGMT ver 1.23 [ 375.095268][T15641] netlink: 'syz.2.2450': attribute type 1 has an invalid length. [ 375.216383][T15641] syzkaller1: entered promiscuous mode [ 375.240064][T15641] syzkaller1: entered allmulticast mode [ 375.378550][ T30] audit: type=1800 audit(1781626631.575:12): pid=15628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2445" name="memory.events" dev="tmpfs" ino=2492 res=0 errno=0 [ 375.413388][T15655] SET target dimension over the limit! [ 375.549945][T15660] __nla_validate_parse: 4 callbacks suppressed [ 375.549965][T15660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2454'. [ 375.614750][T15660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2454'. [ 375.653643][T15663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2455'. [ 375.679453][T15660] netlink: 'syz.3.2454': attribute type 1 has an invalid length. [ 375.804675][T15660] 8021q: adding VLAN 0 to HW filter on device bond13 [ 375.913047][T15665] bond13: (slave geneve3): making interface the new active one [ 375.924928][T15665] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 375.940529][T15676] tipc: Enabling of bearer rejected, failed to enable media [ 376.156425][T15690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2461'. [ 376.207050][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2462'. [ 376.546811][T15713] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2467'. [ 376.577308][T15715] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 376.603392][T15713] netlink: 'syz.1.2467': attribute type 1 has an invalid length. [ 376.631057][T15713] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2467'. [ 376.678049][T15697] lo speed is unknown, defaulting to 1000 [ 376.916294][T15732] netlink: 'syz.1.2470': attribute type 4 has an invalid length. [ 376.969367][T15734] netlink: 'syz.1.2470': attribute type 4 has an invalid length. [ 376.969579][T15742] netlink: 'syz.1.2470': attribute type 4 has an invalid length. [ 377.017091][T15688] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2460'. [ 377.140732][T15747] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2471'. [ 377.459067][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2473'. [ 377.746971][T15771] netlink: 'syz.0.2475': attribute type 13 has an invalid length. [ 377.776608][T15771] netlink: 'syz.0.2475': attribute type 17 has an invalid length. [ 378.611480][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 378.624683][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.631843][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.638812][ T1320] net_ratelimit: 348 callbacks suppressed [ 378.638900][ T1320] aoe: packet could not be sent on bond_slave_0. consider increasing tx_queue_len [ 379.652156][T15771] gre0: left promiscuous mode [ 379.743544][T15771] batadv0: left promiscuous mode [ 379.751083][T15771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.785802][T15771] bridge_slave_1: left allmulticast mode [ 379.838588][T15771] hsr0: left promiscuous mode [ 379.863624][T15771] veth1_macvtap: left promiscuous mode [ 379.870916][T15771] veth0_macvtap: left promiscuous mode [ 379.881163][T15771] veth0_macvtap: entered promiscuous mode [ 379.904964][T15771] veth1_macvtap: entered promiscuous mode [ 379.915670][T15771] geneve1: left promiscuous mode [ 379.923425][T15771] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 379.939232][T15771] ip6gre1: left promiscuous mode [ 379.944963][T15771] ip6gre1: left allmulticast mode [ 379.959638][T15771] 8021q: adding VLAN 0 to HW filter on device eth0 [ 379.980253][T15771] 8021q: adding VLAN 0 to HW filter on device eth1 [ 379.998716][T15771] 8021q: adding VLAN 0 to HW filter on device eth2 [ 380.014499][T15771] 8021q: adding VLAN 0 to HW filter on device eth3 [ 380.040463][T15771] bond1: left promiscuous mode [ 380.045698][T15771] bridge7: left promiscuous mode [ 380.052775][T15771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.069451][T15771] bond2: left promiscuous mode [ 380.074507][T15771] bridge8: left promiscuous mode [ 380.080794][T15771] 8021q: adding VLAN 0 to HW filter on device bond2 [ 380.097360][T15771] bond3: left promiscuous mode [ 380.103067][T15771] bridge11: left promiscuous mode [ 380.109420][T15771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 380.118269][T15771] ipvlan2: left allmulticast mode [ 380.125717][T15771] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 380.134924][T15771] ipvlan3: left allmulticast mode [ 380.140005][T15771] bond3: left allmulticast mode [ 380.145312][T15771] bridge11: left allmulticast mode [ 380.152320][T15771] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 380.168633][T15771] 8021q: adding VLAN 0 to HW filter on device bond4 [ 380.176910][T15771] bond5: left promiscuous mode [ 380.182492][T15771] 8021q: adding VLAN 0 to HW filter on device bond5 [ 380.190625][T15771] bond6: left promiscuous mode [ 380.197467][T15771] 8021q: adding VLAN 0 to HW filter on device bond6 [ 380.259295][T15771] 8021q: adding VLAN 0 to HW filter on device bond7 [ 380.270792][T15771] vlan2: left promiscuous mode [ 380.276850][T15771] bond7: left promiscuous mode [ 380.282668][T15771] bridge13: left promiscuous mode [ 380.288192][T15771] vlan2: left allmulticast mode [ 380.293458][T15771] bond7: left allmulticast mode [ 380.298830][T15771] bridge13: left allmulticast mode [ 380.309971][T15771] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 380.325925][T15771] bond8: left promiscuous mode [ 380.331045][T15771] 8021q: adding VLAN 0 to HW filter on device bond8 [ 380.344514][T15771] 8021q: adding VLAN 0 to HW filter on device bond9 [ 380.352461][T15771] bond10: left promiscuous mode [ 380.357705][T15771] 8021q: adding VLAN 0 to HW filter on device bond10 [ 380.366468][T15771] bond0: left promiscuous mode [ 380.375163][T15771] 8021q: adding VLAN 0 to HW filter on device bond11 [ 380.385037][T15771] bond12: left promiscuous mode [ 380.390232][T15771] 8021q: adding VLAN 0 to HW filter on device bond12 [ 380.523181][ T48] bond9: (slave macvlan0): link status definitely down, disabling slave [ 380.544207][ T48] bond9: now running without any active interface! [ 381.359884][T15842] pim6reg: left allmulticast mode [ 382.547503][T15880] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 383.150811][T15897] __nla_validate_parse: 2 callbacks suppressed [ 383.150831][T15897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2495'. [ 383.215936][T15899] syzkaller1: entered promiscuous mode [ 383.234177][T15899] syzkaller1: entered allmulticast mode [ 383.327750][T15904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2497'. [ 383.410932][T15908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2498'. [ 384.008269][T15927] netlink: 'syz.0.2502': attribute type 126 has an invalid length. [ 384.059390][T15925] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2502'. [ 384.129005][T15925] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2502'. [ 384.232709][T15927] erspan1: entered promiscuous mode [ 384.241421][T15927] erspan1: entered allmulticast mode [ 384.296460][T15940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2505'. [ 384.431684][T15940] bridge17: entered promiscuous mode [ 384.448400][T15940] bridge17: entered allmulticast mode [ 384.506419][T15945] openvswitch: netlink: Flow key attr not present in new flow. [ 384.847163][T15957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2510'. [ 385.161614][T15968] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2512'. [ 385.435139][T15979] bridge0: port 1(syz_tun) entered blocking state [ 385.447692][T15979] bridge0: port 1(syz_tun) entered disabled state [ 385.463403][T15979] syz_tun: entered allmulticast mode [ 385.490130][T15979] syz_tun: entered promiscuous mode [ 386.436499][T15982] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2514'. [ 386.462831][T15982] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2514'. [ 387.548544][T15947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.756949][T16002] netlink: 'syz.4.2521': attribute type 10 has an invalid length. [ 387.937262][T16014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.213962][T16034] __nla_validate_parse: 9 callbacks suppressed [ 388.213983][T16034] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2529'. [ 388.349451][T16036] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.392664][T16039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.535914][T16047] vxcan2: entered allmulticast mode [ 388.643278][T16051] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2536'. [ 388.836109][T16059] team_slave_1: entered promiscuous mode [ 388.858184][T16059] team_slave_1: left allmulticast mode [ 388.925996][T16061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2540'. [ 388.986524][T16061] x_tables: duplicate underflow at hook 2 [ 389.163784][T16075] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2543'. [ 389.319548][T16082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2547'. [ 390.202660][T16116] syzkaller0: entered promiscuous mode [ 390.204931][T16119] netlink: 'syz.3.2556': attribute type 1 has an invalid length. [ 390.208448][T16120] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2557'. [ 390.225644][T16116] syzkaller0: entered allmulticast mode [ 390.345350][T16119] 8021q: adding VLAN 0 to HW filter on device bond14 [ 390.428361][T16119] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2556'. [ 390.444569][T16121] vlan4: entered promiscuous mode [ 390.449734][T16121] bond14: entered promiscuous mode [ 390.456398][T16121] vlan4: entered allmulticast mode [ 390.462211][T16121] bond14: entered allmulticast mode [ 390.520696][T16119] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 390.530623][T16119] bond14: (slave batadv1): making interface the new active one [ 390.556909][T16119] batadv1: entered promiscuous mode [ 390.571777][T16119] batadv1: entered allmulticast mode [ 390.582570][T16119] bond14: (slave batadv1): Enslaving as an active interface with an up link [ 390.631053][T16136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2561'. [ 390.855104][T16142] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2563'. [ 391.007240][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2567'. [ 391.047867][T16154] syzkaller0: entered promiscuous mode [ 391.063877][T16154] syzkaller0: entered allmulticast mode [ 391.340496][T16167] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 392.220241][T16201] 8021q: adding VLAN 0 to HW filter on device bond15 [ 392.282539][T16207] bond15: entered promiscuous mode [ 392.308764][T16207] bond15: entered allmulticast mode [ 392.574390][T16217] lo speed is unknown, defaulting to 1000 [ 393.216087][T16244] netlink: 'syz.0.2588': attribute type 1 has an invalid length. [ 393.297078][T16244] 8021q: adding VLAN 0 to HW filter on device bond13 [ 393.317147][T16247] netlink: 'syz.1.2587': attribute type 4 has an invalid length. [ 393.628310][T16257] __nla_validate_parse: 8 callbacks suppressed [ 393.628375][T16257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2591'. [ 393.823618][T16257] 8021q: adding VLAN 0 to HW filter on device bond16 [ 393.840753][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2595'. [ 393.855811][T16262] bond16: entered promiscuous mode [ 393.861208][T16262] bond16: entered allmulticast mode [ 394.080446][T16256] syzkaller0: entered promiscuous mode [ 394.086216][T16256] syzkaller0: entered allmulticast mode [ 394.126702][T16282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.145887][T16281] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2597'. [ 394.631503][T16302] netlink: 'syz.0.2601': attribute type 11 has an invalid length. [ 397.569073][T16313] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20001 [ 397.808362][T16315] veth0_vlan: left promiscuous mode [ 397.828347][T16315] veth0_vlan: entered promiscuous mode [ 397.865044][T16315] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 397.886768][T16333] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2608'. [ 397.891115][T16334] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.2610'. [ 398.234112][T16349] netlink: 'syz.4.2615': attribute type 1 has an invalid length. [ 398.268141][T16346] can: request_module (can-proto-0) failed. [ 398.383410][T16356] netlink: 'syz.3.2612': attribute type 1 has an invalid length. [ 398.393280][T16352] netlink: 'syz.1.2614': attribute type 1 has an invalid length. [ 398.407600][T16350] bond15: (slave bridge13): Enslaving as a backup interface with an up link [ 398.435843][T16356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.561069][T16361] netlink: 'syz.4.2617': attribute type 15 has an invalid length. [ 398.588644][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2617'. [ 398.643731][ T6787] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 398.653382][T16361] netlink: 'syz.4.2617': attribute type 15 has an invalid length. [ 398.661736][T16369] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 398.668748][ T6787] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 398.672604][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2617'. [ 398.678781][T16368] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 398.698539][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2618'. [ 398.708731][ T6787] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 398.718365][ T6787] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 398.734808][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2618'. [ 398.739839][T16370] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2619'. [ 398.791433][T16369] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 399.750439][T16407] xt_connbytes: Forcing CT accounting to be enabled [ 399.758026][T16407] xt_CT: You must specify a L4 protocol and not use inversions on it [ 399.876669][T16411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2629'. [ 399.946665][T16414] xt_hashlimit: size too large, truncated to 1048576 [ 399.998930][T16419] netlink: 'syz.0.2632': attribute type 1 has an invalid length. [ 400.034412][T16419] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2632'. [ 400.089577][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2632'. [ 400.529274][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2637'. [ 400.680639][T16451] macvlan2: entered allmulticast mode [ 400.709667][T16451] gretap0: entered allmulticast mode [ 400.893894][T16467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2642'. [ 400.927318][T16467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2642'. [ 401.095515][T16475] openvswitch: netlink: Flow actions attr not present in new flow. [ 401.449452][T16467] erspan1: left promiscuous mode [ 401.619991][T16486] netlink: 'syz.0.2645': attribute type 1 has an invalid length. [ 401.638315][T16486] netlink: 'syz.0.2645': attribute type 2 has an invalid length. [ 401.808065][T16491] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 401.837065][T16489] netlink: 'syz.1.2648': attribute type 1 has an invalid length. [ 401.924557][T16491] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 401.985802][T16489] macvlan2: entered promiscuous mode [ 402.008913][T16489] macvlan2: entered allmulticast mode [ 402.034881][T16489] bond15: entered promiscuous mode [ 402.058742][T16489] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 402.088496][T16489] bond15: left promiscuous mode [ 402.343667][T15870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.363889][T15870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.511376][T15870] bond9: (slave macvlan0): failed to get link speed/duplex [ 402.538293][T16517] syzkaller0: entered promiscuous mode [ 402.555933][T16517] syzkaller0: entered allmulticast mode [ 402.731437][ T6787] bond9: (slave macvlan0): failed to get link speed/duplex [ 402.872303][ T6787] bond9: (slave macvlan0): failed to get link speed/duplex [ 402.886049][T16531] netlink: 'syz.3.2661': attribute type 1 has an invalid length. [ 403.002636][ T6788] bond9: (slave macvlan0): failed to get link speed/duplex [ 403.131503][ T6787] bond9: (slave macvlan0): failed to get link speed/duplex [ 403.340729][T16548] bond16: entered promiscuous mode [ 403.362583][T16548] 8021q: adding VLAN 0 to HW filter on device bond16 [ 403.436430][T16553] 8021q: adding VLAN 0 to HW filter on device bond16 [ 403.445014][T16553] bond16: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 403.457056][T16553] bond16: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 403.504237][T16553] bond16: (slave ip6gre3): making interface the new active one [ 403.519077][T16553] ip6gre3: entered promiscuous mode [ 403.546749][T16553] bond16: (slave ip6gre3): Enslaving as an active interface with an up link [ 403.768062][T16563] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 403.792964][ T6790] bond9: (slave macvlan0): failed to get link speed/duplex [ 403.915865][T16566] __nla_validate_parse: 131 callbacks suppressed [ 403.915885][T16566] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2669'. [ 403.932038][ T73] bond9: (slave macvlan0): failed to get link speed/duplex [ 403.953061][T16566] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2669'. [ 404.061433][ T6790] bond9: (slave macvlan0): failed to get link speed/duplex [ 404.269994][T16573] ip6tnl2: entered allmulticast mode [ 404.288238][T16575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.304976][ T6790] bond9: (slave macvlan0): failed to get link speed/duplex [ 404.317461][T16575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.441600][ T73] bond9: (slave macvlan0): failed to get link speed/duplex [ 404.552125][T16586] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2676'. [ 404.639365][T16582] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 404.804380][T16592] syzkaller0: entered promiscuous mode [ 404.822765][T16592] syzkaller0: entered allmulticast mode [ 405.049895][T16595] geneve0: entered allmulticast mode [ 405.297670][T16599] validate_nla: 1 callbacks suppressed [ 405.297763][T16599] netlink: 'syz.4.2680': attribute type 4 has an invalid length. [ 405.329990][T16599] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2680'. [ 405.458617][T16599] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 406.237795][T16622] bond16: option lacp_active: invalid value (8) [ 406.255895][T16622] bond16 (unregistering): Released all slaves [ 406.715236][T16637] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2689'. [ 406.741779][T16636] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2689'. [ 406.878525][T16650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2692'. [ 406.891174][T16650] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2692'. [ 406.999622][T16658] netlink: 'syz.0.2695': attribute type 1 has an invalid length. [ 407.126407][T16659] bond14: (slave geneve3): Opening slave failed [ 407.283028][T16668] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 407.498064][T16680] netlink: 'syz.2.2700': attribute type 1 has an invalid length. [ 407.529539][T16680] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2700'. [ 407.846465][T16702] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2705'. [ 407.869702][T16704] xt_hashlimit: size too large, truncated to 1048576 [ 407.973590][ T6788] net_ratelimit: 24 callbacks suppressed [ 407.973609][ T6788] bond9: (slave macvlan0): failed to get link speed/duplex [ 408.182357][ T6788] bond9: (slave macvlan0): failed to get link speed/duplex [ 408.321481][ T6792] bond9: (slave macvlan0): failed to get link speed/duplex [ 408.441661][T15870] bond9: (slave macvlan0): failed to get link speed/duplex [ 408.601541][ T6787] bond9: (slave macvlan0): failed to get link speed/duplex [ 408.733668][ T73] bond9: (slave macvlan0): failed to get link speed/duplex [ 408.861792][ T6787] bond9: (slave macvlan0): failed to get link speed/duplex [ 408.991361][ T6788] bond9: (slave macvlan0): failed to get link speed/duplex [ 409.020939][T16754] syzkaller1: entered promiscuous mode [ 409.039037][T16754] syzkaller1: entered allmulticast mode [ 409.161569][ T6787] bond9: (slave macvlan0): failed to get link speed/duplex [ 409.281476][ T6788] bond9: (slave macvlan0): failed to get link speed/duplex [ 409.358856][T16757] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2719'. [ 409.605199][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2720'. [ 409.887850][T16765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2722'. [ 409.915803][T16765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2722'. [ 410.066011][T16778] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2725'. [ 410.613705][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 411.218568][T16801] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2730'. [ 411.349605][T16808] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 413.043223][T16777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.075328][ T73] net_ratelimit: 57 callbacks suppressed [ 413.075349][ T73] bond9: (slave macvlan0): failed to get link speed/duplex [ 413.191747][ T203] bond9: (slave macvlan0): failed to get link speed/duplex [ 413.300973][T16847] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2741'. [ 413.321792][ T73] bond9: (slave macvlan0): failed to get link speed/duplex [ 413.377055][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2744'. [ 413.736938][ T73] bond9: (slave macvlan0): failed to get link speed/duplex [ 413.806549][T16884] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2748'. [ 413.865558][ T203] bond9: (slave macvlan0): failed to get link speed/duplex [ 414.001753][ T203] bond9: (slave macvlan0): failed to get link speed/duplex [ 414.122313][ T73] bond9: (slave macvlan0): failed to get link speed/duplex [ 414.289286][T16913] netlink: 'syz.2.2758': attribute type 10 has an invalid length. [ 414.292549][ T203] bond9: (slave macvlan0): failed to get link speed/duplex [ 414.431606][ T203] bond9: (slave macvlan0): failed to get link speed/duplex [ 414.533993][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2763'. [ 414.584875][T16930] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2764'. [ 414.595455][ T6787] bond9: (slave macvlan0): failed to get link speed/duplex [ 414.757549][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2769'. [ 414.798935][T16945] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2770'. [ 414.910612][T16948] geneve4: entered promiscuous mode [ 414.942901][ T73] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.966749][ T73] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.989449][ T73] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.025476][ T73] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.059393][T16964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2775'. [ 415.096856][T16967] netlink: 'syz.1.2777': attribute type 1 has an invalid length. [ 415.116817][T16964] x_tables: duplicate underflow at hook 2 [ 415.133185][T16970] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2778'. [ 415.133887][T16971] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 415.154921][T16967] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 415.306550][T16985] netlink: 12700 bytes leftover after parsing attributes in process `syz.2.2778'. [ 415.369839][T16988] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 415.544059][T16995] netlink: 'syz.1.2783': attribute type 4 has an invalid length. [ 415.589813][T16995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2783'. [ 415.639160][T16995] netlink: 'syz.1.2783': attribute type 4 has an invalid length. [ 415.737468][T16999] netlink: 'syz.0.2784': attribute type 26 has an invalid length. [ 416.030185][T17009] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2786'. [ 416.068073][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 416.082792][T17009] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2786'. [ 416.096068][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 416.106740][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 416.120606][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 416.134245][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 416.208360][T17014] bond13: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 416.230468][T17014] bond13 (unregistering): Released all slaves [ 416.483757][ T5642] syz_tun (unregistering): left allmulticast mode [ 416.524098][ T5642] syz_tun (unregistering): left promiscuous mode [ 416.533711][T17028] netlink: 'syz.2.2790': attribute type 2 has an invalid length. [ 416.540500][ T5642] bridge0: port 1(syz_tun) entered disabled state [ 416.897822][T17031] nft_compat: unsupported protocol 0 [ 416.933431][T17031] ieee802154 phy0 wpan0: encryption failed: -22 [ 416.958971][T17046] lo: entered allmulticast mode [ 417.117864][T17008] lo speed is unknown, defaulting to 1000 [ 418.082125][ T6790] net_ratelimit: 25 callbacks suppressed [ 418.082146][ T6790] bond9: (slave macvlan0): failed to get link speed/duplex [ 418.211890][ T5648] Bluetooth: hci5: command tx timeout [ 418.253032][ T6788] bond9: (slave macvlan0): failed to get link speed/duplex [ 418.411537][T15870] bond9: (slave macvlan0): failed to get link speed/duplex [ 418.561454][ T6790] bond9: (slave macvlan0): failed to get link speed/duplex [ 419.228036][T17123] openvswitch: netlink: Flow actions attr not present in new flow. [ 419.388398][T17117] veth11: entered allmulticast mode [ 419.466700][T17117] bond17: (slave veth11): Enslaving as an active interface with an up link [ 419.512084][ T9268] udevd[9268]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 419.580448][T17107] bond17 (unregistering): (slave veth11): Releasing backup interface [ 419.607902][T17107] bond17 (unregistering): Released all slaves [ 419.713793][T17135] team_slave_1: entered promiscuous mode [ 419.762895][T15870] bond9: (slave macvlan0): failed to get link speed/duplex [ 420.231516][T15870] bond9: (slave macvlan0): failed to get link speed/duplex [ 420.292616][ T5648] Bluetooth: hci5: command tx timeout [ 420.332752][T17153] __nla_validate_parse: 11 callbacks suppressed [ 420.332771][T17153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2818'. [ 420.669964][T17008] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.686345][T17008] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.710222][T17008] bridge_slave_0: entered allmulticast mode [ 420.754152][T17008] bridge_slave_0: entered promiscuous mode [ 420.795674][T17008] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.833532][T17008] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.866489][T17008] bridge_slave_1: entered allmulticast mode [ 420.894536][T17008] bridge_slave_1: entered promiscuous mode [ 421.041461][ T6792] bond9: (slave macvlan0): failed to get link speed/duplex [ 421.076443][T17008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.152697][T17176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2824'. [ 421.170141][T17008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.327855][T17008] team0: Port device team_slave_0 added [ 421.455325][T17008] team0: Port device team_slave_1 added [ 421.544102][T17196] ip6t_srh: unknown srh match flags 4000 [ 421.608671][T17203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2826'. [ 421.854363][T17008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.878091][T17008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.927213][T17008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.954019][T17008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.972954][T17008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.036973][T17008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.053820][T17203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2826'. [ 422.215725][T17008] hsr_slave_0: entered promiscuous mode [ 422.227143][T17008] hsr_slave_1: entered promiscuous mode [ 422.237461][T17008] debugfs: 'hsr0' already exists in 'hsr' [ 422.243815][T17008] Cannot create hsr debugfs directory [ 422.371740][ T5648] Bluetooth: hci5: command tx timeout [ 423.107416][T17254] IPVS: set_ctl: invalid protocol: 8224 32.32.32.59:8292 [ 423.242316][T17259] sctp: [Deprecated]: syz.4.2838 (pid 17259) Use of int in max_burst socket option. [ 423.242316][T17259] Use struct sctp_assoc_value instead [ 423.283835][T17260] sctp: [Deprecated]: syz.4.2838 (pid 17260) Use of int in max_burst socket option. [ 423.283835][T17260] Use struct sctp_assoc_value instead [ 423.334002][T17008] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.472140][T17268] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2840'. [ 423.573973][T17008] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.650382][T17279] netlink: 'syz.4.2843': attribute type 1 has an invalid length. [ 423.661484][T17279] netlink: 'syz.4.2843': attribute type 4 has an invalid length. [ 423.684089][T17279] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2843'. [ 423.886040][T17008] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.046849][T17008] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.285953][T17294] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2846'. [ 424.338518][T17294] 0·: renamed from hsr0 (while UP) [ 424.349876][T17294] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 424.377377][T17298] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2847'. [ 424.451505][ T5648] Bluetooth: hci5: command tx timeout [ 424.458872][T17303] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2847'. [ 424.624636][T17008] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 424.675564][T17008] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 424.751143][T17008] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 424.769739][T17008] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 424.808276][T17317] bridge14: entered allmulticast mode [ 424.840744][T17308] netlink: 'syz.4.2849': attribute type 8 has an invalid length. [ 424.899944][T17305] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2849'. [ 424.923214][T17008] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 424.948324][T17008] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 424.975802][T17008] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 424.988820][T17008] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.395891][T17008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.474184][T17008] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.514070][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.521338][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.615783][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.622994][ T6788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.804814][T17358] syzkaller1: entered promiscuous mode [ 425.818040][T17358] syzkaller1: entered allmulticast mode [ 425.825125][T17360] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20000 [ 425.840203][T17360] __nla_validate_parse: 1 callbacks suppressed [ 425.840226][T17360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2863'. [ 426.476533][ T5721] IPVS: starting estimator thread 0... [ 426.514935][T17384] xt_hashlimit: size too large, truncated to 1048576 [ 426.583114][T17388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2871'. [ 426.593894][T17385] IPVS: using max 36 ests per chain, 86400 per kthread [ 426.628037][T17398] netlink: 'syz.4.2870': attribute type 1 has an invalid length. [ 426.661917][T17398] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2870'. [ 427.193803][T17419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2880'. [ 427.214245][T17008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.334686][T17424] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2881'. [ 427.394081][T17008] veth0_vlan: entered promiscuous mode [ 427.403799][T17425] netlink: 'syz.4.2881': attribute type 1 has an invalid length. [ 427.410603][T17008] veth1_vlan: entered promiscuous mode [ 427.524837][T17425] 8021q: adding VLAN 0 to HW filter on device bond17 [ 427.573125][T17431] bond17: (slave veth13): Enslaving as a backup interface with a down link [ 427.597617][T17437] dummy0: left allmulticast mode [ 427.630163][T17437] bond17: (slave dummy0): Enslaving as a backup interface with an up link [ 427.658144][T17438] syzkaller1: entered promiscuous mode [ 427.664715][T17425] netlink: 'syz.4.2881': attribute type 10 has an invalid length. [ 427.673786][T17438] syzkaller1: entered allmulticast mode [ 427.683408][T17425] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2881'. [ 427.685267][T17008] veth0_macvtap: entered promiscuous mode [ 427.705211][T17008] veth1_macvtap: entered promiscuous mode [ 427.720207][T17425] dummy0: entered promiscuous mode [ 427.730098][T17425] bond17: (slave dummy0): Releasing backup interface [ 427.778824][T17008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.797787][T17008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.848514][ T203] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.867664][ T203] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.910494][ T203] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.943423][ T203] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.974807][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2886'. [ 428.157086][ T6787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.175869][T17449] netlink: 'syz.0.2887': attribute type 8 has an invalid length. [ 428.188147][ T6787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.226583][T17450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2888'. [ 428.229371][ T6792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.245594][ T6792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.310897][T17452] openvswitch: netlink: Actions may not be safe on all matching packets [ 428.435098][T17457] batadv_slave_1: entered promiscuous mode [ 428.923861][T17474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.067189][T17477] bridge0: port 1(syz_tun) entered blocking state [ 429.081352][T17477] bridge0: port 1(syz_tun) entered disabled state [ 429.110503][T17477] syz_tun: entered promiscuous mode [ 429.132155][T17477] bridge0: port 1(syz_tun) entered blocking state [ 429.138758][T17477] bridge0: port 1(syz_tun) entered listening state [ 429.284043][T17481] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 429.297182][T17453] batadv_slave_1: left promiscuous mode [ 429.425559][T17483] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2897'. [ 429.811467][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 429.963170][T17502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2902'. [ 430.017000][T17505] lo speed is unknown, defaulting to 1000 [ 430.041987][T17505] lo speed is unknown, defaulting to 1000 [ 430.065525][T17505] lo speed is unknown, defaulting to 1000 [ 430.074750][T17505] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 430.091972][T17505] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 430.119655][T17505] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 430.128377][T17509] C: renamed from veth1_to_team (while UP) [ 430.137028][T17505] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 430.146902][T17509] netlink: 'syz.0.2906': attribute type 2 has an invalid length. [ 430.155780][T17509] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 430.155978][T17505] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 430.184826][T17511] netlink: 'syz.0.2906': attribute type 2 has an invalid length. [ 430.194562][T17511] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 430.234506][T17510] syzkaller0: entered promiscuous mode [ 430.240376][T17510] syzkaller0: entered allmulticast mode [ 430.252892][T17505] lo speed is unknown, defaulting to 1000 [ 430.267840][T17505] lo speed is unknown, defaulting to 1000 [ 430.308680][T17505] lo speed is unknown, defaulting to 1000 [ 430.316521][T17505] lo speed is unknown, defaulting to 1000 [ 430.359263][T17515] bond15: entered promiscuous mode [ 430.374079][T17515] 8021q: adding VLAN 0 to HW filter on device bond15 [ 430.398285][T17505] lo speed is unknown, defaulting to 1000 [ 430.406763][T17505] lo speed is unknown, defaulting to 1000 [ 430.466622][T17506] smc: removing ib device syz1 [ 430.572245][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 430.588595][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 430.598193][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 430.609864][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 430.618827][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 430.719245][T17506] smbdirect: ib_dev[syz1] removed [ 431.243763][T17540] __nla_validate_parse: 6 callbacks suppressed [ 431.243796][T17540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2912'. [ 431.249609][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2911'. [ 431.340925][T17544] xt_l2tp: v2 doesn't support IP mode [ 431.433512][T17537] team0: Port device team_slave_0 removed [ 431.653988][T17554] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2916'. [ 431.678015][ T6788] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.690141][ T6788] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 431.702351][ T6788] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.765365][T17558] netlink: 'syz.0.2917': attribute type 111 has an invalid length. [ 431.929101][T17563] netlink: 'syz.0.2918': attribute type 1 has an invalid length. [ 432.027497][ T6788] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.074344][ T6788] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 432.113797][ T6788] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.266074][T17578] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2920'. [ 432.320313][T17579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2920'. [ 432.334430][T17563] 8021q: adding VLAN 0 to HW filter on device bond16 [ 432.449684][T17568] bond16: (slave veth3): Enslaving as an active interface with a down link [ 432.470104][T17573] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 432.490997][T17573] bond16: (slave batadv1): making interface the new active one [ 432.503980][T17573] batadv1: entered promiscuous mode [ 432.510033][T17573] bond16: (slave batadv1): Enslaving as an active interface with an up link [ 432.556050][T17574] bond16 (unregistering): (slave veth3): Releasing active interface [ 432.577379][T17574] bond16 (unregistering): (slave batadv1): Releasing active interface [ 432.598452][T17574] bond16 (unregistering): Released all slaves [ 432.691737][ T5633] Bluetooth: hci3: command tx timeout [ 432.919072][T17584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2921'. [ 432.966097][ T6788] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.981438][ T6788] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 433.008661][ T6788] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.314922][T17597] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2924'. [ 433.338758][ T6788] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.360040][ T6788] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 433.403191][ T6788] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.842687][T17601] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2924'. [ 433.932407][T17519] lo speed is unknown, defaulting to 1000 [ 434.649124][T17635] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2934'. [ 434.681529][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2934'. [ 434.772717][ T5648] Bluetooth: hci3: command tx timeout [ 434.946392][T17648] x_tables: duplicate underflow at hook 1 [ 434.984963][ T6788] bond16 (unregistering): (slave ip6gre3): Releasing backup interface [ 434.998655][ T6788] ip6gre3 (unregistering): left promiscuous mode [ 435.193543][ T6788] bond1 (unregistering): (slave gretap1): Releasing active interface [ 435.202030][ T6788] bond1 (unregistering): (slave gretap1): the permanent HWaddr of slave - ce:0f:d2:fc:ac:63 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 435.296697][ T6788] bond1 (unregistering): (slave bridge2): Releasing active interface [ 435.458972][ T6788] bond15 (unregistering): (slave bridge13): Releasing backup interface [ 435.488288][ T6788] bond0 (unregistering): Released all slaves [ 435.499654][ T6788] bond1 (unregistering): Released all slaves [ 435.515088][ T6788] bond2 (unregistering): Released all slaves [ 435.535010][ T6788] bond3 (unregistering): Released all slaves [ 435.548676][ T6788] bond4 (unregistering): Released all slaves [ 435.564148][ T6788] bond5 (unregistering): Released all slaves [ 435.578311][ T6788] bond6 (unregistering): Released all slaves [ 435.602293][ T6788] bond7 (unregistering): Released all slaves [ 435.616574][ T6788] bond8 (unregistering): Released all slaves [ 435.630185][ T6788] bond9 (unregistering): Released all slaves [ 435.646734][ T6788] bond10 (unregistering): (slave veth5): Releasing active interface [ 435.662938][ T6788] bond10 (unregistering): Released all slaves [ 435.678878][ T6788] bond11 (unregistering): Released all slaves [ 435.693181][ T6788] bond12 (unregistering): Released all slaves [ 435.707156][ T6788] bond13 (unregistering): Released all slaves [ 435.726680][ T6788] bond14 (unregistering): Released all slaves [ 435.746198][ T6788] bond15 (unregistering): Released all slaves [ 435.760045][ T6788] bond16 (unregistering): Released all slaves [ 435.776481][ T6788] bond17 (unregistering): (slave veth13): Releasing backup interface [ 435.788391][ T6788] bond17 (unregistering): Released all slaves [ 435.819952][T17622] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.828936][T17622] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.272163][T17653] __nla_validate_parse: 21 callbacks suppressed [ 436.272186][T17653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2935'. [ 436.314107][T17653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2935'. [ 436.354747][T17653] bridge0: port 1(syz_tun) entered disabled state [ 436.388626][T17653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2935'. [ 436.401141][T17653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2935'. [ 436.443391][T17653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2935'. [ 436.462514][T17653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2935'. [ 436.502843][T17653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2935'. [ 436.518096][T17653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2935'. [ 436.533833][T17653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2935'. [ 436.543959][T17653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2935'. [ 436.559753][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 436.599770][ T6788] : left promiscuous mode [ 436.749743][ T6788] tipc: Disabling bearer [ 436.762702][ T6788] tipc: Left network mode [ 436.851535][ T5648] Bluetooth: hci3: command 0x040f tx timeout [ 437.428016][T17704] netlink: 'syz.1.2943': attribute type 1 has an invalid length. [ 437.476734][T17704] nbd: couldn't find device at index -427775503 [ 438.028775][T17722] netlink: 'syz.1.2946': attribute type 1 has an invalid length. [ 438.105057][T17519] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.131083][T17519] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.143865][T17519] bridge_slave_0: entered allmulticast mode [ 438.152277][T17519] bridge_slave_0: entered promiscuous mode [ 438.187055][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 438.212768][T17519] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.227728][T17519] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.246316][T17519] bridge_slave_1: entered allmulticast mode [ 438.275096][T17519] bridge_slave_1: entered promiscuous mode [ 438.434431][T17519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.537786][T17740] syzkaller0: entered promiscuous mode [ 438.545995][T17740] syzkaller0: entered allmulticast mode [ 438.614975][T17519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.932928][ T5633] Bluetooth: hci3: command 0x040f tx timeout [ 440.055975][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.020116][ T5633] Bluetooth: hci3: command 0x040f tx timeout [ 442.398040][T17760] syz_tun: left promiscuous mode [ 442.404577][T17760] bridge0: port 1(syz_tun) entered disabled state [ 442.418358][T17760] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 442.450958][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 442.548348][T17519] team0: Port device team_slave_0 added [ 442.613250][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 442.627567][T17519] team0: Port device team_slave_1 added [ 442.815008][T17789] __nla_validate_parse: 9 callbacks suppressed [ 442.815027][T17789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2961'. [ 442.856406][T17519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.875589][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2963'. [ 442.889047][T17519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.916044][T17519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.941918][T17799] ieee802154 phy0 wpan0: encryption failed: -90 [ 442.968224][T17519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.988933][T17799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2959'. [ 442.990797][T17519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.040241][T17806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2963'. [ 443.062751][T17807] netlink: 'syz.2.2962': attribute type 62 has an invalid length. [ 443.103989][T17519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.829385][ T5292] 8021q: adding VLAN 0 to HW filter on device eth4 [ 444.119051][T17519] hsr_slave_0: entered promiscuous mode [ 444.144046][T17519] hsr_slave_1: entered promiscuous mode [ 444.164636][T17519] debugfs: 'hsr0' already exists in 'hsr' [ 444.170919][T17519] Cannot create hsr debugfs directory [ 444.225642][T17849] netlink: 'syz.3.2971': attribute type 1 has an invalid length. [ 444.264441][T17849] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 444.499301][T17840] syzkaller0: entered promiscuous mode [ 444.519089][T17840] syzkaller0: entered allmulticast mode [ 444.553136][T17857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2970'. [ 444.578595][T17857] netlink: 352 bytes leftover after parsing attributes in process `syz.2.2970'. [ 444.606384][T17857] netlink: 372 bytes leftover after parsing attributes in process `syz.2.2970'. [ 444.625990][T17851] bond13 (unregistering): Released all slaves [ 444.778759][ T6788] hsr_slave_0: left promiscuous mode [ 444.818841][ T6788] veth1_macvtap: left promiscuous mode [ 444.828282][ T6788] veth0_macvtap: left promiscuous mode [ 444.834414][ T6788] veth0_vlan: left promiscuous mode [ 444.855011][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2976'. [ 444.911888][T17879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2976'. [ 444.911888][T17880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2976'. [ 445.419345][T17886] syzkaller0: entered allmulticast mode [ 445.678998][T17894] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 445.787275][T17894] erspan0: entered promiscuous mode [ 446.209725][T17922] gtp1: entered promiscuous mode [ 446.224201][T17922] gtp1: entered allmulticast mode [ 446.272350][T17922] team0: Device gtp1 is of different type [ 447.073337][ T6788] IPVS: stop unused estimator thread 0... [ 447.166883][T17961] syzkaller1: entered promiscuous mode [ 447.184881][T17961] syzkaller1: entered allmulticast mode [ 447.209167][T17952] syzkaller1: entered promiscuous mode [ 447.233781][T17952] syzkaller1: entered allmulticast mode [ 447.264673][T17966] syzkaller1: left promiscuous mode [ 447.271944][T17966] syzkaller1: left allmulticast mode [ 447.840554][T18004] __nla_validate_parse: 13 callbacks suppressed [ 447.840573][T18004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 447.863839][T18005] xt_hashlimit: size too large, truncated to 1048576 [ 447.984330][T18011] netlink: 'syz.2.3001': attribute type 1 has an invalid length. [ 448.010941][T18011] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3001'. [ 448.025389][T18011] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3001'. [ 448.039772][T18009] bridge_slave_0 (unregistering): left allmulticast mode [ 448.100728][T18010] smc: removing ib device syz0 [ 448.118397][T18009] bridge_slave_0 (unregistering): left promiscuous mode [ 448.158054][T18009] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.179373][T18020] netlink: 'syz.1.3003': attribute type 1 has an invalid length. [ 448.327233][T18030] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3003'. [ 448.367419][T18010] smbdirect: ib_dev[syz0] removed [ 448.729609][T18020] bond1: entered promiscuous mode [ 448.755787][T18020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.009995][T18056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3006'. [ 449.053103][T18056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3006'. [ 449.063711][T18058] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.3006'. [ 449.552246][T17519] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 449.584712][T18083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3010'. [ 449.610206][T17519] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.622223][T17519] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 449.662001][T17519] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.683400][T17519] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 449.714340][T17519] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.726873][ T10] hid-generic 0005:0C45:0008.0001: item fetching failed at offset 2/3 [ 449.736953][ T10] hid-generic 0005:0C45:0008.0001: probe with driver hid-generic failed with error -22 [ 449.743392][T17519] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 449.801133][T17519] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.124181][T17519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.160116][T17519] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.210368][ T6787] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.217811][ T6787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.318224][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.325424][ T6790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.564369][T18114] netlink: 'syz.1.3014': attribute type 6 has an invalid length. [ 450.927814][T18135] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3019'. [ 451.336452][T18161] netlink: 'syz.0.3022': attribute type 1 has an invalid length. [ 451.686019][T18171] bond16: entered promiscuous mode [ 451.858874][T18182] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3027'. [ 452.426429][T18161] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 452.529178][T18145] bond16: left promiscuous mode [ 452.898135][T17519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.096196][T18232] __nla_validate_parse: 2 callbacks suppressed [ 453.096216][T18232] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3037'. [ 453.153354][T18232] netlink: 'syz.0.3037': attribute type 13 has an invalid length. [ 453.159022][T18227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3036'. [ 453.185884][T18232] netlink: 'syz.0.3037': attribute type 17 has an invalid length. [ 453.264669][T18240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3037'. [ 453.495216][T18244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3038'. [ 453.586196][T18232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.674991][T18232] team_slave_1: left promiscuous mode [ 454.068796][T18232] erspan1: left allmulticast mode [ 454.117452][ T30] audit: type=1804 audit(1781626710.315:13): pid=18263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3040" name="/newroot/602/cgroup.controllers" dev="tmpfs" ino=3103 res=1 errno=0 [ 454.152822][T18232] 8021q: adding VLAN 0 to HW filter on device bond14 [ 454.189024][T18232] bond15: left promiscuous mode [ 454.191451][ T30] audit: type=1800 audit(1781626710.315:14): pid=18263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3040" name="cgroup.controllers" dev="tmpfs" ino=3103 res=0 errno=0 [ 454.228836][T18232] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 454.247777][ T30] audit: type=1804 audit(1781626710.315:15): pid=18263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3040" name="/newroot/602/cgroup.controllers" dev="tmpfs" ino=3103 res=1 errno=0 [ 454.276601][T18232] 8021q: adding VLAN 0 to HW filter on device bond16 [ 454.463091][ T6787] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 454.529079][T18275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3042'. [ 454.578950][T18275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3042'. [ 454.616551][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3042'. [ 454.620211][T17519] veth0_vlan: entered promiscuous mode [ 454.649826][T17519] veth1_vlan: entered promiscuous mode [ 454.748423][T17519] veth0_macvtap: entered promiscuous mode [ 454.796897][T17519] veth1_macvtap: entered promiscuous mode [ 454.873192][T18282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3044'. [ 454.893253][T17519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.953486][T18282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3044'. [ 454.996823][T17519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.010101][T18287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3046'. [ 455.165837][ T6787] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.219428][ T6787] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.280498][ T6787] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.324327][ T1106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.674634][T18312] netlink: 'syz.2.3049': attribute type 10 has an invalid length. [ 455.836147][T18303] dvmrp0: entered allmulticast mode [ 455.886579][T18312] team0: Port device geneve1 added [ 455.928129][ T6788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.007165][ T6788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.048948][T18302] lo speed is unknown, defaulting to 1000 [ 456.058897][ T6788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.081124][ T6792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.106294][ T6792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.118035][ T6792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.314103][T18324] veth11: entered promiscuous mode [ 456.588280][ T6788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.632324][ T6788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.866322][T18346] tipc: Can't bind to reserved service type 0 [ 457.712529][ T5648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 457.730694][ T5648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 457.747091][ T5648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 457.759408][ T5648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 457.773729][ T5648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 458.291962][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 458.509672][ T5628] syz_tun (unregistering): left allmulticast mode [ 458.749393][T18424] __nla_validate_parse: 7 callbacks suppressed [ 458.749412][T18424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3066'. [ 459.015270][ T1106] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.044680][ T1106] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.443172][T18450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3070'. [ 459.482501][ T1106] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.495696][T18453] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3071'. [ 459.521603][ T1106] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.739454][ T1106] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.762839][ T1106] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.811789][ T5633] Bluetooth: hci1: command tx timeout [ 459.844915][T18381] lo speed is unknown, defaulting to 1000 [ 459.900926][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078f6b400: rx timeout, send abort [ 460.054311][ T1106] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.074547][ T1106] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.392779][T18500] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3079'. [ 460.409287][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078f6b400: abort rx timeout. Force session deactivation [ 460.649415][T18513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3083'. [ 460.736132][T18516] netlink: 'syz.3.3084': attribute type 10 has an invalid length. [ 460.765312][T18516] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3084'. [ 461.524988][T18543] netlink: 'syz.3.3087': attribute type 1 has an invalid length. [ 461.556283][T18543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3087'. [ 461.829286][T18556] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3091'. [ 461.892747][ T5633] Bluetooth: hci1: command tx timeout [ 462.116251][T18569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3093'. [ 462.400824][ T1106] bond11 (unregistering): (slave geneve2): Releasing active interface [ 462.553329][ T1106] bond1 (unregistering): (slave bridge7): Releasing backup interface [ 462.565985][ T1106] bond2 (unregistering): (slave bridge8): Releasing backup interface [ 462.606651][ T1106] bond3 (unregistering): (slave bridge11): Releasing backup interface [ 462.638259][ T1106] bond7 (unregistering): (slave bridge13): Releasing active interface [ 462.721063][ T1106] bond1 (unregistering): Released all slaves [ 462.738391][ T1106] bond2 (unregistering): Released all slaves [ 462.794893][ T1106] bond3 (unregistering): Released all slaves [ 462.821132][T18576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3094'. [ 462.826972][ T1106] bond4 (unregistering): Released all slaves [ 462.846871][ T1106] bond5 (unregistering): Released all slaves [ 462.862986][ T1106] bond6 (unregistering): Released all slaves [ 462.890869][ T1106] bond7 (unregistering): Released all slaves [ 462.907246][ T1106] bond8 (unregistering): Released all slaves [ 462.921491][ T1106] bond9 (unregistering): (slave macvlan0): Releasing active interface [ 462.939435][ T1106] bond9 (unregistering): Released all slaves [ 462.953536][ T1106] bond10 (unregistering): Released all slaves [ 462.972689][ T1106] bond0 (unregistering): Released all slaves [ 462.989995][ T1106] bond11 (unregistering): Released all slaves [ 463.010104][ T1106] bond12 (unregistering): Released all slaves [ 463.030110][ T1106] bond13 (unregistering): Released all slaves [ 463.043852][ T1106] bond14 (unregistering): Released all slaves [ 463.057615][ T1106] bond15 (unregistering): Released all slaves [ 463.071170][ T1106] bond16 (unregistering): Released all slaves [ 463.296759][T18381] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.306456][T18381] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.314662][T18381] bridge_slave_0: entered allmulticast mode [ 463.322877][T18381] bridge_slave_0: entered promiscuous mode [ 463.359032][T18381] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.373130][T18381] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.387440][T18381] bridge_slave_1: entered allmulticast mode [ 463.400138][T18381] bridge_slave_1: entered promiscuous mode [ 463.698962][T18381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.730556][ T1106] tipc: Left network mode [ 463.747356][T18381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.865279][ T1106] IPVS: stopping backup sync thread 17481 ... [ 463.934830][T18614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3105'. [ 463.971435][ T5633] Bluetooth: hci1: command tx timeout [ 464.013117][T18611] netlink: 'syz.3.3104': attribute type 2 has an invalid length. [ 464.058350][T18381] team0: Port device team_slave_0 added [ 464.208018][T18628] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 464.242901][T18627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3107'. [ 464.483654][T18381] team0: Port device team_slave_1 added [ 465.003295][T18381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.038997][T18381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.111382][T18381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.178951][T18655] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 465.215267][ T5721] lo speed is unknown, defaulting to 1000 [ 465.222862][T18381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.259833][T18381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.352723][T18381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.640436][T18681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3121'. [ 465.734133][T18677] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3119'. [ 465.744569][T18687] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3122'. [ 465.748560][T18677] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3119'. [ 465.767289][T18677] netlink: 'syz.1.3119': attribute type 4 has an invalid length. [ 465.786173][T18692] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3123'. [ 465.893210][T18381] hsr_slave_0: entered promiscuous mode [ 465.916260][T18381] hsr_slave_1: entered promiscuous mode [ 465.934977][T18381] debugfs: 'hsr0' already exists in 'hsr' [ 465.950211][T18381] Cannot create hsr debugfs directory [ 466.051797][ T5633] Bluetooth: hci1: command tx timeout [ 466.517575][T18712] vlan3: entered promiscuous mode [ 466.532682][T18712] bridge0: entered promiscuous mode [ 466.597357][T18717] netlink: 'syz.4.3127': attribute type 4 has an invalid length. [ 466.607839][T18722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.877815][T18733] netlink: 'syz.4.3130': attribute type 3 has an invalid length. [ 466.889422][T18732] netlink: 'syz.4.3130': attribute type 4 has an invalid length. [ 467.200559][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 467.413925][T18745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3134'. [ 467.460605][T18748] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3135'. [ 468.255225][T18778] netlink: 'syz.2.3141': attribute type 1 has an invalid length. [ 468.296290][T18778] netlink: 1008 bytes leftover after parsing attributes in process `syz.2.3141'. [ 468.508992][T18787] xt_hashlimit: size too large, truncated to 1048576 [ 468.825509][ T1106] hsr_slave_0: left promiscuous mode [ 468.849044][ T1106] hsr_slave_1: left promiscuous mode [ 468.877115][ T1106] veth1_macvtap: left promiscuous mode [ 468.891589][ T1106] veth0_macvtap: left promiscuous mode [ 469.880338][T18381] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 469.893429][T18381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 469.902515][T18381] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 469.919188][T18381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.938034][T18381] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 469.983978][T18381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 470.022894][T18381] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 470.077110][T18381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 470.447757][ T1106] IPVS: stop unused estimator thread 0... [ 470.485738][T18848] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3152'. [ 470.608584][T18852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3153'. [ 470.623599][T18381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.650526][T18852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3153'. [ 470.707520][T18381] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.744413][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.751652][ T6790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.815008][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.822244][ T6790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.022253][T18862] lo speed is unknown, defaulting to 1000 [ 472.219553][T18912] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3164'. [ 472.238812][T18912] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3164'. [ 472.398246][T18381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.587237][T18926] netlink: 'syz.4.3167': attribute type 1 has an invalid length. [ 472.613252][T18926] netlink: 'syz.4.3167': attribute type 1 has an invalid length. [ 472.615986][T18923] netlink: 'syz.3.3166': attribute type 49 has an invalid length. [ 472.642879][T18926] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3167'. [ 472.664300][T18381] veth0_vlan: entered promiscuous mode [ 472.703246][T18381] veth1_vlan: entered promiscuous mode [ 473.023657][T18381] veth0_macvtap: entered promiscuous mode [ 473.047068][T18381] veth1_macvtap: entered promiscuous mode [ 473.298873][T18381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.367167][T18381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.613129][ T1106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.647244][ T1106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.695395][ T1106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.739191][ T1106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.211457][ T6788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.239768][ T6788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.350298][ T6788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.370229][ T6788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.603054][T19009] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3058'. [ 474.965877][T19032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3187'. [ 475.035027][T19032] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 475.065223][T19032] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 475.104851][T19032] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3187'. [ 475.134600][ T5648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 475.149521][ T5648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 475.162844][ T5648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 475.178223][ T5648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 475.187182][ T5648] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 475.284912][T19032] syzkaller1: entered promiscuous mode [ 475.306267][T19032] syzkaller1: entered allmulticast mode [ 475.469039][T19055] netlink: 'syz.4.3189': attribute type 11 has an invalid length. [ 475.500474][T19045] tun0: tun_chr_ioctl cmd 2148553947 [ 475.980399][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3194'. [ 475.992603][T19079] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 476.012125][T19079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3195'. [ 476.038853][T19079] unsupported nla_type 216 [ 476.065616][T19079] netlink: zone id is out of range [ 476.081484][T19079] netlink: zone id is out of range [ 476.106632][T19079] netlink: zone id is out of range [ 476.125003][T19073] team0: Port device team_slave_0 removed [ 476.133482][T19079] netlink: zone id is out of range [ 476.160532][T19079] netlink: zone id is out of range [ 476.218960][T19079] netlink: zone id is out of range [ 476.236302][T19079] netlink: zone id is out of range [ 476.281513][T19079] netlink: zone id is out of range [ 476.307530][T19089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3195'. [ 476.345440][T19079] netlink: zone id is out of range [ 476.378253][T19079] netlink: zone id is out of range [ 476.395371][T19037] lo speed is unknown, defaulting to 1000 [ 476.536671][T19095] dummy0: entered promiscuous mode [ 476.556736][T19095] gretap0: entered promiscuous mode [ 476.582117][T19095] hsr2: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 476.602794][T19095] hsr2: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 476.629513][T19095] hsr2: entered allmulticast mode [ 476.651539][T19095] dummy0: entered allmulticast mode [ 476.656873][T19095] gretap0: entered allmulticast mode [ 477.145415][ T6790] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.186802][ T6790] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 49392 - 0 [ 477.199293][ T6790] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 477.251369][ T5648] Bluetooth: hci0: command tx timeout [ 477.786275][T19154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3207'. [ 477.816650][ T6790] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.851367][ T6790] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 49392 - 0 [ 477.894735][ T6790] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 478.136089][ T6790] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.149646][ T6790] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 49392 - 0 [ 478.161119][ T6790] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 478.230310][T19178] vlan2: entered promiscuous mode [ 478.252162][T19178] bridge0: entered promiscuous mode [ 478.421498][T19183] netlink: 'syz.0.3209': attribute type 4 has an invalid length. [ 478.646730][ T6790] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.682622][ T6790] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 49392 - 0 [ 478.711585][ T6790] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 479.072837][T19202] syzkaller1: entered promiscuous mode [ 479.100346][T19202] syzkaller1: entered allmulticast mode [ 479.163061][T19037] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.180316][T19037] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.202673][T19037] bridge_slave_0: entered allmulticast mode [ 479.226915][T19037] bridge_slave_0: entered promiscuous mode [ 479.260328][T19037] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.285964][T19037] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.311704][T19037] bridge_slave_1: entered allmulticast mode [ 479.326310][T19037] bridge_slave_1: entered promiscuous mode [ 479.342543][ T5648] Bluetooth: hci0: command tx timeout [ 479.605124][T19037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.843471][T19252] netlink: 'syz.2.3221': attribute type 4 has an invalid length. [ 479.880898][T19037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.127059][T19037] team0: Port device team_slave_0 added [ 480.166386][T19037] team0: Port device team_slave_1 added [ 480.341444][T19037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.381601][T19037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.412873][T19037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.514204][T19278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3229'. [ 481.180785][T19275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3228'. [ 481.190958][ T6790] erspan0 (unregistering): left allmulticast mode [ 481.193369][T19275] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3228'. [ 481.256831][ T6790] bond2 (unregistering): (slave gre1): Releasing backup interface [ 481.265581][ T6790] gre1 (unregistering): left promiscuous mode [ 481.326393][ T6790] bond13 (unregistering): (slave geneve3): Releasing active interface [ 481.416904][ T5648] Bluetooth: hci0: command tx timeout [ 481.757497][ T6790] bond5 (unregistering): (slave bridge13): Releasing backup interface [ 481.766223][ T6790] bridge13 (unregistering): left promiscuous mode [ 482.007673][ T6790] bond0 (unregistering): Released all slaves [ 482.018431][ T6790] bond1 (unregistering): Released all slaves [ 482.032286][ T6790] bond2 (unregistering): Released all slaves [ 482.049198][ T6790] bond3 (unregistering): (slave veth9): Releasing active interface [ 482.059022][ T6790] bond3 (unregistering): Released all slaves [ 482.075752][ T6790] bond4 (unregistering): Released all slaves [ 482.096381][ T6790] bond5 (unregistering): Released all slaves [ 482.111463][ T6790] bond6 (unregistering): Released all slaves [ 482.130307][ T6790] bond7 (unregistering): Released all slaves [ 482.149629][ T6790] bond8 (unregistering): Released all slaves [ 482.166176][ T6790] bond9 (unregistering): Released all slaves [ 482.179894][ T6790] bond10 (unregistering): Released all slaves [ 482.198742][ T6790] bond11 (unregistering): (slave veth11): Releasing active interface [ 482.208337][ T6790] bond11 (unregistering): Released all slaves [ 482.227551][ T6790] bond12 (unregistering): Released all slaves [ 482.244499][ T6790] bond13 (unregistering): Released all slaves [ 482.268878][ T6790] bond14 (unregistering): (slave batadv1): Releasing active interface [ 482.280432][ T6790] batadv1: left promiscuous mode [ 482.285680][ T6790] batadv1: left allmulticast mode [ 482.292619][ T6790] bond14 (unregistering): Released all slaves [ 482.307707][ T6790] bond15 (unregistering): Released all slaves [ 482.320963][ T6790] bond16 (unregistering): Released all slaves [ 482.335020][ T6790] bond17 (unregistering): Released all slaves [ 482.351134][T19037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.358510][T19037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.385254][T19037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.405239][T19278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3229'. [ 482.414500][T19281] batadv_slave_1: entered promiscuous mode [ 482.430641][T19291] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 482.579212][T19282] batadv_slave_1: left promiscuous mode [ 482.647085][T19037] hsr_slave_0: entered promiscuous mode [ 482.678787][T19037] hsr_slave_1: entered promiscuous mode [ 482.740123][ T6790] : left promiscuous mode [ 483.048829][ T6790] tipc: Disabling bearer [ 483.065527][ T6790] tipc: Disabling bearer [ 483.097958][ T6790] tipc: Left network mode [ 483.340327][T19330] bond13: entered promiscuous mode [ 483.359623][T19330] 8021q: adding VLAN 0 to HW filter on device bond13 [ 483.491293][ T5648] Bluetooth: hci0: command tx timeout [ 483.602404][T19349] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3239'. [ 483.725222][T19358] net_ratelimit: 13 callbacks suppressed [ 483.725239][T19358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.782404][T19348] syzkaller0: entered promiscuous mode [ 483.788085][T19348] syzkaller0: entered allmulticast mode [ 483.924467][T19368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3242'. [ 484.168500][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 484.188341][T19368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3242'. [ 484.692122][ T6790] hsr_slave_0: left promiscuous mode [ 484.710810][ T6790] hsr_slave_1: left promiscuous mode [ 484.740251][ T7442] IPVS: starting estimator thread 0... [ 484.841450][T19404] IPVS: using max 39 ests per chain, 93600 per kthread [ 484.861291][ T6790] veth1_to_batadv: left promiscuous mode [ 484.880565][ T6790] veth1_vlan: left promiscuous mode [ 484.904225][ T6790] veth0_vlan: left promiscuous mode [ 485.245140][T19425] netlink: 'syz.2.3252': attribute type 5 has an invalid length. [ 485.904659][ T7441] lo speed is unknown, defaulting to 1000 [ 485.940327][ T7441] syz2: Port: 1 Link DOWN [ 485.940536][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 486.017227][ T12] smbdirect: ib_dev[syz2] removed [ 486.144404][T19450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3255'. [ 486.247544][T19450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3255'. [ 486.425913][T19445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3254'. [ 486.730186][T19469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3258'. [ 486.774928][T19469] netlink: 'syz.2.3258': attribute type 5 has an invalid length. [ 486.886192][ T6790] IPVS: stop unused estimator thread 0... [ 487.311752][T19037] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 487.337932][T19037] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.355975][T19037] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 487.370452][T19037] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.388328][T19037] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 487.429289][T19037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 487.464707][T19037] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 487.487503][T19037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.697752][T19037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.753402][T19037] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.785860][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.793049][ T6792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.833877][T19511] bond0: (slave ip6tnl0): refused to change device type [ 487.863680][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.865679][T19517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3267'. [ 487.870875][ T6792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.041136][T19517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3267'. [ 488.070525][T19524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3268'. [ 488.110551][T19524] netlink: 15 bytes leftover after parsing attributes in process `syz.2.3268'. [ 488.217807][T19518] netlink: 'syz.2.3268': attribute type 21 has an invalid length. [ 488.253997][T19518] IPv6: NLM_F_CREATE should be specified when creating new route [ 488.313258][T19518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.320521][T19518] IPv6: NLM_F_CREATE should be set when creating new route [ 488.327818][T19518] IPv6: NLM_F_CREATE should be set when creating new route [ 488.335098][T19518] IPv6: NLM_F_CREATE should be set when creating new route [ 488.449323][T19545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3273'. [ 488.773343][T19565] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3276'. [ 488.814024][T19566] netlink: 'syz.4.3275': attribute type 1 has an invalid length. [ 488.851787][T19566] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3275'. [ 489.699494][ T5633] Bluetooth: hci0: command 0x0405 tx timeout [ 490.374140][T19627] netlink: 'syz.4.3286': attribute type 11 has an invalid length. [ 490.566413][T19037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.723917][T19037] veth0_vlan: entered promiscuous mode [ 490.760006][T19037] veth1_vlan: entered promiscuous mode [ 490.834931][T19037] veth0_macvtap: entered promiscuous mode [ 490.858345][T19037] veth1_macvtap: entered promiscuous mode [ 490.910023][T19037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.950255][T19037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.986910][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.011066][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.043218][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.068445][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.407824][T19660] __nla_validate_parse: 5 callbacks suppressed [ 491.407844][T19660] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3297'. [ 491.487717][ T6790] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.519085][ T6790] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.555039][ T6792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.565074][ T6790] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.588323][ T6792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.597479][ T6790] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.710795][ T6788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.743215][ T6788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.950056][T19684] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3303'. [ 492.033829][T19688] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 492.387700][T19703] sock: sock_timestamping_bind_phc: sock not bind to device [ 492.402272][ T5648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 492.418186][ T5648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 492.427744][T19706] netlink: 'syz.4.3308': attribute type 11 has an invalid length. [ 492.447898][ T5648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 492.465015][ T5648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 492.476396][ T5648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 492.678435][T19699] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 492.756303][T19716] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3311'. [ 492.842933][T19719] x_tables: duplicate underflow at hook 3 [ 493.116575][T19724] can: request_module (can-proto-0) failed. [ 493.185751][T19726] netlink: 'syz.1.3313': attribute type 1 has an invalid length. [ 494.246782][ T6787] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.379688][T19764] netdevsim netdevsim1 €Â: renamed from netdevsim0 (while UP) [ 494.532554][ T5633] Bluetooth: hci2: command tx timeout [ 494.589196][ T6787] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.719425][ T6787] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.813702][T19793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3327'. [ 494.927682][ T6787] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.018887][T19793] hsr_slave_0: left promiscuous mode [ 495.042243][T19793] hsr_slave_1: left promiscuous mode [ 495.522332][T19822] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3335'. [ 495.547873][T19820] netlink: 'syz.1.3334': attribute type 12 has an invalid length. [ 495.765577][T19838] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 495.838277][T19825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3334'. [ 496.100720][T19701] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.122635][T19701] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.142517][T19701] bridge_slave_0: entered allmulticast mode [ 496.159044][T19701] bridge_slave_0: entered promiscuous mode [ 496.183494][ T6787] vlan6: left allmulticast mode [ 496.190636][ T6787] geneve0: left allmulticast mode [ 496.203058][ T6787] vlan6: left promiscuous mode [ 496.216888][ T6787] geneve0: left promiscuous mode [ 496.233654][ T6787] bridge0: port 3(vlan6) entered disabled state [ 496.255245][ T6787] bridge_slave_1: left promiscuous mode [ 496.275561][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.390884][ T6787] lo: left allmulticast mode [ 496.612034][ T5648] Bluetooth: hci2: command tx timeout [ 496.678019][ T6787] gretap0 (unregistering): left allmulticast mode [ 496.882201][ T6787] bond7 (unregistering): (slave geneve4): Releasing active interface [ 496.907681][ T6787] bond2 (unregistering): (slave geneve2): Releasing active interface [ 496.929710][ T6787] team0: Port device geneve1 removed [ 496.980015][ T6787] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 497.199666][ T6787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.212955][ T6787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.223101][ T6787] bond0 (unregistering): (slave team0): Releasing backup interface [ 497.232869][ T6787] bond0 (unregistering): Released all slaves [ 497.243669][ T6787] bond1 (unregistering): Released all slaves [ 497.260325][ T6787] bond2 (unregistering): Released all slaves [ 497.274853][ T6787] bond3 (unregistering): Released all slaves [ 497.288391][ T6787] bond4 (unregistering): Released all slaves [ 497.306660][ T6787] bond5 (unregistering): Released all slaves [ 497.320876][ T6787] bond6 (unregistering): Released all slaves [ 497.337925][ T6787] bond7 (unregistering): Released all slaves [ 497.358117][ T6787] bond8 (unregistering): Released all slaves [ 497.373442][ T6787] bond9 (unregistering): Released all slaves [ 497.386845][ T6787] bond10 (unregistering): Released all slaves [ 497.407240][ T6787] bond11 (unregistering): Released all slaves [ 497.421444][ T6787] bond12 (unregistering): Released all slaves [ 497.435262][ T6787] bond13 (unregistering): Released all slaves [ 497.460481][T19701] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.479864][T19701] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.494536][T19701] bridge_slave_1: entered allmulticast mode [ 497.513196][T19701] bridge_slave_1: entered promiscuous mode [ 497.631818][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 497.678661][ T6787] 5nè: left promiscuous mode [ 497.822468][T19701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.955945][T19701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.992205][T19892] xt_hashlimit: size too large, truncated to 1048576 [ 498.012109][T19895] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3347'. [ 498.023477][ T6787] tipc: Left network mode [ 498.287143][ T6787] ================================================================== [ 498.295251][ T6787] BUG: KASAN: slab-use-after-free in fib_rules_lookup+0x15e/0xeb0 [ 498.303172][ T6787] Read of size 8 at addr ffff888028804780 by task kworker/u8:11/6787 [ 498.311242][ T6787] [ 498.313593][ T6787] CPU: 0 UID: 0 PID: 6787 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 498.313615][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 498.313626][ T6787] Workqueue: netns cleanup_net [ 498.313752][ T6787] Call Trace: [ 498.313763][ T6787] [ 498.313770][ T6787] dump_stack_lvl+0xe8/0x150 [ 498.313792][ T6787] print_address_description+0x55/0x1e0 [ 498.313815][ T6787] ? fib_rules_lookup+0x15e/0xeb0 [ 498.313829][ T6787] print_report+0x58/0x70 [ 498.313843][ T6787] kasan_report+0x117/0x150 [ 498.313887][ T6787] ? fib_rules_lookup+0x15e/0xeb0 [ 498.313904][ T6787] ? fib_rules_lookup+0x99/0xeb0 [ 498.313920][ T6787] fib_rules_lookup+0x15e/0xeb0 [ 498.313936][ T6787] ? fib_rules_lookup+0x99/0xeb0 [ 498.313953][ T6787] ? __pfx_fib_rules_lookup+0x10/0x10 [ 498.313967][ T6787] ? l3mdev_update_flow+0x26/0x610 [ 498.314034][ T6787] ? l3mdev_update_flow+0x4ad/0x610 [ 498.314052][ T6787] __fib_lookup+0x106/0x210 [ 498.314139][ T6787] ? unwind_next_frame+0x8f/0x2550 [ 498.314173][ T6787] ? __pfx___fib_lookup+0x10/0x10 [ 498.314189][ T6787] ? unwind_next_frame+0x8f/0x2550 [ 498.314207][ T6787] ? fib_lookup+0x49/0x440 [ 498.314259][ T6787] ? ip_route_output_key_hash_rcu+0x274/0x2720 [ 498.314312][ T6787] ip_route_output_key_hash_rcu+0x294/0x2720 [ 498.314339][ T6787] ? ip_route_output_key_hash+0xd8/0x2a0 [ 498.314362][ T6787] ? ip_route_output_key_hash+0xd8/0x2a0 [ 498.314384][ T6787] ip_route_output_key_hash+0x18d/0x2a0 [ 498.314408][ T6787] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 498.314431][ T6787] ? lock_acquire+0x106/0x350 [ 498.314454][ T6787] ip_route_output_flow+0x2a/0x150 [ 498.314477][ T6787] ip4_datagram_release_cb+0x89d/0xbe0 [ 498.314532][ T6787] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 498.314554][ T6787] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 498.314575][ T6787] ? do_raw_spin_lock+0x12b/0x2f0 [ 498.314602][ T6787] ? release_sock+0x2f/0x260 [ 498.314626][ T6787] release_sock+0x206/0x260 [ 498.314650][ T6787] inet_shutdown+0x2b1/0x390 [ 498.314722][ T6787] udp_tunnel_sock_release+0x6d/0x80 [ 498.314773][ T6787] fou_exit_net+0x17d/0x1f0 [ 498.314794][ T6787] ops_undo_list+0x43d/0x8d0 [ 498.314820][ T6787] ? __pfx_ops_undo_list+0x10/0x10 [ 498.314845][ T6787] ? idr_destroy+0x227/0x290 [ 498.314895][ T6787] cleanup_net+0x572/0x810 [ 498.314921][ T6787] ? __pfx_cleanup_net+0x10/0x10 [ 498.314947][ T6787] ? rcu_is_watching+0x15/0xb0 [ 498.314975][ T6787] ? process_scheduled_works+0xa20/0x14e0 [ 498.315002][ T6787] process_scheduled_works+0xa8e/0x14e0 [ 498.315031][ T6787] ? __pfx_process_scheduled_works+0x10/0x10 [ 498.315051][ T6787] ? assign_work+0x3cf/0x5d0 [ 498.315069][ T6787] worker_thread+0xa47/0xfb0 [ 498.315098][ T6787] kthread+0x389/0x470 [ 498.315119][ T6787] ? __pfx_worker_thread+0x10/0x10 [ 498.315135][ T6787] ? __pfx_kthread+0x10/0x10 [ 498.315156][ T6787] ret_from_fork+0x514/0xb70 [ 498.315189][ T6787] ? __pfx_ret_from_fork+0x10/0x10 [ 498.315206][ T6787] ? __switch_to+0xc89/0x1420 [ 498.315230][ T6787] ? __pfx_kthread+0x10/0x10 [ 498.315251][ T6787] ret_from_fork_asm+0x1a/0x30 [ 498.315278][ T6787] [ 498.315285][ T6787] [ 498.616096][ T6787] Allocated by task 5644: [ 498.620470][ T6787] kasan_save_track+0x3e/0x80 [ 498.625142][ T6787] __kasan_kmalloc+0x93/0xb0 [ 498.629718][ T6787] __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 498.636144][ T6787] kmemdup_noprof+0x2b/0x70 [ 498.640656][ T6787] fib_rules_register+0x2f/0x400 [ 498.645576][ T6787] fib4_rules_init+0x21/0x160 [ 498.650247][ T6787] fib_net_init+0x17a/0x3e0 [ 498.654801][ T6787] ops_init+0x35d/0x5d0 [ 498.658948][ T6787] setup_net+0x118/0x350 [ 498.663173][ T6787] copy_net_ns+0x4f9/0x720 [ 498.667574][ T6787] create_new_namespaces+0x3f0/0x6b0 [ 498.672843][ T6787] unshare_nsproxy_namespaces+0x149/0x190 [ 498.678540][ T6787] ksys_unshare+0x57d/0xa00 [ 498.683025][ T6787] __x64_sys_unshare+0x38/0x50 [ 498.687781][ T6787] do_syscall_64+0x174/0x580 [ 498.692354][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.698229][ T6787] [ 498.700536][ T6787] Freed by task 23: [ 498.704491][ T6787] kasan_save_track+0x3e/0x80 [ 498.709158][ T6787] kasan_save_free_info+0x40/0x50 [ 498.714166][ T6787] __kasan_slab_free+0x5c/0x80 [ 498.718916][ T6787] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 498.724444][ T6787] rcu_free_sheaf+0x31/0x200 [ 498.729018][ T6787] rcu_core+0x78b/0x10a0 [ 498.733244][ T6787] handle_softirqs+0x225/0x840 [ 498.737990][ T6787] run_ksoftirqd+0x36/0x60 [ 498.742390][ T6787] smpboot_thread_fn+0x57c/0xa80 [ 498.747309][ T6787] kthread+0x389/0x470 [ 498.751366][ T6787] ret_from_fork+0x514/0xb70 [ 498.755959][ T6787] ret_from_fork_asm+0x1a/0x30 [ 498.760703][ T6787] [ 498.763009][ T6787] The buggy address belongs to the object at ffff888028804700 [ 498.763009][ T6787] which belongs to the cache kmalloc-192 of size 192 [ 498.777040][ T6787] The buggy address is located 128 bytes inside of [ 498.777040][ T6787] freed 192-byte region [ffff888028804700, ffff8880288047c0) [ 498.790818][ T6787] [ 498.793129][ T6787] The buggy address belongs to the physical page: [ 498.799531][ T6787] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28804 [ 498.808299][ T6787] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 498.815396][ T6787] page_type: f5(slab) [ 498.819360][ T6787] raw: 00fff00000000000 ffff88813fe163c0 dead000000000100 dead000000000122 [ 498.827944][ T6787] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 498.836504][ T6787] page dumped because: kasan: bad access detected [ 498.842971][ T6787] page_owner tracks the page as allocated [ 498.848673][ T6787] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8234625473, free_ts 8214755610 [ 498.868452][ T6787] post_alloc_hook+0x22d/0x280 [ 498.873211][ T6787] get_page_from_freelist+0x24ae/0x2530 [ 498.878744][ T6787] __alloc_frozen_pages_noprof+0x18d/0x380 [ 498.884542][ T6787] allocate_slab+0x77/0x660 [ 498.889027][ T6787] refill_objects+0x336/0x3d0 [ 498.893770][ T6787] __pcs_replace_empty_main+0x320/0x720 [ 498.899321][ T6787] __kmalloc_cache_noprof+0x388/0x660 [ 498.904678][ T6787] kset_create_and_add+0x5a/0x170 [ 498.909777][ T6787] netdev_register_kobject+0x1a2/0x310 [ 498.915287][ T6787] register_netdevice+0x1470/0x1f00 [ 498.920542][ T6787] ifb_init_one+0x69/0x90 [ 498.924923][ T6787] ifb_init_module+0x40/0xa0 [ 498.929496][ T6787] do_one_initcall+0x250/0x870 [ 498.934244][ T6787] do_initcall_level+0x10a/0x1a0 [ 498.939210][ T6787] do_initcalls+0x59/0xa0 [ 498.943527][ T6787] kernel_init_freeable+0x29d/0x3e0 [ 498.948713][ T6787] page last free pid 24 tgid 24 stack trace: [ 498.954681][ T6787] __free_frozen_pages+0xc0d/0xd20 [ 498.959783][ T6787] vfree+0x1fd/0x330 [ 498.963671][ T6787] delayed_vfree_work+0x55/0x80 [ 498.968509][ T6787] process_scheduled_works+0xa8e/0x14e0 [ 498.974044][ T6787] worker_thread+0xa47/0xfb0 [ 498.978615][ T6787] kthread+0x389/0x470 [ 498.982668][ T6787] ret_from_fork+0x514/0xb70 [ 498.987250][ T6787] ret_from_fork_asm+0x1a/0x30 [ 498.992000][ T6787] [ 498.994308][ T6787] Memory state around the buggy address: [ 498.999918][ T6787] ffff888028804680: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 499.007960][ T6787] ffff888028804700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 499.016066][ T6787] >ffff888028804780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 499.024111][ T6787] ^ [ 499.028160][ T6787] ffff888028804800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.036200][ T6787] ffff888028804880: 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc [ 499.044253][ T6787] ================================================================== [ 499.052485][ T6787] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 499.059697][ T6787] CPU: 0 UID: 0 PID: 6787 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 499.069257][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 499.079315][ T6787] Workqueue: netns cleanup_net [ 499.084084][ T6787] Call Trace: [ 499.087381][ T6787] [ 499.090297][ T6787] vpanic+0x56c/0xa60 [ 499.094269][ T6787] ? rcu_is_watching+0x15/0xb0 [ 499.099020][ T6787] ? __pfx_vpanic+0x10/0x10 [ 499.103513][ T6787] panic+0xc5/0xd0 [ 499.107222][ T6787] ? __pfx_panic+0x10/0x10 [ 499.111626][ T6787] ? fib_rules_lookup+0x15e/0xeb0 [ 499.116640][ T6787] ? fib_rules_lookup+0x15e/0xeb0 [ 499.121647][ T6787] check_panic_on_warn+0x89/0xb0 [ 499.126575][ T6787] ? fib_rules_lookup+0x15e/0xeb0 [ 499.131582][ T6787] end_report+0x73/0x170 [ 499.135819][ T6787] ? fib_rules_lookup+0x15e/0xeb0 [ 499.140830][ T6787] kasan_report+0x128/0x150 [ 499.145339][ T6787] ? fib_rules_lookup+0x15e/0xeb0 [ 499.150359][ T6787] ? fib_rules_lookup+0x99/0xeb0 [ 499.155293][ T6787] fib_rules_lookup+0x15e/0xeb0 [ 499.160131][ T6787] ? fib_rules_lookup+0x99/0xeb0 [ 499.165076][ T6787] ? __pfx_fib_rules_lookup+0x10/0x10 [ 499.170436][ T6787] ? l3mdev_update_flow+0x26/0x610 [ 499.175715][ T6787] ? l3mdev_update_flow+0x4ad/0x610 [ 499.180900][ T6787] __fib_lookup+0x106/0x210 [ 499.185407][ T6787] ? unwind_next_frame+0x8f/0x2550 [ 499.190514][ T6787] ? __pfx___fib_lookup+0x10/0x10 [ 499.195523][ T6787] ? unwind_next_frame+0x8f/0x2550 [ 499.200623][ T6787] ? fib_lookup+0x49/0x440 [ 499.205024][ T6787] ? ip_route_output_key_hash_rcu+0x274/0x2720 [ 499.211168][ T6787] ip_route_output_key_hash_rcu+0x294/0x2720 [ 499.217148][ T6787] ? ip_route_output_key_hash+0xd8/0x2a0 [ 499.222774][ T6787] ? ip_route_output_key_hash+0xd8/0x2a0 [ 499.228405][ T6787] ip_route_output_key_hash+0x18d/0x2a0 [ 499.233943][ T6787] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 499.239999][ T6787] ? lock_acquire+0x106/0x350 [ 499.244665][ T6787] ip_route_output_flow+0x2a/0x150 [ 499.249765][ T6787] ip4_datagram_release_cb+0x89d/0xbe0 [ 499.255219][ T6787] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 499.260760][ T6787] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 499.266732][ T6787] ? do_raw_spin_lock+0x12b/0x2f0 [ 499.271752][ T6787] ? release_sock+0x2f/0x260 [ 499.276341][ T6787] release_sock+0x206/0x260 [ 499.280834][ T6787] inet_shutdown+0x2b1/0x390 [ 499.285413][ T6787] udp_tunnel_sock_release+0x6d/0x80 [ 499.290693][ T6787] fou_exit_net+0x17d/0x1f0 [ 499.295184][ T6787] ops_undo_list+0x43d/0x8d0 [ 499.299765][ T6787] ? __pfx_ops_undo_list+0x10/0x10 [ 499.304869][ T6787] ? idr_destroy+0x227/0x290 [ 499.309443][ T6787] cleanup_net+0x572/0x810 [ 499.313851][ T6787] ? __pfx_cleanup_net+0x10/0x10 [ 499.318779][ T6787] ? rcu_is_watching+0x15/0xb0 [ 499.323548][ T6787] ? process_scheduled_works+0xa20/0x14e0 [ 499.329252][ T6787] process_scheduled_works+0xa8e/0x14e0 [ 499.334796][ T6787] ? __pfx_process_scheduled_works+0x10/0x10 [ 499.340762][ T6787] ? assign_work+0x3cf/0x5d0 [ 499.345340][ T6787] worker_thread+0xa47/0xfb0 [ 499.349924][ T6787] kthread+0x389/0x470 [ 499.353982][ T6787] ? __pfx_worker_thread+0x10/0x10 [ 499.359105][ T6787] ? __pfx_kthread+0x10/0x10 [ 499.363684][ T6787] ret_from_fork+0x514/0xb70 [ 499.368261][ T6787] ? __pfx_ret_from_fork+0x10/0x10 [ 499.373356][ T6787] ? __switch_to+0xc89/0x1420 [ 499.378023][ T6787] ? __pfx_kthread+0x10/0x10 [ 499.382597][ T6787] ret_from_fork_asm+0x1a/0x30 [ 499.387351][ T6787] [ 499.390627][ T6787] Kernel Offset: disabled [ 499.394934][ T6787] Rebooting in 86400 seconds..