last executing test programs: 7.695208323s ago: executing program 3 (id=2866): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x4, 0x4, 0x4}, 0x50) r2 = accept4$unix(r0, 0x0, &(0x7f0000000000), 0xe8d036c3db81558e) recvmsg$unix(r2, &(0x7f0000001980)={&(0x7f00000002c0), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/87, 0x57}, {&(0x7f00000014c0)=""/43, 0x2b}, {&(0x7f0000001500)=""/209, 0xd1}, {&(0x7f0000001600)=""/104, 0x68}, {&(0x7f0000001680)=""/133, 0x85}, {&(0x7f0000001740)=""/221, 0xdd}, {&(0x7f0000001840)=""/118, 0x76}], 0xa}, 0x40000120) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089}, 0x90) 7.694816212s ago: executing program 3 (id=2868): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000cde300a5ed1c50000000009500090000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.694699012s ago: executing program 3 (id=2869): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x80) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x80) 7.480576149s ago: executing program 3 (id=2876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=0x0], 0x48) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@xdp, &(0x7f0000000080)=0x80, 0x80800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r0}, 0x38) 7.418728975s ago: executing program 3 (id=2878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x810) 7.273031231s ago: executing program 3 (id=2881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xa, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.826818901s ago: executing program 2 (id=2921): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000040)=0x2, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x1c) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050226bd7000fff02800070073797374656d5f753a6f626a6563745f723a766d776172d3655f64d8766963655f743a733000000000d9a7da1ba7628913bac56618c8a71732e6e9f79e62"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x800) 2.699598672s ago: executing program 4 (id=2923): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0x1, 0xa, 0x0, 0x2}, 0x20) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) 2.568906756s ago: executing program 4 (id=2925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r2 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) (async, rerun: 64) sendto$inet6(r2, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) (async, rerun: 64) sendto$inet6(r2, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/237, 0xed, 0x8020, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r3, 0x77a5768982e879e3, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) 2.117650621s ago: executing program 1 (id=2932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000040)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x310, 0xf0, 0xffffffff, 0xf0, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'batadv0\x00', 'veth0_to_batadv\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x3, @ipv6=@mcast2, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @icmp_id=0x6b, @icmp_id=0x65}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x36}, @ipv4=@multicast2, @gre_key=0x400, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)="f03ec97abbca4c1679ebf27e53a8c0e85a8ff0d7bf179b44a1489117d7eae29c", 0x20}], 0x1, 0x0, 0x0, 0x440c0}], 0x1, 0x8001) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r7 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r8 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) socket$inet6(0xa, 0x5, 0x0) 1.854065691s ago: executing program 2 (id=2934): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x81, 0x2}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [0x0, 0x0, 0xffffffff], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x6, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000021400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a3100000000100003"], 0x5c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) 1.691693577s ago: executing program 4 (id=2935): r0 = socket(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0xffffffffffffff19) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @local, 0xffff}, 0x69) r3 = socket(0x2c, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x11, 0x148, 0x98, 0x0, 0x150, 0x2a8, 0x2a8, 0x150, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xff4f}}}, {{@ip={@multicast1, @private=0xa010101, 0xffffffff, 0xffffff00, 'geneve0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4, 0x7f, 0x80000000, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="036b8868b27a634bbd20d1e89d4aedb4bb1abd7e4748ccd0303e31441f8c6f1bb66b862b9593ffe91986c169c7d5086d12be6562ca55219072c46b3e0fca89fd227189f17d2e8d84961a82f80b9ab90e83251dd31b1ab70a33264651f862eea97325a10c0af7166d7d5c0aed92c34a494c244a4399b34fdf3806"], 0x44}, 0x1, 0x0, 0x0, 0x24041004}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) socket(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0xffffffffffffff19) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @local, 0xffff}, 0x69) (async) socket(0x2c, 0x1, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x11, 0x148, 0x98, 0x0, 0x150, 0x2a8, 0x2a8, 0x150, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xff4f}}}, {{@ip={@multicast1, @private=0xa010101, 0xffffffff, 0xffffff00, 'geneve0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4, 0x7f, 0x80000000, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="036b8868b27a634bbd20d1e89d4aedb4bb1abd7e4748ccd0303e31441f8c6f1bb66b862b9593ffe91986c169c7d5086d12be6562ca55219072c46b3e0fca89fd227189f17d2e8d84961a82f80b9ab90e83251dd31b1ab70a33264651f862eea97325a10c0af7166d7d5c0aed92c34a494c244a4399b34fdf3806"], 0x44}, 0x1, 0x0, 0x0, 0x24041004}, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) (async) 1.56244979s ago: executing program 4 (id=2936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x14, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1160e9a6}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_query, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0xa2b00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x0, 0x4, 0x7ff}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000300)=[0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x1, 0xe, 0x7}, {0x0, 0x1, 0xc, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x1, 0x1, 0xf, 0x7}, {0x1, 0x2, 0x1, 0xb}, {0x0, 0x1, 0x3, 0x2}, {0x1, 0x1, 0x6, 0xa}, {0x5, 0x2, 0x4, 0x6}, {0x5, 0x5, 0xf}, {0x3, 0x4, 0x7, 0x6}], 0x10, 0xe3}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000740)={r2, 0x0, 0xd4, 0x0, &(0x7f0000000580)="70d8255ad953c6afa83cc30d08cac0bb19ed11244983a7c620348e8ffbf6d0545d81cea5714d94d593293611d5e7e321b74fb1c8f2d9b5267f364ba3ed10798dde7cc3bfaadc328b7b610af87edd8c3ddc97c0e7d860848903dffc425befa36377a3a4cb02ced2e8783d84e9f465750764a4f5e6e9376006ecb0358c64c4a2655fd442411d367381df0c265918d6c6d1a27ff67d05dd99da79d3e743b9fc7531e85dcc679412c701b4da2870d8b5380f37a48d5521318b0bcad64ffb29a709b723c6165737f36f8b5528639b765cc6bbd5586667", 0x0, 0x5, 0x0, 0x82, 0x0, &(0x7f0000000680)="8b9a0b119a21dfcf94465f7beca645c73b31b66302be5a9fcc11d435e3b47ae1946927c55d7081c67ae29287cc863d276c846c0feba05fa675780c0ecd0688b8e31b41077939c872362c20a58026a855423409cb09e2221f12291272a092d4f986894cb0fb292817f0b23ee7d4ba8f409f8250dc2916ce1566c96f3e57b6fa1d974c", 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f00000004c0)}], 0x1, 0x4814) recvmmsg(r4, &(0x7f0000000e00), 0x0, 0x2001, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) shutdown(r7, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x6020400) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448cc, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'batadv_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) 940.616434ms ago: executing program 1 (id=2937): syz_emit_ethernet(0x36, &(0x7f0000001800)={@local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe001, 0x2}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x4, @loopback, 0x5}}, [0x10000, 0x6, 0x3, 0x3, 0xfffffffffffffffe, 0x8, 0x8, 0x1, 0x9, 0x800, 0x9, 0x6, 0xf, 0x2, 0x8]}, &(0x7f0000000100)=0x100) 923.075972ms ago: executing program 2 (id=2938): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="40813340e3fa5cbc4e40c087085d8ceae03f7cc310fe8e4f86fbb8559ca22406d7b40a9eb4114f39877b76c08239996dedccf6eb4612000000000000000000000000e500"/80, @ANYRES64=0x0], 0x20) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=ANY=[@ANYRES8=r3, @ANYRES16=r1], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xd4, 0x0, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24e30000", @ANYRES16=r8, @ANYBLOB="00042dbd7000fedbdf250b000000050005000f0000000800020001000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000180)={0xffffffffffffffff, 0x8, 0x0, 0x1000, @vifc_lcl_ifindex=r7, @empty}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0xef, &(0x7f0000000580)=""/239, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x4) r11 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711062000000000005e9ff00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0xf84}, 0x1c) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="39000000140081ae00003c000500218311001fa2660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb301000000dbb7d553b4e92155", 0x39}], 0x1}, 0x20000050) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r9, 0x5000943f, &(0x7f00000009c0)={{r0}, r12, 0x4, @inherit={0x60, &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000300000000000000040000000000000004000000000000000100000000000001a437ffffffffffff0100000000000000020000000000000005000000000000000300000000000000ffffffffffffffff0000000000000100"]}, @subvolid=0x1}) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r14 = accept4(r13, 0x0, 0x0, 0x800) sendmmsg$alg(r14, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f7", 0x81}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 911.0549ms ago: executing program 1 (id=2939): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x20, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e700009e0ff008001ffff2e1ffff8100632f0806", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x1f, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000212f57ac141440e0", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) socket$inet6_mptcp(0xa, 0x1, 0x106) 829.482335ms ago: executing program 0 (id=2940): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x81, 0x0, 0x0, 0x0, 0x7f5, &(0x7f0000000140)='veth1_to_team\x00', 0x100000000, 0x8, 0x1157}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) (async) write$nci(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="61053d0175c38207012104c018b2510e011e104da1c429878e3324b935744f3271eae70fa0701ceee3f92ebfee1c20f4bac68ff640ef7b4cecd72455245c6060ce93f5228b6a20317744e80ae87360f7f7a988783a62c71009f893847b2822cf91"], 0x61) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000000000006301a2000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r2) (rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r9}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) (async, rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000001100)={{{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4e20, 0x3, 0x4e20, 0x5, 0x2, 0xa0, 0xa0, 0x6, 0x0, r9}, {0x3, 0xfffffffffffff111, 0x0, 0x9, 0x8000000000000000, 0x6, 0xd, 0x7}, {0x6, 0x6, 0x7}, 0xf, 0x6e6bba, 0x2, 0x0, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3506, 0x2, 0x0, 0x25, 0x1, 0xb04, 0xffffffff}}, 0xe8) (rerun: 64) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000180)="12c3f3900a1487888800db27801ce461cd69c5aa0eebd0e719d338085784c0f9453d9127db7ef0041747", 0x2a}, {&(0x7f0000000300)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51", 0x17}], 0x2) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) r10 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r10, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) (async) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000010c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x95) 787.101591ms ago: executing program 1 (id=2941): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 785.5555ms ago: executing program 4 (id=2942): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$can_bcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000000800)=""/240, 0xf0}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f00000001c0)) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x1c, r7, 0x1, 0x20000006, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r7, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xe0}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x804) r10 = socket$inet(0x2, 0x802, 0x1) write(r10, &(0x7f0000000080)="08008edf773c8000", 0xfd) 714.945303ms ago: executing program 2 (id=2943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020000}, 0xc, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[], 0x16c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048090) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x22, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="cd3e000000000000000001000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd26792040000006f64e62cd3404917f3be657330adc6bf2f2ab6286f917412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf13e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e852830000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0x2) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=ANY=[], 0x18}}], 0x1, 0x0) bind$rxrpc(r8, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r10, &(0x7f00000003c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYRES32], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000003f00019f2cbd700000000000037c00000400428006000a"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x0) socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a30000000000500050002000000140007800500150002000000080012400000000005000400000000001200030068010000806e65742c706f7274000000"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) 545.534102ms ago: executing program 0 (id=2944): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)=""/4094, 0xffe}, {&(0x7f0000002280)=""/4095, 0xfff}, {&(0x7f0000001140)=""/161, 0xa1}], 0x3}, 0x40000020) (async) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000040)={0x617, 0x1, 0x2}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 513.768022ms ago: executing program 1 (id=2945): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], 0x0, 0x4e}, 0x20) (async) close(r0) (async) getpeername$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0x14) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @local}, &(0x7f0000000500)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x78, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000600"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005080007006e61740014"], 0xf0}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, 0x0, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000014c0)=@newlink={0x38, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r11, @ANYBLOB="00000000000800001c0040"], 0x50}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x49}}}}}, 0x30}}, 0x240040c0) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r12, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x29}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000014}, 0x800) 461.799399ms ago: executing program 0 (id=2946): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500030000000500010006000000140007800600040000040000060005"], 0x5c}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@gettclass={0xfffffffffffffc9a, 0x2a, 0xf24, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0xf}, {0x7}, {0x7ffa, 0xfff2}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xfffa, 0x9}, {0x0, 0xffe0}, {0x4, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0xac6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c800}, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000680)={0xc24f, 0x30f, 0x200, 0x8}, &(0x7f0000000000)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 385.457186ms ago: executing program 1 (id=2947): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x1, 0x2, '\x00', 0x0, 0xfd}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x1}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20020804}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc000000180001"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000300)="aa975aebe288ffa2ba1f03a761651e86c2ee8f9ab9b9066671b27651875964604c6973726e2d9ea4478871aa587542ff87848f2c3a269bae41259eb83005100f00821843963cf6163c4736df7f14d7ce2ded83d5a761a6e927f717a0bf7cdc64803ffad357f656fc6a121e238c1e8415", 0x70}, {&(0x7f0000000380)="d33c942ca9c7f9fdd11021aec44a6a311a6d1cb8d51fc0cab58b4e22665db12bfcb6b98d23e178598a944f611928681f9fa6504299d40620efba97b3c4b99b3a295d82d99d1f65fe5d6a8cabd0fce71c0e07a972dad41e49ce9de00b590322a17d1acae6b015cda205e2928aba330f6fb3a130ec4077290da4f8f4aa5a6bdb21073fef94369025df769cf0b2717e05dace4116fcb42a9b0f97a4d1aad504fe76ab23ec6a2e40e4a30e025f7bc1692433768ed1ce", 0xb4}, {&(0x7f0000001300)="2b8c3c4277a37020f55a45aadc25f24ac23ea49b1730551d454bb830ca1ddb238c7e043302726da6d8c6fd0a9d56ed298d2c33171959007df7b159b59ff2f5911724d486cd659a6856f03be790fde45b22c6801189051bc9de4f5d8a9b4216409f53ced222a7c09195ff9ddd7fab2499d63ffd93d5aa8a21edc7108a0cbe8ca710890b50a11c1613691c1ca202a0059af019df4b4ae5b910585eb8d6536b0763a22a2e0e4671c7433b6d256fb5fafe5e8563fb4d199a74ec917aaf33254c3a64effb42081fcc71125e9e9acb05ee800763f1d779ec17ecb15576cccbb48d7e8bf1646f6ed49795b3d3eb467e6ab5223b7d3df0ea079c2cf984aa1c78d27820157d91f6d17f08d4c54b80996dfec4397ef612d56cfa634abb013aaa1aa5d042ecddb6c993bb66f4d9059d693bcfcc66843969e00da3ac09c791ba4ffcad5876f0d1ef91519ddb479017b16a5f1b10a46ce29e7e39e61acf0edbc51dda8cd88655057b3bc2111089abf51975f938dd68b5f8cf59dee2222ad8d42c3b93f4bcf35a795654d56102980df79528b67433b6a448cf05e8b5225c10e6c112739f6cb323bd7c37646010816ee495f2e5801a640435b24cdcd290dcf85ea98ade44d5bbc91411b21db3774c9fe848333c5606c494ee844aa321483591b204eedc64d9f5a1f61e898b3da6b226dbb2f8a569d3f37de95bf01a3fd17fb1c1db95b9593ed36b0a1b1efc430abfce779f740229e845c31a6023818cb2174479edb186ad75ed4623ef0680c7663f6bc3412a3e5035f621627aa77c053a6ccea847b465eff968761cdd3a8be3a7ab7f73b5a6b92aed3d1affd34e0d1306ff7b07a682387c0af3cff81fe1f6dd573bc4682070f9ff7e234893aa1653f2672dcff7ae493f161301f434fd025b5050c9029fd136d9eae1e68187ad6d6e2e62808fbe514ac7a969c4cdc91d55d24d508bb30122a9a37183c8d6ea3d8ec16a7cd960bd421f8d27965b035803856e84932172f8fc87098a696f910911a587c83d983967f9d23ffbe3aed51dfad5ecc0385b9fadcfa7f07d6974e5bad669d370f7b70b8593894c10713795a7176a368c0714ba1ee74b4bb3589c59cf06693796b7f7504926d39a4e644d34be5c69434efdc575e213b8b6742e7c5138fa68f297b31794e28f0cdecccfc1e785d1e87b149aed40baefc51e1a1235e6b40cc842270fa12f2a8f2d79314b02bbabf6a4ce15e8cc4afca01380fdb589eae1ce8bdc5927123cff133b15ca426b00ff5d3dd2bae740336d60e9190c7d983a5d140ba6085a175bbdeecee33261d2b77018fe0a4976f3984029b066d84dd6a76c48573ced1d5e66791ffc367bf7d8cd5125009fd2f427cf7a333b576b904c54d3b1e16891ae6cf69e33907bc57dc4e8e75ee7068a604b90cf8fb04673b188f7a422e28a0f1c494260c042465d318d3261f23bc9e3f2669ba07779096775756c47f4f43dc768ff7363a9c590206e21b06b82231caee257e0987d632aa113f83cb909008b8b838f7779d1f01c9069d0736fc185a69949daf247da3576b2bf4caa4276ec284d934caf1c4fa81f5cee7e4001d2080b4de6de18cf9f915662770f1d1bce7830812c2c4538ad26c1f6eafcacd9e74e52439993d67d29518c4bc163cd7aa6d9420c27b5e97a21c6d91374f3b51898a0ee4eb3da8b1063a8f9d16f7bd28bbf25121149f1fa3ec3612d70cc1ccec64d3e349328e1c787e918fcb49e406c776878f30600c41e7dc373516b6c848051d50d32b85bb10bc8d40d7a5cabfe4c9555cc15690af009e11a5759b0387e5114faf530da9ad04a650a63b4ca25077770efb4a546bd5224ddbf05a1a0c278ce70cd6379d0e9daf86febb24ff98f002ac2100aec5a471cbed96bbd5e0d4fe815368ef5c0c3e7233c4721c26d86044f8b4ad995f69e50545f86d02646e7e954f4c2adad782f614e6a96679a5c77f9484d466b0a9fc34437273fa239e0baafaccd7a8411c72e47a10e59f0649bf0733c34a741dae5065a2d75668a081e5b0ca8e99e6322edddfa6770d84040e0eb495aa7c2e0dac7fef0e3051a3eddda45d42b26c8308d3bfade94ee9b52445fe2fab6fe9c512a975ba665e1dac3ffe33e1f9f3fc9b53a32da4733317f67dc7fce04a6e1955d7c168dd0b66efa96b83fdc2e636f649460168c5ca2303292802fa686dfeb996b37e24d390149696240dfaba3f3589d708f869a6e8ccc5718177031ec174c805235f4283cdf782cff6677cdbe78e888a917944ca5d7ec4e89b2301095478d38191804dd0c2984fc89671f9f1437b07d85a379e804ecf4d7ffda8dbc5d569ce8b7ea75e02fd5b2145cf7bbca98aab4d06a87b8821b25cfa5a2ccdbf3b3eb65d67a109d4abdbf1be0490df405c0e7acf62de8742fe14d74509c00badea8b7eb5f8a8b6f8129a984c0815f9dcf69895c7acbec28aedc08b2a4ab95405154f147f541600f672624cc9bc2133b4adea68fe6eba46d30ef7ce20b2c4f4aa4a2ed1ae5a3f846599030ad534540eff3c2b9bf7a354bcbca685bc7d2a2908aaf5800ee2e8aa7725f7e57e0f494bff1fcc355a538d7a0ca0b2f018933825ef57eec0f6bc0156495865e8d0a90ca6a83ddb56d69218e85ed50d948a84d397ac223cc0a0e3d55bf809f3cafb806a6e262698ee75b882d4af39fad568f8e603d3245a68ba7a0312be9363b28cab4dca17a50352bc7694b30ba5eba27449dc6acf14acbc36cc5da56e2009fdafe3b6201da2bdbc922f3cc3bd3846efa063ca2b794f9544b31858b2386c48340d44576e2e8a4329c7a980d02bad1cf943fec5bddd69617b7d0c7846aaf6de6044855de8c50effd216bcc07088f5608357dbdff5e04ae86134ed1c0d0abc85e64e26c134bab574d8b8c7e0891d541c10108ed94262b394e6a7c9f54fd49bbad6d7605b07dd55eda7fc91ebcc5a150f46cf23339f3a1ebb2c1f1f7636ffb717010dc4c32669d151d2bd821fb483fdcb9900c716d493987849703c69ea413bd0648423e067956f1863b6fa39d6b4bdc426de14a86d689e9487980c7bf10972da1f6c0f1cf3fe9d538ff281730b8c657c30880e3cc4dd2676781ac199e4058f73e335344033e79b0c2b34b16dc6ea388d78b2887ed9311707268013b0cd118dfaef2f78fa4c256a83005c9b728040c8bb17818d41f049f45fbcf85318382e3eaa681a89be416a86f40cc873a4f3dedcb92b6a9ea22b97f03db63f8e6dca4534d152415c7cbf464c49532097bb935ff8c15d3b47f6dce29530f39eb17097712ffea46c1894c31f595c2abe4478c7dac25c46012229bf0cf2a5021740b7fcb2dc875c008b546743e809242a7dc9cd0a0eaed531b099b7d0a3f0238117c1942a2cf0c67e452b15d3dfb4143113911696e7b19ce1ae5cf9028aef2746afa4a0fcbc9332362760a78d24c3eeeb258678a1cc62f2a294250c4bdd5e4a4c03e7cc53e25e4cd984b4d4f2b88d5d0a33a9e8c90323fe6818dbec56146bbd0f1a1d55d0ee0379091cf6a50fca057cef02f860070c6363d8057cdd607fd34d7a6fae3113b47b47b2df4759955d471c238d0613ee09e11ea1e6e47d6607332ad916191323d8ca590f10bebfce45bccfd56c421af29c1481b60b87f60eeb80fc7b7959f40f983cde9182b6156735cf089d2f819c448e2932a321d6723c80d4c937268b23bea922a0cb5f0aeebe0cc4cbcee7c130e2136fdf37e08134a23c494e01368ad4798fe4fd0c02f5446d458cb8eb6190def8364d115547878dd968c65bde366375a241ce88fd4ca62a4ef032dbb9226c0eb60bf3626569b6aac63840d30e516c763fb8dd70b765ca8edd9db01bdc5bb87bba2f8b6f13f059586d6af1fd89641deb24a977a8125870615b7e8812b738e0c2139504e19db18a5f339451ad895b0401d2d12bdf72f4f96b7ac40fc5cefd6b3a969ff4f345ef9424701bc551ddbd711ba351fd1652e22adc18623277ec36dd034ba1418ce18de9ffc6c57c3ce3963953a8fd8b33fab057ad6081fbed97ee09aabcbabfbe5bd3830019b6e2b76ba557afdafee643bc616330f9208dad4cec2a69f077c48d3f6d8aa2deebb3044a2ca21665c365a13ba49fc770fb9f79d5bcd9dadd4aed2044f2efe7e9ae391b7a5c09020ee6daa939fa1aa6e7358374a046fe3e380e87cfbb16fbb31cf4025a2c612f1edb3d5803edc9d10a82cf6c6b50d82e6684ee8e0f31511d9b32ddc131239dffd298baf5f9a43f062d28218f23112a8ab4d2d63659467f4182fc3a95deb25be9ed8eb6d73b08fe590773f7833cc30fd3a5ce45d3ce7397f14548c90e4bc9b6b9cf1ce4ecde87fac486dd0d68df8587a63a1ec740653f2ece80f0742f4181f99cade14f2a5aa9d822e9b9cc425b4fdbf630601c515349678dc82d33cf665d462f2d5f27f2728da32d285d50d3064461c935b9bc0d982aa0eed9483c5b66b355ff5e32cac0c3adfe2d48f88bbb98609c4794a28a452bbcc3aaaeb301f80af33fa0e9730a297ea30b18471da8a6d63afbf85d9028298ddb006c5727cbfeca9b3b7abcd76aaf532ec5f5a9bfe1bfc131eda201324b1c8fe46efe7336dc1d6da1dbbca7f679eb9a0236958ae0cf86bca2c47ce808d5cc4b413bccef85ee8d5d6974902d06916f3395fca990833f165f012e6a9ff972194ca4cfa91f4fc4da919e3f86135e9bc69b243e26cee308e4eaa7722273ee9843f0ced15331f1df0af233a362cae3866f62cdbf8019ff7896d68a62cba042f620b80c3437668e0b69cba653edd9118bebc44842d3088c2cf99e63b870b5bd542b485221d7ad3422b2b0c3c58d6c87b6d2507a557d073b8aa447ad90594aff8457a24197edf41e64c89f3ea9ffe0822dbe3fdc04610b20aeff8ff8fcda6d9422c88552260b21fe0060027b82abd34c766be5ef4e416587b5694ba6c5957b249bf7eeb0a968d49562f609fdd40417d4a7ec583484267f7ec645f32a8bb689e2d39a209ce21e7f2929daf118abd67bdee38ef6355bd2a41519532da457b2d83b9e511a4a81afc694859942b0204d45dd5175f70675ca3beeac302b79bc961b01ecaaf7ec41d9699cb44a08789754cb2ee491f82fd50e7b5371021c1cbe5845a119dfb5d21f328c548557593264504a572a3139b6554bbb6e11483cdb89f9bc2ee55a6f6c49982bd18a78b3552d778daaaa22a34326a8b4ba9cf238386a0f9c33c81c117f48d67d7b6acc26313a4e4a8a19df018a7471a7b050b0187b24da500ce38107a769dc9e4ef0054cc6181a3995969546388f4e6882d106b47434c8659f4a0e9686de178991d31c2c919613c835e56f95dcddf26160410b66963578a69229c3991bef22e98166c13922db6529841c523d3ba5393c27dff015fd110966a4086159f6a1b2fa7013d3fe691f048a32eae18fd0403b5fb84446cb3062318f80e9e16a5604f8f107fc19e20726549c84ed76bd3e81ccba392360ecccf58f5da0eb3fd323ecb49469e0ce6b90aceb6ed7005d75b28bafc5bb7ae45887acf459cc7076d5f95f649b7038a2d67c61ad5847e5707e9d93087b24b665103577916625ee9ae18496589a83b59f35ebab34e312a33ad9c10f62c5e6123146990cea9130bad1db35b1eb0fa32a2c666c690dfbebe8b7d95a8a6258bb389e790546ddd78db0def768003c828b3581ca89f1a1401c61aa88ec03d55304461ac9bcfad1134c9d97b12dcac200d638e03a0086260ad45069afad8cea538880f6ca35fd39095c5c91a46346d7373c97e26ba8a8e445dd1fee50a848073abfe95f8ac3f", 0x1000}, {&(0x7f0000000600)="63ac992294924c0c2ae4e34af347a06276d4215ee8c8467b74def346dbda047601f1e139f4d00f5e40424799893716e412fe1753f0690c9adcd1e72b3438526fd382aa8075242444b44cd9478c4e2d1ab42678d4bb38b5337b0641c83027caf34f2ed5cc0770ca52f6ebeeda78a32b04ac7e6cac69311bc0b85c1abf433e0d60cf2590ce8f38bc75b3d7b73baf95741cb71e", 0x92}, {&(0x7f0000000440)="16d4910fb66f7f", 0x7}, {&(0x7f00000006c0)="cd136482412e2a633e333fbe3967cd47871b064121e10c4e71f8d7dba34899dd518388329c1c27150bdd07c5c040b456b2d2b9f2235af62826186416b6edae622ee555801097a1b29439dcdccd25036ce9ff", 0x52}, {&(0x7f0000000740)="3b1af5a08434c66a0611e739febb6753ebfc1a91dcc05e110d7c6c02e85d0a6701bba8511de04e47a27eb0c2ffb065df5116615de8887120fd2e73453b24c59b8c88928c5d42a219a920a1566b289e816e20110dd81cb7791c7cdc801dec80ae832b1fa88921ffe06aa4463cb8caccd8244b4934f51a26b32d7aef19cbba01bde8d3135c8805b8be336e7d3ab8a9b1aa77b278b9cd9f15258ef92c7e65a680b9898c94", 0xa3}, {&(0x7f0000000800)="5f310af4323b23247ede7950ced81b3c1e3599dbe6d0241b4e5b72b5dcaea5844215b37e2fa671ca1f8a866ab589caeb35965697cb0784312442934886762ff270558ee9c76260ef6c4d410af15bc8dfcbdc46cc6d20ba62eb29b6bc2d661d206d303a027c48f6ef90ada60343a9f8a0dc66851b13ae53a64a2890402d5ff2895c2ebf1fb135db6370e61422c80be0208056a9022bf6c89aaa3eaef64ee96d552bd1f48dc3380f566bf909fffc5b0a84fc2ca8ee7d735451322202e2cb0fa2d0c8f661bf0e3f2cb70e1440d038498d6d6cf3270b07bd10da29b4a16bc7be13e861028e32f0f00bacf4f68df731549fd09e42f549529038cffc", 0xf9}, {&(0x7f0000000900)="4d548ab5ca495de069ff001026f6ddaed048c0fd40eb7f380ee6629bf93a172e844ade5d044e5c64ce35fefae756cc3c07d39a945fbbb9de83db24dd7688bba22b6ee6e5ab79d464f89a2d1500b47b50be3a4de62d1feb03057e80a8727464159c0012375fd13d999a80853ca419531afa60a5db5ad5fd828a974e381071baf5753b80d4", 0x84}], 0x9, &(0x7f0000000a80)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xbe, [@dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x2e}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x92, 0x1, 0x5, [{@empty, 0x90000}, {@remote, 0x6}]}, @timestamp={0x44, 0x24, 0xe3, 0x0, 0x7, [0xa, 0xd88, 0x2, 0x68, 0x2, 0x9, 0x3, 0x1]}, @lsrr={0x83, 0x13, 0x82, [@multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}], 0x70}}], 0x1, 0x20000801) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r3, &(0x7f0000000080)=""/253, 0xfd) read(r3, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x15}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0x10000, 0xb}, {0xfff1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4002001}, 0x4000041) r8 = socket(0x10, 0x803, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="05000000000000000000077400060800020000000000080003"], 0x30}, 0x1, 0xffffffff00000003, 0x0, 0x4000001}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffeff, 0xffffffff, 0x20000000, 0x9, 0x18000}, 0x1, r12}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000003000000040060809c0a01"], 0xab4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 321.400606ms ago: executing program 2 (id=2948): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="c8"], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000) (async) bind$tipc(r1, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x1}}, 0x10) (async, rerun: 32) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, r4, 0x200, 0xfffffffc, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xd, 0x5, 0xfffffffe, 0x6472333b}}}}, 0x30}}, 0x24000805) write(r0, &(0x7f0000000080)="24000000580025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) 307.522138ms ago: executing program 0 (id=2949): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x10, 0x7, 0x9, 0x2, {{0x1b, 0x4, 0x0, 0xf, 0x6c, 0x68, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @multicast2, {[@timestamp={0x44, 0xc, 0xbe, 0x0, 0x3, [0x70, 0xffff]}, @generic={0x83, 0x8, "e97af3f2f7e5"}, @cipso={0x86, 0x38, 0x1, [{0x0, 0x12, "5666f4e35e6c47bb3fd9a30ac05ce192"}, {0x1, 0x12, "e57aa2f720ebc0f2c2020f1a26d6e37e"}, {0x0, 0xe, "67b44614d49b68a3786114f6"}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xac, [@empty]}]}}}}}) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getlink={0xc0, 0x12, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x1, 0x10029}, [@IFLA_PROTO_DOWN={0x5}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6d1cc}, @IFLA_MTU={0x8, 0x4, 0x1}, @IFLA_IFALIASn={0x4}, @IFLA_GROUP={0x8, 0x1b, 0x99aa}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_to_team\x00'}]}, @IFLA_PORT_SELF={0x34, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "95af05f53ab674bf24c20cbf1daa5192"}, @IFLA_PORT_VF={0x8, 0x1, 0x10000}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6ccbb2ad594ca14ccb806ae52cd14181"}]}, @IFLA_MTU={0x8, 0x4, 0x80}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 121.149891ms ago: executing program 0 (id=2950): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080040"], 0x3c}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x83, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) (async, rerun: 32) ioctl$int_in(r3, 0x5452, &(0x7f000000fa00)=0x9) (async, rerun: 32) sendmsg(r3, &(0x7f0000012900)={0x0, 0x0, 0x0}, 0x0) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x0, 0x8}, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1e, 0x8, 0x7ff0, 0x9, 0x1800, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000640)={r1, 0x6, 0x2, 0x4}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x15, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x27d}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x55}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, @exit, @jmp={0x5, 0x0, 0x8, 0x7, 0xb, 0xfffffffffffffff4, 0x10}]}, &(0x7f0000000300)='GPL\x00', 0x23c, 0x52, &(0x7f0000000340)=""/82, 0x41000, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xd, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000740)=[r7, 0x1, r8, r9, r10], &(0x7f0000000780)=[{0x2, 0x4, 0xd, 0x7}, {0x3, 0x5, 0x2, 0x9}], 0x10, 0x4}, 0x94) accept4(r0, 0x0, 0x0, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r12 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r12, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 120.786794ms ago: executing program 2 (id=2951): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r4, 0x3a, 0x8, 0x0, 0x0) (async) setsockopt(r4, 0x3a, 0x8, 0x0, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x2c, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) 119.650043ms ago: executing program 4 (id=2952): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x7, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0xfffffffe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_MULTIPATH={0xc, 0x9, {0x0, 0x1d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) 0s ago: executing program 0 (id=2953): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, {0x20000000, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x6e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006301bb000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.2.588'. [ 143.526764][ T8016] team_slave_1: Caught tx_queue_len zero misconfig [ 144.032638][ T8048] netlink: 'syz.3.603': attribute type 3 has an invalid length. [ 144.040882][ T8048] netlink: 'syz.3.603': attribute type 3 has an invalid length. [ 144.144890][ T8054] IPVS: fo: FWM 3 0x00000003 - no destination available [ 144.443084][ T8071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.610'. [ 144.504034][ T8076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.611'. [ 144.533026][ T8079] netlink: 40 bytes leftover after parsing attributes in process `syz.1.612'. [ 144.557547][ T8076] netlink: 'syz.2.611': attribute type 5 has an invalid length. [ 144.709605][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.615'. [ 144.752113][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.618'. [ 144.889692][ T8110] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 144.963616][ T8114] team_slave_0: entered promiscuous mode [ 144.988670][ T8114] vlan0: entered promiscuous mode [ 145.429271][ T8144] netlink: 'syz.4.630': attribute type 1 has an invalid length. [ 145.555809][ T8144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.818935][ T8172] netlink: 'syz.4.635': attribute type 4 has an invalid length. [ 146.423480][ T8200] netlink: 'syz.4.643': attribute type 2 has an invalid length. [ 146.486763][ T8204] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.496656][ T8208] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 146.594781][ T8216] xt_TCPMSS: Only works on TCP SYN packets [ 147.123324][ T8253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.303474][ T8257] pim6reg1: entered promiscuous mode [ 147.329071][ T8257] pim6reg1: entered allmulticast mode [ 147.379657][ T8267] sctp: [Deprecated]: syz.4.666 (pid 8267) Use of int in maxseg socket option. [ 147.379657][ T8267] Use struct sctp_assoc_value instead [ 147.426442][ T30] audit: type=1107 audit(1762978302.727:4): pid=8268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍÿ¡UýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍŠ÷' [ 147.884675][ T8292] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 147.981491][ T8292] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.109570][ T8289] bond2: (slave veth3): Enslaving as an active interface with a down link [ 148.129634][ T8292] bond2: (slave veth0_to_bond): making interface the new active one [ 148.131349][ T8315] __nla_validate_parse: 12 callbacks suppressed [ 148.131364][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 148.143066][ T8292] veth0_to_bond: entered promiscuous mode [ 148.147381][ T8315] Bluetooth: MGMT ver 1.23 [ 148.157245][ T8292] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 148.179120][ T8313] netlink: 256 bytes leftover after parsing attributes in process `syz.4.680'. [ 148.656788][ T8335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.681'. [ 149.640053][ T8357] bond0: entered promiscuous mode [ 149.758178][ T8362] tipc: Enabled bearer , priority 0 [ 149.765712][ T8362] syzkaller0: entered promiscuous mode [ 149.771614][ T8362] syzkaller0: entered allmulticast mode [ 149.926719][ T8362] tipc: Resetting bearer [ 149.966604][ T8367] netlink: 112 bytes leftover after parsing attributes in process `syz.4.690'. [ 150.051721][ T8382] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 150.083427][ T8361] tipc: Resetting bearer [ 150.115623][ T8386] netlink: 32 bytes leftover after parsing attributes in process `syz.3.699'. [ 150.126084][ T8361] tipc: Disabling bearer [ 150.196869][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'. [ 150.310222][ T8397] netlink: 56 bytes leftover after parsing attributes in process `syz.3.702'. [ 150.395532][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'. [ 150.462095][ T8406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.512080][ T8413] netlink: 'syz.4.707': attribute type 9 has an invalid length. [ 150.529970][ T8413] netlink: 'syz.4.707': attribute type 6 has an invalid length. [ 151.074871][ T8443] block nbd0: Unsupported socket: should be TCP or UNIX. [ 151.116582][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.716'. [ 151.127842][ T8449] netlink: 'syz.1.715': attribute type 3 has an invalid length. [ 151.140990][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.716'. [ 151.480891][ T8467] IPVS: set_ctl: invalid protocol: 117 172.20.20.187:20000 [ 151.615158][ T8476] IPVS: set_ctl: invalid protocol: 137 10.1.1.1:20001 [ 151.964889][ T8498] netlink: 'syz.3.733': attribute type 3 has an invalid length. [ 152.304485][ T5948] IPVS: starting estimator thread 0... [ 152.321227][ T8513] syzkaller0: entered promiscuous mode [ 152.331089][ T8513] syzkaller0: entered allmulticast mode [ 152.395072][ T8513] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 152.420925][ T8514] IPVS: using max 28 ests per chain, 67200 per kthread [ 152.539699][ T8522] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 152.778242][ T8536] netlink: 'syz.1.746': attribute type 8 has an invalid length. [ 152.909535][ T8541] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 152.916290][ T8541] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 152.980512][ T8553] netlink: 'syz.4.748': attribute type 3 has an invalid length. [ 153.265167][ T8566] netlink: 'syz.4.754': attribute type 11 has an invalid length. [ 153.272934][ T8566] __nla_validate_parse: 72 callbacks suppressed [ 153.272948][ T8566] netlink: 224 bytes leftover after parsing attributes in process `syz.4.754'. [ 153.370192][ T8573] netlink: 52 bytes leftover after parsing attributes in process `syz.2.756'. [ 153.374972][ T8580] netlink: 'syz.1.759': attribute type 2 has an invalid length. [ 153.388336][ T8578] netlink: 'syz.3.757': attribute type 7 has an invalid length. [ 153.405227][ T8573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.756'. [ 153.405473][ T8574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.756'. [ 153.426628][ T8580] netlink: 'syz.1.759': attribute type 1 has an invalid length. [ 153.441663][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.758'. [ 153.455940][ T8578] netlink: 'syz.3.757': attribute type 7 has an invalid length. [ 153.456141][ T8573] netlink: 72 bytes leftover after parsing attributes in process `syz.2.756'. [ 153.463777][ T1112] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.499361][ T8585] delete_channel: no stack [ 153.504432][ T1112] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.504474][ T1112] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.504507][ T1112] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.535851][ T8573] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.756'. [ 153.549413][ T8582] xt_hashlimit: size too large, truncated to 1048576 [ 153.557026][ T8585] delete_channel: no stack [ 153.890974][ T8599] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 153.969602][ T8604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.213594][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.769'. [ 154.293228][ T8626] vlan2: entered promiscuous mode [ 154.299111][ T8626] bridge0: entered promiscuous mode [ 154.306627][ T8628] syzkaller1: entered promiscuous mode [ 154.332424][ T8628] syzkaller1: entered allmulticast mode [ 154.368392][ T8628] netlink: 260 bytes leftover after parsing attributes in process `syz.2.771'. [ 154.440904][ T8638] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 154.450180][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 154.695115][ T8652] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 155.199553][ T8690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.431397][ T8705] netlink: 'syz.2.793': attribute type 11 has an invalid length. [ 155.660889][ T8717] IPVS: persistence engine module ip_vs_pe_À not found [ 156.218223][ T8754] tipc: Started in network mode [ 156.238629][ T8754] tipc: Node identity b227a784cfd, cluster identity 4711 [ 156.264109][ T8754] tipc: Enabled bearer , priority 0 [ 156.284662][ T2140] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.324709][ T8749] tipc: Disabling bearer [ 156.433234][ T8769] gretap0: entered promiscuous mode [ 156.815181][ T8797] pimreg: entered allmulticast mode [ 156.824815][ T8797] lo: Caught tx_queue_len zero misconfig [ 158.200925][ T8861] netlink: 'syz.1.840': attribute type 11 has an invalid length. [ 158.374840][ T8869] __nla_validate_parse: 10 callbacks suppressed [ 158.374858][ T8869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.842'. [ 158.410622][ T8873] netlink: 'syz.0.844': attribute type 1 has an invalid length. [ 158.487384][ T8869] bond2 (unregistering): Released all slaves [ 158.620683][ T8854] infiniband syz1: set down [ 158.668503][ T8854] infiniband syz1: added ipvlan0 [ 158.791833][ T8854] RDS/IB: syz1: added [ 158.802543][ T8854] smc: adding ib device syz1 with port count 1 [ 158.809212][ T8854] smc: ib device syz1 port 1 has no pnetid [ 159.071736][ T8905] netlink: 'syz.0.849': attribute type 21 has an invalid length. [ 159.095272][ T8905] netlink: 156 bytes leftover after parsing attributes in process `syz.0.849'. [ 159.197042][ T60] veth0_to_bond: left promiscuous mode [ 159.809664][ T8933] tipc: Started in network mode [ 159.833827][ T8933] tipc: Node identity de3968ac8b4b, cluster identity 4711 [ 159.854554][ T8933] tipc: Enabled bearer , priority 0 [ 159.875944][ T8936] syzkaller0: entered promiscuous mode [ 159.881458][ T8936] syzkaller0: entered allmulticast mode [ 159.926855][ T8933] tipc: Resetting bearer [ 159.942023][ T8932] tipc: Resetting bearer [ 159.983462][ T8932] tipc: Disabling bearer [ 160.178433][ T8957] netlink: 9 bytes leftover after parsing attributes in process `syz.1.862'. [ 160.208589][ T8957] gretap0: entered promiscuous mode [ 160.242333][ T8957] IPVS: set_ctl: invalid protocol: 51 172.30.1.2:20003 [ 160.299179][ T8960] netlink: 'syz.3.864': attribute type 1 has an invalid length. [ 160.329073][ T8963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.863'. [ 160.347645][ T8962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.863'. [ 160.523231][ T8962] lo: entered promiscuous mode [ 160.549067][ T8962] netlink: 'syz.2.863': attribute type 2 has an invalid length. [ 160.576269][ T8962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.634394][ T8983] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 160.875416][ T8998] netlink: 'syz.0.873': attribute type 1 has an invalid length. [ 160.947653][ T9003] netlink: 56 bytes leftover after parsing attributes in process `syz.0.873'. [ 161.149435][ T9015] xt_TPROXY: Can be used only with -p tcp or -p udp [ 161.151420][ T9005] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.171682][ T9005] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.247848][ T9005] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.258695][ T9005] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.334469][ T9005] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.345057][ T9005] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.417742][ T9005] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.431763][ T9005] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.534547][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 161.602673][ T50] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.611732][ T50] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.635572][ T50] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.647379][ T50] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.674996][ T50] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.683607][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.711779][ T1112] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.726869][ T1112] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.801547][ T9026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.880'. [ 162.010118][ T9032] netlink: 'syz.3.883': attribute type 10 has an invalid length. [ 162.532244][ T9047] tipc: New replicast peer: 255.255.255.255 [ 162.576102][ T9047] tipc: Enabled bearer , priority 10 [ 162.702352][ T9057] netlink: 'syz.3.891': attribute type 1 has an invalid length. [ 162.846196][ T9064] bond1: (slave ip6gretap1): making interface the new active one [ 162.854761][ T9064] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 162.876236][ T9064] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 162.894076][ T9064] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 163.302993][ T9086] netlink: 'syz.0.898': attribute type 3 has an invalid length. [ 163.315143][ T9086] netlink: 224 bytes leftover after parsing attributes in process `syz.0.898'. [ 163.342302][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.898'. [ 163.418861][ T9086] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 163.425613][ T9095] netlink: 64 bytes leftover after parsing attributes in process `syz.4.900'. [ 163.427099][ T9086] netlink: 176336 bytes leftover after parsing attributes in process `syz.0.898'. [ 163.689179][ T9105] xt_hashlimit: size too large, truncated to 1048576 [ 163.697672][ T5908] tipc: Node number set to 1433561260 [ 163.783260][ T9115] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 163.931086][ T9120] tipc: Started in network mode [ 163.943773][ T9120] tipc: Node identity , cluster identity 4711 [ 163.960156][ T9120] tipc: Failed to obtain node identity [ 163.972569][ T9120] tipc: Enabling of bearer rejected, failed to enable media [ 164.009458][ T9126] netlink: 'syz.2.909': attribute type 83 has an invalid length. [ 164.109962][ T9120] syzkaller0: entered promiscuous mode [ 164.115846][ T9120] syzkaller0: entered allmulticast mode [ 164.199938][ T9130] netlink: 220 bytes leftover after parsing attributes in process `syz.2.911'. [ 164.336465][ T9131] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 164.386513][ T9133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.912'. [ 164.510460][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'. [ 165.581411][ T9139] hsr_slave_0 (unregistering): left promiscuous mode [ 165.862973][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 165.883761][ T9171] openvswitch: netlink: Flow actions attr not present in new flow. [ 165.920458][ T9171] netlink: 656 bytes leftover after parsing attributes in process `syz.3.920'. [ 166.002593][ T9179] netlink: 64 bytes leftover after parsing attributes in process `syz.0.923'. [ 166.281518][ T9201] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.927'. [ 166.320557][ T9196] tun0: tun_chr_ioctl cmd 1074025675 [ 166.326091][ T9196] tun0: persist disabled [ 166.500096][ T9217] netlink: 'syz.4.931': attribute type 29 has an invalid length. [ 166.552959][ T9217] netlink: 'syz.4.931': attribute type 29 has an invalid length. [ 166.578265][ T9217] netlink: 500 bytes leftover after parsing attributes in process `syz.4.931'. [ 166.650595][ T9227] netlink: 'syz.4.931': attribute type 29 has an invalid length. [ 166.751402][ T9232] sit1: entered promiscuous mode [ 166.770069][ T9232] sit1: entered allmulticast mode [ 166.952237][ T9244] netlink: 'syz.0.943': attribute type 6 has an invalid length. [ 166.974410][ T9245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.061880][ T9253] syzkaller0: entered allmulticast mode [ 167.316416][ T9268] netlink: 'syz.3.951': attribute type 10 has an invalid length. [ 167.324906][ T9268] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.357948][ T9268] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.365184][ T9268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.389499][ T9268] `: (slave bridge0): Enslaving as an active interface with an up link [ 167.888471][ T9307] netlink: 'syz.2.962': attribute type 6 has an invalid length. [ 167.898302][ T9307] netlink: 'syz.2.962': attribute type 5 has an invalid length. [ 168.114701][ T9321] netlink: 'syz.1.966': attribute type 10 has an invalid length. [ 168.247831][ T9321] bridge_slave_1: entered promiscuous mode [ 168.285425][ T9321] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 168.448083][ T9338] netlink: 'syz.2.971': attribute type 4 has an invalid length. [ 168.466782][ T9338] __nla_validate_parse: 6 callbacks suppressed [ 168.466796][ T9338] netlink: 152 bytes leftover after parsing attributes in process `syz.2.971'. [ 168.570606][ T9338] `: renamed from bond0 (while UP) [ 168.714322][ T9353] vxcan1: entered promiscuous mode [ 168.777335][ T9356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.976'. [ 169.539427][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 169.721693][ T9365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.741376][ T9365] bond0: (slave rose0): Enslaving as an active interface with an up link [ 169.801689][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.834012][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.871346][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.918216][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.942825][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.970364][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.012578][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.022204][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.983'. [ 170.050971][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.372276][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 170.438460][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 170.554746][ T9438] netlink: 32 bytes leftover after parsing attributes in process `syz.1.990'. [ 171.794505][ T9455] netlink: 60 bytes leftover after parsing attributes in process `syz.4.992'. [ 171.836166][ T9455] netlink: 60 bytes leftover after parsing attributes in process `syz.4.992'. [ 171.836416][ T9461] netlink: 'syz.3.995': attribute type 10 has an invalid length. [ 171.906514][ T9461] team0: Port device dummy0 added [ 171.967949][ T9473] geneve2: entered promiscuous mode [ 172.008796][ T9473] geneve2: entered allmulticast mode [ 172.023240][ T1112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 172.041856][ T1112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 172.072542][ T9479] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.079847][ T9479] IPv6: NLM_F_CREATE should be set when creating new route [ 172.087156][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1000'. [ 172.087189][ T9479] IPv6: NLM_F_CREATE should be set when creating new route [ 172.103258][ T9479] IPv6: NLM_F_CREATE should be set when creating new route [ 172.177241][ T1112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 172.197438][ T1112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 172.417335][ T9475] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 172.581826][ T9504] bond5: Invalid ad_actor_system MAC address. [ 172.611329][ T9504] bond5: option ad_actor_system: invalid value (1) [ 172.643357][ T9504] bond5 (unregistering): Released all slaves [ 172.719236][ T9506] tipc: Enabled bearer , priority 0 [ 172.729649][ T9509] syzkaller0: entered promiscuous mode [ 172.747613][ T9509] syzkaller0: entered allmulticast mode [ 172.859471][ T9475] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 172.916123][ T9509] tipc: Resetting bearer [ 172.923231][ T9538] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 172.976828][ T9509] tipc: Disabling bearer [ 173.078805][ T9475] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 173.233207][ T9475] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 173.306200][ T9552] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 173.318759][ T9552] bond3 (unregistering): Released all slaves [ 173.354306][ T1112] syzkaller0: tun_net_xmit 76 [ 173.365321][ T1112] syzkaller0: tun_net_xmit 48 [ 173.384878][ T7834] syzkaller0: tun_net_xmit 76 [ 174.537669][ T9550] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 174.544236][ T9550] syzkaller0: Linktype set failed because interface is up [ 174.554252][ T5922] syzkaller0: tun_net_xmit 76 [ 174.584526][ T9585] tipc: Enabled bearer , priority 0 [ 174.594349][ T5922] syzkaller0: tun_net_xmit 76 [ 174.623899][ T7845] syzkaller0: tun_net_xmit 76 [ 174.655801][ T9585] tipc: Disabling bearer [ 174.689030][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 174.792724][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 174.843125][ T1112] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 174.890504][ T9598] __nla_validate_parse: 3 callbacks suppressed [ 174.890520][ T9598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1025'. [ 174.919100][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1022'. [ 174.938971][ T9596] team0: Device wireguard0 is of different type [ 174.970939][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 175.006489][ T9606] veth5: entered promiscuous mode [ 175.039310][ T9609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1026'. [ 175.062209][ T9610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1027'. [ 175.083132][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 175.346183][ T9625] SET target dimension over the limit! [ 175.669010][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'. [ 175.892020][ T9666] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 176.065137][ T9675] team0: Device wireguard0 is of different type [ 176.073425][ T9683] xt_hashlimit: size too large, truncated to 1048576 [ 176.138483][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1045'. [ 176.378257][ T9678] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.486533][ T9699] dvmrp6: entered allmulticast mode [ 176.502413][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'. [ 176.711470][ T9710] netlink: 'syz.3.1054': attribute type 1 has an invalid length. [ 176.731966][ T9715] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1056'. [ 176.743772][ T9710] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1054'. [ 176.783760][ T9710] NCSI netlink: No device for ifindex 0 [ 177.294542][ T9754] netlink: 'syz.2.1067': attribute type 11 has an invalid length. [ 177.417773][ T9761] netlink: 'syz.4.1071': attribute type 1 has an invalid length. [ 177.508993][ T9769] gretap1: entered promiscuous mode [ 177.536053][ T9769] bond4: (slave gretap1): making interface the new active one [ 177.578049][ T9769] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 177.636083][ T9761] bond4: entered promiscuous mode [ 177.641576][ T9761] macvlan2: entered promiscuous mode [ 177.668475][ T9772] netlink: 'syz.0.1074': attribute type 1 has an invalid length. [ 177.673809][ T9761] macvlan2: entered allmulticast mode [ 177.695187][ T9761] bond4: entered allmulticast mode [ 177.700496][ T9761] gretap1: entered allmulticast mode [ 177.708465][ T9761] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 177.717707][ T9761] bond4: left promiscuous mode [ 177.870747][ T9772] 8021q: adding VLAN 0 to HW filter on device bond5 [ 177.914748][ T9786] bond2: (slave veth0_to_bond): Releasing active interface [ 178.260705][ T9809] syz_tun: tun_net_xmit 78 [ 178.280555][ T9811] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 178.294519][ T9809] syz_tun: tun_net_xmit 78 [ 178.300564][ T9809] syz_tun: tun_net_xmit 78 [ 178.329460][ T9809] syz_tun: tun_net_xmit 78 [ 178.350846][ T9809] syz_tun: tun_net_xmit 78 [ 178.364240][ T9809] syz_tun: tun_net_xmit 78 [ 178.379194][ T9809] syz_tun: tun_net_xmit 78 [ 178.398575][ T9809] syz_tun: tun_net_xmit 78 [ 178.413491][ T9809] syz_tun: tun_net_xmit 78 [ 178.437961][ T9809] syz_tun: tun_net_xmit 78 [ 178.442618][ T9809] syz_tun: tun_net_xmit 78 [ 178.489108][ T9809] syz_tun: tun_net_xmit 78 [ 178.499171][ T9809] syz_tun: tun_net_xmit 78 [ 178.519450][ T9809] syz_tun: tun_net_xmit 78 [ 178.547206][ T9809] syz_tun: tun_net_xmit 78 [ 178.551853][ T9809] syz_tun: tun_net_xmit 78 [ 178.565533][ T9809] syz_tun: tun_net_xmit 78 [ 178.612591][ T9809] syz_tun: tun_net_xmit 78 [ 178.626406][ T9809] syz_tun: tun_net_xmit 78 [ 178.647442][ T9809] syz_tun: tun_net_xmit 78 [ 178.657364][ T9809] syz_tun: tun_net_xmit 78 [ 178.670964][ T9809] syz_tun: tun_net_xmit 78 [ 178.682395][ T9809] syz_tun: tun_net_xmit 78 [ 178.707923][ T9809] syz_tun: tun_net_xmit 78 [ 178.732954][ T9809] syz_tun: tun_net_xmit 78 [ 178.741574][ T9809] syz_tun: tun_net_xmit 78 [ 178.746330][ T9809] syz_tun: tun_net_xmit 78 [ 178.780490][ T9809] syz_tun: tun_net_xmit 78 [ 178.802094][ T9809] syz_tun: tun_net_xmit 78 [ 178.823513][ T9809] syz_tun: tun_net_xmit 78 [ 178.849055][ T9809] syz_tun: tun_net_xmit 78 [ 178.872887][ T9809] syz_tun: tun_net_xmit 78 [ 178.884195][ T9809] syz_tun: tun_net_xmit 78 [ 178.909991][ T9809] syz_tun: tun_net_xmit 78 [ 178.924334][ T9809] syz_tun: tun_net_xmit 78 [ 178.935048][ T9809] syz_tun: tun_net_xmit 78 [ 178.958894][ T9809] syz_tun: tun_net_xmit 78 [ 178.994871][ T9809] syz_tun: tun_net_xmit 78 [ 179.016177][ T9809] syz_tun: tun_net_xmit 78 [ 179.025375][ T9809] syz_tun: tun_net_xmit 78 [ 179.036926][ T9809] syz_tun: tun_net_xmit 78 [ 179.054015][ T9809] syz_tun: tun_net_xmit 78 [ 179.059910][ T9809] syz_tun: tun_net_xmit 78 [ 179.069598][ T9846] pim6reg1: entered promiscuous mode [ 179.080077][ T9846] pim6reg1: entered allmulticast mode [ 179.080208][ T9809] syz_tun: tun_net_xmit 78 [ 179.129293][ T9809] syz_tun: tun_net_xmit 78 [ 179.136383][ T9809] syz_tun: tun_net_xmit 78 [ 179.141216][ T9809] syz_tun: tun_net_xmit 78 [ 179.148837][ T9809] syz_tun: tun_net_xmit 78 [ 179.158818][ T9809] syz_tun: tun_net_xmit 78 [ 179.163566][ T9809] syz_tun: tun_net_xmit 78 [ 179.169006][ T9809] syz_tun: tun_net_xmit 78 [ 179.175360][ T9809] syz_tun: tun_net_xmit 78 [ 179.180493][ T9809] syz_tun: tun_net_xmit 78 [ 179.185462][ T9809] syz_tun: tun_net_xmit 78 [ 179.190170][ T9809] syz_tun: tun_net_xmit 78 [ 179.195546][ T9809] syz_tun: tun_net_xmit 78 [ 179.200259][ T9809] syz_tun: tun_net_xmit 78 [ 179.205375][ T9809] syz_tun: tun_net_xmit 78 [ 179.210280][ T9809] syz_tun: tun_net_xmit 78 [ 179.216162][ T9809] syz_tun: tun_net_xmit 78 [ 179.220931][ T9809] syz_tun: tun_net_xmit 78 [ 179.226307][ T9809] syz_tun: tun_net_xmit 78 [ 179.231145][ T9809] syz_tun: tun_net_xmit 78 [ 179.236178][ T9809] syz_tun: tun_net_xmit 78 [ 179.240982][ T9809] syz_tun: tun_net_xmit 78 [ 179.246082][ T9809] syz_tun: tun_net_xmit 78 [ 179.250957][ T9809] syz_tun: tun_net_xmit 78 [ 179.256158][ T9809] syz_tun: tun_net_xmit 78 [ 179.260876][ T9809] syz_tun: tun_net_xmit 78 [ 179.266741][ T9809] syz_tun: tun_net_xmit 78 [ 179.271596][ T9809] syz_tun: tun_net_xmit 78 [ 179.276446][ T9809] syz_tun: tun_net_xmit 78 [ 179.281186][ T9809] syz_tun: tun_net_xmit 78 [ 179.286063][ T9809] syz_tun: tun_net_xmit 78 [ 179.291861][ T9809] syz_tun: tun_net_xmit 78 [ 179.297044][ T9809] syz_tun: tun_net_xmit 78 [ 179.301854][ T9809] syz_tun: tun_net_xmit 78 [ 179.306691][ T9809] syz_tun: tun_net_xmit 78 [ 179.311581][ T9809] syz_tun: tun_net_xmit 78 [ 179.316866][ T9809] syz_tun: tun_net_xmit 78 [ 179.321596][ T9809] syz_tun: tun_net_xmit 78 [ 179.326548][ T9809] syz_tun: tun_net_xmit 78 [ 179.331316][ T9809] syz_tun: tun_net_xmit 78 [ 179.336448][ T9809] syz_tun: tun_net_xmit 78 [ 179.342845][ T9809] syz_tun: tun_net_xmit 78 [ 179.356485][ T9809] syz_tun: tun_net_xmit 78 [ 179.361551][ T9809] syz_tun: tun_net_xmit 78 [ 179.366675][ T9809] syz_tun: tun_net_xmit 78 [ 179.371502][ T9809] syz_tun: tun_net_xmit 78 [ 179.378444][ T9809] syz_tun: tun_net_xmit 78 [ 179.383881][ T9809] syz_tun: tun_net_xmit 78 [ 179.390014][ T9866] netlink: 'syz.3.1099': attribute type 1 has an invalid length. [ 179.390014][ T9867] netlink: 'syz.3.1099': attribute type 1 has an invalid length. [ 179.390033][ T9866] netlink: 'syz.3.1099': attribute type 7 has an invalid length. [ 179.414067][ T9809] syz_tun: tun_net_xmit 78 [ 179.419318][ T9809] syz_tun: tun_net_xmit 78 [ 179.424416][ T9809] syz_tun: tun_net_xmit 78 [ 179.429568][ T9809] syz_tun: tun_net_xmit 78 [ 179.434780][ T9866] netlink: 'syz.3.1099': attribute type 8 has an invalid length. [ 179.443234][ T9809] syz_tun: tun_net_xmit 78 [ 179.448236][ T9809] syz_tun: tun_net_xmit 78 [ 179.452936][ T9809] syz_tun: tun_net_xmit 78 [ 179.458736][ T9867] netlink: 'syz.3.1099': attribute type 7 has an invalid length. [ 179.471959][ T9867] netlink: 'syz.3.1099': attribute type 8 has an invalid length. [ 179.542446][ T9869] Driver unsupported XDP return value 0 on prog (id 223) dev N/A, expect packet loss! [ 179.697804][ T9885] gre0: entered promiscuous mode [ 179.997039][ T9903] netlink: 'syz.4.1111': attribute type 6 has an invalid length. [ 180.012599][ T9904] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 180.019239][ T9906] __nla_validate_parse: 10 callbacks suppressed [ 180.019276][ T9906] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1112'. [ 180.267233][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1116'. [ 180.268647][ T9919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1117'. [ 180.286218][ T9919] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1117'. [ 180.306387][ T9920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1117'. [ 180.315915][ T9920] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1117'. [ 180.416427][ T9925] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1118'. [ 180.573125][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1121'. [ 180.601816][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1120'. [ 180.634648][ T9935] Bluetooth: MGMT ver 1.23 [ 180.639817][ T9935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1123'. [ 180.660838][ T9935] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 180.986726][ T9965] can: request_module (can-proto-4) failed. [ 181.108791][ T9961] "syz.3.1130" (9961) uses obsolete ecb(arc4) skcipher [ 181.300548][ T7831] IPVS: starting estimator thread 0... [ 181.360542][T10000] vlan2: entered promiscuous mode [ 181.367475][T10000] bridge0: entered promiscuous mode [ 181.394383][ T9998] IPVS: using max 35 ests per chain, 84000 per kthread [ 181.783567][T10028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.842848][T10030] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 181.861293][T10030] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 181.874338][T10030] gretap1: entered promiscuous mode [ 181.898391][T10030] gretap1: entered allmulticast mode [ 181.923514][T10035] validate_nla: 4 callbacks suppressed [ 181.923531][T10035] netlink: 'syz.3.1153': attribute type 19 has an invalid length. [ 181.950239][T10035] netlink: 'syz.3.1153': attribute type 19 has an invalid length. [ 182.090410][T10038] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.131731][T10050] netlink: 'syz.3.1158': attribute type 12 has an invalid length. [ 182.166645][T10050] bond3: option primary_reselect: invalid value (255) [ 182.176381][T10050] bond3 (unregistering): Released all slaves [ 182.214164][T10055] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 [ 182.228473][T10044] x_tables: duplicate underflow at hook 1 [ 182.256476][T10038] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.295504][T10051] team0: Device wireguard0 is of different type [ 182.402134][T10038] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.483471][T10038] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.572494][T10070] tipc: Enabling of bearer rejected, failed to enable media [ 182.620699][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.653189][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.713254][ T1112] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.758929][ T1112] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.094750][ T5832] Bluetooth: hci1: command tx timeout [ 183.165729][T10103] netlink: 'syz.0.1173': attribute type 1 has an invalid length. [ 183.189676][T10109] x_tables: duplicate entry at hook 3 [ 183.192490][T10106] smc: net device gre0 applied user defined pnetid SYZ1 [ 183.244069][T10110] smc: net device gre0 erased user defined pnetid SYZ1 [ 183.378885][T10117] gre1: entered promiscuous mode [ 183.385173][T10117] gre1: entered allmulticast mode [ 183.472572][T10125] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.558377][T10127] gre0: entered promiscuous mode [ 183.564184][T10127] gre0: entered allmulticast mode [ 183.609423][T10135] IPVS: set_ctl: invalid protocol: 20 172.30.0.2:20001 [ 183.785753][T10141] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.810858][T10141] bridge_slave_1: left allmulticast mode [ 183.822445][T10141] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.836543][T10141] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 183.874151][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.895104][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.906599][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.940184][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.993934][T10162] tipc: Enabling of bearer rejected, media not registered [ 184.022717][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.035840][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.068168][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.098590][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.136081][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.148097][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.159496][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.170880][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.184746][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.206392][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.262926][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.282139][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.328753][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.356645][T10183] Cannot find add_set index 2 as target [ 184.417926][ T50] nci: nci_rx_work: unknown MT 0x7 [ 184.592092][T10199] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 184.600898][T10199] bond5: option packets_per_slave: allowed values 0 - 65535 [ 184.610430][T10199] bond5 (unregistering): Released all slaves [ 184.630555][T10202] netlink: 'syz.4.1204': attribute type 2 has an invalid length. [ 184.646478][T10202] 9: entered promiscuous mode [ 185.150469][T10195] netlink: 'syz.2.1203': attribute type 10 has an invalid length. [ 185.291230][T10204] netlink: 'syz.1.1205': attribute type 1 has an invalid length. [ 185.328553][T10204] netlink: 'syz.1.1205': attribute type 3 has an invalid length. [ 185.345306][T10212] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 185.350617][T10204] __nla_validate_parse: 19 callbacks suppressed [ 185.350631][T10204] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1205'. [ 185.562712][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'. [ 185.610930][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'. [ 185.635252][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'. [ 185.773594][T10238] tipc: Enabling of bearer rejected, failed to enable media [ 185.804212][T10246] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1219'. [ 185.813447][T10247] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1219'. [ 185.973274][T10261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1223'. [ 186.881900][T10306] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1234'. [ 187.177578][T10331] openvswitch: netlink: Message has 8 unknown bytes. [ 187.186698][T10325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1237'. [ 187.200789][T10328] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.219397][T10331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.230544][T10324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1237'. [ 187.435411][T10341] netlink: 'syz.0.1241': attribute type 1 has an invalid length. [ 187.506236][T10341] 8021q: adding VLAN 0 to HW filter on device bond7 [ 187.666438][T10341] : entered promiscuous mode [ 187.679105][T10301] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 187.703792][T10301] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 187.819659][T10301] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.831642][T10301] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 187.840054][ T30] audit: type=1800 audit(1762978343.127:5): pid=10367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1247" name="memory.events" dev="tmpfs" ino=1409 res=0 errno=0 [ 187.889060][T10301] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.909528][T10301] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 187.960971][T10301] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.979127][T10301] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 188.008594][T10375] tipc: Enabled bearer , priority 0 [ 188.033414][T10375] syzkaller0: entered promiscuous mode [ 188.048323][T10301] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.073965][T10375] syzkaller0: entered allmulticast mode [ 188.079635][T10301] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 188.266631][T10389] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 188.690806][T10417] netlink: ct family unspecified [ 188.704684][T10417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.804059][T10373] tipc: Resetting bearer [ 188.857288][T10373] tipc: Disabling bearer [ 188.921523][T10423] netlink: 'syz.2.1259': attribute type 6 has an invalid length. [ 189.018532][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.051131][T10426] bridge_slave_1: entered allmulticast mode [ 189.069845][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.090056][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.120459][T10426] netlink: 'syz.1.1260': attribute type 83 has an invalid length. [ 189.158815][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.832883][T10484] netlink: 'syz.4.1271': attribute type 32 has an invalid length. [ 190.015914][T10484] bond5: Setting coupled_control to off (0) [ 190.042232][T10501] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 190.117677][T10507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.330247][T10517] netlink: 'syz.0.1279': attribute type 2 has an invalid length. [ 190.563301][T10536] syzkaller0: entered promiscuous mode [ 190.575071][T10536] syzkaller0: entered allmulticast mode [ 190.616337][T10538] sctp: [Deprecated]: syz.2.1287 (pid 10538) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.616337][T10538] Use struct sctp_sack_info instead [ 190.666277][T10543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.749514][T10551] __nla_validate_parse: 15 callbacks suppressed [ 190.749531][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1286'. [ 190.912606][T10559] C: renamed from team_slave_0 [ 190.930552][T10559] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 190.952834][T10559] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 191.024074][T10563] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1292'. [ 191.159825][T10567] ipt_rpfilter: unknown options [ 191.437360][T10579] netlink: 'syz.1.1298': attribute type 2 has an invalid length. [ 191.582557][T10589] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1301'. [ 191.595310][T10594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1299'. [ 191.991834][T10617] netlink: 'syz.4.1302': attribute type 4 has an invalid length. [ 192.060447][T10619] netlink: 'syz.4.1302': attribute type 4 has an invalid length. [ 192.715553][T10650] IPVS: set_ctl: invalid protocol: 138 0.0.0.0:0 [ 192.754401][T10650] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 193.235433][T10670] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1315'. [ 193.249471][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1315'. [ 193.332631][T10675] syzkaller1: entered promiscuous mode [ 193.338390][T10675] syzkaller1: entered allmulticast mode [ 193.811101][T10703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1324'. [ 193.871605][T10704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1324'. [ 193.885427][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1322'. [ 193.910872][T10700] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1322'. [ 194.129126][T10714] netlink: 'syz.2.1325': attribute type 10 has an invalid length. [ 194.157100][T10717] dvmrp6: entered allmulticast mode [ 194.163012][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.170764][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.583466][T10749] Bluetooth: MGMT ver 1.23 [ 195.121613][T10781] tipc: Started in network mode [ 195.132065][T10781] tipc: Node identity 8e92f7ea81ad, cluster identity 4711 [ 195.167539][T10781] tipc: Enabled bearer , priority 0 [ 195.199837][T10789] syzkaller0: entered promiscuous mode [ 195.227701][T10789] syzkaller0: entered allmulticast mode [ 195.233709][T10793] netlink: 'syz.0.1346': attribute type 21 has an invalid length. [ 195.263011][T10781] tipc: Resetting bearer [ 195.278068][T10783] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 195.304300][T10779] tipc: Resetting bearer [ 195.341867][T10779] tipc: Disabling bearer [ 195.547957][T10809] bond8: option all_slaves_active: invalid value (222) [ 195.582229][T10809] bond8 (unregistering): Released all slaves [ 195.730796][T10823] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 195.760001][T10823] bond0 (unregistering): Released all slaves [ 195.809414][T10831] __nla_validate_parse: 5 callbacks suppressed [ 195.809430][T10831] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1354'. [ 196.056115][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1357'. [ 196.111989][T10843] netlink: 'syz.2.1357': attribute type 13 has an invalid length. [ 196.118604][T10847] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1358'. [ 196.122843][T10849] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1357'. [ 196.129093][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1357'. [ 196.154794][T10850] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 196.458842][T10867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1361'. [ 196.622400][T10879] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1365'. [ 196.874878][T10890] veth1: Caught tx_queue_len zero misconfig [ 197.024276][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'. [ 197.048354][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'. [ 197.417820][T10915] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1374'. [ 197.456639][T10919] netlink: 'syz.2.1375': attribute type 3 has an invalid length. [ 197.551134][T10928] syzkaller0: entered promiscuous mode [ 197.553165][T10931] netlink: 'syz.0.1376': attribute type 1 has an invalid length. [ 197.622314][T10928] syzkaller0: entered allmulticast mode [ 197.842218][T10947] gre0: left promiscuous mode [ 197.867346][T10947] gre0: left allmulticast mode [ 197.883364][T10947] gretap0: left promiscuous mode [ 197.910362][T10947] bond0: left promiscuous mode [ 197.918967][T10947] bridge_slave_1: left promiscuous mode [ 197.945470][T10947] bridge_slave_1: left allmulticast mode [ 197.981010][T10947] vlan2: left promiscuous mode [ 198.006147][T10947] bridge0: left promiscuous mode [ 198.026915][T10947] geneve2: left promiscuous mode [ 198.042114][T10947] geneve2: left allmulticast mode [ 198.085608][T10963] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 198.132868][ T50] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 198.168834][ T50] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 198.189325][ T50] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 198.212113][ T50] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 198.277335][T10968] netlink: 'syz.4.1388': attribute type 1 has an invalid length. [ 198.786152][T11006] xt_cluster: node mask cannot exceed total number of nodes [ 199.063781][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.064231][T11022] netlink: 'syz.2.1404': attribute type 2 has an invalid length. [ 199.083926][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.092129][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.129119][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.258712][T11032] gretap0: entered promiscuous mode [ 199.416059][T11042] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.434106][T11032] nbd0: detected capacity change from 0 to 127 [ 199.576202][T11042] netlink: 'syz.4.1409': attribute type 5 has an invalid length. [ 199.861261][ T5832] block nbd0: Receive control failed (result -104) [ 200.815283][T11138] FAULT_INJECTION: forcing a failure. [ 200.815283][T11138] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 200.872708][T11138] CPU: 0 UID: 0 PID: 11138 Comm: syz.3.1437 Not tainted syzkaller #0 PREEMPT(full) [ 200.872732][T11138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.872743][T11138] Call Trace: [ 200.872750][T11138] [ 200.872758][T11138] dump_stack_lvl+0x189/0x250 [ 200.872796][T11138] ? __pfx____ratelimit+0x10/0x10 [ 200.872818][T11138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.872839][T11138] ? __pfx__printk+0x10/0x10 [ 200.872869][T11138] should_fail_ex+0x414/0x560 [ 200.872897][T11138] _copy_to_user+0x31/0xb0 [ 200.872919][T11138] simple_read_from_buffer+0xe1/0x170 [ 200.872946][T11138] proc_fail_nth_read+0x1b3/0x220 [ 200.872969][T11138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.872992][T11138] ? rw_verify_area+0x2a6/0x4d0 [ 200.873011][T11138] ? __lock_acquire+0xab9/0xd20 [ 200.873025][T11138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.873045][T11138] vfs_read+0x200/0xa30 [ 200.873064][T11138] ? fdget_pos+0x247/0x320 [ 200.873084][T11138] ? __pfx___mutex_lock+0x10/0x10 [ 200.873106][T11138] ? __pfx_vfs_read+0x10/0x10 [ 200.873127][T11138] ? __fget_files+0x2a/0x420 [ 200.873144][T11138] ? __fget_files+0x3a0/0x420 [ 200.873158][T11138] ? __fget_files+0x2a/0x420 [ 200.873182][T11138] ksys_read+0x145/0x250 [ 200.873206][T11138] ? __pfx_ksys_read+0x10/0x10 [ 200.873231][T11138] ? do_syscall_64+0xbe/0xfa0 [ 200.873256][T11138] do_syscall_64+0xfa/0xfa0 [ 200.873276][T11138] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.873297][T11138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.873320][T11138] ? clear_bhb_loop+0x60/0xb0 [ 200.873338][T11138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.873354][T11138] RIP: 0033:0x7f924738e0dc [ 200.873379][T11138] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 200.873392][T11138] RSP: 002b:00007f92482b1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 200.873417][T11138] RAX: ffffffffffffffda RBX: 00007f92475e6090 RCX: 00007f924738e0dc [ 200.873428][T11138] RDX: 000000000000000f RSI: 00007f92482b10a0 RDI: 0000000000000003 [ 200.873438][T11138] RBP: 00007f92482b1090 R08: 0000000000000000 R09: 0000000000000000 [ 200.873448][T11138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.873458][T11138] R13: 00007f92475e6128 R14: 00007f92475e6090 R15: 00007ffd6778cb58 [ 200.873489][T11138] [ 201.295274][T11147] __nla_validate_parse: 21 callbacks suppressed [ 201.295293][T11147] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1442'. [ 201.365047][T11151] netlink: 'syz.3.1441': attribute type 13 has an invalid length. [ 201.373006][T11151] netlink: 'syz.3.1441': attribute type 17 has an invalid length. [ 201.459691][T11153] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 201.504692][T11153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.541975][T11151] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.549210][T11151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.580602][T11151] 8021q: adding VLAN 0 to HW filter on device ` [ 201.625824][T11151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.632047][T11166] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1447'. [ 201.777391][T11173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1450'. [ 202.011232][T11182] xt_hashlimit: size too large, truncated to 1048576 [ 202.059551][T11192] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1453'. [ 202.233849][T11202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1457'. [ 202.516803][T11216] netlink: 'syz.3.1462': attribute type 11 has an invalid length. [ 202.538211][T11216] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1462'. [ 202.713595][T11230] veth1_to_bond: entered allmulticast mode [ 202.714574][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1469'. [ 202.744345][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1467'. [ 202.869386][T11230] bond0: (slave bond_slave_1): Releasing backup interface [ 202.903361][T11230] bond_slave_1 (unregistering): left promiscuous mode [ 202.960179][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1472'. [ 203.018726][T11249] netlink: 'syz.1.1472': attribute type 5 has an invalid length. [ 203.044447][T11250] netlink: 'syz.1.1472': attribute type 5 has an invalid length. [ 203.074568][T11249] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1472'. [ 203.328284][T11268] openvswitch: netlink: Message has 592 unknown bytes. [ 203.335449][T11268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.408312][T11279] tc_dump_action: action bad kind [ 203.789315][T11302] netlink: 'syz.3.1488': attribute type 1 has an invalid length. [ 203.846275][T11302] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.889194][T11302] veth5: entered promiscuous mode [ 204.403166][T11347] syz_tun: tun_net_xmit 86 [ 204.410199][T11347] tipc: Enabling not permitted [ 204.417326][T11347] tipc: Enabling of bearer rejected, failed to enable media [ 204.427074][T11348] sctp: [Deprecated]: syz.3.1500 (pid 11348) Use of int in max_burst socket option deprecated. [ 204.427074][T11348] Use struct sctp_assoc_value instead [ 204.882544][T11365] netlink: 'syz.4.1509': attribute type 1 has an invalid length. [ 204.959063][T11365] 8021q: adding VLAN 0 to HW filter on device bond6 [ 204.966584][T11377] netlink: 'syz.3.1511': attribute type 10 has an invalid length. [ 205.008464][T11377] team0: Device veth1_macvtap failed to register rx_handler [ 205.179040][T11386] unsupported nlmsg_type 40 [ 205.268226][T11365] veth5: entered promiscuous mode [ 205.329176][T11390] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.354524][T11390] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.423842][ C0] syz_tun: tun_net_xmit 86 [ 205.444490][T11390] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.484150][T11390] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.581651][T11390] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.603899][T11390] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.674394][T11390] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.684328][T11390] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.756396][T11402] netlink: 'syz.2.1520': attribute type 33 has an invalid length. [ 205.837155][T11411] netlink: 'syz.4.1521': attribute type 29 has an invalid length. [ 205.846467][T11411] netlink: 'syz.4.1521': attribute type 29 has an invalid length. [ 205.856495][T11411] netlink: 'syz.4.1521': attribute type 29 has an invalid length. [ 205.865840][T11411] netlink: 'syz.4.1521': attribute type 29 has an invalid length. [ 205.889343][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.904377][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.951689][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.967715][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.024676][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.043002][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.077055][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.085714][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.265591][T11433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.453944][ C0] syz_tun: tun_net_xmit 86 [ 206.601603][T11456] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 206.636272][T11458] __nla_validate_parse: 9 callbacks suppressed [ 206.636288][T11458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1529'. [ 206.665628][T11459] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 206.838847][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1535'. [ 206.916856][T11472] bridge_slave_0: left allmulticast mode [ 206.922548][T11472] bridge_slave_0: left promiscuous mode [ 206.959308][T11472] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.186933][T11492] netlink: 'syz.4.1538': attribute type 11 has an invalid length. [ 207.195343][T11492] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1538'. [ 207.436122][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 207.730936][T11520] netlink: 'syz.3.1549': attribute type 1 has an invalid length. [ 207.809474][T11520] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.173261][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1554'. [ 208.246920][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 208.324443][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 208.384689][T11561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1559'. [ 208.674527][T11576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1563'. [ 208.674746][T11572] netlink: 'syz.1.1562': attribute type 1 has an invalid length. [ 208.770205][T11581] netlink: 'syz.2.1566': attribute type 1 has an invalid length. [ 208.787747][T11578] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1565'. [ 209.040417][T11595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.648278][T11642] IPVS: length: 239 != 24 [ 209.684385][T11642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.926938][T11658] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.982335][T11658] veth3: entered promiscuous mode [ 210.008930][T11658] bond2: (slave veth3): Enslaving as an active interface with a down link [ 210.072563][T11658] veth5: entered promiscuous mode [ 210.081813][T11658] bond2: (slave veth5): Enslaving as an active interface with a down link [ 210.434478][T11705] validate_nla: 2 callbacks suppressed [ 210.434496][T11705] netlink: 'syz.1.1598': attribute type 13 has an invalid length. [ 210.658945][T11713] raw_sendmsg: syz.0.1601 forgot to set AF_INET. Fix it! [ 210.877167][T11733] netlink: 'syz.3.1609': attribute type 1 has an invalid length. [ 210.956569][T11737] netlink: zone id is out of range [ 210.963768][T11737] netlink: zone id is out of range [ 210.975250][T11737] netlink: set zone limit has 8 unknown bytes [ 211.168322][T11748] netlink: 'syz.3.1616': attribute type 11 has an invalid length. [ 211.222205][T11751] Cannot find del_set index 49151 as target [ 211.455973][T11772] netlink: 'syz.3.1622': attribute type 13 has an invalid length. [ 211.468813][T11772] veth0_macvtap: left promiscuous mode [ 211.480436][T11772] macvtap0: entered allmulticast mode [ 211.491959][T11772] macvtap0: refused to change device tx_queue_len [ 211.497814][T11776] IPv6: addrconf: prefix option has invalid lifetime [ 211.573959][T11781] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 211.696265][T11789] __nla_validate_parse: 20 callbacks suppressed [ 211.696283][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1627'. [ 211.712685][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1627'. [ 211.718814][T11787] netlink: 'syz.3.1626': attribute type 1 has an invalid length. [ 211.918770][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1631'. [ 211.986622][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.986660][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1631'. [ 212.014534][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.041633][T11809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.099895][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.123403][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.222452][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'. [ 212.249349][T11819] ip6tnl0: Caught tx_queue_len zero misconfig [ 212.270691][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'. [ 212.429330][T11832] pim6reg: entered allmulticast mode [ 212.448245][T11832] pim6reg: left allmulticast mode [ 212.485609][T11836] xt_TPROXY: Can be used only with -p tcp or -p udp [ 212.497488][T11840] netlink: 'syz.4.1644': attribute type 2 has an invalid length. [ 212.506326][T11836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1642'. [ 212.517171][T11840] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1644'. [ 212.878438][T11861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.079848][T11872] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 213.232762][T11876] tipc: Enabled bearer , priority 0 [ 213.262801][T11876] syzkaller0: entered promiscuous mode [ 213.269122][T11876] syzkaller0: entered allmulticast mode [ 213.288488][T11876] tipc: Resetting bearer [ 213.318216][T11873] tipc: Resetting bearer [ 213.358974][T11873] tipc: Disabling bearer [ 213.831008][T11906] bond7: entered promiscuous mode [ 213.909893][T11906] bond7: entered allmulticast mode [ 213.946289][T11906] 8021q: adding VLAN 0 to HW filter on device bond7 [ 214.052144][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1665'. [ 214.074376][T11927] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1665'. [ 214.529321][T11961] tipc: Enabled bearer , priority 10 [ 215.316382][T12023] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 215.375284][T12023] bond6 (unregistering): Released all slaves [ 215.499987][T12033] syzkaller1: entered promiscuous mode [ 215.513155][T12033] syzkaller1: entered allmulticast mode [ 215.643783][ T7831] tipc: Node number set to 2113382276 [ 216.012172][T12051] syzkaller0: entered promiscuous mode [ 216.043890][T12051] syzkaller0: entered allmulticast mode [ 217.379344][T12094] __nla_validate_parse: 7 callbacks suppressed [ 217.379362][T12094] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1711'. [ 217.398234][T12095] netlink: 696 bytes leftover after parsing attributes in process `syz.4.1711'. [ 217.731882][T12100] netlink: 'syz.1.1713': attribute type 13 has an invalid length. [ 217.750357][T12100] netlink: 'syz.1.1713': attribute type 27 has an invalid length. [ 217.837675][T12116] tipc: Enabled bearer , priority 0 [ 217.857329][T12116] syzkaller0: entered promiscuous mode [ 217.871476][T12116] syzkaller0: entered allmulticast mode [ 217.881749][T12116] sctp: [Deprecated]: syz.2.1718 (pid 12116) Use of int in max_burst socket option. [ 217.881749][T12116] Use struct sctp_assoc_value instead [ 217.903120][T12116] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 217.964130][T12120] bond3: entered allmulticast mode [ 217.969714][T12120] 8021q: adding VLAN 0 to HW filter on device bond3 [ 217.979330][T12124] netlink: 'syz.1.1719': attribute type 1 has an invalid length. [ 217.999681][T12123] netlink: 'syz.3.1720': attribute type 10 has an invalid length. [ 218.005022][T12116] tipc: Resetting bearer [ 218.028777][T12123] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.036905][T12123] `: (slave team0): Enslaving as an active interface with an up link [ 218.046628][T12115] tipc: Resetting bearer [ 218.072291][T12115] tipc: Disabling bearer [ 218.106628][T12126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1721'. [ 218.391582][T12137] tipc: Enabled bearer , priority 0 [ 218.604914][T12135] tipc: Disabling bearer [ 218.622382][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'. [ 218.812549][T12171] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 218.888848][T12178] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1732'. [ 218.948653][T12178] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 218.965035][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1736'. [ 219.003247][T12182] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1739'. [ 219.163237][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'. [ 219.206837][T12189] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1740'. [ 219.290690][T12202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1744'. [ 219.430675][T12212] lo: Caught tx_queue_len zero misconfig [ 219.800767][T12239] syzkaller1: entered promiscuous mode [ 219.851845][T12239] syzkaller1: entered allmulticast mode [ 220.049661][T12265] openvswitch: netlink: EtherType 50a is less than min 600 [ 220.061397][T12266] netlink: 'syz.4.1759': attribute type 3 has an invalid length. [ 221.348974][T12337] netlink: 'syz.4.1775': attribute type 5 has an invalid length. [ 222.226824][T12350] openvswitch: netlink: Missing valid actions attribute. [ 222.241836][T12350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.270034][T12349] syzkaller0: entered promiscuous mode [ 222.276082][T12349] syzkaller0: entered allmulticast mode [ 222.342799][T12361] netlink: 'syz.0.1778': attribute type 3 has an invalid length. [ 222.412303][T12364] syzkaller0: entered promiscuous mode [ 222.418009][T12364] syzkaller0: entered allmulticast mode [ 222.442100][T12364] __nla_validate_parse: 8 callbacks suppressed [ 222.442199][T12364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1782'. [ 222.589126][T12370] ip6erspan0: mtu less than device minimum [ 222.653377][T12377] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 230.068465][ T56] block nbd0: Possible stuck request ffff8880250d7000: control (read@0,1024B). Runtime 30 seconds [ 230.079837][ T56] block nbd0: Possible stuck request ffff8880250d71c0: control (read@1024,1024B). Runtime 30 seconds [ 230.090768][ T56] block nbd0: Possible stuck request ffff8880250d7380: control (read@2048,1024B). Runtime 30 seconds [ 230.101836][ T56] block nbd0: Possible stuck request ffff8880250d7540: control (read@3072,1024B). Runtime 30 seconds [ 236.774202][ T7828] page_pool_release_retry() stalled pool shutdown: id 31, 1 inflight 60 sec [ 246.089439][T12397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1788'. [ 246.116070][T12397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1788'. [ 246.174355][T12404] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1793'. [ 246.188770][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 246.224434][T12405] netlink: 'syz.0.1792': attribute type 22 has an invalid length. [ 246.232301][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1792'. [ 246.530105][T12428] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 246.613055][T12427] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 246.656536][T12427] tipc: Enabled bearer , priority 10 [ 246.692427][T12439] vlan0: entered promiscuous mode [ 246.700596][T12439] bridge0: entered promiscuous mode [ 246.718508][T12447] netlink: 'syz.4.1807': attribute type 10 has an invalid length. [ 246.797219][T12447] bond0: (slave 0!): Enslaving as an active interface with an up link [ 246.875343][T12462] netlink: 'syz.3.1811': attribute type 1 has an invalid length. [ 246.903322][T12463] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1809'. [ 246.905810][T12462] netlink: 'syz.3.1811': attribute type 3 has an invalid length. [ 246.923157][T12468] netlink: 'syz.4.1812': attribute type 10 has an invalid length. [ 246.930738][T12462] netlink: 'syz.3.1811': attribute type 1 has an invalid length. [ 246.939357][T12462] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1811'. [ 247.011663][T12474] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1814'. [ 247.132850][T12485] syzkaller1: entered promiscuous mode [ 247.154129][ T5922] syz_tun: tun_net_xmit 106 [ 247.218566][T12485] syzkaller1: entered allmulticast mode [ 247.255848][T12485] xt_l2tp: missing protocol rule (udp|l2tpip) [ 247.398184][T12503] netlink: 'syz.4.1822': attribute type 2 has an invalid length. [ 247.554168][ T5922] syz_tun: tun_net_xmit 106 [ 247.598279][T12522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1826'. [ 247.774275][ T7828] tipc: Node number set to 3186255419 [ 248.260019][T12575] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 2, id = 0 [ 248.388184][T12583] netlink: zone id is out of range [ 248.393578][T12583] netlink: zone id is out of range [ 248.400939][T12583] netlink: zone id is out of range [ 248.408171][T12583] netlink: get zone limit has 4 unknown bytes [ 248.542147][T12597] netlink: 'syz.4.1847': attribute type 83 has an invalid length. [ 248.615732][T12603] tipc: Enabling of bearer rejected, failed to enable media [ 248.665627][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1849'. [ 248.892852][T12624] vxcan1: tx address claim with different name [ 248.905813][T12629] vxcan1: tx address claim with different name [ 249.014842][T12635] netlink: 'syz.1.1857': attribute type 1 has an invalid length. [ 249.274015][T12621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.561820][T12642] bond4: (slave gretap1): making interface the new active one [ 249.570896][T12642] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 249.589220][ T50] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.632884][ T50] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.647367][ T50] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.672706][ T50] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.702254][ T50] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.728109][ T50] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.752311][ T50] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.783723][ T50] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.277693][T12702] netlink: 'syz.3.1874': attribute type 2 has an invalid length. [ 250.864196][T12749] openvswitch: netlink: IP tunnel dst address not specified [ 250.881385][T12747] sctp: [Deprecated]: syz.1.1886 (pid 12747) Use of int in max_burst socket option. [ 250.881385][T12747] Use struct sctp_assoc_value instead [ 250.905020][T12751] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 250.915060][T12751] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 251.130060][T12772] delete_channel: no stack [ 251.146136][T12772] __nla_validate_parse: 5 callbacks suppressed [ 251.146152][T12772] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1894'. [ 251.190688][T12775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1895'. [ 251.201289][T12775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1895'. [ 251.224740][T12775] erspan0: entered promiscuous mode [ 251.242363][T12775] gretap0: entered promiscuous mode [ 251.249078][T12775] debugfs: 'hsr1' already exists in 'hsr' [ 251.255887][T12777] can: request_module (can-proto-0) failed. [ 251.265388][T12775] Cannot create hsr debugfs directory [ 251.460707][T12795] syzkaller0: entered promiscuous mode [ 251.466352][T12795] syzkaller0: entered allmulticast mode [ 251.552559][T12800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1903'. [ 251.562685][T12800] validate_nla: 3 callbacks suppressed [ 251.562710][T12800] netlink: 'syz.4.1903': attribute type 7 has an invalid length. [ 251.576754][T12800] netlink: 'syz.4.1903': attribute type 8 has an invalid length. [ 251.584634][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1903'. [ 251.602935][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1903'. [ 251.851854][T12816] netlink: zone id is out of range [ 251.863591][T12816] netlink: zone id is out of range [ 251.874578][T12816] netlink: zone id is out of range [ 251.886811][T12816] netlink: zone id is out of range [ 251.894261][T12816] netlink: zone id is out of range [ 251.905863][T12819] syz_tun: entered allmulticast mode [ 251.917420][T12816] netlink: del zone limit has 4 unknown bytes [ 251.919067][T12819] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1908'. [ 252.030606][T12826] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 252.275417][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1914'. [ 252.319778][T12839] netlink: 'syz.0.1912': attribute type 4 has an invalid length. [ 252.638479][T12848] netlink: 'syz.1.1916': attribute type 2 has an invalid length. [ 252.884532][T12851] bond8: option packets_per_slave: invalid value (18446744073709551615) [ 252.893362][T12851] bond8: option packets_per_slave: allowed values 0 - 65535 [ 252.913036][T12851] bond8 (unregistering): Released all slaves [ 253.037269][T12864] netlink: 'syz.0.1920': attribute type 1 has an invalid length. [ 253.364693][T12880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1928'. [ 253.446891][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1929'. [ 253.459502][T12890] openvswitch: netlink: Flow actions attr not present in new flow. [ 253.917205][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.064292][T12903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.077891][T12903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.184824][T12930] team0: Caught tx_queue_len zero misconfig [ 254.217864][ T50] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.239922][ T50] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.251223][ T50] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.270627][ T50] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.292607][ T50] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.315324][ T50] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.344015][ T50] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.372695][ T50] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.398758][T12950] : renamed from hsr0 [ 254.551503][T12957] syzkaller0: entered promiscuous mode [ 254.566893][T12957] syzkaller0: entered allmulticast mode [ 254.648074][T12970] netlink: 'syz.0.1949': attribute type 9 has an invalid length. [ 255.926812][T12997] bond0: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 255.989540][T12997] bond0 (unregistering): Released all slaves [ 256.210755][T13028] __nla_validate_parse: 7 callbacks suppressed [ 256.210772][T13028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1964'. [ 256.258844][T13032] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1966'. [ 256.259337][T13028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1964'. [ 256.377813][T13042] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1969'. [ 256.400338][T13042] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1969'. [ 256.693143][T13058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1974'. [ 256.733319][T13058] netlink: 'syz.1.1974': attribute type 8 has an invalid length. [ 256.929050][T13072] netlink: 'syz.0.1976': attribute type 1 has an invalid length. [ 257.026104][T13078] netlink: 'syz.0.1979': attribute type 1 has an invalid length. [ 257.147527][T13086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1980'. [ 257.301830][T13090] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 257.312223][T13090] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 257.384806][T13099] syzkaller0: entered promiscuous mode [ 257.399523][T13101] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1985'. [ 257.400680][T13099] syzkaller0: entered allmulticast mode [ 257.581048][T13116] netlink: 'syz.1.1991': attribute type 11 has an invalid length. [ 257.650138][T13121] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1993'. [ 258.119363][T13153] netlink: 'syz.2.2005': attribute type 1 has an invalid length. [ 258.212268][T13159] netlink: 'syz.3.2007': attribute type 16 has an invalid length. [ 258.222586][T13159] netlink: 'syz.3.2007': attribute type 3 has an invalid length. [ 258.231948][T13159] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2007'. [ 258.631489][T13179] netlink: 'syz.4.2014': attribute type 4 has an invalid length. [ 259.035942][T13204] netlink: 'syz.4.2021': attribute type 2 has an invalid length. [ 259.132891][T13208] bond0: Caught tx_queue_len zero misconfig [ 259.158478][T13208] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 259.205621][T13213] netlink: 'syz.3.2026': attribute type 11 has an invalid length. [ 259.340270][T13222] netlink: zone id is out of range [ 259.351378][T13222] netlink: zone id is out of range [ 259.366369][T13222] netlink: zone id is out of range [ 259.378171][T13222] netlink: get zone limit has 4 unknown bytes [ 259.384130][T13219] xt_CT: No such helper "pptp" [ 259.448280][T13226] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 259.629533][T13243] x_tables: duplicate underflow at hook 1 [ 259.643263][T13244] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 2, id = 0 [ 259.745734][T13249] sctp: [Deprecated]: syz.0.2034 (pid 13249) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.745734][T13249] Use struct sctp_sack_info instead [ 259.866407][T13259] xt_TPROXY: Can be used only with -p tcp or -p udp [ 260.136496][ T56] block nbd0: Possible stuck request ffff8880250d7000: control (read@0,1024B). Runtime 60 seconds [ 260.152921][ T56] block nbd0: Possible stuck request ffff8880250d71c0: control (read@1024,1024B). Runtime 60 seconds [ 260.164841][ T56] block nbd0: Possible stuck request ffff8880250d7380: control (read@2048,1024B). Runtime 60 seconds [ 260.177294][ T56] block nbd0: Possible stuck request ffff8880250d7540: control (read@3072,1024B). Runtime 60 seconds [ 260.575604][T13305] hsr_slave_1: left promiscuous mode [ 260.631523][T13307] : A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 260.981296][T13338] sctp: [Deprecated]: syz.4.2062 (pid 13338) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.981296][T13338] Use struct sctp_sack_info instead [ 261.090386][T13348] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 261.420689][T13375] __nla_validate_parse: 76 callbacks suppressed [ 261.420705][T13375] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2074'. [ 261.871539][T13410] syzkaller0: entered promiscuous mode [ 261.883921][T13410] syzkaller0: entered allmulticast mode [ 262.024994][T13419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2084'. [ 262.093032][T13421] validate_nla: 1 callbacks suppressed [ 262.093049][T13421] netlink: 'syz.2.2085': attribute type 1 has an invalid length. [ 262.695695][T13456] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2094'. [ 262.715840][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2094'. [ 262.926752][T13473] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2099'. [ 262.958809][T13470] syzkaller0: entered promiscuous mode [ 262.987288][T13470] syzkaller0: entered allmulticast mode [ 263.079772][T13478] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20004 [ 263.239810][T13492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2105'. [ 263.249982][T13494] netlink: 'syz.2.2106': attribute type 1 has an invalid length. [ 263.365513][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2106'. [ 263.383202][T13494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.455492][T13507] openvswitch: netlink: Unknown nsh attribute 0 [ 263.461792][T13507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.589909][T13516] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2114'. [ 263.617677][T13516] xt_policy: output policy not valid in PREROUTING and INPUT [ 263.779862][T13526] netlink: 'syz.0.2118': attribute type 6 has an invalid length. [ 263.796331][T13528] delete_channel: no stack [ 264.251371][T13550] netlink: 'syz.1.2125': attribute type 1 has an invalid length. [ 264.315044][T13550] 8021q: adding VLAN 0 to HW filter on device bond5 [ 264.398242][T13550] veth7: entered promiscuous mode [ 264.404635][T13556] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2125'. [ 264.436933][T13550] bond5: (slave veth7): Enslaving as an active interface with an up link [ 264.689950][T13564] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2129'. [ 265.161862][T13584] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 265.330745][T13595] netlink: 'syz.0.2140': attribute type 30 has an invalid length. [ 265.397639][T13600] `: entered promiscuous mode [ 265.402456][T13600] bond_slave_0: entered promiscuous mode [ 265.414395][T13600] bond_slave_1: entered promiscuous mode [ 265.977621][T13634] netlink: 'syz.3.2155': attribute type 1 has an invalid length. [ 266.091045][T13639] netlink: 'syz.4.2156': attribute type 14 has an invalid length. [ 266.108872][T13639] netlink: 'syz.4.2156': attribute type 14 has an invalid length. [ 266.485520][T13655] __nla_validate_parse: 8 callbacks suppressed [ 266.485536][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 266.792445][T13672] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2166'. [ 267.215387][T13694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2174'. [ 267.216786][T13695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2176'. [ 267.352933][T13698] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2175'. [ 267.365758][T13698] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2175'. [ 267.423275][T13703] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2177'. [ 267.663433][T13715] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2181'. [ 267.847748][T13727] syzkaller0: entered allmulticast mode [ 267.865192][T13727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2184'. [ 267.884590][T13734] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2186'. [ 268.078457][T13749] macvtap1: entered promiscuous mode [ 268.094187][T13749] vlan0: entered promiscuous mode [ 268.104793][T13749] macvtap1: entered allmulticast mode [ 268.115624][T13749] vlan0: entered allmulticast mode [ 268.121895][T13749] veth0_vlan: entered allmulticast mode [ 268.368003][T13772] netlink: 'syz.0.2198': attribute type 2 has an invalid length. [ 268.400716][T13772] netlink: 'syz.0.2198': attribute type 13 has an invalid length. [ 268.720720][T13797] syzkaller0: entered promiscuous mode [ 268.735836][T13797] syzkaller0: entered allmulticast mode [ 269.002948][T13817] netlink: 'syz.3.2211': attribute type 4 has an invalid length. [ 269.228464][T13831] netlink: 'syz.1.2212': attribute type 2 has an invalid length. [ 269.565798][T13859] : entered promiscuous mode [ 269.772619][T13873] tipc: Enabled bearer , priority 0 [ 269.816097][T13873] syzkaller0: entered promiscuous mode [ 269.833476][T13873] syzkaller0: entered allmulticast mode [ 270.020231][T13866] tipc: Resetting bearer [ 270.046237][T13900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.107046][T13866] tipc: Disabling bearer [ 270.117804][T13900] IPVS: Unknown mcast interface: vcan0 [ 270.230462][T13918] openvswitch: netlink: IP tunnel dst address not specified [ 270.254852][T13919] openvswitch: netlink: IP tunnel dst address not specified [ 270.758695][T13949] netlink: 'syz.4.2249': attribute type 1 has an invalid length. [ 271.108193][T13958] syzkaller0: entered promiscuous mode [ 271.114448][T13958] syzkaller0: entered allmulticast mode [ 271.835733][T13967] __nla_validate_parse: 26 callbacks suppressed [ 271.835752][T13967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2254'. [ 271.947783][T13972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2254'. [ 273.777188][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2259'. [ 273.788846][T13994] tunl0: entered promiscuous mode [ 273.788904][T13993] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2260'. [ 273.794408][T13994] netlink: 'syz.3.2261': attribute type 3 has an invalid length. [ 273.811057][T13994] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2261'. [ 273.987953][T14004] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2265'. [ 273.997228][T14003] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2265'. [ 274.014695][T14006] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2266'. [ 274.124855][T14017] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2269'. [ 274.179537][T14010] syzkaller0: entered promiscuous mode [ 274.186783][T14010] syzkaller0: entered allmulticast mode [ 274.196040][T14020] sit0: entered promiscuous mode [ 274.201259][T14020] netlink: 'syz.4.2270': attribute type 1 has an invalid length. [ 274.209425][T14020] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2270'. [ 274.280764][T14026] netlink: 'syz.4.2272': attribute type 16 has an invalid length. [ 274.291974][T14026] netlink: 'syz.4.2272': attribute type 17 has an invalid length. [ 274.309779][T14026] gretap0: left promiscuous mode [ 274.322420][T14026] sit0: left promiscuous mode [ 274.350091][T14026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.359947][T14026] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.372966][T14026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.401040][ T3512] syz_tun: tun_net_xmit 90 [ 274.424682][ T7830] syz_tun: tun_net_xmit 110 [ 274.589969][T14045] xt_NFQUEUE: number of total queues is 0 [ 274.657797][ T7830] syz_tun: tun_net_xmit 90 [ 274.825481][T14066] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 275.275167][T14103] sctp: [Deprecated]: syz.3.2297 (pid 14103) Use of int in max_burst socket option. [ 275.275167][T14103] Use struct sctp_assoc_value instead [ 275.304659][T14103] openvswitch: netlink: IP tunnel dst address not specified [ 275.315142][T14103] netlink: 'syz.3.2297': attribute type 10 has an invalid length. [ 275.329863][T14105] syzkaller1: entered promiscuous mode [ 275.336280][T14105] syzkaller1: entered allmulticast mode [ 275.346388][T14103] batadv0: entered allmulticast mode [ 275.358304][T14103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.369057][T14103] `: (slave batadv0): Enslaving as an active interface with an up link [ 275.378532][T14106] netlink: 'syz.3.2297': attribute type 10 has an invalid length. [ 275.391488][T14106] batadv0: entered promiscuous mode [ 275.401134][T14106] `: (slave batadv0): Releasing backup interface [ 275.414683][ T7847] syz_tun: tun_net_xmit 110 [ 275.430012][T14106] bridge0: port 3(batadv0) entered blocking state [ 275.444041][T14106] bridge0: port 3(batadv0) entered disabled state [ 275.490447][T14110] netlink: 'syz.4.2300': attribute type 11 has an invalid length. [ 275.707722][T14124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.721036][T14124] sctp: [Deprecated]: syz.4.2305 (pid 14124) Use of int in max_burst socket option deprecated. [ 275.721036][T14124] Use struct sctp_assoc_value instead [ 275.745559][ T1112] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 275.754874][ T1112] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 275.874860][T14134] x_tables: duplicate underflow at hook 1 [ 276.323836][T14162] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 276.888867][T14209] netlink: 'syz.3.2330': attribute type 2 has an invalid length. [ 276.899348][T14210] netlink: 'syz.3.2330': attribute type 2 has an invalid length. [ 276.918761][T14209] : entered promiscuous mode [ 277.117854][T14223] Dead loop on virtual device ip6_vti0, fix it urgently! [ 277.126224][T14223] Dead loop on virtual device ip6_vti0, fix it urgently! [ 277.133787][T14223] Dead loop on virtual device ip6_vti0, fix it urgently! [ 277.141313][T14223] Dead loop on virtual device ip6_vti0, fix it urgently! [ 277.701430][T14271] __nla_validate_parse: 17 callbacks suppressed [ 277.701448][T14271] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2345'. [ 277.808472][T14277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2345'. [ 277.824790][T14278] netlink: 'syz.3.2348': attribute type 4 has an invalid length. [ 277.850531][T14271] syzkaller0: entered promiscuous mode [ 277.856607][T14271] syzkaller0: entered allmulticast mode [ 277.899858][T14283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.907154][T14283] IPv6: NLM_F_CREATE should be set when creating new route [ 277.914459][T14283] IPv6: NLM_F_CREATE should be set when creating new route [ 277.921681][T14283] IPv6: NLM_F_CREATE should be set when creating new route [ 277.933739][T14283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.115778][T14295] netlink: 'syz.4.2354': attribute type 4 has an invalid length. [ 279.153897][T14293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2352'. [ 279.155213][T14295] netlink: 'syz.4.2354': attribute type 4 has an invalid length. [ 279.163137][T14292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2352'. [ 279.197115][T14297] netlink: 'syz.1.2353': attribute type 16 has an invalid length. [ 279.213964][T14297] netlink: 'syz.1.2353': attribute type 17 has an invalid length. [ 279.222933][T14299] pimreg: left allmulticast mode [ 279.254869][T14293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2352'. [ 279.268453][T14292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2352'. [ 279.286837][T14297] gretap0: left promiscuous mode [ 279.286921][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2354'. [ 279.325715][T14297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.334640][T14297] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.342809][T14297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.415108][T14306] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 279.462185][T14306] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 279.605427][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2358'. [ 279.725704][T14326] netlink: 'syz.2.2361': attribute type 1 has an invalid length. [ 279.762406][T14326] netlink: 'syz.2.2361': attribute type 1 has an invalid length. [ 279.807799][T14329] netlink: 'syz.0.2362': attribute type 23 has an invalid length. [ 279.877573][T14336] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2364'. [ 279.990882][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2366'. [ 280.300836][T14357] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 280.313569][T14357] bond9 (unregistering): Released all slaves [ 280.377813][T14366] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 280.465598][T14377] netlink: 'syz.4.2376': attribute type 1 has an invalid length. [ 280.712090][T14394] netlink: 'syz.3.2383': attribute type 10 has an invalid length. [ 280.721458][T14394] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 280.731869][T14394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.762280][T14398] netlink: 'syz.0.2382': attribute type 7 has an invalid length. [ 281.832204][T14470] smc: net device gre0 applied user defined pnetid SYZ1 [ 282.239930][T14504] syzkaller0: entered promiscuous mode [ 282.245977][T14504] syzkaller0: entered allmulticast mode [ 282.280067][T14504] tipc: Enabled bearer , priority 0 [ 282.295417][T14503] tipc: Resetting bearer [ 282.316462][T14503] tipc: Disabling bearer [ 282.587816][T14527] 8021q: adding VLAN 0 to HW filter on device bond9 [ 282.610098][T14527] bond9: (slave geneve3): making interface the new active one [ 282.620822][T14527] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 282.635165][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.647381][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.664618][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.682945][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.759251][T14537] ip6erspan0: entered promiscuous mode [ 282.843870][T14542] nbd: must specify a device to reconfigure [ 282.992155][T14548] syzkaller0: entered promiscuous mode [ 282.998051][T14548] syzkaller0: entered allmulticast mode [ 283.017273][T14553] x_tables: duplicate underflow at hook 2 [ 283.213481][T14562] xt_socket: unknown flags 0x50 [ 283.444596][T14573] bridge8: entered allmulticast mode [ 283.594109][T14586] __nla_validate_parse: 13 callbacks suppressed [ 283.594127][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2445'. [ 283.611165][T14586] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2445'. [ 283.844358][T14599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2450'. [ 283.923268][T14606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2451'. [ 284.141548][T14621] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2454'. [ 284.195430][T14625] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2455'. [ 284.373610][T14638] x_tables: duplicate underflow at hook 3 [ 284.892134][T14670] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.311088][T14699] validate_nla: 5 callbacks suppressed [ 285.311107][T14699] netlink: 'syz.4.2481': attribute type 15 has an invalid length. [ 285.338966][T14699] netlink: 'syz.4.2481': attribute type 2 has an invalid length. [ 285.586451][T14721] : entered promiscuous mode [ 285.599439][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2490'. [ 286.069142][T14753] Cannot find del_set index 49151 as target [ 286.116770][T14746] netlink: 'syz.0.2497': attribute type 1 has an invalid length. [ 286.272376][T14765] netlink: 'syz.4.2503': attribute type 3 has an invalid length. [ 286.280470][T14765] netlink: 'syz.4.2503': attribute type 3 has an invalid length. [ 286.345516][T14770] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 286.561481][T14789] netlink: 'syz.4.2512': attribute type 21 has an invalid length. [ 286.570608][T14789] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2512'. [ 286.665857][T14796] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2513'. [ 286.849530][T14805] syz_tun: tun_net_xmit 42 [ 286.854669][T14805] syz_tun: tun_net_xmit 42 [ 286.859307][T14805] syz_tun: tun_net_xmit 42 [ 286.864705][T14805] syz_tun: tun_net_xmit 42 [ 286.869283][T14805] syz_tun: tun_net_xmit 42 [ 286.874540][T14805] syz_tun: tun_net_xmit 42 [ 286.879114][T14805] syz_tun: tun_net_xmit 42 [ 286.889854][T14805] syz_tun: tun_net_xmit 42 [ 286.895691][T14805] syz_tun: tun_net_xmit 42 [ 286.901055][T14805] syz_tun: tun_net_xmit 42 [ 286.906411][T14805] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 286.962046][T14811] 8021q: VLANs not supported on ip_vti0 [ 286.984951][T14813] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2520'. [ 287.000783][T14816] netlink: 'syz.2.2521': attribute type 12 has an invalid length. [ 287.016338][T14816] netlink: 'syz.2.2521': attribute type 29 has an invalid length. [ 287.024952][T14816] netlink: 'syz.2.2521': attribute type 1 has an invalid length. [ 287.308043][T14842] IPv6: NLM_F_CREATE should be specified when creating new route [ 287.318377][T14842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 287.325650][T14842] IPv6: NLM_F_CREATE should be set when creating new route [ 287.402486][T14842] bond10: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 287.454290][T14849] openvswitch: netlink: Flow actions attr not present in new flow. [ 287.488753][T14861] netlink: 'syz.4.2536': attribute type 1 has an invalid length. [ 287.497462][T14863] IPVS: Unknown mcast interface: vcan0 [ 287.532220][T14861] 8021q: adding VLAN 0 to HW filter on device bond11 [ 287.571719][T14860] bond11: (slave geneve4): making interface the new active one [ 287.592289][T14860] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 287.660639][T14871] bond9: option all_slaves_active: invalid value (222) [ 287.671062][T14871] bond9 (unregistering): Released all slaves [ 287.701901][T14878] macsec0: entered promiscuous mode [ 287.709535][T14878] macsec0: entered allmulticast mode [ 287.721571][T14878] macsec0: left promiscuous mode [ 287.833047][T14883] bridge_slave_0: invalid flags given to default FDB implementation [ 288.064650][T14898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.230664][T14956] veth3: left promiscuous mode [ 289.240161][T14956] veth5: left promiscuous mode [ 289.261452][T14956] bond3: left allmulticast mode [ 289.281821][T14956] veth7: left promiscuous mode [ 289.293282][T14956] vlan0: left allmulticast mode [ 289.298866][T14956] veth0_vlan: left allmulticast mode [ 289.304715][T14956] vlan0: left promiscuous mode [ 289.310320][T14956] macvtap1: left promiscuous mode [ 289.315889][T14956] macvtap1: left allmulticast mode [ 289.408383][ T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.430596][ T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.451954][ T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.466853][ T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.616301][T14982] sctp: [Deprecated]: syz.3.2573 (pid 14982) Use of int in maxseg socket option. [ 289.616301][T14982] Use struct sctp_assoc_value instead [ 289.627378][T14984] xt_l2tp: invalid flags combination: 0 [ 289.648268][T14984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.723403][T14977] tipc: Enabled bearer , priority 0 [ 289.732100][T14977] syzkaller0: entered promiscuous mode [ 289.738262][T14977] syzkaller0: entered allmulticast mode [ 289.749307][T14977] tipc: Resetting bearer [ 289.865669][T14999] __nla_validate_parse: 12 callbacks suppressed [ 289.865687][T14999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2577'. [ 290.214196][ T56] block nbd0: Possible stuck request ffff8880250d7000: control (read@0,1024B). Runtime 90 seconds [ 290.216336][T15027] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.226080][ T56] block nbd0: Possible stuck request ffff8880250d71c0: control (read@1024,1024B). Runtime 90 seconds [ 290.226134][ T56] block nbd0: Possible stuck request ffff8880250d7380: control (read@2048,1024B). Runtime 90 seconds [ 290.226159][ T56] block nbd0: Possible stuck request ffff8880250d7540: control (read@3072,1024B). Runtime 90 seconds [ 290.312910][T15027] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.370540][T14975] tipc: Resetting bearer [ 290.385304][T14975] tipc: Disabling bearer [ 290.396289][T15035] syzkaller0: entered promiscuous mode [ 290.401843][T15035] syzkaller0: entered allmulticast mode [ 290.413053][T15027] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.425813][T15027] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.560626][T15027] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.573536][T15027] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.643307][T15027] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.674215][T15042] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2590'. [ 290.683375][T15027] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.907312][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.916091][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.981080][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.995777][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.054473][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.062680][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.105804][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.118459][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.267653][T15076] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 291.279071][T15085] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2601'. [ 291.283122][T15076] bond6 (unregistering): Released all slaves [ 291.408173][T15088] team0: Port device dummy0 removed [ 291.509984][T15090] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 291.531791][T15090] bond6 (unregistering): Released all slaves [ 291.727302][T15117] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2609'. [ 291.913206][ T60] smc: removing ib device syz1 [ 292.154313][T15142] lo: entered allmulticast mode [ 292.159439][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2618'. [ 292.342001][T15152] validate_nla: 1 callbacks suppressed [ 292.342017][T15152] netlink: 'syz.3.2621': attribute type 12 has an invalid length. [ 292.377676][T15152] netlink: 'syz.3.2621': attribute type 29 has an invalid length. [ 292.388204][T15152] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2621'. [ 292.409827][T15152] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2621'. [ 293.025994][T15183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2629'. [ 293.093116][T15185] netlink: 'syz.0.2631': attribute type 39 has an invalid length. [ 293.244328][T15192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2633'. [ 293.266825][T15192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2633'. [ 293.894158][ T50] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.906471][ T50] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.925837][ T50] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.940975][ T50] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.095679][T15241] "syz.3.2646" (15241) uses obsolete ecb(arc4) skcipher [ 294.484982][T15272] pim6reg1: entered promiscuous mode [ 294.490412][T15272] pim6reg1: entered allmulticast mode [ 294.567223][T15274] netlink: 'syz.1.2656': attribute type 1 has an invalid length. [ 294.921093][T15300] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 294.941279][T15301] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 295.225510][T15323] atomic_op ffff888142fd5998 conn xmit_atomic 0000000000000000 [ 295.265346][T15328] netlink: 'syz.1.2669': attribute type 2 has an invalid length. [ 295.640268][T15357] __nla_validate_parse: 10 callbacks suppressed [ 295.640285][T15357] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2678'. [ 295.685049][T15357] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.719941][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2681'. [ 295.767967][T15357] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.833416][T15370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2683'. [ 295.843287][T15370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2683'. [ 295.873014][T15357] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.958160][T15379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2686'. [ 295.958432][T15357] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.085378][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.111297][T15388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2689'. [ 296.154409][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.178507][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.191215][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.487921][T15427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2700'. [ 296.841354][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2707'. [ 296.876010][T15450] tipc: Enabled bearer , priority 0 [ 296.893156][T15450] syzkaller0: entered promiscuous mode [ 296.902658][T15450] syzkaller0: entered allmulticast mode [ 296.988189][T15450] af_packet: tpacket_rcv: packet too big, clamped from 2906 to 4294967272. macoff=96 [ 297.069724][T15471] netlink: 'syz.0.2714': attribute type 39 has an invalid length. [ 297.085245][T15473] netlink: 'syz.3.2715': attribute type 10 has an invalid length. [ 297.229375][T15479] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 297.238859][T15478] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 297.250271][T15449] tipc: Resetting bearer [ 297.276096][T15449] tipc: Disabling bearer [ 297.609276][T15509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2726'. [ 297.629508][T15509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2726'. [ 297.650928][T15509] netlink: 'syz.2.2726': attribute type 6 has an invalid length. [ 297.806074][T15524] rdma_op ffff8880301f79f0 conn xmit_rdma 0000000000000000 [ 297.947372][T15534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.182892][T15555] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 298.538313][T15581] atomic_op ffff88802ec71998 conn xmit_atomic 0000000000000000 [ 298.793398][T15606] netlink: 'syz.1.2762': attribute type 23 has an invalid length. [ 299.587411][T15661] netlink: 'syz.4.2774': attribute type 1 has an invalid length. [ 299.778632][T15677] netlink: 'syz.2.2779': attribute type 4 has an invalid length. [ 300.129845][T15707] netlink: 'syz.3.2789': attribute type 1 has an invalid length. [ 300.223829][T15714] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.234979][T15708] bond8: (slave gretap2): making interface the new active one [ 300.243601][T15708] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 300.363108][T15721] netlink: 'syz.1.2792': attribute type 30 has an invalid length. [ 300.449738][T15723] tipc: Enabled bearer , priority 0 [ 300.461344][T15726] netlink: 'syz.3.2794': attribute type 1 has an invalid length. [ 300.472977][T15723] syzkaller0: entered promiscuous mode [ 300.481289][T15723] syzkaller0: entered allmulticast mode [ 300.501923][T15726] bond9: entered promiscuous mode [ 300.507475][T15726] 8021q: adding VLAN 0 to HW filter on device bond9 [ 300.523923][T15731] bond9: (slave bridge9): making interface the new active one [ 300.531424][T15731] bridge9: entered promiscuous mode [ 300.541074][T15731] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 300.564596][T15721] wlan0: mtu greater than device maximum [ 300.572483][T15720] tipc: Resetting bearer [ 300.615244][T15720] tipc: Disabling bearer [ 300.737903][T15742] __nla_validate_parse: 19 callbacks suppressed [ 300.737922][T15742] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2800'. [ 300.798213][T15742] netlink: 'syz.3.2800': attribute type 1 has an invalid length. [ 300.814738][T15742] netlink: 'syz.3.2800': attribute type 1 has an invalid length. [ 300.824584][T15742] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2800'. [ 300.833949][T15742] openvswitch: netlink: Flow actions attr not present in new flow. [ 301.223556][T15780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2808'. [ 301.371386][T15791] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2811'. [ 301.770305][T15809] netlink: 'syz.0.2814': attribute type 1 has an invalid length. [ 301.797488][T15809] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2814'. [ 301.818548][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2818'. [ 301.929819][T15826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2820'. [ 302.126623][T15835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2822'. [ 302.145017][T15834] v: renamed from vlan0 [ 302.286570][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2824'. [ 302.436883][T15851] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2826'. [ 302.791439][T15879] pim6reg1: entered promiscuous mode [ 302.804976][T15879] pim6reg1: entered allmulticast mode [ 303.071286][T15897] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 303.280089][T15925] validate_nla: 1 callbacks suppressed [ 303.280106][T15925] netlink: 'syz.3.2846': attribute type 1 has an invalid length. [ 303.383387][T15925] bond10: entered promiscuous mode [ 303.400561][T15925] 8021q: adding VLAN 0 to HW filter on device bond10 [ 303.451406][T15943] xt_hashlimit: size too large, truncated to 1048576 [ 303.585922][T15946] netlink: 'syz.4.2849': attribute type 24 has an invalid length. [ 304.011866][T15979] xt_l2tp: v2 doesn't support IP mode [ 304.369552][T15998] netlink: 'syz.4.2864': attribute type 58 has an invalid length. [ 304.446683][T16003] IPVS: Error connecting to the multicast addr [ 304.462105][T16010] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.560315][T16016] netlink: 'syz.3.2869': attribute type 10 has an invalid length. [ 304.561228][T16017] netlink: 'syz.3.2869': attribute type 10 has an invalid length. [ 304.604665][T16016] `: (slave geneve1): Enslaving as an active interface with an up link [ 304.613992][ T60] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.623184][ T60] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.663411][T16015] bond4: entered allmulticast mode [ 304.670026][T16015] 8021q: adding VLAN 0 to HW filter on device bond4 [ 304.678838][T16015] bridge0: port 3(bond4) entered blocking state [ 304.685984][T16015] bridge0: port 3(bond4) entered disabled state [ 304.702381][T16015] bond4: entered promiscuous mode [ 304.726554][T15971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.749226][ T60] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.765749][ T60] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.100819][T16045] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 305.150422][T16047] netlink: 'syz.2.2883': attribute type 4 has an invalid length. [ 305.992825][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.003410][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.011773][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.021061][T16090] __nla_validate_parse: 17 callbacks suppressed [ 306.021079][T16090] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2894'. [ 306.046435][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.056907][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.078775][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.093575][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.105147][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.113415][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.123335][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.252422][T16090] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 306.265154][T16090] bond0 (unregistering): Released all slaves [ 306.343325][ T1112] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.402932][ T1112] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.407634][T16108] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2899'. [ 306.446487][T16108] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2899'. [ 306.469585][T16105] bond0: (slave 0!): Releasing backup interface [ 306.479704][T16105] bridge_slave_0: left allmulticast mode [ 306.486179][T16105] bridge_slave_0: left promiscuous mode [ 306.492103][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2900'. [ 306.492210][T16105] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.502354][ T5908] syz_tun: tun_net_xmit 90 [ 306.516334][T16105] bridge_slave_1: left allmulticast mode [ 306.522066][T16105] bridge_slave_1: left promiscuous mode [ 306.528143][T16105] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.539500][T16105] bond0: (slave bond_slave_0): Releasing backup interface [ 306.549551][T16105] team0: Port device team_slave_0 removed [ 306.557585][T16105] team0: Port device team_slave_1 removed [ 306.563795][T16105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.572208][T16105] bond4: (slave gretap1): Releasing active interface [ 306.579935][T16105] gretap1: left allmulticast mode [ 306.587994][T16105] bond9: (slave geneve3): Releasing active interface [ 306.598905][T16105] bond11: (slave geneve4): Releasing active interface [ 306.611918][ T1112] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.688638][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.708125][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.725683][T16119] netlink: 'syz.4.2901': attribute type 11 has an invalid length. [ 306.730409][T16120] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2902'. [ 306.746925][ T1112] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.767139][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.783080][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.897578][T16132] netlink: 'syz.1.2904': attribute type 2 has an invalid length. [ 306.951800][T16132] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2904'. [ 307.002741][T16135] veth0: entered promiscuous mode [ 307.098864][T16141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2907'. [ 307.125618][ T5908] syz_tun: tun_net_xmit 90 [ 307.154070][T16134] veth0: left promiscuous mode [ 307.208465][T16086] chnl_net:caif_netlink_parms(): no params data found [ 307.278323][ T1112] bridge0: port 3(batadv0) entered disabled state [ 307.290768][ T1112] bridge_slave_1: left allmulticast mode [ 307.296997][ T1112] bridge_slave_1: left promiscuous mode [ 307.302898][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.315965][ T1112] bridge_slave_0: left allmulticast mode [ 307.332254][ T1112] bridge_slave_0: left promiscuous mode [ 307.345512][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.501055][ T1112] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 307.590694][T16169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2913'. [ 307.731211][ T1112] bond8 (unregistering): (slave gretap2): Releasing active interface [ 307.777992][ T1112] dvmrp6 (unregistering): left allmulticast mode [ 307.793406][ T1112] ` (unregistering): (slave geneve1): Releasing backup interface [ 307.843920][ T1112] ` (unregistering): (slave bridge0): Releasing backup interface [ 308.134037][ T5827] Bluetooth: hci4: command tx timeout [ 308.293890][ T1112] bond9 (unregistering): (slave bridge9): Releasing backup interface [ 308.302897][ T1112] bridge9 (unregistering): left promiscuous mode [ 308.476643][ T1112] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.486132][ T1112] ` (unregistering): (slave team0): Releasing backup interface [ 308.496553][ T1112] ` (unregistering): Released all slaves [ 308.509166][ T1112] bond0 (unregistering): Released all slaves [ 308.521410][ T1112] bond1 (unregistering): Released all slaves [ 308.536039][ T1112] bond2 (unregistering): Released all slaves [ 308.621511][ T1112] bond3 (unregistering): Released all slaves [ 308.700180][ T1112] bond4 (unregistering): Released all slaves [ 308.712367][ T1112] bond5 (unregistering): Released all slaves [ 308.725167][ T1112] bond6 (unregistering): Released all slaves [ 308.738614][ T1112] D (unregistering): Released all slaves [ 308.752916][ T1112] bond7 (unregistering): Released all slaves [ 308.773322][ T1112] bond8 (unregistering): Released all slaves [ 308.855002][ T1112] bond9 (unregistering): Released all slaves [ 308.930874][ T1112] bond10 (unregistering): Released all slaves [ 309.030886][T16184] netlink: 'syz.4.2915': attribute type 33 has an invalid length. [ 309.054232][T16184] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2915'. [ 309.169463][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2915'. [ 309.214076][ T1112] : left promiscuous mode [ 309.278706][T16193] netlink: 'syz.1.2916': attribute type 29 has an invalid length. [ 309.287746][T16191] netlink: 'syz.1.2916': attribute type 29 has an invalid length. [ 309.298753][T16086] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.306573][T16086] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.323920][T16086] bridge_slave_0: entered allmulticast mode [ 309.334784][T16086] bridge_slave_0: entered promiscuous mode [ 309.360220][T16191] netlink: 'syz.1.2916': attribute type 29 has an invalid length. [ 309.390863][ T1112] : left promiscuous mode [ 309.406995][T16196] netlink: 'syz.0.2917': attribute type 58 has an invalid length. [ 309.419751][T16086] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.429982][T16086] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.437997][T16086] bridge_slave_1: entered allmulticast mode [ 309.448546][T16086] bridge_slave_1: entered promiscuous mode [ 309.466576][T16191] netlink: 'syz.1.2916': attribute type 29 has an invalid length. [ 309.535465][ T1112] tipc: Disabling bearer [ 309.551631][ T1112] tipc: Left network mode [ 309.628570][T16211] netlink: 'syz.1.2922': attribute type 2 has an invalid length. [ 309.640147][T16086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.695453][T16086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.819274][T16086] team0: Port device team_slave_0 added [ 309.828122][T16086] team0: Port device team_slave_1 added [ 309.892744][T16086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.910669][T16086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.938757][T16086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.986650][T16086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.996130][T16086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.022998][T16086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.103146][ T1112] hsr_slave_0: left promiscuous mode [ 310.110822][ T1112] hsr_slave_1: left promiscuous mode [ 310.124865][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.138190][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.214165][ T5827] Bluetooth: hci4: command tx timeout [ 310.367763][T16257] netlink: 'syz.0.2933': attribute type 1 has an invalid length. [ 310.511903][T16265] xt_hashlimit: size too large, truncated to 1048576 [ 310.706890][T16273] xt_NFQUEUE: number of total queues is 0 [ 310.727881][T16273] xt_NFQUEUE: number of total queues is 0 [ 310.887147][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 310.923230][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 311.213597][T16246] team1: entered promiscuous mode [ 311.218824][T16246] team1: entered allmulticast mode [ 311.238874][T16257] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 311.465617][T16086] hsr_slave_0: entered promiscuous mode [ 311.491299][T16086] hsr_slave_1: entered promiscuous mode [ 311.571148][ T3512] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x75 [ 311.622172][T16290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.059093][T16323] __nla_validate_parse: 9 callbacks suppressed [ 312.059109][T16323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2947'. [ 312.070164][ T1112] IPVS: stop unused estimator thread 0... [ 312.076453][T16323] openvswitch: netlink: Message has 2712 unknown bytes. [ 312.220411][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2951'. [ 312.241526][T16337] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2950'. [ 312.257439][T16337] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2950'. [ 312.286807][ T1112] ------------[ cut here ]------------ [ 312.292331][ T1112] WARNING: CPU: 1 PID: 1112 at fs/proc/proc_sysctl.c:1558 retire_sysctl_set+0x48/0x60 [ 312.302232][ T1112] Modules linked in: [ 312.306506][ T1112] CPU: 1 UID: 0 PID: 1112 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 312.316426][ T1112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.317331][ T5827] Bluetooth: hci4: command tx timeout [ 312.327276][ T1112] Workqueue: netns cleanup_net [ 312.337139][ T1112] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 312.342897][ T1112] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 60 62 c6 ff 48 83 3b 00 75 0c e8 25 ad 60 ff 5b c3 cc cc cc cc cc e8 19 ad 60 ff 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 312.363042][ T1112] RSP: 0000:ffffc90003ecf8b0 EFLAGS: 00010293 [ 312.369247][ T1112] RAX: ffffffff825f5977 RBX: ffff888031fa2798 RCX: ffff8880266c0000 [ 312.377392][ T1112] RDX: 0000000000000000 RSI: ffffffff8d8f48bb RDI: ffff888031fa2738 [ 312.385847][ T1112] RBP: ffffc90003ecf990 R08: ffffffff8f7ce477 R09: 1ffffffff1ef9c8e [ 312.394016][ T1112] R10: dffffc0000000000 R11: ffffffff8b03c080 R12: ffffffff8f5cf4c0 [ 312.402001][ T1112] R13: 1ffff920007d9f3c R14: ffffffff8f5cf4a0 R15: ffff888031fa2528 [ 312.410057][ T1112] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 312.419303][ T1112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.425972][ T1112] CR2: 00007f37ec26942c CR3: 000000000dd38000 CR4: 00000000003526f0 [ 312.433992][ T1112] Call Trace: [ 312.437281][ T1112] [ 312.440218][ T1112] ops_undo_list+0x49a/0x990 [ 312.445153][ T1112] ? __pfx_ops_undo_list+0x10/0x10 [ 312.450293][ T1112] ? do_raw_spin_unlock+0x122/0x240 [ 312.455675][ T1112] cleanup_net+0x4d8/0x820 [ 312.460117][ T1112] ? __pfx_cleanup_net+0x10/0x10 [ 312.465135][ T1112] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.470350][ T1112] ? process_scheduled_works+0x9ef/0x17b0 [ 312.476394][ T1112] ? process_scheduled_works+0x9ef/0x17b0 [ 312.482136][ T1112] process_scheduled_works+0xae1/0x17b0 [ 312.487756][ T1112] ? __pfx_process_scheduled_works+0x10/0x10 [ 312.493814][ T1112] worker_thread+0x8a0/0xda0 [ 312.498414][ T1112] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 312.505051][ T1112] ? __kthread_parkme+0x7b/0x200 [ 312.510004][ T1112] kthread+0x711/0x8a0 [ 312.514093][ T1112] ? __pfx_worker_thread+0x10/0x10 [ 312.519207][ T1112] ? __pfx_kthread+0x10/0x10 [ 312.523866][ T1112] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.529072][ T1112] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.534620][ T1112] ? __pfx_kthread+0x10/0x10 [ 312.539230][ T1112] ret_from_fork+0x4bc/0x870 [ 312.543862][ T1112] ? __pfx_ret_from_fork+0x10/0x10 [ 312.549008][ T1112] ? __switch_to_asm+0x39/0x70 [ 312.553809][ T1112] ? __switch_to_asm+0x33/0x70 [ 312.558573][ T1112] ? __pfx_kthread+0x10/0x10 [ 312.563175][ T1112] ret_from_fork_asm+0x1a/0x30 [ 312.568208][ T1112] [ 312.571228][ T1112] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 312.578492][ T1112] CPU: 1 UID: 0 PID: 1112 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 312.587925][ T1112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.597963][ T1112] Workqueue: netns cleanup_net [ 312.602712][ T1112] Call Trace: [ 312.605972][ T1112] [ 312.608886][ T1112] dump_stack_lvl+0x99/0x250 [ 312.613471][ T1112] ? __asan_memcpy+0x40/0x70 [ 312.618057][ T1112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.623240][ T1112] ? __pfx__printk+0x10/0x10 [ 312.627819][ T1112] vpanic+0x237/0x6d0 [ 312.631785][ T1112] ? __pfx_vpanic+0x10/0x10 [ 312.636274][ T1112] panic+0xb9/0xc0 [ 312.639980][ T1112] ? __pfx_panic+0x10/0x10 [ 312.644403][ T1112] __warn+0x31b/0x4b0 [ 312.648385][ T1112] ? retire_sysctl_set+0x48/0x60 [ 312.653307][ T1112] ? retire_sysctl_set+0x48/0x60 [ 312.658229][ T1112] report_bug+0x2be/0x4f0 [ 312.662569][ T1112] ? retire_sysctl_set+0x48/0x60 [ 312.667497][ T1112] ? retire_sysctl_set+0x48/0x60 [ 312.672423][ T1112] ? retire_sysctl_set+0x4a/0x60 [ 312.677346][ T1112] handle_bug+0x84/0x160 [ 312.681581][ T1112] exc_invalid_op+0x1a/0x50 [ 312.686072][ T1112] asm_exc_invalid_op+0x1a/0x20 [ 312.690910][ T1112] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 312.696447][ T1112] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 60 62 c6 ff 48 83 3b 00 75 0c e8 25 ad 60 ff 5b c3 cc cc cc cc cc e8 19 ad 60 ff 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 312.716036][ T1112] RSP: 0000:ffffc90003ecf8b0 EFLAGS: 00010293 [ 312.722089][ T1112] RAX: ffffffff825f5977 RBX: ffff888031fa2798 RCX: ffff8880266c0000 [ 312.730041][ T1112] RDX: 0000000000000000 RSI: ffffffff8d8f48bb RDI: ffff888031fa2738 [ 312.738004][ T1112] RBP: ffffc90003ecf990 R08: ffffffff8f7ce477 R09: 1ffffffff1ef9c8e [ 312.745957][ T1112] R10: dffffc0000000000 R11: ffffffff8b03c080 R12: ffffffff8f5cf4c0 [ 312.753914][ T1112] R13: 1ffff920007d9f3c R14: ffffffff8f5cf4a0 R15: ffff888031fa2528 [ 312.761879][ T1112] ? __pfx_sysctl_net_exit+0x10/0x10 [ 312.767155][ T1112] ? retire_sysctl_set+0x47/0x60 [ 312.772084][ T1112] ops_undo_list+0x49a/0x990 [ 312.776680][ T1112] ? __pfx_ops_undo_list+0x10/0x10 [ 312.781776][ T1112] ? do_raw_spin_unlock+0x122/0x240 [ 312.786963][ T1112] cleanup_net+0x4d8/0x820 [ 312.791382][ T1112] ? __pfx_cleanup_net+0x10/0x10 [ 312.796318][ T1112] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.801511][ T1112] ? process_scheduled_works+0x9ef/0x17b0 [ 312.807217][ T1112] ? process_scheduled_works+0x9ef/0x17b0 [ 312.812924][ T1112] process_scheduled_works+0xae1/0x17b0 [ 312.818480][ T1112] ? __pfx_process_scheduled_works+0x10/0x10 [ 312.824458][ T1112] worker_thread+0x8a0/0xda0 [ 312.829036][ T1112] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 312.835356][ T1112] ? __kthread_parkme+0x7b/0x200 [ 312.840285][ T1112] kthread+0x711/0x8a0 [ 312.844342][ T1112] ? __pfx_worker_thread+0x10/0x10 [ 312.849435][ T1112] ? __pfx_kthread+0x10/0x10 [ 312.854015][ T1112] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.859200][ T1112] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.864384][ T1112] ? __pfx_kthread+0x10/0x10 [ 312.868960][ T1112] ret_from_fork+0x4bc/0x870 [ 312.873536][ T1112] ? __pfx_ret_from_fork+0x10/0x10 [ 312.878643][ T1112] ? __switch_to_asm+0x39/0x70 [ 312.883387][ T1112] ? __switch_to_asm+0x33/0x70 [ 312.888129][ T1112] ? __pfx_kthread+0x10/0x10 [ 312.892707][ T1112] ret_from_fork_asm+0x1a/0x30 [ 312.897463][ T1112] [ 312.900814][ T1112] Kernel Offset: disabled [ 312.905151][ T1112] Rebooting in 86400 seconds..