last executing test programs: 48.492902733s ago: executing program 3 (id=2361): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x40010, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x4010800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0fe1709850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r6, &(0x7f0000000040), 0x2) close(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1200000004000000080000000b000000000000006c383596da0505c64eb08e5287ac3ad4240bafe794e4da819f3666a2061b3c6150679fde45d74c7264aac6543cdc65fa0d5c4977b009898286ed3a77ecaacea78e0ea6ae8e175750e79e8e683e5805aa08dacecb9a0910673266eb35392c3a900796d4eae6a6b330a9c171e3fb9e6e1987ff0ad4ad910ee91676ac4de367e88927aab9c3bdff9f1d479dd7ec170b1028fe547cfa2058746ac4f5", @ANYBLOB="44e8accb8fae4f0a3d499d", @ANYRES32=r6, @ANYRES64, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="bd", 0xf4240}], 0x1}}], 0x1, 0x41) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff7, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x29}}]}, 0x28}}, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r8, 0x103, 0x1, &(0x7f0000000080)=0x7, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000002000000014001a"], 0x34}, 0x1, 0x0, 0x0, 0x4000009}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40970}, [@IFLA_LINKMODE={0x5, 0x11, 0x40}, @IFLA_PORT_SELF={0x4}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000041}, 0x24000854) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r11, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x4) 47.891512884s ago: executing program 3 (id=2366): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, 0x10000}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000000010c300000000000000008510"], &(0x7f00000002c0)='GPL\x00', 0xa, 0xec, &(0x7f00000017c0)=""/236, 0x0, 0x8}, 0x94) epoll_create1(0x80000) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e10540000086dd00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x20004004) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000e9"], 0xa4}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x14, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 47.212072436s ago: executing program 3 (id=2372): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, '\x00\x00t\x00', "f02b089d05e47611102742c4a4d5ae22", "cccc00", "0000000000001000"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, '\x00\x00t\x00', "f02b089d05e47611102742c4a4d5ae22", "cccc00", "0000000000001000"}, 0x28) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x1400, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x1400, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 46.848031379s ago: executing program 3 (id=2375): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000008000000000000000100000063010d000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc50c}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000000080)={0xffffffffffffffff, 0x18, [0x9, 0x200, 0xd92, 0x6d8], &(0x7f0000000040)=[0x0, 0x0, 0x0]}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 46.231969348s ago: executing program 3 (id=2379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x48}}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ffff00000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r7, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) pwritev(r5, &(0x7f0000001a00)=[{&(0x7f0000000600)="24ba8d4416efcb4768e949522f47331d4548861502149843b0606505ad3255eb63568e3c6147e90cc21f78d2323128c8d375102a2bcdb5cd78e7f3d6ff64da1b49a467badc8e4f6d699c789929cf02ca9c7165d13c7f7b8be98dcf5a0eb01a3df3e9bdfde437d11f4f599ad8bb03bf63efc4183d44de47eaf11ec43172db7ef524be9203ad39a624829527f8c30773b6", 0x90}], 0x1, 0x5e, 0xdc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x80}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r8, 0x0, 0x40801) 45.675627722s ago: executing program 3 (id=2383): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x59, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7af}, 0x48) 45.252021213s ago: executing program 32 (id=2383): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x59, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7af}, 0x48) 9.567909654s ago: executing program 0 (id=2684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r4 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0xc}, @void, @eth={@empty, @random="8bc6002500", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0x8, "d3"}}}}}}}, 0x19) 8.883861065s ago: executing program 0 (id=2687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d", 0x7a}], 0x1, 0x9) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r4, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) recvmmsg$unix(r3, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10142, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 7.724306898s ago: executing program 0 (id=2698): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x4}]}}]}, 0x38}}, 0x0) (async) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 7.412732585s ago: executing program 0 (id=2701): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000a80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}], 0x1, 0x8000) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000140)={0x10000010}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 6.186700261s ago: executing program 0 (id=2717): r0 = socket(0x29, 0x5, 0xfa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040801}, 0x48051) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x10000010}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, 0x4, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5707081196f37538e486dd6372ce22fd892f"], 0xffbf) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x1}, 0x6}) sendmmsg$inet(r0, &(0x7f0000008bc0)=[{{&(0x7f00000006c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}], 0x20}}, {{&(0x7f0000003440)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000005880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}], 0x18}}], 0x2, 0x0) 5.816027903s ago: executing program 0 (id=2723): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x40000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r2, 0x24}, 0x8) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) unshare(0x24020400) socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)=0x9) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket(0x10, 0x80002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x4980c3, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_emit_ethernet(0x116, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x20000883) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0x7, 0x2) 4.194984289s ago: executing program 2 (id=2743): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x397}]]}, 0x30}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@deltclass={0x24, 0x29, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0xc, 0xc}, {0xf, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) sendmmsg$inet(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="cb", 0x1}], 0x1}}], 0x1, 0x44004) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="10ed", 0x2}], 0x1, &(0x7f0000000780)=ANY=[], 0x10}}], 0x1, 0x4004804) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0xffffffe8, &(0x7f00000000c0)=[{&(0x7f0000000b40)=ANY=[@ANYRES32=r0], 0x18}], 0x1}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x5, 0x14e, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x397}]]}, 0x30}}, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@deltclass={0x24, 0x29, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0xc, 0xc}, {0xf, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="cb", 0x1}], 0x1}}], 0x1, 0x44004) (async) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="10ed", 0x2}], 0x1, &(0x7f0000000780)=ANY=[], 0x10}}], 0x1, 0x4004804) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0xffffffe8, &(0x7f00000000c0)=[{&(0x7f0000000b40)=ANY=[@ANYRES32=r0], 0x18}], 0x1}, 0x20000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x5, 0x14e, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) 3.983418985s ago: executing program 2 (id=2744): unshare(0x68040200) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (rerun: 32) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet6(0xa, 0x3, 0x8) (async) unshare(0x80080) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) 3.927311695s ago: executing program 4 (id=2745): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000150001002dbd7000fddbdf250a8000ff", @ANYRES32=0x0, @ANYBLOB="14000100fe80000000000000ac3a44dbb9b43db0085a356d1a69000000000000001014000200"/54], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 3.699178419s ago: executing program 4 (id=2746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x844) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$can_bcm(r1, 0x0, 0xffffffffffffffce) (async) connect$can_bcm(r1, 0x0, 0xffffffffffffffce) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x14, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT], &(0x7f0000000300)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000006637cf2c00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00fcffffbf00"/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000006637cf2c00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00fcffffbf00"/28], 0x48) r7 = openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000080)=0x6, 0x12) (async) write$cgroup_int(r7, &(0x7f0000000080)=0x6, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='9p_client_req\x00', r4}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bridge0\x00'}) 3.317493804s ago: executing program 4 (id=2748): socket$nl_netfilter(0x10, 0x3, 0xc) 3.265194494s ago: executing program 5 (id=2749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x3, 0x7fffffffffffffff, 0x400}) 3.137766231s ago: executing program 4 (id=2750): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000051000200000000000800a001801000020646c2500000000002020207b1af8ff00000000bfa1000000000000070100008c94e7f8ffffffb702000008000000b7030000ae00000085630000c8000000950000000000000070abed8b228d5275a2e64b78f38644a4f92c58736f99"], &(0x7f00000005c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0xa}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101200, 0x0) unshare(0x2040400) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000047c0)=r6, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x48010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010528bd7000fddbdf251a0000001400220000000080040000800400008004000080070021"], 0x30}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="34a9293d", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf251800000018003080140001800800010002000000080004000600000008000300", @ANYRES32=r9, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x40084) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40018400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000021}, 0x4000) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r11 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r13, 0x0, 0x3, &(0x7f0000000200)=0x112, 0x4) sendmsg$NL80211_CMD_GET_SCAN(r11, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r10, @ANYBLOB="050000030000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x0, 0x56}, 0x28) 3.127084432s ago: executing program 5 (id=2751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffe, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 2.509919509s ago: executing program 1 (id=2752): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000080008400000fbf80d0018800800014000"], 0xb8}}, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x400, 0x9, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0xfffffffffffffed9, &(0x7f0000000180)={&(0x7f0000000240)=@delqdisc={0xb0, 0x25, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc2, 0x4, 0x9, 0xe, 0x1, 0xedb, 0x2, 0x4}}, {0xc, 0x2, [0x0, 0x1, 0x4, 0x400]}}, {{0x1c, 0x1, {0x8, 0x6, 0x4261, 0x5, 0x1, 0x7d9c, 0x6, 0x9}}, {0x16, 0x2, [0x3, 0x7065, 0x2, 0x1, 0x2, 0x1, 0x80, 0x5, 0x4]}}, {{0x1c, 0x1, {0x3, 0x5, 0x1, 0xbfe, 0x1, 0xffffffff, 0x400, 0x6}}, {0x10, 0x2, [0x1000, 0x0, 0xb27, 0x2af, 0x336, 0x3]}}]}]}, 0xb0}}, 0x404c044) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f0000000340)) recvmmsg$unix(r4, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f000000e280)=""/4096, 0x1000}, {&(0x7f0000000680)=""/141, 0x8d}], 0x4, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000800), 0x6e, &(0x7f000000f480)=[{&(0x7f000000f280)=""/178, 0xb2}, {&(0x7f000000f340)=""/162, 0xa2}, {&(0x7f000000f400)=""/72, 0x48}], 0x3, &(0x7f000000f4c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f000000f540), 0x6e, &(0x7f0000012a00)=[{&(0x7f000000f5c0)=""/186, 0xba}, {&(0x7f000000f680)=""/238, 0xee}, {&(0x7f000000f780)=""/4096, 0x1000}, {&(0x7f0000010780)=""/121, 0x79}, {&(0x7f0000010800)}, {&(0x7f0000010840)=""/4096, 0x1000}, {&(0x7f0000011840)=""/194, 0xc2}, {&(0x7f0000011940)=""/4096, 0x1000}, {&(0x7f0000012940)=""/176, 0xb0}], 0x9, &(0x7f0000012ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x3, 0x60, &(0x7f0000012c40)={0x0, 0x989680}) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f00000003c0)={0x0, @default, @rose={'rose', 0x0}, 0x9, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xd2, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000200000000000020"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x9, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) 2.399829668s ago: executing program 1 (id=2753): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r0, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dd60f900f500180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60afe676d8ee6b3a56250000"], 0x0) r3 = socket(0x2, 0x3, 0xff) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000018e65524aeb62eb"], 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0xfffffffffffffff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500082c"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) (async) sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000a0000009000000000000000002000100000004d60000000200001100030005000020000002004e1d7f000001"], 0x50}}, 0x0) (async) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x1413, 0x1}, 0x10}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000006c0)={0x68, r8, 0x300, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @val={0x0, 0x99, {0x4, 0x69}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options]}, 0xfdca}}, 0x40048a4) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r6, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x880) 2.396793618s ago: executing program 1 (id=2754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'bond_slave_1\x00', 0xc201}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x4e22, @broadcast}}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="dc00", @ANYRES8=r3, @ANYBLOB="010000000000000000000c0000000800060040020000080005000000006f"], 0x2c}}, 0x810) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x5460, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4000010) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r5, 0x701, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000a652000000000000000600000095009ef45a930000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_exit\x00', r6}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000002d3abcea5b38b3916af656cf000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 952.387705ms ago: executing program 4 (id=2755): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1, 0xfff}, 0x8) 878.233534ms ago: executing program 5 (id=2756): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2b, 0x7f, 0xe, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x40, 0x7, 0x9, 0xc}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000700)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e099c8718cd7c81a759ec5d541757c", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 772.143272ms ago: executing program 1 (id=2757): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@nl=@unspec, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/190}], 0x0, &(0x7f0000000140)=""/21}, 0x3}], 0x40000000000022b, 0x45833af92e4bbbfe, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x20, 0x24, 0x301, 0x70bd2b, 0xfffffffc, {0x1}, [@nested={0xc, 0xcc, 0x0, 0x1, [@typed={0x8, 0xe4, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 766.060287ms ago: executing program 4 (id=2758): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000a80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}], 0x1, 0x8000) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000140)={0x10000010}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 737.712194ms ago: executing program 2 (id=2759): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000700000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) sendto$inet6(r2, &(0x7f0000001300)="14", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000540)=0x1, 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r5, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) r6 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) close(0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r7, 0xfffffffd}, 0x8) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r9, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c, r8, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYRES32=r8], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x12) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r10 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r10, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4004000) socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000002000003f851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002007fffffff180000000000000000000000000000009500040000000000360a020000001000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 663.954973ms ago: executing program 5 (id=2760): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000606bbeeb7e6ee70515e18d0000000000010000000000001f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x800000, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000}, [@RTA_SRC={0x8, 0x2, @broadcast}]}, 0x24}}, 0xea5bc50b6199d77e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0xe722e18}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async) syz_init_net_socket$x25(0x9, 0x2, 0x10) (async) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async) socket$alg(0x26, 0x5, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x89b1, &(0x7f0000000040)={'syz_tun\x00', 0xfffffffe}) (async) r7 = accept4(r5, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10) (async) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r8], 0x1c}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) unshare(0x0) (async) shutdown(r3, 0x1) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000c30afeff4100000018120000", @ANYRES32=r0, @ANYBLOB="0000000000eeffffb603000000000000850000000c000000b7000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 540.154705ms ago: executing program 2 (id=2761): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x29, 0x9, 0xbc, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x10, 0x0, 0xe7, 0x2}}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000640)=@newqdisc={0x80, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0x2}, {0xe, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x100000, 0x100000, 0xfffffffd, 0x1, 0x5, 0xf}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x5, 0x0, 0x4e71, 0x2b4, 0x5}}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) 501.461689ms ago: executing program 1 (id=2762): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='module_request\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 439.143508ms ago: executing program 5 (id=2763): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f24c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x101, 0xe17, 0x4}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 197.561317ms ago: executing program 5 (id=2764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) (async) unshare(0x62040200) socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "7a07fc564df4d25f510b20859fa0548773"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x1880}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "7a07fc564df4d25f510b20859fa0548773"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x1880}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) (async) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x840000000002, 0x3, 0xfa) (async) r8 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) getsockname$packet(r8, 0x0, 0x0) (async) getsockname$packet(r8, 0x0, 0x0) connect$rose(r8, 0x0, 0x0) recvfrom$ax25(r8, &(0x7f0000000180)=""/3, 0x3, 0x10021, &(0x7f0000000440)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) recvfrom$ax25(r8, &(0x7f0000000180)=""/3, 0x3, 0x10021, &(0x7f0000000440)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r9 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) 188.848848ms ago: executing program 2 (id=2765): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c00000000010104000000000000000002000000240001801400018008000100e000000208000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000020c000280050001000000ffff080007400000000028000d8008000200ffffffff14000380060001"], 0x8c}}, 0x0) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x18, r2, 0x201, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x18}}, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0xc) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r4) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r5, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb79}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) 7.994665ms ago: executing program 2 (id=2766): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180700000000000000000000000000007110be000000000095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, 0x0}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff03076844babeb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_PREFSRC={0x8, 0x7, @local}]}, 0x2c}}, 0x0) 0s ago: executing program 1 (id=2767): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, &(0x7f0000000100)) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in=@local, 0xfffd, 0x1, 0x0, 0x0, 0xa}, {0x2, 0xfffffbfffffffffc, 0x3, 0x0, 0x0, 0x4, 0x1}, {0x40000000020, 0x40000000, 0xfffffffffffffffd, 0xff}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x32}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3503, 0x0, 0x3, 0x0, 0xfff}}, 0xe8) close(r1) (async) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x8, 0x4) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00'}, 0x94) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r4, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x33, 0x1, 0x102e2f, 0xfffffffe, 0x0, 0x0, 0x7, 0x9, 0x441}}) kernel console output (not intermixed with test programs): ibutes in process `syz.3.1209'. [ 278.632702][T10589] netlink: 'syz.3.1213': attribute type 1 has an invalid length. [ 278.692249][T10589] bond6: entered promiscuous mode [ 278.698255][T10589] 8021q: adding VLAN 0 to HW filter on device bond6 [ 278.754948][T10594] 8021q: adding VLAN 0 to HW filter on device bond7 [ 278.764182][T10594] bond6: (slave bond7): making interface the new active one [ 278.771963][T10594] bond7: entered promiscuous mode [ 278.778498][T10594] bond6: (slave bond7): Enslaving as an active interface with an up link [ 278.866380][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1216'. [ 278.892817][T10605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 279.053738][T10613] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1219'. [ 279.143057][T10613] lo speed is unknown, defaulting to 1000 [ 279.619837][T10632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1223'. [ 279.651093][T10618] netlink: 'syz.2.1219': attribute type 6 has an invalid length. [ 279.675777][T10632] netlink: 'syz.1.1223': attribute type 29 has an invalid length. [ 279.694568][T10632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1223'. [ 279.705127][T10634] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 279.721033][T10634] netlink: 'syz.3.1224': attribute type 4 has an invalid length. [ 279.815895][T10644] openvswitch: netlink: IP tunnel dst address not specified [ 279.829810][ T6335] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 279.851237][ T6335] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 279.875940][ T6335] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 279.904593][ T6335] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 279.993375][T10654] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1229'. [ 280.069390][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1229'. [ 280.515880][T10686] tipc: Started in network mode [ 280.523721][T10686] tipc: Node identity ac14140f, cluster identity 4711 [ 280.534770][T10686] tipc: New replicast peer: 255.255.255.255 [ 280.547197][T10686] tipc: Enabled bearer , priority 10 [ 280.665351][T10687] lo speed is unknown, defaulting to 1000 [ 280.819507][T10701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1240'. [ 280.962722][T10704] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1241'. [ 281.022909][T10704] batadv1: entered promiscuous mode [ 281.057224][T10704] batadv1: entered allmulticast mode [ 281.429441][T10731] netlink: 'syz.1.1248': attribute type 5 has an invalid length. [ 281.471862][T10735] nbd: illegal input index 532742144 [ 281.687167][ T7475] tipc: Node number set to 2886997007 [ 282.036125][T10725] geneve2: entered promiscuous mode [ 282.044789][T10725] geneve2: entered allmulticast mode [ 282.073975][T10759] bridge0: entered promiscuous mode [ 282.101362][T10759] bridge0: left promiscuous mode [ 282.153721][T10760] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 282.171151][ T754] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.194534][ T754] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.218276][ T754] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 282.228383][ T754] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.236936][ T754] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.245564][ T754] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 282.261773][ T754] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.278512][ T754] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.296989][ T754] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 282.309657][ T754] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.326385][ T754] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.339348][ T754] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 282.476242][T10782] bridge0: port 3(hsr_slave_0) entered blocking state [ 282.494301][T10782] bridge0: port 3(hsr_slave_0) entered disabled state [ 282.507894][T10782] hsr_slave_0: entered allmulticast mode [ 282.516145][T10782] hsr_slave_0: left allmulticast mode [ 282.885609][T10811] netlink: 'syz.3.1264': attribute type 10 has an invalid length. [ 282.899232][T10811] dummy0: entered promiscuous mode [ 282.905339][T10811] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 283.059281][T10819] netlink: 'syz.2.1270': attribute type 2 has an invalid length. [ 283.371342][T10830] lo speed is unknown, defaulting to 1000 [ 283.489557][T10835] openvswitch: netlink: ct_state flags 7fffffff unsupported [ 283.686587][T10839] __nla_validate_parse: 8 callbacks suppressed [ 283.686608][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'. [ 283.911136][T10849] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1278'. [ 283.962716][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1278'. [ 284.171791][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'. [ 284.312283][T10859] batman_adv: batadv0: Adding interface: vxlan0 [ 284.324877][T10859] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.417415][T10859] batman_adv: batadv0: Interface activated: vxlan0 [ 284.448736][ T6340] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.481025][ T6340] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.520834][ T6340] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.544233][ T6340] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.853499][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1289'. [ 284.887816][T10882] netlink: 'syz.1.1289': attribute type 1 has an invalid length. [ 285.415662][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1300'. [ 285.485752][T10919] erspan0: entered promiscuous mode [ 285.499924][T10919] erspan0: left promiscuous mode [ 285.542267][T10922] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 285.550122][T10922] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 285.581828][T10914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1298'. [ 285.591060][T10914] tipc: Enabling of bearer rejected, failed to enable media [ 285.617548][T10921] lo speed is unknown, defaulting to 1000 [ 285.951894][T10945] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20004 [ 286.104967][T10939] lo speed is unknown, defaulting to 1000 [ 286.292423][T10955] nbd: must specify at least one socket [ 286.789453][T10978] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1313'. [ 286.816817][T10976] tipc: Enabled bearer , priority 0 [ 286.826239][T10959] infiniband syz0: set down [ 286.840876][T10959] infiniband syz0: added veth1_to_hsr [ 286.860901][T10959] syz0: rxe_create_cq: returned err = -12 [ 286.885136][T10976] syzkaller0: entered promiscuous mode [ 286.901234][T10959] infiniband syz0: Couldn't create ib_mad CQ [ 286.908201][T10959] infiniband syz0: Couldn't open port 1 [ 286.909012][T10976] syzkaller0: entered allmulticast mode [ 286.944784][T10991] netlink: 'syz.4.1315': attribute type 13 has an invalid length. [ 287.011136][T10959] RDS/IB: syz0: added [ 287.025540][T10959] smc: adding ib device syz0 with port count 1 [ 287.034546][T10959] smc: ib device syz0 port 1 has no pnetid [ 287.244553][T11003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1318'. [ 287.839854][T10991] batman_adv: batadv0: Interface deactivated: vxlan0 [ 287.871258][T10979] tipc: Resetting bearer [ 287.886223][T10975] tipc: Resetting bearer [ 287.913117][T10975] tipc: Disabling bearer [ 287.936562][ T6323] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.945787][ T6323] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.960649][ T6323] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.978620][ T6323] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.004613][T11012] lo speed is unknown, defaulting to 1000 [ 288.014651][ T6323] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.053388][ T6323] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.080762][ T6323] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.096745][ T6323] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.292212][T11023] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.567317][T11046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1331'. [ 289.623203][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1332'. [ 289.644660][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1332'. [ 289.730684][T11050] batman_adv: batadv0: Adding interface: ip6gretap1 [ 289.748766][T11050] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.784056][T11050] batman_adv: batadv0: Interface activated: ip6gretap1 [ 290.370319][T11074] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1337'. [ 290.423452][T11083] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1341'. [ 290.585101][T11089] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1342'. [ 290.712524][T11089] veth39: entered promiscuous mode [ 290.923950][T11095] netlink: 'syz.4.1346': attribute type 1 has an invalid length. [ 291.221250][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'. [ 291.262345][T11110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'. [ 291.648244][T11124] pim6reg1: entered promiscuous mode [ 291.653603][T11124] pim6reg1: entered allmulticast mode [ 291.673554][T11127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1353'. [ 292.338868][T11157] netlink: 'syz.0.1360': attribute type 1 has an invalid length. [ 292.347073][T11157] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1360'. [ 292.392925][T11168] netlink: 'syz.2.1361': attribute type 1 has an invalid length. [ 292.471255][T11171] bond4: entered promiscuous mode [ 292.477947][T11171] bond4: entered allmulticast mode [ 292.483670][T11171] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.723146][T11180] bond5 (unregistering): Released all slaves [ 292.801396][T11190] bond_slave_0: entered allmulticast mode [ 293.109743][T11206] netlink: 'syz.3.1369': attribute type 4 has an invalid length. [ 293.397998][T11218] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 294.117597][T11262] bond5 (unregistering): Released all slaves [ 294.374666][T11284] netlink: 'syz.1.1388': attribute type 1 has an invalid length. [ 294.411681][T11284] netlink: 'syz.1.1388': attribute type 12 has an invalid length. [ 294.750762][T11304] __nla_validate_parse: 9 callbacks suppressed [ 294.750783][T11304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1392'. [ 294.781222][T11304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1392'. [ 294.811467][T11309] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.1392'. [ 294.830301][T11309] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.1392'. [ 295.074439][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'. [ 295.129161][T11318] netlink: 'syz.3.1395': attribute type 1 has an invalid length. [ 295.146845][T11318] netlink: 'syz.3.1395': attribute type 2 has an invalid length. [ 295.159450][T11318] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.1395'. [ 295.406891][ T5869] Bluetooth: hci3: command 0x0406 tx timeout [ 295.849780][T11337] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 295.927297][T11339] gretap1: entered allmulticast mode [ 296.060263][T11349] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1404'. [ 296.142612][T11337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1400'. [ 296.172560][T11350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.182535][T11352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1405'. [ 296.202732][T11337] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1400'. [ 296.224581][T11350] batadv_slave_0: entered promiscuous mode [ 296.352417][T11359] tipc: Enabled bearer , priority 0 [ 296.394673][T11365] IPVS: set_ctl: invalid protocol: 1410 128.3.15.131:561 [ 296.481713][T11359] tipc: Disabling bearer [ 296.580496][T11378] tipc: Enabled bearer , priority 0 [ 296.588454][T11378] syzkaller0: entered promiscuous mode [ 296.593970][T11378] syzkaller0: entered allmulticast mode [ 296.605194][T11378] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 296.684975][T11378] tipc: Resetting bearer [ 296.710256][T11375] tipc: Resetting bearer [ 296.792743][T11375] tipc: Disabling bearer [ 296.928687][T11391] bond5: entered promiscuous mode [ 296.934353][T11391] 8021q: adding VLAN 0 to HW filter on device bond5 [ 297.127156][T11406] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 297.133342][T11406] syzkaller1: linktype set to 6 [ 297.423257][T11429] netlink: 'syz.1.1426': attribute type 1 has an invalid length. [ 297.613939][T11437] netlink: 'syz.2.1428': attribute type 10 has an invalid length. [ 297.672158][T11437] team0: Port device dummy0 added [ 297.672408][T11443] netlink: 'syz.2.1428': attribute type 10 has an invalid length. [ 297.711437][T11444] gretap0: entered promiscuous mode [ 297.734813][T11444] gretap0: left promiscuous mode [ 297.794253][T11443] team0: Port device dummy0 removed [ 297.805828][T11443] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 297.980212][T11460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.014949][T11458] netlink: 'syz.3.1436': attribute type 21 has an invalid length. [ 298.043394][T11465] netlink: 'syz.0.1437': attribute type 19 has an invalid length. [ 298.046121][T11458] netlink: 'syz.3.1436': attribute type 5 has an invalid length. [ 298.478830][T11498] syzkaller0: create flow: hash 3189485236 index 1 [ 298.485683][T11494] tipc: Enabling of bearer rejected, already enabled [ 298.507605][T11485] lo speed is unknown, defaulting to 1000 [ 298.628730][T11488] syzkaller0: delete flow: hash 3189485236 index 1 [ 298.973042][T11510] netlink: 'syz.2.1447': attribute type 1 has an invalid length. [ 300.196260][T11486] lo speed is unknown, defaulting to 1000 [ 300.215710][T11508] __nla_validate_parse: 10 callbacks suppressed [ 300.215732][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 300.423025][T11517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1448'. [ 300.541705][T11520] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1451'. [ 300.570833][T11523] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1451'. [ 300.596371][T11520] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1451'. [ 300.818618][T11534] lo speed is unknown, defaulting to 1000 [ 301.289229][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'. [ 301.432131][T11544] syzkaller1: entered promiscuous mode [ 301.448518][T11544] syzkaller1: entered allmulticast mode [ 301.511960][T11548] bridge0 (unregistering): left allmulticast mode [ 301.627565][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1458'. [ 301.745512][T11560] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1459'. [ 301.973809][T11562] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1460'. [ 302.272666][T11562] nbd: socks must be embedded in a SOCK_ITEM attr [ 303.020681][T11597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1468'. [ 303.262366][T11603] netlink: 'syz.4.1470': attribute type 1 has an invalid length. [ 303.394472][T11608] syzkaller1: entered promiscuous mode [ 303.413151][T11608] syzkaller1: entered allmulticast mode [ 303.498519][T11615] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 303.664646][T11624] netlink: 'syz.3.1475': attribute type 6 has an invalid length. [ 303.675002][T11624] netlink: 'syz.3.1475': attribute type 6 has an invalid length. [ 303.704134][T11624] openvswitch: netlink: Missing valid actions attribute. [ 303.725456][T11624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.045822][T11638] netlink: 'syz.4.1479': attribute type 13 has an invalid length. [ 304.059684][T11638] netlink: 'syz.4.1479': attribute type 17 has an invalid length. [ 304.272599][T11600] syz.1.1469: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 304.276075][T11638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.297652][T11600] CPU: 0 UID: 0 PID: 11600 Comm: syz.1.1469 Not tainted syzkaller #0 PREEMPT(full) [ 304.297679][T11600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.297689][T11600] Call Trace: [ 304.297697][T11600] [ 304.297705][T11600] dump_stack_lvl+0x189/0x250 [ 304.297735][T11600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.297763][T11600] ? __pfx__printk+0x10/0x10 [ 304.297787][T11600] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 304.297808][T11600] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 304.297830][T11600] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 304.297852][T11600] warn_alloc+0x214/0x310 [ 304.297884][T11600] ? __pfx_warn_alloc+0x10/0x10 [ 304.297918][T11600] ? __get_vm_area_node+0x28f/0x300 [ 304.297942][T11600] ? hash_netport4_resize+0x235/0x1b60 [ 304.297967][T11600] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 304.298023][T11600] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 304.298054][T11600] ? rcu_is_watching+0x15/0xb0 [ 304.298073][T11600] ? hash_netport4_resize+0x235/0x1b60 [ 304.298091][T11600] ? hash_netport4_resize+0x235/0x1b60 [ 304.298108][T11600] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 304.298131][T11600] ? hash_netport4_resize+0x235/0x1b60 [ 304.298159][T11600] hash_netport4_resize+0x235/0x1b60 [ 304.298178][T11600] ? hash_netport4_uadt+0xc97/0xf30 [ 304.298204][T11600] ? __pfx_hash_netport4_add+0x10/0x10 [ 304.298224][T11600] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 304.298254][T11600] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 304.298285][T11600] call_ad+0x44b/0xb00 [ 304.298319][T11600] ? __pfx_call_ad+0x10/0x10 [ 304.298359][T11600] ? __nla_parse+0x40/0x60 [ 304.298380][T11600] ip_set_ad+0x791/0x930 [ 304.298414][T11600] ? __pfx_ip_set_ad+0x10/0x10 [ 304.298481][T11600] nfnetlink_rcv_msg+0xb4a/0x1130 [ 304.298506][T11600] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 304.298550][T11600] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 304.298571][T11600] ? kasan_save_free_info+0x46/0x50 [ 304.298658][T11600] netlink_rcv_skb+0x208/0x470 [ 304.298681][T11600] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 304.298711][T11600] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 304.298743][T11600] ? bpf_lsm_capable+0x9/0x20 [ 304.298775][T11600] ? security_capable+0x7e/0x2e0 [ 304.298811][T11600] nfnetlink_rcv+0x26a/0x2520 [ 304.298840][T11600] ? __dev_queue_xmit+0x1d79/0x3b50 [ 304.298873][T11600] ? __dev_queue_xmit+0x27b/0x3b50 [ 304.298908][T11600] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 304.298931][T11600] ? __pfx___dev_queue_xmit+0x10/0x10 [ 304.298967][T11600] ? ref_tracker_free+0x63a/0x7d0 [ 304.298991][T11600] ? __asan_memcpy+0x40/0x70 [ 304.299010][T11600] ? __pfx_ref_tracker_free+0x10/0x10 [ 304.299050][T11600] ? skb_clone+0x246/0x3a0 [ 304.299075][T11600] ? __netlink_deliver_tap+0x807/0x850 [ 304.299092][T11600] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.299117][T11600] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.299143][T11600] netlink_unicast+0x82f/0x9e0 [ 304.299178][T11600] ? __pfx_netlink_unicast+0x10/0x10 [ 304.299204][T11600] ? netlink_sendmsg+0x642/0xb30 [ 304.299219][T11600] ? skb_put+0x11b/0x210 [ 304.299241][T11600] netlink_sendmsg+0x805/0xb30 [ 304.299269][T11600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.299291][T11600] ? aa_sock_msg_perm+0xf1/0x1d0 [ 304.299311][T11600] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.299328][T11600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.299347][T11600] __sock_sendmsg+0x21c/0x270 [ 304.299375][T11600] ____sys_sendmsg+0x505/0x830 [ 304.299401][T11600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.299432][T11600] ? import_iovec+0x74/0xa0 [ 304.299456][T11600] ___sys_sendmsg+0x21f/0x2a0 [ 304.299478][T11600] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.299539][T11600] ? __fget_files+0x2a/0x420 [ 304.299553][T11600] ? __fget_files+0x3a0/0x420 [ 304.299580][T11600] __x64_sys_sendmsg+0x19b/0x260 [ 304.299604][T11600] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.299635][T11600] ? rcu_is_watching+0x15/0xb0 [ 304.299658][T11600] ? do_syscall_64+0xbe/0x3b0 [ 304.299681][T11600] do_syscall_64+0xfa/0x3b0 [ 304.299698][T11600] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.299715][T11600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.299731][T11600] ? clear_bhb_loop+0x60/0xb0 [ 304.299752][T11600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.299774][T11600] RIP: 0033:0x7f2d5618ebe9 [ 304.299791][T11600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.299805][T11600] RSP: 002b:00007f2d56f5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.299824][T11600] RAX: ffffffffffffffda RBX: 00007f2d563c6090 RCX: 00007f2d5618ebe9 [ 304.299837][T11600] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 304.299847][T11600] RBP: 00007f2d56211e19 R08: 0000000000000000 R09: 0000000000000000 [ 304.299858][T11600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.299868][T11600] R13: 00007f2d563c6128 R14: 00007f2d563c6090 R15: 00007fff514ad838 [ 304.299899][T11600] [ 304.299905][T11600] Mem-Info: [ 304.325748][T11638] team0: left promiscuous mode [ 304.330082][T11600] active_anon:3704 inactive_anon:0 isolated_anon:0 [ 304.330082][T11600] active_file:3335 inactive_file:39926 isolated_file:0 [ 304.330082][T11600] unevictable:768 dirty:178 writeback:0 [ 304.330082][T11600] slab_reclaimable:12203 slab_unreclaimable:176646 [ 304.330082][T11600] mapped:31143 shmem:1365 pagetables:924 [ 304.330082][T11600] sec_pagetables:0 bounce:0 [ 304.330082][T11600] kernel_misc_reclaimable:0 [ 304.330082][T11600] free:1245529 free_pcp:14028 free_cma:0 [ 304.345794][T11638] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.347586][T11600] Node 0 active_anon:14816kB inactive_anon:0kB active_file:13340kB inactive_file:159500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124572kB dirty:712kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13372kB pagetables:3568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 304.420616][T11600] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 304.604457][T11650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.618870][T11600] Node 0 [ 304.676443][T11600] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.684732][T11600] lowmem_reserve[]: 0 [ 304.703085][T11638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.705949][T11600] 2497 [ 304.907922][T11638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.920237][T11600] 2499 2499 2499 [ 304.920275][T11600] Node 0 DMA32 free:1070800kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14764kB inactive_anon:0kB active_file:13340kB inactive_file:157936kB unevictable:1536kB writepending:712kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:36012kB local_pcp:20760kB free_cma:0kB [ 304.920337][T11600] lowmem_reserve[]: 0 0 1 1 1 [ 304.920384][T11600] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 305.054652][T11600] lowmem_reserve[]: 0 0 0 0 0 [ 305.059805][T11600] Node 1 Normal free:3895644kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19352kB local_pcp:10904kB free_cma:0kB [ 305.091901][T11600] lowmem_reserve[]: 0 0 0 0 0 [ 305.096892][T11600] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 305.116844][T11642] lo speed is unknown, defaulting to 1000 [ 305.123324][T11600] Node 0 DMA32: 462*4kB (UME) 40*8kB (UM) 329*16kB (UM) 1072*32kB (UME) 309*64kB (UM) 67*128kB (UME) 31*256kB (UME) 15*512kB (UME) 4*1024kB (UM) 3*2048kB (UME) 238*4096kB (M) = 1070792kB [ 305.138958][T11647] lo speed is unknown, defaulting to 1000 [ 305.189583][T11600] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 305.224393][T11600] Node 1 Normal: 187*4kB (UME) 42*8kB (UME) 38*16kB (UME) 92*32kB (UME) 31*64kB (UME) 7*128kB (UME) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3895644kB [ 305.275149][T11600] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 305.300411][T11600] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 305.330173][T11600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 305.351765][T11600] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 305.376155][T11600] 44623 total pagecache pages [ 305.386288][T11666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 305.394662][T11600] 0 pages in swap cache [ 305.403017][T11600] Free swap = 124996kB [ 305.409924][T11600] Total swap = 124996kB [ 305.414107][T11600] 2097051 pages RAM [ 305.421950][T11670] tipc: Enabled bearer , priority 0 [ 305.430474][T11600] 0 pages HighMem/MovableOnly [ 305.436444][T11670] syzkaller0: entered promiscuous mode [ 305.444938][T11600] 425673 pages reserved [ 305.451459][T11600] 0 pages cma reserved [ 305.455633][T11670] syzkaller0: entered allmulticast mode [ 305.509490][T11670] tipc: Resetting bearer [ 305.521977][T11670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1486'. [ 305.550258][T11674] syzkaller1: entered promiscuous mode [ 305.555797][T11674] syzkaller1: entered allmulticast mode [ 305.561145][T11670] netlink: 'syz.3.1486': attribute type 7 has an invalid length. [ 305.573849][T11670] netlink: 'syz.3.1486': attribute type 8 has an invalid length. [ 305.590056][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1486'. [ 305.650144][T11670] gretap0: entered promiscuous mode [ 305.657166][T11670] batadv_slave_1: entered promiscuous mode [ 305.664025][T11670] erspan0: entered promiscuous mode [ 305.671633][T11670] hsr2: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 305.683143][T11670] hsr2: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.694867][T11670] hsr2: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 305.732952][T11669] tipc: Resetting bearer [ 305.766296][T11669] tipc: Disabling bearer [ 305.781113][T11680] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1489'. [ 305.826418][T11682] netlink: 'syz.0.1490': attribute type 21 has an invalid length. [ 305.834857][T11682] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1490'. [ 305.855262][T11682] netlink: 'syz.0.1490': attribute type 4 has an invalid length. [ 305.874303][T11682] netlink: 'syz.0.1490': attribute type 3 has an invalid length. [ 305.883908][T11682] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1490'. [ 306.036595][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1492'. [ 306.089205][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1492'. [ 306.713747][T11708] tipc: Resetting bearer [ 307.000994][T11714] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1499'. [ 307.010226][T11714] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1499'. [ 307.224661][T11718] syzkaller1: entered promiscuous mode [ 307.230373][T11718] syzkaller1: entered allmulticast mode [ 307.497656][T11726] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.768171][T11726] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.940253][T11726] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.169196][T11726] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.223794][T11753] vlan3: entered allmulticast mode [ 308.246345][T11753] bond7: entered allmulticast mode [ 308.491561][T11760] syzkaller1: entered promiscuous mode [ 308.507900][T11760] syzkaller1: entered allmulticast mode [ 308.569041][ T6335] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.602655][ T6335] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.672280][ T6323] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.735127][ T6340] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.145398][T11811] gretap1: entered promiscuous mode [ 309.600134][T11832] lo speed is unknown, defaulting to 1000 [ 309.791635][T11838] validate_nla: 3 callbacks suppressed [ 309.791655][T11838] netlink: 'syz.0.1532': attribute type 1 has an invalid length. [ 310.331327][T11860] syzkaller1: entered promiscuous mode [ 310.355182][T11860] syzkaller1: entered allmulticast mode [ 310.563087][T11881] __nla_validate_parse: 9 callbacks suppressed [ 310.563108][T11881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1541'. [ 310.698741][T11874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1541'. [ 310.737198][T11874] vlan1: entered allmulticast mode [ 310.952236][T11896] netlink: 'syz.4.1545': attribute type 30 has an invalid length. [ 310.955356][T11902] netlink: 'syz.3.1544': attribute type 13 has an invalid length. [ 310.968689][T11902] netlink: 'syz.3.1544': attribute type 17 has an invalid length. [ 310.991468][T11902] gre0: left promiscuous mode [ 310.996333][T11902] gre0: left allmulticast mode [ 311.001961][ T30] audit: type=1804 audit(1757244217.760:3): pid=11896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1545" name="/newroot/314/cgroup.controllers" dev="tmpfs" ino=1628 res=1 errno=0 [ 311.051573][ T30] audit: type=1800 audit(1757244217.760:4): pid=11896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1545" name="cgroup.controllers" dev="tmpfs" ino=1628 res=0 errno=0 [ 311.119606][T11902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.134796][T11902] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.158494][T11902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.262448][T11907] bridge4: entered allmulticast mode [ 311.289629][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1549'. [ 311.300752][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1549'. [ 311.429120][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 311.713445][T11923] geneve4: entered promiscuous mode [ 311.746972][ T6333] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.749513][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1555'. [ 311.785808][ T6333] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.807526][ T6333] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.869908][ T6333] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.992083][T11941] netlink: 'syz.0.1558': attribute type 21 has an invalid length. [ 312.005402][T11942] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1559'. [ 312.017560][T11942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1559'. [ 312.042627][T11942] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1559'. [ 312.063855][T11941] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1558'. [ 312.227239][T11957] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 312.455598][T11968] netlink: 'syz.3.1565': attribute type 13 has an invalid length. [ 312.464556][T11968] netlink: 'syz.3.1565': attribute type 17 has an invalid length. [ 312.518381][T11968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.623116][T11972] lo speed is unknown, defaulting to 1000 [ 312.783386][T11986] nbd: socks must be embedded in a SOCK_ITEM attr [ 313.212268][T11996] netlink: 'syz.2.1572': attribute type 14 has an invalid length. [ 313.226768][T11996] netlink: 'syz.2.1572': attribute type 13 has an invalid length. [ 313.365416][T11998] netlink: 'syz.2.1572': attribute type 6 has an invalid length. [ 313.792666][T12007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.829395][ T7465] lo speed is unknown, defaulting to 1000 [ 314.166204][T12016] tipc: Resetting bearer [ 314.251611][T12016] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 314.300429][T12016] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 314.350147][T12028] syzkaller1: entered promiscuous mode [ 314.372519][T12028] syzkaller1: entered allmulticast mode [ 314.505796][T12041] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 314.844848][T12054] syzkaller0: entered promiscuous mode [ 314.850525][T12054] syzkaller0: entered allmulticast mode [ 315.422192][T12072] xt_time: unknown flags 0xf4 [ 316.728441][T12080] syzkaller1: entered promiscuous mode [ 316.734250][T12080] syzkaller1: entered allmulticast mode [ 316.761974][T12082] validate_nla: 3 callbacks suppressed [ 316.761996][T12082] netlink: 'syz.0.1597': attribute type 10 has an invalid length. [ 316.801752][T12084] netlink: 'syz.3.1596': attribute type 6 has an invalid length. [ 316.817895][T12084] __nla_validate_parse: 17 callbacks suppressed [ 316.817917][T12084] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1596'. [ 316.827956][T12085] netlink: 'syz.0.1597': attribute type 10 has an invalid length. [ 316.879292][T12082] team0: Port device dummy0 added [ 316.893368][T12085] team0: Port device dummy0 removed [ 316.919493][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1596'. [ 316.969219][T12088] lo speed is unknown, defaulting to 1000 [ 317.059625][T12096] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1601'. [ 317.119097][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1600'. [ 317.277877][T12097] lo speed is unknown, defaulting to 1000 [ 317.425025][T12108] lo speed is unknown, defaulting to 1000 [ 318.340277][T12140] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1607'. [ 319.176116][T12167] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1610'. [ 319.231921][T12167] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1610'. [ 319.303404][ T30] audit: type=1800 audit(1757244226.070:5): pid=12172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1613" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1660 res=0 errno=0 [ 319.633892][T12184] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1614'. [ 319.885024][T12188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1614'. [ 319.894518][T12188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1614'. [ 320.553198][T12205] bond1: entered promiscuous mode [ 320.559040][T12205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 320.894680][T12228] netlink: 'syz.0.1627': attribute type 1 has an invalid length. [ 320.936425][T12232] !: renamed from dummy0 (while UP) [ 321.143038][T12245] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 321.595497][T12272] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.603484][T12272] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.755951][T12272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.841553][T12272] erspan0: left allmulticast mode [ 321.868281][ T9] lo speed is unknown, defaulting to 1000 [ 321.874073][ T9] syz1: Port: 1 Link DOWN [ 321.875573][T12286] bond_slave_0: entered promiscuous mode [ 322.179575][T12302] __nla_validate_parse: 5 callbacks suppressed [ 322.179594][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1650'. [ 322.442142][T12315] tipc: Enabled bearer , priority 0 [ 322.478176][T12299] bond0: (slave netdevsim0): Releasing backup interface [ 322.508685][T12315] syzkaller0: entered promiscuous mode [ 322.522741][T12315] syzkaller0: entered allmulticast mode [ 322.631764][T12315] tipc: Resetting bearer [ 322.767543][T12314] tipc: Resetting bearer [ 322.796298][T12314] tipc: Disabling bearer [ 322.923897][T12338] vlan2: entered promiscuous mode [ 322.931757][T12338] macvtap0: entered promiscuous mode [ 323.028623][T12338] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1659'. [ 323.066003][T12338] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1659'. [ 323.196764][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1666'. [ 323.373815][T12370] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1671'. [ 323.628970][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1677'. [ 323.769907][T12392] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1680'. [ 323.813423][T12390] lo speed is unknown, defaulting to 1000 [ 323.971875][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1684'. [ 323.998492][T12410] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1683'. [ 324.360887][T12417] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1686'. [ 324.827480][T12440] bond0: (slave 0!): Releasing backup interface [ 324.865596][T12440] !: left promiscuous mode [ 324.912222][T12440] bridge_slave_0: left allmulticast mode [ 324.933065][T12440] bridge_slave_0: left promiscuous mode [ 325.007279][T12440] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.029196][T12440] bridge_slave_1: left allmulticast mode [ 325.035116][T12440] bridge_slave_1: left promiscuous mode [ 325.041479][T12440] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.062717][T12440] bond0: (slave bond_slave_0): Releasing backup interface [ 325.075142][T12440] bond_slave_0: left promiscuous mode [ 325.085020][T12440] bond0: (slave bond_slave_1): Releasing backup interface [ 325.095598][T12440] bond_slave_1: left promiscuous mode [ 325.105711][T12440] team0: Port device team_slave_0 removed [ 325.115520][T12440] team0: Port device team_slave_1 removed [ 325.126494][T12440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.135400][T12440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.147468][T12440] team0: Port device geneve0 removed [ 325.156290][T12440] bond0: (slave wlan1): Releasing backup interface [ 325.169827][T12440] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 325.179360][T12440] bond1: (slave veth5): Releasing backup interface [ 325.188533][T12440] bond6: (slave bond7): Releasing backup interface [ 325.195422][T12440] bond7: left promiscuous mode [ 325.210726][T12435] team0: Mode changed to "broadcast" [ 325.216381][T12444] batadv_slave_0: entered promiscuous mode [ 325.227269][T12444] batadv_slave_0: left allmulticast mode [ 325.242988][T12457] syzkaller0: entered promiscuous mode [ 325.248741][T12457] syzkaller0: entered allmulticast mode [ 325.373742][T12461] netlink: 'syz.4.1696': attribute type 8 has an invalid length. [ 325.411681][T12461] netlink: 'syz.4.1696': attribute type 8 has an invalid length. [ 325.854776][T12483] netlink: 'syz.0.1699': attribute type 1 has an invalid length. [ 326.431284][T12505] netlink: 'syz.4.1706': attribute type 32 has an invalid length. [ 326.455212][T12505] (unnamed net_device) (uninitialized): option coupled_control: invalid value (183) [ 326.488101][T12508] .70·: renamed from hsr0 [ 326.508881][T12508] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 326.538789][T12508] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.565681][T12508] .70·: entered allmulticast mode [ 326.580775][T12508] hsr_slave_0: entered allmulticast mode [ 326.596572][T12508] hsr_slave_1: entered allmulticast mode [ 326.632224][T12508] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 326.660974][T12518] netlink: 'syz.1.1709': attribute type 1 has an invalid length. [ 326.810833][T12519] 8021q: adding VLAN 0 to HW filter on device bond2 [ 326.833260][T12526] netlink: 'syz.3.1711': attribute type 4 has an invalid length. [ 326.888449][T12518] veth5: entered promiscuous mode [ 326.930105][T12518] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 326.959568][T12519] bridge_slave_0: left allmulticast mode [ 326.986607][T12519] bridge_slave_0: left promiscuous mode [ 326.996047][T12519] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.011984][T12519] bridge_slave_1: left allmulticast mode [ 327.019120][T12519] bridge_slave_1: left promiscuous mode [ 327.025003][T12519] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.044600][T12519] team0: Port device team_slave_0 removed [ 327.062880][T12519] team0: Port device team_slave_1 removed [ 327.070092][T12519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.084052][T12519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.094144][T12519] bond0: (slave geneve2): Releasing active interface [ 327.106005][T12519] bond2: (slave veth5): Releasing backup interface [ 327.143917][T12544] syz_tun: entered promiscuous mode [ 327.158158][T12521] lo speed is unknown, defaulting to 1000 [ 327.455784][T12553] __nla_validate_parse: 7 callbacks suppressed [ 327.455807][T12553] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1720'. [ 327.472059][ T30] audit: type=1800 audit(1757244234.220:6): pid=12553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1720" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1703 res=0 errno=0 [ 327.701629][T12572] lo speed is unknown, defaulting to 1000 [ 327.779038][T12565] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1724'. [ 327.814006][T12568] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 328.222405][T12586] syzkaller1: entered promiscuous mode [ 328.233039][T12586] syzkaller1: entered allmulticast mode [ 328.239789][T12587] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 329.234126][T12631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1738'. [ 329.446099][T12639] netlink: 'syz.1.1740': attribute type 1 has an invalid length. [ 329.501044][T12639] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1740'. [ 329.514712][T12641] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 329.589629][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1741'. [ 329.895659][T12648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1743'. [ 330.072697][T12648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1743'. [ 330.400286][T12657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1745'. [ 330.437501][T12659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1745'. [ 330.453735][T12660] netlink: 'syz.4.1746': attribute type 1 has an invalid length. [ 330.520245][T12663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1747'. [ 330.572556][T12664] bond6: entered promiscuous mode [ 330.578062][T12664] bond6: entered allmulticast mode [ 330.583811][T12664] 8021q: adding VLAN 0 to HW filter on device bond6 [ 330.841692][T12676] netlink: 'syz.1.1750': attribute type 21 has an invalid length. [ 330.958158][T12678] 8021q: VLANs not supported on vxcan0 [ 331.069263][T12683] netlink: 'syz.3.1752': attribute type 4 has an invalid length. [ 331.078057][T12684] bridge0: port 1(hsr_slave_0) entered blocking state [ 331.085063][T12684] bridge0: port 1(hsr_slave_0) entered disabled state [ 331.099366][T12684] hsr_slave_0: entered allmulticast mode [ 331.107913][T12684] hsr_slave_0: left allmulticast mode [ 331.296316][T12688] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) ! [ 332.403789][T12729] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 332.446884][T12729] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 332.478129][T12729] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 333.479561][T12736] __nla_validate_parse: 8 callbacks suppressed [ 333.479582][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1766'. [ 333.557183][ T5879] Bluetooth: hci4: command 0x0405 tx timeout [ 333.563402][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1767'. [ 333.600968][T12739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1767'. [ 333.866801][T12748] netlink: 'syz.0.1769': attribute type 10 has an invalid length. [ 333.951391][T12748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1769'. [ 333.982460][T12748] dummy0: entered promiscuous mode [ 333.991117][T12748] bridge0: port 3(dummy0) entered blocking state [ 333.998145][T12748] bridge0: port 3(dummy0) entered disabled state [ 334.004709][T12748] dummy0: entered allmulticast mode [ 334.096363][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1771'. [ 334.739436][T12783] syz_tun: entered allmulticast mode [ 334.832010][T12780] dvmrp8: entered allmulticast mode [ 334.930127][T12780] syz_tun: left allmulticast mode [ 334.953836][T12780] dvmrp8: left allmulticast mode [ 335.173800][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1782'. [ 335.180985][T12797] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1781'. [ 335.242843][T12792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1780'. [ 336.204073][T12825] batadv_slave_1: entered promiscuous mode [ 336.347092][T12831] batadv_slave_1: left promiscuous mode [ 336.662426][T12845] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1797'. [ 336.826592][T12853] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1799'. [ 337.203177][T12873] IPVS: persistence engine module ip_vs_pe_ not found [ 337.219251][ T7463] IPVS: starting estimator thread 0... [ 337.301243][T12873] lo speed is unknown, defaulting to 1000 [ 337.308408][T12877] IPVS: using max 27 ests per chain, 64800 per kthread [ 338.238920][ T30] audit: type=1800 audit(1757244245.010:7): pid=12907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1811" name="memory.events" dev="tmpfs" ino=2071 res=0 errno=0 [ 338.435713][T12920] syz.4.1815 uses old SIOCAX25GETINFO [ 369.446396][T12928] syz_tun: entered allmulticast mode [ 369.455324][T12931] __nla_validate_parse: 3 callbacks suppressed [ 369.455345][T12931] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1819'. [ 369.478346][T12929] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.488552][T12929] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 369.548718][T12928] dvmrp8: entered allmulticast mode [ 369.560375][T12935] can: request_module (can-proto-0) failed. [ 369.585620][T12930] can: request_module (can-proto-0) failed. [ 369.628625][T12938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.654016][T12938] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 369.667638][T12938] team0: Failed to send options change via netlink (err -105) [ 369.682510][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1821'. [ 369.687993][T12938] team0: Port device batadv0 added [ 369.692020][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1821'. [ 369.706216][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1821'. [ 369.733353][T12929] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.753516][T12929] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 369.851631][T12946] 8021q: adding VLAN 0 to HW filter on device bond8 [ 369.877165][T12939] lo speed is unknown, defaulting to 1000 [ 370.046176][T12929] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.117227][T12929] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 370.137255][ T30] audit: type=1800 audit(1757244276.890:8): pid=12945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1821" name="cgroup.controllers" dev="tmpfs" ino=1929 res=0 errno=0 [ 370.249247][T12929] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.287016][T12929] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 370.472139][ T754] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.494441][ T754] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 370.512779][T12926] syz_tun: left allmulticast mode [ 370.528720][T12926] dvmrp8: left allmulticast mode [ 370.643914][ T754] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.664505][ T754] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 370.709130][T12971] netlink: 'syz.0.1827': attribute type 3 has an invalid length. [ 370.753456][ T6335] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.770930][ T6335] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 370.856936][T12977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1829'. [ 370.872309][T12977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1829'. [ 370.912648][ T6335] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.922277][ T6335] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 371.228790][T12982] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 371.356337][T12998] netlink: 'syz.4.1835': attribute type 1 has an invalid length. [ 371.369513][T12998] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1835'. [ 371.393967][T12995] lo speed is unknown, defaulting to 1000 [ 371.506231][T13001] netlink: 'syz.4.1836': attribute type 2 has an invalid length. [ 371.787835][T13006] macvtap2: entered allmulticast mode [ 371.806550][T13006] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 371.831886][T13006] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 371.903347][T13012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1838'. [ 371.925378][T13009] tipc: New replicast peer: 255.255.255.255 [ 371.935894][T13009] tipc: Enabled bearer , priority 10 [ 372.685753][T13040] tipc: Enabled bearer , priority 0 [ 372.714881][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1844'. [ 372.726485][T13043] syzkaller0: entered promiscuous mode [ 372.734194][T13043] syzkaller0: entered allmulticast mode [ 372.839604][T13040] tipc: Resetting bearer [ 372.859079][T13039] tipc: Resetting bearer [ 372.883084][T13039] tipc: Disabling bearer [ 373.351392][T13075] netlink: 676 bytes leftover after parsing attributes in process `syz.3.1853'. [ 374.235112][T13118] batadv_slave_1 (unregistering): left promiscuous mode [ 374.448189][T13130] veth1_to_bond: entered allmulticast mode [ 374.457425][T13130] bond_slave_1: entered promiscuous mode [ 374.463751][T13130] __nla_validate_parse: 24 callbacks suppressed [ 374.463770][T13130] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1870'. [ 374.518566][T13133] bond_slave_1: left promiscuous mode [ 374.525119][T13137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 374.530071][T13133] veth1_to_bond: left allmulticast mode [ 374.539271][T13138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1871'. [ 374.594829][T13140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1873'. [ 375.133570][T13158] netlink: 'syz.3.1879': attribute type 12 has an invalid length. [ 375.180223][T13160] syzkaller0: entered promiscuous mode [ 375.185746][T13160] syzkaller0: entered allmulticast mode [ 375.218103][T13160] tipc: Enabled bearer , priority 0 [ 375.229542][T13159] tipc: Resetting bearer [ 375.867719][T13178] siw: device registration error -23 [ 376.351390][ T7468] tipc: Node number set to 82959748 [ 377.219942][T13159] tipc: Disabling bearer [ 377.395047][T13188] netlink: 'syz.0.1885': attribute type 13 has an invalid length. [ 377.412459][T13188] gretap0: refused to change device tx_queue_len [ 377.424428][T13188] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 377.446520][T13186] netlink: 'syz.2.1887': attribute type 19 has an invalid length. [ 377.454983][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'. [ 377.500703][T13186] netlink: 'syz.2.1887': attribute type 19 has an invalid length. [ 377.566114][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'. [ 377.938047][T13216] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1894'. [ 378.076178][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'. [ 378.190931][T13229] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 378.570672][T13246] lo speed is unknown, defaulting to 1000 [ 378.586111][T13249] sctp: [Deprecated]: syz.1.1905 (pid 13249) Use of int in maxseg socket option. [ 378.586111][T13249] Use struct sctp_assoc_value instead [ 378.684261][T13251] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 378.950815][T13231] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 379.111682][T13266] netlink: 'syz.0.1910': attribute type 2 has an invalid length. [ 379.317122][T13275] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1913'. [ 380.071618][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 380.280123][ T5879] Bluetooth: hci3: command 0x0406 tx timeout [ 380.454135][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1923'. [ 380.797661][T13320] block nbd0: server does not support multiple connections per device. [ 380.832351][T13320] block nbd0: shutting down sockets [ 381.032399][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1929'. [ 381.132150][T13339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 381.143161][T13323] netlink: 'syz.2.1929': attribute type 1 has an invalid length. [ 381.165949][T13332] lo speed is unknown, defaulting to 1000 [ 381.305207][T13339] lo speed is unknown, defaulting to 1000 [ 381.481627][T13355] lo speed is unknown, defaulting to 1000 [ 381.542904][T13358] vlan0: entered promiscuous mode [ 381.568043][T13358] macvtap0: entered promiscuous mode [ 382.636071][T13383] tipc: Enabling of bearer rejected, failed to enable media [ 382.645608][T13384] tipc: Enabling of bearer rejected, failed to enable media [ 382.858735][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1942'. [ 383.229840][T13391] team0 (unregistering): Port device team_slave_0 removed [ 383.248724][T13391] team0 (unregistering): Port device team_slave_1 removed [ 383.268140][T13391] team0 (unregistering): Port device bridge1 removed [ 383.274973][T13399] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1944'. [ 383.295318][T13391] team0 (unregistering): Port device macvlan1 removed [ 383.614812][T13406] netlink: 'syz.0.1946': attribute type 13 has an invalid length. [ 383.634875][T13406] netlink: 'syz.0.1946': attribute type 17 has an invalid length. [ 383.790355][T13412] sctp: [Deprecated]: syz.2.1949 (pid 13412) Use of int in max_burst socket option deprecated. [ 383.790355][T13412] Use struct sctp_assoc_value instead [ 383.824486][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'. [ 383.873605][T13412] sctp: [Deprecated]: syz.2.1949 (pid 13412) Use of int in max_burst socket option deprecated. [ 383.873605][T13412] Use struct sctp_assoc_value instead [ 383.891782][T13417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.922387][T13406] erspan0: left allmulticast mode [ 383.966322][T13417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.987837][T13412] sctp: [Deprecated]: syz.2.1949 (pid 13412) Use of int in max_burst socket option deprecated. [ 383.987837][T13412] Use struct sctp_assoc_value instead [ 384.035357][T13412] sctp: [Deprecated]: syz.2.1949 (pid 13412) Use of int in max_burst socket option deprecated. [ 384.035357][T13412] Use struct sctp_assoc_value instead [ 384.055058][T13406] bridge0: port 3(dummy0) entered blocking state [ 384.056954][T13412] sctp: [Deprecated]: syz.2.1949 (pid 13412) Use of int in max_burst socket option deprecated. [ 384.056954][T13412] Use struct sctp_assoc_value instead [ 384.061601][T13406] bridge0: port 3(dummy0) entered forwarding state [ 384.083876][T13412] sctp: [Deprecated]: syz.2.1949 (pid 13412) Use of int in max_burst socket option deprecated. [ 384.083876][T13412] Use struct sctp_assoc_value instead [ 384.105248][T13412] sctp: [Deprecated]: syz.2.1949 (pid 13412) Use of int in max_burst socket option deprecated. [ 384.105248][T13412] Use struct sctp_assoc_value instead [ 384.127959][T13412] sctp: [Deprecated]: syz.2.1949 (pid 13412) Use of int in max_burst socket option deprecated. [ 384.127959][T13412] Use struct sctp_assoc_value instead [ 384.151624][T13406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.159120][T13412] sctp: [Deprecated]: syz.2.1949 (pid 13412) Use of int in max_burst socket option deprecated. [ 384.159120][T13412] Use struct sctp_assoc_value instead [ 384.193293][T13412] sctp: [Deprecated]: syz.2.1949 (pid 13412) Use of int in max_burst socket option deprecated. [ 384.193293][T13412] Use struct sctp_assoc_value instead [ 384.500772][T13407] lo speed is unknown, defaulting to 1000 [ 384.832682][T13427] : entered promiscuous mode [ 385.035709][T13432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1954'. [ 385.759892][T13451] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1960'. [ 385.774343][T13451] tc_dump_action: action bad kind [ 386.039845][T13465] netlink: 'syz.1.1964': attribute type 1 has an invalid length. [ 386.130902][T13465] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1964'. [ 386.157400][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1964'. [ 386.468373][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1969'. [ 386.518877][T13481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1969'. [ 386.566903][T13481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1969'. [ 386.575906][T13481] netlink: 540 bytes leftover after parsing attributes in process `syz.1.1969'. [ 386.925121][T13498] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.397344][T13513] siw: device registration error -23 [ 387.400976][T13512] netlink: 'syz.2.1978': attribute type 2 has an invalid length. [ 387.537445][T13516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1979'. [ 387.569040][T13516] netlink: 'syz.4.1979': attribute type 10 has an invalid length. [ 387.612409][T13516] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.640051][T13516] bond0: (slave team0): Enslaving as an active interface with an up link [ 388.607802][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1987'. [ 388.638144][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1987'. [ 388.716986][T13544] can: request_module (can-proto-0) failed. [ 388.750112][T13542] veth9: entered promiscuous mode [ 388.889305][T13548] macvtap1: entered allmulticast mode [ 388.894752][T13548] veth0_macvtap: entered allmulticast mode [ 388.924782][T13550] lo speed is unknown, defaulting to 1000 [ 389.044002][T13560] lo speed is unknown, defaulting to 1000 [ 390.011053][T13600] netlink: 'syz.2.2003': attribute type 32 has an invalid length. [ 392.690959][T13653] lo speed is unknown, defaulting to 1000 [ 393.259336][T13670] Bluetooth: MGMT ver 1.23 [ 393.663004][T13683] __nla_validate_parse: 3 callbacks suppressed [ 393.663026][T13683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2025'. [ 394.629166][T13715] tipc: Enabled bearer , priority 0 [ 394.647939][T13715] netlink: 'syz.3.2035': attribute type 3 has an invalid length. [ 394.661324][T13715] syzkaller0: entered promiscuous mode [ 394.687731][T13715] syzkaller0: entered allmulticast mode [ 394.782640][T13715] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 394.873724][T13715] tipc: Resetting bearer [ 394.907992][T13714] tipc: Resetting bearer [ 394.992184][T13714] tipc: Disabling bearer [ 395.026447][T13724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2036'. [ 395.216398][T13728] netlink: 'syz.0.2038': attribute type 2 has an invalid length. [ 395.760906][T13758] FAULT_INJECTION: forcing a failure. [ 395.760906][T13758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.821683][T13758] CPU: 0 UID: 0 PID: 13758 Comm: syz.0.2049 Not tainted syzkaller #0 PREEMPT(full) [ 395.821712][T13758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.821724][T13758] Call Trace: [ 395.821732][T13758] [ 395.821740][T13758] dump_stack_lvl+0x189/0x250 [ 395.821768][T13758] ? __pfx____ratelimit+0x10/0x10 [ 395.821788][T13758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.821811][T13758] ? __pfx__printk+0x10/0x10 [ 395.821835][T13758] ? __might_fault+0xb0/0x130 [ 395.821876][T13758] should_fail_ex+0x414/0x560 [ 395.821919][T13758] _copy_from_user+0x2d/0xb0 [ 395.821942][T13758] ___sys_recvmsg+0x12e/0x510 [ 395.821974][T13758] ? __pfx____sys_recvmsg+0x10/0x10 [ 395.822034][T13758] ? __fget_files+0x3a0/0x420 [ 395.822065][T13758] __x64_sys_recvmsg+0x198/0x260 [ 395.822093][T13758] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 395.822128][T13758] ? __pfx_ksys_write+0x10/0x10 [ 395.822150][T13758] ? rcu_is_watching+0x15/0xb0 [ 395.822176][T13758] ? do_syscall_64+0xbe/0x3b0 [ 395.822202][T13758] do_syscall_64+0xfa/0x3b0 [ 395.822220][T13758] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.822238][T13758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.822256][T13758] ? clear_bhb_loop+0x60/0xb0 [ 395.822279][T13758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.822295][T13758] RIP: 0033:0x7f99a438ebe9 [ 395.822313][T13758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.822330][T13758] RSP: 002b:00007f99a51bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 395.822351][T13758] RAX: ffffffffffffffda RBX: 00007f99a45c5fa0 RCX: 00007f99a438ebe9 [ 395.822365][T13758] RDX: 0000000000010001 RSI: 00002000000007c0 RDI: 0000000000000004 [ 395.822377][T13758] RBP: 00007f99a51bb090 R08: 0000000000000000 R09: 0000000000000000 [ 395.822389][T13758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.822401][T13758] R13: 00007f99a45c6038 R14: 00007f99a45c5fa0 R15: 00007fff9f749f88 [ 395.822436][T13758] [ 396.376188][T13786] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 396.394793][T13786] syzkaller1: linktype set to 6 [ 396.485701][T13786] syzkaller1: tun_chr_ioctl cmd 2147767519 [ 396.505510][T13788] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.597257][T13788] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.704784][T13804] netlink: 'syz.2.2063': attribute type 10 has an invalid length. [ 396.721033][T13788] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.819185][T13788] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.884934][T13810] netlink: 'syz.4.2064': attribute type 1 has an invalid length. [ 396.931246][T13809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2065'. [ 396.994805][ T6333] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.059625][ T6331] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.223408][ T6323] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.281474][ T6333] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.424602][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2073'. [ 397.456197][T13837] tipc: Enabled bearer , priority 0 [ 397.488967][T13837] syzkaller0: entered promiscuous mode [ 397.494657][T13837] syzkaller0: entered allmulticast mode [ 397.527728][T13837] tipc: Resetting bearer [ 397.545815][T13830] tipc: Resetting bearer [ 397.610697][T13830] tipc: Disabling bearer [ 397.642775][T13844] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2075'. [ 397.654054][T13844] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2075'. [ 397.664075][T13842] bond3: (slave erspan0): Releasing active interface [ 397.671132][T13842] ip6gretap1: entered promiscuous mode [ 397.677448][T13844] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2075'. [ 397.687205][T13844] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2075'. [ 397.716519][T13842] dummy0: left allmulticast mode [ 397.739639][T13842] dummy0: left promiscuous mode [ 397.756065][T13842] bridge0: port 3(dummy0) entered disabled state [ 397.832228][T13858] netlink: 'syz.0.2073': attribute type 10 has an invalid length. [ 397.842133][T13856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2077'. [ 397.864084][T13842] bridge_slave_0: left allmulticast mode [ 397.870086][T13842] bridge_slave_0: left promiscuous mode [ 397.875972][T13842] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.915551][T13842] bridge_slave_1: left allmulticast mode [ 397.922704][T13842] bridge_slave_1: left promiscuous mode [ 397.929255][T13842] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.941934][T13842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.950709][T13842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.963794][T13842] bond3: (slave ip6gretap1): Releasing active interface [ 397.971186][T13842] bond3: (slave ip6gretap1): the permanent HWaddr of slave - ca:66:da:51:86:df - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 397.990302][T13842] ip6gretap1: left promiscuous mode [ 398.010912][T13842] bond3: (slave veth3): Releasing active interface [ 398.023332][T13842] batman_adv: batadv0: Removing interface: ip6gretap2 [ 398.060075][T13868] 8021q: VLANs not supported on nlmon0 [ 398.110625][T13877] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 398.194555][T13883] syz_tun: entered promiscuous mode [ 398.203821][T13883] syz_tun: entered allmulticast mode [ 398.552000][T13888] veth0_macvtap: left allmulticast mode [ 398.562574][ T1100] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.574007][ T1100] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 398.585995][ T1100] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.600153][ T1100] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 398.623107][ T1100] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.631976][ T1100] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 398.640622][ T1100] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.649509][ T1100] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 398.798174][T13912] bond0: (slave team0): Releasing backup interface [ 398.838314][T13918] netlink: 'syz.2.2091': attribute type 21 has an invalid length. [ 398.918684][T13912] bond3: (slave bond4): Releasing backup interface [ 398.944422][T13912] batman_adv: batadv0: Removing interface: vxlan0 [ 398.957986][T13912] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 398.965198][T13912] batman_adv: batadv0: Removing interface: ip6gretap1 [ 398.990758][T13918] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2091'. [ 399.034648][T13920] team0: Mode changed to "loadbalance" [ 399.186558][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2096'. [ 399.202331][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2096'. [ 399.283948][T13937] team1: entered promiscuous mode [ 399.300528][T13937] team1: entered allmulticast mode [ 399.360958][T13938] team2: entered promiscuous mode [ 399.366236][T13938] team2: entered allmulticast mode [ 399.397556][T13949] batadv_slave_1: entered promiscuous mode [ 399.476846][T13949] batadv_slave_1: left promiscuous mode [ 399.622725][T13965] bond0: (slave dummy0): Releasing backup interface [ 399.638439][T13970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2102'. [ 399.648648][T13970] nbd: must specify at least one socket [ 399.668372][T13970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2102'. [ 399.679174][T13965] team0: Port device batadv0 removed [ 399.733617][T13970] team0: Mode changed to "loadbalance" [ 399.764438][T13969] lo speed is unknown, defaulting to 1000 [ 399.821745][T13976] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2105'. [ 400.482660][T14003] netlink: 'syz.0.2111': attribute type 303 has an invalid length. [ 400.489679][T14005] netlink: 'syz.3.2113': attribute type 13 has an invalid length. [ 400.526712][T14005] netlink: 'syz.3.2113': attribute type 17 has an invalid length. [ 400.540767][T13972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2103'. [ 400.704613][T14005] syz_tun: left promiscuous mode [ 400.750943][T14005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.946029][T14009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 401.026078][T14005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.041637][T14005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.070667][T14007] lo speed is unknown, defaulting to 1000 [ 401.245708][T14021] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2117'. [ 401.314710][T14022] netlink: 'syz.2.2116': attribute type 10 has an invalid length. [ 401.395243][T14022] bridge0: port 1(team0) entered blocking state [ 401.413753][T14022] bridge0: port 1(team0) entered disabled state [ 401.438351][T14022] team0: entered allmulticast mode [ 401.464585][T14022] team0: entered promiscuous mode [ 401.710914][T14042] netlink: 'syz.0.2121': attribute type 2 has an invalid length. [ 401.766010][T14042] þ: entered promiscuous mode [ 402.581462][T14061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2126'. [ 402.711986][T14072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 402.719326][T14072] IPv6: NLM_F_CREATE should be set when creating new route [ 402.726783][T14072] IPv6: NLM_F_CREATE should be set when creating new route [ 402.856085][T14081] tipc: Enabled bearer , priority 0 [ 402.930140][T14081] tipc: Resetting bearer [ 402.999810][T14088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.318467][T14113] smc: net device bond0 applied user defined pnetid SYZ2 [ 403.416307][T14108] sctp: [Deprecated]: syz.0.2142 (pid 14108) Use of int in maxseg socket option. [ 403.416307][T14108] Use struct sctp_assoc_value instead [ 403.524708][T14108] syz_tun: refused to change device tx_queue_len [ 403.704396][T14081] tipc: Disabling bearer [ 403.718207][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 403.787457][T14124] lo speed is unknown, defaulting to 1000 [ 404.154986][T14145] __nla_validate_parse: 7 callbacks suppressed [ 404.155008][T14145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2152'. [ 404.178607][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'. [ 404.262884][T14157] netlink: 'syz.1.2152': attribute type 4 has an invalid length. [ 404.298260][T14157] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2152'. [ 404.351761][T14162] syz_tun: refused to change device tx_queue_len [ 404.383412][T14162] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 404.534247][T14167] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2157'. [ 404.577126][T14160] netlink: 'syz.2.2156': attribute type 16 has an invalid length. [ 404.615549][T14160] netlink: 792 bytes leftover after parsing attributes in process `syz.2.2156'. [ 404.660075][T14164] macvtap2: entered promiscuous mode [ 404.665471][T14164] macvtap2: entered allmulticast mode [ 404.690494][T14164] dummy0: entered allmulticast mode [ 404.695794][T14164] dummy0: entered promiscuous mode [ 404.705263][T14164] team0: Device macvtap2 failed to register rx_handler [ 404.782349][T14164] dummy0: left allmulticast mode [ 404.788424][T14164] dummy0: left promiscuous mode [ 405.062085][T14188] netlink: 'syz.4.2163': attribute type 11 has an invalid length. [ 405.199511][T14191] netlink: 'syz.2.2164': attribute type 29 has an invalid length. [ 405.236688][T14191] netlink: 'syz.2.2164': attribute type 29 has an invalid length. [ 405.265575][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2164'. [ 405.274805][T14191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2164'. [ 405.389832][T14200] xt_time: unknown flags 0xf4 [ 405.528104][T14205] netlink: 'syz.2.2167': attribute type 1 has an invalid length. [ 405.611933][T14205] team0: Mode changed to "activebackup" [ 405.652135][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'. [ 406.005309][T14231] tipc: Enabling of bearer rejected, already enabled [ 406.090722][T14231] tipc: Resetting bearer [ 406.347066][T14246] netlink: 'syz.3.2180': attribute type 1 has an invalid length. [ 406.401541][T14246] 8021q: adding VLAN 0 to HW filter on device bond8 [ 406.472052][T14246] ipvlan1: entered allmulticast mode [ 406.512809][T14246] bond8: entered allmulticast mode [ 406.533273][T14260] syzkaller0: entered promiscuous mode [ 406.539036][T14260] syzkaller0: entered allmulticast mode [ 406.550943][T14248] tipc: Enabled bearer , priority 0 [ 406.559420][T14248] syzkaller0: entered promiscuous mode [ 406.565279][T14248] syzkaller0: entered allmulticast mode [ 406.576420][T14261] netlink: 'syz.2.2185': attribute type 13 has an invalid length. [ 406.584657][T14261] netlink: 'syz.2.2185': attribute type 17 has an invalid length. [ 406.595896][T14246] bond8: (slave gretap2): making interface the new active one [ 406.604028][T14246] gretap2: entered allmulticast mode [ 406.614194][T14246] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 406.666296][T14261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.675954][T14261] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.698104][T14261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 406.738208][T14263] xfrm0: entered promiscuous mode [ 406.743407][T14263] xfrm0: entered allmulticast mode [ 406.758151][T14265] tipc: Resetting bearer [ 406.768551][T14247] tipc: Resetting bearer [ 406.795128][T14247] tipc: Disabling bearer [ 406.804868][T14263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2185'. [ 406.825148][T14263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.833712][T14261] lo speed is unknown, defaulting to 1000 [ 406.899970][T14263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.136323][T14269] lo speed is unknown, defaulting to 1000 [ 407.551024][T14277] lo speed is unknown, defaulting to 1000 [ 407.646971][T14287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2189'. [ 408.583716][T14325] netlink: 'syz.1.2201': attribute type 10 has an invalid length. [ 408.600109][T14325] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 409.391374][T14344] syzkaller1: entered promiscuous mode [ 409.411921][T14344] syzkaller1: entered allmulticast mode [ 409.821477][T14364] __nla_validate_parse: 2 callbacks suppressed [ 409.821497][T14364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2212'. [ 410.150108][T14391] tipc: Enabled bearer , priority 0 [ 410.172051][T14391] syzkaller0: entered allmulticast mode [ 410.193519][T14390] tipc: Disabling bearer [ 410.416877][T14406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2220'. [ 410.735067][T14429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2226'. [ 410.765445][T14429] bond0: invalid ARP target 0.0.0.0 specified for addition [ 410.811839][T14429] bond0: option arp_ip_target: invalid value (0) [ 410.895068][T14440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2225'. [ 410.906330][T14440] netlink: 'syz.2.2225': attribute type 1 has an invalid length. [ 410.935394][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2229'. [ 411.025336][T14445] tipc: Enabled bearer , priority 0 [ 411.043595][T14434] lo speed is unknown, defaulting to 1000 [ 411.053422][T14438] syzkaller0: entered promiscuous mode [ 411.068046][T14438] syzkaller0: entered allmulticast mode [ 411.132414][T14438] tipc: Resetting bearer [ 411.197808][T14437] tipc: Resetting bearer [ 411.221850][T14437] tipc: Disabling bearer [ 411.526397][T14451] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 411.556748][T14455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2234'. [ 411.703939][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2234'. [ 411.762535][T14470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2237'. [ 411.789266][T14461] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2236'. [ 411.808108][T14461] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2236'. [ 411.883841][T14472] vlan2: entered promiscuous mode [ 411.894113][T14472] bond0: entered promiscuous mode [ 412.032147][T14477] tipc: Enabled bearer , priority 0 [ 412.040229][T14477] syzkaller0: entered promiscuous mode [ 412.045989][T14477] syzkaller0: entered allmulticast mode [ 412.129322][T14477] tipc: Resetting bearer [ 412.194285][T14476] tipc: Resetting bearer [ 412.272674][T14484] IPVS: persistence engine module ip_vs_pe_ not found [ 412.338575][T14476] tipc: Disabling bearer [ 412.757244][T14503] netlink: 'syz.0.2246': attribute type 1 has an invalid length. [ 412.871319][ T5879] Bluetooth: hci4: link tx timeout [ 412.877516][ T5879] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 413.818963][T14542] openvswitch: netlink: Tunnel attr 16369 out of range max 16 [ 413.914365][T14546] netlink: 'syz.0.2254': attribute type 8 has an invalid length. [ 413.924870][T14547] netlink: 'syz.0.2254': attribute type 8 has an invalid length. [ 414.001634][T14547] macsec0: entered promiscuous mode [ 414.014676][T14547] syz_tun: entered promiscuous mode [ 414.046963][T14547] macsec0: entered allmulticast mode [ 414.053340][T14547] syz_tun: entered allmulticast mode [ 414.072762][T14547] syz_tun: left allmulticast mode [ 414.108348][T14547] syz_tun: left promiscuous mode [ 414.162837][T14546] macsec0: entered promiscuous mode [ 414.170411][T14546] syz_tun: entered promiscuous mode [ 414.175935][T14546] macsec0: entered allmulticast mode [ 414.185249][T14546] syz_tun: entered allmulticast mode [ 414.196308][T14546] syz_tun: left allmulticast mode [ 414.209882][T14546] syz_tun: left promiscuous mode [ 414.336045][T14559] lo speed is unknown, defaulting to 1000 [ 414.409135][T14567] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 414.866234][T14575] __nla_validate_parse: 11 callbacks suppressed [ 414.866255][T14575] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2260'. [ 414.925026][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 415.036353][T14587] tipc: Enabling of bearer rejected, failed to enable media [ 415.196847][T14597] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2268'. [ 415.335930][T14591] lo speed is unknown, defaulting to 1000 [ 415.498239][T14612] netlink: 'syz.1.2271': attribute type 11 has an invalid length. [ 415.583130][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2271'. [ 415.702888][T14609] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2271'. [ 415.962128][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'. [ 415.978873][T14598] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 416.090341][T14626] delete_channel: no stack [ 416.304205][T14636] netlink: 'syz.3.2278': attribute type 4 has an invalid length. [ 416.421627][T14629] lo speed is unknown, defaulting to 1000 [ 416.472054][T14628] lo speed is unknown, defaulting to 1000 [ 416.513656][T14629] lo speed is unknown, defaulting to 1000 [ 416.642392][T14629] lo speed is unknown, defaulting to 1000 [ 417.033074][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 417.228509][T14629] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 417.414744][T14629] lo speed is unknown, defaulting to 1000 [ 417.461582][T14629] lo speed is unknown, defaulting to 1000 [ 417.516806][T14629] lo speed is unknown, defaulting to 1000 [ 417.518137][T14658] netlink: 'syz.4.2283': attribute type 7 has an invalid length. [ 417.524924][T14629] lo speed is unknown, defaulting to 1000 [ 417.530637][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2283'. [ 417.548659][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2284'. [ 417.632835][T14629] lo speed is unknown, defaulting to 1000 [ 417.633362][T14662] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 417.650132][T14662] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 417.711337][T14659] 8021q: adding VLAN 0 to HW filter on device bond9 [ 417.719211][T14659] bridge0: port 1(bond9) entered blocking state [ 417.725953][T14659] bridge0: port 1(bond9) entered disabled state [ 417.733172][T14659] bond9: entered allmulticast mode [ 417.746312][T14659] bridge0: port 1(bond9) entered blocking state [ 417.752959][T14659] bridge0: port 1(bond9) entered forwarding state [ 417.762393][T14629] lo speed is unknown, defaulting to 1000 [ 417.776840][ T6352] bridge0: port 1(bond9) entered disabled state [ 417.788795][T14629] lo speed is unknown, defaulting to 1000 [ 417.855838][T14669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2286'. [ 418.107429][T14666] lo speed is unknown, defaulting to 1000 [ 418.468066][T14684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2289'. [ 418.694881][T14681] netlink: 'syz.1.2289': attribute type 1 has an invalid length. [ 418.714976][T14686] netlink: 'syz.4.2290': attribute type 29 has an invalid length. [ 418.723602][T14687] netlink: 'syz.1.2289': attribute type 1 has an invalid length. [ 418.735986][T14685] tipc: Enabled bearer , priority 0 [ 418.853180][T14683] syzkaller0: entered promiscuous mode [ 418.862302][T14683] syzkaller0: entered allmulticast mode [ 418.869460][T14686] tipc: Resetting bearer [ 418.887514][T14693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.958354][T14686] tipc: Disabling bearer [ 419.043687][T14704] netlink: 'syz.3.2294': attribute type 1 has an invalid length. [ 419.070131][T14704] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 419.292216][T14682] delete_channel: no stack [ 420.130389][T14752] netlink: 'syz.2.2306': attribute type 1 has an invalid length. [ 420.328802][T14766] __nla_validate_parse: 3 callbacks suppressed [ 420.328822][T14766] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2311'. [ 420.430427][T14766] vlan2: entered allmulticast mode [ 420.441856][T14766] erspan0: entered allmulticast mode [ 420.453213][T14727] lo speed is unknown, defaulting to 1000 [ 421.480474][T14815] tipc: Enabled bearer , priority 0 [ 421.535517][T14815] syzkaller0: entered promiscuous mode [ 421.550866][T14815] syzkaller0: entered allmulticast mode [ 421.662399][T14815] tipc: Resetting bearer [ 421.687656][T14814] tipc: Resetting bearer [ 421.765598][T14814] tipc: Disabling bearer [ 421.963344][T14812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.362053][T14802] lo speed is unknown, defaulting to 1000 [ 422.474262][T14846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2331'. [ 423.040042][T14860] bond9: left allmulticast mode [ 423.057596][T14860] bridge0: port 1(bond9) entered disabled state [ 423.242473][T14866] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 423.524954][T14891] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2340'. [ 423.547902][T14896] netlink: 'syz.1.2339': attribute type 4 has an invalid length. [ 423.565656][T14891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2340'. [ 423.663807][T14896] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2339'. [ 423.693313][T14896] block nbd0: not configured, cannot reconfigure [ 423.941660][T14917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2346'. [ 424.061617][T14902] lo speed is unknown, defaulting to 1000 [ 424.193123][T14925] netlink: 'syz.1.2348': attribute type 11 has an invalid length. [ 424.366977][T14935] netlink: 'syz.1.2352': attribute type 1 has an invalid length. [ 424.559353][T14935] 8021q: adding VLAN 0 to HW filter on device bond3 [ 424.563237][T14947] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2354'. [ 424.577579][T14947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2354'. [ 424.714652][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2357'. [ 424.828526][T14956] netlink: 'syz.0.2358': attribute type 6 has an invalid length. [ 424.899565][ T1100] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.919621][ T1100] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.936836][ T1100] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.965610][ T1100] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.992931][T14963] netlink: 'syz.4.2359': attribute type 1 has an invalid length. [ 425.018859][T14963] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2359'. [ 425.044328][T14956] netlink: 'syz.0.2358': attribute type 12 has an invalid length. [ 425.091771][T14968] team0: entered promiscuous mode [ 425.113727][T14970] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 425.118281][T14968] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 425.483046][T14979] __nla_validate_parse: 1 callbacks suppressed [ 425.483065][T14979] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2366'. [ 425.483493][T14980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.518875][T14982] tap0: tun_chr_ioctl cmd 35108 [ 425.529262][T14982] netlink: 'syz.0.2367': attribute type 1 has an invalid length. [ 425.829230][T14982] bond8: entered promiscuous mode [ 425.834504][T14982] bond8: entered allmulticast mode [ 425.855317][T14958] lo speed is unknown, defaulting to 1000 [ 426.179688][T15002] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2372'. [ 426.224111][T15003] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2372'. [ 426.280844][T14965] lo speed is unknown, defaulting to 1000 [ 426.650379][T15013] geneve6: entered promiscuous mode [ 426.692268][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 426.714649][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 426.972558][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 427.012192][T15025] syz_tun: left promiscuous mode [ 427.017290][T15025] syz_tun: left allmulticast mode [ 427.045279][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2376'. [ 427.055929][T15025] batadv_slave_0: left promiscuous mode [ 427.089453][T15025] veth1_virt_wifi: left allmulticast mode [ 427.100656][T15025] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 427.111348][T15025] bridge2: left allmulticast mode [ 427.119117][T15025] ip6tnl2: left promiscuous mode [ 427.125842][T15025] ip6tnl2: left allmulticast mode [ 427.135282][T15025] macvtap1: left promiscuous mode [ 427.141275][T15025] macvtap1: left allmulticast mode [ 427.152709][T15025] bridge4: left allmulticast mode [ 427.162770][T15025] bond1: left promiscuous mode [ 427.185761][T15025] veth5: left promiscuous mode [ 427.252018][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 427.277334][ T36] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.288853][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.304415][ T36] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.339430][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.366471][T15020] hsr_slave_0: left promiscuous mode [ 427.375958][T15020] hsr_slave_1: left promiscuous mode [ 427.538937][ T36] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.560618][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.602091][ T36] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.643653][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.862714][T14379] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 427.927729][T15032] tipc: Enabled bearer , priority 0 [ 427.934531][ T6342] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.961561][ T6342] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.984023][ T6342] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.013301][ T6342] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.028410][T14379] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 428.054332][T15033] syzkaller0: entered promiscuous mode [ 428.063894][T15033] syzkaller0: entered allmulticast mode [ 428.100989][T15031] tipc: Resetting bearer [ 428.132539][T15047] sctp_setsockopt_maxburst: 23 callbacks suppressed [ 428.132560][T15047] sctp: [Deprecated]: syz.1.2386 (pid 15047) Use of int in max_burst socket option deprecated. [ 428.132560][T15047] Use struct sctp_assoc_value instead [ 428.170919][T15031] tipc: Disabling bearer [ 428.202181][T14379] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 428.258459][T15050] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 428.303065][T14379] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 428.648386][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.711000][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.762676][T15062] netlink: 'syz.1.2390': attribute type 1 has an invalid length. [ 428.772382][ T754] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.781191][T15062] netlink: 'syz.1.2390': attribute type 2 has an invalid length. [ 428.798211][T15062] netlink: 'syz.1.2390': attribute type 1 has an invalid length. [ 428.839695][T15062] netlink: 'syz.1.2390': attribute type 2 has an invalid length. [ 428.856788][ T6342] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.937242][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 428.947883][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 428.964060][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 428.973547][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 428.986482][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 429.319350][T15091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2396'. [ 429.324876][T15092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2395'. [ 429.353822][T14379] erspan0 (unregistering): left promiscuous mode [ 429.381772][T14379] gretap0 (unregistering): left promiscuous mode [ 429.421607][T14379] bond8 (unregistering): (slave gretap2): Releasing active interface [ 429.430813][T14379] gretap2 (unregistering): left allmulticast mode [ 429.488993][T14379] dvmrp0 (unregistering): left allmulticast mode [ 429.788471][T14379] bond0 (unregistering): left promiscuous mode [ 429.795275][T14379] bond0 (unregistering): Released all slaves [ 429.809950][T14379] bond1 (unregistering): Released all slaves [ 429.825916][T14379] bond2 (unregistering): Released all slaves [ 429.942920][T14379] bond3 (unregistering): Released all slaves [ 430.056788][T14379] bond4 (unregistering): Released all slaves [ 430.080238][T14379] bond5 (unregistering): Released all slaves [ 430.202894][T14379] bond6 (unregistering): Released all slaves [ 430.311226][T14379] bond7 (unregistering): Released all slaves [ 430.430630][T14379] bond8 (unregistering): Released all slaves [ 430.449902][T15079] tipc: Enabled bearer , priority 0 [ 430.487011][T15088] vxcan2: entered promiscuous mode [ 430.661292][T15079] tipc: Disabling bearer [ 430.721346][T14379] tipc: Left network mode [ 430.781286][T14379] IPVS: stopping backup sync thread 7323 ... [ 431.027202][T15112] xt_HMARK: proto mask must be zero with L3 mode [ 431.078343][ T5869] Bluetooth: hci2: command tx timeout [ 431.421983][T15072] lo speed is unknown, defaulting to 1000 [ 431.833046][T15139] netlink: 'syz.4.2407': attribute type 1 has an invalid length. [ 431.844693][T15133] netlink: 'syz.0.2405': attribute type 16 has an invalid length. [ 431.866723][T15133] netlink: 792 bytes leftover after parsing attributes in process `syz.0.2405'. [ 432.011328][T15139] 8021q: adding VLAN 0 to HW filter on device bond10 [ 432.019734][T15142] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 432.038022][T15142] bond10: (slave wlan0): Opening slave failed [ 432.062921][T15140] macvtap2: entered promiscuous mode [ 432.072161][T15140] macvtap2: entered allmulticast mode [ 432.121458][T15144] vlan3: entered allmulticast mode [ 432.127096][T15144] veth1: entered allmulticast mode [ 432.133696][T15144] bond10: (slave vlan3): Opening slave failed [ 432.162201][T15147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2408'. [ 432.173128][T14379] hsr_slave_0: left promiscuous mode [ 432.179925][T14379] hsr_slave_1: left promiscuous mode [ 432.279282][T14379] pim6reg (unregistering): left allmulticast mode [ 432.863008][ T1100] smc: removing ib device syz0 [ 433.162766][ T5869] Bluetooth: hci2: command tx timeout [ 433.294649][T15176] Bluetooth: MGMT ver 1.23 [ 433.541968][T11014] lo speed is unknown, defaulting to 1000 [ 433.558423][T11014] infiniband syz2: ib_query_port failed (-19) [ 434.165591][T15197] netlink: 'syz.4.2418': attribute type 2 has an invalid length. [ 434.276067][T15191] veth0_to_team: entered promiscuous mode [ 434.282123][T15191] veth0_to_team: entered allmulticast mode [ 434.311433][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2418'. [ 434.422811][T15199] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.433624][T15199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 434.494396][T15197] k›*·]‘: entered promiscuous mode [ 434.550282][T15072] chnl_net:caif_netlink_parms(): no params data found [ 435.164249][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2426'. [ 435.176060][T15223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2426'. [ 435.179100][T15234] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 435.220940][T15234] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 435.251314][ T5869] Bluetooth: hci2: command tx timeout [ 435.306063][T15234] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 435.399629][T15244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2430'. [ 435.413354][T15234] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 435.574762][T15234] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 435.644368][T15234] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 435.745197][T15072] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.754013][T15072] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.763312][T15072] bridge_slave_0: entered allmulticast mode [ 435.772102][T15072] bridge_slave_0: entered promiscuous mode [ 435.786200][T15234] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 435.821458][T15234] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 435.851423][T15072] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.864534][T15072] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.877996][T15072] bridge_slave_1: entered allmulticast mode [ 435.886406][T15072] bridge_slave_1: entered promiscuous mode [ 435.905252][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2435'. [ 435.910279][T15262] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2436'. [ 435.938017][T15261] netlink: 'syz.0.2435': attribute type 8 has an invalid length. [ 435.974985][T15234] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 436.028853][T14379] IPVS: stop unused estimator thread 0... [ 436.061913][T15072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.095600][T15072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.198143][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2437'. [ 436.223825][T15271] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 436.315140][T15072] team0: Port device team_slave_0 added [ 436.338116][T15072] team0: Port device team_slave_1 added [ 436.430885][T15279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2440'. [ 436.446017][T15279] sch_fq: defrate 0 ignored. [ 436.498666][T15072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.509404][T15072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.567581][T15072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.602446][T15072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.615932][T15072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.746657][T15072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.915166][T15292] __nla_validate_parse: 1 callbacks suppressed [ 436.915187][T15292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2445'. [ 436.943849][T15072] hsr_slave_0: entered promiscuous mode [ 436.954840][T15072] hsr_slave_1: entered promiscuous mode [ 437.012331][T15293] netlink: 'syz.0.2444': attribute type 5 has an invalid length. [ 437.190160][T15303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2448'. [ 437.199759][T15303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2448'. [ 437.320978][ T5869] Bluetooth: hci2: command tx timeout [ 437.600076][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2452'. [ 437.645473][T15072] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 437.693974][T15072] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 437.713064][T15320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2456'. [ 437.732294][T15072] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 437.773675][T15072] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 437.978828][T15339] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2460'. [ 438.118604][T15344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2461'. [ 438.146283][T15072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.173025][T15072] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.365613][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2463'. [ 438.390962][T15349] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) ! [ 438.462206][T15365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2466'. [ 438.482002][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2466'. [ 438.583316][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.590617][ T6342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.622390][T15355] syzkaller1: entered promiscuous mode [ 438.636918][T15355] syzkaller1: entered allmulticast mode [ 438.646500][T15351] tipc: Enabled bearer , priority 0 [ 438.687541][T15350] tipc: Disabling bearer [ 438.723775][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.731091][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.873481][T15417] tipc: Enabled bearer , priority 0 [ 439.895424][T15417] syzkaller0: entered promiscuous mode [ 439.901288][T15417] syzkaller0: entered allmulticast mode [ 439.914452][T15072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.991341][T15417] tipc: Resetting bearer [ 440.068645][ T5869] block nbd0: Receive control failed (result -32) [ 440.181294][T15415] tipc: Resetting bearer [ 440.256356][T15415] tipc: Disabling bearer [ 440.339538][T15436] macvtap1: entered promiscuous mode [ 440.344927][T15436] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 440.516334][T15448] syz_tun: entered allmulticast mode [ 440.563949][T15448] dvmrp8: entered allmulticast mode [ 440.787984][T15448] netlink: 'syz.0.2485': attribute type 23 has an invalid length. [ 441.083936][T15072] veth0_vlan: entered promiscuous mode [ 441.162618][T15447] syz_tun: left allmulticast mode [ 441.170905][T15479] net_ratelimit: 2 callbacks suppressed [ 441.170925][T15479] openvswitch: netlink: Multiple metadata blocks provided [ 441.184320][T15447] dvmrp8: left allmulticast mode [ 441.233467][T15072] veth1_vlan: entered promiscuous mode [ 441.264291][T15479] gretap2: entered promiscuous mode [ 441.599800][T15072] veth0_macvtap: entered promiscuous mode [ 441.631226][T15072] veth1_macvtap: entered promiscuous mode [ 441.742984][T15072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.827807][T15072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.878782][T15497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.894190][ T6335] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.919474][ T6335] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.941755][ T6335] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.972946][ T6335] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.021147][T15506] erspan0: left promiscuous mode [ 442.062109][T15506] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.094325][T15506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.324474][T15514] __nla_validate_parse: 5 callbacks suppressed [ 442.324495][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2501'. [ 442.411522][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2501'. [ 442.600511][ T6342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.622245][ T6342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.651698][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2503'. [ 442.675837][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.691421][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.698934][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2503'. [ 442.885640][T15522] netlink: 'syz.0.2504': attribute type 2 has an invalid length. [ 442.899645][ T7461] IPVS: starting estimator thread 0... [ 442.998933][T15530] IPVS: using max 28 ests per chain, 67200 per kthread [ 443.054243][T15534] pim6reg1: entered promiscuous mode [ 443.069705][T15534] pim6reg1: entered allmulticast mode [ 443.083952][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2510'. [ 443.146557][T15540] batadv0: entered promiscuous mode [ 443.155293][T15540] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 443.178083][T15540] batadv0: left promiscuous mode [ 443.311477][T15526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.528156][ T6342] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 443.696271][T15561] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2515'. [ 443.956269][T15566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2516'. [ 444.107636][T15573] netlink: 'syz.1.2518': attribute type 10 has an invalid length. [ 444.128768][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2518'. [ 444.436999][T15581] macvtap2: entered promiscuous mode [ 444.442367][T15581] macvtap2: entered allmulticast mode [ 444.512479][T15585] netlink: 'syz.1.2522': attribute type 1 has an invalid length. [ 444.534587][T15585] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.2522'. [ 444.581397][T15585] openvswitch: netlink: Message has 8 unknown bytes. [ 444.621744][T15589] netlink: 'syz.5.2523': attribute type 1 has an invalid length. [ 444.643759][T15589] netlink: 'syz.5.2523': attribute type 1 has an invalid length. [ 444.684792][T15585] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 444.706184][T15598] netlink: 'syz.0.2526': attribute type 1 has an invalid length. [ 444.772143][T15596] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 444.838010][T15608] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2527'. [ 445.048227][T15612] netlink: 'syz.2.2528': attribute type 1 has an invalid length. [ 445.145256][T15612] bond7: entered promiscuous mode [ 445.155528][T15612] 8021q: adding VLAN 0 to HW filter on device bond7 [ 445.164779][T15613] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 445.397805][T15636] bridge0: failed insert local address into bridge forwarding table [ 445.415645][T15632] netlink: 'syz.5.2527': attribute type 6 has an invalid length. [ 446.254587][T15654] macvtap1: entered promiscuous mode [ 446.263000][T15654] macvtap1: entered allmulticast mode [ 446.420887][T15650] netlink: 'syz.1.2536': attribute type 6 has an invalid length. [ 446.555674][T15666] netlink: 'syz.2.2542': attribute type 1 has an invalid length. [ 446.788667][T15677] netlink: ct family unspecified [ 446.794328][T15677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.995588][T15671] batadv0: entered promiscuous mode [ 447.015300][T15671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.260652][T15701] netlink: 'syz.5.2546': attribute type 1 has an invalid length. [ 447.363491][T15685] syz_tun: entered allmulticast mode [ 449.572455][T15680] syz_tun: left allmulticast mode [ 451.384427][T15723] tipc: Enabling of bearer rejected, failed to enable media [ 451.656452][T15746] __nla_validate_parse: 4 callbacks suppressed [ 451.656472][T15746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2558'. [ 451.682781][T15747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2556'. [ 451.695955][T15745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2558'. [ 451.785139][T15746] geneve4: entered promiscuous mode [ 451.812423][T15753] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2560'. [ 452.425218][T15778] openvswitch: netlink: IP tunnel dst address not specified [ 452.471604][T15778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 452.493776][T15775] can: request_module (can-proto-0) failed. [ 452.608518][T15785] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2568'. [ 452.632250][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2568'. [ 452.784608][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2574'. [ 453.059133][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2575'. [ 453.411562][T15830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2580'. [ 453.502497][T15826] syzkaller0: entered promiscuous mode [ 453.515514][T15826] syzkaller0: entered allmulticast mode [ 453.838417][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d3e1000: rx timeout, send abort [ 454.347842][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d3e1000: abort rx timeout. Force session deactivation [ 456.341247][T15875] 8021q: adding VLAN 0 to HW filter on device bond4 [ 456.351173][T15875] bond0: (slave bond4): Enslaving as an active interface with a down link [ 456.632594][T15888] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 456.771076][T15897] netlink: 'syz.4.2599': attribute type 1 has an invalid length. [ 457.282473][T15929] __nla_validate_parse: 4 callbacks suppressed [ 457.282496][T15929] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2606'. [ 457.368135][T15925] vlan2: entered promiscuous mode [ 457.383919][T15925] bridge0: entered promiscuous mode [ 457.723077][T15941] macvtap0: entered promiscuous mode [ 457.742294][T15941] macvtap0: entered allmulticast mode [ 457.836140][T15945] netlink: 'syz.4.2611': attribute type 2 has an invalid length. [ 458.426063][T15964] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2617'. [ 458.742267][T15977] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2619'. [ 458.767226][T15971] netlink: 'syz.2.2618': attribute type 1 has an invalid length. [ 458.775124][T15971] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2618'. [ 458.793275][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2618'. [ 459.067337][T15987] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2623'. [ 459.085269][T15989] sctp: [Deprecated]: syz.5.2624 (pid 15989) Use of int in max_burst socket option deprecated. [ 459.085269][T15989] Use struct sctp_assoc_value instead [ 459.109198][T15987] gretap0: entered promiscuous mode [ 459.204541][T15989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2624'. [ 459.287067][T15997] syzkaller1: entered promiscuous mode [ 459.292611][T15997] syzkaller1: entered allmulticast mode [ 459.304229][T15997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.644958][T16015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2633'. [ 459.865028][T16028] IPVS: fo: TCP 172.20.20.170:0 - no destination available [ 459.895979][T16032] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2639'. [ 460.105309][T16045] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2640'. [ 460.273151][T16045] netlink: 'syz.5.2640': attribute type 4 has an invalid length. [ 460.335849][T16041] netlink: 'syz.5.2640': attribute type 4 has an invalid length. [ 460.625600][T16062] ipvlan2: entered promiscuous mode [ 461.056188][T16076] netlink: 'syz.0.2647': attribute type 1 has an invalid length. [ 461.139573][T16076] 8021q: adding VLAN 0 to HW filter on device bond10 [ 461.543464][ T1100] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.553904][ T1100] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.576038][ T1100] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.599030][ T1100] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.095350][T16125] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 463.150682][T16181] gretap0: entered promiscuous mode [ 463.178186][T16178] __nla_validate_parse: 3 callbacks suppressed [ 463.178206][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2676'. [ 463.201285][T16181] gretap0: left promiscuous mode [ 463.314051][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2676'. [ 463.731508][T16206] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3) [ 464.043998][T16216] tipc: Started in network mode [ 464.049439][T16216] tipc: Node identity f2d774a799c4, cluster identity 4711 [ 464.064827][T16216] tipc: Enabled bearer , priority 0 [ 464.083183][T16216] syzkaller0: entered promiscuous mode [ 464.106702][T16216] syzkaller0: entered allmulticast mode [ 464.131374][T16216] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 464.348150][T16216] caif0: mtu less than device minimum [ 464.376787][T16214] tipc: Resetting bearer [ 464.493426][T16214] tipc: Disabling bearer [ 464.761882][T16236] netlink: 'syz.5.2689': attribute type 13 has an invalid length. [ 464.791156][T16236] netlink: 'syz.5.2689': attribute type 17 has an invalid length. [ 465.363683][T16236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 465.470498][T16259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2693'. [ 465.479959][T16252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2693'. [ 465.524116][T16252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2693'. [ 465.560477][T16256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2693'. [ 465.575133][T16256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2693'. [ 465.708097][T16264] lo speed is unknown, defaulting to 1000 [ 465.728242][T16270] netlink: 'syz.0.2698': attribute type 6 has an invalid length. [ 465.764061][T16264] lo speed is unknown, defaulting to 1000 [ 465.774466][T16264] lo speed is unknown, defaulting to 1000 [ 465.833538][T16264] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 465.904902][T16278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2700'. [ 465.924573][T16278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2700'. [ 465.946457][T16278] netlink: 38 bytes leftover after parsing attributes in process `syz.5.2700'. [ 466.031111][T16264] lo speed is unknown, defaulting to 1000 [ 466.073149][T16264] lo speed is unknown, defaulting to 1000 [ 466.118052][T16264] lo speed is unknown, defaulting to 1000 [ 466.135675][T16264] lo speed is unknown, defaulting to 1000 [ 466.158065][T16264] lo speed is unknown, defaulting to 1000 [ 466.436354][T16294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 466.443726][T16294] IPv6: NLM_F_CREATE should be set when creating new route [ 466.451131][T16294] IPv6: NLM_F_CREATE should be set when creating new route [ 466.691758][T16304] IPVS: length: 163 != 8 [ 466.885873][T16316] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 467.289059][T16332] syzkaller0: left promiscuous mode [ 467.294346][T16332] syzkaller0: left allmulticast mode [ 467.567705][T16348] sctp: [Deprecated]: syz.0.2723 (pid 16348) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.567705][T16348] Use struct sctp_sack_info instead [ 468.445411][T16387] netlink: 'syz.1.2735': attribute type 39 has an invalid length. [ 468.567496][T16392] __nla_validate_parse: 6 callbacks suppressed [ 468.567517][T16392] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2737'. [ 468.618504][T16392] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2737'. [ 468.690929][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2737'. [ 468.731932][T16392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.889177][T16402] netlink: 732 bytes leftover after parsing attributes in process `syz.1.2739'. [ 468.918714][T16402] netlink: 732 bytes leftover after parsing attributes in process `syz.1.2739'. [ 469.151248][ T1100] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.167017][ T5879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 469.176907][ T5879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 469.186109][ T5879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 469.203170][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 469.212665][ T5879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 469.274549][ T1100] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.354936][ T1100] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.409879][T16413] lo speed is unknown, defaulting to 1000 [ 469.448383][T16426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2745'. [ 469.481574][ T1100] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.560222][T16423] lo speed is unknown, defaulting to 1000 [ 469.884899][ T36] netdevsim netdevsim0 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.073824][ T6342] netdevsim netdevsim0 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.100170][ T36] netdevsim netdevsim0 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.163695][ T36] netdevsim netdevsim0 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.258167][ T1100] tipc: Resetting bearer [ 470.768699][ T1100] tipc: Disabling bearer [ 470.823093][T16452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2752'. [ 470.832470][T16452] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2752'. [ 471.237701][ T5879] Bluetooth: hci4: command tx timeout [ 471.541564][ T1100] bond1 (unregistering): Released all slaves [ 471.660474][ T1100] bond2 (unregistering): Released all slaves [ 471.777035][ T1100] bond3 (unregistering): Released all slaves [ 471.892310][ T1100] bond4 (unregistering): Released all slaves [ 472.006362][ T1100] bond5 (unregistering): Released all slaves [ 472.020126][ T1100] bond6 (unregistering): Released all slaves [ 472.035410][ T1100] bond0 (unregistering): Released all slaves [ 472.054215][ T1100] bond7 (unregistering): Released all slaves [ 472.074631][ T1100] bond8 (unregistering): Released all slaves [ 472.089943][ T1100] bond9 (unregistering): Released all slaves [ 472.208300][ T1100] bond10 (unregistering): Released all slaves [ 472.397438][T16413] chnl_net:caif_netlink_parms(): no params data found [ 472.450094][T16469] sctp: [Deprecated]: syz.4.2755 (pid 16469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.450094][T16469] Use struct sctp_sack_info instead [ 472.524316][ T1100] _ÐZ`Ô€@ÿÿ: left promiscuous mode [ 472.776023][ T1100] þ: left promiscuous mode [ 473.040131][T16490] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 473.072901][ T1100] tipc: Disabling bearer [ 473.096974][ T1100] tipc: Left network mode [ 473.173489][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2765'. [ 473.197405][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2765'. [ 473.278550][T16413] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.311080][T16413] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.319122][ T5879] Bluetooth: hci4: command tx timeout [ 473.327240][ T7468] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 473.339169][ T7468] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 473.347584][ T7468] CPU: 0 UID: 0 PID: 7468 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT(full) [ 473.356960][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 473.367031][ T7468] Workqueue: events l2cap_info_timeout [ 473.372513][ T7468] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 473.378503][ T7468] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 50 4f 5a 09 cc 66 66 66 66 66 66 2e [ 473.398197][ T7468] RSP: 0000:ffffc9001d31f7a8 EFLAGS: 00010202 [ 473.404265][ T7468] RAX: dffffc0000000000 RBX: ffffffff895a6dd8 RCX: 772fc6e1f3cdf800 [ 473.412235][ T7468] RDX: 0000000000000000 RSI: ffffffff895a6dd8 RDI: 000000000000004c [ 473.420208][ T7468] RBP: ffffffff8a8417c5 R08: 0000000000000001 R09: 0000000000000000 [ 473.428184][ T7468] R10: dffffc0000000000 R11: ffffffff8a841780 R12: 0000000000000000 [ 473.436174][ T7468] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 473.444167][ T7468] FS: 0000000000000000(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 473.453098][ T7468] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.459678][ T7468] CR2: 00007fcc067b9d70 CR3: 000000006b4b2000 CR4: 00000000003526f0 [ 473.467657][ T7468] Call Trace: [ 473.470933][ T7468] [ 473.473864][ T7468] __kasan_check_byte+0x12/0x40 [ 473.478727][ T7468] lock_acquire+0x8d/0x360 [ 473.483150][ T7468] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.488365][ T7468] ? __cancel_work+0x254/0x2e0 [ 473.493157][ T7468] lock_sock_nested+0x48/0x100 [ 473.497938][ T7468] ? l2cap_sock_ready_cb+0x45/0x140 [ 473.503158][ T7468] l2cap_sock_ready_cb+0x45/0x140 [ 473.508186][ T7468] l2cap_conn_start+0x76d/0xe50 [ 473.513036][ T7468] ? __pfx_l2cap_conn_start+0x10/0x10 [ 473.518404][ T7468] ? __lock_acquire+0xab9/0xd20 [ 473.523257][ T7468] ? __pfx___mutex_lock+0x10/0x10 [ 473.528279][ T7468] ? process_scheduled_works+0x9ef/0x17b0 [ 473.534014][ T7468] l2cap_info_timeout+0x68/0xa0 [ 473.538863][ T7468] ? process_scheduled_works+0x9ef/0x17b0 [ 473.544580][ T7468] process_scheduled_works+0xae1/0x17b0 [ 473.550149][ T7468] ? __pfx_process_scheduled_works+0x10/0x10 [ 473.556157][ T7468] worker_thread+0x8a0/0xda0 [ 473.560772][ T7468] kthread+0x70e/0x8a0 [ 473.564860][ T7468] ? __pfx_worker_thread+0x10/0x10 [ 473.569974][ T7468] ? __pfx_kthread+0x10/0x10 [ 473.574564][ T7468] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.579769][ T7468] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.584962][ T7468] ? __pfx_kthread+0x10/0x10 [ 473.589555][ T7468] ret_from_fork+0x3fc/0x770 [ 473.594147][ T7468] ? __pfx_ret_from_fork+0x10/0x10 [ 473.599255][ T7468] ? __switch_to_asm+0x39/0x70 [ 473.604018][ T7468] ? __switch_to_asm+0x33/0x70 [ 473.608784][ T7468] ? __pfx_kthread+0x10/0x10 [ 473.613474][ T7468] ret_from_fork_asm+0x1a/0x30 [ 473.618301][ T7468] [ 473.621344][ T7468] Modules linked in: [ 473.625736][ T7468] ---[ end trace 0000000000000000 ]--- [ 473.631769][T16413] bridge_slave_0: entered allmulticast mode [ 473.638847][T16413] bridge_slave_0: entered promiscuous mode [ 473.649596][ T7468] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 473.661312][ T7468] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 50 4f 5a 09 cc 66 66 66 66 66 66 2e [ 473.687054][ T7468] RSP: 0000:ffffc9001d31f7a8 EFLAGS: 00010202 [ 473.693283][ T7468] RAX: dffffc0000000000 RBX: ffffffff895a6dd8 RCX: 772fc6e1f3cdf800 [ 473.701383][ T7468] RDX: 0000000000000000 RSI: ffffffff895a6dd8 RDI: 000000000000004c [ 473.701721][T16413] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.721338][T16413] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.733050][ T7468] RBP: ffffffff8a8417c5 R08: 0000000000000001 R09: 0000000000000000 [ 473.743227][T16413] bridge_slave_1: entered allmulticast mode [ 473.751039][T16413] bridge_slave_1: entered promiscuous mode [ 473.765156][ T7468] R10: dffffc0000000000 R11: ffffffff8a841780 R12: 0000000000000000 [ 473.777596][ T7468] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 473.785750][ T7468] FS: 0000000000000000(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 473.795086][T16504] lo speed is unknown, defaulting to 1000 [ 473.803643][ T7468] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.810551][ T7468] CR2: 00005555842c75c8 CR3: 0000000064e08000 CR4: 00000000003526f0 [ 473.818844][ T7468] Kernel panic - not syncing: Fatal exception [ 473.825187][ T7468] Kernel Offset: disabled [ 473.829509][ T7468] Rebooting in 86400 seconds..