last executing test programs: 5.141406315s ago: executing program 0 (id=8497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0xb0, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x5b, 0x8, "d5941a106a2f01329b29e82eb9329fa098b3e68009114808865168edef70c9c5335b55909b27fef8b1492a53a61afb7b1ee1e1d4a892e35f889c7a86f551324b2eea769beee57b2b6618ac83958af1866fe17ec63e39d7"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r5}, 0x14) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000001c0)={r7, 0x1, 0x1, @local}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000780)={r7, 0x1, 0x6, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_vlan\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@private1, 0x0}, &(0x7f00000001c0)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r12, @ANYBLOB="20000100", @ANYRES32=r14, @ANYBLOB="010101007f00000100"/24], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x7, 0x10, 0x10, 0x3, {{0xd, 0x4, 0x0, 0x35, 0x34, 0x64, 0x0, 0x38, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @private=0xa010102, {[@cipso={0x86, 0x1a, 0x1, [{0x6, 0x2}, {0x0, 0xc, "f846a3d7e38f71f2cca7"}, {0x2, 0x6, "1d6823d8"}]}, @generic={0x83, 0x4, "9e9c"}, @noop]}}}}}) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r16, 0x8933, &(0x7f0000000180)) sendmsg$BATADV_CMD_SET_HARDIF(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r17, @ANYBLOB="57352abd7000fedbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x40040) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0xfc, 0x100, 0x0, @mcast2, @loopback, 0x40, 0x0, 0x5, 0x40000000}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x140, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0xffffffffffffff71, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x31fbfe38375fa563}, @ETHTOOL_A_HEADER_FLAGS, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x8480}, 0x40c0) r19 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r19, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x14, 0x7, 0xa, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x10002000}, 0x800) 4.44970237s ago: executing program 0 (id=8504): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x10, 0x0) sendto$llc(r1, &(0x7f0000000200)="08b8cd2e997c36d47bd36e16192ea21b1077a0e533045edcc23a95f65144a0c53e0f4777faa08c0a5db7ac01232bf943efbe7fdd320f0aad502ddfcee7ec16f78830c6b34a0a34eb42726d95f23943528ff4392cd8d58073316b0d28c993b9e81951231f0c46ba8236fa7c425d4c7e6a55751518ed46f0591c3b18dbdd51c02142b8c5c578c2665ab76347e75ceae0f236c9fba573e92310e492063e1934b6e5c1fe1d1e7fb43e00eeb47ab708c6cd0fb4ea97", 0xb3, 0x40, &(0x7f00000002c0)={0x1a, 0x200, 0x9, 0x6, 0x7, 0x8e, @random="f41fec2bcfd9"}, 0x10) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0xfffffffc}}}}}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfff9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES16=r2, @ANYRESOCT=r2], 0xb0}, 0x1, 0x0, 0x0, 0x24040844}, 0x480d1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300)={0x800}, 0x4) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000480)=0x1) recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x8c56}], 0x1, 0x10020, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x8, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r6, &(0x7f00000004c0)}, 0x20) accept$alg(r2, 0x0, 0x0) 4.27753981s ago: executing program 0 (id=8505): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x0, 0x1}, 0x20) sendmmsg$sock(r1, &(0x7f0000001700)=[{{&(0x7f0000000040)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="bdf3a91ca1e4061ba12b15ead612a516259bd90b6f1f8150cda265ccc669a9efa90fc5eed4ac44b7070cbc2bdece119c06e3e4bfa07c595dba89e7a207c16f9ea0c95ca35f447d0301911fef1b8f1d7d0f7ebf1b42f10343d647a62503617476b869f6a927bad459443d4d5f9938c2fd1de439693840d5edabc582eeadb96e086a52968ec9a2b55c2bfbd9965045c496fa6962722ef978ba65e670da9f40695add5a2d08f51da06d6573b2956b5dbe65620c33243df80349e9c07db3aefd3f88d9a84dd68941296be972e890cd722740787eacaa709dd29fd6a40a02b524a8cac1820b64d656d3ba73efd5f2dc5d91b146fa20", 0xf3}], 0x1, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0xffffff90}}, @mark={{0x14, 0x1, 0x24, 0x8000}}], 0x30}}, {{&(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000300)="65c5404b3a80e4d3c3a119190ef367f3c15f80ffabf65f8bf1d32a3b0e8e38f6be65cf2ed58a896a4fca8e5dfc4a5c0e63ba20f78ff267d8e3007cb80ed915a7c58b5552c8c631c698172ae68e38b2bdc7016c1a7bd7e6bf7eb7277d84012b69490f58acb4a5aaed3f2b0bf4f8957df8c128790df6f28d9d33ab73235767f64a5b8f71111432078a87ca07618e3bdbe08f46", 0x92}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="dfd53772b468c4d4", 0x8}, {&(0x7f0000000440)="d98279c755d1bfdefd59d8831190ad07a6c44bfff282ce48122a83ced3c3e43bd67be5c81461f0d65c7735e8868f5d20987cc0f5b58784f460ef7b1721d17b6399ba60f574e9d2c666970b0f01f778e69bdb53ca62ccdd508569e04b4613b280cdd04aca1805e9e5dae2057c3c33202d92e58c9feede91415c6b9d60cf0cb1d7", 0x80}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="e0fe2f2357f58fe8bedd8c69adca50e37aa8e08d64ced6a2e86800b6b426d7906f9879728380a4a3e2c82fac69849a86077c16", 0x33}, {&(0x7f0000001500)="67d63b475e117fabcd3bfc8cf173cb351d41f016ccafbd06a6c1617f84b3e818775e20ce208cc3eff2ccad6f533a557ed3af5fe7fe177ebaa9bf86b0a0c5b48448d646c7369966b29792f8ca7252032d57bbd478dcd7facf22ad64c3e227a4d340707e7e2a2a8a79e962b31864701278539615540e6ca42b5c95d438cb8b5ba4410de2a8dbfef87c94c80deb13ee6c", 0x8f}], 0x7, &(0x7f0000001640)=[@txtime={{0x18, 0x1, 0x3d, 0x82}}, @timestamping={{0x14, 0x1, 0x25, 0x8eea}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x2e9cb884}}], 0x90}}], 0x2, 0x20000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000600)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000001800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x18, 0x140e, 0x0, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008004}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) bind$x25(r0, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x0, 0x1}, 0x20) (async) sendmmsg$sock(r1, &(0x7f0000001700)=[{{&(0x7f0000000040)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="bdf3a91ca1e4061ba12b15ead612a516259bd90b6f1f8150cda265ccc669a9efa90fc5eed4ac44b7070cbc2bdece119c06e3e4bfa07c595dba89e7a207c16f9ea0c95ca35f447d0301911fef1b8f1d7d0f7ebf1b42f10343d647a62503617476b869f6a927bad459443d4d5f9938c2fd1de439693840d5edabc582eeadb96e086a52968ec9a2b55c2bfbd9965045c496fa6962722ef978ba65e670da9f40695add5a2d08f51da06d6573b2956b5dbe65620c33243df80349e9c07db3aefd3f88d9a84dd68941296be972e890cd722740787eacaa709dd29fd6a40a02b524a8cac1820b64d656d3ba73efd5f2dc5d91b146fa20", 0xf3}], 0x1, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0xffffff90}}, @mark={{0x14, 0x1, 0x24, 0x8000}}], 0x30}}, {{&(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000300)="65c5404b3a80e4d3c3a119190ef367f3c15f80ffabf65f8bf1d32a3b0e8e38f6be65cf2ed58a896a4fca8e5dfc4a5c0e63ba20f78ff267d8e3007cb80ed915a7c58b5552c8c631c698172ae68e38b2bdc7016c1a7bd7e6bf7eb7277d84012b69490f58acb4a5aaed3f2b0bf4f8957df8c128790df6f28d9d33ab73235767f64a5b8f71111432078a87ca07618e3bdbe08f46", 0x92}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="dfd53772b468c4d4", 0x8}, {&(0x7f0000000440)="d98279c755d1bfdefd59d8831190ad07a6c44bfff282ce48122a83ced3c3e43bd67be5c81461f0d65c7735e8868f5d20987cc0f5b58784f460ef7b1721d17b6399ba60f574e9d2c666970b0f01f778e69bdb53ca62ccdd508569e04b4613b280cdd04aca1805e9e5dae2057c3c33202d92e58c9feede91415c6b9d60cf0cb1d7", 0x80}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="e0fe2f2357f58fe8bedd8c69adca50e37aa8e08d64ced6a2e86800b6b426d7906f9879728380a4a3e2c82fac69849a86077c16", 0x33}, {&(0x7f0000001500)="67d63b475e117fabcd3bfc8cf173cb351d41f016ccafbd06a6c1617f84b3e818775e20ce208cc3eff2ccad6f533a557ed3af5fe7fe177ebaa9bf86b0a0c5b48448d646c7369966b29792f8ca7252032d57bbd478dcd7facf22ad64c3e227a4d340707e7e2a2a8a79e962b31864701278539615540e6ca42b5c95d438cb8b5ba4410de2a8dbfef87c94c80deb13ee6c", 0x8f}], 0x7, &(0x7f0000001640)=[@txtime={{0x18, 0x1, 0x3d, 0x82}}, @timestamping={{0x14, 0x1, 0x25, 0x8eea}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x2e9cb884}}], 0x90}}], 0x2, 0x20000000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000600)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000001800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x18, 0x140e, 0x0, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008004}, 0x0) (async) 3.977961573s ago: executing program 0 (id=8510): r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000001540)=0x5, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000000)=0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pimreg0\x00', 0x0}) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000300), &(0x7f0000000340)=0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@initdev, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_route(r3, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)=@can_delroute={0x1a0, 0x19, 0x100, 0x70bd2d, 0x25dfdbff, {0x1d, 0x1, 0x4}, [@CGW_CS_XOR={0x8, 0x5, {0x5, 0x4, 0x8, 0x12}}, @CGW_MOD_UID={0x8, 0xe, r6}, @CGW_CS_CRC8={0x11e, 0x6, {0x7d, 0x63, 0x5, 0x7, 0x1, "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", 0x2, "611450a7805005e2ef952a1c78ae269f2f8361c2"}}, @CGW_LIM_HOPS={0x5, 0xd, 0x74}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x0, 0x1}, 0x6, 0x4, 0x0, 0x0, "48a0be8fa1fe742c"}, 0x6}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x0, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "c4e2e295b7744570"}, 0x4}}, @CGW_FILTER={0xc, 0xb, {{0x3}, {0x3, 0x1, 0x1, 0x1}}}, @CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "246c0f7db45d3d81"}, 0x4}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000090}, 0x200000d4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200affd14000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.197765363s ago: executing program 0 (id=8516): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0xf0b, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) sendmmsg$inet(r1, &(0x7f0000002880)=[{{&(0x7f00000003c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000400)="c7d5b00571132d94fed6e76c66798081ab59b224c13a0d075ddb05f54094a7b279c1a16ab925996fdbe1010b9b88b4b04585ed7a3ba2c741f32fe00a35bfaa3f86f3e9d9a6c8cbb30340bd728958608529c1f3c450b2c8a5a5a4dc05685219f823e99c03ab3550197503f08cca5261881db00d98fcb595e286aa2c67a53f91f86cd37eb913bb6ce52e871f3a18d29819f0874ec79dc0eef2c5f3dff25a8eeaf51064338357a7310f85bd55f107941420294be69f09bc", 0xb6}, {&(0x7f00000004c0)="70a421c9f7d1eb15860e6b43aeb6bcd614bc3b8d594703729109d973613c73e6276c33dfc1ee59a3dcc2c1cda5ee3653d9ac5e7cd59b910815", 0x39}, {&(0x7f0000000500)="6c5899fb68b4c13ca0da752a9b4473654c9f3655080299d258687814103cea892f4ab67bf760e35c43daeebc749bd633a433959ddc15c59ce75d25985995103f91acc9e991c53092c96ea15a887d149c3abe389e9a6c6bd770e9e06fb9a98c190960ca32a1aed8f6941658ad919eda832868536afffc7eee8ca090b114f1dc71b4a03b9e12e6eafec1b12bae824f29c8473fdd8c5765ab69901e41da672360938bcf4e128b32cccdfebca4560a26f974facdd51bf2308539d17a787edb9fbb4ded3d2c1c1d53f75f5bfd9bfc7ae15e931809e506fc2cf510", 0xd8}, {&(0x7f0000000600)="c5d9fec1f8b13256ea96f0429095106874a61aa8c07990e09a11a4c586cf27edc0646db9044b179ef8af0dde6a5173655e055628afd326ee6b6786658e95c1a383e2c6a1fc88d8f3ed14c7e9bcb5fa367497c507e4348de44bb422840ee5bd61701a991dce75fcfc6558b77e5f74b9a815a8b9364057446d722f5043a9ecdde6f60c1e22531d0465db0e878356c027b1b520bf1a9f469d5fa1190e14517715c1b160b55f14902fc52f70f53d13963f1952527faa010b237b1da01e8273b371f7b09bfd8bcb8f88330c6c629b6a13d0a434c441ca285f3fd38ecffebc242e83e6", 0xe0}, {&(0x7f0000000700)="76ac3ca0737af8f798d853ca9d611adf4af09e07b3300da91e49c1e31a4b0a13dd1428fa908f3364d234a1c8bfb34392117d649661de09d0091429ae00efc36eb869ae6c55d37903ff5470c53752f3e7c560365b9d5b4ea114727e719db044a55fe542925f5f10884f5d5f81d629914d0a50b244ae08a94f554303b86cc77d71396921a8740bb7e70146fd3e603d32db66c2bcac4fd512b73354fb06c1bda73b92a399f140d627f08ce4836208813b80846ff3545a6ddda759dcbf383bc2f10a4849eafd185702fd6b572b66d2354c", 0xcf}, {&(0x7f0000000800)="4826cda1", 0x4}, {&(0x7f0000000840)="2570bbd873e763be3caed40c0de2d1b04be154cc802db099c58ac726cd79d8390b54f3405ede505ad3892a71753ca8f4503a8631770424529f148f0b727776e52578e47bb253f751ff90daa6c516f7a8dffbec919c9b33db25530586e8f5dece6352e2a227d6a4269d4db3a9ec10d59e08d1cd050a16bce2b33684874803ff3dd1cee94413f1ae35b29d6277baaf450070", 0x91}], 0x7}}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000001840)="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", 0x1000}], 0x1}}], 0x2, 0x4000400) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x146}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x2c1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="620ac4ff0000000071104d000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="182d3fe15c88238b53b6bebfe722e3a1cdfc83b4cbfaab5e99943a2a232a897987815d2481f741", @ANYRES16=r6, @ANYBLOB="010000000000000000000900000004000380"], 0x18}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c2344efdf5838ee37010000", @ANYRES16=r6, @ANYBLOB="000225bd7000fbdbdf250e0000000800060002000000080004000200000008000500ff030000"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0xc010) 2.96622326s ago: executing program 0 (id=8521): syz_emit_ethernet(0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000d4c4a62ea7c49300f05bf049c94ab34ea78ae728c76ffae2cd6b3066a18148afa023073473c7a17496fddf6f50f60b0b52b2f0d4c2ed20ce00204eecd4f6b521b5fd439442244727dfec9ba530aaa046cc"], &(0x7f0000000100)={0x1, 0x1, [0x4ab, 0x7, 0x13f, 0x8e4]}) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x4}, 0x1c) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r3, 0x40085875) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$kcm(0x29, 0x2, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) 2.610448573s ago: executing program 1 (id=8524): syz_emit_ethernet(0x1e, &(0x7f0000001940)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@can={0xc, {{0x0, 0x0, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "5ac0c7d61001e90f"}}}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x14, r1, 0x603}, 0x14}}, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r3, 0x0, 0x0) (async) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3b, 0x0, &(0x7f00000000c0)=0xe00) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x0, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) 2.610078463s ago: executing program 3 (id=8525): r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xffffffffffffffa2, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x24004000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000300)="cebb918f107eed980fd333cd25d7a404024c57bb8abeb31cb71278cd6065fb7922c7a1e5292420de5335686f7a7d2d3e0b58f03d07337e658fb5a452c76ecfb1aab4534bad14bacc42a863be6b1909f87fb473c5e636913b3e3068cac0253309329b6d61c2f784ba2fb8a94448a8abe387e9f5821df10c5976ca6dfa6eb5f09b3d01c053160c65bb807f037f93051453fcb9408576367e5f003569754be231a8ccd7439b09bf8905ce2e4959e870aa", 0xaf}, {&(0x7f00000003c0)="7a3c4bee4e8d7fceccca1a7df0edd34b96e66e1a45991ace79d488316a6c350772b1b163ff14370a835311955931d13538b2cea68094bb2ce3ffe081aa83f225e99b2b8fde1f78ebb7ff890babd827e28193282d423e7c35f6744c2baea53b575a77868da3747da45829e8388cafdda2cda95930b4d0671a9e301d803c1da5fa02897a681966d0c2f139e48bbd66da9a6621f6a5448edef52473300fcf718c1837cacabcc2f152ed3a2be1e9e61d2ac43df874c59d662792cfc81672720f322c38eb53ea082e3d281eb54adb910260b60b1d2d29a1fda15c681a19c0fa4e8b3ae09daa2d3300d16166d0832379058e50d19c58f2bb3693dea1", 0xf9}, {&(0x7f00000004c0)="975ea87e3808c861ca20b6018e56cccadacbb8cc52bd2770a0309df6225d7d4afc56aea92b1781e701f865bab1fe7ee5b09a3eeffd2782e0ab44ee5baf22b9e609c3e401893c76ccb08c5222e2933a9d01e7563339bc3b7fa6d245bf29", 0x5d}, {&(0x7f0000000540)="163712eeeea0609321d94fbd7dc11893664924b0477224c14c23fcc19927329addb51d440d491d5baf7b6ad22b5dcc1102f2317786f8691ddcd9a36d7dc147a82332d67e4c758eca89926cde06e05391be9d2c1da74748b755d1c586ba600385eee96a8280c8b627e15479a05f2f2d11eb94d6d312610f74c95b64a5979832771a9c5b50f41350ab8e30b346ae3088e872a402de85", 0x95}, {&(0x7f0000000600)="f976a93420d1ea8d1bf8ba0116b8d3e92df966fca962d0b367cafa16dffbff4d1bfad95f46d7fe78ad61b5ae4f70af34c917fa0bf091136ee539576efd4224e6a28178693a45039339ad537e75735e013fab7a57d1fb04eb8fd69a289c92fcffd17eba9b7c", 0x65}, {&(0x7f0000000740)="b810e1d17084aa8a0c25a1128a433d7483e983a9d55cbaa62d3ca8c99206f382009c519661f9d524d6832d7f15abbc8bccaeeb56f7dcef9eef6ba74dd20cde7794f4181a13b287483c54c45b6d06cdf3814b14571175a3d00905c86353530c0237faf586952ed4eb2cd2761dafa3989034cc8b382cd9f86bf8496f17d07cb06a2f908ed95c8cca29db991d55df7c23f0def437c171eab994396d25d8badf405759ffbd39a84f4a74574b63e35f01bbd0aa46bdf8fa8a7d7050558b36c4bfd442c299f7320133e5087b5922f71591b2907b0e18c1cb7c9950316b7363250a520dbc707437", 0xe4}], 0x6, &(0x7f0000000b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc0}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@noop, @end, @generic={0x89, 0x10, "f10278dea5f949627603d42cd9ab"}, @generic={0x83, 0xf, "5e1ffe407d3e1969051e85dd21"}, @end, @end, @ssrr={0x89, 0x3, 0xf2}, @timestamp_addr={0x44, 0x2c, 0x71, 0x1, 0x4, [{@private=0xa010101, 0xfffffffd}, {@broadcast}, {@empty, 0xf}, {@multicast2, 0x800}, {@rand_addr=0x64010102, 0x6fa}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @private=0xa010100}}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@rr={0x7, 0x7, 0xa3, [@loopback]}, @cipso={0x86, 0x24, 0x0, [{0x1, 0xd, "265cceab08788ed08811d4"}, {0x0, 0x3, "bf"}, {0x5, 0x6, "b6266484"}, {0x6, 0x8, "c1ef72604bda"}]}, @timestamp_prespec={0x44, 0x34, 0x16, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}}, {@empty, 0x7f}, {@local, 0x100000}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x1ff}, {@multicast2, 0x1}, {@broadcast, 0x9}]}, @timestamp_addr={0x44, 0x2c, 0x4c, 0x1, 0x0, [{@empty, 0x2ab}, {@rand_addr=0x64010101, 0x7}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x8}, {@rand_addr=0x64010102, 0x2}]}, @lsrr={0x83, 0x13, 0xef, [@loopback, @empty, @broadcast, @multicast1]}, @generic={0x0, 0x5, "5f0097"}, @ssrr={0x89, 0x1b, 0xb9, [@private=0xa010101, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010102, @rand_addr=0x64010101, @empty]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffff9d}}], 0x1a8}}, {{&(0x7f0000000cc0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000d00)="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", 0xfd}, {&(0x7f0000000e00)="86f880e26da5dab375d288c82b0f09e6726af240a787c10f75ac756f631926dd57006cdf43ad92b439154317a298b52362d7893b9b31f28fd72963afb5014fa3b61b427bd0ceaff5bcd575da4e05487845a8eee701cd83caed4bb8270269c282b652bd33bd48742fb29a", 0x6a}], 0x2, &(0x7f0000000ec0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14}}], 0x48}}], 0x2, 0x41) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="d2702abd7001fbdbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="0a0018000303030303030000"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r9, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f7ff00006800010900"/24], 0x18}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071129400000000009548e59eac1e52445deffcdedd5616269b15e1e6cd038f74f13a54185cd27c84b734de6b410a11b52cffb161c42d580a97b1335f0d72e16a219dbd5943ea25b2e210765390b22f7f65c0d6df819a79e7b3cc9fe285a95d7e30d1b9f5b4d12f4745d924a59f65d57469b32f5303c3fd0a0bbd66b6b03abc7f3dd34114d2a05316f326473d09840c0a8c39c60b1ecd6bf397114047caa3463b9b7e74f018ad3bbe808844f5ce08b2a4286e666b7b73017ec7996b11bf9cf481b6"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.531927543s ago: executing program 3 (id=8527): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x20000010) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/5, 0x5}, {&(0x7f0000000640)=""/150, 0x96}, {&(0x7f00000029c0)=""/4096, 0x1000}], 0x4, &(0x7f0000003a00)=[@cred={{0x1c}}], 0x20}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)={r3}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) connect$inet(r10, &(0x7f0000000000)={0x2, 0x3, @rand_addr=0x64010102}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000b00)={&(0x7f0000000280), 0xc, &(0x7f0000000ac0)={&(0x7f0000000800)={0x288, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3c08}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40c5d6f2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x180}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc5f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x96}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1c27}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x822}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc851}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x647d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x65}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9209}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x841}, 0x20040820) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f00000001c0)=r2) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200affd14000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.447544621s ago: executing program 1 (id=8528): unshare(0x22020400) r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x6e02a6c3770c3083) r1 = socket(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) close(r1) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r4, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x79}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, 0x0, &(0x7f0000000240)=0x8) 2.386189691s ago: executing program 4 (id=8529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x3ffe, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x9}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)={[{0x2d, 'hugetlb'}]}, 0x9) 2.136778331s ago: executing program 2 (id=8530): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000740)='^', 0x1, 0x40000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @broadcast}, &(0x7f0000000100)=0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.043828633s ago: executing program 1 (id=8531): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b0", 0x39}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84) clock_gettime(0x0, &(0x7f0000002cc0)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000002c80)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000002c00)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002a80)=""/201, 0xc9}, {&(0x7f0000002b80)=""/76, 0x4c}], 0x5}}], 0x1, 0x40010160, &(0x7f0000002d00)={r2, r3+60000000}) 1.918326084s ago: executing program 3 (id=8532): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r8) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r1, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r10, 0x4) syz_emit_ethernet(0x75, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {"c8fd75a55cea55431a0df064535453f7c0b9376f3fa20800d19af9e68bd0c75e46b1c0d4c5a14e8ce3e28fd739913a5d1064c377167a00e7dc89bd8f93290b"}}}}}}, 0x0) 1.915845297s ago: executing program 4 (id=8533): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r3, 0x3a, 0x1, 0x0, 0x20000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) recvmsg(0xffffffffffffffff, 0x0, 0x40000020) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x20}}, 0x8080) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r5, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r7], 0x34}}, 0x4008000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 1.892887158s ago: executing program 1 (id=8534): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002006362632861657329"], 0x184}}, 0x0) 1.875811006s ago: executing program 2 (id=8535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={0x40, r2, 0x205, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:vmware_device_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0xffffffffffffffc5, 0x7, 0x1, 0x0, 'U'}]}], {0x14}}, 0x84}}, 0x0) 1.649786174s ago: executing program 3 (id=8536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.628288035s ago: executing program 2 (id=8537): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) 1.529811091s ago: executing program 4 (id=8538): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000380)) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x8, 0x8}) 1.386302954s ago: executing program 3 (id=8539): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x3, 0x88) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x100000002, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, 0xa, @in=@empty, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000020, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000003c0)='wlan1\x00') connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) sendmsg$key(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000400)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x3, 0x0, @remote}}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x0, 0x1, @mcast2}}]}, 0xa0}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x2, 0x18}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xa, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x86}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ffffffe}}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) 1.38551926s ago: executing program 2 (id=8540): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000002240)="b9ffddc10000000000000008888edfcef60cff24fc8342f03e00000022a052408cc3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 51) 1.385178977s ago: executing program 4 (id=8541): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000007600000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000007600000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 803.440999ms ago: executing program 1 (id=8542): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f00000000c0)) (async) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f00000000c0)) recvmmsg(r1, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x4e55}], 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) 753.303885ms ago: executing program 4 (id=8543): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x10, &(0x7f0000000380), 0x0, 0x0, 0xc1, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000200000042abd7000fbdbdf250a00100e800000070800000014000200fe880000000000a104000000000000000114000200"/69], 0x44}, 0x1, 0x0, 0x0, 0x20048090}, 0x40) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x28) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000006c0)={&(0x7f00000002c0)="af410f8fa29df07ece4d7a5cc930a715f867524e171fe066697196a8d1e98018686bfa43262090d1072a06ceb9574f01587d3a12ff0509d01ddf4936bfba0ee5e0d54011d14fc7b54f9b1a5c468a58626bd49fb4a90692aa730fc93967d5666d875b8e08e68b8ceb5571430ce9ddc9f7191017dbcbea50fd792a41c9de3e658fb9edc5ce27e97473a4c6f3eecd0dfd2bbd5d89279fe7", &(0x7f00000003c0)=""/99, &(0x7f0000000580)="f94a7ea7f1e48e2ecd35eb65fa4e84f283f76f5afe61c6e278a5c51b3d53b727014ae1161eaef7a27582e8607f399e95645d91f7cc457181a07e8649c2501f99fc01690cd003e13d55f09ac88c4cef44f73d7b786dce27d6cb35311b8150387aae28790f5e74deb176227b14a27c5f89e10db10127dce2538dc56615f75c36a73de623a688b4f954bc5ea94aea734221d428911a89d328d808b0fcd64cae5a5a8b5de98fc235", &(0x7f0000000640)="cf9b8d371490caf7f10dac0ba644e48214df84e2b0edc586c3eeaaf8aaa3f96818ea0bf611598cc73d1929e5f3c4db578f0e958e65402e6b3816b9be2844b897f494d953474f4cbdaa127d802e9dbc0b40d7240703be719d487bbe1f", 0x2262763, r0, 0x4}, 0x38) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101880, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='.\x00', 0x0, 0x4000, r5}, 0x18) close(r2) 658.391509ms ago: executing program 2 (id=8544): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x44, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}}, 0x20}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) 365.886735ms ago: executing program 2 (id=8545): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x401, 0x8, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x840}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x5, 0x0, 0x7, 0x3ff}}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x4, 0xa, 0x8, 'syz0\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x21, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1000}, 0x1c) 317.603751ms ago: executing program 1 (id=8546): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x0, 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x60}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2c0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r1, @ANYRES32=r4], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000008500000056000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)={0x8c, r10, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:sysfs_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000180)={0x27}, 0x6) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(r11, 0x0, 0x29, 0x0, 0x3757f80800a7abc5) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 73.38313ms ago: executing program 3 (id=8547): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x20, 0x8c, 0x10, 0xf, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8, 0x40, 0x5, 0x1}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pK \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7ff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0xfffffffa, 0xfc, &(0x7f0000000180)=""/252, 0x41100, 0x0, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000380)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x7, 0xffffff75}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[r3, r4, r6], &(0x7f0000000600)=[{0x5, 0x4, 0xb, 0x5}, {0x1, 0x2, 0x7, 0x3d269cb714be1d14}, {0x4, 0x3, 0xe, 0x11}, {0x1, 0x3, 0x1}, {0x5, 0x4, 0x0, 0x3}, {0x1, 0x3, 0xe, 0x4}], 0x10, 0xffff6bfc}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040000) r8 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000780)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80800) sendto(r8, &(0x7f00000007c0)="de767aaf4083691a6047dab51cd5fef94b327352aba673916486b4f4ddab83513c8271f379cfaf939d803c14029965168e3a1326bf29ed542f51b59dd017f86fe45b5ef70cb7d53f9051c900792d4fe9fb9ab0ab98f56cabdc1d535d9466", 0x5e, 0x4040, &(0x7f0000000840)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80) 0s ago: executing program 4 (id=8548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000100001000000000000000000000000fc37000000160a01080000000000000000020000000900020073797a32000000000900010073797a30000000000c0003800800024000000000140000001100010000000000000000000000000a0542d930b22498dac28a4f29b9d76b79eb6518541db815cb16c5fe9c4320cad5340b478c9d0b06a41453aaa53adad21694de322c20eca657644101060cea7519fe89ca75a440a5f164890c465522e95ec044d54fd794df7d5b82e3afe55ea905bc02992b"], 0x60}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYRES64], 0x390) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) (async) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000020905000000000000000000000000003c0202002c00018014000300fcff000000000000000000000069000014000400aa0c0002800500010000000000"], 0x50}}, 0x0) kernel console output (not intermixed with test programs): ve interface with an up link [ 822.271006][T29979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6527'. [ 822.281865][T29979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6527'. [ 822.295327][T29979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6527'. [ 822.320363][T29986] netlink: 'syz.3.6528': attribute type 21 has an invalid length. [ 822.340402][T29977] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 822.363446][T29977] bond2: (slave lo): Enslaving as an active interface with an up link [ 822.381050][T29977] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 822.401029][T29986] netlink: 'syz.3.6528': attribute type 6 has an invalid length. [ 822.426783][T29986] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6528'. [ 822.448137][T19165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.476705][T19165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.631688][ T3387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.650659][ T3387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.776130][ T5623] Bluetooth: hci2: command 0x0419 tx timeout [ 822.898254][T30010] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6533'. [ 823.079384][T30018] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6537'. [ 823.561341][T20651] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 823.580217][T20651] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 823.588854][T20651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 823.603730][T20651] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 823.616014][T20651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 824.067948][T30060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.356352][T30066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6548'. [ 824.713685][T30080] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 824.814543][T30034] lo speed is unknown, defaulting to 1000 [ 824.830490][T30034] lo speed is unknown, defaulting to 1000 [ 825.172786][T30034] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.183859][T30034] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.193328][T30034] bridge_slave_0: entered allmulticast mode [ 825.200569][T30034] bridge_slave_0: entered promiscuous mode [ 825.209696][T30034] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.217015][T30034] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.224529][T30034] bridge_slave_1: entered allmulticast mode [ 825.231677][T30034] bridge_slave_1: entered promiscuous mode [ 825.258955][T30034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.270318][T30034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.301642][T30034] team0: Port device team_slave_0 added [ 825.309313][T30034] team0: Port device team_slave_1 added [ 825.333028][T30034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.340525][T30034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.366886][T30034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.379572][T30034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.388089][T30034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.414126][T30034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.461213][T30034] hsr_slave_0: entered promiscuous mode [ 825.467945][T30034] hsr_slave_1: entered promiscuous mode [ 825.474008][T30034] debugfs: 'hsr0' already exists in 'hsr' [ 825.479887][T30034] Cannot create hsr debugfs directory [ 825.616955][T30034] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.627205][T30034] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 825.637068][T30034] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.655803][ T5623] Bluetooth: hci3: command tx timeout [ 825.715048][T30034] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.725295][T30034] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 825.737023][T30034] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.811610][T30034] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.824971][T30034] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 825.836974][T30034] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.922614][T30034] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.932546][T30034] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 825.942662][T30034] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.572070][T30038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 826.605237][T30034] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 826.706709][T30034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 826.744220][T30034] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 826.831750][T30034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 826.864324][T30034] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 826.914063][T30106] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6557'. [ 826.914620][T30034] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 827.009872][T30034] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 827.055433][T30034] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 827.192544][T30123] syzkaller0: entered promiscuous mode [ 827.203453][T30123] syzkaller0: entered allmulticast mode [ 827.480854][T30034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.515720][T30139] syzkaller1: entered promiscuous mode [ 827.536955][T30139] syzkaller1: entered allmulticast mode [ 827.618166][T30034] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.738048][ T5623] Bluetooth: hci3: command tx timeout [ 827.779776][T10337] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.786975][T10337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.846881][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.854110][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.107796][T30161] netlink: 294 bytes leftover after parsing attributes in process `syz.2.6568'. [ 828.123704][T30161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.888385][T30184] IPv6: Can't replace route, no match found [ 828.920980][T30034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.019404][T30034] veth0_vlan: entered promiscuous mode [ 829.037094][T30191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6576'. [ 829.042933][T30034] veth1_vlan: entered promiscuous mode [ 829.120766][T30034] veth0_macvtap: entered promiscuous mode [ 829.149834][T30034] veth1_macvtap: entered promiscuous mode [ 829.192535][T30034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.217415][T30034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.243572][ T3387] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.253334][ T3387] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.265399][ T3387] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.293609][ T3387] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.494560][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.525010][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.617853][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.638699][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.791086][T30202] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6580'. [ 829.816108][ T5623] Bluetooth: hci3: command tx timeout [ 830.480974][T30234] netlink: 'syz.4.6585': attribute type 1 has an invalid length. [ 830.500898][T30234] netlink: 'syz.4.6585': attribute type 1 has an invalid length. [ 830.732000][T30244] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6590'. [ 830.830515][T30246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6591'. [ 830.840447][T30246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6591'. [ 830.853708][T30246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6591'. [ 831.099363][T30261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6594'. [ 831.232316][T30267] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6597'. [ 831.532906][T30275] can: request_module (can-proto-3) failed. [ 831.665232][T30285] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 831.896709][ T5623] Bluetooth: hci3: command tx timeout [ 831.984000][T30314] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6608'. [ 831.989596][T30301] bridge1: entered promiscuous mode [ 831.994660][T30314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6608'. [ 832.007631][T30301] bridge1: entered allmulticast mode [ 832.201877][T30325] bond0: entered promiscuous mode [ 832.236511][T30325] bond_slave_0: entered promiscuous mode [ 832.268895][T30325] bond_slave_1: entered promiscuous mode [ 832.326734][T30342] ipt_ECN: cannot use operation on non-tcp rule [ 832.474661][T30347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6618'. [ 832.519945][T30351] block nbd0: reconnected socket [ 832.578214][ T5623] block nbd0: Receive control failed (result -32) [ 832.696628][T30370] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 832.712202][T30371] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 832.745212][T30373] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 832.918429][T30382] macvlan0: entered promiscuous mode [ 832.987118][T30386] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20001 [ 833.393664][T30403] netlink: 'syz.0.6632': attribute type 58 has an invalid length. [ 833.403371][T30403] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6632'. [ 833.499945][T30413] xt_hashlimit: overflow, rate too high: 0 [ 833.661816][T30422] netlink: 'syz.2.6636': attribute type 1 has an invalid length. [ 833.831963][T30427] netlink: 'syz.0.6638': attribute type 1 has an invalid length. [ 833.995149][T30427] 8021q: adding VLAN 0 to HW filter on device bond1 [ 834.148056][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 834.379866][T30419] lo speed is unknown, defaulting to 1000 [ 834.419371][T30449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 834.450686][T30419] lo speed is unknown, defaulting to 1000 [ 834.571767][T30429] bond1: option mode: unable to set because the bond device is up [ 834.761995][T30462] netlink: 'syz.2.6643': attribute type 1 has an invalid length. [ 834.798470][T30462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6643'. [ 835.243549][T30479] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6646'. [ 836.387142][T30518] netlink: 'syz.1.6654': attribute type 1 has an invalid length. [ 836.422543][T30518] netlink: 'syz.1.6654': attribute type 2 has an invalid length. [ 836.443196][T30518] netlink: 'syz.1.6654': attribute type 1 has an invalid length. [ 836.790592][T30528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6656'. [ 836.887436][T30528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6656'. [ 837.190765][T30548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6661'. [ 837.300953][T30553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6663'. [ 837.310763][T30548] IPVS: persistence engine module ip_vs_pe_ not found [ 837.335576][ T29] audit: type=1107 audit(1777292462.345:9): pid=30551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 837.514854][T30566] netlink: 'syz.3.6665': attribute type 1 has an invalid length. [ 837.627010][T30566] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6665'. [ 837.669504][T30566] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6665'. [ 837.712190][T30577] netlink: 'syz.4.6667': attribute type 1 has an invalid length. [ 837.727757][T30566] netlink: 'syz.3.6665': attribute type 1 has an invalid length. [ 837.783371][T30566] netlink: 'syz.3.6665': attribute type 8 has an invalid length. [ 837.811913][T30566] netlink: 606 bytes leftover after parsing attributes in process `syz.3.6665'. [ 837.868008][T30577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 837.958620][T30588] bond1: (slave geneve2): making interface the new active one [ 837.969715][T30588] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 838.061747][T10338] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 838.099675][T10338] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 838.185176][T30603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6673'. [ 838.222021][T10338] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 838.231270][T10338] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 838.242062][T30609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6673'. [ 838.286040][T30603] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 838.325416][T30603] gretap0: entered promiscuous mode [ 838.368705][T30603] debugfs: 'hsr1' already exists in 'hsr' [ 838.395942][T30603] Cannot create hsr debugfs directory [ 838.416079][T30603] hsr1: entered promiscuous mode [ 838.484716][T30617] sctp: [Deprecated]: syz.1.6675 (pid 30617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 838.484716][T30617] Use struct sctp_sack_info instead [ 838.580312][T30620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6676'. [ 838.652303][T30622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6676'. [ 838.720636][T30630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6677'. [ 838.775271][T30633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.821099][T30620] bond5: entered promiscuous mode [ 838.847329][T30620] 8021q: adding VLAN 0 to HW filter on device bond5 [ 839.287225][T30652] macvlan0: entered promiscuous mode [ 839.789909][T30680] sctp: [Deprecated]: syz.2.6688 (pid 30680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 839.789909][T30680] Use struct sctp_sack_info instead [ 839.851744][T30686] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 839.884211][T30680] IPVS: set_ctl: invalid protocol: 136 100.1.1.0:20001 [ 840.147854][T30694] Bluetooth: MGMT ver 1.23 [ 840.371497][T30704] tipc: Started in network mode [ 840.388093][T30704] tipc: Node identity ac14140f, cluster identity 4711 [ 840.413752][T30704] tipc: Enabled bearer , priority 10 [ 840.448438][T30697] tipc: Started in network mode [ 840.462921][T30697] tipc: Node identity 5a954fc74ba4, cluster identity 4711 [ 840.491340][T30697] tipc: Enabled bearer , priority 0 [ 840.529183][T30696] tipc: Disabling bearer [ 840.650654][T30734] netlink: 'syz.1.6695': attribute type 5 has an invalid length. [ 841.139928][T30757] netlink: 'syz.1.6707': attribute type 1 has an invalid length. [ 841.516214][ T1038] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.553457][ T42] tipc: Node number set to 2886997007 [ 841.762999][T30784] Cannot find add_set index 3 as target [ 842.624806][T30828] IPv6: NLM_F_CREATE should be specified when creating new route [ 842.667329][T30838] __nla_validate_parse: 10 callbacks suppressed [ 842.667346][T30838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6723'. [ 842.731620][T30838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6723'. [ 842.824344][T30847] tipc: New replicast peer: 172.20.20.187 [ 842.839049][T30847] tipc: Enabled bearer , priority 10 [ 843.024724][T30857] netlink: 'syz.2.6728': attribute type 3 has an invalid length. [ 843.143574][T30863] xt_socket: unknown flags 0x50 [ 843.370779][T30882] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6735'. [ 843.412905][T30879] xt_hashlimit: size too large, truncated to 1048576 [ 843.421296][T30885] syz_tun: entered allmulticast mode [ 843.513067][T30885] syz_tun: left allmulticast mode [ 843.935442][T30912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6741'. [ 843.955752][T29047] tipc: Node number set to 288444359 [ 844.310567][T30929] sctp: [Deprecated]: syz.3.6744 (pid 30929) Use of int in max_burst socket option. [ 844.310567][T30929] Use struct sctp_assoc_value instead [ 844.459149][T30935] FAULT_INJECTION: forcing a failure. [ 844.459149][T30935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.502355][T30935] CPU: 1 UID: 0 PID: 30935 Comm: syz.4.6746 Not tainted syzkaller #0 PREEMPT(full) [ 844.502380][T30935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 844.502391][T30935] Call Trace: [ 844.502398][T30935] [ 844.502405][T30935] dump_stack_lvl+0xe8/0x150 [ 844.502433][T30935] should_fail_ex+0x412/0x560 [ 844.502460][T30935] _copy_from_user+0x2d/0xb0 [ 844.502486][T30935] ___sys_recvmsg+0x175/0x590 [ 844.502515][T30935] ? __pfx____sys_recvmsg+0x10/0x10 [ 844.502542][T30935] ? __fget_files+0x2a/0x420 [ 844.502580][T30935] ? __fget_files+0x3a0/0x420 [ 844.502610][T30935] do_recvmmsg+0x334/0x800 [ 844.502642][T30935] ? __pfx_do_recvmmsg+0x10/0x10 [ 844.502676][T30935] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 844.502713][T30935] __x64_sys_recvmmsg+0x198/0x250 [ 844.502739][T30935] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 844.502771][T30935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.502791][T30935] do_syscall_64+0x15f/0xf80 [ 844.502812][T30935] ? clear_bhb_loop+0x40/0x90 [ 844.502834][T30935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.502852][T30935] RIP: 0033:0x7ff20499cdd9 [ 844.502868][T30935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.502884][T30935] RSP: 002b:00007ff2057f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 844.502903][T30935] RAX: ffffffffffffffda RBX: 00007ff204c15fa0 RCX: 00007ff20499cdd9 [ 844.502917][T30935] RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000009 [ 844.502928][T30935] RBP: 00007ff2057f6090 R08: 0000000000000000 R09: 0000000000000000 [ 844.502939][T30935] R10: 0000000040002320 R11: 0000000000000246 R12: 0000000000000001 [ 844.502950][T30935] R13: 00007ff204c16038 R14: 00007ff204c15fa0 R15: 00007fff57eee098 [ 844.502980][T30935] [ 844.872193][T30944] IPVS: set_ctl: invalid protocol: 44 172.20.20.62:20000 [ 844.881345][T30944] xt_nat: multiple ranges no longer supported [ 844.922045][T30946] netlink: 'syz.4.6750': attribute type 1 has an invalid length. [ 845.065036][T30957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6752'. [ 845.218796][T30962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6753'. [ 845.249198][T30965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6754'. [ 845.286218][ T5719] IPVS: starting estimator thread 0... [ 845.300333][T30971] sctp: [Deprecated]: syz.2.6755 (pid 30971) Use of int in maxseg socket option. [ 845.300333][T30971] Use struct sctp_assoc_value instead [ 845.344853][T30973] sctp: [Deprecated]: syz.2.6755 (pid 30973) Use of int in maxseg socket option. [ 845.344853][T30973] Use struct sctp_assoc_value instead [ 845.387160][T30970] IPVS: using max 30 ests per chain, 72000 per kthread [ 845.518522][T30976] rdma_rxe: Failed to create IPv4 UDP tunnel [ 845.562664][T30980] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 845.584501][T30981] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 845.613510][T30987] macvlan0: entered promiscuous mode [ 845.629892][T30981] syzkaller0: entered promiscuous mode [ 845.642029][T30981] syzkaller0: entered allmulticast mode [ 845.694911][T30981] tipc: Started in network mode [ 845.709016][T30981] tipc: Node identity 5680ba09c4fa, cluster identity 4711 [ 845.778605][T30981] tipc: Enabled bearer , priority 0 [ 845.962390][T31005] sctp: [Deprecated]: syz.3.6766 (pid 31005) Use of int in max_burst socket option deprecated. [ 845.962390][T31005] Use struct sctp_assoc_value instead [ 846.010281][T31009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6767'. [ 846.068207][T31009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6767'. [ 846.139277][T31014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6768'. [ 846.342537][T31019] netlink: 'syz.2.6769': attribute type 61 has an invalid length. [ 846.357501][T30979] tipc: Resetting bearer [ 846.421986][T30979] tipc: Disabling bearer [ 846.641395][T31036] xt_CT: You must specify a L4 protocol and not use inversions on it [ 846.694262][T31036] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 846.743391][T31041] macvlan0: entered promiscuous mode [ 847.788444][T31094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.798800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.041754][T31106] bond0: entered promiscuous mode [ 848.052597][T31106] bond_slave_0: entered promiscuous mode [ 848.087577][T31106] bond_slave_1: entered promiscuous mode [ 848.133930][T31106] batadv0: entered promiscuous mode [ 848.141272][T29047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.173179][T31106] debugfs: 'hsr1' already exists in 'hsr' [ 848.202650][T31106] Cannot create hsr debugfs directory [ 848.231251][T31106] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 848.278541][T31122] __nla_validate_parse: 3 callbacks suppressed [ 848.278559][T31122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6794'. [ 848.324456][T31106] bond0: left promiscuous mode [ 848.361648][T31106] bond_slave_0: left promiscuous mode [ 848.419248][T31106] bond_slave_1: left promiscuous mode [ 848.477788][T31106] batadv0: left promiscuous mode [ 848.489067][T31123] netlink: 'syz.3.6795': attribute type 1 has an invalid length. [ 848.535313][T31123] netlink: 280 bytes leftover after parsing attributes in process `syz.3.6795'. [ 848.554228][T31127] netlink: 'syz.3.6795': attribute type 1 has an invalid length. [ 848.604654][T31118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6794'. [ 848.611012][T31123] tipc: Started in network mode [ 848.635489][T31123] tipc: Node identity ac141441, cluster identity 4711 [ 848.653270][T31123] tipc: Enabling of bearer rejected, failed to enable media [ 848.824346][T31140] syz_tun: refused to change device tx_queue_len [ 848.916825][T31144] netlink: 'syz.3.6800': attribute type 1 has an invalid length. [ 849.050627][T31144] 8021q: adding VLAN 0 to HW filter on device bond3 [ 849.149492][T31148] bond3: (slave geneve3): making interface the new active one [ 849.176546][T16273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.202053][T31148] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 849.427982][T31174] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6807'. [ 849.471362][T31174] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 849.555899][T31174] syzkaller1: entered promiscuous mode [ 849.583280][T31174] syzkaller1: entered allmulticast mode [ 849.638113][T31182] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6810'. [ 849.722971][T31188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6810'. [ 849.816557][T17931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.944127][T31198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6813'. [ 850.185141][T31210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6816'. [ 850.216824][T29047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.334456][T31222] vlan2: entered promiscuous mode [ 850.453533][T31232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6823'. [ 850.608610][T31246] netlink: 'syz.1.6826': attribute type 29 has an invalid length. [ 850.647798][T31246] netlink: 'syz.1.6826': attribute type 29 has an invalid length. [ 850.709747][T31251] netlink: 'syz.1.6826': attribute type 29 has an invalid length. [ 850.769727][T31251] netlink: 'syz.1.6826': attribute type 29 has an invalid length. [ 850.826623][T31251] netlink: 'syz.1.6826': attribute type 29 has an invalid length. [ 850.852385][T31251] netlink: 'syz.1.6826': attribute type 29 has an invalid length. [ 850.891039][T31251] netlink: 'syz.1.6826': attribute type 29 has an invalid length. [ 851.258888][T16273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.340544][T31283] xt_hashlimit: size too large, truncated to 1048576 [ 851.397904][T31287] : renamed from vxcan1 (while UP) [ 851.415565][T31290] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6841'. [ 851.419724][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.471319][T31287] xt_hl: Unknown TTL match mode: 255 [ 852.072313][T17931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.309213][T16273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.588083][T31349] bond3: entered promiscuous mode [ 852.594187][T31349] 8021q: adding VLAN 0 to HW filter on device bond3 [ 852.787763][T31349] bond3: (slave bridge3): making interface the new active one [ 852.827366][T31349] bridge3: entered promiscuous mode [ 852.851856][T31349] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 852.872847][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.337560][T16273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.478248][T31382] __nla_validate_parse: 10 callbacks suppressed [ 853.478266][T31382] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.6867'. [ 853.545114][T31384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6869'. [ 853.546572][T31382] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 853.584598][ T5719] IPVS: starting estimator thread 0... [ 853.608256][T31390] openvswitch: netlink: IP tunnel dst address not specified [ 853.618024][T31384] hsr_slave_0 (unregistering): left promiscuous mode [ 853.629236][T31386] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.6869'. [ 853.651978][T31394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6870'. [ 853.690129][T31396] validate_nla: 1 callbacks suppressed [ 853.690145][T31396] netlink: 'syz.2.6872': attribute type 29 has an invalid length. [ 853.706832][T31392] IPVS: using max 26 ests per chain, 62400 per kthread [ 853.767046][T31386] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 853.971553][T31409] IPv6: sit1: Disabled Multicast RS [ 854.011934][T31409] sit1: entered allmulticast mode [ 854.159966][T31419] syzkaller1: entered promiscuous mode [ 854.192576][T31419] syzkaller1: entered allmulticast mode [ 854.249442][T31426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6880'. [ 854.370142][T31434] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6883'. [ 854.379711][T31434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6883'. [ 854.379751][T16273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.513180][T31402] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 854.646258][T31445] openvswitch: netlink: IP tunnel dst address not specified [ 854.684571][T31447] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 854.979228][T31464] netlink: 'syz.1.6893': attribute type 1 has an invalid length. [ 855.109760][T31464] 8021q: adding VLAN 0 to HW filter on device bond6 [ 855.171234][T31473] bond6: (slave geneve2): making interface the new active one [ 855.230336][T31473] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 855.257416][T31467] vlan2: entered allmulticast mode [ 855.262925][T31467] bond6: entered allmulticast mode [ 855.274911][T31467] geneve2: entered allmulticast mode [ 855.401859][T31481] netlink: 'syz.3.6897': attribute type 1 has an invalid length. [ 855.416920][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.425154][T31481] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6897'. [ 855.450005][T31449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6889'. [ 855.663438][T31492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6901'. [ 855.898872][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.985196][T31510] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20002 [ 856.057467][T31517] Unsupported ieee802154 address type: 0 [ 856.698768][ T5623] Bluetooth: hci1: command 0x0406 tx timeout [ 856.949376][T31567] netlink: 'syz.1.6924': attribute type 30 has an invalid length. [ 857.044198][T31575] netlink: 'syz.2.6927': attribute type 1 has an invalid length. [ 857.077031][T31575] 8021q: adding VLAN 0 to HW filter on device bond4 [ 857.095787][T31575] bond4: (slave ip6erspan0): making interface the new active one [ 857.124306][T31575] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 857.496333][T17399] net_ratelimit: 3 callbacks suppressed [ 857.496348][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.822893][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.008420][T31622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 858.015753][T31622] IPv6: NLM_F_CREATE should be set when creating new route [ 858.228250][T31630] xt_hl: Unknown TTL match mode: 255 [ 858.453836][T31643] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 858.466442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.480976][T17931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.500231][T31643] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 858.538637][T29047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.699653][T31656] netlink: 'syz.3.6954': attribute type 1 has an invalid length. [ 858.749094][T31656] 8021q: adding VLAN 0 to HW filter on device bond4 [ 858.810971][T31665] bond4: (slave veth3): Enslaving as an active interface with a down link [ 858.841197][T31663] __nla_validate_parse: 14 callbacks suppressed [ 858.841216][T31663] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6956'. [ 858.912364][T31656] bond4: (slave veth0_to_bond): making interface the new active one [ 858.932028][T31663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6956'. [ 858.939907][T31656] veth0_to_bond: entered promiscuous mode [ 858.951132][T31677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6960'. [ 858.965178][T31656] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 858.971572][T31677] openvswitch: netlink: Flow actions attr not present in new flow. [ 858.991582][T31674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6956'. [ 859.024252][T31669] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6956'. [ 859.102546][T31675] bond4: (slave veth5): Enslaving as an active interface with a down link [ 859.129869][T31675] netlink: 'syz.3.6954': attribute type 1 has an invalid length. [ 859.155159][T31675] netlink: 'syz.3.6954': attribute type 2 has an invalid length. [ 859.171631][T31678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6960'. [ 859.218279][T31686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6960'. [ 859.314916][T31695] netlink: 'syz.0.6963': attribute type 4 has an invalid length. [ 859.389864][T31697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6964'. [ 859.528649][T31705] xt_TCPMSS: Only works on TCP SYN packets [ 859.764637][T31720] syzkaller0: entered promiscuous mode [ 859.781552][T31720] syzkaller0: entered allmulticast mode [ 859.844962][T31720] tipc: Started in network mode [ 859.856379][T31720] tipc: Node identity d609649afa31, cluster identity 4711 [ 859.864081][T31720] tipc: Enabled bearer , priority 0 [ 859.874242][T31719] tipc: Resetting bearer [ 859.910696][T31719] tipc: Disabling bearer [ 860.032939][T31725] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6973'. [ 860.172714][T31737] xt_CT: No such helper "snmp_trap" [ 860.461887][T31752] sctp: [Deprecated]: syz.1.6981 (pid 31752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 860.461887][T31752] Use struct sctp_sack_info instead [ 861.325349][T31789] bond2: (slave lo): Releasing backup interface [ 861.368938][T31789] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 861.423415][T31796] netlink: 'syz.4.6992': attribute type 3 has an invalid length. [ 861.469979][T31796] netlink: 'syz.4.6992': attribute type 1 has an invalid length. [ 861.520848][T31799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6993'. [ 861.558634][T31789] team0: Port device dummy0 removed [ 861.589443][T31789] x9: left allmulticast mode [ 861.620846][T31789] x9: left promiscuous mode [ 861.641924][T31789] bridge0: port 1(1x9) entered disabled state [ 861.710368][T31789] bridge_slave_1: left allmulticast mode [ 861.716405][T31789] bridge_slave_1: left promiscuous mode [ 861.722291][T31789] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.755866][T31789] bond0: (slave bond_slave_0): Releasing backup interface [ 861.774801][T31789] bond_slave_0: left promiscuous mode [ 861.809873][T31789] bond0: (slave bond_slave_1): Releasing backup interface [ 861.820832][T31821] netlink: 'syz.4.6996': attribute type 15 has an invalid length. [ 861.836839][T31821] netlink: 'syz.4.6996': attribute type 1 has an invalid length. [ 861.857703][T31789] bond_slave_1: left promiscuous mode [ 861.878010][T31789] team0: Port device team_slave_0 removed [ 861.891452][T31789] team0: Port device team_slave_1 removed [ 861.899140][T31789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.911719][T31789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.005044][T31789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.012808][T31789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.022427][T31789] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 862.336090][T31841] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 3, id = 0 [ 862.574318][T16273] IPVS: starting estimator thread 0... [ 862.696787][T31853] IPVS: using max 31 ests per chain, 74400 per kthread [ 862.752572][T31866] syzkaller0: entered promiscuous mode [ 862.759584][T31866] syzkaller0: entered allmulticast mode [ 863.110897][T31879] netlink: 'syz.3.7012': attribute type 1 has an invalid length. [ 863.372925][T31892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 863.483371][T31899] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 863.624841][T31906] syz_tun: entered allmulticast mode [ 863.860268][T31914] __nla_validate_parse: 7 callbacks suppressed [ 863.860285][T31914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7021'. [ 863.882815][T31914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7021'. [ 863.952128][T31914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7021'. [ 863.994724][T31914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7021'. [ 864.024682][T31924] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7025'. [ 864.038642][T31914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7021'. [ 864.049632][T31914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7021'. [ 864.069852][T31927] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7026'. [ 864.094530][T31914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7021'. [ 864.107289][T31914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7021'. [ 864.440461][T31944] openvswitch: netlink: Tunnel attr 122 out of range max 16 [ 864.616127][T20651] Bluetooth: hci3: command 0x0405 tx timeout [ 864.651174][T31960] netlink: 'syz.1.7039': attribute type 1 has an invalid length. [ 864.994281][T31960] syzkaller0: entered promiscuous mode [ 865.000945][T31960] syzkaller0: entered allmulticast mode [ 868.231469][T32013] netlink: 'syz.4.7051': attribute type 1 has an invalid length. [ 868.298111][T32013] bond2: entered promiscuous mode [ 868.323835][T32013] 8021q: adding VLAN 0 to HW filter on device bond2 [ 868.443184][T32022] bond2: (slave bridge3): making interface the new active one [ 868.495746][T32022] bridge3: entered promiscuous mode [ 868.546142][T32022] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 868.904979][T32048] __nla_validate_parse: 48 callbacks suppressed [ 868.904998][T32048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7059'. [ 869.300269][T32076] netlink: 300 bytes leftover after parsing attributes in process `syz.4.7066'. [ 869.583157][T32093] syzkaller0: entered promiscuous mode [ 869.603682][T32093] syzkaller0: entered allmulticast mode [ 869.626955][T32099] IPv6: addrconf: prefix option has invalid lifetime [ 869.724275][T32102] netlink: 'syz.2.7074': attribute type 32 has an invalid length. [ 869.908353][T32111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7077'. [ 869.961569][T32115] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7079'. [ 870.069706][ T1038] veth0_to_bond: left promiscuous mode [ 870.434420][T32142] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7088'. [ 870.512817][T32147] netlink: 'syz.1.7090': attribute type 6 has an invalid length. [ 870.715174][T32152] bond3 (unregistering): Released all slaves [ 870.865461][T32165] netlink: 'syz.2.7096': attribute type 1 has an invalid length. [ 870.884134][T32167] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.7096'. [ 871.104787][T32180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7101'. [ 871.141806][T32180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7101'. [ 871.283277][T32195] netlink: 'syz.2.7105': attribute type 8 has an invalid length. [ 871.653520][T32219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7111'. [ 871.668250][T32222] netlink: 'syz.1.7112': attribute type 5 has an invalid length. [ 871.722954][T32219] netlink: 220 bytes leftover after parsing attributes in process `syz.4.7111'. [ 871.770323][T32219] vlan3: entered allmulticast mode [ 871.790251][T32219] bridge4: entered allmulticast mode [ 871.862480][T32219] bridge4: port 1(bond3) entered blocking state [ 871.871078][T32219] bridge4: port 1(bond3) entered disabled state [ 871.890695][T32219] bond3: entered allmulticast mode [ 871.901264][T32219] bond3: entered promiscuous mode [ 871.977841][T32228] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 872.179071][T32251] netlink: 'syz.0.7118': attribute type 10 has an invalid length. [ 872.220057][T32251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.232983][T32251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.243081][T32251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.250979][T32251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.269658][T32286] netlink: 'syz.0.7128': attribute type 1 has an invalid length. [ 882.472932][T32286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 882.492667][T32300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7131'. [ 882.571990][T32306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7131'. [ 882.596311][T32311] netlink: 'syz.2.7132': attribute type 1 has an invalid length. [ 882.610009][T32299] tipc: Cannot configure node identity twice [ 882.665415][T32314] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7132'. [ 882.677661][T32311] 8021q: adding VLAN 0 to HW filter on device bond5 [ 882.685130][T32286] bond1: option mode: unable to set because the bond device is up [ 882.758618][T32311] bond5: (slave geneve2): making interface the new active one [ 882.761811][T32317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7135'. [ 882.776021][T32311] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 882.893896][T32323] syzkaller0: entered promiscuous mode [ 882.900884][T32323] syzkaller0: entered allmulticast mode [ 883.463091][T32357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7146'. [ 883.562070][T32360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7147'. [ 883.937892][T32387] syzkaller0: entered promiscuous mode [ 883.943486][T32387] syzkaller0: entered allmulticast mode [ 884.028753][T32395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7156'. [ 884.041487][T32395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7156'. [ 884.458086][T32417] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.7164'. [ 884.684853][T32428] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7168'. [ 884.711922][T32430] syzkaller0: entered promiscuous mode [ 884.723582][T32434] netlink: 'syz.1.7170': attribute type 83 has an invalid length. [ 884.732768][T32430] syzkaller0: entered allmulticast mode [ 884.833081][T32435] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 884.999250][T32449] xt_connbytes: Forcing CT accounting to be enabled [ 885.104932][T32457] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 885.125261][T32456] mac80211_hwsim hwsim63 syzkaller0: entered promiscuous mode [ 885.146067][T32456] mac80211_hwsim hwsim63 syzkaller0: entered allmulticast mode [ 885.165238][T32459] netlink: 'syz.4.7177': attribute type 2 has an invalid length. [ 885.483185][T32471] syzkaller0: entered promiscuous mode [ 885.489103][T32471] syzkaller0: entered allmulticast mode [ 885.521545][T32472] vcan1: entered promiscuous mode [ 885.537612][T32472] vcan1: entered allmulticast mode [ 885.564026][T32473] vcan1: entered promiscuous mode [ 885.569449][T32473] vcan1: entered allmulticast mode [ 888.522614][T32515] xt_l2tp: missing protocol rule (udp|l2tpip) [ 888.541884][T32511] syzkaller0: entered promiscuous mode [ 888.566388][T32511] syzkaller0: entered allmulticast mode [ 888.567816][T32518] __nla_validate_parse: 5 callbacks suppressed [ 888.567831][T32518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7193'. [ 888.598064][T32516] bond4: (slave veth0_to_bond): Releasing active interface [ 888.724996][T32520] scsi_nl_rcv_msg: discarding partial skb [ 888.733633][T32525] netlink: 'syz.1.7195': attribute type 10 has an invalid length. [ 888.786694][T32525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 888.838703][T32525] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 888.872048][T32529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7195'. [ 888.966991][T32525] netlink: 'syz.1.7195': attribute type 11 has an invalid length. [ 888.991376][T32525] netlink: 'syz.1.7195': attribute type 11 has an invalid length. [ 889.038245][T32525] netlink: 204 bytes leftover after parsing attributes in process `syz.1.7195'. [ 889.324790][T32546] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7201'. [ 889.388676][T32545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7200'. [ 889.783921][T32566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7206'. [ 889.822664][T32566] netlink: 'syz.2.7206': attribute type 83 has an invalid length. [ 889.874575][T32567] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 890.162718][T32584] netlink: 212284 bytes leftover after parsing attributes in process `syz.4.7209'. [ 890.259570][T32590] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7212'. [ 890.518354][T32600] syzkaller0: entered promiscuous mode [ 890.549775][T32600] syzkaller0: entered allmulticast mode [ 890.612575][T32605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 890.701211][T32613] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7217'. [ 890.896036][T32625] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7221'. [ 891.611290][T32667] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 892.044399][T32667] hsr_slave_0: left promiscuous mode [ 892.156961][T32667] hsr_slave_1: left promiscuous mode [ 892.227582][T32677] syzkaller0: entered promiscuous mode [ 892.236947][T32677] syzkaller0: entered allmulticast mode [ 893.857433][ T301] __nla_validate_parse: 5 callbacks suppressed [ 893.857451][ T301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7256'. [ 893.929257][ T301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7256'. [ 893.961335][ T309] netlink: 'syz.0.7259': attribute type 1 has an invalid length. [ 894.334651][ T333] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7265'. [ 894.393221][ T337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7267'. [ 894.417873][ T337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7267'. [ 894.444731][ T340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7266'. [ 894.515355][ T344] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 894.613249][ T352] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.7270'. [ 894.691983][ T352] veth0_to_bond: default FDB implementation only supports local addresses [ 895.109558][ T380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7278'. [ 895.203001][ T383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7279'. [ 895.235855][ T383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7279'. [ 895.778886][ T402] xt_hashlimit: size too large, truncated to 1048576 [ 895.912073][ T408] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ1 [ 896.064662][ T418] netlink: 'syz.3.7289': attribute type 8 has an invalid length. [ 896.108618][ T414] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.178092][ T414] bridge_slave_0 (unregistering): left allmulticast mode [ 896.232509][ T414] bridge_slave_0 (unregistering): left promiscuous mode [ 896.251156][ T414] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.538628][ T482] netlink: 'syz.1.7312': attribute type 1 has an invalid length. [ 897.554228][ T484] netlink: 'syz.4.7315': attribute type 1 has an invalid length. [ 897.587028][ T482] bond8: entered promiscuous mode [ 897.592538][ T482] 8021q: adding VLAN 0 to HW filter on device bond8 [ 897.645015][ T484] bond4: entered promiscuous mode [ 897.659116][ T484] 8021q: adding VLAN 0 to HW filter on device bond4 [ 897.715901][ T492] 8021q: adding VLAN 0 to HW filter on device bond8 [ 897.730045][ T492] bond8: (slave vti1): The slave device specified does not support setting the MAC address [ 897.741218][ T492] bond8: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 897.756625][ T498] netlink: 'syz.2.7316': attribute type 4 has an invalid length. [ 897.769503][ T492] bond8: (slave vti1): making interface the new active one [ 897.790922][ T492] vti1: entered promiscuous mode [ 897.802288][ T492] bond8: (slave vti1): Enslaving as an active interface with an up link [ 897.957769][ T491] bond4: (slave bridge5): making interface the new active one [ 897.965276][ T491] bridge5: entered promiscuous mode [ 898.000209][ T491] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 898.096735][ T507] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 898.349572][ T524] syzkaller0: entered promiscuous mode [ 898.356585][ T524] syzkaller0: entered allmulticast mode [ 898.464420][ T532] bridge4: entered promiscuous mode [ 898.469921][ T532] bridge4: entered allmulticast mode [ 898.714608][ T544] macvlan0: left promiscuous mode [ 898.724410][ T544] netlink: 'syz.2.7331': attribute type 1 has an invalid length. [ 898.734168][ T544] netlink: 'syz.2.7331': attribute type 2 has an invalid length. [ 899.159290][ T550] __nla_validate_parse: 11 callbacks suppressed [ 899.159308][ T550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7334'. [ 899.267402][ T550] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 899.782309][ T582] netlink: 'syz.2.7346': attribute type 1 has an invalid length. [ 899.967044][ T591] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 899.981172][ T591] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 900.188041][ T597] IPv6: addrconf: prefix option has invalid lifetime [ 900.198782][ T601] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7351'. [ 900.562814][ T616] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.7353'. [ 900.573469][ T612] block nbd5: server does not support multiple connections per device. [ 900.589592][ T616] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 900.617291][ T612] block nbd5: shutting down sockets [ 900.767896][ T622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7355'. [ 900.818251][ T622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7355'. [ 901.048721][ T635] netlink: 'syz.4.7358': attribute type 1 has an invalid length. [ 901.164690][ T641] netlink: 'syz.2.7361': attribute type 1 has an invalid length. [ 901.203531][ T635] bond5: entered promiscuous mode [ 901.217076][ T635] 8021q: adding VLAN 0 to HW filter on device bond5 [ 901.245396][ T637] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 901.259930][ T637] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 901.271113][ T637] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 901.308208][ T643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7362'. [ 901.408759][ T641] 8021q: adding VLAN 0 to HW filter on device bond7 [ 901.443356][ T647] bond7: (slave geneve3): making interface the new active one [ 901.453125][ T647] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 901.463193][ T653] netlink: 248 bytes leftover after parsing attributes in process `syz.1.7363'. [ 901.493449][ T654] netlink: 248 bytes leftover after parsing attributes in process `syz.1.7363'. [ 901.624754][ T671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7368'. [ 901.707667][ T677] netlink: 'syz.2.7367': attribute type 2 has an invalid length. [ 901.914470][ T694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7373'. [ 902.158723][ T713] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 902.200621][ T713] bond2: (slave lo): Enslaving as an active interface with an up link [ 902.201420][ T715] netlink: 'syz.0.7380': attribute type 30 has an invalid length. [ 902.219928][ T713] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 902.437164][ T730] netlink: 'syz.2.7382': attribute type 4 has an invalid length. [ 903.179079][ T806] syzkaller0: entered promiscuous mode [ 903.237600][ T806] syzkaller0: entered allmulticast mode [ 903.314095][ T727] lo speed is unknown, defaulting to 1000 [ 903.340731][ T727] lo speed is unknown, defaulting to 1000 [ 903.421987][ T848] SET target dimension over the limit! [ 904.347496][ T879] syzkaller0: entered promiscuous mode [ 904.364404][ T879] syzkaller0: entered allmulticast mode [ 904.785974][ T897] netlink: 'syz.1.7403': attribute type 1 has an invalid length. [ 904.794651][ T897] netlink: 'syz.1.7403': attribute type 11 has an invalid length. [ 904.827057][ T897] __nla_validate_parse: 7 callbacks suppressed [ 904.827071][ T897] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7403'. [ 905.113831][ T908] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7406'. [ 905.344061][ T916] pimreg: entered allmulticast mode [ 905.371489][ T916] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7409'. [ 905.591911][ T922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7410'. [ 905.628965][ T922] tipc: Invalid UDP bearer configuration [ 905.629020][ T922] tipc: Enabling of bearer rejected, failed to enable media [ 905.700295][ T925] netlink: 'syz.2.7412': attribute type 3 has an invalid length. [ 905.742837][ T925] netlink: 'syz.2.7412': attribute type 3 has an invalid length. [ 905.784116][ T925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7412'. [ 905.995214][ T934] netlink: 'syz.2.7414': attribute type 9 has an invalid length. [ 906.518293][ T975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7422'. [ 906.582240][ T975] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7422'. [ 906.614572][ T975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7422'. [ 906.761627][ T993] x_tables: duplicate entry at hook 3 [ 906.793729][ T1004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7431'. [ 906.844050][ T1003] netlink: 'syz.4.7431': attribute type 1 has an invalid length. [ 906.892604][ T1009] netlink: 'syz.1.7432': attribute type 1 has an invalid length. [ 906.998576][ T1009] bond9: entered promiscuous mode [ 907.004147][ T1009] 8021q: adding VLAN 0 to HW filter on device bond9 [ 907.212434][ T1032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7437'. [ 909.873905][ T1010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 910.112144][ T1070] netlink: 'syz.1.7448': attribute type 15 has an invalid length. [ 910.123052][ T1070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7448'. [ 910.194986][T10337] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 910.195523][ T1068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7447'. [ 910.204112][ T1070] netlink: 'syz.1.7448': attribute type 15 has an invalid length. [ 910.225010][T10337] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 910.259909][ T1070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7448'. [ 910.270295][T10337] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 910.284161][T10337] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 910.492987][ T1093] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7452'. [ 910.664618][ T1106] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 910.696548][ T1106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 910.749087][ T1113] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 911.087147][ T1126] netlink: zone id is out of range [ 911.108142][ T1126] netlink: zone id is out of range [ 911.146045][ T1126] netlink: zone id is out of range [ 911.158915][ T1126] netlink: zone id is out of range [ 911.187069][ T1126] netlink: zone id is out of range [ 911.205810][ T1126] netlink: zone id is out of range [ 911.223212][ T1126] netlink: zone id is out of range [ 911.309479][ T1137] xt_TPROXY: Can be used only with -p tcp or -p udp [ 911.318448][ T1141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7467'. [ 911.449119][ T1146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7468'. [ 911.472945][ T1153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7470'. [ 911.486859][ T1146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7468'. [ 911.560942][ T1157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7472'. [ 911.589248][ T1161] netlink: 'syz.4.7474': attribute type 1 has an invalid length. [ 911.604298][ T1153] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 911.859476][ T1161] 8021q: adding VLAN 0 to HW filter on device bond6 [ 912.060756][ T1164] bond6: (slave veth5): Enslaving as an active interface with a down link [ 912.082794][ T1184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7479'. [ 912.110963][ T1168] bond6: (slave veth0_to_bond): making interface the new active one [ 912.131692][ T1168] veth0_to_bond: entered promiscuous mode [ 912.152073][ T1168] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 912.224923][ T1161] netlink: 'syz.4.7474': attribute type 1 has an invalid length. [ 912.281553][ T1161] netlink: 'syz.4.7474': attribute type 2 has an invalid length. [ 912.584448][ T1209] syzkaller0: entered promiscuous mode [ 912.629924][ T1209] syzkaller0: entered allmulticast mode [ 913.016135][ T667] Bluetooth: hci5: command 0x0406 tx timeout [ 913.309091][ T1247] bond6: entered promiscuous mode [ 913.318974][ T1247] 8021q: adding VLAN 0 to HW filter on device bond6 [ 913.372632][ T1254] netlink: 'syz.1.7499': attribute type 4 has an invalid length. [ 913.486002][ T1247] 8021q: adding VLAN 0 to HW filter on device bond6 [ 913.496562][ T1247] bond6: (slave sit2): The slave device specified does not support setting the MAC address [ 913.530492][ T1247] bond6: (slave sit2): Error -95 calling set_mac_address [ 914.036169][ T1291] netlink: 'syz.4.7512': attribute type 1 has an invalid length. [ 914.097906][ T1291] netlink: 'syz.4.7512': attribute type 2 has an invalid length. [ 914.106866][ T1291] netlink: 'syz.4.7512': attribute type 1 has an invalid length. [ 914.401561][ T1308] bond10: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 914.412177][ T1315] netlink: 'syz.2.7517': attribute type 1 has an invalid length. [ 914.711035][ T1340] bond0: left promiscuous mode [ 914.721338][ T1340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.618916][ T1376] __nla_validate_parse: 18 callbacks suppressed [ 915.618935][ T1376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7532'. [ 915.644163][ T1375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7533'. [ 915.683236][ T1376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7532'. [ 915.872767][ T1387] xt_hashlimit: size too large, truncated to 1048576 [ 915.914093][ T1389] vlan4: entered allmulticast mode [ 915.930430][ T1389] bond0: entered allmulticast mode [ 915.942039][ T1389] bond_slave_0: entered allmulticast mode [ 915.955679][ T1389] bond_slave_1: entered allmulticast mode [ 915.980944][ T1397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7536'. [ 915.993646][ T1394] netlink: 756 bytes leftover after parsing attributes in process `syz.3.7538'. [ 916.054621][ T1397] bond0: entered promiscuous mode [ 916.103777][ T1397] bond_slave_0: entered promiscuous mode [ 916.137983][ T1397] bond_slave_1: entered promiscuous mode [ 916.174661][ T1404] netlink: 'syz.2.7540': attribute type 9 has an invalid length. [ 916.364627][ T1397] bond0: left promiscuous mode [ 916.371202][ T1397] bond_slave_0: left promiscuous mode [ 916.386195][ T1397] bond_slave_1: left promiscuous mode [ 916.521174][ T1406] syzkaller1: entered promiscuous mode [ 916.527679][ T1406] syzkaller1: entered allmulticast mode [ 916.605257][ T1413] syzkaller1: entered promiscuous mode [ 916.611687][ T1413] syzkaller1: entered allmulticast mode [ 916.632241][ T1421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7544'. [ 916.778956][ T1423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7545'. [ 916.935462][ T1434] netlink: 'syz.0.7550': attribute type 4 has an invalid length. [ 917.162544][ T1444] netlink: 'syz.1.7554': attribute type 1 has an invalid length. [ 917.207898][ T1444] 8021q: adding VLAN 0 to HW filter on device bond11 [ 917.263862][ T1444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7554'. [ 917.484461][ T1463] syzkaller1: entered promiscuous mode [ 917.496623][ T1463] syzkaller1: entered allmulticast mode [ 917.514586][ T1465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7561'. [ 917.796293][ T1477] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7566'. [ 918.154386][ T1484] team0: Port device vlan0 removed [ 918.408849][ T1508] netlink: 'syz.1.7575': attribute type 1 has an invalid length. [ 918.430830][ T1508] netlink: 'syz.1.7575': attribute type 1 has an invalid length. [ 919.431024][ T1558] xt_connbytes: Forcing CT accounting to be enabled [ 919.512259][ T1558] xt_CT: No such helper "netbios-ns" [ 919.613673][ T1565] bond12: entered promiscuous mode [ 919.619010][ T1565] bond12: entered allmulticast mode [ 919.624609][ T1565] 8021q: adding VLAN 0 to HW filter on device bond12 [ 919.757931][ T29] audit: type=1800 audit(1777292544.775:10): pid=1576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7598" name="memory.events" dev="tmpfs" ino=1541 res=0 errno=0 [ 922.073997][ T1536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 922.247780][ T1582] netlink: 'syz.4.7600': attribute type 10 has an invalid length. [ 922.311718][ T1582] team0: Port device vlan0 added [ 922.407489][ T1591] __nla_validate_parse: 9 callbacks suppressed [ 922.407514][ T1591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7604'. [ 922.457853][ T1591] netlink: 65011 bytes leftover after parsing attributes in process `syz.1.7604'. [ 922.534392][ T1593] netlink: 'syz.3.7605': attribute type 32 has an invalid length. [ 922.542670][ T1593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7605'. [ 922.652237][ T1593] bond7: option coupled_control: invalid value (192) [ 922.677399][ T1593] bond7 (unregistering): Released all slaves [ 922.808343][ T1613] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7610'. [ 922.957754][ T1623] Bluetooth: MGMT ver 1.23 [ 923.239755][T19157] veth0_to_bond: left promiscuous mode [ 923.270971][T20651] Bluetooth: hci4: command 0x0406 tx timeout [ 923.509270][ T1649] netlink: 'syz.1.7620': attribute type 1 has an invalid length. [ 923.535535][ T1644] 8021q: adding VLAN 0 to HW filter on device bond13 [ 923.543419][ T1644] bridge0: port 1(bond13) entered blocking state [ 923.550202][ T1644] bridge0: port 1(bond13) entered disabled state [ 923.557158][ T1644] bond13: entered allmulticast mode [ 923.565033][ T1644] bond13: entered promiscuous mode [ 923.571195][ T1644] bridge0: port 1(bond13) entered blocking state [ 923.577732][ T1644] bridge0: port 1(bond13) entered forwarding state [ 923.669406][ T1644] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7620'. [ 923.692756][ T1660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7624'. [ 923.703603][ T1649] bond14: entered promiscuous mode [ 923.709488][ T1649] 8021q: adding VLAN 0 to HW filter on device bond14 [ 923.722785][ T1661] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7623'. [ 923.791321][ T1654] bond14: (slave bridge4): making interface the new active one [ 923.801189][ T1666] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7625'. [ 923.802384][ T1654] bridge4: entered promiscuous mode [ 923.817846][ T1654] bond14: (slave bridge4): Enslaving as an active interface with an up link [ 923.900166][T19176] bridge0: port 1(bond13) entered disabled state [ 924.007169][ T1673] netlink: 'syz.2.7628': attribute type 39 has an invalid length. [ 924.084639][ T1677] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7626'. [ 924.123895][ T1678] : entered promiscuous mode [ 924.132252][ T1682] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7629'. [ 925.025136][ T1733] bond15: (slave erspan0): Device is not bonding slave [ 925.033720][ T1733] bond15: option active_slave: invalid value (erspan0) [ 925.070849][ T1733] bond15 (unregistering): Released all slaves [ 925.122438][ T1717] net_ratelimit: 6 callbacks suppressed [ 925.122451][ T1717] A link change request failed with some changes committed already. Interface bridge3 may have been left with an inconsistent configuration, please check. [ 925.402899][ T1743] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 925.412270][ T1743] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 927.481745][ T1703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 927.729086][ T1758] __nla_validate_parse: 3 callbacks suppressed [ 927.729104][ T1758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7646'. [ 928.194212][ T1782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7658'. [ 928.364030][ T1791] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7660'. [ 928.422284][ T1795] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7663'. [ 928.427453][ T1797] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7663'. [ 928.437319][ T1798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7661'. [ 928.744375][ T1776] lo speed is unknown, defaulting to 1000 [ 928.772766][ T1776] lo speed is unknown, defaulting to 1000 [ 928.815161][ T1817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7669'. [ 928.846927][ T1818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7669'. [ 928.878967][T19176] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 928.895360][T19176] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 928.900722][ T1817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7669'. [ 928.914880][T19176] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 928.930655][ T1817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7669'. [ 928.932021][T19176] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 928.950406][ T1818] netlink: 'syz.1.7669': attribute type 1 has an invalid length. [ 928.961001][ T1820] netlink: 'syz.4.7670': attribute type 11 has an invalid length. [ 928.970192][ T1820] netlink: 'syz.4.7670': attribute type 4 has an invalid length. [ 929.562899][ T1840] tc_dump_action: action bad kind [ 929.779607][ T1859] netlink: 'syz.1.7678': attribute type 16 has an invalid length. [ 929.790066][ T1859] netlink: 'syz.1.7678': attribute type 17 has an invalid length. [ 929.839601][ T1859] erspan0: left allmulticast mode [ 930.095158][ T1859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 930.127998][ T1859] 8021q: adding VLAN 0 to HW filter on device bond4 [ 930.160162][ T1859] bond5: left promiscuous mode [ 930.170198][ T1859] vlan2: left allmulticast mode [ 930.175206][ T1859] bond6: left allmulticast mode [ 930.185438][ T1859] geneve2: left allmulticast mode [ 930.212726][ T1859] 8021q: adding VLAN 0 to HW filter on device bond7 [ 930.283786][ T1859] bond8: left promiscuous mode [ 930.294067][ T1859] vti1: left promiscuous mode [ 930.345250][ T1859] bond9: left promiscuous mode [ 930.384371][ T1859] 8021q: adding VLAN 0 to HW filter on device bond10 [ 930.421213][ T1859] bond12: left promiscuous mode [ 930.430168][ T1859] bond12: left allmulticast mode [ 930.443605][ T1859] bond14: left promiscuous mode [ 930.451458][ T1859] bridge4: left promiscuous mode [ 930.605458][ T1865] xt_CT: No such helper "syz1" [ 930.651255][ T1879] bridge0: port 1(syz_tun) entered blocking state [ 930.679218][ T1879] bridge0: port 1(syz_tun) entered disabled state [ 930.692509][ T1879] syz_tun: entered allmulticast mode [ 930.702146][ T1879] syz_tun: entered promiscuous mode [ 930.708606][ T1879] bridge0: port 1(syz_tun) entered blocking state [ 930.716569][ T1879] bridge0: port 1(syz_tun) entered forwarding state [ 930.900730][ T1888] syzkaller0: entered promiscuous mode [ 930.925895][ T1888] syzkaller0: entered allmulticast mode [ 930.986378][ T1897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 931.023732][ T1897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 931.063586][ T1895] veth0_macvtap: left promiscuous mode [ 931.937490][ T1959] xfrm2: entered promiscuous mode [ 931.960310][ T1959] xfrm2: entered allmulticast mode [ 932.007401][ T1961] syzkaller0: entered promiscuous mode [ 932.019632][ T1961] syzkaller0: entered allmulticast mode [ 932.108606][ T1971] netlink: 'syz.4.7707': attribute type 1 has an invalid length. [ 932.132728][ T1971] netlink: 'syz.4.7707': attribute type 1 has an invalid length. [ 932.143045][ T1971] netlink: 'syz.4.7707': attribute type 1 has an invalid length. [ 932.166612][ T1971] netlink: 'syz.4.7707': attribute type 2 has an invalid length. [ 932.176787][ T1971] netlink: 'syz.4.7707': attribute type 1 has an invalid length. [ 932.194025][ T1971] netlink: 'syz.4.7707': attribute type 1 has an invalid length. [ 932.235050][ T1972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 932.774885][ T2015] __nla_validate_parse: 16 callbacks suppressed [ 932.774903][ T2015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7719'. [ 932.837526][ T2017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7723'. [ 932.941147][ T2017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7723'. [ 933.195322][ T2037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7728'. [ 933.261766][ T2042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7728'. [ 933.291164][ T2045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7730'. [ 933.322678][ T2048] netlink: 'syz.1.7732': attribute type 11 has an invalid length. [ 933.330938][ T2048] netlink: 'syz.1.7732': attribute type 11 has an invalid length. [ 933.341101][ T2048] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7732'. [ 933.383321][ T2042] ip6erspan0: entered promiscuous mode [ 933.422501][ T2045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7730'. [ 933.435326][ T2050] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 933.448360][ T2050] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 933.532472][ T2045] macvlan3: entered promiscuous mode [ 933.548443][ T2045] macvlan3: entered allmulticast mode [ 933.590427][ T2061] xt_hashlimit: invalid interval [ 933.678960][ T2067] tipc: Enabled bearer , priority 10 [ 933.690399][ T2069] tipc: Enabling of bearer rejected, already enabled [ 933.724004][ T2072] veth1_macvtap: left promiscuous mode [ 933.757130][ T2072] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 933.784941][ T2062] syzkaller0: entered promiscuous mode [ 933.795374][ T2062] syzkaller0: entered allmulticast mode [ 933.883316][ T2074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7738'. [ 934.275268][ T2100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7747'. [ 934.731020][ T2132] validate_nla: 3 callbacks suppressed [ 934.731040][ T2132] netlink: 'syz.1.7756': attribute type 8 has an invalid length. [ 934.799050][ T5726] tipc: Node number set to 2457516553 [ 934.832033][ T2135] netlink: 'syz.4.7759': attribute type 1 has an invalid length. [ 934.933396][ T2133] syzkaller1: entered promiscuous mode [ 934.949642][ T2133] syzkaller1: entered allmulticast mode [ 935.056119][ T2140] syzkaller1: left promiscuous mode [ 935.068773][ T2140] syzkaller1: left allmulticast mode [ 935.195000][ T2154] IPVS: Scheduler module ip_vs_sip not found [ 935.432248][ T2170] syzkaller0: entered promiscuous mode [ 935.441929][ T2170] syzkaller0: entered allmulticast mode [ 935.483595][ T2174] syzkaller0: entered promiscuous mode [ 935.492976][ T2174] syzkaller0: entered allmulticast mode [ 935.761288][ T2187] netlink: 'syz.0.7772': attribute type 58 has an invalid length. [ 936.012964][ T2190] bridge0: entered promiscuous mode [ 936.028627][ T2190] bridge0: entered allmulticast mode [ 936.210015][ T2209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.778309][ T2237] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 938.110725][ T2238] lo speed is unknown, defaulting to 1000 [ 938.116746][ T2291] netlink: 'syz.2.7796': attribute type 10 has an invalid length. [ 938.131855][ T2291] team0: Port device vlan0 added [ 938.148661][ T2238] lo speed is unknown, defaulting to 1000 [ 938.616669][ T667] Bluetooth: hci2: command 0x0419 tx timeout [ 938.880078][T20651] block nbd5: Receive control failed (result -32) [ 939.705161][ T2337] netlink: 'syz.0.7812': attribute type 1 has an invalid length. [ 939.802455][ T2341] __nla_validate_parse: 9 callbacks suppressed [ 939.802474][ T2341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7813'. [ 939.850657][ T2345] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 940.060783][ T2342] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 940.077685][ T2342] bond4 (unregistering): Released all slaves [ 940.319811][ T2356] syzkaller0: entered promiscuous mode [ 940.347680][ T2356] syzkaller0: entered allmulticast mode [ 940.409023][ T2365] x_tables: duplicate entry at hook 1 [ 940.834790][ T2381] team0 (unregistering): Failed to send port change of device vlan0 via netlink (err -105) [ 940.887783][ T2381] team0 (unregistering): Port device vlan0 removed [ 940.924512][ T2389] netlink: 'syz.3.7827': attribute type 1 has an invalid length. [ 940.948066][ T2386] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 940.968841][ T2386] bond4 (unregistering): Released all slaves [ 940.999457][ T2393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7828'. [ 941.009344][ T2393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7828'. [ 941.209342][ T2390] veth9: entered promiscuous mode [ 941.215428][ T2390] veth9: entered allmulticast mode [ 941.685029][ T2443] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7838'. [ 942.072188][ T2460] mac80211_hwsim hwsim63 syzkaller0: left promiscuous mode [ 942.100643][ T2470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7845'. [ 942.510977][ T2493] netlink: 'syz.3.7849': attribute type 4 has an invalid length. [ 942.521366][ T2492] netlink: 'syz.4.7850': attribute type 16 has an invalid length. [ 942.552578][ T2492] netlink: 'syz.4.7850': attribute type 17 has an invalid length. [ 942.577475][ T2497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7849'. [ 942.714830][ T2492] bridge0: port 1(syz_tun) entered disabled state [ 942.870270][ T2492] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.038884][ T2492] macvlan0: left promiscuous mode [ 943.124887][ T2492] bridge1: left promiscuous mode [ 943.143781][ T2492] bridge1: left allmulticast mode [ 943.211397][ T2492] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 943.234899][ T2492] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 943.249372][ T2492] hsr1: left promiscuous mode [ 943.301298][ T2492] bond2: left promiscuous mode [ 943.313217][ T2492] bridge3: left promiscuous mode [ 943.335080][ T2492] vlan3: left allmulticast mode [ 943.374897][ T2492] bridge4: left allmulticast mode [ 943.387587][ T2492] 8021q: adding VLAN 0 to HW filter on device bond3 [ 943.404011][ T2492] batadv0: entered promiscuous mode [ 943.413278][ T2492] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 943.422939][ T2492] bond4: left promiscuous mode [ 943.430328][ T2492] bridge5: left promiscuous mode [ 943.448359][ T2492] bond5: left promiscuous mode [ 943.461973][ T2492] vlan4: left allmulticast mode [ 943.467494][ T2492] bond0: left allmulticast mode [ 943.472387][ T2492] bond_slave_0: left allmulticast mode [ 943.478347][ T2492] bond_slave_1: left allmulticast mode [ 943.500912][ T2492] ip6erspan0: left promiscuous mode [ 943.613424][T19165] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 943.697988][ T2520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7855'. [ 943.726870][ T2520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7855'. [ 943.763748][ T2518] syzkaller0: entered promiscuous mode [ 943.777367][ T2518] syzkaller0: entered allmulticast mode [ 943.799304][ T2520] netlink: 'syz.3.7855': attribute type 1 has an invalid length. [ 943.831694][ T2520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7855'. [ 943.842367][ T2520] netlink: 'syz.3.7855': attribute type 30 has an invalid length. [ 943.859676][ T2520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7855'. [ 943.888256][ T2529] netlink: 'syz.3.7855': attribute type 30 has an invalid length. [ 943.891379][ T2525] netlink: 'syz.4.7858': attribute type 10 has an invalid length. [ 943.941047][ T2525] bridge0: port 1(syz_tun) entered disabled state [ 943.959374][ T2525] syz_tun: left allmulticast mode [ 943.973125][ T2525] bridge0: port 1(syz_tun) entered disabled state [ 944.038005][ T2525] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 944.088872][T19174] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 944.112452][T19174] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 944.124062][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 944.335840][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 944.482022][ T2562] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 944.504570][ T2562] bond8 (unregistering): Released all slaves [ 944.518232][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 944.785033][ T2578] syzkaller0: entered promiscuous mode [ 944.793328][ T2578] syzkaller0: entered allmulticast mode [ 945.705577][ T2503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 945.892041][ T2596] __nla_validate_parse: 3 callbacks suppressed [ 945.892060][ T2596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7874'. [ 945.972948][ T2604] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7877'. [ 946.128874][ T2612] netlink: 'syz.3.7879': attribute type 1 has an invalid length. [ 946.144536][ T2613] netlink: 'syz.3.7879': attribute type 1 has an invalid length. [ 946.233686][ T2617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7880'. [ 946.347717][ T2621] syzkaller0: entered promiscuous mode [ 946.366737][ T2621] syzkaller0: entered allmulticast mode [ 946.375029][ T2628] syzkaller0: entered promiscuous mode [ 946.400508][ T2628] syzkaller0: entered allmulticast mode [ 946.598399][ T2634] bridge7: entered promiscuous mode [ 946.615312][ T2634] bridge7: entered allmulticast mode [ 946.656082][ T2644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7885'. [ 946.680185][ T2643] ip6erspan0: entered promiscuous mode [ 946.772585][ T2652] netlink: 'syz.0.7888': attribute type 1 has an invalid length. [ 946.781456][ T2658] netlink: 'syz.1.7887': attribute type 1 has an invalid length. [ 946.781480][ T2658] netlink: 'syz.1.7887': attribute type 4 has an invalid length. [ 946.781495][ T2658] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7887'. [ 946.794178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 946.921187][ T2652] 8021q: adding VLAN 0 to HW filter on device bond4 [ 947.413909][ T2698] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7897'. [ 947.447619][ T2697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7896'. [ 947.579618][ T2709] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7899'. [ 947.757415][ T2715] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7901'. [ 947.983887][ T2730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7904'. [ 948.376024][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 948.899548][ T2790] syzkaller0: entered promiscuous mode [ 948.926490][ T2790] syzkaller0: entered allmulticast mode [ 948.976229][ T2799] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 949.231961][ T2822] netlink: 'syz.2.7922': attribute type 7 has an invalid length. [ 949.240818][ T2822] netlink: 'syz.2.7922': attribute type 8 has an invalid length. [ 949.349393][ T2825] x_tables: duplicate underflow at hook 1 [ 949.637070][ T2842] syzkaller0: entered promiscuous mode [ 949.661834][ T2842] syzkaller0: entered allmulticast mode [ 949.834650][ T2853] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 950.313560][ T2884] Cannot find add_set index 65532 as target [ 950.346286][ T2884] Cannot find add_set index 65532 as target [ 950.375216][ T2884] Cannot find add_set index 65532 as target [ 950.416444][ T2894] IPVS: length: 143 != 8 [ 950.432122][ T2884] Cannot find add_set index 65532 as target [ 950.553850][ T2884] Cannot find add_set index 65532 as target [ 950.597270][ T2884] Cannot find add_set index 65532 as target [ 950.655933][ T2884] Cannot find add_set index 65532 as target [ 950.696185][ T2884] Cannot find add_set index 65532 as target [ 950.716509][ T2884] Cannot find add_set index 65532 as target [ 950.733740][ T2884] Cannot find add_set index 65532 as target [ 950.853677][ T2911] netlink: 'syz.1.7944': attribute type 21 has an invalid length. [ 950.901955][ T2911] __nla_validate_parse: 8 callbacks suppressed [ 950.901971][ T2911] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7944'. [ 950.995494][ T2928] netlink: 'syz.3.7947': attribute type 1 has an invalid length. [ 951.011416][ T2916] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7946'. [ 951.058766][ T2928] bond8: entered promiscuous mode [ 951.066351][ T2928] 8021q: adding VLAN 0 to HW filter on device bond8 [ 951.153581][ T2928] bond8: (slave bridge3): making interface the new active one [ 951.163415][ T2928] bridge3: entered promiscuous mode [ 951.270575][ T2928] bridge3: left promiscuous mode [ 951.285414][ T2939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7951'. [ 951.359687][ T2933] syzkaller0: entered promiscuous mode [ 951.365925][ T2933] syzkaller0: entered allmulticast mode [ 951.611769][ T2949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7954'. [ 951.698852][ T2949] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 951.705335][ T2952] syzkaller1: entered promiscuous mode [ 951.771646][ T2952] syzkaller1: entered allmulticast mode [ 951.981577][ T2971] openvswitch: netlink: Multiple metadata blocks provided [ 952.059100][ T2980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7961'. [ 952.063752][ T2983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7962'. [ 952.135439][ T2987] netlink: 'syz.4.7964': attribute type 1 has an invalid length. [ 952.180485][ T2986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7963'. [ 952.187156][ T2992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7964'. [ 952.209196][ T2994] netlink: 'syz.1.7966': attribute type 1 has an invalid length. [ 952.220805][ T2992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7964'. [ 952.311597][ T3002] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7968'. [ 952.420699][ T2987] bond7: entered promiscuous mode [ 952.474412][ T2987] 8021q: adding VLAN 0 to HW filter on device bond7 [ 952.600563][ T2995] bond7: (slave bridge7): making interface the new active one [ 952.635899][ T2995] bridge7: entered promiscuous mode [ 952.663213][ T2995] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 953.325278][ T3052] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 953.488154][ T3057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.718068][ T3044] lo speed is unknown, defaulting to 1000 [ 953.734388][ T3044] lo speed is unknown, defaulting to 1000 [ 954.357664][ T3087] syzkaller0: entered promiscuous mode [ 954.364385][ T3087] syzkaller0: entered allmulticast mode [ 955.002388][ T3119] netlink: 'syz.1.7996': attribute type 1 has an invalid length. [ 955.244907][ T3129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.326403][ T3119] bond15: entered promiscuous mode [ 955.331988][ T3119] 8021q: adding VLAN 0 to HW filter on device bond15 [ 955.341667][ T3126] netlink: 'syz.4.7998': attribute type 3 has an invalid length. [ 955.832044][ T3151] veth0_macvtap: left promiscuous mode [ 956.341790][ T3182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 956.786505][ T3213] netlink: 'syz.1.8016': attribute type 1 has an invalid length. [ 956.819439][ T3213] netlink: 'syz.1.8016': attribute type 1 has an invalid length. [ 956.820568][ T3223] __nla_validate_parse: 8 callbacks suppressed [ 956.820584][ T3223] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8019'. [ 956.858603][ T3213] netlink: 11 bytes leftover after parsing attributes in process `syz.1.8016'. [ 956.869221][ T3213] netlink: 11 bytes leftover after parsing attributes in process `syz.1.8016'. [ 956.932762][ T3226] netlink: 'syz.4.8020': attribute type 1 has an invalid length. [ 957.023803][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 957.156834][ T3232] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 957.179569][ T3232] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 957.313917][ T3235] bond8: (slave bridge8): Enslaving as an active interface with a down link [ 957.341231][ T3251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8024'. [ 957.369247][ T3226] macvlan3: entered promiscuous mode [ 957.374577][ T3226] macvlan3: entered allmulticast mode [ 957.380959][ T3226] bond8: entered promiscuous mode [ 957.386746][ T3226] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 957.394906][ T3226] bond8: left promiscuous mode [ 957.402075][ T3254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8024'. [ 957.415182][ T3249] : renamed from vlan0 [ 957.742089][ T3261] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.8027'. [ 957.815029][ T3271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8030'. [ 957.890337][ T3275] netlink: 'syz.0.8032': attribute type 21 has an invalid length. [ 957.899408][ T3275] IPv6: NLM_F_CREATE should be specified when creating new route [ 957.909149][ T3275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 957.916472][ T3275] IPv6: NLM_F_CREATE should be set when creating new route [ 957.923747][ T3275] IPv6: NLM_F_CREATE should be set when creating new route [ 957.930996][ T3275] IPv6: NLM_F_CREATE should be set when creating new route [ 958.002176][ T3271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8030'. [ 958.037524][ T3279] pimreg: entered allmulticast mode [ 958.042646][ T3280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8033'. [ 958.053148][ T3280] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 958.061430][ T3279] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 958.065918][ T3279] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8034'. [ 958.091474][ T3280] veth1_to_bond: entered allmulticast mode [ 958.154812][ T3279] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.162508][ T3279] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.610954][ T3313] netlink: 'syz.4.8043': attribute type 21 has an invalid length. [ 958.740346][ T3314] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 958.778350][ T3276] veth1_to_bond: left allmulticast mode [ 959.224377][ T3342] netlink: 'syz.2.8053': attribute type 21 has an invalid length. [ 960.002663][ T3380] xt_nfacct: accounting object `syz1' does not exist [ 960.492942][ T3400] gtp0: entered promiscuous mode [ 960.512785][ T3400] gtp0: entered allmulticast mode [ 960.530675][ T3406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 961.161202][ T3436] mac80211_hwsim hwsim63 syzkaller0: entered promiscuous mode [ 961.183931][ T3441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 961.304611][ T3448] netlink: 'syz.0.8082': attribute type 4 has an invalid length. [ 962.309589][ T3489] __nla_validate_parse: 13 callbacks suppressed [ 962.309610][ T3489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8098'. [ 962.331577][ T3485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8096'. [ 962.821707][ T3514] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8105'. [ 963.137362][ T3525] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8109'. [ 963.170028][ T3525] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8109'. [ 963.823795][ T3525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 963.851432][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.883332][ T3525] bond0 (unregistering): Released all slaves [ 964.188409][ T3556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8113'. [ 965.224143][ T3566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 965.451563][ T3583] netlink: 'syz.3.8122': attribute type 1 has an invalid length. [ 965.911819][ T3600] syzkaller0: entered promiscuous mode [ 965.946151][ T3600] syzkaller0: entered allmulticast mode [ 966.254681][ T3614] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.8129'. [ 966.479643][ T3622] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8132'. [ 966.782608][ T3632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8137'. [ 966.800480][ T3632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8137'. [ 967.153437][ T3656] netlink: 'syz.0.8143': attribute type 7 has an invalid length. [ 967.180392][ T3656] netlink: 'syz.0.8143': attribute type 8 has an invalid length. [ 967.388684][T10335] pimreg: left allmulticast mode [ 968.200070][T10335] bond1 (unregistering): Released all slaves [ 968.223163][T10335] bond0 (unregistering): Released all slaves [ 968.238291][T10335] bond2 (unregistering): Released all slaves [ 968.253904][T10335] bond3 (unregistering): Released all slaves [ 968.271570][T10335] bond4 (unregistering): Released all slaves [ 968.288790][T10335] bond5 (unregistering): Released all slaves [ 968.310494][T10335] bond6 (unregistering): Released all slaves [ 968.328599][T10335] bond7 (unregistering): Released all slaves [ 968.345281][T10335] bond8 (unregistering): Released all slaves [ 968.369872][T10335] bond9 (unregistering): Released all slaves [ 968.394373][T10335] bond10 (unregistering): Released all slaves [ 968.410852][T10335] bond11 (unregistering): Released all slaves [ 968.432563][T10335] bond12 (unregistering): Released all slaves [ 968.446440][T10335] bond13 (unregistering): Released all slaves [ 968.473723][T10335] bond14 (unregistering): Released all slaves [ 968.692407][ T3694] Bluetooth: MGMT ver 1.23 [ 968.972800][ T3708] __nla_validate_parse: 2 callbacks suppressed [ 968.972816][ T3708] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8160'. [ 968.990096][T10335] tipc: Left network mode [ 969.006997][ T5719] IPVS: starting estimator thread 0... [ 969.051941][ T3715] openvswitch: netlink: Missing valid actions attribute. [ 969.085800][ T3715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 969.101372][ T3719] IPVS: using max 40 ests per chain, 96000 per kthread [ 969.121381][ T3715] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8162'. [ 969.161584][ T3715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8162'. [ 969.276674][ T3729] veth0_to_team: entered promiscuous mode [ 969.304092][ T3731] erspan0: entered promiscuous mode [ 969.552120][ T3733] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.8167'. [ 969.562332][ T3738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8169'. [ 969.704881][T19176] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 969.891687][T19176] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 969.903495][T19176] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 969.915113][T19176] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 969.931713][ T3760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8176'. [ 970.224231][ T3772] netlink: 'syz.4.8180': attribute type 1 has an invalid length. [ 970.527484][ T3772] 8021q: adding VLAN 0 to HW filter on device bond10 [ 970.616708][ T3778] syz_tun: left promiscuous mode [ 970.642318][ T3778] bond0: (slave syz_tun): Releasing backup interface [ 970.694494][ T3778] bond10: (slave syz_tun): Enslaving as a backup interface with an up link [ 970.887585][ T3799] netlink: 'syz.1.8187': attribute type 1 has an invalid length. [ 971.135505][ T3799] 8021q: adding VLAN 0 to HW filter on device bond16 [ 971.310219][ T3826] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 971.449431][ T3832] syzkaller0: entered promiscuous mode [ 971.469383][ T3832] syzkaller0: entered allmulticast mode [ 971.565951][ T3838] netlink: 220 bytes leftover after parsing attributes in process `syz.3.8197'. [ 971.711257][ T3844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 972.171432][ T3865] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8206'. [ 972.262939][ T3870] syzkaller0: entered promiscuous mode [ 972.283445][ T3870] syzkaller0: entered allmulticast mode [ 972.367100][ T3871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8208'. [ 972.874232][T10335] vlan0: left allmulticast mode [ 972.899027][T10335] veth0_vlan: left allmulticast mode [ 972.911450][T10335] vlan0: left promiscuous mode [ 972.930857][T10335] dummy0: left allmulticast mode [ 972.951054][T10335] veth1_macvtap: left promiscuous mode [ 972.966071][T10335] veth0_macvtap: left promiscuous mode [ 972.979939][T10335] veth1_vlan: left promiscuous mode [ 972.985533][T10335] veth0_vlan: left promiscuous mode [ 973.390656][ T3929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8215'. [ 973.656717][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 974.454658][ T3937] netlink: 'syz.1.8216': attribute type 1 has an invalid length. [ 974.485130][ T3936] netlink: 'syz.1.8216': attribute type 1 has an invalid length. [ 974.596071][ T3937] 8021q: adding VLAN 0 to HW filter on device bond17 [ 974.729323][ T3942] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 974.757699][ T3942] syzkaller1: Refused to change device type [ 975.080307][T10335] IPVS: stop unused estimator thread 0... [ 975.469153][ T3977] syzkaller0: entered promiscuous mode [ 975.485732][ T3977] syzkaller0: entered allmulticast mode [ 975.513532][ T3980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 975.591470][ T3981] netlink: 'syz.4.8229': attribute type 1 has an invalid length. [ 975.610821][ T3981] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8229'. [ 975.627647][ T3981] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8229'. [ 975.652314][ T3981] netlink: 'syz.4.8229': attribute type 1 has an invalid length. [ 975.670776][ T3981] netlink: 'syz.4.8229': attribute type 8 has an invalid length. [ 975.697515][ T3981] netlink: 606 bytes leftover after parsing attributes in process `syz.4.8229'. [ 975.710425][ T3988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8231'. [ 975.733321][ T3988] netlink: 64995 bytes leftover after parsing attributes in process `syz.0.8231'. [ 975.749198][ T3990] netlink: 'syz.3.8233': attribute type 1 has an invalid length. [ 976.105182][ T4004] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 976.129742][ T4008] netlink: 'syz.0.8240': attribute type 8 has an invalid length. [ 976.160082][ T4008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8240'. [ 976.172453][ T4004] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 976.232980][ T4008] bond0: entered promiscuous mode [ 976.252944][ T4008] bond_slave_0: entered promiscuous mode [ 976.274979][ T4008] bond_slave_1: entered promiscuous mode [ 976.314035][ T4008] gretap0: entered promiscuous mode [ 976.335132][ T4008] veth1_virt_wifi: entered promiscuous mode [ 976.358392][ T4008] debugfs: 'hsr1' already exists in 'hsr' [ 976.369624][ T4008] Cannot create hsr debugfs directory [ 976.375154][ T4008] hsr1: entered promiscuous mode [ 976.445232][ T4027] syzkaller0: entered promiscuous mode [ 976.457298][ T4027] syzkaller0: entered allmulticast mode [ 976.575335][ T4031] syzkaller1: entered promiscuous mode [ 976.585470][ T4031] syzkaller1: entered allmulticast mode [ 976.675848][ T4045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8246'. [ 976.739696][ T4043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8246'. [ 976.753448][ T4043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 977.055518][ T4067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8255'. [ 977.364507][ T4067] hsr_slave_1 (unregistering): left promiscuous mode [ 977.382958][ T4089] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8260'. [ 977.422220][ T4075] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 978.114753][ T4123] sctp: [Deprecated]: syz.2.8270 (pid 4123) Use of int in max_burst socket option. [ 978.114753][ T4123] Use struct sctp_assoc_value instead [ 978.352261][ T4133] syzkaller0: entered promiscuous mode [ 978.364931][ T4133] syzkaller0: entered allmulticast mode [ 978.793804][ T4165] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20004 [ 978.841265][ T4165] tipc: Enabling of bearer rejected, already enabled [ 978.960649][ T4159] syzkaller0: entered promiscuous mode [ 978.973399][ T4159] syzkaller0: entered allmulticast mode [ 979.363332][ T4194] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 979.388052][ T4196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 982.252443][ T4183] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 982.260496][ T4198] geneve4: entered promiscuous mode [ 982.288767][T19157] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 44673 - 0 [ 982.328659][T19157] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 44673 - 0 [ 982.368255][T19157] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 44673 - 0 [ 982.434340][ T4212] __nla_validate_parse: 15 callbacks suppressed [ 982.434361][ T4212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8295'. [ 982.644022][ T4217] vlan0: entered allmulticast mode [ 982.670619][ T4217] bond0: entered allmulticast mode [ 982.726977][ T4226] netlink: 'syz.4.8300': attribute type 10 has an invalid length. [ 982.755819][ T4226] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8300'. [ 982.802096][ T4231] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8302'. [ 982.825398][ T4237] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8302'. [ 982.838033][ T4238] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8301'. [ 982.964133][ T4241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8305'. [ 983.038205][ T4243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8307'. [ 983.046847][ T4246] tipc: Enabling of bearer rejected, failed to enable media [ 983.173216][ T4254] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8310'. [ 983.194383][ T4243] 8021q: adding VLAN 0 to HW filter on device bond18 [ 983.201572][ T4254] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8310'. [ 983.219047][ T4257] netlink: 'syz.4.8309': attribute type 4 has an invalid length. [ 983.238806][ T4254] netlink: 584 bytes leftover after parsing attributes in process `syz.0.8310'. [ 983.472725][ T4272] netlink: ct family unspecified [ 983.640414][ T4285] netlink: 'syz.0.8317': attribute type 1 has an invalid length. [ 984.206238][ T4305] bond9: Invalid ad_actor_system MAC address. [ 984.212404][ T4305] bond9: option ad_actor_system: invalid value (1) [ 984.243197][ T4305] bond9 (unregistering): Released all slaves [ 984.532218][ T4316] lo: entered promiscuous mode [ 984.540674][ T4316] tunl0: entered promiscuous mode [ 984.551868][ T4316] gre0: entered promiscuous mode [ 984.570090][ T4316] gretap0: entered promiscuous mode [ 984.622060][ T4316] erspan0: entered promiscuous mode [ 984.650042][ T4316] ip_vti0: entered promiscuous mode [ 984.679867][ T4320] bridge3: entered promiscuous mode [ 984.688837][ T4320] bridge3: entered allmulticast mode [ 986.383318][ T4263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 986.676204][ T4343] syzkaller0: entered promiscuous mode [ 986.693120][ T4343] syzkaller0: entered allmulticast mode [ 986.722035][ T4343] FAULT_INJECTION: forcing a failure. [ 986.722035][ T4343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 986.752148][ T4343] CPU: 0 UID: 0 PID: 4343 Comm: syz.3.8334 Not tainted syzkaller #0 PREEMPT(full) [ 986.752181][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 986.752192][ T4343] Call Trace: [ 986.752201][ T4343] [ 986.752209][ T4343] dump_stack_lvl+0xe8/0x150 [ 986.752237][ T4343] should_fail_ex+0x412/0x560 [ 986.752266][ T4343] _copy_from_user+0x2d/0xb0 [ 986.752292][ T4343] ___sys_sendmsg+0x1c6/0x360 [ 986.752314][ T4343] ? __lock_acquire+0x6b5/0x2cf0 [ 986.752339][ T4343] ? __pfx____sys_sendmsg+0x10/0x10 [ 986.752397][ T4343] ? __fget_files+0x2a/0x420 [ 986.752419][ T4343] ? __fget_files+0x3a0/0x420 [ 986.752449][ T4343] __x64_sys_sendmsg+0x1bd/0x2a0 [ 986.752476][ T4343] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 986.752507][ T4343] ? __pfx_ksys_write+0x10/0x10 [ 986.752540][ T4343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.752561][ T4343] do_syscall_64+0x15f/0xf80 [ 986.752581][ T4343] ? trace_irq_disable+0x3b/0x140 [ 986.752604][ T4343] ? clear_bhb_loop+0x40/0x90 [ 986.752627][ T4343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.752644][ T4343] RIP: 0033:0x7f0befd9cdd9 [ 986.752662][ T4343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.752678][ T4343] RSP: 002b:00007f0bf0d2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 986.752700][ T4343] RAX: ffffffffffffffda RBX: 00007f0bf0015fa0 RCX: 00007f0befd9cdd9 [ 986.752713][ T4343] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 986.752726][ T4343] RBP: 00007f0bf0d2d090 R08: 0000000000000000 R09: 0000000000000000 [ 986.752737][ T4343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.752748][ T4343] R13: 00007f0bf0016038 R14: 00007f0bf0015fa0 R15: 00007fff3a98a188 [ 986.752783][ T4343] [ 987.279807][ T4378] ipvlan2: entered allmulticast mode [ 987.294216][ T4378] batadv_slave_1: entered allmulticast mode [ 987.321923][ T4378] batman_adv: batadv0: Adding interface: ipvlan2 [ 987.344945][ T4378] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.379929][ T4378] batman_adv: batadv0: Interface activated: ipvlan2 [ 987.408299][ T4384] openvswitch: netlink: IP tunnel dst address not specified [ 987.557107][ T4397] __nla_validate_parse: 8 callbacks suppressed [ 987.557127][ T4397] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8349'. [ 987.644387][ T4397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8349'. [ 987.666812][ T4408] FAULT_INJECTION: forcing a failure. [ 987.666812][ T4408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.680878][ T4408] CPU: 1 UID: 0 PID: 4408 Comm: syz.2.8353 Not tainted syzkaller #0 PREEMPT(full) [ 987.680904][ T4408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 987.680915][ T4408] Call Trace: [ 987.680923][ T4408] [ 987.680931][ T4408] dump_stack_lvl+0xe8/0x150 [ 987.680957][ T4408] should_fail_ex+0x412/0x560 [ 987.680983][ T4408] _copy_from_user+0x2d/0xb0 [ 987.681007][ T4408] __copy_msghdr+0x3c5/0x5b0 [ 987.681036][ T4408] ___sys_sendmsg+0x213/0x360 [ 987.681057][ T4408] ? __lock_acquire+0x6b5/0x2cf0 [ 987.681083][ T4408] ? __pfx____sys_sendmsg+0x10/0x10 [ 987.681141][ T4408] ? __fget_files+0x2a/0x420 [ 987.681162][ T4408] ? __fget_files+0x3a0/0x420 [ 987.681194][ T4408] __x64_sys_sendmsg+0x1bd/0x2a0 [ 987.681220][ T4408] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 987.681253][ T4408] ? __pfx_ksys_write+0x10/0x10 [ 987.681287][ T4408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.681308][ T4408] do_syscall_64+0x15f/0xf80 [ 987.681328][ T4408] ? trace_irq_disable+0x3b/0x140 [ 987.681354][ T4408] ? clear_bhb_loop+0x40/0x90 [ 987.681379][ T4408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.681397][ T4408] RIP: 0033:0x7fafaff9cdd9 [ 987.681415][ T4408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.681431][ T4408] RSP: 002b:00007fafb0eaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 987.681450][ T4408] RAX: ffffffffffffffda RBX: 00007fafb0215fa0 RCX: 00007fafaff9cdd9 [ 987.681463][ T4408] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 987.681475][ T4408] RBP: 00007fafb0eaa090 R08: 0000000000000000 R09: 0000000000000000 [ 987.681487][ T4408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.681498][ T4408] R13: 00007fafb0216038 R14: 00007fafb0215fa0 R15: 00007ffece2e83e8 [ 987.681529][ T4408] [ 987.990358][ T4415] netlink: 'syz.2.8355': attribute type 1 has an invalid length. [ 987.997409][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8354'. [ 988.012586][ T4413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8354'. [ 988.031161][ T4415] bond8: (slave bridge4): Enslaving as a backup interface with an up link [ 988.052973][ T4412] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 988.172367][ T4415] macvlan3: entered promiscuous mode [ 988.181170][ T4415] macvlan3: entered allmulticast mode [ 988.192027][ T4415] bond8: entered promiscuous mode [ 988.209489][ T4415] bridge4: entered promiscuous mode [ 988.221504][ T4415] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 988.232431][ T4415] bond8: left promiscuous mode [ 988.240499][ T4415] bridge4: left promiscuous mode [ 988.261393][ T4424] bond0: entered promiscuous mode [ 988.267222][ T4424] bond_slave_0: entered promiscuous mode [ 988.273198][ T4424] bond_slave_1: entered promiscuous mode [ 988.279192][ T4424] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 988.292293][ T4424] batadv0: entered promiscuous mode [ 988.301393][ T4424] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 988.312681][ T4424] bond0: left promiscuous mode [ 988.318224][ T4424] bond_slave_0: left promiscuous mode [ 988.323871][ T4424] bond_slave_1: left promiscuous mode [ 988.330083][ T4424] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 988.342298][ T4424] batadv0: left promiscuous mode [ 988.669006][ T4443] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 988.990721][ T4466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8371'. [ 989.002440][ T4469] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8370'. [ 989.074997][ T4466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8371'. [ 989.162546][ T4468] bond9: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 989.206378][ T4468] bond9 (unregistering): Released all slaves [ 989.337361][ T4480] vlan3: entered allmulticast mode [ 989.355857][ T4480] bond0: entered allmulticast mode [ 989.386525][ T4481] ipvlan3: entered allmulticast mode [ 989.402433][ T4481] batman_adv: batadv0: Adding interface: ipvlan3 [ 989.421480][ T4481] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.457742][ T4481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 989.482518][ T4481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.522827][ T4481] batman_adv: batadv0: Interface activated: ipvlan3 [ 989.540503][ T4492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8374'. [ 989.636861][ T4494] netlink: 'syz.3.8374': attribute type 1 has an invalid length. [ 989.685254][ T4494] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8374'. [ 989.721565][ T4494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8374'. [ 989.742198][ T4492] smbdirect: ib_dev[syz0] removed [ 989.778796][ T4512] netlink: 'syz.2.8377': attribute type 5 has an invalid length. [ 990.200850][ T4545] syzkaller0: entered promiscuous mode [ 990.213266][ T4545] syzkaller0: entered allmulticast mode [ 990.484785][ T4551] netlink: 'syz.3.8384': attribute type 17 has an invalid length. [ 990.504140][ T4551] : Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 990.526552][ T4551] : Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 992.039917][ T4474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 992.398643][ T4582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.691009][ T4598] __nla_validate_parse: 4 callbacks suppressed [ 992.691047][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8397'. [ 992.874071][ T4609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8400'. [ 992.976632][ T4612] netlink: 'syz.4.8402': attribute type 1 has an invalid length. [ 993.047645][ T4616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8403'. [ 993.065250][ T4612] bond11: entered promiscuous mode [ 993.071926][ T4612] 8021q: adding VLAN 0 to HW filter on device bond11 [ 993.138539][ T4612] netlink: 'syz.4.8402': attribute type 1 has an invalid length. [ 993.412305][ T4639] netlink: 'syz.3.8409': attribute type 18 has an invalid length. [ 993.450113][ T3387] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.450192][ T4639] netlink: 'syz.3.8409': attribute type 18 has an invalid length. [ 993.459580][ T4644] netlink: 'syz.0.8411': attribute type 1 has an invalid length. [ 993.476375][ T82] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.502148][T10337] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.590521][ T4639] veth0: entered promiscuous mode [ 993.617697][ T4653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 993.633641][ T4639] veth0: left promiscuous mode [ 993.653961][ T4650] syzkaller1: entered promiscuous mode [ 993.664980][ T4650] syzkaller1: entered allmulticast mode [ 993.711303][ T4650] netlink: 'syz.0.8413': attribute type 1 has an invalid length. [ 993.850563][ T4659] netlink: 'syz.4.8417': attribute type 1 has an invalid length. [ 993.870060][ T4659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8417'. [ 993.880389][ T4659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8417'. [ 993.889620][ T4659] netlink: 'syz.4.8417': attribute type 2 has an invalid length. [ 993.899706][ T4659] netlink: 'syz.4.8417': attribute type 2 has an invalid length. [ 993.908790][ T4659] netlink: 'syz.4.8417': attribute type 2 has an invalid length. [ 993.943369][ T4662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 994.002139][ T4662] syzkaller0: entered promiscuous mode [ 994.023218][ T4662] syzkaller0: entered allmulticast mode [ 994.227519][ T4683] xt_hashlimit: size too large, truncated to 1048576 [ 994.765873][ T4719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8433'. [ 994.895465][ T4723] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8435'. [ 994.957999][ T4730] netlink: 'syz.3.8437': attribute type 12 has an invalid length. [ 995.133503][ T4741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8443'. [ 995.320436][ T4747] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8445'. [ 995.967719][ T4774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8451'. [ 996.039283][ T4774] bond12: option coupled_control: invalid value (12) [ 996.057413][ T4774] bond12 (unregistering): Released all slaves [ 996.198858][ T4760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 997.030272][ T4832] IPv6: sit1: Disabled Multicast RS [ 997.084678][ T4832] sit1: entered allmulticast mode [ 997.626713][ T4861] 8021q: adding VLAN 0 to HW filter on device bond9 [ 997.762305][ T4869] IPVS: persistence engine module ip_vs_pe_ not found [ 997.773200][ T4876] netem: change failed [ 997.923336][ T4884] syzkaller0: entered promiscuous mode [ 997.953068][ T4884] syzkaller0: entered allmulticast mode [ 998.234100][ T4891] __nla_validate_parse: 3 callbacks suppressed [ 998.234120][ T4891] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8482'. [ 998.372336][ T4907] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 998.400768][ T4902] veth3: entered allmulticast mode [ 998.508292][ T4897] nbd6: detected capacity change from 0 to 63 [ 998.526660][ T667] block nbd6: Receive control failed (result -32) [ 998.529770][T20651] block nbd6: Receive control failed (result -32) [ 998.580848][ T1366] block nbd6: Dead connection, failed to find a fallback [ 998.668896][ T1366] block nbd6: shutting down sockets [ 998.702188][ T1366] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 998.760282][ T1366] Buffer I/O error on dev nbd6, logical block 0, async page read [ 998.790060][ T1366] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 998.813255][ T4926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8494'. [ 998.826868][ T1366] Buffer I/O error on dev nbd6, logical block 1, async page read [ 998.851029][ T1366] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 998.875042][ T1366] Buffer I/O error on dev nbd6, logical block 2, async page read [ 998.891706][ T1366] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 998.913195][ T1366] Buffer I/O error on dev nbd6, logical block 3, async page read [ 998.934847][ T1366] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 998.960836][ T1366] Buffer I/O error on dev nbd6, logical block 0, async page read [ 998.982276][ T1366] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 999.007910][ T1366] Buffer I/O error on dev nbd6, logical block 1, async page read [ 999.010418][ T4939] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8498'. [ 999.021762][ T1366] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 999.029199][ T4938] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8499'. [ 999.036114][ T1366] Buffer I/O error on dev nbd6, logical block 2, async page read [ 999.050926][ T4940] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8498'. [ 999.061939][ T1366] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 999.072659][ T1366] Buffer I/O error on dev nbd6, logical block 3, async page read [ 999.090016][ T1366] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 999.101650][ T4948] veth0: entered promiscuous mode [ 999.119549][ T1366] Buffer I/O error on dev nbd6, logical block 0, async page read [ 999.145260][ T1366] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 999.172449][ T1366] Buffer I/O error on dev nbd6, logical block 1, async page read [ 999.240611][ T1366] ldm_validate_partition_table(): Disk read failed. [ 999.273246][ T1366] Dev nbd6: unable to read RDB block 0 [ 999.297558][ T1366] nbd6: unable to read partition table [ 999.317929][ T4961] x_tables: unsorted underflow at hook 1 [ 999.334183][ T4961] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 999.348154][ T4961] xt_hl: Unknown Hop Limit match mode: 206 [ 999.350553][ T1366] ldm_validate_partition_table(): Disk read failed. [ 999.362598][ T1366] Dev nbd6: unable to read RDB block 0 [ 999.370235][ T1366] nbd6: unable to read partition table [ 999.428247][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8501'. [ 999.481260][ T4934] veth0: left promiscuous mode [ 999.498033][ T4954] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 999.597768][T10335] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 1000.204488][ T5001] syzkaller0: entered promiscuous mode [ 1000.222275][ T5001] syzkaller0: entered allmulticast mode [ 1000.570174][ T5020] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1000.604887][ T5024] IPVS: length: 88 != 8 [ 1000.918520][ T5040] IPVS: Unknown mcast interface: vcan0 [ 1000.945567][ T5041] x_tables: unsorted entry at hook 1 [ 1000.962773][ T5042] x_tables: unsorted entry at hook 1 [ 1000.979475][ T5042] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 1001.131701][ T5044] bond9: option lp_interval: invalid value (0) [ 1001.153227][ T5044] bond9: option lp_interval: allowed values 1 - 2147483647 [ 1001.167803][ T5044] bond9 (unregistering): Released all slaves [ 1001.270429][ T5045] bond9: option lp_interval: invalid value (0) [ 1001.277225][ T5045] bond9: option lp_interval: allowed values 1 - 2147483647 [ 1001.320214][ T5045] bond9 (unregistering): Released all slaves [ 1001.474332][ T5065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8525'. [ 1001.752016][ T5081] sctp: [Deprecated]: syz.1.8528 (pid 5081) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1001.752016][ T5081] Use struct sctp_sack_info instead [ 1002.156060][ T5061] lo speed is unknown, defaulting to 1000 [ 1002.289627][ T5099] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8534'. [ 1002.301448][ T5098] ip6tnl0: entered promiscuous mode [ 1002.326935][ T5101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8535'. [ 1002.341572][ T5098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8533'. [ 1002.774522][ T5118] FAULT_INJECTION: forcing a failure. [ 1002.774522][ T5118] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.787340][ T5118] CPU: 0 UID: 0 PID: 5118 Comm: syz.2.8540 Not tainted syzkaller #0 PREEMPT(full) [ 1002.787365][ T5118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1002.787376][ T5118] Call Trace: [ 1002.787384][ T5118] [ 1002.787392][ T5118] dump_stack_lvl+0xe8/0x150 [ 1002.787421][ T5118] should_fail_ex+0x412/0x560 [ 1002.787449][ T5118] should_failslab+0xa8/0x100 [ 1002.787477][ T5118] ? skb_clone+0x212/0x3a0 [ 1002.787501][ T5118] kmem_cache_alloc_noprof+0x87/0x650 [ 1002.787526][ T5118] ? __bpf_redirect+0xcb4/0x12a0 [ 1002.787549][ T5118] skb_clone+0x212/0x3a0 [ 1002.787583][ T5118] bpf_clone_redirect+0x16a/0x4b0 [ 1002.787612][ T5118] ? bpf_test_run+0x1d1/0x830 [ 1002.787634][ T5118] bpf_prog_1939c40fbf65037b+0x5f/0x68 [ 1002.787658][ T5118] ? arch_stack_walk+0xfb/0x150 [ 1002.787689][ T5118] ? __pfx___schedule+0x10/0x10 [ 1002.787707][ T5118] ? ktime_get+0x45/0x220 [ 1002.787746][ T5118] ? preempt_schedule_thunk+0x16/0x30 [ 1002.787774][ T5118] ? preempt_schedule_common+0x82/0xd0 [ 1002.787793][ T5118] ? bpf_test_run+0x1d1/0x830 [ 1002.787817][ T5118] ? bpf_test_timer_continue+0x10c/0x320 [ 1002.787844][ T5118] bpf_test_run+0x354/0x830 [ 1002.787886][ T5118] ? __pfx_bpf_test_run+0x10/0x10 [ 1002.787925][ T5118] ? eth_type_trans+0x348/0x7e0 [ 1002.787955][ T5118] ? skb_dst_set+0x72/0x140 [ 1002.787979][ T5118] bpf_prog_test_run_skb+0xe2c/0x2260 [ 1002.788020][ T5118] ? __fget_files+0x3a0/0x420 [ 1002.788041][ T5118] ? __fget_files+0x2a/0x420 [ 1002.788068][ T5118] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1002.788091][ T5118] bpf_prog_test_run+0x2c7/0x340 [ 1002.788114][ T5118] __sys_bpf+0x643/0x950 [ 1002.788143][ T5118] ? __pfx___sys_bpf+0x10/0x10 [ 1002.788184][ T5118] ? ksys_write+0x242/0x270 [ 1002.788211][ T5118] ? __pfx_ksys_write+0x10/0x10 [ 1002.788238][ T5118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.788258][ T5118] __x64_sys_bpf+0x7c/0x90 [ 1002.788289][ T5118] do_syscall_64+0x15f/0xf80 [ 1002.788308][ T5118] ? trace_irq_disable+0x3b/0x140 [ 1002.788333][ T5118] ? clear_bhb_loop+0x40/0x90 [ 1002.788356][ T5118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.788374][ T5118] RIP: 0033:0x7fafaff9cdd9 [ 1002.788392][ T5118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.788407][ T5118] RSP: 002b:00007fafb0eaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1002.788426][ T5118] RAX: ffffffffffffffda RBX: 00007fafb0215fa0 RCX: 00007fafaff9cdd9 [ 1002.788439][ T5118] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1002.788450][ T5118] RBP: 00007fafb0eaa090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.788461][ T5118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1002.788471][ T5118] R13: 00007fafb0216038 R14: 00007fafb0215fa0 R15: 00007ffece2e83e8 [ 1002.788500][ T5118] [ 1003.566508][ T5133] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8543'. [ 1003.636638][ T5139] validate_nla: 6 callbacks suppressed [ 1003.636657][ T5139] netlink: 'syz.4.8543': attribute type 23 has an invalid length. [ 1004.030744][ T5158] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1004.109271][ T1038] [ 1004.111647][ T1038] ====================================================== [ 1004.118658][ T1038] WARNING: possible circular locking dependency detected [ 1004.125674][ T1038] syzkaller #0 Not tainted [ 1004.130070][ T1038] ------------------------------------------------------ [ 1004.137066][ T1038] kworker/u8:7/1038 is trying to acquire lock: [ 1004.143199][ T1038] ffffffff8ea85460 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1004.153025][ T1038] [ 1004.153025][ T1038] but task is already holding lock: [ 1004.160371][ T1038] ffff888054cd6e60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1004.170019][ T1038] [ 1004.170019][ T1038] which lock already depends on the new lock. [ 1004.170019][ T1038] [ 1004.180407][ T1038] [ 1004.180407][ T1038] the existing dependency chain (in reverse order) is: [ 1004.189404][ T1038] [ 1004.189404][ T1038] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 1004.197303][ T1038] lock_sock_nested+0x41/0x100 [ 1004.202585][ T1038] mptcp_connect+0x4c3/0x830 [ 1004.207680][ T1038] __inet_stream_connect+0x25a/0xdd0 [ 1004.213473][ T1038] inet_stream_connect+0x66/0xa0 [ 1004.218922][ T1038] __sys_connect+0x312/0x450 [ 1004.224027][ T1038] __x64_sys_connect+0x7a/0x90 [ 1004.229297][ T1038] do_syscall_64+0x15f/0xf80 [ 1004.234396][ T1038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.240798][ T1038] [ 1004.240798][ T1038] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1004.248515][ T1038] lock_sock_nested+0x41/0x100 [ 1004.253792][ T1038] inet_shutdown+0x6a/0x390 [ 1004.258805][ T1038] nbd_mark_nsock_dead+0x2e9/0x560 [ 1004.264422][ T1038] recv_work+0x1c2e/0x1d40 [ 1004.269350][ T1038] process_scheduled_works+0xb5d/0x1860 [ 1004.275401][ T1038] worker_thread+0xa53/0xfc0 [ 1004.280497][ T1038] kthread+0x388/0x470 [ 1004.285073][ T1038] ret_from_fork+0x514/0xb70 [ 1004.290176][ T1038] ret_from_fork_asm+0x1a/0x30 [ 1004.295451][ T1038] [ 1004.295451][ T1038] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1004.303081][ T1038] __mutex_lock+0x1a3/0x1550 [ 1004.308179][ T1038] nbd_queue_rq+0x37b/0x1100 [ 1004.313274][ T1038] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1004.319331][ T1038] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1004.326174][ T1038] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1004.332665][ T1038] blk_mq_run_hw_queue+0x348/0x4f0 [ 1004.338283][ T1038] blk_mq_dispatch_list+0xd16/0xe10 [ 1004.343992][ T1038] blk_mq_flush_plug_list+0x48d/0x570 [ 1004.349872][ T1038] __blk_flush_plug+0x3ed/0x4d0 [ 1004.355231][ T1038] __submit_bio+0x28d/0x580 [ 1004.360247][ T1038] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1004.366390][ T1038] block_read_full_folio+0x599/0x830 [ 1004.372187][ T1038] filemap_read_folio+0x137/0x3b0 [ 1004.377723][ T1038] do_read_cache_folio+0x358/0x590 [ 1004.383347][ T1038] read_part_sector+0xb6/0x2b0 [ 1004.388620][ T1038] adfspart_check_ICS+0xb1/0x960 [ 1004.394068][ T1038] bdev_disk_changed+0x817/0x1770 [ 1004.399601][ T1038] blkdev_get_whole+0x380/0x510 [ 1004.404962][ T1038] bdev_open+0x31e/0xd30 [ 1004.409714][ T1038] blkdev_open+0x470/0x610 [ 1004.414639][ T1038] do_dentry_open+0x785/0x14e0 [ 1004.419910][ T1038] vfs_open+0x3b/0x340 [ 1004.424486][ T1038] path_openat+0x2e08/0x3860 [ 1004.429584][ T1038] do_file_open+0x23e/0x4a0 [ 1004.434602][ T1038] do_sys_openat2+0x113/0x200 [ 1004.439785][ T1038] __x64_sys_openat+0x138/0x170 [ 1004.445145][ T1038] do_syscall_64+0x15f/0xf80 [ 1004.450242][ T1038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.456642][ T1038] [ 1004.456642][ T1038] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1004.463840][ T1038] __mutex_lock+0x1a3/0x1550 [ 1004.468936][ T1038] nbd_queue_rq+0xc6/0x1100 [ 1004.473946][ T1038] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1004.480002][ T1038] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1004.486844][ T1038] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1004.493336][ T1038] blk_mq_run_hw_queue+0x348/0x4f0 [ 1004.498956][ T1038] blk_mq_dispatch_list+0xd16/0xe10 [ 1004.504666][ T1038] blk_mq_flush_plug_list+0x48d/0x570 [ 1004.510556][ T1038] __blk_flush_plug+0x3ed/0x4d0 [ 1004.515917][ T1038] __submit_bio+0x28d/0x580 [ 1004.520930][ T1038] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1004.527070][ T1038] block_read_full_folio+0x599/0x830 [ 1004.532861][ T1038] filemap_read_folio+0x137/0x3b0 [ 1004.538395][ T1038] do_read_cache_folio+0x358/0x590 [ 1004.544024][ T1038] read_part_sector+0xb6/0x2b0 [ 1004.549300][ T1038] adfspart_check_ICS+0xb1/0x960 [ 1004.554747][ T1038] bdev_disk_changed+0x817/0x1770 [ 1004.560282][ T1038] blkdev_get_whole+0x380/0x510 [ 1004.565645][ T1038] bdev_open+0x31e/0xd30 [ 1004.570410][ T1038] blkdev_open+0x470/0x610 [ 1004.575331][ T1038] do_dentry_open+0x785/0x14e0 [ 1004.580603][ T1038] vfs_open+0x3b/0x340 [ 1004.585206][ T1038] path_openat+0x2e08/0x3860 [ 1004.590308][ T1038] do_file_open+0x23e/0x4a0 [ 1004.595324][ T1038] do_sys_openat2+0x113/0x200 [ 1004.600508][ T1038] __x64_sys_openat+0x138/0x170 [ 1004.605865][ T1038] do_syscall_64+0x15f/0xf80 [ 1004.610961][ T1038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.617357][ T1038] [ 1004.617357][ T1038] -> #3 (set->srcu){.+.+}-{0:0}: [ 1004.624471][ T1038] __synchronize_srcu+0xca/0x300 [ 1004.629912][ T1038] elevator_switch+0x1e8/0x7a0 [ 1004.635187][ T1038] elevator_change+0x2cc/0x450 [ 1004.640460][ T1038] elevator_set_default+0x36c/0x430 [ 1004.646165][ T1038] blk_register_queue+0x3e9/0x4e0 [ 1004.651701][ T1038] __add_disk+0x677/0xd50 [ 1004.656532][ T1038] add_disk_fwnode+0xfb/0x480 [ 1004.661711][ T1038] nbd_dev_add+0x72c/0xb50 [ 1004.666633][ T1038] nbd_init+0x168/0x1f0 [ 1004.671295][ T1038] do_one_initcall+0x250/0x870 [ 1004.676564][ T1038] do_initcall_level+0x104/0x190 [ 1004.682005][ T1038] do_initcalls+0x59/0xa0 [ 1004.686838][ T1038] kernel_init_freeable+0x2a6/0x3e0 [ 1004.692541][ T1038] kernel_init+0x1d/0x1d0 [ 1004.697378][ T1038] ret_from_fork+0x514/0xb70 [ 1004.702483][ T1038] ret_from_fork_asm+0x1a/0x30 [ 1004.707754][ T1038] [ 1004.707754][ T1038] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1004.715555][ T1038] __mutex_lock+0x1a3/0x1550 [ 1004.720655][ T1038] elevator_change+0x1b3/0x450 [ 1004.725931][ T1038] elevator_set_none+0xb5/0x140 [ 1004.731290][ T1038] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1004.737602][ T1038] nbd_start_device+0x17f/0xb10 [ 1004.742958][ T1038] nbd_genl_connect+0x165b/0x1cf0 [ 1004.748494][ T1038] genl_family_rcv_msg_doit+0x22a/0x330 [ 1004.754552][ T1038] genl_rcv_msg+0x61c/0x7a0 [ 1004.759571][ T1038] netlink_rcv_skb+0x232/0x4b0 [ 1004.764844][ T1038] genl_rcv+0x28/0x40 [ 1004.769336][ T1038] netlink_unicast+0x75c/0x8e0 [ 1004.774613][ T1038] netlink_sendmsg+0x813/0xb40 [ 1004.779883][ T1038] ____sys_sendmsg+0x972/0x9f0 [ 1004.785154][ T1038] ___sys_sendmsg+0x2a5/0x360 [ 1004.790336][ T1038] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1004.795782][ T1038] do_syscall_64+0x15f/0xf80 [ 1004.800877][ T1038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.807286][ T1038] [ 1004.807286][ T1038] -> #1 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 1004.815879][ T1038] blk_alloc_queue+0x546/0x680 [ 1004.821164][ T1038] __blk_mq_alloc_disk+0x197/0x390 [ 1004.826788][ T1038] nbd_dev_add+0x499/0xb50 [ 1004.831708][ T1038] nbd_init+0x168/0x1f0 [ 1004.836376][ T1038] do_one_initcall+0x250/0x870 [ 1004.841653][ T1038] do_initcall_level+0x104/0x190 [ 1004.847098][ T1038] do_initcalls+0x59/0xa0 [ 1004.851934][ T1038] kernel_init_freeable+0x2a6/0x3e0 [ 1004.857641][ T1038] kernel_init+0x1d/0x1d0 [ 1004.862484][ T1038] ret_from_fork+0x514/0xb70 [ 1004.867579][ T1038] ret_from_fork_asm+0x1a/0x30 [ 1004.872861][ T1038] [ 1004.872861][ T1038] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1004.880060][ T1038] __lock_acquire+0x15a5/0x2cf0 [ 1004.885416][ T1038] lock_acquire+0x106/0x350 [ 1004.890426][ T1038] fs_reclaim_acquire+0x71/0x100 [ 1004.895874][ T1038] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1004.902191][ T1038] __alloc_skb+0x1d0/0x7d0 [ 1004.907113][ T1038] tcp_stream_alloc_skb+0x3f/0x580 [ 1004.912738][ T1038] tcp_connect+0x15a9/0x53a0 [ 1004.917839][ T1038] tcp_v6_connect+0x128d/0x1b10 [ 1004.923199][ T1038] __inet_stream_connect+0x25a/0xdd0 [ 1004.928992][ T1038] inet_stream_connect+0x66/0xa0 [ 1004.934438][ T1038] kernel_connect+0x141/0x1c0 [ 1004.939626][ T1038] rds_tcp_conn_path_connect+0x6f6/0x930 [ 1004.945761][ T1038] rds_connect_worker+0x1d8/0x290 [ 1004.951296][ T1038] process_scheduled_works+0xb5d/0x1860 [ 1004.957347][ T1038] worker_thread+0xa53/0xfc0 [ 1004.962445][ T1038] kthread+0x388/0x470 [ 1004.967027][ T1038] ret_from_fork+0x514/0xb70 [ 1004.972123][ T1038] ret_from_fork_asm+0x1a/0x30 [ 1004.977395][ T1038] [ 1004.977395][ T1038] other info that might help us debug this: [ 1004.977395][ T1038] [ 1004.987604][ T1038] Chain exists of: [ 1004.987604][ T1038] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 1004.987604][ T1038] [ 1005.000539][ T1038] Possible unsafe locking scenario: [ 1005.000539][ T1038] [ 1005.007968][ T1038] CPU0 CPU1 [ 1005.013317][ T1038] ---- ---- [ 1005.018666][ T1038] lock(k-sk_lock-AF_INET6); [ 1005.023335][ T1038] lock(sk_lock-AF_INET6); [ 1005.030343][ T1038] lock(k-sk_lock-AF_INET6); [ 1005.037534][ T1038] lock(fs_reclaim); [ 1005.041511][ T1038] [ 1005.041511][ T1038] *** DEADLOCK *** [ 1005.041511][ T1038] [ 1005.049638][ T1038] 4 locks held by kworker/u8:7/1038: [ 1005.054910][ T1038] #0: ffff88804edf3140 ((wq_completion)krds_cp_wq#40/0#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1005.066827][ T1038] #1: ffffc9000538fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1005.079604][ T1038] #2: ffff88808436d880 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x930 [ 1005.090639][ T1038] #3: ffff888054cd6e60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1005.100736][ T1038] [ 1005.100736][ T1038] stack backtrace: [ 1005.106621][ T1038] CPU: 0 UID: 0 PID: 1038 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 1005.106640][ T1038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1005.106651][ T1038] Workqueue: krds_cp_wq#40/0 rds_connect_worker [ 1005.106676][ T1038] Call Trace: [ 1005.106685][ T1038] [ 1005.106693][ T1038] dump_stack_lvl+0xe8/0x150 [ 1005.106711][ T1038] print_circular_bug+0x2e1/0x300 [ 1005.106731][ T1038] check_noncircular+0x12e/0x150 [ 1005.106751][ T1038] __lock_acquire+0x15a5/0x2cf0 [ 1005.106775][ T1038] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1005.106794][ T1038] lock_acquire+0x106/0x350 [ 1005.106808][ T1038] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1005.106827][ T1038] ? ip6_dst_check+0xe2/0x7e0 [ 1005.106845][ T1038] fs_reclaim_acquire+0x71/0x100 [ 1005.106864][ T1038] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1005.106882][ T1038] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1005.106900][ T1038] ? ip6_default_advmss+0x80/0x3b0 [ 1005.106918][ T1038] ? __alloc_skb+0x1d0/0x7d0 [ 1005.106935][ T1038] __alloc_skb+0x1d0/0x7d0 [ 1005.106951][ T1038] tcp_stream_alloc_skb+0x3f/0x580 [ 1005.106972][ T1038] ? __asan_memset+0x22/0x50 [ 1005.106990][ T1038] tcp_connect+0x15a9/0x53a0 [ 1005.107018][ T1038] ? __pfx_tcp_connect+0x10/0x10 [ 1005.107036][ T1038] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1005.107058][ T1038] ? lockdep_hardirqs_on+0x7a/0x110 [ 1005.107074][ T1038] ? ktime_get_with_offset+0x93/0x2d0 [ 1005.107099][ T1038] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1005.107122][ T1038] ? __asan_memset+0x22/0x50 [ 1005.107140][ T1038] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1005.107159][ T1038] ? inet6_hash_connect+0xeb/0x170 [ 1005.107180][ T1038] tcp_v6_connect+0x128d/0x1b10 [ 1005.107206][ T1038] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1005.107225][ T1038] ? ktime_get+0x45/0x220 [ 1005.107245][ T1038] ? ktime_get+0x45/0x220 [ 1005.107264][ T1038] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1005.107286][ T1038] __inet_stream_connect+0x25a/0xdd0 [ 1005.107307][ T1038] ? do_raw_spin_lock+0x12b/0x2f0 [ 1005.107326][ T1038] ? lock_sock_nested+0x6a/0x100 [ 1005.107347][ T1038] ? __pfx___inet_stream_connect+0x10/0x10 [ 1005.107367][ T1038] ? inet_stream_connect+0x51/0xa0 [ 1005.107385][ T1038] ? __local_bh_enable_ip+0xd0/0x130 [ 1005.107402][ T1038] inet_stream_connect+0x66/0xa0 [ 1005.107421][ T1038] kernel_connect+0x141/0x1c0 [ 1005.107440][ T1038] ? net_generic+0x1e/0x240 [ 1005.107460][ T1038] ? __pfx_kernel_connect+0x10/0x10 [ 1005.107484][ T1038] ? __local_bh_enable_ip+0xd0/0x130 [ 1005.107499][ T1038] rds_tcp_conn_path_connect+0x6f6/0x930 [ 1005.107518][ T1038] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1005.107533][ T1038] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1005.107552][ T1038] ? process_scheduled_works+0xa70/0x1860 [ 1005.107568][ T1038] ? process_scheduled_works+0xa70/0x1860 [ 1005.107585][ T1038] rds_connect_worker+0x1d8/0x290 [ 1005.107602][ T1038] ? process_scheduled_works+0xa70/0x1860 [ 1005.107617][ T1038] process_scheduled_works+0xb5d/0x1860 [ 1005.107642][ T1038] ? __pfx_process_scheduled_works+0x10/0x10 [ 1005.107659][ T1038] ? assign_work+0x3d5/0x5e0 [ 1005.107674][ T1038] worker_thread+0xa53/0xfc0 [ 1005.107698][ T1038] kthread+0x388/0x470 [ 1005.107716][ T1038] ? __pfx_worker_thread+0x10/0x10 [ 1005.107730][ T1038] ? __pfx_kthread+0x10/0x10 [ 1005.107748][ T1038] ret_from_fork+0x514/0xb70 [ 1005.107763][ T1038] ? __pfx_ret_from_fork+0x10/0x10 [ 1005.107777][ T1038] ? __switch_to+0xc79/0x1410 [ 1005.107798][ T1038] ? __pfx_kthread+0x10/0x10 [ 1005.107816][ T1038] ret_from_fork_asm+0x1a/0x30 [ 1005.107838][ T1038] [ 1005.524974][ T5165] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8547'. [ 1005.541055][ T5165] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8547'. [ 1005.543665][ T5155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8546'. [ 1005.550091][ T5165] netlink: 'syz.3.8547': attribute type 6 has an invalid length. [ 1005.550113][ T5165] netlink: 'syz.3.8547': attribute type 5 has an invalid length. [ 1005.577819][ T5165] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8547'. [ 1006.935993][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!