last executing test programs: 5.677382308s ago: executing program 0 (id=2325): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) sendmmsg$alg(r1, &(0x7f0000005640)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="594fe9b5892a686d8c48163e509a403dae2165ec5b076cbb64fb92f2bec02c3ddf49997963cdb2fe17a157c784ad4eca6328ac91e51803bbc0b9b2e8435b1b9b7b3153123a10ad2a0d80d9236171e471c3e0f7e3c905f39f6dccca52e12f2c0027", 0x61}], 0x1, 0x0, 0x0, 0x2c040010}], 0x1, 0x40) 5.580125262s ago: executing program 0 (id=2330): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="64030000120000082abd7000fedbdf25258803094e244e2404000000030000000800000001ffffff02610000900600006a00000009000000", @ANYRES32=0x0, @ANYBLOB="0700000009000000000001000400000090000100d36621e27b52f8af7a3d134cfaf98a5c0121119aa101323f8a28ed960991b58f37d9ea1df72f46a62ca8a8a9c1ac429c964a3c80f351ebe598d8a135c6d9552a152b958364afda6bc1fe77c43402020cdd2747e02a44cf2b2c921b7f713dd065fa1e280747f18b92bac26cd90f6d927a2a226413f7288aea44ef6d52425821a24d61da2af2ba7a032ebd0b3d7f0001002249d92c96570784c0dff6cefcd6f24aff1650e000a2a8e18126725a97503a391678e0a325cb9ec4d8631f4f876e9d244f0011f9dbaf79e306e653c87b4a23dcff06be47792c45d5b93da1139895002e3d63104000edc3d9f7989547bc2feb90575007e90da485a25947340153dc1a6a6040a66f7d0cf8eb82cb0f00580001000de9af3068ed5c98e40f0df6d6c404b514f8dbcb611a539a297222e730a38064bfa107093270ce618ee82923505c6ded8b175a283f18a1bd0987978ca600153ee3af2f909b06749fbd73a1156199459fce40ce72e10001003107c0a1b4adb52a37a189f2211c87cf22f75cdd454d1c9028e9e2f5e61409b0c63c5733641989c03d2de4023e84187e4bd0d8bf853093ef35a47c7c262e2329a8c2f48813dd104987cd2cdbf1062b6560a569d7175be4a6db556362158becabf6b25cf4c078a35605b7991ad33df7dec3f3fac0ab014c28809bdb0e16925375df44d63ef0c40f6af7e67262d923f33bf786d6aca42e24e5293ee5c8baeed19138c4b0516cd289365ecd9c6d335d90e1be7d9fa1dea0b94b355e9c7cf691d2cb5bbe8582350026e72fff19a53c1a667776690da1bb20935e3d9ebba549000000ca0001005656cfa23f1d7b4f6b18068929e423600c22f7ba36a8de0ad919c09ab6fdfd1682abdf41d0720dfd7fb77fc79592c13f9a8cd2a5e570decd319bcbde3412bf8ea719c64688a3899d405330dae306f05283c9e87e399ba8efe37a03b81a8058ae0007655ad7be60d00f98a5a061f90dbc12b11b2401d41a87ee48cb1698f7dad08c3c2a520c30c59952cf68ce45cc9900bdceea6b5dd108e6572611da88ad922061f5f4da78bed8a260cff5892172b637213d0615ef6b9a8f53e400954ed248c00fc21d0fc80a0000"], 0x364}, 0x1, 0x0, 0x0, 0x4040881}, 0x20010001) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={r1, 0x8}, &(0x7f0000000040)=0x8) 5.471074385s ago: executing program 0 (id=2333): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000001"], 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000001"], 0xfc}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000500)={0xc14, 0x1, 0x1, 0x6}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private}, &(0x7f0000000100)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private}, &(0x7f0000000100)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@polexpire={0xc8, 0x1b, 0x8, 0x70bd27, 0x25dfdbfd, {{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@loopback, 0x4e21, 0x0, 0x4e22, 0xfff9, 0xa, 0x80, 0xa0, 0x0, r4, r5}, {0x6, 0x5a5, 0x3, 0x8000, 0x90, 0x3, 0x7f, 0x7ff}, {0x7d78, 0x7fffffffffffffff, 0x5, 0x2}, 0x0, 0x6e6bb0, 0x0, 0x1, 0x2, 0x2}}, [@extra_flags={0x8, 0x18, 0x5db}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008840}, 0x10) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 5.233110548s ago: executing program 0 (id=2340): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x2}]}}, 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r3, r3, 0x0, 0x9) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x3, &(0x7f00000009c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x9}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120005001600010000000800150000c422"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) (async) close(0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x2}]}}, 0x0, 0x2a}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) (async) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) sendfile(r3, r3, 0x0, 0x9) (async) close(0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x3, &(0x7f00000009c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x9}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120005001600010000000800150000c422"], 0x48}}, 0x0) (async) 5.10758272s ago: executing program 0 (id=2346): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x80}, 0x1, 0x7}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @multicast}, 0x10) close(r1) r3 = socket(0x10, 0x6, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r7) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r8, 0x72b}, 0x14}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000200), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="1400000038000107000000000000000008"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000000)=0x1) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r10, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20048810}, 0x24004000) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f00000001c0)) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000280)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x2, 0xfffff034}, {0x8, 0x0, 0x0, 0x4000000}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e26, @multicast2}}}, &(0x7f0000000040)=0xcc) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRESHEX=r1, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r4, @ANYRESHEX=r6, @ANYRESDEC=r5, @ANYRES64=r12], 0x0) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r13, 0x29, 0x15, 0x0, &(0x7f00000001c0)) 1.821436206s ago: executing program 1 (id=2407): r0 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10}, 0x90) connect$can_bcm(r0, &(0x7f0000000080), 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xb}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x96, &(0x7f00000002c0)=""/150, 0x40f00, 0x28, '\x00', r5, 0x1c, r1, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xc, 0x7, 0x6}, 0x10, 0x28a6e, r2, 0x1, 0x0, &(0x7f00000003c0)=[{0x4, 0x5, 0x3, 0x6}], 0x10, 0x70}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close(0x3) socket$can_bcm(0x1d, 0x2, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10}, 0x90) (async) connect$can_bcm(r0, &(0x7f0000000080), 0x10) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xb}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x96, &(0x7f00000002c0)=""/150, 0x40f00, 0x28, '\x00', r5, 0x1c, r1, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xc, 0x7, 0x6}, 0x10, 0x28a6e, r2, 0x1, 0x0, &(0x7f00000003c0)=[{0x4, 0x5, 0x3, 0x6}], 0x10, 0x70}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) close(0x3) (async) 1.706111679s ago: executing program 2 (id=2411): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x78}}, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0xfffffffffffffffd) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) 1.490560644s ago: executing program 1 (id=2413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe7630a33b6deca160d8c2fbff48eb96428300"}, 0xd8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd28, 0x25dfdbfd, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x2, 0xffe, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044005}, 0x4048840) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e20, 0x0, @mcast2, 0xff}}, 0x0, 0x0, 0x4, 0x0, "f50df9ae968367476ee6ea08cbddae2f735774e5f75232edba9b85a52fada52c0ce78ea0676ff03832b3db2ed3b7a90a344477e7f04f425a08803da9a5dab6ff586740d33efd14804e44af815bb77982"}, 0xd8) listen(r7, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r12 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r12, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r12, &(0x7f0000000280)={&(0x7f0000001080), 0x10, &(0x7f00000015c0)=[{&(0x7f0000000080)="0d94124ee0e70956", 0x8}, {&(0x7f0000000140)="d3040b033ef5621ff3336e78b5e49d4d94e7cc2c175da9788b712cf2f6a09a01b9b8d592f6d240c4b8fc81c28756a03e5810d64c39c09c65e4a94ab42dbba198087c79cd6ae96e00f5d1208a", 0x4c}, {&(0x7f0000001240)="df6b4cb5e22a66412df47507147ca739fa96870f489a7cde1f63ed280f576806bddfe0686fd8e64d44c5b7b50fbb06f0f36b708ac1e6f8f1be0b8d816ac22163fc0ec9343da46c01eee4579bb2e0782657eeb23a18ced7ecc5742d7413b1b71032588601a41cd2038a059c21a562ea434413c087c0842910f8c5d3b7854227bac6303169e9344dfd074ca8e50bd743af41", 0x91}, {&(0x7f0000000380)="8bcb4ce9e64965042308e4e94891b78f07019c6671855988ed49283020bf782f651a566a78312223ea72359518ce1cb760d402d37351d73cf60e9737bbc30e0992a9481fb9a6285f08", 0x49}, {&(0x7f0000000400)="a4fd1e0b191100694a49badd870896f7bd154ebd3644a9849248b5ae32cd8291751dfc04a9aedfa1ff4f7b8d661b2c3fe238ef6799c6ae9e9f972a3be6a731fb7f7eab710ce8351b7adedc7e5fe2e9589ede91055e316452dbad8247898b7e93c53b2dfa0fd8397542ac9f795741e002ab8f3519993efea1a8e6cef10de8f734bfb98b1f", 0x84}, {&(0x7f00000004c0)="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", 0xfc}, {&(0x7f00000000c0)="333adc6d3bd3353258bb1369b5d6d7e05f1bc8879d56ca8ac0e43e06a71f719e7b7058c38ac55000c7bdd504ec4d09608c98c76eff", 0x35}, {&(0x7f0000001640)="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", 0xafb}], 0x8}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) 1.397881648s ago: executing program 4 (id=2416): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1500000078000100000000000000000007"], 0x18}, 0x1, 0x5502000000000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000f14010000000000000000000c002e0072646d615f636d"], 0x1c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0xbd, 0x4, 0x2, 0x20, @loopback, @private1, 0x10, 0x7, 0xfffff001, 0x887}}) sendmsg$nl_route(r7, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000000000df0d8de5ae36b48d900c9ab6b788fffd2507000000", @ANYRES32=r9, @ANYBLOB="008000002008020008000d000200000008001e0006000000050021000a00000024000e0000a002000000000002000000000000001c0600000000000000000e080000000008001b009fd70000"], 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x4c) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1500000078000100000000000000000007"], 0x18}, 0x1, 0x5502000000000000}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) (async) socket(0x10, 0x803, 0x8) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000f14010000000000000000000c002e0072646d615f636d"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0xbd, 0x4, 0x2, 0x20, @loopback, @private1, 0x10, 0x7, 0xfffff001, 0x887}}) (async) sendmsg$nl_route(r7, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000000000df0d8de5ae36b48d900c9ab6b788fffd2507000000", @ANYRES32=r9, @ANYBLOB="008000002008020008000d000200000008001e0006000000050021000a00000024000e0000a002000000000002000000000000001c0600000000000000000e080000000008001b009fd70000"], 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x4c) (async) 1.333287889s ago: executing program 2 (id=2417): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'nr0\x00', 0x9}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000100)) (async) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000100)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) (async) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000001000030400000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008000007500500680012800e00010069703665727370616e000000540002800500160001000000080015009f800a001400070006000fb5e3840000000000000000000006000f000002000004001200050008000c00000006000e00020000000500080002000000060011004e230000"], 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.332836529s ago: executing program 1 (id=2418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x3000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 1.304463864s ago: executing program 1 (id=2419): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0xe1e571d2193a0e72) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x9a, &(0x7f0000000400)=""/154}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24ac40, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/20, 0x14, 0x0, &(0x7f0000000300)=""/247, 0xf7}, &(0x7f0000000100)=0x40) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be"], 0xfdef) 1.049107942s ago: executing program 2 (id=2421): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000840)) r1 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r1, 0x0, 0x31, &(0x7f0000000240)=0x2, 0xfffffffffffffdab) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000640)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001008210404000000070000000000000036099dc6b82074ccff7cd8ef6df6", @ANYRES32=0x0, @ANYBLOB="adffa888d2260000240012"], 0x50}}, 0xc080) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r3 = socket(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000400), &(0x7f00000004c0)=0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @empty}, &(0x7f00000000c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 946.958141ms ago: executing program 3 (id=2422): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x1, 0x1ff, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1], 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0x5c, 0x3c, &(0x7f0000000380)="c122fbf07053ee96bf862edc41e05cdfa6253b2d546b43be6f435df6a6432cf23c7181f576f7be79e05eca441cd1d7e18b4545dc0948adb9a794c9064e48e852ce82c479719e8a87e8a8e9adafccad49fe0044a7aecce63954c8367d", &(0x7f0000000400)=""/60, 0x1513, 0x0, 0xd2, 0x79, &(0x7f0000000440)="ad45991520c3b82553ccbfc61b2a9cd737fc99c3bf0eefcb7f19208735e959b720f529bbe0475485b4ed80df6dc00002bf25e65d4825683db082b2142cec7027eddd00f9d3b52ec4c5a843f0c363e1a1fed3b450cee3c9087a45255cace3da70d14da0fee89cbc585642ed482102baa2d1401a8bebea64b95d831d45d1b4a515d4d6275a5c3cf0fcab9281a49acdb84011b08d348957b04d86e67bfd17d5adb3e9924698ecd536e801352d58374fce4321bc195ef625fcfcac5dfc0a34520060ce5f0090839c7d7796a7ac6803111f7fd38b", &(0x7f0000000540)="f8ffb9b8f83a11fe1afbf005244b4b262cdfd527e859cdfdc8c0e9f9fdd581368deeb73c3b8e85b5f2b2467a8f22cd783db7691bef1ed964296be89e4ea8f13da3b630b7c18ce540d91352291978d54e43c6a424692a0820105f556ca746507efcadfa6d35ee78cf0f3c817773da3b50bcef348235e75af4b3", 0x4, 0x0, 0x5}, 0x50) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000640)={r0}, 0xc) (async) r1 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x100040, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000740)=0x1) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='memory.current\x00', 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f00000007c0)=0x9, &(0x7f0000000800)=0x2) (async) recvfrom(r1, &(0x7f0000000840)=""/4096, 0x1000, 0x10000, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b00)={r4, 0xe0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000001900)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001940), &(0x7f0000001980), 0x8, 0x45, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001bc0)={'ip6gre0\x00', &(0x7f0000001b40)={'ip6_vti0\x00', r5, 0x4, 0x7e, 0x7f, 0xfffffffa, 0x14, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0xd069d998f6fb0b0, 0x7801, 0x0, 0x2}}) bind$packet(r4, &(0x7f0000001c00)={0x11, 0x19, r6, 0x1, 0xa9, 0x6, @random="e55d629de2bf"}, 0x14) (async) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000001c40), &(0x7f0000001c80)=0x4) (async) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000001cc0)={0xff, {{0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0xb}, 0x6}}, {{0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}}, 0x108) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000001e00)=@req={0x1d, 0xffffffff, 0x4, 0xd7f}, 0x10) (async) ioctl$PPPIOCUNBRIDGECHAN(r4, 0x7434) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002100)={r4, 0xe0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001ec0)=[0x0, 0x0, 0x0], 0x0, 0x6a, &(0x7f0000001f00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001f40), &(0x7f0000001f80), 0x8, 0x51, 0x8, 0x8, &(0x7f0000001fc0)}}, 0x10) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000002140)={'mangle\x00', 0xb, "fbe9ed71c45bc18d4d9978"}, &(0x7f0000002180)=0x2f) (async) write$cgroup_int(r4, &(0x7f00000021c0)=0x6, 0x12) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000002200)={0xf, 0x1}, 0x2) r8 = openat$cgroup_ro(r4, &(0x7f0000002240)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), r8) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000033c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003380)={&(0x7f0000002300)={0x1080, r9, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x1058, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "04e88e5c435d8d724f6455a2345c29e446ffb5ce264f775a"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}]}, 0x1080}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000003400)='veth1_macvtap\x00') (async) setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, &(0x7f0000003440)=0xffff, 0x4) bind$packet(r8, &(0x7f0000003480)={0x11, 0x1b, r5, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000034c0)={r0, r2, 0x25, 0x10, @void}, 0x10) (async) close(r8) 923.691942ms ago: executing program 1 (id=2423): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000200)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000240)=0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x9c, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x96, &(0x7f0000000080)=""/150, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) 912.332405ms ago: executing program 4 (id=2424): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x3010}, 0x48) (async, rerun: 64) r2 = socket$rds(0x15, 0x5, 0x0) (rerun: 64) bind$rds(r2, &(0x7f0000000200)={0xa, 0x0, @private}, 0x1c) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'lo\x00', &(0x7f0000000280)=@ethtool_test={0x1a, 0x1, 0x3, 0x1, [0x7fff]}}) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r4, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) (async, rerun: 32) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r11, 0x11, 0x0, 0x0, @void, @value=r10}, 0x20) syz_emit_ethernet(0xfc1, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "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"}}}}, 0x0) 756.608874ms ago: executing program 1 (id=2425): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c000240000000000000008108000340fffffffd0c0001400000000000000007"], 0xb8}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000680000000000069078ac1414bbac1414aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="501a000090780000"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="fad1e0480100", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="fad1e0480100", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000000)=0x3f7, 0x4) recvmmsg(r2, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/43, 0x2b}}], 0x1, 0x2, 0x0) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) (async) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b80)={0x16c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x16c}}, 0x4040841) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8001, 0x2, 0x8, 0x7, 0x10001}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8001, 0x2, 0x8, 0x7, 0x10001}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r5, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x18}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f00000007c0)="35d5bf5915f8dfc291787685b1fba9a1563a23083bd45b213927b425162201c81540804561fce7abf5b101433eb2494ba95a3c5a8b8387b4a8c526b921aaec0b0f050dd706c4bac5ed31f3e89c21589ee1d60242338bd73bf8ac2faae3421460d29029c96f0249b4716b8bcf8a15b4f6dfe70f3e9edbefd1937ec007e7bb3e2a3e5c70b5569314", 0x87}, {&(0x7f0000000580)="9b8aa112e90ab5d65ba7e753385cb116baa604cb468594181bc06a70ec8eb1d5a412d039dd749cb042f3f59fb1d44101455049b7b2f36309b8911faed183e6681a61e252922debe13b8a9a104199b0a15bd97d1d6d5331ab0780657a1981de183f0cc5d57c78e906b3f0a0fc7dd6f12678080f84d3ca725d96bf9d2832156e9f4a3de7e4a52983534fec8785359ae8900f2a7dc224a8ab77", 0x98}, {&(0x7f0000000240)="192960c649875716f84a20738a77de329fd1a3d39ac3928cfcac0308315e0fd11f30a94aa8b64efe92f5be8d2d8c65f4ebfc346c6998afc5a132c12026270cb11bde00feee5c7e8d9232c47709ac2b5261a6426dcf3fca44440cdfec281f867058371b761295de59", 0x68}], 0x3, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xa5d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}, @ip_retopts={{0x40, 0x0, 0x7, {[@rr={0x7, 0x23, 0xe7, [@broadcast, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @private=0xa010100, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xb, 0xb2, [@rand_addr=0x64010101, @multicast1]}]}}}], 0x70}}], 0x2, 0x8040) (async) sendmmsg$inet(r5, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x18}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f00000007c0)="35d5bf5915f8dfc291787685b1fba9a1563a23083bd45b213927b425162201c81540804561fce7abf5b101433eb2494ba95a3c5a8b8387b4a8c526b921aaec0b0f050dd706c4bac5ed31f3e89c21589ee1d60242338bd73bf8ac2faae3421460d29029c96f0249b4716b8bcf8a15b4f6dfe70f3e9edbefd1937ec007e7bb3e2a3e5c70b5569314", 0x87}, {&(0x7f0000000580)="9b8aa112e90ab5d65ba7e753385cb116baa604cb468594181bc06a70ec8eb1d5a412d039dd749cb042f3f59fb1d44101455049b7b2f36309b8911faed183e6681a61e252922debe13b8a9a104199b0a15bd97d1d6d5331ab0780657a1981de183f0cc5d57c78e906b3f0a0fc7dd6f12678080f84d3ca725d96bf9d2832156e9f4a3de7e4a52983534fec8785359ae8900f2a7dc224a8ab77", 0x98}, {&(0x7f0000000240)="192960c649875716f84a20738a77de329fd1a3d39ac3928cfcac0308315e0fd11f30a94aa8b64efe92f5be8d2d8c65f4ebfc346c6998afc5a132c12026270cb11bde00feee5c7e8d9232c47709ac2b5261a6426dcf3fca44440cdfec281f867058371b761295de59", 0x68}], 0x3, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xa5d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}, @ip_retopts={{0x40, 0x0, 0x7, {[@rr={0x7, 0x23, 0xe7, [@broadcast, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @private=0xa010100, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xb, 0xb2, [@rand_addr=0x64010101, @multicast1]}]}}}], 0x70}}], 0x2, 0x8040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f00000001c0), &(0x7f00000006c0)=0x4) (async) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f00000001c0), &(0x7f00000006c0)=0x4) 724.964396ms ago: executing program 4 (id=2426): r0 = socket$kcm(0x2, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000023c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, &(0x7f00000002c0)={0x3fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffdfff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000001280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000012c0)='#', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x2}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000240)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000", 0x40}, {&(0x7f0000000100)="2a090ae06f43c8f260a64ab6b38c3cdd3384437f7821ef85", 0x18}], 0x2) 705.260775ms ago: executing program 3 (id=2427): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) sendmmsg$alg(r1, &(0x7f0000005640)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="594fe9b5892a686d8c48163e509a403dae2165ec5b076cbb64fb92f2bec02c3ddf49997963cdb2fe17a157c784ad4eca6328ac91e51803bbc0b9b2e8435b1b9b7b3153123a10ad2a0d80d9236171e471c3e0f7e3c905f39f6dccca52e12f2c0027e40b51063221a57a03cf", 0x6b}], 0x1, 0x0, 0x0, 0x2c040010}], 0x1, 0x40) 486.506203ms ago: executing program 3 (id=2428): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x9, 0x2}, 0xfffffd91}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000001, 0x11, r2, 0x5940000) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) socket$rds(0x15, 0x5, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x9, 0x2}, 0xfffffd91}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000001, 0x11, r2, 0x5940000) (async) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) 485.599771ms ago: executing program 4 (id=2429): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000240), 0x10) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x6, 0x0, 0xfffffffe, {0x77359400}, {0x0, 0x2710}, {0x4}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "20df31e63824a588"}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x854) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) sendmmsg$alg(r1, &(0x7f0000005640)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="594fe9b5892a686d8c48163e509a403dae2165ec5b076cbb64fb92f2bec02c3ddf49997963cdb2fe17a157c784ad4eca6328ac91e51803bbc0b9b2e8435b1b9b7b3153123a10ad2a0d80d9236171e471c3e0f7e3c905f39f6dccca52e12f2c0027e40b51063221a57a03cf", 0x6b}], 0x1, 0x0, 0x0, 0x2c040010}], 0x1, 0x40) 333.33553ms ago: executing program 4 (id=2430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'veth1\x00', @multicast}) close(r0) 295.196576ms ago: executing program 3 (id=2431): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010000100000000000000000000000a0043da33e4b762208d49d81de4bd9651b9dd3f2507bd0710432e8185107ae8d7ca869ec3b462e0e32f5c367d1c7e489589560e14e9a2a1b46e158cca89966ab5351b9dd42064", @ANYRES32=r1, @ANYBLOB="0000000084100000180012800e00010077697265677561726400000004000280"], 0x38}}, 0x20044840) 225.505785ms ago: executing program 4 (id=2432): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a0000000000000800000000080018004e214e24"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x18, 0x29, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000002000000000000000faa00001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000059000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0xb1, &(0x7f0000001500)=""/177, 0x21600, 0x6d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0xffffffffffffffff], &(0x7f00000015c0)=[{0x5, 0x2, 0x1, 0x7}], 0x10, 0xc0cc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x1000, 0x1009, &(0x7f0000000380)="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", &(0x7f0000003440)=""/4105, 0x8, 0x0, 0x85, 0x1000, &(0x7f0000002380)="508231ef7244b62530f9e008bc3cb7d8d22af6ab356c215109aeba1afe8bf9f01a780450649f8ad75b5c17f9cc4cba0147fba6daf31c4a14f913f8f612eb98c1e51ed6dfe4b1952327291a2fa207399d8cfac3e042113ee077143209ea503b114bcdb32a4205069beba4c1973aa03cd24d4c0cff60f7148abe00892bcb9ea21d189818e88a", &(0x7f0000002440)="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", 0x3, 0x0, 0x3}, 0x50) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0xfffff801}, &(0x7f0000000100)=0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073116f00000000008510ffff02000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x301, 0x70bd2c, 0x5, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000002c0)={0x5, 0x3ff}, 0x8) close(r4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 156.913915ms ago: executing program 3 (id=2433): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'ip_vti0\x00', @multicast}) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) (async) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000c40)=@newqdisc={0x464, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x438, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x452, 0x7, 0x8, 0x2, 0x6, 0xc, 0xb, 0x3ff, 0xfffffffc, 0x2, 0x1, 0x0, 0xfffffff3, 0x5, 0x6, 0x0, 0x56, 0xa, 0x32, 0x7fffffff, 0x8f6b, 0x401, 0x5, 0x401, 0x2401, 0x7, 0x1, 0x1, 0xffff, 0xe, 0x1, 0x800006, 0x3ff, 0xa622, 0x7c6, 0x8, 0x80000000, 0x9, 0x3, 0x1, 0xb73a, 0x7ff, 0x669, 0x1, 0x4, 0x5, 0x0, 0x9, 0x3, 0x4, 0x1, 0x0, 0x9, 0x4, 0x4, 0x9, 0x4, 0x4, 0x9d0, 0x5, 0x642, 0x0, 0x7, 0xe0, 0x6, 0x6, 0x98ec0dfd, 0xa45, 0x6, 0x1d4f, 0x80, 0x4, 0x8, 0x9, 0x1, 0x26ba, 0x7, 0x6, 0x7fffffff, 0x4, 0x5, 0x274d, 0x4, 0x8, 0x18b0, 0xd05, 0x37, 0x6, 0x2, 0x7, 0x7, 0x7, 0x7, 0x6, 0xfffeffff, 0x1, 0xe74, 0x5, 0x3, 0x5, 0xffff, 0xb69a, 0xa, 0x100, 0xdc, 0x0, 0x1, 0x48000000, 0x5, 0x2, 0x8, 0x6, 0x5, 0x2, 0x77, 0x8, 0x400008, 0x9, 0x40, 0x8000, 0x3, 0x1, 0x3ff, 0x7fffffff, 0xec5, 0x9, 0x4, 0x10, 0x9, 0x9, 0xbb0, 0x6, 0x6, 0x8, 0x87f, 0x7, 0x6, 0x80000000, 0xeed6, 0x8, 0x3, 0x3d, 0x9, 0xe6cf, 0x9, 0x7, 0x9, 0x3, 0x1, 0xfcc0, 0x6, 0x3, 0x8, 0x0, 0x2, 0xd3, 0x3e99, 0x9, 0x666, 0x3, 0x6, 0x4, 0x9, 0x2, 0x5c0, 0x0, 0x2, 0x81, 0x1, 0x0, 0x5, 0x3, 0x5, 0x0, 0x33f, 0x0, 0x9, 0x8, 0x8, 0x55, 0x7fffffff, 0xe0000000, 0x7, 0x0, 0x9, 0x5, 0x5, 0xd3cf, 0x7fff, 0x40, 0x1, 0x18000000, 0x9c2, 0x80000001, 0x9, 0xffffffff, 0x8, 0x5, 0x200, 0x8, 0x3133, 0xfffffff4, 0x7, 0x4, 0x7, 0xffff, 0x694, 0x1, 0x4, 0x8cb6a05, 0x3, 0x3, 0x0, 0x80008000, 0x1, 0x9, 0x7, 0xfff, 0x8, 0x8000, 0x3, 0x2, 0x7, 0x200, 0x6, 0x9, 0x7, 0x1, 0x3, 0x9, 0x0, 0x4, 0x8000, 0xd, 0x0, 0x8, 0xfffffff9, 0x7, 0xa, 0xffff18c6, 0x9cbc, 0x3, 0x3751, 0x1000, 0xa, 0x7, 0xcfe, 0x7, 0xfffffe00, 0x8, 0x6, 0x400, 0x6, 0x5, 0xd, 0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x464}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0x2, 0xf}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x6c, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x1}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x9}, @TCA_FQ_PLIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x100}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3ff}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24008011}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/2295], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) (async) sendmsg$sock(r1, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) (async) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async) accept(r0, 0x0, 0x0) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="737183e500000000000000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 147.748978ms ago: executing program 2 (id=2434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xacd8918fee70b510}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)={0x64, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x40c0) 104.644747ms ago: executing program 2 (id=2435): socket$nl_audit(0x10, 0x3, 0x9) (async) r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) (async) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) listen(r2, 0x0) listen(r2, 0x80000000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=@tcp6, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_hsr\x00'}) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x400}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000000007911b8000000000004000000000000009500740000000000600084b8fccd1fe69bb1c218c40c972515b3c0b8d4aad25df3696242f1d8bf034c6899b292a8041ad231cb5f8cdf96988dc39010a263b170f32e1225139654fd53c981e11e18f7d480707d375607cc8666ba79b320e7a55511447c534f21f0794e0f2faf8106bbabec1cb92740360b19744e2314003891c8662d4692aef8e9c20a155db4ff14cb531c6cbd236680346d324254077ad7ca1393e403712b55df851807b539a65c1ccd298e34ba3a5f58be7630d3e86f5f33f932b0ec751d73e8aa9a0089614fabde209433007c51c0037cc5bf"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000090000007b8af8ff000007020000f8ffff000000b70400000000000085000000030000009500"/62], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x75) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x75) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000540)={0x0, 0x0, 0x20, 0x80000000, 0x8}, &(0x7f0000000580)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000540)={0x0, 0x0, 0x20, 0x80000000, 0x8}, &(0x7f0000000580)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000680)={r9, 0xb6ac, 0x60}, 0x8) connect$unix(r7, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) 13.102074ms ago: executing program 0 (id=2436): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00120100766c616e000000000c000200060005ae7e4e5cd39f41c5a96ed81d0088a800000a000100aaaaaaaaaa000000000000"], 0x48}}, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r4}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x5, {}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = accept4(r1, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x5, @mcast2, 0xd3b3}}, 0x5, 0xb89, 0x3, 0x6, 0xc0, 0x85c, 0x81}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x7fffffff}, &(0x7f0000000340)=0x8) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001b0a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) setsockopt$packet_int(r6, 0x107, 0xe, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 12.571449ms ago: executing program 2 (id=2437): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)=@ethtool_gfeatures}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x5c}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$can_bcm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000000800)=""/240, 0xf0}, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 0s ago: executing program 3 (id=2438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x801, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x7, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x0, 0x1, 0x1}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x46cf177faec2de99, 0x5, r2}, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000002d00090027bd700000000000060000007d000a00", @ANYRES32=0x0, @ANYBLOB="3d39a3d5723c"], 0xe6}}, 0x84) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x5, 0x4) kernel console output (not intermixed with test programs): ][ T6108] lo speed is unknown, defaulting to 1000 [ 73.731474][ T6115] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.296704][ T6144] netlink: 'syz.2.51': attribute type 6 has an invalid length. [ 74.382040][ T6150] unsupported nla_type 52263 [ 74.441973][ T6152] netlink: 'syz.2.55': attribute type 1 has an invalid length. [ 74.571825][ T6163] tipc: Started in network mode [ 74.590231][ T6163] tipc: Node identity 56ae6f70d232, cluster identity 4711 [ 74.598485][ T6163] tipc: Enabled bearer , priority 0 [ 74.687321][ T6163] syzkaller0: entered promiscuous mode [ 74.693322][ T6163] syzkaller0: entered allmulticast mode [ 74.710599][ T6163] tipc: Resetting bearer [ 74.753527][ T6161] tipc: Resetting bearer [ 74.848729][ T6161] tipc: Disabling bearer [ 74.896320][ T5874] Bluetooth: hci0: command tx timeout [ 74.975227][ T5870] Bluetooth: hci1: command tx timeout [ 74.975241][ T5182] Bluetooth: hci2: command tx timeout [ 74.975273][ T5182] Bluetooth: hci4: command tx timeout [ 74.980960][ T5874] Bluetooth: hci3: command tx timeout [ 75.007794][ T6190] bridge1: entered promiscuous mode [ 75.017276][ T6190] bridge1: entered allmulticast mode [ 75.110302][ T6202] warning: `syz.0.74' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.186496][ T6206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.831190][ T6240] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 76.641590][ T6297] __nla_validate_parse: 18 callbacks suppressed [ 76.641611][ T6297] netlink: 48 bytes leftover after parsing attributes in process `syz.2.112'. [ 76.664909][ T6297] netlink: 32 bytes leftover after parsing attributes in process `syz.2.112'. [ 76.739332][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'. [ 76.761877][ T6309] netlink: 'syz.2.115': attribute type 10 has an invalid length. [ 76.782235][ T6309] netlink: 40 bytes leftover after parsing attributes in process `syz.2.115'. [ 76.798479][ T6309] dummy0: entered promiscuous mode [ 76.805376][ T6309] bridge0: port 3(dummy0) entered blocking state [ 76.812188][ T6309] bridge0: port 3(dummy0) entered disabled state [ 76.827042][ T6309] dummy0: entered allmulticast mode [ 76.835912][ T6309] bridge0: port 3(dummy0) entered blocking state [ 76.842606][ T6309] bridge0: port 3(dummy0) entered forwarding state [ 76.870793][ T6315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.116'. [ 76.895024][ T6315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.116'. [ 76.949627][ T6312] sctp: [Deprecated]: syz.0.117 (pid 6312) Use of int in max_burst socket option. [ 76.949627][ T6312] Use struct sctp_assoc_value instead [ 77.161903][ T6334] tc_dump_action: action bad kind [ 77.188096][ T6335] netlink: 48 bytes leftover after parsing attributes in process `syz.3.125'. [ 77.215244][ T6338] netlink: 'syz.1.127': attribute type 12 has an invalid length. [ 77.304573][ T6341] netlink: 'syz.1.127': attribute type 12 has an invalid length. [ 77.403093][ T6335] netlink: 32 bytes leftover after parsing attributes in process `syz.3.125'. [ 77.524678][ T6367] netlink: 'syz.3.131': attribute type 1 has an invalid length. [ 77.534289][ T6368] netlink: 'syz.3.131': attribute type 1 has an invalid length. [ 77.546896][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.565199][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.574432][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.815144][ T6391] veth0: entered promiscuous mode [ 77.836140][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 77.861135][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.140'. [ 77.891961][ T6398] veth0: left promiscuous mode [ 77.894482][ T6395] openvswitch: netlink: Flow key attr not present in new flow. [ 78.191046][ T6423] smc: net device erspan0 applied user defined pnetid SYZ0 [ 78.260258][ T6432] Bluetooth: MGMT ver 1.23 [ 78.419058][ T6442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.587792][ T6452] netlink: 'syz.2.158': attribute type 4 has an invalid length. [ 78.642836][ T6453] netlink: 'syz.2.158': attribute type 4 has an invalid length. [ 78.694338][ T6463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.975170][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.032886][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.066772][ T6489] gretap0: entered promiscuous mode [ 79.075607][ T6489] gretap0: left promiscuous mode [ 79.293735][ T6509] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 79.301719][ T6509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.481052][ T6510] syzkaller0: entered promiscuous mode [ 79.494002][ T6510] syzkaller0: entered allmulticast mode [ 79.518150][ T6520] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 79.658578][ T6524] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 79.940113][ T6558] raw_sendmsg: syz.1.191 forgot to set AF_INET. Fix it! [ 80.059981][ T6564] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 80.077767][ T6562] veth1_macvtap: left promiscuous mode [ 80.102564][ T6562] macsec0: entered promiscuous mode [ 80.113206][ T6562] macsec0: entered allmulticast mode [ 80.143321][ T6571] veth1_macvtap: entered promiscuous mode [ 80.156242][ T6571] veth1_macvtap: entered allmulticast mode [ 80.172808][ T6571] macsec0: left promiscuous mode [ 80.177944][ T6571] macsec0: left allmulticast mode [ 80.192866][ T6571] veth1_macvtap: left allmulticast mode [ 80.357569][ T6582] veth0: entered promiscuous mode [ 80.393638][ T6581] veth0: left promiscuous mode [ 80.550363][ T6601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.612699][ T5922] lo speed is unknown, defaulting to 1000 [ 80.738400][ T6620] tipc: Started in network mode [ 80.763109][ T6620] tipc: Node identity ac14142f, cluster identity 4711 [ 80.770171][ T6620] tipc: New replicast peer: 0.0.0.0 [ 80.798964][ T6620] tipc: Enabled bearer , priority 10 [ 80.834336][ T6627] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 81.200982][ T6656] team0: Device gtp0 is of different type [ 81.567049][ T6691] netlink: 'syz.0.229': attribute type 10 has an invalid length. [ 81.593874][ T6679] IPVS: set_ctl: invalid protocol: 43 172.30.0.3:20000 [ 81.595461][ T6686] lo speed is unknown, defaulting to 1000 [ 81.610345][ T6694] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 81.651438][ T6691] bridge0: port 3(team0) entered blocking state [ 81.668542][ T6694] __nla_validate_parse: 30 callbacks suppressed [ 81.668593][ T6694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.227'. [ 81.676152][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 81.703367][ T6691] bridge0: port 3(team0) entered disabled state [ 81.730264][ T6691] team0: entered allmulticast mode [ 81.739371][ T6691] team_slave_0: entered allmulticast mode [ 81.749910][ T6691] team_slave_1: entered allmulticast mode [ 81.759471][ T6691] team0: entered promiscuous mode [ 81.764936][ T6691] team_slave_0: entered promiscuous mode [ 81.771485][ T6691] team_slave_1: entered promiscuous mode [ 81.780219][ T6691] bridge0: port 3(team0) entered blocking state [ 81.786662][ T6691] bridge0: port 3(team0) entered forwarding state [ 81.796018][ T6706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.228'. [ 81.846329][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'. [ 81.926934][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'. [ 81.927238][ T6703] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 81.956264][ T5922] tipc: Node number set to 2886997039 [ 82.017536][ T6703] bond1: (slave vcan0): Error -95 calling set_mac_address [ 82.113051][ T6706] sit0: entered promiscuous mode [ 82.134676][ T6706] sit0: entered allmulticast mode [ 82.198592][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'. [ 82.422488][ T6735] tipc: Started in network mode [ 82.427535][ T6735] tipc: Node identity 1a81c1973e3a, cluster identity 4711 [ 82.473642][ T6735] tipc: Enabled bearer , priority 0 [ 82.581556][ T6742] syzkaller0: entered promiscuous mode [ 82.598866][ T6742] syzkaller0: entered allmulticast mode [ 82.634467][ T6742] tipc: Resetting bearer [ 82.703067][ T1162] tipc: Resetting bearer [ 82.711278][ T6734] tipc: Resetting bearer [ 82.808820][ T6734] tipc: Disabling bearer [ 82.851553][ T6775] netlink: 48 bytes leftover after parsing attributes in process `syz.1.241'. [ 82.896760][ T5527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.057212][ T6789] netlink: 24 bytes leftover after parsing attributes in process `syz.4.246'. [ 83.070552][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'. [ 83.070619][ T6788] netlink: 32 bytes leftover after parsing attributes in process `syz.3.244'. [ 83.114054][ T6788] netem: change failed [ 83.290935][ T6801] vlan0: entered promiscuous mode [ 83.308597][ T6801] vlan0: entered allmulticast mode [ 83.320857][ T6801] veth0_vlan: entered allmulticast mode [ 83.860255][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 84.224738][ T6877] netlink: 'syz.3.269': attribute type 1 has an invalid length. [ 84.373171][ T6883] 8021q: adding VLAN 0 to HW filter on device bond3 [ 84.409583][ T6883] bond2: (slave bond3): making interface the new active one [ 84.427537][ T6883] bond2: (slave bond3): Enslaving as an active interface with an up link [ 84.498038][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 84.547771][ T6877] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 84.601544][ T6877] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 85.856475][ T7001] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 85.910135][ T7006] tipc: Enabling not permitted [ 85.955087][ T7006] tipc: Enabling of bearer rejected, failed to enable media [ 86.280514][ T7036] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 86.412191][ T7046] netlink: 'syz.4.318': attribute type 33 has an invalid length. [ 86.447687][ T7051] netlink: 'syz.3.314': attribute type 10 has an invalid length. [ 86.491929][ T7051] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 86.602039][ T7045] bridge_slave_0: left allmulticast mode [ 86.640345][ T7045] bridge_slave_0: left promiscuous mode [ 86.659373][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.691738][ T7045] bridge_slave_1: left allmulticast mode [ 86.704949][ T7045] bridge_slave_1: left promiscuous mode [ 86.727672][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.830984][ T7045] bond0: (slave bond_slave_0): Releasing backup interface [ 86.840634][ T7045] bond0: (slave bond_slave_1): Releasing backup interface [ 86.853502][ T7045] team0: Port device team_slave_0 removed [ 86.862012][ T7045] team0: Port device team_slave_1 removed [ 86.869694][ T7045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.877698][ T7045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.887331][ T7045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.896798][ T7045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.904898][ T7075] __nla_validate_parse: 25 callbacks suppressed [ 86.904918][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 86.920889][ T7045] bond2: (slave bond3): Releasing backup interface [ 87.011915][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.019495][ T7071] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.034138][ T1209] IPVS: starting estimator thread 0... [ 87.065979][ T2151] cfg80211: failed to load regulatory.db [ 87.091634][ T7071] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 87.142602][ T7082] IPVS: using max 45 ests per chain, 108000 per kthread [ 87.198800][ T7087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.330'. [ 87.272268][ T7089] netlink: 'syz.0.331': attribute type 10 has an invalid length. [ 87.305072][ T7089] netlink: 'syz.0.331': attribute type 1 has an invalid length. [ 87.358020][ T7089] netlink: 'syz.0.331': attribute type 4 has an invalid length. [ 87.374469][ T7089] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.331'. [ 87.557734][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'. [ 87.651988][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 87.671502][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 87.681846][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 87.809720][ T7129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'. [ 87.838304][ T7129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'. [ 87.920353][ T7141] bond0: Error: Cannot enslave bond to itself. [ 88.125262][ T7158] netlink: 'syz.4.353': attribute type 1 has an invalid length. [ 88.133788][ T7158] netlink: 'syz.4.353': attribute type 1 has an invalid length. [ 88.141755][ T7158] netlink: 'syz.4.353': attribute type 1 has an invalid length. [ 88.150007][ T7158] netlink: 'syz.4.353': attribute type 2 has an invalid length. [ 88.258104][ T7164] netlink: 48 bytes leftover after parsing attributes in process `syz.1.355'. [ 88.641676][ T7180] team0: Device wireguard0 is of different type [ 88.725639][ T7192] team0: mtu less than device minimum [ 88.967642][ T7207] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 88.985398][ T7208] syzkaller0: entered promiscuous mode [ 88.990950][ T7208] syzkaller0: entered allmulticast mode [ 89.558270][ T7249] validate_nla: 5 callbacks suppressed [ 89.558290][ T7249] netlink: 'syz.0.385': attribute type 4 has an invalid length. [ 89.644524][ T7250] netlink: 'syz.0.385': attribute type 4 has an invalid length. [ 89.672330][ T5915] lo speed is unknown, defaulting to 1000 [ 89.681734][ T5915] syz0: Port: 1 Link DOWN [ 90.039072][ T7280] openvswitch: netlink: Missing key (keys=40, expected=80) [ 90.320441][ T7300] netlink: 'syz.3.398': attribute type 13 has an invalid length. [ 90.334490][ T7300] lo: entered promiscuous mode [ 90.339485][ T7300] lo: entered allmulticast mode [ 90.360070][ T7300] tunl0: entered promiscuous mode [ 90.370877][ T7300] tunl0: entered allmulticast mode [ 90.390541][ T7300] gre0: entered promiscuous mode [ 90.408151][ T7300] gre0: entered allmulticast mode [ 90.436049][ T7300] gretap0: entered promiscuous mode [ 90.452313][ T7300] gretap0: entered allmulticast mode [ 90.483456][ T7300] gretap0: refused to change device tx_queue_len [ 90.507262][ T7300] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 90.596107][ T7319] lo speed is unknown, defaulting to 1000 [ 90.800138][ T7339] netlink: 'syz.2.409': attribute type 10 has an invalid length. [ 90.813483][ T7338] netlink: 'syz.2.409': attribute type 10 has an invalid length. [ 90.815139][ T7337] bond1: entered allmulticast mode [ 90.828329][ T7337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.836255][ T7337] bridge0: port 3(bond1) entered blocking state [ 90.842845][ T7337] bridge0: port 3(bond1) entered disabled state [ 90.858074][ T7337] bond1: entered promiscuous mode [ 90.863855][ T7337] bridge0: port 3(bond1) entered blocking state [ 90.870314][ T7337] bridge0: port 3(bond1) entered forwarding state [ 90.877533][ T7339] bridge0: port 4(team0) entered blocking state [ 90.884138][ T7339] bridge0: port 4(team0) entered disabled state [ 90.890755][ T7339] team0: entered allmulticast mode [ 90.896400][ T7339] team_slave_0: entered allmulticast mode [ 90.902146][ T7339] team_slave_1: entered allmulticast mode [ 90.910619][ T7339] team0: entered promiscuous mode [ 90.915810][ T7339] team_slave_0: entered promiscuous mode [ 90.921614][ T7339] team_slave_1: entered promiscuous mode [ 90.928120][ T7339] bridge0: port 4(team0) entered blocking state [ 90.934491][ T7339] bridge0: port 4(team0) entered forwarding state [ 90.982635][ T7349] tun0: tun_chr_ioctl cmd 1074025673 [ 91.010204][ T7344] tun0: tun_chr_ioctl cmd 1074025675 [ 91.030278][ T7344] tun0: persist disabled [ 91.213811][ T1162] wlan0: Trigger new scan to find an IBSS to join [ 91.302761][ T49] bridge0: port 3(bond1) entered disabled state [ 91.598119][ T7377] rdma_rxe: rxe_newlink: failed to add lo [ 91.627721][ T7376] lo: left promiscuous mode [ 91.649184][ T7376] lo: left allmulticast mode [ 91.677497][ T7376] tunl0: left promiscuous mode [ 91.695322][ T7376] tunl0: left allmulticast mode [ 91.716861][ T7376] gre0: left promiscuous mode [ 91.735603][ T7376] gre0: left allmulticast mode [ 91.854216][ T7376] gretap0: left promiscuous mode [ 91.859576][ T7376] gretap0: left allmulticast mode [ 91.890050][ T7376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.965331][ T7399] __nla_validate_parse: 20 callbacks suppressed [ 91.965350][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.425'. [ 91.994803][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.425'. [ 92.056720][ T7399] bridge0: port 1(vlan1) entered blocking state [ 92.083987][ T7399] bridge0: port 1(vlan1) entered disabled state [ 92.090528][ T7399] vlan1: entered allmulticast mode [ 92.097984][ T7399] bridge0: entered allmulticast mode [ 92.114649][ T7399] vlan1: left allmulticast mode [ 92.120392][ T7399] bridge0: left allmulticast mode [ 94.172704][ T13] wlan0: Trigger new scan to find an IBSS to join [ 95.062889][ T3575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.215675][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 118.437909][ T7460] netlink: 44 bytes leftover after parsing attributes in process `syz.2.431'. [ 118.452271][ T7460] netlink: 21 bytes leftover after parsing attributes in process `syz.2.431'. [ 118.456176][ T7465] openvswitch: netlink: Key type 29 is not supported [ 118.463541][ T7460] netlink: 21 bytes leftover after parsing attributes in process `syz.2.431'. [ 118.701415][ T7481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.438'. [ 118.731893][ T7481] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 118.817628][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 119.024441][ T7507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.446'. [ 119.134656][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.444'. [ 119.145331][ T7512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.447'. [ 119.475508][ T7541] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.457'. [ 119.629152][ T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 119.791006][ T7573] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 (while UP) [ 119.941967][ T7590] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.473'. [ 120.018036][ T7596] sctp: [Deprecated]: syz.1.474 (pid 7596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.018036][ T7596] Use struct sctp_sack_info instead [ 120.200116][ T1162] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 120.474901][ T7624] bpq0: entered allmulticast mode [ 120.517990][ T7629] netlink: 'syz.3.484': attribute type 33 has an invalid length. [ 120.688110][ T7641] C: renamed from team_slave_0 [ 120.731396][ T7641] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 120.743962][ T7641] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 120.917415][ T7658] hsr_slave_0: left promiscuous mode [ 120.934496][ T7658] hsr_slave_1: left promiscuous mode [ 120.978957][ T7648] pim6reg1: entered promiscuous mode [ 121.003414][ T7648] pim6reg1: entered allmulticast mode [ 121.210647][ T7678] macvtap1: entered promiscuous mode [ 121.226212][ T7678] vlan0: entered promiscuous mode [ 121.231756][ T7678] macvtap1: entered allmulticast mode [ 121.238398][ T7678] vlan0: entered allmulticast mode [ 121.245043][ T7678] veth0_vlan: entered allmulticast mode [ 121.252754][ T7673] lo speed is unknown, defaulting to 1000 [ 121.283497][ T7674] lo speed is unknown, defaulting to 1000 [ 121.621706][ T7707] netlink: 'syz.0.511': attribute type 1 has an invalid length. [ 121.927659][ T7737] veth1_to_bond: entered allmulticast mode [ 121.949923][ T7737] bond0: (slave bond_slave_1): Releasing backup interface [ 121.969517][ T7737] veth1_to_bond (unregistering): left allmulticast mode [ 122.070100][ T7742] IPVS: Scheduler module ip_vs_sip not found [ 122.456373][ T7775] openvswitch: netlink: Message has 8 unknown bytes. [ 122.663190][ T7793] delete_channel: no stack [ 122.675339][ T7794] netlink: 'syz.1.535': attribute type 23 has an invalid length. [ 122.975656][ T7805] netlink: 'syz.0.541': attribute type 1 has an invalid length. [ 123.022878][ T7805] netlink: 'syz.0.541': attribute type 2 has an invalid length. [ 123.183874][ T7829] netlink: 'syz.4.544': attribute type 2 has an invalid length. [ 123.186582][ T7830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.252035][ T7838] netlink: 'syz.2.546': attribute type 3 has an invalid length. [ 124.048233][ T7852] __nla_validate_parse: 21 callbacks suppressed [ 124.048255][ T7852] netlink: 156 bytes leftover after parsing attributes in process `syz.1.552'. [ 124.105477][ T7852] netlink: 156 bytes leftover after parsing attributes in process `syz.1.552'. [ 124.147956][ T7863] netlink: 224 bytes leftover after parsing attributes in process `syz.4.556'. [ 124.252612][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 124.280460][ T7875] netlink: 'syz.1.560': attribute type 3 has an invalid length. [ 124.299926][ T7875] netlink: 'syz.1.560': attribute type 1 has an invalid length. [ 124.355556][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'. [ 124.396030][ T7880] 8021q: adding VLAN 0 to HW filter on device bond4 [ 124.421508][ T7880] 8021q: adding VLAN 0 to HW filter on device bond5 [ 124.431795][ T7886] tipc: Started in network mode [ 124.436970][ T7886] tipc: Node identity 4aeaaa0b78c1, cluster identity 4711 [ 124.444680][ T7886] tipc: Enabled bearer , priority 0 [ 124.456766][ T7889] netdevsim netdevsim4: Direct firmware load for ,.€ failed with error -2 [ 124.462976][ T7875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.560'. [ 124.465647][ T7889] netdevsim netdevsim4: Falling back to sysfs fallback for: ,.€ [ 124.487331][ T7886] tipc: Disabling bearer [ 124.599670][ T7898] netlink: 224 bytes leftover after parsing attributes in process `syz.3.565'. [ 124.667647][ T7900] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 124.688094][ T3575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.696341][ T3575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.114879][ T7921] netlink: 340 bytes leftover after parsing attributes in process `syz.3.569'. [ 125.163281][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 125.176218][ T7925] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 125.471138][ T7943] netlink: 256 bytes leftover after parsing attributes in process `syz.0.578'. [ 125.501101][ T7943] bridge0: port 3(team0) entered disabled state [ 125.525184][ T7943] team0: left allmulticast mode [ 125.535670][ T7943] team_slave_0: left allmulticast mode [ 125.548221][ T7943] team_slave_1: left allmulticast mode [ 125.554628][ T7943] team0: left promiscuous mode [ 125.559641][ T7943] team_slave_0: left promiscuous mode [ 125.567508][ T7943] team_slave_1: left promiscuous mode [ 125.576457][ T7943] bridge0: port 3(team0) entered disabled state [ 125.588755][ T7943] batman_adv: batadv0: Adding interface: team0 [ 125.595046][ T7943] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.621155][ T7943] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 125.647584][ T7949] bond6: entered promiscuous mode [ 125.652884][ T7949] bond6: entered allmulticast mode [ 125.662665][ T7949] 8021q: adding VLAN 0 to HW filter on device bond6 [ 125.690221][ T7949] bond6 (unregistering): Released all slaves [ 125.767886][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 125.822639][ T7960] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.942115][ T1209] hid-generic 0005:16C0:0005.0001: item fetching failed at offset 0/1 [ 125.962325][ T7966] bond0: entered promiscuous mode [ 125.972275][ T1209] hid-generic 0005:16C0:0005.0001: probe with driver hid-generic failed with error -22 [ 125.979593][ T7966] bond_slave_0: entered promiscuous mode [ 125.997881][ T7966] bond_slave_1: entered promiscuous mode [ 126.006589][ T7966] batadv0: entered promiscuous mode [ 126.014927][ T7966] hsr1: entered allmulticast mode [ 126.020011][ T7966] bond0: entered allmulticast mode [ 126.026992][ T7966] bond_slave_0: entered allmulticast mode [ 126.032862][ T7966] bond_slave_1: entered allmulticast mode [ 126.039250][ T7966] batadv0: entered allmulticast mode [ 126.044976][ T7966] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 126.785993][ T8007] syzkaller0: entered promiscuous mode [ 126.808959][ T8007] syzkaller0: entered allmulticast mode [ 127.478976][ T8021] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20004 [ 127.535087][ T8026] validate_nla: 2 callbacks suppressed [ 127.535107][ T8026] netlink: 'syz.0.600': attribute type 12 has an invalid length. [ 128.038909][ T8068] netlink: 'syz.1.609': attribute type 3 has an invalid length. [ 128.209598][ T8075] tipc: Enabled bearer , priority 0 [ 128.255767][ T8075] syzkaller0: entered promiscuous mode [ 128.261918][ T8075] syzkaller0: entered allmulticast mode [ 128.292781][ T8075] tipc: Resetting bearer [ 128.301575][ T8074] tipc: Resetting bearer [ 128.311670][ T8074] tipc: Disabling bearer [ 128.529552][ T8105] netlink: 'syz.1.620': attribute type 2 has an invalid length. [ 129.107051][ T8140] syzkaller0: entered promiscuous mode [ 129.114462][ T8140] syzkaller0: entered allmulticast mode [ 129.121608][ T8139] tipc: Enabled bearer , priority 0 [ 129.139387][ T8141] tipc: Resetting bearer [ 129.150920][ T8141] tipc: Disabling bearer [ 129.220757][ T8144] __nla_validate_parse: 9 callbacks suppressed [ 129.220780][ T8144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.633'. [ 129.698923][ T8176] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 129.740333][ T8183] netlink: 'syz.3.643': attribute type 11 has an invalid length. [ 129.774187][ T8184] netlink: 'syz.2.645': attribute type 49 has an invalid length. [ 129.805124][ T8179] team0: left allmulticast mode [ 129.811252][ T8179] team_slave_0: left allmulticast mode [ 129.834281][ T8179] team_slave_1: left allmulticast mode [ 129.839824][ T8179] team0: left promiscuous mode [ 129.866744][ T8192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.647'. [ 129.874213][ T8179] team_slave_0: left promiscuous mode [ 129.886636][ T8179] team_slave_1: left promiscuous mode [ 129.887711][ T8193] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 129.901267][ T8179] bridge0: port 4(team0) entered disabled state [ 129.911721][ T8179] dummy0: left allmulticast mode [ 129.929964][ T8179] bridge0: port 3(dummy0) entered disabled state [ 129.952535][ T8179] bridge_slave_0: left allmulticast mode [ 129.958425][ T8179] bridge_slave_0: left promiscuous mode [ 129.982131][ T8179] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.013176][ T8179] bridge_slave_1: left allmulticast mode [ 130.026841][ T8179] bridge_slave_1: left promiscuous mode [ 130.051693][ T8179] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.069990][ T8179] bond0: (slave bond_slave_0): Releasing backup interface [ 130.079579][ T8179] bond_slave_0: left promiscuous mode [ 130.086953][ T8179] bond_slave_0: left allmulticast mode [ 130.096695][ T8179] bond0: (slave bond_slave_1): Releasing backup interface [ 130.109304][ T8179] bond_slave_1: left promiscuous mode [ 130.125841][ T8179] bond_slave_1: left allmulticast mode [ 130.137739][ T8179] team0: Port device team_slave_0 removed [ 130.158232][ T8179] team0: Port device team_slave_1 removed [ 130.165514][ T8179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.174779][ T8179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.187246][ T8179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.197453][ T8179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.303646][ T8221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.659'. [ 130.308606][ T8214] bond1: entered allmulticast mode [ 130.320825][ T8214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.328622][ T8214] bridge0: port 3(bond1) entered blocking state [ 130.335110][ T8214] bridge0: port 3(bond1) entered disabled state [ 130.342809][ T8214] bond1: entered promiscuous mode [ 130.349085][ T8214] bridge0: port 3(bond1) entered blocking state [ 130.355480][ T8214] bridge0: port 3(bond1) entered forwarding state [ 130.366163][ T8220] netdevsim netdevsim2 : renamed from netdevsim0 [ 130.384572][ T8220] netdevsim netdevsim2 : left promiscuous mode [ 130.440973][ T8225] netlink: 36 bytes leftover after parsing attributes in process `syz.3.660'. [ 130.558245][ T8235] sctp: [Deprecated]: syz.4.665 (pid 8235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.558245][ T8235] Use struct sctp_sack_info instead [ 130.585580][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 130.603360][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'. [ 130.773079][ T1162] bridge0: port 3(bond1) entered disabled state [ 130.827468][ T8253] netlink: 104 bytes leftover after parsing attributes in process `syz.3.670'. [ 130.989850][ T9] IPVS: starting estimator thread 0... [ 131.056243][ T8281] trusted_key: syz.4.678 sent an empty control message without MSG_MORE. [ 131.078585][ T8282] openvswitch: netlink: Flow actions attr not present in new flow. [ 131.092536][ T8276] IPVS: using max 41 ests per chain, 98400 per kthread [ 131.101269][ T8279] netlink: 'syz.3.679': attribute type 1 has an invalid length. [ 131.153888][ T8279] netlink: 'syz.3.679': attribute type 7 has an invalid length. [ 131.340672][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 131.410124][ T8306] veth1_macvtap: left promiscuous mode [ 131.416530][ T8306] macsec0: entered promiscuous mode [ 131.423396][ T8306] macsec0: entered allmulticast mode [ 131.436473][ T8307] netlink: 48 bytes leftover after parsing attributes in process `syz.2.689'. [ 131.455339][ T8308] netlink: 232 bytes leftover after parsing attributes in process `syz.3.688'. [ 131.463233][ T5874] Bluetooth: hci4: link tx timeout [ 131.469899][ T5874] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 131.479624][ T5874] Bluetooth: hci4: link tx timeout [ 131.485200][ T5874] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.497568][ T5874] Bluetooth: hci4: link tx timeout [ 131.502849][ T5874] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 131.510911][ T5874] Bluetooth: hci4: link tx timeout [ 131.516824][ T5874] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.528942][ T8310] veth1_macvtap: entered promiscuous mode [ 131.543878][ T8310] veth1_macvtap: entered allmulticast mode [ 131.555762][ T8310] macsec0: left promiscuous mode [ 131.560916][ T8310] macsec0: left allmulticast mode [ 131.567400][ T8310] veth1_macvtap: left allmulticast mode [ 131.878770][ T8342] netlink: 56 bytes leftover after parsing attributes in process `syz.4.700'. [ 131.989550][ T30] audit: type=1107 audit(1756268321.920:2): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 132.371243][ T8379] sctp: [Deprecated]: syz.4.713 (pid 8379) Use of int in maxseg socket option. [ 132.371243][ T8379] Use struct sctp_assoc_value instead [ 132.485513][ T8381] can: request_module (can-proto-4) failed. [ 132.492563][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 132.529656][ T8375] bond0: (slave wlan1): Releasing backup interface [ 132.592332][ T8389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.605205][ T8377] bridge: RTM_NEWNEIGH with invalid ether address [ 132.755534][ T8398] lo speed is unknown, defaulting to 1000 [ 132.820452][ T8403] openvswitch: netlink: Flow actions attr not present in new flow. [ 132.838708][ T8409] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 132.852485][ T8405] openvswitch: netlink: Flow actions attr not present in new flow. [ 133.028640][ T8421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.040753][ T8422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.064906][ T8422] geneve2: entered promiscuous mode [ 133.070181][ T8422] geneve2: entered allmulticast mode [ 133.100073][ T3575] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 133.137260][ T3575] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 133.142824][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.157949][ T3575] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 133.202535][ T8426] netlink: 'syz.1.730': attribute type 29 has an invalid length. [ 133.243736][ T8431] netlink: 'syz.1.730': attribute type 29 has an invalid length. [ 133.255079][ T3575] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 133.324986][ T8441] tipc: New replicast peer: 255.255.255.255 [ 133.337368][ T8441] tipc: Enabled bearer , priority 10 [ 133.535126][ T5874] Bluetooth: hci4: command 0x0405 tx timeout [ 133.683898][ T8457] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 133.973983][ T8489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.020951][ T8489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.199957][ T8513] netlink: 'syz.4.759': attribute type 1 has an invalid length. [ 134.422792][ T8520] delete_channel: no stack [ 134.427945][ T8520] __nla_validate_parse: 19 callbacks suppressed [ 134.427964][ T8520] netlink: 124 bytes leftover after parsing attributes in process `syz.1.760'. [ 134.456281][ T1209] tipc: Node number set to 616284567 [ 134.477869][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'. [ 134.546425][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 134.587973][ T8538] netlink: 'syz.1.767': attribute type 4 has an invalid length. [ 134.753800][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 134.764925][ T8545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.769'. [ 134.775595][ T8549] dummy0: entered promiscuous mode [ 134.788004][ T8549] batadv_slave_1: entered promiscuous mode [ 134.819688][ T8549] debugfs: 'hsr1' already exists in 'hsr' [ 134.829210][ T8549] Cannot create hsr debugfs directory [ 134.981337][ T8566] netlink: 'syz.1.778': attribute type 11 has an invalid length. [ 135.010585][ T8566] netlink: 'syz.1.778': attribute type 4 has an invalid length. [ 135.042738][ T8568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.779'. [ 135.043231][ T8566] netlink: 224 bytes leftover after parsing attributes in process `syz.1.778'. [ 135.066019][ T8572] tipc: Enabled bearer , priority 0 [ 135.079159][ T8570] nbd: must specify a device to reconfigure [ 135.086218][ T8572] syzkaller0: entered promiscuous mode [ 135.091891][ T8572] syzkaller0: entered allmulticast mode [ 135.156202][ T8578] netdevsim netdevsim3: Direct firmware load for /.€ failed with error -2 [ 135.171656][ T8572] netlink: 76 bytes leftover after parsing attributes in process `syz.4.781'. [ 135.213197][ T8572] tipc: Resetting bearer [ 135.230297][ T8578] netdevsim netdevsim3: Falling back to sysfs fallback for: /.€ [ 135.246160][ T8586] netlink: 132 bytes leftover after parsing attributes in process `syz.0.786'. [ 135.260500][ T8571] tipc: Resetting bearer [ 135.280491][ T8571] tipc: Disabling bearer [ 135.317891][ T8588] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 135.435901][ T8599] tipc: Started in network mode [ 135.441085][ T8599] tipc: Node identity f678b011df23, cluster identity 4711 [ 135.449549][ T8599] tipc: Enabled bearer , priority 0 [ 135.505077][ T8599] syzkaller0: entered promiscuous mode [ 135.511259][ T8599] syzkaller0: entered allmulticast mode [ 135.518751][ T8599] tipc: Resetting bearer [ 135.528259][ T8606] bridge_slave_0: left allmulticast mode [ 135.535153][ T8606] bridge_slave_0: left promiscuous mode [ 135.541027][ T8606] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.551862][ T8606] bridge_slave_1: left allmulticast mode [ 135.557676][ T8606] bridge_slave_1: left promiscuous mode [ 135.565265][ T8606] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.576687][ T8606] bond0: (slave bond_slave_0): Releasing backup interface [ 135.586753][ T8606] bond0: (slave bond_slave_1): Releasing backup interface [ 135.588302][ T8610] netlink: 64 bytes leftover after parsing attributes in process `syz.4.794'. [ 135.606833][ T8606] team0: Port device team_slave_0 removed [ 135.612712][ T5874] Bluetooth: hci4: command 0x0405 tx timeout [ 135.623758][ T8606] team0: Port device team_slave_1 removed [ 135.630079][ T8606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.638718][ T8606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.651767][ T8607] tipc: Resetting bearer [ 135.706448][ T8607] tipc: Disabling bearer [ 135.721393][ T8603] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 135.819731][ T5915] IPVS: starting estimator thread 0... [ 135.922567][ T8622] IPVS: using max 37 ests per chain, 88800 per kthread [ 135.965858][ T8632] netlink: 'syz.2.803': attribute type 1 has an invalid length. [ 136.009488][ T8632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.066447][ T8632] bond1: (slave geneve2): making interface the new active one [ 136.079246][ T8632] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 136.680938][ T8687] syz.1.818 uses old SIOCAX25GETINFO [ 136.919779][ T8708] netlink: 'syz.4.824': attribute type 4 has an invalid length. [ 137.138784][ T8723] wg1: entered promiscuous mode [ 137.153532][ T8723] wg1: entered allmulticast mode [ 137.414012][ T8745] tipc: Enabled bearer , priority 0 [ 137.435895][ T8745] syzkaller0: entered promiscuous mode [ 137.454575][ T8745] syzkaller0: entered allmulticast mode [ 137.787537][ T8742] tipc: Resetting bearer [ 137.806742][ T8742] tipc: Disabling bearer [ 138.597873][ T7489] udevd[7489]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 138.725128][ T8839] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 138.769724][ T8839] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.931199][ T8856] netlink: 'syz.1.860': attribute type 1 has an invalid length. [ 138.933887][ T8859] netlink: 'syz.2.861': attribute type 1 has an invalid length. [ 138.977050][ T8859] block nbd1: not configured, cannot reconfigure [ 138.990647][ T8862] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 139.028700][ T8856] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.062168][ T8862] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.071938][ T8862] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 139.092065][ T8862] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 139.336527][ T8877] team0: Mode changed to "activebackup" [ 139.372531][ T5874] Bluetooth: hci4: command 0x0405 tx timeout [ 139.514119][ T8888] netlink: 'syz.2.871': attribute type 29 has an invalid length. [ 139.536651][ T8888] netlink: 'syz.2.871': attribute type 29 has an invalid length. [ 139.676174][ T8897] __nla_validate_parse: 20 callbacks suppressed [ 139.676196][ T8897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.875'. [ 140.008490][ T8917] netlink: 'syz.2.882': attribute type 1 has an invalid length. [ 140.017645][ T8917] netlink: 244 bytes leftover after parsing attributes in process `syz.2.882'. [ 140.116734][ T8924] netlink: 'syz.2.885': attribute type 11 has an invalid length. [ 140.124878][ T8924] netlink: 224 bytes leftover after parsing attributes in process `syz.2.885'. [ 140.434294][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 140.451048][ T8944] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 140.490347][ T8948] syzkaller1: entered promiscuous mode [ 140.496463][ T8948] syzkaller1: entered allmulticast mode [ 140.561183][ T5925] IPVS: starting estimator thread 0... [ 140.644220][ T8958] ip6gre0: Master is either lo or non-ether device [ 140.650991][ T8959] netlink: 80 bytes leftover after parsing attributes in process `syz.4.896'. [ 140.666028][ T8953] IPVS: using max 38 ests per chain, 91200 per kthread [ 140.754263][ T8964] tipc: Enabled bearer , priority 0 [ 140.762248][ T8964] syzkaller0: entered promiscuous mode [ 140.768195][ T8964] syzkaller0: entered allmulticast mode [ 140.777410][ T8964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.899'. [ 140.801247][ T8964] tipc: Resetting bearer [ 140.816828][ T8966] netlink: 256 bytes leftover after parsing attributes in process `syz.2.900'. [ 140.850306][ T8963] tipc: Resetting bearer [ 140.876021][ T8963] tipc: Disabling bearer [ 140.914335][ T8973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.936650][ T8973] bond0: (slave rose0): Enslaving as an active interface with an up link [ 141.158791][ T8996] netlink: 248 bytes leftover after parsing attributes in process `syz.0.905'. [ 141.444092][ T9016] netlink: 32 bytes leftover after parsing attributes in process `syz.2.911'. [ 141.484665][ T9016] netlink: 'syz.2.911': attribute type 12 has an invalid length. [ 141.592139][ T9028] netlink: 'syz.1.915': attribute type 9 has an invalid length. [ 141.643477][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 141.686302][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.695467][ T9028] netlink: 'syz.1.915': attribute type 9 has an invalid length. [ 141.714415][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.748884][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.807150][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.867865][ T9039] dvmrp0: entered allmulticast mode [ 141.895588][ T9039] dvmrp0: left allmulticast mode [ 142.143757][ T9057] macvtap1: entered promiscuous mode [ 142.159648][ T9057] vlan0: entered promiscuous mode [ 142.180132][ T9057] macvtap1: entered allmulticast mode [ 142.202573][ T9057] vlan0: entered allmulticast mode [ 142.224269][ T9057] veth0_vlan: entered allmulticast mode [ 142.653959][ T9103] netlink: 'syz.2.936': attribute type 1 has an invalid length. [ 142.755612][ T9103] bond2 (unregistering): Released all slaves [ 142.822038][ T9111] ip6tnl1: entered promiscuous mode [ 142.849872][ T9111] ip6tnl1: entered allmulticast mode [ 143.033401][ T9123] team0: Device vti0 is up. Set it down before adding it as a team port [ 144.011121][ T9197] validate_nla: 2 callbacks suppressed [ 144.011153][ T9197] netlink: 'syz.2.961': attribute type 1 has an invalid length. [ 144.098254][ T9200] netlink: 'syz.4.964': attribute type 10 has an invalid length. [ 144.138442][ T9200] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 144.216065][ T9207] batadv_slave_0: mtu less than device minimum [ 144.500238][ T9231] netem: change failed [ 144.538191][ T9238] netlink: 'syz.3.973': attribute type 6 has an invalid length. [ 144.583000][ T9238] netlink: 'syz.3.973': attribute type 6 has an invalid length. [ 144.605716][ T9238] netlink: 'syz.3.973': attribute type 6 has an invalid length. [ 144.643006][ T9245] netlink: 'syz.3.973': attribute type 6 has an invalid length. [ 144.700688][ T9249] __nla_validate_parse: 7 callbacks suppressed [ 144.700709][ T9249] netlink: 44 bytes leftover after parsing attributes in process `syz.0.975'. [ 144.745177][ T9251] netlink: 108 bytes leftover after parsing attributes in process `syz.2.976'. [ 144.778087][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 144.820419][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 144.822896][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 144.841437][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 144.871724][ T9251] netlink: 'syz.2.976': attribute type 11 has an invalid length. [ 145.077574][ T9274] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 145.377701][ T9285] netlink: 'syz.1.987': attribute type 12 has an invalid length. [ 145.625068][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'. [ 145.652366][ T9314] lo speed is unknown, defaulting to 1000 [ 145.702031][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'. [ 145.744703][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'. [ 145.790367][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'. [ 145.814962][ T9312] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 145.898467][ T9312] bond6: (slave vcan0): Error -95 calling set_mac_address [ 145.945634][ T9323] ipvlan0: entered promiscuous mode [ 145.960324][ T9312] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 145.979561][ T9312] bond6: (slave vcan0): Error -95 calling set_mac_address [ 146.107378][ T9312] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 146.123935][ T9312] bond6: (slave vcan0): Error -95 calling set_mac_address [ 146.177974][ T9312] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 146.198543][ T9312] bond6: (slave vcan0): Error -95 calling set_mac_address [ 146.225193][ T9348] tipc: Enabled bearer , priority 0 [ 146.235503][ T9348] syzkaller0: entered promiscuous mode [ 146.241089][ T9348] syzkaller0: entered allmulticast mode [ 146.251355][ T9348] tipc: Resetting bearer [ 146.265080][ T9312] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 146.276677][ T9312] bond6: (slave vcan0): Error -95 calling set_mac_address [ 146.291079][ T9347] tipc: Resetting bearer [ 146.299827][ T9347] tipc: Disabling bearer [ 146.327126][ T9312] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 146.344576][ T9312] bond6: (slave vcan0): Error -95 calling set_mac_address [ 146.409583][ T9312] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 146.437623][ T9312] bond6: (slave vcan0): Error -95 calling set_mac_address [ 146.834446][ T9405] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20003 [ 147.132638][ T5915] page_pool_release_retry() stalled pool shutdown: id 27, 1 inflight 60 sec [ 147.812116][ T9433] openvswitch: netlink: Missing valid actions attribute. [ 147.838667][ T9433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.049812][ T9459] tipc: Enabling of bearer rejected, media not registered [ 148.101891][ T70] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 148.126925][ T70] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.141405][ T9468] netlink: 'syz.1.1033': attribute type 33 has an invalid length. [ 148.151354][ T70] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.209993][ T70] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.003252][ T9539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.731528][ T9565] __nla_validate_parse: 76 callbacks suppressed [ 149.731549][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'. [ 149.733629][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'. [ 149.738875][ T9565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1057'. [ 149.871985][ T30] audit: type=1800 audit(1756268339.760:3): pid=9557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1056" name="memory.events" dev="tmpfs" ino=1020 res=0 errno=0 [ 149.958518][ T9576] xt_HMARK: proto mask must be zero with L3 mode [ 150.131687][ T9588] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 150.147362][ T9588] netlink: 'syz.1.1066': attribute type 1 has an invalid length. [ 150.251498][ T9596] netlink: 4612 bytes leftover after parsing attributes in process `syz.3.1069'. [ 150.314673][ T9602] team0: Device gtp0 is up. Set it down before adding it as a team port [ 150.391008][ T9613] bridge_slave_0: entered promiscuous mode [ 150.423785][ T9617] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1075'. [ 150.531843][ T9619] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1076'. [ 150.558949][ T9624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1078'. [ 150.720762][ T9644] netlink: 'syz.3.1083': attribute type 10 has an invalid length. [ 150.824856][ T9644] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1083'. [ 150.868772][ T9652] netlink: 'syz.4.1085': attribute type 1 has an invalid length. [ 150.913790][ T9644] team0: Port device geneve0 added [ 150.922675][ T9652] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1085'. [ 151.044374][ T9666] sctp: [Deprecated]: syz.2.1092 (pid 9666) Use of int in maxseg socket option. [ 151.044374][ T9666] Use struct sctp_assoc_value instead [ 151.070122][ T9671] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1090'. [ 151.457597][ T9697] netlink: 'syz.3.1102': attribute type 3 has an invalid length. [ 151.528746][ T9701] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 151.638887][ T9714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.682896][ T9719] netlink: 'syz.3.1108': attribute type 7 has an invalid length. [ 151.724163][ T9719] : entered promiscuous mode [ 151.817669][ T9716] team0: Port device geneve0 removed [ 152.319908][ T9753] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 152.420296][ T9753] bond4: (slave vcan0): Error -95 calling set_mac_address [ 152.539289][ T9773] netlink: 'syz.0.1126': attribute type 18 has an invalid length. [ 152.582013][ T3575] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.615567][ T3575] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.664414][ T3575] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.692811][ T3575] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.023806][ T9800] nbd0: detected capacity change from 0 to 127 [ 153.057359][ T5874] block nbd0: Receive control failed (result -32) [ 153.083826][ T7489] block nbd0: Dead connection, failed to find a fallback [ 153.091437][ T7489] block nbd0: shutting down sockets [ 153.114192][ T7489] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.187962][ T7489] Buffer I/O error on dev nbd0, logical block 0, async page read [ 153.216650][ T7489] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.270820][ T7489] Buffer I/O error on dev nbd0, logical block 1, async page read [ 153.299618][ T7489] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.313869][ T9823] netlink: 'syz.3.1141': attribute type 8 has an invalid length. [ 153.323785][ T7489] Buffer I/O error on dev nbd0, logical block 2, async page read [ 153.331866][ T7489] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.332103][ T9826] netlink: 'syz.2.1142': attribute type 1 has an invalid length. [ 153.341724][ T7489] Buffer I/O error on dev nbd0, logical block 3, async page read [ 153.360622][ T7489] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.369940][ T7489] Buffer I/O error on dev nbd0, logical block 0, async page read [ 153.380805][ T7489] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.390171][ T7489] Buffer I/O error on dev nbd0, logical block 1, async page read [ 153.398851][ T7489] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.408623][ T7489] Buffer I/O error on dev nbd0, logical block 2, async page read [ 153.416767][ T7489] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.426325][ T7489] Buffer I/O error on dev nbd0, logical block 3, async page read [ 153.441948][ T7489] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.451607][ T7489] Buffer I/O error on dev nbd0, logical block 0, async page read [ 153.466858][ T7489] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.478915][ T7489] Buffer I/O error on dev nbd0, logical block 1, async page read [ 153.496042][ T9823] syzkaller0: entered promiscuous mode [ 153.523878][ T9823] syzkaller0: entered allmulticast mode [ 153.527995][ T7489] ldm_validate_partition_table(): Disk read failed. [ 153.540480][ T7489] Dev nbd0: unable to read RDB block 0 [ 153.551008][ T7489] nbd0: unable to read partition table [ 153.559421][ T9826] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 153.588504][ T7489] ldm_validate_partition_table(): Disk read failed. [ 153.611148][ T9805] clip:clip_setentry: non-CLIP VCC [ 153.632132][ T7489] Dev nbd0: unable to read RDB block 0 [ 153.642247][ T7489] nbd0: unable to read partition table [ 153.933555][ T9856] netlink: 'syz.3.1150': attribute type 9 has an invalid length. [ 153.950380][ T9843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.959383][ T9843] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.969472][ T9843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.218636][ T9878] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 154.463165][ T9902] netlink: 'syz.0.1163': attribute type 11 has an invalid length. [ 154.481980][ T9902] netlink: 'syz.0.1163': attribute type 11 has an invalid length. [ 154.732505][ T5874] Bluetooth: hci4: command 0x0405 tx timeout [ 155.083847][ T9956] __nla_validate_parse: 20 callbacks suppressed [ 155.083869][ T9956] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1175'. [ 155.131846][ T9953] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1174'. [ 155.165107][ T9956] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1175'. [ 155.366448][ T9980] netlink: 'syz.4.1178': attribute type 5 has an invalid length. [ 155.371204][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1180'. [ 155.671157][ T9999] syzkaller0: entered allmulticast mode [ 155.763924][T10010] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1186'. [ 155.839945][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'. [ 156.665661][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1195'. [ 156.741342][T10059] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1199'. [ 156.742201][T10058] netlink: 'syz.1.1198': attribute type 64 has an invalid length. [ 156.780827][T10058] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1198'. [ 156.813371][T10059] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1199'. [ 157.077424][T10095] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 157.086343][T10094] netlink: 'syz.0.1207': attribute type 8 has an invalid length. [ 157.160058][T10101] netlink: 'syz.0.1209': attribute type 2 has an invalid length. [ 157.554096][T10132] netlink: 'syz.3.1220': attribute type 39 has an invalid length. [ 157.559450][T10135] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 157.579747][T10134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.717406][T10146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.148911][T10178] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.166414][T10178] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.190588][T10183] openvswitch: netlink: Tunnel attr 1 has unexpected len 7 expected 4 [ 158.296857][T10178] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.316981][T10178] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.333439][T10193] netlink: 'syz.0.1248': attribute type 26 has an invalid length. [ 158.342273][T10196] IPVS: Error connecting to the multicast addr [ 158.374783][T10199] netlink: 'syz.1.1239': attribute type 1 has an invalid length. [ 158.397501][T10178] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.435404][T10178] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.450318][T10212] netlink: 'syz.4.1238': attribute type 8 has an invalid length. [ 158.525091][T10178] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.545414][T10178] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.670287][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.703443][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.743876][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.760033][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.776368][T10223] lo speed is unknown, defaulting to 1000 [ 158.804597][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.813493][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.835454][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.889055][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.953861][T10250] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 159.329567][T10283] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.401643][T10286] bond0: option mode: unable to set because the bond device has slaves [ 159.854663][T10303] netlink: 'syz.0.1272': attribute type 28 has an invalid length. [ 159.869142][T10303] netlink: 'syz.0.1272': attribute type 3 has an invalid length. [ 160.241798][T10322] __nla_validate_parse: 14 callbacks suppressed [ 160.241819][T10322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1279'. [ 160.295980][T10324] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1281'. [ 160.504287][T10338] block nbd2: not configured, cannot reconfigure [ 160.522620][T10340] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1287'. [ 160.540939][T10343] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1288'. [ 160.549403][T10340] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1287'. [ 160.559582][T10340] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1287'. [ 160.692810][T10352] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1289'. [ 160.769013][T10353] syzkaller1: entered promiscuous mode [ 160.789691][T10353] syzkaller1: entered allmulticast mode [ 160.823068][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1294'. [ 160.950374][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1294'. [ 160.977602][T10378] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1296'. [ 161.124044][T10399] veth1_macvtap: left promiscuous mode [ 161.166084][T10396] netlink: 'syz.1.1299': attribute type 10 has an invalid length. [ 161.166344][T10399] netem: change failed [ 161.186846][T10396] team0: Device ipvlan1 failed to register rx_handler [ 161.201049][T10397] netlink: 'syz.1.1299': attribute type 4 has an invalid length. [ 161.330993][T10411] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 161.474265][T10402] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.481802][T10402] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.741097][T10402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.758237][T10402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.851700][T10402] bridge1: left promiscuous mode [ 161.865578][T10402] vlan0: left allmulticast mode [ 161.870802][T10402] veth0_vlan: left allmulticast mode [ 161.876784][T10402] vlan0: left promiscuous mode [ 161.882266][T10402] macvtap1: left promiscuous mode [ 161.892160][T10402] geneve2: left promiscuous mode [ 161.909980][ T1162] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.928480][ T1162] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.986473][ T1162] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 162.015695][ T1162] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.059677][ T1162] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.079295][ T1162] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 162.100943][ T1162] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.124308][ T1162] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.170153][ T1162] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 162.190058][T10454] netlink: 'syz.2.1312': attribute type 30 has an invalid length. [ 162.201916][ T1162] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.215167][ T1162] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.224929][ T1162] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 162.273161][T10461] netlink: 'syz.4.1314': attribute type 1 has an invalid length. [ 162.314679][T10461] bond5: entered promiscuous mode [ 162.320247][T10461] 8021q: adding VLAN 0 to HW filter on device bond5 [ 162.337006][T10460] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 162.447963][T10483] netlink: 'syz.4.1320': attribute type 1 has an invalid length. [ 162.469808][T10484] bond6 (unregistering): Released all slaves [ 162.632232][T10502] macsec2: entered promiscuous mode [ 162.637561][T10502] macsec2: entered allmulticast mode [ 162.809525][T10508] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 162.931145][T10514] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 163.121445][T10527] syzkaller1: entered promiscuous mode [ 163.135116][T10527] syzkaller1: entered allmulticast mode [ 163.189781][T10531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.283565][ T70] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 163.290550][T10538] pim6reg1: entered promiscuous mode [ 163.298695][T10538] pim6reg1: entered allmulticast mode [ 164.067641][T10568] IPv6: sit1: Disabled Multicast RS [ 164.093840][T10568] sit1: entered allmulticast mode [ 164.246176][T10589] netlink: 'syz.0.1353': attribute type 1 has an invalid length. [ 164.246699][T10591] netlink: 'syz.3.1355': attribute type 1 has an invalid length. [ 164.314108][T10589] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.414305][T10602] sch_fq: defrate 0 ignored. [ 164.597428][T10616] lo speed is unknown, defaulting to 1000 [ 164.597775][T10620] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 164.646585][T10620] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 164.721000][T10626] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 164.918717][T10641] netlink: 'syz.4.1372': attribute type 1 has an invalid length. [ 164.927944][T10642] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 164.932615][T10641] netlink: 'syz.4.1372': attribute type 1 has an invalid length. [ 165.277800][T10678] __nla_validate_parse: 15 callbacks suppressed [ 165.277822][T10678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1383'. [ 165.296485][T10678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1383'. [ 165.310127][T10680] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1384'. [ 165.330664][T10678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.331048][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1384'. [ 165.379877][T10680] veth0_macvtap: left promiscuous mode [ 165.382305][T10684] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1384'. [ 165.401452][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1384'. [ 165.420895][T10682] netlink: 'syz.0.1385': attribute type 12 has an invalid length. [ 165.860784][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'. [ 165.974574][T10738] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1401'. [ 165.989112][T10740] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1400'. [ 166.066630][T10744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1403'. [ 166.355729][T10778] Dead loop on virtual device ip6_vti0, fix it urgently! [ 166.459147][T10789] netlink: 'syz.4.1416': attribute type 10 has an invalid length. [ 166.503585][T10789] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 166.571419][T10812] 8021q: VLANs not supported on caif0 [ 166.595685][T10812] netlink: 'syz.2.1420': attribute type 1 has an invalid length. [ 166.613669][T10812] netlink: 'syz.2.1420': attribute type 1 has an invalid length. [ 166.632531][T10812] netlink: 'syz.2.1420': attribute type 2 has an invalid length. [ 166.691898][T10842] netlink: 'syz.1.1426': attribute type 11 has an invalid length. [ 166.734881][T10842] netlink: 'syz.1.1426': attribute type 4 has an invalid length. [ 167.150099][T10884] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 167.160667][T10884] team0: Device macvtap2 is already an upper device of the team interface [ 167.280961][T10894] netlink: 'syz.1.1440': attribute type 33 has an invalid length. [ 167.291302][T10894] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 167.344722][T10898] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 167.405510][T10904] tipc: Enabled bearer , priority 0 [ 167.413154][T10904] syzkaller0: entered promiscuous mode [ 167.418828][T10904] syzkaller0: entered allmulticast mode [ 167.433906][T10903] tipc: Resetting bearer [ 167.442823][T10903] tipc: Disabling bearer [ 167.498230][T10810] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 168.332521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.493276][T10954] netlink: 'syz.2.1458': attribute type 2 has an invalid length. [ 169.360170][T10978] netlink: 'syz.1.1465': attribute type 1 has an invalid length. [ 169.566480][T11005] netlink: zone id is out of range [ 169.573537][T11005] netlink: del zone limit has 4 unknown bytes [ 169.680562][T11015] netlink: 'syz.0.1479': attribute type 21 has an invalid length. [ 169.688793][T11015] netlink: 'syz.0.1479': attribute type 22 has an invalid length. [ 169.919083][T11039] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 169.973763][T11044] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 170.408144][T11084] __nla_validate_parse: 30 callbacks suppressed [ 170.408167][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1502'. [ 170.623922][T11098] lo speed is unknown, defaulting to 1000 [ 170.624093][T11096] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1507'. [ 170.665294][T11103] netlink: 'syz.1.1508': attribute type 11 has an invalid length. [ 170.702619][T11103] netlink: 'syz.1.1508': attribute type 11 has an invalid length. [ 170.715419][T11103] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1508'. [ 170.766433][T11107] macvtap1: entered allmulticast mode [ 170.771888][T11107] veth0_macvtap: entered allmulticast mode [ 170.875196][T11121] batadv0: entered allmulticast mode [ 171.157897][T11141] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1518'. [ 171.248524][T11154] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1518'. [ 171.261501][T11153] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1522'. [ 171.293748][T11153] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1522'. [ 171.328376][T11153] team0: Port device geneve0 added [ 171.490610][T11171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1527'. [ 171.609040][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1531'. [ 172.067843][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1541'. [ 172.566671][T11232] syzkaller0: entered allmulticast mode [ 173.180143][T11302] validate_nla: 8 callbacks suppressed [ 173.180165][T11302] netlink: 'syz.4.1568': attribute type 1 has an invalid length. [ 173.244122][T11302] gretap1: entered promiscuous mode [ 173.270764][T11302] bond6: (slave gretap1): making interface the new active one [ 173.292366][T11313] netlink: 'syz.1.1571': attribute type 83 has an invalid length. [ 173.306583][T11302] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 173.348709][T11310] macvlan2: entered promiscuous mode [ 173.354358][T11310] macvlan2: entered allmulticast mode [ 173.360652][T11310] bond6: entered promiscuous mode [ 173.366730][T11310] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 173.374592][T11310] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 173.390921][T11310] bond6: left promiscuous mode [ 173.761902][T11338] syzkaller0: entered promiscuous mode [ 173.771108][T11338] syzkaller0: entered allmulticast mode [ 173.876019][T11351] pim6reg1: entered promiscuous mode [ 173.881440][T11351] pim6reg1: entered allmulticast mode [ 175.334830][T11442] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 175.358619][T11444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.427902][T11446] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 175.429275][T10437] IPVS: starting estimator thread 0... [ 175.523174][T11459] __nla_validate_parse: 10 callbacks suppressed [ 175.523195][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1609'. [ 175.539042][T11452] IPVS: using max 40 ests per chain, 96000 per kthread [ 175.589423][T11462] netlink: 'syz.1.1612': attribute type 4 has an invalid length. [ 175.608541][T11463] netlink: 'syz.1.1612': attribute type 4 has an invalid length. [ 175.701656][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'. [ 175.737899][T11478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1616'. [ 175.806262][T10833] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.827789][T10833] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.847980][T10833] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.876853][T10833] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.081232][T11520] netlink: 'syz.3.1629': attribute type 1 has an invalid length. [ 176.091071][T11520] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1629'. [ 176.101337][T11520] netlink: 'syz.3.1629': attribute type 1 has an invalid length. [ 176.111404][T11522] netlink: 'syz.1.1630': attribute type 1 has an invalid length. [ 176.117051][T11523] netlink: 'syz.2.1624': attribute type 1 has an invalid length. [ 176.152943][T11522] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1630'. [ 176.159178][T11527] netlink: 'syz.1.1630': attribute type 1 has an invalid length. [ 176.174815][T11528] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1629'. [ 176.175289][T11527] netlink: 'syz.1.1630': attribute type 11 has an invalid length. [ 176.192845][T11527] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1630'. [ 176.235726][T11522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.360020][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 176.370927][T11534] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 176.389811][T11534] batman_adv: batadv0: Adding interface: wlan1 [ 176.399771][T11534] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.426150][T11533] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 176.430036][T11534] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 176.433918][T11533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.463715][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'. [ 176.475500][T11523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1624'. [ 176.597556][T11550] syzkaller0: entered promiscuous mode [ 176.603744][T11550] syzkaller0: entered allmulticast mode [ 176.626377][T11550] tipc: Enabled bearer , priority 0 [ 176.635472][T11549] tipc: Resetting bearer [ 176.706263][T11549] tipc: Disabling bearer [ 176.718593][T11562] lo: entered promiscuous mode [ 176.726504][T11562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.765799][T11564] pim6reg527: entered allmulticast mode [ 177.227435][T11613] sctp: [Deprecated]: syz.4.1654 (pid 11613) Use of int in maxseg socket option. [ 177.227435][T11613] Use struct sctp_assoc_value instead [ 177.524292][T11634] team0: Port device geneve0 removed [ 177.925672][T11677] xt_policy: too many policy elements [ 177.990148][T11682] bond0: (slave bridge_slave_1): Releasing backup interface [ 178.003761][T10427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.014341][T11682] bond0: (slave bridge_slave_1): the permanent HWaddr of slave - d6:49:f9:8c:50:69 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 178.077879][T11682] bond0: (slave wlan1): Releasing backup interface [ 178.127802][T11682] bond6: (slave gretap1): Releasing active interface [ 178.182585][T10422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.449217][T11729] geneve3: entered promiscuous mode [ 178.457031][T11729] geneve3: entered allmulticast mode [ 178.466241][T10810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.479627][T10810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.491868][T10810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.529467][T10810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.560931][T11737] tipc: Enabled bearer , priority 0 [ 178.573370][T11736] syzkaller0: entered promiscuous mode [ 178.580144][T11736] syzkaller0: entered allmulticast mode [ 178.625899][T11663] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 178.653138][T11736] tipc: Resetting bearer [ 178.700675][T11736] tipc: Disabling bearer [ 178.839668][T11769] validate_nla: 3 callbacks suppressed [ 178.839687][T11769] netlink: 'syz.1.1709': attribute type 2 has an invalid length. [ 178.969978][T11788] netlink: 'syz.4.1714': attribute type 1 has an invalid length. [ 178.984634][T11790] openvswitch: netlink: Actions may not be safe on all matching packets [ 179.271176][T11819] netlink: 'syz.0.1722': attribute type 1 has an invalid length. [ 179.280117][T11819] netlink: 'syz.0.1722': attribute type 11 has an invalid length. [ 179.324864][T11826] netlink: 'syz.1.1724': attribute type 16 has an invalid length. [ 179.334533][T11826] netlink: 'syz.1.1724': attribute type 3 has an invalid length. [ 179.360625][T11830] lo speed is unknown, defaulting to 1000 [ 179.596038][T11837] netlink: 'syz.2.1727': attribute type 1 has an invalid length. [ 179.846581][T11849] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.192577][T11838] bond3 (unregistering): Released all slaves [ 180.238933][T11841] ip6tnl1: entered promiscuous mode [ 180.253938][T11841] ip6tnl1: entered allmulticast mode [ 180.296013][T11872] netlink: 'syz.1.1734': attribute type 23 has an invalid length. [ 180.498697][T11885] netlink: 'syz.3.1736': attribute type 3 has an invalid length. [ 180.614793][T11891] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 180.630956][T11891] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 180.875407][T11907] __nla_validate_parse: 23 callbacks suppressed [ 180.875431][T11907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1745'. [ 180.893091][ T5182] Bluetooth: hci4: command 0x0405 tx timeout [ 181.132537][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 181.378943][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1754'. [ 181.598883][T11969] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1764'. [ 181.976930][T12017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.997267][T12019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.168329][T12024] lo speed is unknown, defaulting to 1000 [ 182.267267][T12031] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1781'. [ 182.292243][T12040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1783'. [ 182.453987][T12050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1785'. [ 182.505320][T12055] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1787'. [ 182.535401][T12050] bond7: entered promiscuous mode [ 182.542090][T12050] bond7: entered allmulticast mode [ 182.565507][T12050] 8021q: adding VLAN 0 to HW filter on device bond7 [ 182.585700][T12050] bond7 (unregistering): Released all slaves [ 182.628941][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1786'. [ 182.693894][T11999] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 182.707522][T12058] lo speed is unknown, defaulting to 1000 [ 182.810096][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1790'. [ 182.886179][T12080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1792'. [ 182.908908][T12082] gretap0: entered promiscuous mode [ 182.986021][T12082] 0ªî{X¹¦: renamed from gretap0 [ 182.993862][T12082] 0ªî{X¹¦: left promiscuous mode [ 182.999225][T12082] 0ªî{X¹¦: entered allmulticast mode [ 183.009074][T12082] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 183.033716][T12082] 0ªî{X¹¦: entered promiscuous mode [ 183.046501][T12082] 0ªî{X¹¦: left allmulticast mode [ 183.205991][T12107] netlink: 'syz.1.1802': attribute type 10 has an invalid length. [ 183.216421][T12107] dummy0: entered promiscuous mode [ 183.222159][T12107] bridge0: port 4(dummy0) entered blocking state [ 183.230746][T12107] bridge0: port 4(dummy0) entered disabled state [ 183.238145][T12107] dummy0: entered allmulticast mode [ 183.247670][T12107] dummy0: left allmulticast mode [ 183.253927][T12107] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 183.460934][T12138] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 183.777631][T12173] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 183.932544][ T5874] Bluetooth: hci1: command 0x0401 tx timeout [ 184.187091][T12210] team0: Device vti0 is up. Set it down before adding it as a team port [ 184.202242][T12212] netlink: 'syz.1.1832': attribute type 2 has an invalid length. [ 184.213473][T12212] netlink: 'syz.1.1832': attribute type 2 has an invalid length. [ 184.316510][T12222] syzkaller1: entered promiscuous mode [ 184.323361][T12222] syzkaller1: entered allmulticast mode [ 184.584569][T12168] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 184.591931][T12167] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 185.025798][T12281] : entered promiscuous mode [ 185.463950][T12316] netlink: 'syz.0.1856': attribute type 2 has an invalid length. [ 185.483784][T12316] netlink: 'syz.0.1856': attribute type 2 has an invalid length. [ 185.561601][T12326] netlink: 'syz.0.1862': attribute type 7 has an invalid length. [ 185.570118][T12326] netlink: 'syz.0.1862': attribute type 8 has an invalid length. [ 185.840456][T12349] netlink: 'syz.2.1868': attribute type 2 has an invalid length. [ 185.957887][T12363] sctp: [Deprecated]: syz.4.1871 (pid 12363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.957887][T12363] Use struct sctp_sack_info instead [ 186.134783][T12380] atomic_op ffff8880298fb998 conn xmit_atomic 0000000000000000 [ 186.304326][T12400] netlink: 'syz.3.1884': attribute type 30 has an invalid length. [ 186.555867][T12421] FAULT_INJECTION: forcing a failure. [ 186.555867][T12421] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 186.589577][T12422] tipc: Enabling of bearer rejected, failed to enable media [ 186.607609][T12421] CPU: 1 UID: 0 PID: 12421 Comm: syz.3.1889 Not tainted syzkaller #0 PREEMPT(full) [ 186.607641][T12421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.607654][T12421] Call Trace: [ 186.607662][T12421] [ 186.607670][T12421] dump_stack_lvl+0x189/0x250 [ 186.607699][T12421] ? __pfx____ratelimit+0x10/0x10 [ 186.607727][T12421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.607749][T12421] ? __pfx__printk+0x10/0x10 [ 186.607774][T12421] ? __might_fault+0xb0/0x130 [ 186.607803][T12421] ? rcu_is_watching+0x15/0xb0 [ 186.607825][T12421] should_fail_ex+0x414/0x560 [ 186.607853][T12421] _copy_from_user+0x2d/0xb0 [ 186.607875][T12421] ___sys_sendmsg+0x158/0x2a0 [ 186.607897][T12421] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.607934][T12421] ? __fget_files+0x2a/0x420 [ 186.607961][T12421] ? __fget_files+0x3a0/0x420 [ 186.607994][T12421] __x64_sys_sendmsg+0x19b/0x260 [ 186.608015][T12421] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.608040][T12421] ? __pfx_ksys_write+0x10/0x10 [ 186.608069][T12421] ? rcu_is_watching+0x15/0xb0 [ 186.608088][T12421] do_syscall_64+0xfa/0x3b0 [ 186.608116][T12421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.608136][T12421] ? clear_bhb_loop+0x60/0xb0 [ 186.608157][T12421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.608176][T12421] RIP: 0033:0x7fad18b8ebe9 [ 186.608193][T12421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.608212][T12421] RSP: 002b:00007fad1995a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.608235][T12421] RAX: ffffffffffffffda RBX: 00007fad18db6090 RCX: 00007fad18b8ebe9 [ 186.608251][T12421] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 0000000000000003 [ 186.608264][T12421] RBP: 00007fad1995a090 R08: 0000000000000000 R09: 0000000000000000 [ 186.608276][T12421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.608288][T12421] R13: 00007fad18db6128 R14: 00007fad18db6090 R15: 00007ffdc77d8578 [ 186.608310][T12421] [ 186.931786][T12429] netlink: 'syz.3.1891': attribute type 1 has an invalid length. [ 186.976916][T12429] 8021q: adding VLAN 0 to HW filter on device bond7 [ 187.028688][T12434] __nla_validate_parse: 25 callbacks suppressed [ 187.028709][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1893'. [ 187.054508][T12434] Unsupported xt match [ 187.054526][T12434] unable to load match [ 187.096147][T12429] bond7: (slave veth5): Enslaving as an active interface with a down link [ 187.131303][T12439] netlink: 212288 bytes leftover after parsing attributes in process `syz.0.1895'. [ 187.151565][T12444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1894'. [ 187.241965][T12451] macvlan3: entered allmulticast mode [ 187.250131][T12451] bond0: (slave macvlan3): Opening slave failed [ 187.287466][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1899'. [ 187.300302][T12460] FAULT_INJECTION: forcing a failure. [ 187.300302][T12460] name failslab, interval 1, probability 0, space 0, times 1 [ 187.318056][T12460] CPU: 1 UID: 0 PID: 12460 Comm: syz.1.1901 Not tainted syzkaller #0 PREEMPT(full) [ 187.318086][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.318099][T12460] Call Trace: [ 187.318106][T12460] [ 187.318114][T12460] dump_stack_lvl+0x189/0x250 [ 187.318143][T12460] ? __pfx____ratelimit+0x10/0x10 [ 187.318169][T12460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.318192][T12460] ? __pfx__printk+0x10/0x10 [ 187.318219][T12460] ? fs_reclaim_acquire+0x7d/0x100 [ 187.318246][T12460] ? rcu_is_watching+0x15/0xb0 [ 187.318266][T12460] ? __pfx___might_resched+0x10/0x10 [ 187.318282][T12460] ? lock_acquire+0x5f/0x360 [ 187.318311][T12460] should_fail_ex+0x414/0x560 [ 187.318337][T12460] should_failslab+0xa8/0x100 [ 187.318365][T12460] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 187.318390][T12460] ? __alloc_skb+0x112/0x2d0 [ 187.318417][T12460] ? rcu_is_watching+0x15/0xb0 [ 187.318437][T12460] __alloc_skb+0x112/0x2d0 [ 187.318466][T12460] netlink_sendmsg+0x5c6/0xb30 [ 187.318500][T12460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.318528][T12460] ? aa_sock_msg_perm+0xf1/0x1d0 [ 187.318548][T12460] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.318569][T12460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.318597][T12460] __sock_sendmsg+0x21c/0x270 [ 187.318622][T12460] ____sys_sendmsg+0x505/0x830 [ 187.318652][T12460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.318676][T12460] ? import_iovec+0x74/0xa0 [ 187.318699][T12460] ___sys_sendmsg+0x21f/0x2a0 [ 187.318719][T12460] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.318754][T12460] ? __fget_files+0x2a/0x420 [ 187.318782][T12460] ? __fget_files+0x3a0/0x420 [ 187.318814][T12460] __x64_sys_sendmsg+0x19b/0x260 [ 187.318835][T12460] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.318859][T12460] ? __pfx_ksys_write+0x10/0x10 [ 187.318886][T12460] ? rcu_is_watching+0x15/0xb0 [ 187.318906][T12460] do_syscall_64+0xfa/0x3b0 [ 187.318934][T12460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.318954][T12460] ? clear_bhb_loop+0x60/0xb0 [ 187.318976][T12460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.318995][T12460] RIP: 0033:0x7f229e58ebe9 [ 187.319012][T12460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.319030][T12460] RSP: 002b:00007f229f47f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.319059][T12460] RAX: ffffffffffffffda RBX: 00007f229e7b6090 RCX: 00007f229e58ebe9 [ 187.319074][T12460] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 0000000000000003 [ 187.319086][T12460] RBP: 00007f229f47f090 R08: 0000000000000000 R09: 0000000000000000 [ 187.319099][T12460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.319111][T12460] R13: 00007f229e7b6128 R14: 00007f229e7b6090 R15: 00007ffca4338978 [ 187.319132][T12460] [ 187.745814][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1905'. [ 187.746824][T12474] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1904'. [ 187.891348][T12491] IPv6: sit1: Disabled Multicast RS [ 187.948707][T12494] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1912'. [ 188.115543][T12521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1920'. [ 188.228356][T12528] netlink: 'syz.0.1921': attribute type 1 has an invalid length. [ 188.236528][T12528] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1921'. [ 189.073309][T12540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1924'. [ 189.205397][T12576] validate_nla: 2 callbacks suppressed [ 189.205420][T12576] netlink: 'syz.2.1937': attribute type 8 has an invalid length. [ 189.239360][T12576] netlink: 'syz.2.1937': attribute type 4 has an invalid length. [ 189.467198][T12608] netlink: 'syz.0.1946': attribute type 12 has an invalid length. [ 189.504506][T12608] netlink: 'syz.0.1946': attribute type 29 has an invalid length. [ 189.613968][T12627] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 189.628127][T12627] netlink: 'syz.2.1949': attribute type 4 has an invalid length. [ 189.657789][T12626] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.670749][T12629] netlink: 'syz.4.1952': attribute type 4 has an invalid length. [ 189.738107][T12626] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.809102][T12626] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.825261][T12638] openvswitch: netlink: Flow key attr not present in new flow. [ 189.939447][T12626] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.956504][T12645] bridge: RTM_NEWNEIGH with invalid ether address [ 189.965687][T12647] bridge: RTM_NEWNEIGH with invalid ether address [ 190.038739][T12654] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 190.059852][T10794] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.085651][T10794] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.094000][T12656] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20000 [ 190.109163][T10794] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.133825][T10794] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.591266][T12714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.634914][T12715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.755924][T12720] netlink: 'syz.0.1978': attribute type 1 has an invalid length. [ 190.768535][T12720] netlink: 'syz.0.1978': attribute type 2 has an invalid length. [ 190.864392][T12735] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.876922][T12735] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 191.023685][T12754] tipc: Enabled bearer , priority 0 [ 191.108282][T12754] tipc: Disabling bearer [ 191.334414][T12794] macvlan0: entered promiscuous mode [ 191.339963][T12794] macvlan0: entered allmulticast mode [ 191.388331][T12794] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 191.409584][T12794] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 191.486054][T12805] tun0: tun_chr_ioctl cmd 1074025675 [ 191.494213][T12805] tun0: persist disabled [ 191.532992][ T5861] Bluetooth: hci2: command 0x0406 tx timeout [ 191.533497][ T5870] Bluetooth: hci3: command 0x0406 tx timeout [ 191.539263][ T5861] Bluetooth: hci1: command 0x0401 tx timeout [ 191.646878][T12816] netlink: 'syz.0.2009': attribute type 1 has an invalid length. [ 191.730807][T12821] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 191.981536][T12844] FAULT_INJECTION: forcing a failure. [ 191.981536][T12844] name failslab, interval 1, probability 0, space 0, times 0 [ 191.997295][T12844] CPU: 0 UID: 0 PID: 12844 Comm: syz.4.2020 Not tainted syzkaller #0 PREEMPT(full) [ 191.997327][T12844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.997338][T12844] Call Trace: [ 191.997345][T12844] [ 191.997353][T12844] dump_stack_lvl+0x189/0x250 [ 191.997379][T12844] ? __pfx____ratelimit+0x10/0x10 [ 191.997404][T12844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.997423][T12844] ? __pfx__printk+0x10/0x10 [ 191.997445][T12844] ? genl_rcv+0x28/0x40 [ 191.997463][T12844] ? ____sys_sendmsg+0x505/0x830 [ 191.997480][T12844] ? __x64_sys_sendmsg+0x19b/0x260 [ 191.997507][T12844] ? do_syscall_64+0xfa/0x3b0 [ 191.997533][T12844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.997554][T12844] should_fail_ex+0x414/0x560 [ 191.997581][T12844] should_failslab+0xa8/0x100 [ 191.997608][T12844] kmem_cache_alloc_noprof+0x73/0x3c0 [ 191.997631][T12844] ? skb_clone+0x212/0x3a0 [ 191.997651][T12844] skb_clone+0x212/0x3a0 [ 191.997672][T12844] __netlink_deliver_tap+0x404/0x850 [ 191.997705][T12844] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.997729][T12844] netlink_deliver_tap+0x19c/0x1b0 [ 191.997755][T12844] netlink_sendskb+0x68/0x140 [ 191.997777][T12844] netlink_unicast+0x397/0x9e0 [ 191.997797][T12844] ? __asan_memcpy+0x40/0x70 [ 191.997820][T12844] ? __pfx_netlink_unicast+0x10/0x10 [ 191.997847][T12844] netlink_rcv_skb+0x28c/0x470 [ 191.997872][T12844] ? __pfx_genl_rcv_msg+0x10/0x10 [ 191.997892][T12844] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.997921][T12844] ? lock_release+0x4b/0x3e0 [ 191.997949][T12844] ? down_read+0x1ad/0x2e0 [ 191.997967][T12844] genl_rcv+0x28/0x40 [ 191.997985][T12844] netlink_unicast+0x82c/0x9e0 [ 191.998012][T12844] ? __pfx_netlink_unicast+0x10/0x10 [ 191.998036][T12844] ? netlink_sendmsg+0x642/0xb30 [ 191.998062][T12844] ? skb_put+0x11b/0x210 [ 191.998081][T12844] netlink_sendmsg+0x805/0xb30 [ 191.998114][T12844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.998144][T12844] ? aa_sock_msg_perm+0xf1/0x1d0 [ 191.998163][T12844] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.998185][T12844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.998214][T12844] __sock_sendmsg+0x21c/0x270 [ 191.998240][T12844] ____sys_sendmsg+0x505/0x830 [ 191.998261][T12844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.998285][T12844] ? import_iovec+0x74/0xa0 [ 191.998308][T12844] ___sys_sendmsg+0x21f/0x2a0 [ 191.998327][T12844] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.998359][T12844] ? __fget_files+0x2a/0x420 [ 191.998387][T12844] ? __fget_files+0x3a0/0x420 [ 191.998419][T12844] __x64_sys_sendmsg+0x19b/0x260 [ 191.998441][T12844] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.998465][T12844] ? __pfx_ksys_write+0x10/0x10 [ 191.998490][T12844] ? rcu_is_watching+0x15/0xb0 [ 191.998521][T12844] ? rcu_is_watching+0x15/0xb0 [ 191.998542][T12844] do_syscall_64+0xfa/0x3b0 [ 191.998570][T12844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.998590][T12844] ? clear_bhb_loop+0x60/0xb0 [ 191.998612][T12844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.998631][T12844] RIP: 0033:0x7fc9fa98ebe9 [ 191.998649][T12844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.998667][T12844] RSP: 002b:00007fc9fb88e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.998690][T12844] RAX: ffffffffffffffda RBX: 00007fc9fabb5fa0 RCX: 00007fc9fa98ebe9 [ 191.998706][T12844] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 0000000000000003 [ 191.998719][T12844] RBP: 00007fc9fb88e090 R08: 0000000000000000 R09: 0000000000000000 [ 191.998732][T12844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.998745][T12844] R13: 00007fc9fabb6038 R14: 00007fc9fabb5fa0 R15: 00007ffdeb5a7c88 [ 191.998767][T12844] [ 192.467445][T12849] __nla_validate_parse: 31 callbacks suppressed [ 192.467468][T12849] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2022'. [ 192.507237][T12854] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2021'. [ 192.572349][T12857] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2023'. [ 192.760441][T12875] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 192.809189][T12880] xt_limit: Overflow, try lower: 604147548/4200216962 [ 192.822800][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2028'. [ 192.847470][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2028'. [ 192.867600][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2028'. [ 192.914494][T12891] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 192.985940][T12893] FAULT_INJECTION: forcing a failure. [ 192.985940][T12893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.000663][T12893] CPU: 1 UID: 0 PID: 12893 Comm: syz.4.2032 Not tainted syzkaller #0 PREEMPT(full) [ 193.000693][T12893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.000705][T12893] Call Trace: [ 193.000713][T12893] [ 193.000721][T12893] dump_stack_lvl+0x189/0x250 [ 193.000751][T12893] ? __pfx____ratelimit+0x10/0x10 [ 193.000779][T12893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.000801][T12893] ? __pfx__printk+0x10/0x10 [ 193.000830][T12893] ? rcu_is_watching+0x15/0xb0 [ 193.000850][T12893] should_fail_ex+0x414/0x560 [ 193.000877][T12893] _copy_to_user+0x31/0xb0 [ 193.000900][T12893] simple_read_from_buffer+0xe1/0x170 [ 193.000930][T12893] proc_fail_nth_read+0x1b3/0x220 [ 193.000953][T12893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.000976][T12893] ? rw_verify_area+0x2a6/0x4d0 [ 193.000998][T12893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.001020][T12893] vfs_read+0x200/0xa30 [ 193.001043][T12893] ? fdget_pos+0x247/0x320 [ 193.001062][T12893] ? __pfx___mutex_lock+0x10/0x10 [ 193.001090][T12893] ? __pfx_vfs_read+0x10/0x10 [ 193.001117][T12893] ? __fget_files+0x3a0/0x420 [ 193.001145][T12893] ? __fget_files+0x2a/0x420 [ 193.001176][T12893] ksys_read+0x145/0x250 [ 193.001201][T12893] ? __pfx_ksys_read+0x10/0x10 [ 193.001223][T12893] ? rcu_is_watching+0x15/0xb0 [ 193.001244][T12893] ? rcu_is_watching+0x15/0xb0 [ 193.001263][T12893] do_syscall_64+0xfa/0x3b0 [ 193.001292][T12893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.001310][T12893] ? clear_bhb_loop+0x60/0xb0 [ 193.001332][T12893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.001350][T12893] RIP: 0033:0x7fc9fa98d5fc [ 193.001369][T12893] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 193.001387][T12893] RSP: 002b:00007fc9fb88e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.001410][T12893] RAX: ffffffffffffffda RBX: 00007fc9fabb5fa0 RCX: 00007fc9fa98d5fc [ 193.001425][T12893] RDX: 000000000000000f RSI: 00007fc9fb88e0a0 RDI: 0000000000000004 [ 193.001438][T12893] RBP: 00007fc9fb88e090 R08: 0000000000000000 R09: 0000000000000000 [ 193.001451][T12893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.001464][T12893] R13: 00007fc9fabb6038 R14: 00007fc9fabb5fa0 R15: 00007ffdeb5a7c88 [ 193.001486][T12893] [ 193.333861][T12914] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2033'. [ 193.348675][T12911] netlink: 'syz.3.2039': attribute type 11 has an invalid length. [ 193.360343][T12911] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2039'. [ 193.361117][T12909] netlink: 808 bytes leftover after parsing attributes in process `syz.0.2037'. [ 193.480978][T12927] tipc: Enabled bearer , priority 0 [ 193.491670][T12927] syzkaller0: entered promiscuous mode [ 193.499341][T12927] syzkaller0: entered allmulticast mode [ 193.511468][T12927] tipc: Resetting bearer [ 193.519604][T12926] tipc: Resetting bearer [ 193.554621][T12926] tipc: Disabling bearer [ 193.597263][T10810] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.646207][T10810] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.671477][T12948] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.2050'. [ 193.846091][T12963] sock: sock_set_timeout: `syz.2.2055' (pid 12963) tries to set negative timeout [ 193.872515][T12964] sock: sock_set_timeout: `syz.2.2055' (pid 12964) tries to set negative timeout [ 194.595691][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.240385][T12992] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 195.699841][T13044] netlink: 'syz.3.2077': attribute type 1 has an invalid length. [ 195.816880][T13056] netlink: 'syz.4.2080': attribute type 12 has an invalid length. [ 195.915516][T13056] netlink: 'syz.4.2080': attribute type 12 has an invalid length. [ 196.095515][T13089] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 196.211918][T13096] syzkaller1: entered promiscuous mode [ 196.218380][T13096] syzkaller1: entered allmulticast mode [ 196.706787][T13138] netlink: 'syz.4.2105': attribute type 3 has an invalid length. [ 196.988758][T13164] netlink: 'syz.4.2114': attribute type 83 has an invalid length. [ 197.181428][T13181] netlink: 'syz.0.2120': attribute type 21 has an invalid length. [ 197.678343][T13223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.691085][T13239] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 197.788603][T13248] __nla_validate_parse: 22 callbacks suppressed [ 197.788625][T13248] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2139'. [ 197.790636][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2140'. [ 197.800346][T13247] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2140'. [ 197.854450][T13247] gretap0: entered promiscuous mode [ 197.939572][T13257] netlink: 'syz.2.2143': attribute type 10 has an invalid length. [ 198.034821][T13263] smc: net device bond0 applied user defined pnetid SYZ2 [ 198.045399][T13263] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2145'. [ 198.100719][T13263] smc: removing net device bond0 with user defined pnetid SYZ2 [ 198.111670][T13273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2149'. [ 198.123851][T13273] netlink: 'syz.4.2149': attribute type 7 has an invalid length. [ 198.132033][T13273] netlink: 'syz.4.2149': attribute type 8 has an invalid length. [ 198.132964][T13263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.142501][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2149'. [ 198.162479][T13263] bond0 (unregistering): Released all slaves [ 198.166594][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2150'. [ 198.178491][T13274] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.2147'. [ 198.340717][T13285] tipc: Enabled bearer , priority 0 [ 198.358761][T13285] syzkaller0: entered promiscuous mode [ 198.365407][T13285] syzkaller0: entered allmulticast mode [ 198.391999][T13285] tipc: Resetting bearer [ 198.411256][T13284] tipc: Resetting bearer [ 198.440915][T13284] tipc: Disabling bearer [ 198.655985][T13312] netlink: 'syz.0.2161': attribute type 1 has an invalid length. [ 198.671177][T13312] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2161'. [ 198.687646][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2161'. [ 198.775793][T13327] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 198.803081][T13323] bridge0: port 1(batadv0) entered blocking state [ 198.814759][T13323] bridge0: port 1(batadv0) entered disabled state [ 198.823142][T13323] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 198.841309][T13328] tipc: Enabled bearer , priority 0 [ 198.857280][T13328] syzkaller0: entered promiscuous mode [ 198.865503][T13328] syzkaller0: entered allmulticast mode [ 198.911093][T13328] tipc: Resetting bearer [ 198.924228][T13324] tipc: Resetting bearer [ 198.945623][T13324] tipc: Disabling bearer [ 199.001419][T13347] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 199.025491][T13349] tipc: Enabled bearer , priority 0 [ 199.065672][T13349] syzkaller0: entered promiscuous mode [ 199.071385][T13349] syzkaller0: entered allmulticast mode [ 199.102962][T13349] tipc: Resetting bearer [ 199.116914][T13348] FAULT_INJECTION: forcing a failure. [ 199.116914][T13348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.135784][T13346] tipc: Resetting bearer [ 199.139581][T13348] CPU: 1 UID: 0 PID: 13348 Comm: syz.3.2174 Not tainted syzkaller #0 PREEMPT(full) [ 199.139610][T13348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.139621][T13348] Call Trace: [ 199.139627][T13348] [ 199.139635][T13348] dump_stack_lvl+0x189/0x250 [ 199.139662][T13348] ? __pfx____ratelimit+0x10/0x10 [ 199.139687][T13348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.139706][T13348] ? __pfx__printk+0x10/0x10 [ 199.139732][T13348] ? rcu_is_watching+0x15/0xb0 [ 199.139752][T13348] should_fail_ex+0x414/0x560 [ 199.139775][T13348] _copy_to_user+0x31/0xb0 [ 199.139796][T13348] simple_read_from_buffer+0xe1/0x170 [ 199.139823][T13348] proc_fail_nth_read+0x1b3/0x220 [ 199.139845][T13348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.139865][T13348] ? rw_verify_area+0x2a6/0x4d0 [ 199.139887][T13348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.139906][T13348] vfs_read+0x200/0xa30 [ 199.139926][T13348] ? fdget_pos+0x247/0x320 [ 199.139943][T13348] ? __pfx___mutex_lock+0x10/0x10 [ 199.139968][T13348] ? __pfx_vfs_read+0x10/0x10 [ 199.139992][T13348] ? __fget_files+0x3a0/0x420 [ 199.140016][T13348] ? __fget_files+0x2a/0x420 [ 199.140044][T13348] ksys_read+0x145/0x250 [ 199.140067][T13348] ? __pfx_ksys_read+0x10/0x10 [ 199.140086][T13348] ? rcu_is_watching+0x15/0xb0 [ 199.140104][T13348] ? rcu_is_watching+0x15/0xb0 [ 199.140122][T13348] do_syscall_64+0xfa/0x3b0 [ 199.140147][T13348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.140164][T13348] ? clear_bhb_loop+0x60/0xb0 [ 199.140183][T13348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.140199][T13348] RIP: 0033:0x7fad18b8d5fc [ 199.140216][T13348] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 199.140231][T13348] RSP: 002b:00007fad1997b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 199.140252][T13348] RAX: ffffffffffffffda RBX: 00007fad18db5fa0 RCX: 00007fad18b8d5fc [ 199.140266][T13348] RDX: 000000000000000f RSI: 00007fad1997b0a0 RDI: 0000000000000004 [ 199.140278][T13348] RBP: 00007fad1997b090 R08: 0000000000000000 R09: 0000000000000000 [ 199.140289][T13348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.140300][T13348] R13: 00007fad18db6038 R14: 00007fad18db5fa0 R15: 00007ffdc77d8578 [ 199.140319][T13348] [ 199.382028][T13293] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 199.391328][T13346] tipc: Disabling bearer [ 199.518751][T13373] tipc: Enabling of bearer rejected, failed to enable media [ 199.769596][T13399] tipc: Enabled bearer , priority 0 [ 199.785039][T13399] syzkaller0: entered promiscuous mode [ 199.798622][T13399] syzkaller0: entered allmulticast mode [ 199.807536][T13399] tipc: Resetting bearer [ 199.814420][T13397] syzkaller1: entered promiscuous mode [ 199.821144][T13397] syzkaller1: entered allmulticast mode [ 199.841698][T13398] tipc: Resetting bearer [ 199.850668][T13398] tipc: Disabling bearer [ 199.904522][T13403] openvswitch: netlink: Duplicate or invalid key (type 0). [ 199.911945][T13403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.177961][T13422] sctp: [Deprecated]: syz.0.2201 (pid 13422) Use of int in max_burst socket option. [ 200.177961][T13422] Use struct sctp_assoc_value instead [ 200.256548][T13428] pim6reg1: entered promiscuous mode [ 200.262060][T13428] pim6reg1: entered allmulticast mode [ 200.289863][T13430] netlink: 'syz.2.2203': attribute type 11 has an invalid length. [ 200.298110][T13431] netlink: 'syz.2.2203': attribute type 11 has an invalid length. [ 200.346671][T13434] bridge_slave_0: left allmulticast mode [ 200.354168][T13434] bridge_slave_0: left promiscuous mode [ 200.360430][T13434] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.374824][T13434] bridge_slave_1: left allmulticast mode [ 200.380690][T13434] bridge_slave_1: left promiscuous mode [ 200.387038][T13434] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.399578][T13434] team0: Port device team_slave_0 removed [ 200.408647][T13434] team0: Port device team_slave_1 removed [ 200.416810][T13434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.424216][ T5874] Bluetooth: hci1: command 0x0401 tx timeout [ 200.424541][T13434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.450986][T13434] bond1: left promiscuous mode [ 200.456750][T13434] bridge0: port 3(bond1) entered disabled state [ 200.518059][T13437] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 200.622578][T13451] nbd1: detected capacity change from 0 to 127 [ 200.630978][T13453] team0: Device veth0_vlan failed to register rx_handler [ 200.665651][ T5874] block nbd1: Receive control failed (result -32) [ 200.895373][T13476] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 200.941590][T13491] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 200.955494][T13491] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 201.016692][T13497] veth7: entered allmulticast mode [ 201.124090][T13505] lo speed is unknown, defaulting to 1000 [ 201.384419][T13528] bridge0: port 1(syz_tun) entered blocking state [ 201.399323][T13528] bridge0: port 1(syz_tun) entered disabled state [ 201.411547][T13528] syz_tun: entered allmulticast mode [ 201.419586][T13528] syz_tun: entered promiscuous mode [ 201.428092][T13528] bridge0: port 1(syz_tun) entered blocking state [ 201.434760][T13528] bridge0: port 1(syz_tun) entered forwarding state [ 202.052197][T13594] syz_tun: entered promiscuous mode [ 202.092033][T13594] syz_tun: entered allmulticast mode [ 202.265103][T13608] validate_nla: 4 callbacks suppressed [ 202.265121][T13608] netlink: 'syz.0.2258': attribute type 58 has an invalid length. [ 202.285193][T13605] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 202.430787][T13611] tipc: Enabled bearer , priority 0 [ 202.460992][T13611] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 202.501639][T13619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.568474][T13611] tipc: Resetting bearer [ 202.597721][T13609] tipc: Disabling bearer [ 202.627072][T13615] veth11: entered allmulticast mode [ 202.770015][T13648] netlink: 'syz.4.2272': attribute type 15 has an invalid length. [ 202.785813][T13648] netlink: 'syz.4.2272': attribute type 1 has an invalid length. [ 202.845899][T13653] __nla_validate_parse: 25 callbacks suppressed [ 202.845922][T13653] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2274'. [ 202.887860][T13659] netlink: 'syz.1.2273': attribute type 1 has an invalid length. [ 202.896128][T13659] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2273'. [ 203.100807][T13673] netlink: 988 bytes leftover after parsing attributes in process `syz.3.2278'. [ 203.136994][T13676] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 203.258659][T13688] vlan2: entered promiscuous mode [ 203.265380][T13688] bridge0: entered promiscuous mode [ 203.273069][T13688] syzkaller0: refused to change device tx_queue_len [ 203.870616][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2292'. [ 203.887688][T13732] syzkaller0: entered promiscuous mode [ 203.894402][T13732] syzkaller0: entered allmulticast mode [ 203.909817][T13730] hsr_slave_1 (unregistering): left promiscuous mode [ 203.918929][T13738] veth0: entered promiscuous mode [ 203.934447][T13738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2294'. [ 204.056969][T13745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2299'. [ 204.075191][T13751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2300'. [ 204.146837][T13763] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2302'. [ 204.158386][T13763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.177166][T13768] tipc: New replicast peer: 255.255.255.255 [ 204.184415][T13768] tipc: Enabled bearer , priority 10 [ 204.191569][T13763] sch_fq: defrate 0 ignored. [ 204.617319][T13786] netlink: 'syz.1.2307': attribute type 1 has an invalid length. [ 204.627248][T13786] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2307'. [ 204.636801][T13786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2307'. [ 204.648573][T13789] tipc: Enabling of bearer rejected, failed to enable media [ 204.755950][T13799] netlink: 'syz.2.2314': attribute type 1 has an invalid length. [ 204.804652][T13799] 8021q: adding VLAN 0 to HW filter on device bond3 [ 204.866530][T13811] netlink: 'syz.3.2318': attribute type 21 has an invalid length. [ 204.886752][T13811] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.896598][T13811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.903899][T13811] IPv6: NLM_F_CREATE should be set when creating new route [ 204.911183][T13811] IPv6: NLM_F_CREATE should be set when creating new route [ 204.918575][T13811] IPv6: NLM_F_CREATE should be set when creating new route [ 205.164495][T13837] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 205.247298][T13849] Bluetooth: MGMT ver 1.23 [ 205.257212][T13848] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 205.270107][T13846] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 205.278511][T13847] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 205.286122][T13846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.302527][T10414] tipc: Node number set to 2224844656 [ 205.392299][T13863] netlink: 'syz.2.2335': attribute type 1 has an invalid length. [ 205.405212][T13856] tipc: Enabled bearer , priority 0 [ 205.418222][T13863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.457997][T13856] syzkaller0: entered promiscuous mode [ 205.465554][T13856] syzkaller0: entered allmulticast mode [ 205.501796][T13856] tipc: Resetting bearer [ 205.523571][T13855] tipc: Resetting bearer [ 205.552189][T13855] tipc: Disabling bearer [ 205.572240][T13875] netlink: 'syz.0.2340': attribute type 1 has an invalid length. [ 205.725392][T13893] veth0_to_bridge: entered promiscuous mode [ 205.749768][T13893] veth0_to_bridge: left promiscuous mode [ 206.120061][T13927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.127477][T13927] IPv6: NLM_F_CREATE should be set when creating new route [ 206.134773][T13927] IPv6: NLM_F_CREATE should be set when creating new route [ 206.142014][T13927] IPv6: NLM_F_CREATE should be set when creating new route [ 206.231900][T13931] openvswitch: netlink: IP tunnel dst address not specified [ 206.243909][T13927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.509756][T13939] syz.3.2360 (13939) used greatest stack depth: 17992 bytes left [ 207.260303][T13995] tipc: Enabled bearer , priority 0 [ 207.344715][T13992] macvtap1: entered promiscuous mode [ 207.355874][T13992] macvtap1: entered allmulticast mode [ 207.362343][T13995] syzkaller0: entered promiscuous mode [ 207.368708][T13995] syzkaller0: entered allmulticast mode [ 207.396742][T13994] tipc: Resetting bearer [ 207.417147][T13994] tipc: Disabling bearer [ 207.440852][T13996] tipc: Enabled bearer , priority 0 [ 207.468369][T13998] syzkaller0: entered promiscuous mode [ 207.483628][T13998] syzkaller0: entered allmulticast mode [ 207.506092][T13996] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 207.561439][T13996] tipc: Resetting bearer [ 207.659313][T14010] tipc: Enabled bearer , priority 0 [ 207.667211][T14010] syzkaller0: entered promiscuous mode [ 207.676233][T14010] syzkaller0: entered allmulticast mode [ 207.733598][T14010] tipc: Resetting bearer [ 207.775804][T14009] tipc: Resetting bearer [ 207.785950][T14009] tipc: Disabling bearer [ 207.881763][T14021] netlink: 'syz.3.2383': attribute type 22 has an invalid length. [ 207.891808][T14021] __nla_validate_parse: 13 callbacks suppressed [ 207.891827][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2383'. [ 207.911787][T14021] netlink: 'syz.3.2383': attribute type 22 has an invalid length. [ 207.921512][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2383'. [ 208.006036][T13986] tipc: Resetting bearer [ 208.017351][T13986] tipc: Disabling bearer [ 208.136578][T14040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2390'. [ 208.233729][T14045] netlink: zone id is out of range [ 208.259577][T14045] netlink: zone id is out of range [ 208.292758][T14045] netlink: zone id is out of range [ 208.308477][T14045] netlink: zone id is out of range [ 208.482521][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2397'. [ 209.039714][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2407'. [ 209.475801][T14138] netlink: 'syz.4.2416': attribute type 1 has an invalid length. [ 209.576191][T14145] netlink: 'syz.1.2419': attribute type 4 has an invalid length. [ 209.607908][T14138] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2416'. [ 209.676122][T14147] 8021q: adding VLAN 0 to HW filter on device bond8 [ 209.711093][T14156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2416'. [ 209.711872][T14147] bond7: (slave bond8): making interface the new active one [ 209.731780][T14147] bond7: (slave bond8): Enslaving as an active interface with an up link [ 209.743042][T14156] netlink: 'syz.4.2416': attribute type 7 has an invalid length. [ 209.752703][T14138] bond7: entered promiscuous mode [ 209.755607][T14156] netlink: 'syz.4.2416': attribute type 8 has an invalid length. [ 209.766197][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2416'. [ 209.776069][T14138] bond8: entered promiscuous mode [ 209.781886][T14138] bond7: entered allmulticast mode [ 209.787663][T14138] bond8: entered allmulticast mode [ 209.794188][T14138] 8021q: adding VLAN 0 to HW filter on device bond7 [ 209.819530][T14158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2421'. [ 209.828807][T14158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2421'. [ 210.204438][T14176] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.225670][T14176] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.350312][T14176] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.361639][T14176] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.435765][T14176] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.457116][T14176] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.528684][T14176] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.542107][T14176] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.618164][T14198] sctp: [Deprecated]: syz.4.2432 (pid 14198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.618164][T14198] Use struct sctp_sack_info instead [ 210.665983][T10837] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.684278][T10837] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.711911][T10837] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.732337][T10837] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.780374][T10835] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.791595][T10835] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.834786][T10835] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.850070][T10835] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.861811][T14218] netlink: 'syz.3.2438': attribute type 1 has an invalid length. [ 210.877318][T14177] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.887335][T14177] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.925040][T14222] netlink: 'syz.3.2438': attribute type 10 has an invalid length. [ 210.930521][T10835] ================================================================== [ 210.941005][T10835] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 210.948687][T10835] Read of size 8 at addr ffff8880327adeb0 by task kworker/u8:33/10835 [ 210.956973][T10835] [ 210.959328][T10835] CPU: 0 UID: 0 PID: 10835 Comm: kworker/u8:33 Not tainted syzkaller #0 PREEMPT(full) [ 210.959353][T10835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.959366][T10835] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 210.959399][T10835] Call Trace: [ 210.959408][T10835] [ 210.959417][T10835] dump_stack_lvl+0x189/0x250 [ 210.959445][T10835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.959465][T10835] ? lock_release+0x4b/0x3e0 [ 210.959493][T10835] ? __virt_addr_valid+0x4a5/0x5c0 [ 210.959517][T10835] print_report+0xca/0x240 [ 210.959534][T10835] ? __mutex_lock+0x147/0x1350 [ 210.959559][T10835] kasan_report+0x118/0x150 [ 210.959584][T10835] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 210.959608][T10835] ? __mutex_lock+0x147/0x1350 [ 210.959636][T10835] __mutex_lock+0x147/0x1350 [ 210.959662][T10835] ? __mutex_lock+0x5bb/0x1350 [ 210.959688][T10835] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 210.959714][T10835] ? __pfx___mutex_lock+0x10/0x10 [ 210.959739][T10835] ? do_raw_spin_unlock+0x122/0x240 [ 210.959762][T10835] ? preempt_schedule_common+0x83/0xd0 [ 210.959785][T10835] ? preempt_schedule+0xae/0xc0 [ 210.959810][T10835] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 210.959836][T10835] ? preempt_schedule_thunk+0x16/0x30 [ 210.959863][T10835] ? process_scheduled_works+0x9ef/0x17b0 [ 210.959880][T10835] ? process_scheduled_works+0x9ef/0x17b0 [ 210.959897][T10835] process_scheduled_works+0xae1/0x17b0 [ 210.959926][T10835] ? __pfx_process_scheduled_works+0x10/0x10 [ 210.959951][T10835] worker_thread+0x8a0/0xda0 [ 210.959982][T10835] kthread+0x70e/0x8a0 [ 210.960005][T10835] ? __pfx_worker_thread+0x10/0x10 [ 210.960022][T10835] ? __pfx_kthread+0x10/0x10 [ 210.960044][T10835] ? rcu_is_watching+0x15/0xb0 [ 210.960061][T10835] ? __pfx_kthread+0x10/0x10 [ 210.960082][T10835] ret_from_fork+0x3f9/0x770 [ 210.960103][T10835] ? __pfx_ret_from_fork+0x10/0x10 [ 210.960124][T10835] ? __switch_to_asm+0x39/0x70 [ 210.960146][T10835] ? __switch_to_asm+0x33/0x70 [ 210.960168][T10835] ? __pfx_kthread+0x10/0x10 [ 210.960189][T10835] ret_from_fork_asm+0x1a/0x30 [ 210.960219][T10835] [ 210.960225][T10835] [ 211.171320][T10835] Allocated by task 14176: [ 211.175759][T10835] kasan_save_track+0x3e/0x80 [ 211.180456][T10835] __kasan_kmalloc+0x93/0xb0 [ 211.185150][T10835] __kmalloc_noprof+0x27a/0x4f0 [ 211.190204][T10835] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 211.196484][T10835] notifier_call_chain+0x1b3/0x3e0 [ 211.201610][T10835] register_netdevice+0x1608/0x1ae0 [ 211.206813][T10835] nsim_create+0xae8/0xf10 [ 211.211491][T10835] __nsim_dev_port_add+0x6b6/0xb10 [ 211.216618][T10835] nsim_dev_port_add_all+0x37/0xf0 [ 211.221731][T10835] nsim_dev_reload_up+0x451/0x780 [ 211.226757][T10835] devlink_reload+0x4e9/0x8d0 [ 211.231438][T10835] devlink_nl_reload_doit+0xb35/0xd50 [ 211.236815][T10835] genl_family_rcv_msg_doit+0x215/0x300 [ 211.242378][T10835] genl_rcv_msg+0x60e/0x790 [ 211.246904][T10835] netlink_rcv_skb+0x208/0x470 [ 211.251673][T10835] genl_rcv+0x28/0x40 [ 211.255656][T10835] netlink_unicast+0x82c/0x9e0 [ 211.260449][T10835] netlink_sendmsg+0x805/0xb30 [ 211.265478][T10835] __sock_sendmsg+0x21c/0x270 [ 211.270246][T10835] ____sys_sendmsg+0x505/0x830 [ 211.275552][T10835] ___sys_sendmsg+0x21f/0x2a0 [ 211.280232][T10835] __x64_sys_sendmsg+0x19b/0x260 [ 211.285607][T10835] do_syscall_64+0xfa/0x3b0 [ 211.290120][T10835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.296449][T10835] [ 211.298858][T10835] Freed by task 14177: [ 211.302931][T10835] kasan_save_track+0x3e/0x80 [ 211.307633][T10835] kasan_save_free_info+0x46/0x50 [ 211.312752][T10835] __kasan_slab_free+0x5b/0x80 [ 211.317616][T10835] kfree+0x18e/0x440 [ 211.321538][T10835] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 211.327794][T10835] notifier_call_chain+0x1b3/0x3e0 [ 211.332951][T10835] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 211.339459][T10835] unregister_netdevice_queue+0x33c/0x380 [ 211.345267][T10835] nsim_destroy+0x1dd/0x670 [ 211.349784][T10835] __nsim_dev_port_del+0x14d/0x1b0 [ 211.355010][T10835] nsim_dev_reload_destroy+0x288/0x490 [ 211.360473][T10835] nsim_dev_reload_down+0x8a/0xc0 [ 211.365502][T10835] devlink_reload+0x1b3/0x8d0 [ 211.370185][T10835] devlink_nl_reload_doit+0xb35/0xd50 [ 211.375905][T10835] genl_family_rcv_msg_doit+0x215/0x300 [ 211.381813][T10835] genl_rcv_msg+0x60e/0x790 [ 211.386492][T10835] netlink_rcv_skb+0x208/0x470 [ 211.391259][T10835] genl_rcv+0x28/0x40 [ 211.395269][T10835] netlink_unicast+0x82c/0x9e0 [ 211.400133][T10835] netlink_sendmsg+0x805/0xb30 [ 211.405282][T10835] __sock_sendmsg+0x21c/0x270 [ 211.409964][T10835] ____sys_sendmsg+0x505/0x830 [ 211.414727][T10835] ___sys_sendmsg+0x21f/0x2a0 [ 211.419403][T10835] __x64_sys_sendmsg+0x19b/0x260 [ 211.424544][T10835] do_syscall_64+0xfa/0x3b0 [ 211.429079][T10835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.435173][T10835] [ 211.437515][T10835] Last potentially related work creation: [ 211.443344][T10835] kasan_save_stack+0x3e/0x60 [ 211.448052][T10835] kasan_record_aux_stack+0xbd/0xd0 [ 211.453312][T10835] insert_work+0x3d/0x330 [ 211.457738][T10835] __queue_work+0xbaf/0xfb0 [ 211.462253][T10835] queue_work_on+0x181/0x270 [ 211.466869][T10835] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 211.472522][T10835] udp_tunnel_push_rx_port+0x180/0x200 [ 211.478085][T10835] geneve_offload_rx_ports+0xd7/0x160 [ 211.483552][T10835] geneve_netdevice_event+0x6a/0x80 [ 211.488944][T10835] notifier_call_chain+0x1b3/0x3e0 [ 211.494255][T10835] call_netdevice_notifiers+0x88/0xc0 [ 211.499813][T10835] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 211.506421][T10835] notifier_call_chain+0x1b3/0x3e0 [ 211.511662][T10835] register_netdevice+0x1608/0x1ae0 [ 211.517197][T10835] nsim_create+0xae8/0xf10 [ 211.521651][T10835] __nsim_dev_port_add+0x6b6/0xb10 [ 211.526908][T10835] nsim_dev_port_add_all+0x37/0xf0 [ 211.532043][T10835] nsim_dev_reload_up+0x451/0x780 [ 211.537077][T10835] devlink_reload+0x4e9/0x8d0 [ 211.541793][T10835] devlink_nl_reload_doit+0xb35/0xd50 [ 211.547173][T10835] genl_family_rcv_msg_doit+0x215/0x300 [ 211.552722][T10835] genl_rcv_msg+0x60e/0x790 [ 211.557225][T10835] netlink_rcv_skb+0x208/0x470 [ 211.562004][T10835] genl_rcv+0x28/0x40 [ 211.566023][T10835] netlink_unicast+0x82c/0x9e0 [ 211.570793][T10835] netlink_sendmsg+0x805/0xb30 [ 211.575578][T10835] __sock_sendmsg+0x21c/0x270 [ 211.580259][T10835] ____sys_sendmsg+0x505/0x830 [ 211.585071][T10835] ___sys_sendmsg+0x21f/0x2a0 [ 211.589751][T10835] __x64_sys_sendmsg+0x19b/0x260 [ 211.594790][T10835] do_syscall_64+0xfa/0x3b0 [ 211.599328][T10835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.605322][T10835] [ 211.607680][T10835] Second to last potentially related work creation: [ 211.614357][T10835] kasan_save_stack+0x3e/0x60 [ 211.619085][T10835] kasan_record_aux_stack+0xbd/0xd0 [ 211.624303][T10835] insert_work+0x3d/0x330 [ 211.628639][T10835] __queue_work+0xcd2/0xfb0 [ 211.633230][T10835] queue_work_on+0x181/0x270 [ 211.637829][T10835] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 211.643468][T10835] udp_tunnel_push_rx_port+0x180/0x200 [ 211.648929][T10835] vxlan_offload_rx_ports+0x139/0x200 [ 211.654309][T10835] vxlan_netdevice_event+0x111/0x470 [ 211.659601][T10835] notifier_call_chain+0x1b3/0x3e0 [ 211.664770][T10835] call_netdevice_notifiers+0x88/0xc0 [ 211.670324][T10835] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 211.676789][T10835] notifier_call_chain+0x1b3/0x3e0 [ 211.681921][T10835] register_netdevice+0x1608/0x1ae0 [ 211.687218][T10835] nsim_create+0xae8/0xf10 [ 211.691702][T10835] __nsim_dev_port_add+0x6b6/0xb10 [ 211.696914][T10835] nsim_dev_port_add_all+0x37/0xf0 [ 211.702114][T10835] nsim_dev_reload_up+0x451/0x780 [ 211.707403][T10835] devlink_reload+0x4e9/0x8d0 [ 211.712086][T10835] devlink_nl_reload_doit+0xb35/0xd50 [ 211.717457][T10835] genl_family_rcv_msg_doit+0x215/0x300 [ 211.723007][T10835] genl_rcv_msg+0x60e/0x790 [ 211.727688][T10835] netlink_rcv_skb+0x208/0x470 [ 211.732562][T10835] genl_rcv+0x28/0x40 [ 211.736612][T10835] netlink_unicast+0x82c/0x9e0 [ 211.741383][T10835] netlink_sendmsg+0x805/0xb30 [ 211.746174][T10835] __sock_sendmsg+0x21c/0x270 [ 211.750977][T10835] ____sys_sendmsg+0x505/0x830 [ 211.755996][T10835] ___sys_sendmsg+0x21f/0x2a0 [ 211.760677][T10835] __x64_sys_sendmsg+0x19b/0x260 [ 211.765628][T10835] do_syscall_64+0xfa/0x3b0 [ 211.770183][T10835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.776101][T10835] [ 211.778424][T10835] The buggy address belongs to the object at ffff8880327ade00 [ 211.778424][T10835] which belongs to the cache kmalloc-256 of size 256 [ 211.793084][T10835] The buggy address is located 176 bytes inside of [ 211.793084][T10835] freed 256-byte region [ffff8880327ade00, ffff8880327adf00) [ 211.806996][T10835] [ 211.809336][T10835] The buggy address belongs to the physical page: [ 211.815837][T10835] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x327ac [ 211.824786][T10835] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 211.833289][T10835] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 211.841186][T10835] page_type: f5(slab) [ 211.845267][T10835] raw: 00fff00000000040 ffff88801a441b40 ffffea00009ad800 dead000000000003 [ 211.853853][T10835] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 211.862453][T10835] head: 00fff00000000040 ffff88801a441b40 ffffea00009ad800 dead000000000003 [ 211.871309][T10835] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 211.880072][T10835] head: 00fff00000000001 ffffea0000c9eb01 00000000ffffffff 00000000ffffffff [ 211.889000][T10835] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 211.897850][T10835] page dumped because: kasan: bad access detected [ 211.904283][T10835] page_owner tracks the page as allocated [ 211.910004][T10835] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10243, tgid 10241 (syz.1.1252), ts 158975508664, free_ts 86263676385 [ 211.931453][T10835] post_alloc_hook+0x240/0x2a0 [ 211.936231][T10835] get_page_from_freelist+0x21e4/0x22c0 [ 211.941780][T10835] __alloc_frozen_pages_noprof+0x181/0x370 [ 211.948374][T10835] alloc_pages_mpol+0x232/0x4a0 [ 211.953236][T10835] allocate_slab+0x8a/0x370 [ 211.957739][T10835] ___slab_alloc+0xbeb/0x1410 [ 211.962543][T10835] __kmalloc_noprof+0x305/0x4f0 [ 211.967657][T10835] iter_file_splice_write+0x1c6/0x10e0 [ 211.973120][T10835] direct_splice_actor+0x101/0x160 [ 211.978415][T10835] splice_direct_to_actor+0x5a5/0xcc0 [ 211.983882][T10835] do_splice_direct+0x181/0x270 [ 211.988751][T10835] do_sendfile+0x4da/0x7e0 [ 211.993252][T10835] __se_sys_sendfile64+0x13e/0x190 [ 211.998632][T10835] do_syscall_64+0xfa/0x3b0 [ 212.003145][T10835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.009052][T10835] page last free pid 7030 tgid 7030 stack trace: [ 212.015541][T10835] __free_frozen_pages+0xbc4/0xd30 [ 212.020669][T10835] __slab_free+0x303/0x3c0 [ 212.025084][T10835] qlist_free_all+0x97/0x140 [ 212.029692][T10835] kasan_quarantine_reduce+0x148/0x160 [ 212.035154][T10835] __kasan_slab_alloc+0x22/0x80 [ 212.040017][T10835] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 212.045585][T10835] vm_area_dup+0x2b/0x680 [ 212.050267][T10835] __split_vma+0x1a9/0xa00 [ 212.054866][T10835] vms_gather_munmap_vmas+0x2ea/0x12f0 [ 212.060519][T10835] mmap_region+0x724/0x20c0 [ 212.065226][T10835] do_mmap+0xc45/0x10d0 [ 212.069404][T10835] vm_mmap_pgoff+0x2a6/0x4d0 [ 212.074018][T10835] ksys_mmap_pgoff+0x51f/0x760 [ 212.078808][T10835] do_syscall_64+0xfa/0x3b0 [ 212.083428][T10835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.089425][T10835] [ 212.091839][T10835] Memory state around the buggy address: [ 212.097477][T10835] ffff8880327add80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 212.106329][T10835] ffff8880327ade00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 212.114756][T10835] >ffff8880327ade80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 212.122912][T10835] ^ [ 212.128563][T10835] ffff8880327adf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 212.136637][T10835] ffff8880327adf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 212.144874][T10835] ================================================================== [ 212.194250][T10835] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 212.201515][T10835] CPU: 0 UID: 0 PID: 10835 Comm: kworker/u8:33 Not tainted syzkaller #0 PREEMPT(full) [ 212.211369][T10835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.221543][T10835] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 212.228881][T10835] Call Trace: [ 212.232186][T10835] [ 212.235154][T10835] dump_stack_lvl+0x99/0x250 [ 212.239785][T10835] ? __asan_memcpy+0x40/0x70 [ 212.244418][T10835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.249647][T10835] ? __pfx__printk+0x10/0x10 [ 212.254278][T10835] vpanic+0x281/0x750 [ 212.258293][T10835] ? preempt_schedule+0xae/0xc0 [ 212.263180][T10835] ? __pfx_vpanic+0x10/0x10 [ 212.267720][T10835] ? preempt_schedule_common+0x83/0xd0 [ 212.273328][T10835] ? preempt_schedule+0xae/0xc0 [ 212.278224][T10835] ? __pfx_preempt_schedule+0x10/0x10 [ 212.283722][T10835] panic+0xb9/0xc0 [ 212.287480][T10835] ? __pfx_panic+0x10/0x10 [ 212.291925][T10835] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 212.297859][T10835] ? __mutex_lock+0x147/0x1350 [ 212.302660][T10835] check_panic_on_warn+0x89/0xb0 [ 212.307725][T10835] ? __mutex_lock+0x147/0x1350 [ 212.312530][T10835] end_report+0x78/0x160 [ 212.316813][T10835] kasan_report+0x129/0x150 [ 212.321356][T10835] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 212.327289][T10835] ? __mutex_lock+0x147/0x1350 [ 212.332103][T10835] __mutex_lock+0x147/0x1350 [ 212.336738][T10835] ? __mutex_lock+0x5bb/0x1350 [ 212.341631][T10835] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 212.348201][T10835] ? __pfx___mutex_lock+0x10/0x10 [ 212.353280][T10835] ? do_raw_spin_unlock+0x122/0x240 [ 212.358636][T10835] ? preempt_schedule_common+0x83/0xd0 [ 212.364234][T10835] ? preempt_schedule+0xae/0xc0 [ 212.369202][T10835] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 212.375336][T10835] ? preempt_schedule_thunk+0x16/0x30 [ 212.380928][T10835] ? process_scheduled_works+0x9ef/0x17b0 [ 212.386676][T10835] ? process_scheduled_works+0x9ef/0x17b0 [ 212.392517][T10835] process_scheduled_works+0xae1/0x17b0 [ 212.398113][T10835] ? __pfx_process_scheduled_works+0x10/0x10 [ 212.404139][T10835] worker_thread+0x8a0/0xda0 [ 212.408948][T10835] kthread+0x70e/0x8a0 [ 212.413062][T10835] ? __pfx_worker_thread+0x10/0x10 [ 212.418209][T10835] ? __pfx_kthread+0x10/0x10 [ 212.422850][T10835] ? rcu_is_watching+0x15/0xb0 [ 212.427663][T10835] ? __pfx_kthread+0x10/0x10 [ 212.432302][T10835] ret_from_fork+0x3f9/0x770 [ 212.437014][T10835] ? __pfx_ret_from_fork+0x10/0x10 [ 212.442157][T10835] ? __switch_to_asm+0x39/0x70 [ 212.446965][T10835] ? __switch_to_asm+0x33/0x70 [ 212.451764][T10835] ? __pfx_kthread+0x10/0x10 [ 212.456558][T10835] ret_from_fork_asm+0x1a/0x30 [ 212.461373][T10835] [ 212.465234][T10835] Kernel Offset: disabled [ 212.469569][T10835] Rebooting in 86400 seconds..