last executing test programs: 4.600982359s ago: executing program 4 (id=2005): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=@setlink={0x38, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_XDP={0x4}]}, 0x38}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x60002, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x11) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_sctp(0xa, 0xae16b16a24952d2a, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b4000000faffdc8d000000000000000002000000000000060000000006001500040000ff8f001680980000018084000300fde83a6d787c1ce4149d9520453bc3272236bd65f3eb2020701dec1fc8d5a3cea8cc55bb6256f0190c94ba260be06bd64d8a69af13b8e37e29f465dcdd014e5de0575c101431f55189a5c07a6fc064fab76e0291a81fdd9554e7e111c7222e5ae762c7219915fcd6aaedaa869cf74c0034b9baa3156a8a262e9aa5e8945edcb35ed31100"/193], 0xb4}, 0x1, 0x0, 0x0, 0x841}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80001, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r3, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.536941691s ago: executing program 1 (id=2006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000100000600000008000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@alu={0x4, 0x0, 0x2, 0x9, 0x7, 0x1, 0x10}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070001000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021680000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000003c0003803800008008000340000000032c20"], 0xec}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x700}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xa, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xb, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000100000600000008000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@alu={0x4, 0x0, 0x2, 0x9, 0x7, 0x1, 0x10}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070001000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021680000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000003c0003803800008008000340000000032c20"], 0xec}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x700}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xa, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xb, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 4.372005595s ago: executing program 4 (id=2008): socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x50}}, 0x0) (async) unshare(0x6a040000) (async) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_FLOW={0x8, 0xb, 0x1f34}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x218, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x20, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) writev(0xffffffffffffffff, &(0x7f0000001300), 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) socket$netlink(0x10, 0x3, 0x0) 3.13050666s ago: executing program 3 (id=2009): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0) 3.053965678s ago: executing program 3 (id=2012): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x67}, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200)={0x5e}, 0x8) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x1c, 0xe, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x7}, {@multicast2, 0x2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 2.972262205s ago: executing program 1 (id=2013): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/130, 0x82}, 0xe}], 0x1, 0x40000000, 0x0) sendto$inet6(r0, &(0x7f0000000280)="8000398d3b160bd2", 0x8, 0x90, &(0x7f0000000000)={0xa, 0x4e20, 0x77ffffff, @loopback, 0x8001}, 0x1c) 2.970886879s ago: executing program 2 (id=2014): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) syz_emit_ethernet(0x17d, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2.970220885s ago: executing program 3 (id=2015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xf}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x2000) 2.641746564s ago: executing program 2 (id=2017): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.520871459s ago: executing program 2 (id=2018): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080)) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="10000000000000001c0012c00b8d49af39e5eea56c0000001000029b050017000000000008000400400200004838baee18dbf8826fad240b3f59f9e8a61047a9b8a5fd6e98637ee28344844bec8b4d35a8ecb2"], 0x44}}, 0x0) 2.34043975s ago: executing program 0 (id=2020): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000200), 0x2, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) (async, rerun: 64) unshare(0x22060600) (async, rerun: 64) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5218) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000002c0)={'ip6gre0\x00', r3, 0x4, 0x6, 0xb, 0x4, 0x26, @empty, @remote, 0x40, 0x80, 0x100, 0x5}}) (async) pipe(&(0x7f0000000400)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200ff9079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000042000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a504a0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r8, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) (async) getsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5400000010cb760425bd116fde30f5700000000000000000006d2290bb5ad387f3661916f9294af60359f7af07105896ae216c031201c8931d1567d0679a66156898b95e4c109c38d5b31d1290b3232f2efc6eee3edb3d40fda2e6e00077192726986da52ce245945f06f27f4f0dc608114cdd9afee50e216c448546306163af9d42c45e4bf5ace4d1505e52ee176a4ec04315322459ac78868a508c6a841ec60debc0d546186d07f1971e529e233d6674b6ab512b8b48844ae456beffcd2d", @ANYRES32=r7, @ANYBLOB="85000100050000002400128009000100766c616e00000000140002800600010004000000060001000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x8000) 2.306048174s ago: executing program 0 (id=2021): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000140)={0x6}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x1, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000980)="c8", 0xff82, 0x1, &(0x7f0000000040)={0xa, 0x4e23, 0xf, @loopback, 0x8}, 0x1c) 2.11347535s ago: executing program 1 (id=2022): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010004b040000000000000000e622fa9c57f15f44637a000000", @ANYRES32=0x0, @ANYBLOB="4018000000000000240012800b00010062726964676500001400028005002a000100000005002b0035000000"], 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x7, @mcast2, 0x1}}, 0x0, 0x4}, 0x90) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x98, r3, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x800}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbe3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1739}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1.410296815s ago: executing program 0 (id=2023): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0040002020800060003", 0x2d}, {&(0x7f0000000080)="cf4f7b4cc9e2fafbf73eaee366d76b1e5edca5509d699dbb9367cb7353d7b5c75ba5cf957ff4bb3c9c0f", 0x2a}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 1.353078904s ago: executing program 0 (id=2024): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="28010000000000000100000001", @ANYRESOCT=r1], 0x128}, 0x40851) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8918, &(0x7f0000000000)={r2}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r6, 0x5}, 0x8) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r6, 0x5}, 0x8) 1.12875869s ago: executing program 2 (id=2025): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003}, 0x94) 1.123284697s ago: executing program 0 (id=2026): readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) recvmsg$unix(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) unshare(0x28000600) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) 1.122233918s ago: executing program 1 (id=2027): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0xf1, 0x1}}]}, 0x34}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="18030000000000200000", @ANYBLOB="0000000000000000b70200001400ffb0b5020000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000040b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000000101010200000000000000000000000706001240000200002000164008d20000000000000000000f0000000503000005000000050000000349397deeaec42cfa335feb51356340894cddfa7edb3f6f4034ed8f5b1de4a8f1541912112b35e9d25c177a01518b7414726d5e95c3016d58887c95912753ada75eeb472f60b1f38e9ded415e289cb4c82495678347afbf9637ae028feb5898f0b4fea7d6fbd0fbf4cc7849ef9967e0fbb57b3293df11da64cb6eb954b13c490faa75a2235690d11397d22bc9ea2a31aea2f16075e8a861e45173a7e20a5dd9c5d5d3e3ef8e7c54"], 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() close(0x4) 1.060253271s ago: executing program 2 (id=2028): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.036826774s ago: executing program 3 (id=2029): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000740)="d4", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000b80)='\a', 0x1}], 0x1}}], 0x2, 0x4000050) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x4}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000000e00), 0x0}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@type_tag={0x6, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000dc0)=""/4096, 0x29, 0x1000, 0x0, 0x9, 0x10000}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={r0, 0x6, 0xeeab, 0x5}) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0xa, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r10, 0x80087601, 0x100000000010001) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000180)=@raw=[@generic={0x3, 0x2, 0x0, 0x4, 0x2}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4b}, @jmp={0x5, 0x0, 0x3, 0x4, 0x0, 0x20, 0xfffffffffffffff0}], &(0x7f00000001c0)='GPL\x00', 0x9, 0xd4, &(0x7f0000000200)=""/212, 0x41000, 0x8, '\x00', r2, 0x1a, r3, 0x8, &(0x7f0000000440)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2c053, r4, 0xa, &(0x7f0000000680)=[r5, r6, r7, r8, r10, 0xffffffffffffffff, 0x1], &(0x7f0000000780)=[{0x0, 0x4, 0xb, 0x3}, {0x4, 0x1, 0x8, 0xc}, {0x0, 0x1, 0xa, 0xb}, {0x1, 0x5, 0x0, 0x6}, {0x5, 0x3, 0x1, 0xc}, {0x2, 0x5, 0x5, 0x5}, {0x1, 0x4, 0x2, 0x5}, {0x5, 0x3, 0x0, 0xc}, {0x4, 0x3, 0xf, 0xa}, {0x1, 0x1, 0x7, 0x2}], 0x10, 0x400}, 0x94) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x1, 0x20}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r11, @in6={{0xa, 0x4e24, 0x80000001, @private1, 0xffffffff}}, 0xffff7fff, 0x5, 0x9, 0x95, 0x20, 0x4, 0x7}, 0x9c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000740)="d4", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000b80)='\a', 0x1}], 0x1}}], 0x2, 0x4000050) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x4}, 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000000e00), 0x0}, 0x20) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@type_tag={0x6, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000dc0)=""/4096, 0x29, 0x1000, 0x0, 0x9, 0x10000}, 0x28) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={r0, 0x6, 0xeeab, 0x5}) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0xa, 0x10}, 0xc) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) recvmsg$unix(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async) ioctl$TUNSETNOCSUM(r10, 0x80087601, 0x100000000010001) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000180)=@raw=[@generic={0x3, 0x2, 0x0, 0x4, 0x2}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4b}, @jmp={0x5, 0x0, 0x3, 0x4, 0x0, 0x20, 0xfffffffffffffff0}], &(0x7f00000001c0)='GPL\x00', 0x9, 0xd4, &(0x7f0000000200)=""/212, 0x41000, 0x8, '\x00', r2, 0x1a, r3, 0x8, &(0x7f0000000440)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2c053, r4, 0xa, &(0x7f0000000680)=[r5, r6, r7, r8, r10, 0xffffffffffffffff, 0x1], &(0x7f0000000780)=[{0x0, 0x4, 0xb, 0x3}, {0x4, 0x1, 0x8, 0xc}, {0x0, 0x1, 0xa, 0xb}, {0x1, 0x5, 0x0, 0x6}, {0x5, 0x3, 0x1, 0xc}, {0x2, 0x5, 0x5, 0x5}, {0x1, 0x4, 0x2, 0x5}, {0x5, 0x3, 0x0, 0xc}, {0x4, 0x3, 0xf, 0xa}, {0x1, 0x1, 0x7, 0x2}], 0x10, 0x400}, 0x94) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x1, 0x20}, &(0x7f0000000080)=0xc) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r11, @in6={{0xa, 0x4e24, 0x80000001, @private1, 0xffffffff}}, 0xffff7fff, 0x5, 0x9, 0x95, 0x20, 0x4, 0x7}, 0x9c) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) (async) 919.350627ms ago: executing program 3 (id=2030): r0 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r0, 0x0) socket$inet6(0xa, 0x3, 0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000001e00), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r7, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000", @ANYRES64], 0x54}}, 0x4004854) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001e40)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETGEN(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf2501000000100007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c0005004fc31bfd000000000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) gettid() gettid() r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10e) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r10, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000002340)=ANY=[@ANYBLOB], 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r12, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r12, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x40000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 864.930525ms ago: executing program 4 (id=2031): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x40}}, 0x0) 864.66212ms ago: executing program 2 (id=2032): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/130, 0x82}, 0xe}], 0x1, 0x40000000, 0x0) sendto$inet6(r0, &(0x7f0000000280)="8000398d3b160bd2", 0x8, 0x90, &(0x7f0000000000)={0xa, 0x4e20, 0x77ffffff, @loopback, 0x8001}, 0x1c) 818.150951ms ago: executing program 1 (id=2033): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60c5e64f6b080000fe000000000000000000000000000012ff02000000000000000000000000000121"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 815.075107ms ago: executing program 4 (id=2034): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000081"], 0x0, 0x3e}, 0x20) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={r1}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0xe365e39d0c265083}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20048080) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41406}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1c8, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x7}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9d3acdf1}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x7fc}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0xfff8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xff}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7ff}, {0x6, 0x16, 0x2609}, {0x5}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40080}, 0x1) 641.77638ms ago: executing program 4 (id=2035): syz_emit_ethernet(0x9f, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa2a810030008848000000000000040067ccadf7005d2101fe8800000000000000000000000000010000000000000000000000000000000084003020640000014e234e60fc63c3562fab4af5"], 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020100030a000000ff0e20000000000005000600000000000a004e2300000002fe8000000000000008000000000000bb400000000000000003004500000028751a50a85e2032f1d5d6b11de1000002000000ac141400000000000000000089075c60724ce309d89aed62bdcd9117cf4dacf84f4315c957791e30cbd0b198e1e42d76363225edd21cd5aaf0df796e3ff72a2e1e2417fe74e35dc18a06e10ea1bfe658ee6c6410616ef73f0729a26155bd511560aeef89a8d99b0e5e8c5ce29a2b2b5451c33e6b8e6da926e40722789d0f539043e98f7d37a3f186d8aac55a6ab426e727fea89c9cf5bf7e16dd7054dc8b74f6ef8453"], 0x50}, 0x1, 0x7}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x39b, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='contention_end\x00', r4, 0x0, 0x5}, 0x18) pipe(&(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x27, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x8005) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x81}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028045}, 0x40) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 392.150921ms ago: executing program 1 (id=2036): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x9, 0xe, 0x2, 0x401}, {0x8, 0x1, 0x64, 0xd13}, {0x0, 0x3, 0xff, 0x5}]}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0xfffffffc}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x0, 0x5}}]}}}]}, 0x60}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ffffffff000000000000000504000000020000000000001202000000020000000000000e030000000000000000002e"], 0x0, 0x54}, 0x28) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg$qrtr(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4008054}, 0x0) 292.514194ms ago: executing program 4 (id=2037): socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x61e0, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(r3, &(0x7f0000000100), 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) close(0x3) ioctl$PPPIOCGUNIT(r6, 0x80047456, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x4000}, 0x18) ppoll(&(0x7f00000010c0)=[{r4, 0x2000}, {r0, 0x400}], 0x2, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r2) 238.938195ms ago: executing program 3 (id=2038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000340)={0x0, 0x0}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000002000000088004e7723c48d70f4988dcd7b2a888921e65480fac84c7e9dd0ce5d0633450f062e5ebbad51e925d8890459aa06a12e4ac6a5e250453d8decb52a160435148e1c8faeee9fe8ce16d709a3645ffee"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04000000040000000a00000000000000", @ANYRES32=r2, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000400"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f0000001880)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="5800000010000304010300"/20, @ANYRES32=0x0, @ANYBLOB="80000500010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100fc0f000008000500", @ANYRES32=r9, @ANYBLOB="08000a000eb6667303cc86ed48210b8ef8c3224f3e71aa2d18dce8e3551dbbbd3a6647a648694df8ba68f098a11bd8a13383e577cd", @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x8000) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x88, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08001fc83300001c00660000001190d364010101e000000100004e200008f4e5f4b07e8af7f0111f61b4a62b695d5535264fd194ea6a1bbb88d752641a3e88dad2c4bd726175be0d63cc320ce3660fd4a7efab5adde61a842d85a174588d2224db4c6810bf1096938baa998c5ef7678b6c6410600bb865615cc9aad8168bd8012a4af1475b2691ec90e7237483"], 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f", 0x1f) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRESOCT=r10, @ANYBLOB="0000000000000000b702000001"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r13 = openat$cgroup_ro(r2, &(0x7f00000003c0)='memory.swap.events\x00', 0x0, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04000000ff00000002000000c304000000000000", @ANYRES32=r4, @ANYBLOB="0100"/20, @ANYRES32=r7, @ANYRES32=r2, @ANYBLOB="0046830005000000030000000000000000000000000000000000000039467bb3236a6f629f8341ee958825bed90184c53f15c6"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1c, 0xa, &(0x7f0000000900)=ANY=[@ANYBLOB="1800005c0200050000000000000008000000182a0000", @ANYRES32=r3, @ANYBLOB="000000000300000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x1000, &(0x7f00000018c0)=""/4096, 0x41000, 0x14, '\x00', 0x0, @fallback=0x2, r2, 0x8, &(0x7f0000000240)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x1, 0xc, 0x9}, 0x10, r11, r2, 0x7, &(0x7f0000000400)=[r13, r4, r3, r14, r1, r3, r4, r1], &(0x7f00000005c0)=[{0x1, 0x4, 0x9, 0x3}, {0x2, 0x5, 0x6, 0x3}, {0x2, 0x2, 0xe, 0x6}, {0x0, 0x4, 0xf, 0x3}, {0x3, 0x3, 0x9, 0x8}, {0x1, 0x4, 0xf, 0xc}, {0x2, 0x1, 0xb}], 0x10, 0x861}, 0x94) 0s ago: executing program 0 (id=2039): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003}, 0x94) kernel console output (not intermixed with test programs): ld impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.434045][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.446420][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.453415][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.479731][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.505802][ T5818] hsr_slave_0: entered promiscuous mode [ 74.512360][ T5818] hsr_slave_1: entered promiscuous mode [ 74.518347][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 74.524178][ T5818] Cannot create hsr debugfs directory [ 74.560927][ T5823] hsr_slave_0: entered promiscuous mode [ 74.567413][ T5823] hsr_slave_1: entered promiscuous mode [ 74.573713][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 74.579430][ T5823] Cannot create hsr debugfs directory [ 74.723428][ T5824] hsr_slave_0: entered promiscuous mode [ 74.729612][ T5824] hsr_slave_1: entered promiscuous mode [ 74.736251][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 74.742005][ T5824] Cannot create hsr debugfs directory [ 74.803886][ T5822] hsr_slave_0: entered promiscuous mode [ 74.810093][ T5822] hsr_slave_1: entered promiscuous mode [ 74.816389][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 74.822122][ T5822] Cannot create hsr debugfs directory [ 75.168369][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.180021][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.201630][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.232397][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.300882][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.311527][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.323359][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.332940][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.464033][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.476176][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.487297][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.505696][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.597399][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.609999][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.623686][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.635227][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.659994][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.686286][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.723497][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.753301][ T973] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.760427][ T973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.786242][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.793373][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.818272][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.844449][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.857251][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.868455][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.890809][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.921523][ T4469] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.928654][ T4469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.938334][ T4469] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.945422][ T4469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.992727][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.041704][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.062350][ T5145] Bluetooth: hci1: command tx timeout [ 76.062448][ T5835] Bluetooth: hci0: command tx timeout [ 76.067747][ T5145] Bluetooth: hci2: command tx timeout [ 76.073260][ T5835] Bluetooth: hci3: command tx timeout [ 76.105760][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.112855][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.121380][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.128506][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.143424][ T5835] Bluetooth: hci4: command tx timeout [ 76.290112][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.368416][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.401079][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.438407][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.445559][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.457643][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.464784][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.540297][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.577571][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.584735][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.616326][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.623475][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.638527][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.715301][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.725502][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.875529][ T5827] veth0_vlan: entered promiscuous mode [ 76.919255][ T5827] veth1_vlan: entered promiscuous mode [ 76.936570][ T5823] veth0_vlan: entered promiscuous mode [ 76.974724][ T5823] veth1_vlan: entered promiscuous mode [ 77.078136][ T5823] veth0_macvtap: entered promiscuous mode [ 77.110872][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.137597][ T5823] veth1_macvtap: entered promiscuous mode [ 77.155423][ T5827] veth0_macvtap: entered promiscuous mode [ 77.177992][ T5827] veth1_macvtap: entered promiscuous mode [ 77.231554][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.250406][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.269255][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.293543][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.304661][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.346660][ T973] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.356116][ T973] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.380866][ T973] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.389738][ T973] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.407059][ T5824] veth0_vlan: entered promiscuous mode [ 77.420942][ T973] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.431335][ T973] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.449861][ T973] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.458648][ T973] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.485561][ T5824] veth1_vlan: entered promiscuous mode [ 77.509347][ T5818] veth0_vlan: entered promiscuous mode [ 77.574541][ T5818] veth1_vlan: entered promiscuous mode [ 77.586009][ T5822] veth0_vlan: entered promiscuous mode [ 77.597186][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.605618][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.630850][ T5822] veth1_vlan: entered promiscuous mode [ 77.644164][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.670978][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.702804][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.712941][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.725425][ T5824] veth0_macvtap: entered promiscuous mode [ 77.733730][ T5818] veth0_macvtap: entered promiscuous mode [ 77.750613][ T5824] veth1_macvtap: entered promiscuous mode [ 77.760298][ T5818] veth1_macvtap: entered promiscuous mode [ 77.766838][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.782141][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.821114][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.824007][ T5822] veth0_macvtap: entered promiscuous mode [ 77.852432][ T5822] veth1_macvtap: entered promiscuous mode [ 77.869387][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.886288][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.932387][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.988633][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.008664][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.132223][ T5945] x_tables: duplicate underflow at hook 1 [ 78.140534][ T5945] x_tables: duplicate underflow at hook 1 [ 78.147071][ T5825] Bluetooth: hci0: command tx timeout [ 78.147099][ T5830] Bluetooth: hci3: command tx timeout [ 78.153009][ T5835] Bluetooth: hci2: command tx timeout [ 78.157938][ T5145] Bluetooth: hci1: command tx timeout [ 78.177584][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.186959][ T5944] lo speed is unknown, defaulting to 1000 [ 78.193760][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.222743][ T5145] Bluetooth: hci4: command tx timeout [ 78.239661][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.254728][ T5944] lo speed is unknown, defaulting to 1000 [ 78.267552][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.277929][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.304403][ T5944] lo speed is unknown, defaulting to 1000 [ 78.320198][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.332274][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.370920][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.380415][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.409767][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.426252][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.451130][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.517648][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.570589][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.583652][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.656566][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.689482][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.691563][ T5944] infiniband syz2: set active [ 78.704396][ T5944] infiniband syz2: added lo [ 78.712922][ T5944] syz2: rxe_create_cq: returned err = -12 [ 78.719906][ T5944] infiniband syz2: Couldn't create ib_mad CQ [ 78.726066][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.734911][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.742630][ T5944] infiniband syz2: Couldn't open port 1 [ 78.744187][ T24] lo speed is unknown, defaulting to 1000 [ 78.761230][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.771855][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.831003][ T5944] RDS/IB: syz2: added [ 78.850485][ T5944] smc: adding ib device syz2 with port count 1 [ 78.862341][ T5944] smc: ib device syz2 port 1 has no pnetid [ 78.873635][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.892787][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.894572][ T24] lo speed is unknown, defaulting to 1000 [ 78.965787][ T5944] lo speed is unknown, defaulting to 1000 [ 78.996677][ T5957] Zero length message leads to an empty skb [ 79.006328][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.032775][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.250108][ T5964] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1'. [ 79.661730][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 79.695474][ T5837] IPVS: starting estimator thread 0... [ 79.736865][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 79.765049][ T5988] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 79.787678][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13'. [ 79.789326][ T5988] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 79.798256][ T5986] IPVS: using max 33 ests per chain, 79200 per kthread [ 79.959236][ T5996] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 80.015376][ T5944] lo speed is unknown, defaulting to 1000 [ 80.223339][ T5145] Bluetooth: hci2: command tx timeout [ 80.223355][ T5835] Bluetooth: hci0: command tx timeout [ 80.223388][ T5835] Bluetooth: hci1: command tx timeout [ 80.228862][ T5830] Bluetooth: hci3: command tx timeout [ 80.304401][ T5830] Bluetooth: hci4: command tx timeout [ 80.736756][ T5944] lo speed is unknown, defaulting to 1000 [ 80.888473][ T6038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.171893][ T5944] lo speed is unknown, defaulting to 1000 [ 81.434497][ T5944] lo speed is unknown, defaulting to 1000 [ 81.505461][ T6047] netlink: 96 bytes leftover after parsing attributes in process `syz.3.30'. [ 81.524783][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 81.536534][ T6047] tipc: Started in network mode [ 81.541543][ T6047] tipc: Node identity ac14140f, cluster identity 4711 [ 81.549815][ T6047] tipc: New replicast peer: 255.255.255.255 [ 81.557465][ T6047] tipc: Enabled bearer , priority 10 [ 81.568099][ T6047] netlink: 'syz.3.30': attribute type 1 has an invalid length. [ 81.581079][ T6047] netlink: 224 bytes leftover after parsing attributes in process `syz.3.30'. [ 82.183392][ T6059] syz.1.33 uses obsolete (PF_INET,SOCK_PACKET) [ 82.233132][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 82.285208][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 82.355495][ T6062] netlink: 572 bytes leftover after parsing attributes in process `syz.3.34'. [ 82.497584][ T6018] infiniband sy: set active [ 82.511205][ T6018] infiniband sy: added bond_slave_0 [ 82.543786][ T6018] sy: rxe_create_cq: returned err = -12 [ 82.549481][ T6018] infiniband sy: Couldn't create ib_mad CQ [ 82.579869][ T6018] infiniband sy: Couldn't open port 1 [ 82.633263][ T6067] warning: `syz.3.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.638600][ T6018] RDS/IB: sy: added [ 82.652054][ T6018] smc: adding ib device sy with port count 1 [ 82.658140][ T6018] smc: ib device sy port 1 has no pnetid [ 82.672827][ T5831] tipc: Node number set to 2886997007 [ 82.681732][ T6071] netlink: 'syz.4.35': attribute type 4 has an invalid length. [ 83.029290][ T6088] netlink: 'syz.3.39': attribute type 13 has an invalid length. [ 83.172613][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.180295][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.273598][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.289009][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.420716][ T4469] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.440189][ T4469] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.459582][ T4469] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.480196][ T4469] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.553242][ T6101] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.576300][ T6101] syzkaller1: entered promiscuous mode [ 83.583145][ T6101] syzkaller1: entered allmulticast mode [ 84.165594][ T6002] infiniband !yz!: set active [ 84.174886][ T6091] lo speed is unknown, defaulting to 1000 [ 84.183863][ T6002] infiniband !yz!: added team_slave_0 [ 84.190445][ T6002] !yz!: rxe_create_cq: returned err = -12 [ 84.207006][ T6002] infiniband !yz!: Couldn't create ib_mad CQ [ 84.227209][ T6002] infiniband !yz!: Couldn't open port 1 [ 84.273052][ T6002] RDS/IB: !yz!: added [ 84.277172][ T6002] smc: adding ib device !yz! with port count 1 [ 84.284998][ T6002] smc: ib device !yz! port 1 has no pnetid [ 84.355271][ T43] cfg80211: failed to load regulatory.db [ 84.724779][ T10] IPVS: starting estimator thread 0... [ 84.743218][ T6123] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 84.813846][ T6121] IPVS: using max 29 ests per chain, 69600 per kthread [ 84.945794][ T6137] __nla_validate_parse: 1 callbacks suppressed [ 84.945809][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 85.163942][ T6150] netlink: 'syz.1.51': attribute type 4 has an invalid length. [ 85.183062][ T43] lo speed is unknown, defaulting to 1000 [ 85.189794][ T43] syz2: Port: 1 Link DOWN [ 85.196048][ T5831] lo speed is unknown, defaulting to 1000 [ 85.519504][ T6153] netlink: 'syz.4.52': attribute type 39 has an invalid length. [ 86.047413][ T6167] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.213198][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 86.475932][ T6190] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.550254][ T6190] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.628119][ T6190] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.713601][ T6190] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.824886][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.858754][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.911082][ T6162] lo speed is unknown, defaulting to 1000 [ 86.912930][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.978705][ T973] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.023587][ T6199] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 87.096255][ T30] audit: type=1800 audit(1763418238.859:2): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.64" name="blkio.bfq.time_recursive" dev="tmpfs" ino=136 res=0 errno=0 [ 87.172599][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 87.199969][ T6207] geneve2: entered promiscuous mode [ 87.223169][ T6207] geneve2: entered allmulticast mode [ 87.235860][ T60] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 49077 - 0 [ 87.251921][ T60] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 49077 - 0 [ 87.260191][ T60] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 49077 - 0 [ 87.319526][ T60] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 49077 - 0 [ 87.374492][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 87.388743][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 87.400003][ T6215] netlink: 'syz.4.68': attribute type 12 has an invalid length. [ 87.423985][ T6215] netlink: 'syz.4.68': attribute type 13 has an invalid length. [ 87.472917][ T6177] lo speed is unknown, defaulting to 1000 [ 87.637303][ T6229] netlink: 200 bytes leftover after parsing attributes in process `syz.0.72'. [ 87.654008][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 87.844103][ T6236] netlink: 244 bytes leftover after parsing attributes in process `syz.3.75'. [ 88.701059][ T6266] netlink: 84 bytes leftover after parsing attributes in process `syz.2.82'. [ 88.813194][ T6267] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 89.311720][ T6291] Bluetooth: MGMT ver 1.23 [ 89.470430][ T6286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.582112][ T5830] Bluetooth: hci4: command tx timeout [ 89.628458][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 89.720384][ T6304] netlink: 'syz.2.84': attribute type 4 has an invalid length. [ 90.355460][ T6337] __nla_validate_parse: 1 callbacks suppressed [ 90.355476][ T6337] netlink: 76 bytes leftover after parsing attributes in process `syz.0.94'. [ 90.399665][ T6339] netlink: 'syz.3.95': attribute type 3 has an invalid length. [ 90.525423][ T6350] FAULT_INJECTION: forcing a failure. [ 90.525423][ T6350] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.547826][ T6350] CPU: 0 UID: 0 PID: 6350 Comm: syz.0.94 Not tainted syzkaller #0 PREEMPT(full) [ 90.547843][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.547856][ T6350] Call Trace: [ 90.547861][ T6350] [ 90.547868][ T6350] dump_stack_lvl+0x189/0x250 [ 90.547896][ T6350] ? __pfx____ratelimit+0x10/0x10 [ 90.547918][ T6350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.547935][ T6350] ? __pfx__printk+0x10/0x10 [ 90.547950][ T6350] ? __might_fault+0xb0/0x130 [ 90.547979][ T6350] should_fail_ex+0x414/0x560 [ 90.548004][ T6350] _copy_from_user+0x2d/0xb0 [ 90.548022][ T6350] ___sys_sendmsg+0x158/0x2a0 [ 90.548040][ T6350] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.548088][ T6350] ? __fget_files+0x2a/0x420 [ 90.548102][ T6350] ? __fget_files+0x3a0/0x420 [ 90.548126][ T6350] __sys_sendmmsg+0x227/0x430 [ 90.548149][ T6350] ? __pfx___sys_sendmmsg+0x10/0x10 [ 90.548178][ T6350] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 90.548215][ T6350] ? ksys_write+0x22a/0x250 [ 90.548239][ T6350] ? __pfx_ksys_write+0x10/0x10 [ 90.548267][ T6350] __x64_sys_sendmmsg+0xa0/0xc0 [ 90.548290][ T6350] do_syscall_64+0xfa/0xfa0 [ 90.548306][ T6350] ? lockdep_hardirqs_on+0x9c/0x150 [ 90.548323][ T6350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.548341][ T6350] ? clear_bhb_loop+0x60/0xb0 [ 90.548363][ T6350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.548379][ T6350] RIP: 0033:0x7fdd4eb8f6c9 [ 90.548405][ T6350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.548419][ T6350] RSP: 002b:00007fdd4cdd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 90.548438][ T6350] RAX: ffffffffffffffda RBX: 00007fdd4ede6180 RCX: 00007fdd4eb8f6c9 [ 90.548451][ T6350] RDX: 0000000000000027 RSI: 00002000000017c0 RDI: 0000000000000006 [ 90.548462][ T6350] RBP: 00007fdd4cdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 90.548473][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.548483][ T6350] R13: 00007fdd4ede6218 R14: 00007fdd4ede6180 R15: 00007ffe0c52faf8 [ 90.548511][ T6350] [ 91.034371][ T6357] nbd: must specify at least one socket [ 91.124112][ T6368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.101'. [ 91.133727][ T6366] netlink: 60 bytes leftover after parsing attributes in process `syz.2.100'. [ 91.155832][ T6368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.101'. [ 91.177145][ T6366] unsupported nlmsg_type 40 [ 91.183424][ T6369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.101'. [ 91.193145][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 92.109690][ T6395] pimreg3: entered allmulticast mode [ 92.342527][ T6412] netlink: 124 bytes leftover after parsing attributes in process `syz.0.109'. [ 92.479965][ T6418] netlink: 165 bytes leftover after parsing attributes in process `syz.4.111'. [ 92.505205][ T6417] netlink: 'syz.3.110': attribute type 1 has an invalid length. [ 93.273025][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'. [ 93.532819][ T6458] netlink: 64 bytes leftover after parsing attributes in process `syz.1.121'. [ 93.864380][ T6469] : renamed from wg2 (while UP) [ 93.882161][ T6473] netlink: 'syz.4.120': attribute type 5 has an invalid length. [ 93.908376][ T6473] block nbd0: not configured, cannot reconfigure [ 93.945669][ T6469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.990967][ T6527] syzkaller1: entered promiscuous mode [ 95.021958][ T6527] syzkaller1: entered allmulticast mode [ 95.430801][ T6507] pim6reg99999999: entered allmulticast mode [ 95.552981][ T6556] netlink: 'syz.2.135': attribute type 13 has an invalid length. [ 95.560736][ T6556] netlink: 'syz.2.135': attribute type 17 has an invalid length. [ 95.730553][ T6556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.800941][ T6566] __nla_validate_parse: 6 callbacks suppressed [ 95.800954][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.140'. [ 95.966377][ T6548] lo speed is unknown, defaulting to 1000 [ 96.025793][ T6578] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 96.374722][ T981] IPVS: starting estimator thread 0... [ 96.387016][ T6591] netlink: 'syz.1.144': attribute type 1 has an invalid length. [ 96.472266][ T6593] IPVS: using max 28 ests per chain, 67200 per kthread [ 96.660041][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'. [ 96.799112][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 96.844282][ T6608] netlink: 'syz.0.148': attribute type 5 has an invalid length. [ 96.917114][ T6610] netlink: 'syz.4.149': attribute type 4 has an invalid length. [ 96.928881][ T6608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.148'. [ 96.955605][ T6610] netlink: 64 bytes leftover after parsing attributes in process `syz.4.149'. [ 96.982193][ T6610] block nbd0: not configured, cannot reconfigure [ 97.196326][ T6623] netlink: 'syz.4.153': attribute type 1 has an invalid length. [ 97.405524][ T6626] netlink: 76 bytes leftover after parsing attributes in process `syz.3.154'. [ 97.857632][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.156'. [ 97.889487][ T6640] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.897697][ T6640] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.016979][ T6636] netlink: 96 bytes leftover after parsing attributes in process `syz.1.156'. [ 98.161489][ T6650] ieee802154 phy1 wpan1: encryption failed: -22 [ 98.170644][ T6648] wg1: entered promiscuous mode [ 98.198126][ T6648] wg1: entered allmulticast mode [ 98.215971][ T6652] netlink: 'syz.3.161': attribute type 8 has an invalid length. [ 98.317454][ T6656] netlink: 'syz.4.163': attribute type 4 has an invalid length. [ 98.339222][ T6656] netlink: 64 bytes leftover after parsing attributes in process `syz.4.163'. [ 98.360619][ T6656] block nbd0: not configured, cannot reconfigure [ 98.363398][ T6652] lo speed is unknown, defaulting to 1000 [ 98.714349][ T6658] netlink: 'syz.3.161': attribute type 15 has an invalid length. [ 98.857585][ T6672] netlink: 'syz.2.166': attribute type 28 has an invalid length. [ 98.911480][ T6672] netlink: 'syz.2.166': attribute type 3 has an invalid length. [ 98.948230][ T6672] netlink: 132 bytes leftover after parsing attributes in process `syz.2.166'. [ 99.227306][ T6663] lo speed is unknown, defaulting to 1000 [ 99.232344][ T6680] xt_ecn: cannot match TCP bits for non-tcp packets [ 99.490911][ T6661] lo speed is unknown, defaulting to 1000 [ 99.847634][ T6703] netlink: 'syz.2.175': attribute type 4 has an invalid length. [ 99.858081][ T6703] block nbd0: not configured, cannot reconfigure [ 100.751592][ T6683] smc: removing ib device !yz! [ 101.314594][ T6715] tipc: Started in network mode [ 101.325979][ T6715] tipc: Node identity 3a3700fabb01, cluster identity 4711 [ 101.335835][ T6715] tipc: Enabled bearer , priority 0 [ 101.986157][ T6715] tipc: Disabling bearer [ 102.090846][ T6719] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20000 [ 102.323823][ T6726] syzkaller1: entered promiscuous mode [ 102.329407][ T6726] syzkaller1: entered allmulticast mode [ 102.881257][ T6737] netlink: 'syz.2.186': attribute type 4 has an invalid length. [ 102.892737][ T6737] __nla_validate_parse: 5 callbacks suppressed [ 102.892750][ T6737] netlink: 64 bytes leftover after parsing attributes in process `syz.2.186'. [ 102.909147][ T6737] block nbd0: not configured, cannot reconfigure [ 102.998825][ T6739] netlink: 'syz.2.187': attribute type 15 has an invalid length. [ 103.006965][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'. [ 103.030562][ T6739] netlink: 'syz.2.187': attribute type 15 has an invalid length. [ 103.030565][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 103.047527][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'. [ 103.065986][ T50] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 103.091844][ T50] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 103.100952][ T50] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 103.911723][ T6760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.194'. [ 104.146959][ T6765] vlan2: entered promiscuous mode [ 104.153654][ T6765] macvtap0: entered promiscuous mode [ 104.253629][ T6767] netlink: 'syz.0.197': attribute type 4 has an invalid length. [ 104.277340][ T6767] netlink: 64 bytes leftover after parsing attributes in process `syz.0.197'. [ 104.303063][ T6767] block nbd0: not configured, cannot reconfigure [ 104.334113][ T6769] xt_TCPMSS: Only works on TCP SYN packets [ 104.506109][ T6777] netlink: 'syz.0.200': attribute type 21 has an invalid length. [ 104.552524][ T6771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.564802][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 104.578604][ T6783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.202'. [ 104.768139][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.204'. [ 104.851353][ T6802] netlink: 224 bytes leftover after parsing attributes in process `syz.2.207'. [ 104.873956][ T6792] netlink: 31 bytes leftover after parsing attributes in process `syz.0.205'. [ 104.910780][ T6795] bridge_slave_1: left allmulticast mode [ 104.916939][ T6795] bridge_slave_1: left promiscuous mode [ 104.923612][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.939503][ T6795] bridge_slave_0: left allmulticast mode [ 104.945396][ T6795] bridge_slave_0: left promiscuous mode [ 104.951138][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.970570][ T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xc9 [ 105.136142][ T6797] lo speed is unknown, defaulting to 1000 [ 105.179092][ T6820] netlink: 'syz.1.209': attribute type 4 has an invalid length. [ 105.191215][ T6814] netlink: 'syz.1.209': attribute type 12 has an invalid length. [ 106.035188][ T6837] netlink: 'syz.3.216': attribute type 1 has an invalid length. [ 106.212187][ T6849] tipc: Started in network mode [ 106.217200][ T6849] tipc: Node identity ea5de19fea12, cluster identity 4711 [ 106.233673][ T6849] tipc: Enabled bearer , priority 0 [ 106.276283][ T6849] syzkaller0: entered promiscuous mode [ 106.281763][ T6849] syzkaller0: entered allmulticast mode [ 106.370231][ T6849] tipc: Resetting bearer [ 106.390148][ T6849] tipc: Disabling bearer [ 106.404976][ T6851] lo speed is unknown, defaulting to 1000 [ 106.417023][ T6858] syzkaller1: entered promiscuous mode [ 106.424030][ T6858] syzkaller1: entered allmulticast mode [ 106.530398][ T6862] netlink: 'syz.1.222': attribute type 6 has an invalid length. [ 106.555527][ T6862] block nbd0: not configured, cannot reconfigure [ 106.996905][ T6869] geneve2: entered promiscuous mode [ 107.370303][ T6890] netlink: 'syz.4.229': attribute type 1 has an invalid length. [ 107.527438][ T6890] bond2: entered promiscuous mode [ 107.532680][ T6890] bond2: entered allmulticast mode [ 107.541032][ T6890] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.013312][ T6911] netlink: 'syz.1.233': attribute type 6 has an invalid length. [ 108.041848][ T6911] __nla_validate_parse: 7 callbacks suppressed [ 108.041862][ T6911] netlink: 64 bytes leftover after parsing attributes in process `syz.1.233'. [ 108.081856][ T6911] block nbd0: not configured, cannot reconfigure [ 108.364267][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.236'. [ 108.417955][ T6922] lo speed is unknown, defaulting to 1000 [ 108.679317][ T6933] sctp: [Deprecated]: syz.2.237 (pid 6933) Use of int in max_burst socket option. [ 108.679317][ T6933] Use struct sctp_assoc_value instead [ 108.760021][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 108.847709][ T6938] xt_hashlimit: size too large, truncated to 1048576 [ 108.969526][ T6935] veth3: entered promiscuous mode [ 109.325784][ T6953] raw_sendmsg: syz.3.241 forgot to set AF_INET. Fix it! [ 109.365117][ T6949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.241'. [ 109.723855][ T6967] netlink: 'syz.0.245': attribute type 6 has an invalid length. [ 109.731959][ T6967] netlink: 64 bytes leftover after parsing attributes in process `syz.0.245'. [ 109.744815][ T6967] block nbd0: not configured, cannot reconfigure [ 109.751128][ T6971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.785111][ T6973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.246'. [ 109.794084][ T6973] netlink: 'syz.3.246': attribute type 7 has an invalid length. [ 109.801712][ T6973] netlink: 'syz.3.246': attribute type 8 has an invalid length. [ 109.809608][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 109.825924][ T6972] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 109.961325][ T6977] netlink: 76 bytes leftover after parsing attributes in process `syz.0.249'. [ 110.043752][ T6978] syz_tun: entered promiscuous mode [ 110.062422][ T6978] macvtap1: entered promiscuous mode [ 110.078178][ T6978] macvtap1: entered allmulticast mode [ 110.093892][ T6978] syz_tun: entered allmulticast mode [ 110.108742][ T6978] syz_tun: left allmulticast mode [ 110.132135][ T6978] syz_tun: left promiscuous mode [ 110.153497][ T6996] netlink: 'syz.1.254': attribute type 5 has an invalid length. [ 110.168544][ T6985] netlink: 100 bytes leftover after parsing attributes in process `syz.3.252'. [ 110.177982][ T6985] netlink: 100 bytes leftover after parsing attributes in process `syz.3.252'. [ 110.382230][ T43] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 110.545233][ T7006] lo speed is unknown, defaulting to 1000 [ 111.182072][ T1209] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 111.229701][ T7035] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 112.057085][ T7055] bridge0: entered promiscuous mode [ 112.066887][ T7055] bridge0: port 3(macvtap1) entered blocking state [ 112.093988][ T7055] bridge0: port 3(macvtap1) entered disabled state [ 112.118475][ T7055] macvtap1: entered allmulticast mode [ 112.143040][ T7055] bridge0: entered allmulticast mode [ 112.181864][ T7055] macvtap1: left allmulticast mode [ 112.192337][ T7055] bridge0: left allmulticast mode [ 112.232359][ T7055] bridge0: left promiscuous mode [ 112.267486][ T7058] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 112.319386][ T7063] team0: Device gtp0 is of different type [ 112.855843][ T7093] No such timeout policy "syz0" [ 112.940379][ T7098] netlink: 'syz.1.282': attribute type 11 has an invalid length. [ 112.947814][ T7093] syzkaller0: entered promiscuous mode [ 112.955414][ T7093] syzkaller0: entered allmulticast mode [ 112.985957][ T7098] vlan2: entered promiscuous mode [ 112.990999][ T7098] geneve1: entered promiscuous mode [ 113.042747][ T7098] vlan2: entered allmulticast mode [ 113.047884][ T7098] geneve1: entered allmulticast mode [ 113.097494][ T7098] __nla_validate_parse: 6 callbacks suppressed [ 113.097508][ T7098] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.282'. [ 113.249599][ T7113] lo speed is unknown, defaulting to 1000 [ 113.594551][ T7127] netlink: 27 bytes leftover after parsing attributes in process `syz.1.288'. [ 113.738653][ T7124] lo speed is unknown, defaulting to 1000 [ 113.984040][ T7118] syz.2.285 (7118) used greatest stack depth: 17832 bytes left [ 114.021197][ T7126] lo speed is unknown, defaulting to 1000 [ 114.633824][ T7130] lo speed is unknown, defaulting to 1000 [ 114.640032][ T7148] bridge_slave_0: invalid flags given to default FDB implementation [ 114.771080][ T30] audit: type=1804 audit(1763418266.529:3): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.296" name="/newroot/51/cgroup.controllers" dev="tmpfs" ino=275 res=1 errno=0 [ 114.812822][ T30] audit: type=1800 audit(1763418266.559:4): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.296" name="cgroup.controllers" dev="tmpfs" ino=275 res=0 errno=0 [ 114.841842][ T30] audit: type=1800 audit(1763418266.559:5): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.296" name="cgroup.controllers" dev="tmpfs" ino=275 res=0 errno=0 [ 116.129349][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.300'. [ 116.152138][ T7166] syzkaller0: entered promiscuous mode [ 116.157615][ T7166] syzkaller0: entered allmulticast mode [ 116.859153][ T7189] netlink: 132 bytes leftover after parsing attributes in process `syz.2.305'. [ 117.211724][ T7194] vlan2: entered promiscuous mode [ 117.227518][ T7194] vlan2: entered allmulticast mode [ 117.233192][ T7194] hsr_slave_1: entered allmulticast mode [ 117.536409][ T7202] lo speed is unknown, defaulting to 1000 [ 117.809899][ T7214] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 117.824675][ T7214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.979033][ T7216] netlink: 64 bytes leftover after parsing attributes in process `syz.0.312'. [ 118.036596][ T7219] Driver unsupported XDP return value 0 on prog (id 126) dev N/A, expect packet loss! [ 118.187844][ T7223] netlink: 'syz.3.314': attribute type 3 has an invalid length. [ 118.209549][ T7223] syz_tun: entered allmulticast mode [ 118.398816][ T7230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.315'. [ 118.413497][ T7224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.424510][ T7224] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.437092][ T7224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.839877][ T7223] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 118.870551][ T7223] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 119.021145][ T7222] syz_tun: left allmulticast mode [ 119.121180][ T7245] netlink: 'syz.3.321': attribute type 4 has an invalid length. [ 119.129400][ T7245] netlink: 152 bytes leftover after parsing attributes in process `syz.3.321'. [ 119.151119][ T7245] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 119.179342][ T7245] Bluetooth: MGMT ver 1.23 [ 119.484638][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 119.635828][ T7263] batadv_slave_1: entered promiscuous mode [ 119.675624][ T7262] batadv_slave_1: left promiscuous mode [ 119.812436][ T7267] tipc: Enabling of bearer rejected, failed to enable media [ 120.465293][ T5830] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 120.495041][ T7293] netlink: 47 bytes leftover after parsing attributes in process `syz.2.333'. [ 120.779920][ T7301] netlink: 'syz.2.335': attribute type 21 has an invalid length. [ 120.796409][ T7301] netlink: 128 bytes leftover after parsing attributes in process `syz.2.335'. [ 120.812189][ T7301] netlink: 'syz.2.335': attribute type 4 has an invalid length. [ 120.820396][ T7301] netlink: 'syz.2.335': attribute type 5 has an invalid length. [ 120.839870][ T7301] netlink: 3 bytes leftover after parsing attributes in process `syz.2.335'. [ 120.842712][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'. [ 121.112361][ T7315] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 121.154685][ T7315] netlink: 248 bytes leftover after parsing attributes in process `syz.1.339'. [ 121.181585][ T7319] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 121.203802][ T7318] tipc: Started in network mode [ 121.218989][ T7318] tipc: Node identity 421dfdb261c2, cluster identity 4711 [ 121.236067][ T7318] tipc: Enabled bearer , priority 0 [ 121.261222][ T7320] syzkaller0: entered promiscuous mode [ 121.278570][ T7320] syzkaller0: entered allmulticast mode [ 121.396387][ T7328] lo speed is unknown, defaulting to 1000 [ 121.444041][ T7318] tipc: Resetting bearer [ 121.497579][ T7337] sock: sock_timestamping_bind_phc: sock not bind to device [ 121.590192][ T7318] tipc: Disabling bearer [ 121.883929][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 122.165213][ T7362] sctp: [Deprecated]: syz.2.353 (pid 7362) Use of int in max_burst socket option deprecated. [ 122.165213][ T7362] Use struct sctp_assoc_value instead [ 122.372507][ T7370] tipc: Enabled bearer , priority 0 [ 122.389345][ T7370] syzkaller0: entered promiscuous mode [ 122.398319][ T7370] syzkaller0: entered allmulticast mode [ 122.496692][ T7370] pimreg: entered allmulticast mode [ 122.509971][ T7370] pimreg: left allmulticast mode [ 122.587122][ T7376] netlink: 'syz.4.356': attribute type 83 has an invalid length. [ 122.612912][ T7376] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 122.682217][ T7370] tipc: Resetting bearer [ 122.739229][ T7370] tipc: Disabling bearer [ 122.749879][ T7379] netlink: 5 bytes leftover after parsing attributes in process `syz.4.357'. [ 122.765269][ T7379] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 122.854317][ T7383] netlink: 'syz.1.358': attribute type 11 has an invalid length. [ 123.003195][ T7386] IPVS: set_ctl: invalid protocol: 50 172.20.20.23:20003 [ 123.636890][ T7397] lo speed is unknown, defaulting to 1000 [ 124.144371][ T7405] lo speed is unknown, defaulting to 1000 [ 124.204805][ T7431] __nla_validate_parse: 4 callbacks suppressed [ 124.204820][ T7431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.371'. [ 124.404626][ T7442] bond0: entered promiscuous mode [ 124.409887][ T7442] bond_slave_0: entered promiscuous mode [ 124.417219][ T7442] bond_slave_1: entered promiscuous mode [ 124.428803][ T7442] batadv0: entered promiscuous mode [ 124.435682][ T7442] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 124.446583][ T7442] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 124.458998][ T7444] IPVS: nq: FWM 3 0x00000003 - no destination available [ 124.482036][ T7443] netlink: 'syz.2.374': attribute type 12 has an invalid length. [ 124.604525][ T7435] lo speed is unknown, defaulting to 1000 [ 124.638210][ T7448] netlink: 40 bytes leftover after parsing attributes in process `syz.3.376'. [ 124.682398][ T7450] netlink: 76 bytes leftover after parsing attributes in process `syz.2.377'. [ 125.007968][ T7437] netlink: 32 bytes leftover after parsing attributes in process `syz.0.373'. [ 125.017562][ T7454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.018107][ T7454] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 125.090674][ T7463] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 125.219517][ T7469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.400414][ T7475] netlink: 'syz.3.383': attribute type 2 has an invalid length. [ 125.418710][ T7475] netlink: 'syz.3.383': attribute type 2 has an invalid length. [ 125.471964][ T7475] netlink: 'syz.3.383': attribute type 2 has an invalid length. [ 125.492518][ T7475] netlink: 'syz.3.383': attribute type 2 has an invalid length. [ 125.531613][ T7475] netlink: 'syz.3.383': attribute type 2 has an invalid length. [ 125.542091][ T7475] netlink: 'syz.3.383': attribute type 2 has an invalid length. [ 125.549968][ T7475] netlink: 'syz.3.383': attribute type 2 has an invalid length. [ 125.558943][ T7475] netlink: 'syz.3.383': attribute type 2 has an invalid length. [ 125.567586][ T7475] netlink: 'syz.3.383': attribute type 2 has an invalid length. [ 125.589128][ T7480] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 125.611328][ T7480] bond2 (unregistering): Released all slaves [ 125.720958][ T7455] lo speed is unknown, defaulting to 1000 [ 125.952599][ T7501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.388'. [ 126.200036][ T7511] netlink: 68 bytes leftover after parsing attributes in process `syz.3.390'. [ 126.344414][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 126.628525][ T7514] hsr_slave_0: left promiscuous mode [ 126.653102][ T7514] hsr_slave_1: left promiscuous mode [ 126.790467][ T7521] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 126.884284][ T7520] lo speed is unknown, defaulting to 1000 [ 127.106776][ T7526] netlink: 48 bytes leftover after parsing attributes in process `syz.3.393'. [ 127.548631][ T7526] lo speed is unknown, defaulting to 1000 [ 128.185751][ T7533] bond3: entered promiscuous mode [ 128.206724][ T7533] bond3: entered allmulticast mode [ 128.225307][ T7533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.392121][ T7536] vlan2: entered promiscuous mode [ 128.397182][ T7536] macvtap0: entered promiscuous mode [ 129.518905][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.544252][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.870414][ T50] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.878942][ T50] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 49077 - 0 [ 129.897880][ T50] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.916156][ T50] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 49077 - 0 [ 129.963112][ T50] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.971572][ T50] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 49077 - 0 [ 129.984383][ T50] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.998736][ T50] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 49077 - 0 [ 130.046967][ T7563] netlink: 48 bytes leftover after parsing attributes in process `syz.1.400'. [ 130.180265][ T7565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.245688][ T7565] bond0: (slave rose0): Enslaving as an active interface with an up link [ 131.829312][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.408'. [ 132.034810][ T7623] bond1: option ad_select: invalid value (232) [ 132.045201][ T7623] bond1 (unregistering): Released all slaves [ 132.484419][ T7613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.708453][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.728500][ T7672] xt_hashlimit: size too large, truncated to 1048576 [ 132.764841][ T7669] tipc: Failed to remove unknown binding: 66,1,1/2886997007:276276849/276276851 [ 132.803523][ T7669] tipc: Failed to remove unknown binding: 66,1,1/2886997007:276276849/276276851 [ 132.848611][ T7669] tipc: Failed to remove unknown binding: 66,1,1/2886997007:276276849/276276851 [ 132.887007][ T7678] validate_nla: 26 callbacks suppressed [ 132.887028][ T7678] netlink: 'syz.4.423': attribute type 27 has an invalid length. [ 132.977386][ T7678] geneve2: left promiscuous mode [ 132.994016][ T7678] geneve2: left allmulticast mode [ 133.010144][ T7678] bond2: left promiscuous mode [ 133.016049][ T7678] bond2: left allmulticast mode [ 133.051508][ T7678] bond3: left promiscuous mode [ 133.069082][ T7678] bond3: left allmulticast mode [ 133.074723][ T7678] vlan2: left promiscuous mode [ 133.083393][ T7678] macvtap0: left promiscuous mode [ 133.140466][ T7681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.174891][ T7681] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.188464][ T7681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.314346][ T7703] syzkaller0: create flow: hash 1818308346 index 1 [ 133.354871][ T7705] xt_hashlimit: overflow, rate too high: 0 [ 133.370371][ T50] syzkaller0: tun_net_xmit 76 [ 133.380285][ T50] syzkaller0: tun_net_xmit 48 [ 133.392976][ T24] syzkaller0: tun_net_xmit 76 [ 133.472015][ T1209] syzkaller0: tun_net_xmit 76 [ 133.480053][ T7699] syzkaller0: delete flow: hash 1818308346 index 1 [ 134.104463][ T7722] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 134.113188][ T7723] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 134.663400][ T7712] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.695364][ T7722] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 134.696711][ T7723] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 134.837368][ T7712] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.877651][ T7733] netlink: 'syz.0.434': attribute type 1 has an invalid length. [ 134.885438][ T7728] lo speed is unknown, defaulting to 1000 [ 134.990274][ T7712] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.116343][ T7745] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.128085][ T7741] syzkaller0: entered allmulticast mode [ 135.152029][ T7745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.438'. [ 136.265067][ T7712] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.282952][ T7747] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 136.402906][ T7761] netlink: 80 bytes leftover after parsing attributes in process `syz.0.441'. [ 136.454441][ T60] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.464154][ T60] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.484498][ T7762] netlink: 80 bytes leftover after parsing attributes in process `syz.0.441'. [ 136.524196][ T60] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.565877][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.936536][ T7783] IPv6: addrconf: prefix option has invalid lifetime [ 136.961455][ T7783] netlink: 52 bytes leftover after parsing attributes in process `syz.1.448'. [ 137.350576][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 137.360246][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 138.013993][ T7801] netlink: 'syz.4.453': attribute type 21 has an invalid length. [ 138.034160][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 138.061668][ T7801] netlink: 156 bytes leftover after parsing attributes in process `syz.4.453'. [ 138.077664][ T7803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.453'. [ 138.249565][ T7803] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 138.285010][ T7815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.457'. [ 138.309973][ T7803] erspan1: entered allmulticast mode [ 138.352636][ T7815] bond0: ARP target 170.170.170.170 is already present [ 138.359515][ T7815] bond0: option arp_ip_target: invalid value (2863311530) [ 138.462359][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 138.867476][ T7834] syzkaller0: entered promiscuous mode [ 138.942017][ T7834] syzkaller0: entered allmulticast mode [ 139.585430][ T7855] ip6tnl2: entered promiscuous mode [ 139.590727][ T7855] ip6tnl2: entered allmulticast mode [ 139.601946][ T7855] team0: Device ip6tnl2 is of different type [ 139.626371][ T7866] syz_tun: entered allmulticast mode [ 139.832668][ T7874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.846644][ T7874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.891722][ T1331] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.900460][ T1331] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.924568][ T1331] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.957325][ T1331] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.649239][ T7934] sctp: [Deprecated]: syz.3.487 (pid 7934) Use of int in max_burst socket option. [ 141.649239][ T7934] Use struct sctp_assoc_value instead [ 141.672436][ T7935] lo speed is unknown, defaulting to 1000 [ 142.048679][ T7953] __nla_validate_parse: 4 callbacks suppressed [ 142.048695][ T7953] netlink: 32 bytes leftover after parsing attributes in process `syz.1.492'. [ 142.189011][ T7964] netlink: 'syz.1.494': attribute type 10 has an invalid length. [ 142.219219][ T7964] team0: Failed to send options change via netlink (err -105) [ 142.227466][ T7964] team0: Port device dummy0 added [ 142.767530][ T7978] lo speed is unknown, defaulting to 1000 [ 143.410632][ T7990] netlink: 'syz.1.502': attribute type 1 has an invalid length. [ 143.430428][ T7990] netlink: 'syz.1.502': attribute type 1 has an invalid length. [ 143.513917][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'. [ 143.675058][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 143.809646][ T7999] bond2: option broadcast_neighbor: invalid value (5) [ 143.818409][ T7999] bond2 (unregistering): Released all slaves [ 143.939025][ T7992] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20003 [ 144.130798][ T8012] netlink: 76 bytes leftover after parsing attributes in process `syz.0.510'. [ 144.339724][ T8016] syzkaller0: entered promiscuous mode [ 144.355214][ T8018] netlink: 108 bytes leftover after parsing attributes in process `syz.2.513'. [ 144.375883][ T8016] syzkaller0: entered allmulticast mode [ 144.640479][ T8023] lo speed is unknown, defaulting to 1000 [ 144.885323][ T8043] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 144.900809][ T8043] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 145.380294][ T8037] lo speed is unknown, defaulting to 1000 [ 145.539885][ T8075] netlink: 'syz.2.525': attribute type 29 has an invalid length. [ 145.590278][ T8075] netlink: 'syz.2.525': attribute type 29 has an invalid length. [ 145.713432][ T8081] netlink: 588 bytes leftover after parsing attributes in process `syz.2.525'. [ 146.047666][ T8036] lo speed is unknown, defaulting to 1000 [ 146.531224][ T8104] team_slave_0: entered promiscuous mode [ 146.537082][ T8104] team_slave_1: entered promiscuous mode [ 146.545815][ T8104] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 146.686960][ T8079] lo speed is unknown, defaulting to 1000 [ 147.338937][ T8117] netlink: 'syz.0.536': attribute type 6 has an invalid length. [ 148.256762][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'. [ 148.555478][ T8137] lo speed is unknown, defaulting to 1000 [ 148.742263][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.542'. [ 148.760784][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 149.167719][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 149.189520][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.544'. [ 149.634828][ T8155] netlink: 112 bytes leftover after parsing attributes in process `syz.4.545'. [ 149.661927][ T8155] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 150.329037][ T8163] netlink: 'syz.2.547': attribute type 6 has an invalid length. [ 150.492150][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.532203][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.885457][ T5899] IPVS: starting estimator thread 0... [ 150.926089][ T8186] delete_channel: no stack [ 150.991878][ T8188] IPVS: using max 28 ests per chain, 67200 per kthread [ 151.017027][ T8196] netlink: 'syz.2.558': attribute type 6 has an invalid length. [ 151.033939][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 151.064295][ T8199] netlink: 'syz.0.559': attribute type 7 has an invalid length. [ 151.084487][ T8199] netlink: 148 bytes leftover after parsing attributes in process `syz.0.559'. [ 151.189514][ T8207] netlink: 'syz.4.562': attribute type 28 has an invalid length. [ 151.207962][ T8207] netlink: 'syz.4.562': attribute type 28 has an invalid length. [ 151.219453][ T8206] netlink: 'syz.4.562': attribute type 11 has an invalid length. [ 151.229784][ T8206] netlink: 140 bytes leftover after parsing attributes in process `syz.4.562'. [ 151.388188][ T8217] netlink: 116 bytes leftover after parsing attributes in process `syz.4.565'. [ 151.407507][ T8217] block nbd0: not configured, cannot reconfigure [ 151.498245][ T8223] syzkaller0: entered promiscuous mode [ 151.504770][ T8223] syzkaller0: entered allmulticast mode [ 151.627001][ T8227] netlink: 'syz.1.568': attribute type 12 has an invalid length. [ 151.649483][ T8231] netlink: 'syz.0.571': attribute type 6 has an invalid length. [ 151.658507][ T8227] netlink: 'syz.1.568': attribute type 4 has an invalid length. [ 151.805857][ T8236] nbd: must specify at least one socket [ 151.948046][ T8249] Cannot find add_set index 2 as target [ 152.091581][ T8259] netlink: 'syz.3.582': attribute type 6 has an invalid length. [ 152.125164][ T8264] geneve2: entered promiscuous mode [ 152.136429][ T4469] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 38021 - 0 [ 152.157209][ T4469] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 38021 - 0 [ 152.180359][ T4469] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 38021 - 0 [ 152.190869][ T4469] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 38021 - 0 [ 152.372918][ T8277] syzkaller1: entered promiscuous mode [ 152.379769][ T8277] syzkaller1: entered allmulticast mode [ 152.450407][ T8280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.477772][ T8280] 8021q: VLANs not supported on caif0 [ 153.071062][ T8307] block nbd0: not configured, cannot reconfigure [ 153.125660][ T8301] lo speed is unknown, defaulting to 1000 [ 153.282584][ T8315] __nla_validate_parse: 4 callbacks suppressed [ 153.282600][ T8315] netlink: 60 bytes leftover after parsing attributes in process `syz.4.600'. [ 153.312708][ T8318] netlink: 156 bytes leftover after parsing attributes in process `syz.1.601'. [ 153.326359][ T8318] netlink: 92 bytes leftover after parsing attributes in process `syz.1.601'. [ 153.805430][ T8343] netlink: 124 bytes leftover after parsing attributes in process `syz.3.612'. [ 153.822470][ T8343] block nbd0: not configured, cannot reconfigure [ 154.165286][ T8353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.615'. [ 154.182561][ T8353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.615'. [ 154.210418][ T8353] netlink: 108 bytes leftover after parsing attributes in process `syz.3.615'. [ 154.481277][ T8357] batman_adv: batadv0: Adding interface: netdevsim0 [ 154.488137][ T8357] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.514220][ T8357] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 154.655703][ T8367] bond0: (slave rose0): Releasing backup interface [ 154.778229][ T8377] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.622'. [ 154.888560][ T8380] netlink: 124 bytes leftover after parsing attributes in process `syz.3.623'. [ 154.908480][ T8380] block nbd0: not configured, cannot reconfigure [ 154.942422][ T8386] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.284383][ T8402] vlan2: entered promiscuous mode [ 155.289442][ T8402] geneve1: entered promiscuous mode [ 155.322754][ T8402] vlan2: entered allmulticast mode [ 155.327927][ T8402] geneve1: entered allmulticast mode [ 155.365548][ T8402] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 155.627458][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.630'. [ 155.888020][ T8436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.984795][ T8439] block nbd0: not configured, cannot reconfigure [ 156.025358][ T8441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.046450][ T8445] syzkaller0: entered promiscuous mode [ 156.057681][ T8445] syzkaller0: entered allmulticast mode [ 156.169378][ T8453] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 156.252510][ T8455] macsec1: entered promiscuous mode [ 156.257744][ T8455] macsec1: entered allmulticast mode [ 156.438034][ T8465] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 156.480311][ T8465] bond2 (unregistering): Released all slaves [ 156.649576][ T8476] lo speed is unknown, defaulting to 1000 [ 156.759686][ T8488] delete_channel: no stack [ 157.034112][ T8505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.133354][ T8511] tipc: Started in network mode [ 157.138244][ T8511] tipc: Node identity 16c058c4f7fa, cluster identity 4711 [ 157.189828][ T8511] tipc: Enabled bearer , priority 0 [ 157.222439][ T8520] syzkaller0: entered promiscuous mode [ 157.227923][ T8520] syzkaller0: entered allmulticast mode [ 157.373729][ T8511] tipc: Resetting bearer [ 157.525438][ T8510] tipc: Resetting bearer [ 157.565170][ T8510] tipc: Disabling bearer [ 157.843446][ T8547] lo speed is unknown, defaulting to 1000 [ 157.972987][ T8557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.076167][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.322558][ T8566] pim6reg1: entered promiscuous mode [ 158.338069][ T8566] pim6reg1: entered allmulticast mode [ 158.421135][ T8571] __nla_validate_parse: 15 callbacks suppressed [ 158.421149][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'. [ 158.441978][ T8571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.668'. [ 158.728164][ T8574] lo speed is unknown, defaulting to 1000 [ 158.903425][ T8585] validate_nla: 3 callbacks suppressed [ 158.903440][ T8585] netlink: 'syz.4.670': attribute type 13 has an invalid length. [ 159.058566][ T8590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.673'. [ 159.467396][ T8609] netlink: 'syz.4.677': attribute type 1 has an invalid length. [ 159.582007][ T8609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.225192][ T8627] netlink: 'syz.4.682': attribute type 1 has an invalid length. [ 160.542103][ T8628] bond4: (slave bridge2): making interface the new active one [ 160.560875][ T8628] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 160.826132][ T8631] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 160.834539][ T8632] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 160.859851][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 160.870751][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 161.111835][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'. [ 161.189868][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.687'. [ 161.191224][ T8648] team1: entered promiscuous mode [ 161.240072][ T8648] team1: entered allmulticast mode [ 161.305549][ T8650] bond0: entered promiscuous mode [ 161.310684][ T8650] bond_slave_0: entered promiscuous mode [ 161.324487][ T8650] bond_slave_1: entered promiscuous mode [ 161.341062][ T8650] batadv0: entered promiscuous mode [ 161.359436][ T8650] debugfs: 'hsr1' already exists in 'hsr' [ 161.372161][ T8650] Cannot create hsr debugfs directory [ 161.387838][ T8650] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 161.405217][ T8650] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 161.415797][ T8650] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 161.505804][ T8654] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 161.560305][ T8654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.568522][ T8648] netlink: 2 bytes leftover after parsing attributes in process `syz.2.687'. [ 161.693576][ T8655] syzkaller1: entered promiscuous mode [ 161.707706][ T8655] syzkaller1: entered allmulticast mode [ 162.037274][ T8683] bond1 (unregistering): Released all slaves [ 162.175218][ T8703] siw: device registration error -23 [ 162.306589][ T8688] netlink: 176 bytes leftover after parsing attributes in process `syz.0.698'. [ 162.370351][ T8716] tipc: Enabled bearer , priority 0 [ 162.392638][ T8716] syzkaller0: entered promiscuous mode [ 162.398128][ T8716] syzkaller0: entered allmulticast mode [ 162.440138][ T8723] netlink: 'syz.2.707': attribute type 13 has an invalid length. [ 162.616311][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.624095][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.755153][ T8750] netlink: 100 bytes leftover after parsing attributes in process `syz.0.708'. [ 162.774161][ T8723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.791641][ T8723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.831939][ T5830] Bluetooth: hci4: link tx timeout [ 162.837677][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.855815][ T30] audit: type=1800 audit(1763418314.609:6): pid=8753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.709" name="memory.events" dev="tmpfs" ino=683 res=0 errno=0 [ 163.290348][ T8743] tipc: Resetting bearer [ 163.323821][ T8761] openvswitch: netlink: IP tunnel dst address not specified [ 163.433702][ T973] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 163.456429][ T973] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.476946][ T973] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 38021 - 0 [ 163.500509][ T8711] tipc: Resetting bearer [ 163.532902][ T8711] tipc: Disabling bearer [ 163.533646][ T8768] __nla_validate_parse: 1 callbacks suppressed [ 163.533658][ T8768] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.714'. [ 163.538837][ T8769] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.714'. [ 163.576177][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 163.590228][ T973] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 163.601011][ T973] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.620644][ T973] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 38021 - 0 [ 163.651914][ T973] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 163.660783][ T973] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.699286][ T973] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 38021 - 0 [ 163.722322][ T973] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 163.731184][ T973] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.759709][ T8778] netlink: 'syz.3.716': attribute type 1 has an invalid length. [ 163.764506][ T973] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 38021 - 0 [ 163.901309][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 163.917512][ T8778] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.967048][ T8785] bond3: (slave geneve2): making interface the new active one [ 163.976655][ T8785] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 163.987739][ T8780] netlink: 36 bytes leftover after parsing attributes in process `syz.4.717'. [ 164.003822][ T8788] syzkaller1: entered promiscuous mode [ 164.009296][ T8788] syzkaller1: entered allmulticast mode [ 164.016757][ T973] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.030261][ T973] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.074302][ T973] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.106175][ T8796] lo speed is unknown, defaulting to 1000 [ 164.112070][ T973] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.232194][ T8805] netlink: 40 bytes leftover after parsing attributes in process `syz.3.722'. [ 164.451582][ T8822] ip6tnl0: Caught tx_queue_len zero misconfig [ 164.512557][ T8822] netlink: 28 bytes leftover after parsing attributes in process `syz.4.727'. [ 164.677691][ T8831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.730'. [ 164.687010][ T8831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.730'. [ 164.766323][ T8833] : entered promiscuous mode [ 164.815083][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 164.861881][ T5145] Bluetooth: hci4: command 0x0406 tx timeout [ 165.181650][ T8850] lo speed is unknown, defaulting to 1000 [ 165.191224][ T8858] netem: incorrect gi model size [ 165.196590][ T8858] netem: change failed [ 165.428693][ T8874] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 165.870048][ T8880] netlink: 'syz.0.745': attribute type 8 has an invalid length. [ 165.896388][ T8880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.108753][ T8885] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96 [ 166.841644][ T8916] tipc: Enabled bearer , priority 0 [ 166.851056][ T8916] syzkaller0: entered promiscuous mode [ 166.865288][ T8916] syzkaller0: entered allmulticast mode [ 166.956514][ T8916] tipc: Resetting bearer [ 166.984835][ T8915] tipc: Resetting bearer [ 167.052859][ T8915] tipc: Disabling bearer [ 167.090331][ T8921] syzkaller0: entered promiscuous mode [ 167.096756][ T8921] syzkaller0: entered allmulticast mode [ 167.519237][ T8948] syzkaller0: entered promiscuous mode [ 167.529141][ T8948] syzkaller0: entered allmulticast mode [ 167.544836][ T8942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 167.721610][ T8963] veth1_macvtap: Caught tx_queue_len zero misconfig [ 168.102329][ T8974] lo speed is unknown, defaulting to 1000 [ 168.586215][ T8999] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 168.611732][ T8999] bond1 (unregistering): Released all slaves [ 168.644338][ T9000] lo speed is unknown, defaulting to 1000 [ 168.907134][ T9003] lo speed is unknown, defaulting to 1000 [ 169.251065][ T9020] __nla_validate_parse: 16 callbacks suppressed [ 169.251081][ T9020] netlink: 76 bytes leftover after parsing attributes in process `syz.3.786'. [ 169.368180][ T8992] lo speed is unknown, defaulting to 1000 [ 170.680581][ T9046] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 170.694018][ T9046] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 170.705568][ T9046] batman_adv: batadv0: Interface activated: netdevsim0 [ 170.980285][ T9053] sctp: [Deprecated]: syz.3.793 (pid 9053) Use of int in maxseg socket option. [ 170.980285][ T9053] Use struct sctp_assoc_value instead [ 171.275952][ T9058] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 171.381526][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 171.451293][ T9069] lo speed is unknown, defaulting to 1000 [ 171.560807][ T9076] netlink: 76 bytes leftover after parsing attributes in process `syz.0.798'. [ 171.630582][ T9078] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 172.227656][ T9100] netlink: 'syz.2.806': attribute type 27 has an invalid length. [ 172.336906][ T9103] netlink: 84 bytes leftover after parsing attributes in process `syz.2.807'. [ 172.351188][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.807'. [ 172.380500][ T9103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.807'. [ 172.479762][ T9103] netlink: 168 bytes leftover after parsing attributes in process `syz.2.807'. [ 172.811144][ T9123] sctp: [Deprecated]: syz.0.815 (pid 9123) Use of int in max_burst socket option. [ 172.811144][ T9123] Use struct sctp_assoc_value instead [ 172.862232][ T9121] netlink: 76 bytes leftover after parsing attributes in process `syz.3.811'. [ 172.896660][ T9122] pim6reg: entered allmulticast mode [ 173.651931][ T9146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.820'. [ 173.770556][ T9151] sctp: [Deprecated]: syz.2.821 (pid 9151) Use of int in max_burst socket option. [ 173.770556][ T9151] Use struct sctp_assoc_value instead [ 174.409116][ T9165] vlan2: left promiscuous mode [ 174.422229][ T9165] geneve2: left promiscuous mode [ 174.427409][ T9165] team1: left promiscuous mode [ 174.547820][ T9176] netlink: 'syz.2.828': attribute type 8 has an invalid length. [ 174.589492][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'. [ 174.629987][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'. [ 174.639303][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'. [ 174.674674][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'. [ 174.691673][ T9181] netlink: 76 bytes leftover after parsing attributes in process `syz.0.829'. [ 174.707439][ T9183] netlink: 'syz.2.830': attribute type 23 has an invalid length. [ 175.291709][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.835'. [ 175.308889][ T9210] netlink: 36 bytes leftover after parsing attributes in process `syz.3.838'. [ 175.729896][ T9202] macvlan2: entered promiscuous mode [ 175.737901][ T9202] macvlan2: entered allmulticast mode [ 175.746867][ T9202] bond5: (slave macvlan2): Opening slave failed [ 175.766292][ T9216] netlink: 'syz.0.840': attribute type 15 has an invalid length. [ 175.797824][ T9223] lo speed is unknown, defaulting to 1000 [ 176.315869][ T9234] lo speed is unknown, defaulting to 1000 [ 176.335114][ T9237] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.404134][ T9232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.841'. [ 176.426626][ T9232] netlink: 'syz.4.841': attribute type 10 has an invalid length. [ 176.505121][ T9232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.525467][ T9238] netlink: 'syz.4.841': attribute type 10 has an invalid length. [ 176.545018][ T9232] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 176.556157][ T9238] netlink: 40 bytes leftover after parsing attributes in process `syz.4.841'. [ 176.570482][ T9246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'. [ 176.606335][ T9238] batadv0: entered promiscuous mode [ 176.622846][ T9238] batadv0: entered allmulticast mode [ 176.645906][ T9238] bond0: (slave batadv0): Releasing backup interface [ 176.686000][ T9238] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 177.301386][ T9240] lo speed is unknown, defaulting to 1000 [ 177.348122][ T9251] ieee802154 phy1 wpan1: encryption failed: -22 [ 178.325392][ T9263] netlink: 'syz.3.849': attribute type 18 has an invalid length. [ 179.645350][ T9299] __nla_validate_parse: 26 callbacks suppressed [ 179.645366][ T9299] netlink: 100 bytes leftover after parsing attributes in process `syz.3.858'. [ 180.304996][ T9314] syzkaller0: entered promiscuous mode [ 180.321980][ T9314] syzkaller0: entered allmulticast mode [ 180.410875][ T9334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.868'. [ 180.652485][ T9340] x_tables: duplicate underflow at hook 1 [ 181.649266][ T9350] netlink: 'syz.3.872': attribute type 2 has an invalid length. [ 182.028641][ T9338] lo speed is unknown, defaulting to 1000 [ 182.560180][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 182.805942][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.886'. [ 182.942813][ T9413] netlink: 'syz.3.892': attribute type 13 has an invalid length. [ 182.973574][ T9413] netlink: 'syz.3.892': attribute type 17 has an invalid length. [ 183.135269][ T9413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.144013][ T9413] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.159680][ T9413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.280883][ T9415] lo speed is unknown, defaulting to 1000 [ 183.771518][ T9434] tipc: Enabled bearer , priority 0 [ 183.808142][ T9434] syzkaller0: entered promiscuous mode [ 183.813795][ T9434] syzkaller0: entered allmulticast mode [ 183.863722][ T9434] tipc: Resetting bearer [ 183.872103][ T9433] tipc: Resetting bearer [ 183.884286][ T9433] tipc: Disabling bearer [ 184.284494][ T9443] netlink: 'syz.2.901': attribute type 9 has an invalid length. [ 184.293583][ T9443] netlink: 'syz.2.901': attribute type 6 has an invalid length. [ 184.785263][ T9446] netlink: 14 bytes leftover after parsing attributes in process `syz.4.902'. [ 184.817645][ T9446] hsr_slave_0: left promiscuous mode [ 184.844458][ T9446] hsr_slave_1: left promiscuous mode [ 185.009404][ T9463] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.060860][ T9474] netlink: 312 bytes leftover after parsing attributes in process `syz.3.909'. [ 185.207615][ T9463] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.350159][ T9463] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.556450][ T9463] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.725344][ T9497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.916'. [ 185.984012][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'. [ 186.017110][ T973] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.039292][ T973] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.088821][ T973] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.191836][ T1331] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.292985][ T9524] lo speed is unknown, defaulting to 1000 [ 186.717586][ T9532] lo speed is unknown, defaulting to 1000 [ 186.970242][ T9523] lo speed is unknown, defaulting to 1000 [ 187.398693][ T9560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.929'. [ 187.707985][ T9547] lo speed is unknown, defaulting to 1000 [ 187.962879][ T9575] lo speed is unknown, defaulting to 1000 [ 188.525083][ T9596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.938'. [ 188.802505][ T9594] lo speed is unknown, defaulting to 1000 [ 188.989758][ T9611] pim6reg: entered allmulticast mode [ 189.013716][ T9612] pim6reg: left allmulticast mode [ 189.243353][ T9615] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.505628][ T9615] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.612848][ T9615] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.669215][ T9615] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.779041][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.787561][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.811947][ T4469] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.870223][ T4469] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.492309][ T9631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.943'. [ 190.874471][ T9644] netlink: 332 bytes leftover after parsing attributes in process `syz.3.945'. [ 190.902243][ T9644] netlink: 'syz.3.945': attribute type 9 has an invalid length. [ 190.915650][ T9644] netlink: 108 bytes leftover after parsing attributes in process `syz.3.945'. [ 190.930374][ T9644] netlink: 32 bytes leftover after parsing attributes in process `syz.3.945'. [ 191.108196][ T9648] veth0_to_team: entered promiscuous mode [ 191.933930][ T9660] veth4: entered allmulticast mode [ 192.118691][ T9672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.954'. [ 192.254087][ T9690] netlink: 64 bytes leftover after parsing attributes in process `syz.2.959'. [ 192.306501][ T9672] 8021q: adding VLAN 0 to HW filter on device bond6 [ 192.528788][ T9702] xt_CT: No such helper "snmp" [ 192.656437][ T9711] lo speed is unknown, defaulting to 1000 [ 192.913502][ T9725] netlink: 76 bytes leftover after parsing attributes in process `syz.2.970'. [ 192.980907][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.971'. [ 193.064774][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.971'. [ 193.082760][ T9735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.974'. [ 193.315077][ T9746] syzkaller0: entered promiscuous mode [ 193.320666][ T9746] syzkaller0: entered allmulticast mode [ 193.494298][ T9756] netlink: 'syz.0.979': attribute type 1 has an invalid length. [ 194.148151][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.615977][ T9754] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 194.628528][ T9756] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 194.845222][ T9779] IPVS: length: 181 != 24 [ 194.901945][ T9783] xt_ecn: cannot match TCP bits for non-tcp packets [ 195.010430][ T9788] netlink: 'syz.4.987': attribute type 1 has an invalid length. [ 195.030748][ T9789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.107138][ T9791] block nbd0: not configured, cannot reconfigure [ 195.248235][ T9800] 8021q: adding VLAN 0 to HW filter on device bond7 [ 195.261311][ T9800] bond0: (slave bond7): Enslaving as an active interface with an up link [ 195.523201][ T9806] lo speed is unknown, defaulting to 1000 [ 195.642978][ T9825] __nla_validate_parse: 9 callbacks suppressed [ 195.643001][ T9825] netlink: 32 bytes leftover after parsing attributes in process `syz.1.994'. [ 195.964778][ T9843] tipc: Enabled bearer , priority 0 [ 195.984409][ T9843] netlink: 'syz.4.1000': attribute type 13 has an invalid length. [ 196.043023][ T9843] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 196.083696][ T9843] syzkaller0: entered promiscuous mode [ 196.107721][ T9843] syzkaller0: entered allmulticast mode [ 196.148714][ T9855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1003'. [ 196.186320][ T9843] tipc: Resetting bearer [ 196.206663][ T9840] tipc: Resetting bearer [ 196.225973][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 196.241466][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 196.251381][ T5145] Bluetooth: hci2: command 0x0406 tx timeout [ 196.268538][ T9840] tipc: Disabling bearer [ 196.290587][ T9859] @0: renamed from bond_slave_1 [ 196.319396][ T9852] lo speed is unknown, defaulting to 1000 [ 196.653591][ T9875] netlink: 'syz.3.1008': attribute type 12 has an invalid length. [ 196.680096][ T9875] netlink: 'syz.3.1008': attribute type 4 has an invalid length. [ 196.936198][ T9881] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1010'. [ 197.474108][ T9890] netlink: 'syz.4.1011': attribute type 5 has an invalid length. [ 197.587711][ T9894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1013'. [ 197.615920][ T9894] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1013'. [ 197.625370][ T9894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1013'. [ 197.636995][ T9894] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1013'. [ 198.052323][ T9898] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 198.077438][ T9898] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 198.102789][ T9898] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 199.117917][ T9928] lo speed is unknown, defaulting to 1000 [ 199.152817][ T9933] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 199.271916][ T9937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1024'. [ 199.570950][ T9958] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 199.588074][ T9958] bond2 (unregistering): Released all slaves [ 199.649528][ T9966] netlink: 'syz.1.1029': attribute type 8 has an invalid length. [ 199.704492][ T9962] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 199.781526][ T9962] bond2 (unregistering): Released all slaves [ 199.925070][ T9960] lo speed is unknown, defaulting to 1000 [ 200.197849][ T9979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1036'. [ 200.240778][ T9966] lo speed is unknown, defaulting to 1000 [ 200.252152][ T9979] syzkaller0: entered promiscuous mode [ 200.258381][ T9979] syzkaller0: entered allmulticast mode [ 200.365121][ T9964] netlink: 'syz.3.1032': attribute type 1 has an invalid length. [ 200.557294][ T9990] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1035'. [ 200.608695][ T9964] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.757087][ T9997] SET target dimension over the limit! [ 201.066122][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'. [ 201.144077][T10015] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1043'. [ 201.200999][T10010] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1043'. [ 226.497012][T10028] netlink: 'syz.4.1048': attribute type 27 has an invalid length. [ 226.642824][T10036] xt_CT: No such helper "pptp" [ 226.686413][T10036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1045'. [ 227.363405][T10028] batadv0: left promiscuous mode [ 227.368434][T10028] batadv0: left allmulticast mode [ 227.389665][T10028] erspan1: left allmulticast mode [ 227.448970][T10034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.456911][T10034] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.466379][T10034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.493117][T10036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1045'. [ 227.514166][T10043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1045'. [ 227.554242][T10033] lo speed is unknown, defaulting to 1000 [ 227.705747][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1050'. [ 227.893085][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1055'. [ 227.994992][T10065] macvtap1: entered promiscuous mode [ 228.000338][T10065] dummy0: entered promiscuous mode [ 228.017891][T10065] macvtap1: entered allmulticast mode [ 228.027700][T10065] dummy0: entered allmulticast mode [ 228.051685][T10067] macvtap1: left promiscuous mode [ 228.057272][T10067] dummy0: left promiscuous mode [ 228.065017][T10067] macvtap1: left allmulticast mode [ 228.070473][T10067] dummy0: left allmulticast mode [ 228.076046][T10049] lo speed is unknown, defaulting to 1000 [ 228.406164][T10072] lo speed is unknown, defaulting to 1000 [ 228.631672][T10082] netlink: 'syz.1.1059': attribute type 3 has an invalid length. [ 228.685110][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 228.822209][T10088] ip6erspan0: entered allmulticast mode [ 228.831866][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1061'. [ 228.999202][T10078] lo speed is unknown, defaulting to 1000 [ 229.329728][T10092] lo speed is unknown, defaulting to 1000 [ 229.685229][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1064'. [ 229.834505][T10104] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1065'. [ 229.960813][T10110] lo speed is unknown, defaulting to 1000 [ 232.109521][T10131] lo speed is unknown, defaulting to 1000 [ 232.421358][T10141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1073'. [ 232.535338][T10141] bond2 (unregistering): Released all slaves [ 232.638586][T10147] bond2 (unregistering): Released all slaves [ 232.893155][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 232.986255][T10168] bridge_slave_0: left allmulticast mode [ 233.006259][T10168] bridge_slave_0: left promiscuous mode [ 233.022254][T10168] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.051260][T10168] bridge_slave_1: left allmulticast mode [ 233.058839][T10168] bridge_slave_1: left promiscuous mode [ 233.067392][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1079'. [ 233.076723][T10168] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.113302][T10168] bond0: (slave bond_slave_0): Releasing backup interface [ 233.362813][T10168] bond0: (slave bond_slave_1): Releasing backup interface [ 233.387857][T10168] team0: Port device team_slave_0 removed [ 233.414087][T10168] team0: Port device team_slave_1 removed [ 233.422020][T10168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.507604][T10168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.533538][T10168] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 233.596483][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1079'. [ 233.613730][T10172] ipvlan0: entered promiscuous mode [ 233.620421][T10172] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 233.911268][T10184] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1084'. [ 233.923336][T10189] batadv_slave_1: Caught tx_queue_len zero misconfig [ 234.123864][T10194] lo speed is unknown, defaulting to 1000 [ 234.210714][ T30] audit: type=1107 audit(1763418385.969:7): pid=10198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' գFJCT%ˏ|ܜuoʼvuS:9`oz,*O .pl_Wkbj=~vW4"pw͓^B2H' [ 235.093269][T10229] bond1: option primary_reselect: invalid value (6) [ 235.118864][T10229] bond1 (unregistering): Released all slaves [ 235.156785][T10233] netlink: 'syz.3.1098': attribute type 19 has an invalid length. [ 235.164912][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1098'. [ 235.208992][T10233] netlink: 'syz.3.1098': attribute type 19 has an invalid length. [ 235.210170][ T4469] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.222927][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1098'. [ 235.249730][ T4469] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.283664][T10236] lo speed is unknown, defaulting to 1000 [ 235.292183][ T4469] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.314213][ T4469] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.457690][T10245] netlink: 'syz.3.1101': attribute type 10 has an invalid length. [ 235.480516][T10245] syz_tun: entered promiscuous mode [ 235.506359][T10245] team0: Port device syz_tun added [ 235.758100][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'. [ 235.854136][T10252] ip6tnl2: entered allmulticast mode [ 236.095947][T10265] netlink: 'syz.2.1108': attribute type 1 has an invalid length. [ 236.202990][T10270] netlink: 'syz.3.1110': attribute type 4 has an invalid length. [ 236.247732][T10273] netlink: 'syz.3.1110': attribute type 4 has an invalid length. [ 236.273802][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1109'. [ 236.520232][T10267] lo speed is unknown, defaulting to 1000 [ 236.943753][T10305] bridge2: entered allmulticast mode [ 238.075841][T10324] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 238.095916][T10325] netlink: 'syz.3.1122': attribute type 13 has an invalid length. [ 238.515254][T10351] netlink: 'syz.4.1129': attribute type 15 has an invalid length. [ 238.539681][T10340] lo speed is unknown, defaulting to 1000 [ 239.463408][T10349] lo speed is unknown, defaulting to 1000 [ 239.467635][T10385] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1139'. [ 239.494506][T10387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1140'. [ 239.577381][T10391] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1138'. [ 239.615206][T10394] xt_hashlimit: size too large, truncated to 1048576 [ 239.999430][T10352] lo speed is unknown, defaulting to 1000 [ 240.396311][T10409] netlink: 'syz.3.1146': attribute type 3 has an invalid length. [ 240.429907][T10408] macsec1: entered promiscuous mode [ 240.435515][T10410] netlink: 'syz.3.1146': attribute type 3 has an invalid length. [ 240.445882][T10408] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 240.622107][T10416] bond2: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 240.637654][T10416] netlink: 'syz.0.1149': attribute type 1 has an invalid length. [ 240.651586][T10416] netlink: 'syz.0.1149': attribute type 11 has an invalid length. [ 240.666335][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1147'. [ 240.733409][T10421] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 240.843618][T10430] nbd: must specify a size in bytes for the device [ 240.851338][T10427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1152'. [ 240.991273][T10432] lo speed is unknown, defaulting to 1000 [ 241.154699][T10438] netlink: 'syz.4.1154': attribute type 1 has an invalid length. [ 241.169087][T10434] bridge_slave_1: default FDB implementation only supports local addresses [ 241.602126][T10449] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 241.631069][T10451] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 241.751184][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1158'. [ 241.875149][T10458] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1160'. [ 242.542004][T10473] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 242.599534][T10475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1165'. [ 242.609450][T10475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1165'. [ 255.584436][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.810074][T10481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1166'. [ 264.823939][T10487] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1167'. [ 264.829771][T10486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1166'. [ 264.845547][T10485] bridge0: port 1(macvtap2) entered blocking state [ 264.852891][T10485] bridge0: port 1(macvtap2) entered disabled state [ 264.859603][T10485] macvtap2: entered allmulticast mode [ 264.866236][T10485] bridge0: entered allmulticast mode [ 264.875379][T10485] macvtap2: left allmulticast mode [ 264.880676][T10485] bridge0: left allmulticast mode [ 264.898907][T10492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1169'. [ 264.918751][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1166'. [ 264.990972][T10496] netlink: 'syz.4.1171': attribute type 1 has an invalid length. [ 265.012583][T10494] netlink: 'syz.4.1171': attribute type 1 has an invalid length. [ 265.107910][T10505] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1175'. [ 265.124960][T10494] 8021q: adding VLAN 0 to HW filter on device bond8 [ 265.220402][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 265.307190][T10518] netlink: 'syz.3.1180': attribute type 29 has an invalid length. [ 265.318291][T10518] netlink: 'syz.3.1180': attribute type 29 has an invalid length. [ 265.342875][T10518] netlink: 392 bytes leftover after parsing attributes in process `syz.3.1180'. [ 265.529450][T10534] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1184'. [ 265.555015][T10538] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1184'. [ 265.918511][T10553] team0: No ports can be present during mode change [ 265.999292][T10557] netlink: 'syz.2.1192': attribute type 4 has an invalid length. [ 266.064065][T10556] lo speed is unknown, defaulting to 1000 [ 266.288888][T10573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.440041][T10550] netlink: 'syz.3.1190': attribute type 12 has an invalid length. [ 266.584273][T10580] syzkaller0: entered promiscuous mode [ 266.608788][T10580] syzkaller0: entered allmulticast mode [ 266.818089][T10554] lo speed is unknown, defaulting to 1000 [ 267.132493][T10594] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.140232][T10594] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.174672][T10596] sctp: [Deprecated]: syz.1.1202 (pid 10596) Use of int in maxseg socket option. [ 267.174672][T10596] Use struct sctp_assoc_value instead [ 267.417897][T10592] lo speed is unknown, defaulting to 1000 [ 268.200390][T10633] sctp: [Deprecated]: syz.0.1212 (pid 10633) Use of int in maxseg socket option. [ 268.200390][T10633] Use struct sctp_assoc_value instead [ 268.372520][T10642] x_tables: duplicate entry at hook 1 [ 268.458990][T10642] IPVS: Scheduler module ip_vs_ not found [ 268.465316][T10641] IPVS: length: 24 != 140079366168 [ 268.470733][T10641] netlink: 'syz.4.1213': attribute type 2 has an invalid length. [ 269.029699][T10668] netlink: 'syz.1.1218': attribute type 32 has an invalid length. [ 269.058066][T10668] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 269.283410][T10675] netlink: 'syz.4.1220': attribute type 21 has an invalid length. [ 269.985107][T10700] __nla_validate_parse: 14 callbacks suppressed [ 269.985124][T10700] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1226'. [ 270.088186][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'. [ 270.097583][T10703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1227'. [ 270.177450][T10708] vlan3: entered allmulticast mode [ 270.184019][T10708] dummy0: entered allmulticast mode [ 270.345600][T10714] syz_tun: left promiscuous mode [ 270.358026][T10714] team0: Port device syz_tun removed [ 270.373556][T10714] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 270.397673][T10704] netlink: 'syz.4.1228': attribute type 21 has an invalid length. [ 270.406182][T10716] delete_channel: no stack [ 270.439878][T10722] netlink: 'syz.2.1233': attribute type 1 has an invalid length. [ 270.516632][T10729] netlink: 'syz.1.1235': attribute type 6 has an invalid length. [ 270.543615][T10729] netlink: 'syz.1.1235': attribute type 6 has an invalid length. [ 270.610544][T10731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.915667][T10743] batman_adv: batadv0: Adding interface: ipvlan2 [ 271.922638][T10743] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.952302][T10743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.962871][T10743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.974328][T10743] batman_adv: batadv0: Interface activated: ipvlan2 [ 272.018481][T10738] lo speed is unknown, defaulting to 1000 [ 272.128160][T10763] netlink: 'syz.4.1244': attribute type 1 has an invalid length. [ 272.187465][T10765] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1245'. [ 272.348660][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 272.349268][T10768] 8021q: adding VLAN 0 to HW filter on device bond9 [ 272.371900][T10775] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1248'. [ 272.381079][T10775] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1248'. [ 272.392160][T10771] syzkaller0: entered promiscuous mode [ 272.397710][T10771] syzkaller0: entered allmulticast mode [ 272.406343][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 272.417047][T10775] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1248'. [ 272.426390][T10775] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1248'. [ 272.440698][T10771] tipc: Enabled bearer , priority 0 [ 272.482387][T10770] tipc: Resetting bearer [ 272.535703][T10770] tipc: Disabling bearer [ 272.793484][T10758] rdma_rxe: rxe_newlink: failed to add lo [ 272.943780][T10802] nbd: couldn't find device at index 3 [ 273.464079][T10838] netlink: 'syz.4.1262': attribute type 1 has an invalid length. [ 273.542942][T10840] bond3: option arp_all_targets: invalid value (3) [ 273.551370][T10840] bond3 (unregistering): Released all slaves [ 273.575664][T10845] sctp: [Deprecated]: syz.4.1262 (pid 10845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.575664][T10845] Use struct sctp_sack_info instead [ 273.944968][T10859] bond10 (unregistering): Released all slaves [ 274.292775][T10876] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 274.312849][T10876] bond2 (unregistering): Released all slaves [ 274.390249][T10883] lo speed is unknown, defaulting to 1000 [ 274.752422][T10902] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 274.833913][T10902] SET target dimension over the limit! [ 274.869544][T10895] lo speed is unknown, defaulting to 1000 [ 275.199086][T10898] __nla_validate_parse: 195 callbacks suppressed [ 275.199101][T10898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1277'. [ 275.366041][T10922] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 275.463061][T10927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1287'. [ 275.491351][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1286'. [ 275.531993][T10898] lo speed is unknown, defaulting to 1000 [ 275.881915][T10937] lo speed is unknown, defaulting to 1000 [ 276.575497][T10956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1295'. [ 276.730841][T10952] lo speed is unknown, defaulting to 1000 [ 277.358054][T10974] lo speed is unknown, defaulting to 1000 [ 277.826434][T10986] xt_hashlimit: max too large, truncated to 1048576 [ 277.911272][T10989] batman_adv: batadv0: Adding interface: gretap2 [ 277.917879][T10989] batman_adv: batadv0: The MTU of interface gretap2 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.943726][T10989] batman_adv: batadv0: Interface activated: gretap2 [ 278.718404][T11014] dvmrp6: entered allmulticast mode [ 278.798392][T11023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1312'. [ 278.813268][T11023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1312'. [ 278.834596][T11024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1311'. [ 278.843859][T11023] ip6gretap1: entered promiscuous mode [ 278.849730][T11023] ip6gretap1: entered allmulticast mode [ 278.866642][T11017] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1311'. [ 279.030476][T11027] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1313'. [ 279.084318][T11026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1313'. [ 279.774215][T11038] lo speed is unknown, defaulting to 1000 [ 280.303597][T11060] __nla_validate_parse: 1 callbacks suppressed [ 280.303613][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1322'. [ 280.355983][T11061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1322'. [ 280.455603][T11060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1322'. [ 280.566030][T11063] netlink: 'syz.1.1323': attribute type 4 has an invalid length. [ 280.574474][T11063] netlink: 'syz.1.1323': attribute type 4 has an invalid length. [ 280.585978][ T5837] lo speed is unknown, defaulting to 1000 [ 280.592298][ T5837] syz2: Port: 1 Link ACTIVE [ 280.597033][ T1209] lo speed is unknown, defaulting to 1000 [ 280.860760][T11072] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1325'. [ 280.869567][T11074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1326'. [ 280.883220][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 281.118517][T11085] lo speed is unknown, defaulting to 1000 [ 281.206103][T11089] tipc: Enabled bearer , priority 0 [ 281.223006][T11090] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 281.233104][T11089] : renamed from syzkaller0 [ 281.282985][T11089] tipc: Disabling bearer [ 281.525852][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1332'. [ 281.588799][T11097] sctp: [Deprecated]: syz.4.1332 (pid 11097) Use of int in max_burst socket option. [ 281.588799][T11097] Use struct sctp_assoc_value instead [ 281.752316][T11104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1334'. [ 281.763492][T11104] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1334'. [ 281.773794][T11104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1334'. [ 282.027131][T11118] 8021q: VLANs not supported on wg0 [ 282.669378][T11144] bond2: entered promiscuous mode [ 282.691774][T11144] bond2: entered allmulticast mode [ 283.105731][T11154] netlink: 'syz.0.1347': attribute type 21 has an invalid length. [ 283.397044][T11165] lo speed is unknown, defaulting to 1000 [ 284.149195][T11195] netlink: 'syz.3.1361': attribute type 11 has an invalid length. [ 284.157166][T11195] netlink: 'syz.3.1361': attribute type 11 has an invalid length. [ 284.315191][T11200] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 284.381218][T11204] netlink: 'syz.0.1362': attribute type 3 has an invalid length. [ 284.395482][T11202] syzkaller0: entered promiscuous mode [ 284.405352][T11202] syzkaller0: entered allmulticast mode [ 284.451274][T11204] syz_tun: entered allmulticast mode [ 284.587074][T11218] siw: device registration error -23 [ 284.695197][T11218] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.702402][T11218] bridge0: port 2(bridge_slave_1) entered listening state [ 284.709766][T11218] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.717061][T11218] bridge0: port 1(bridge_slave_0) entered listening state [ 284.735467][T11218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.787982][T11203] syz_tun: left allmulticast mode [ 285.425713][T11261] syzkaller0: entered promiscuous mode [ 285.456953][T11261] syzkaller0: entered allmulticast mode [ 285.563906][T11267] xt_TCPMSS: Only works on TCP SYN packets [ 285.790447][T11276] __nla_validate_parse: 10 callbacks suppressed [ 285.790464][T11276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 286.123593][ T30] audit: type=1804 audit(1763418437.889:8): pid=11285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1381" name="cgroup.controllers" dev="tmpfs" ino=1539 res=1 errno=0 [ 286.125253][T11284] syz_tun: left allmulticast mode [ 286.163819][T11284] dvmrp6: left allmulticast mode [ 286.172907][ T30] audit: type=1800 audit(1763418437.889:9): pid=11285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1381" name="cgroup.controllers" dev="tmpfs" ino=1539 res=0 errno=0 [ 286.207011][ T30] audit: type=1800 audit(1763418437.889:10): pid=11284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1381" name="cgroup.controllers" dev="tmpfs" ino=1539 res=0 errno=0 [ 286.769769][T11311] syzkaller0: entered promiscuous mode [ 286.795868][T11311] syzkaller0: entered allmulticast mode [ 286.824855][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 288.488288][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1394'. [ 288.510353][T11319] lo speed is unknown, defaulting to 1000 [ 288.802624][T11344] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1398'. [ 289.066171][T11361] openvswitch: netlink: Flow actions attr not present in new flow. [ 289.094042][T11361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1403'. [ 289.394406][T11372] netlink: 'syz.2.1400': attribute type 11 has an invalid length. [ 289.431831][T11372] netlink: 'syz.2.1400': attribute type 11 has an invalid length. [ 289.443648][T11372] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1400'. [ 289.503814][T11376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.811910][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.400596][T11447] netlink: 'syz.3.1443': attribute type 4 has an invalid length. [ 291.914634][T11480] xt_connbytes: Forcing CT accounting to be enabled [ 292.243707][T11501] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1465'. [ 293.265674][T11557] team0: No ports can be present during mode change [ 293.740492][T11598] vti0: entered promiscuous mode [ 293.768293][T11601] netlink: 'syz.0.1507': attribute type 4 has an invalid length. [ 293.864822][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'. [ 294.040769][T11620] tipc: Enabling of bearer rejected, media not registered [ 294.168931][T11628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.327380][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1528'. [ 294.478744][T11648] netlink: 'syz.1.1531': attribute type 7 has an invalid length. [ 294.548150][T11652] xt_policy: neither incoming nor outgoing policy selected [ 294.664743][T11659] IPVS: length: 141 != 8 [ 295.080752][T11684] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.093455][T11684] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.153142][T11693] bond2: entered allmulticast mode [ 295.158730][T11693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 295.210468][T11697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.234862][T11684] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.254619][T11684] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.386724][T11709] veth3: entered promiscuous mode [ 295.419343][T11684] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.444808][T11684] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.514522][T11684] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 295.559566][T11684] batman_adv: batadv0: Removing interface: netdevsim0 [ 295.572890][T11684] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.584751][T11684] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.771747][ T60] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.802201][ T60] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.859416][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.881980][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.933416][ T4469] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.941628][ T4469] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.975722][T11740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1575'. [ 295.987414][ T4469] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.996828][ T4469] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.132987][T11752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1579'. [ 296.268891][T11761] smc: net device ip6_vti0 applied user defined pnetid SYZ1 [ 296.824371][T11801] netlink: 'syz.4.1604': attribute type 11 has an invalid length. [ 297.156457][T11823] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1615'. [ 297.169069][T11827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1616'. [ 297.197939][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1615'. [ 297.239393][T11833] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1620'. [ 297.479408][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1630'. [ 297.772688][T11871] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 297.814672][T11871] bridge0: entered allmulticast mode [ 298.034010][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1646'. [ 298.715171][T11935] netlink: 'syz.3.1668': attribute type 1 has an invalid length. [ 298.751007][T11935] netlink: 'syz.3.1668': attribute type 1 has an invalid length. [ 298.779381][T11942] netlink: 'syz.3.1668': attribute type 1 has an invalid length. [ 298.798662][T11942] netlink: 'syz.3.1668': attribute type 1 has an invalid length. [ 298.839604][T11941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.886681][T11944] syzkaller0: entered promiscuous mode [ 299.190831][T11971] team_slave_1: Caught tx_queue_len zero misconfig [ 299.630767][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1697'. [ 299.742976][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 299.750862][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 299.805310][T12016] bridge0: left allmulticast mode [ 299.814528][T12016] geneve2: left promiscuous mode [ 299.819704][T12016] vlan2: left promiscuous mode [ 299.827175][T12016] geneve1: left promiscuous mode [ 299.833613][T12016] vlan2: left allmulticast mode [ 299.838845][T12016] geneve1: left allmulticast mode [ 299.855726][T12021] sctp: [Deprecated]: syz.0.1704 (pid 12021) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.855726][T12021] Use struct sctp_sack_info instead [ 299.857085][T12019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.885226][T12016] ip6erspan0: left allmulticast mode [ 299.896532][T12016] vti0: left promiscuous mode [ 299.908115][T12016] bond2: left allmulticast mode [ 299.934170][ T7555] lo speed is unknown, defaulting to 1000 [ 299.947661][ T7555] syz2: Port: 1 Link DOWN [ 299.958398][ T9] lo speed is unknown, defaulting to 1000 [ 300.129671][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1713'. [ 300.139227][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1713'. [ 300.148941][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1713'. [ 300.158249][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1713'. [ 300.356136][T12052] sock: sock_timestamping_bind_phc: sock not bind to device [ 300.918523][ T60] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.940468][ T60] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.979235][ T60] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.989987][ T60] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.998670][ T60] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.008768][ T60] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.017461][ T60] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.027094][ T60] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.740952][T12131] tap0: tun_chr_ioctl cmd 1074025677 [ 302.746521][T12131] tap0: linktype set to 518 [ 302.758851][T12140] nr0: tun_chr_ioctl cmd 2147767506 [ 303.189222][T12168] team_slave_0: Caught tx_queue_len zero misconfig [ 303.227667][T12170] sctp: [Deprecated]: syz.3.1772 (pid 12170) Use of int in max_burst socket option deprecated. [ 303.227667][T12170] Use struct sctp_assoc_value instead [ 303.365631][T12178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.557693][T12196] macvlan0: entered allmulticast mode [ 303.563890][T12196] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 303.899026][T12219] team0: Caught tx_queue_len zero misconfig [ 305.239076][T12311] lo speed is unknown, defaulting to 1000 [ 305.416034][T12321] netlink: 'syz.3.1846': attribute type 1 has an invalid length. [ 305.471533][T12321] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.544813][T12326] bond5: (slave erspan1): making interface the new active one [ 305.553957][T12326] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 305.634404][T12332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1850'. [ 306.232101][T12359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1861'. [ 306.311320][T12359] 8021q: adding VLAN 0 to HW filter on device bond3 [ 306.374045][T12359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.390635][T12359] bond3: (slave bond0): Enslaving as an active interface with an up link [ 306.419270][T12376] netlink: 'syz.1.1869': attribute type 15 has an invalid length. [ 306.445506][T12374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1867'. [ 306.674594][T12390] xt_hashlimit: max too large, truncated to 1048576 [ 306.821477][T12388] bond0: option mode: unable to set because the bond device has slaves [ 307.460861][T12435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1892'. [ 307.585590][T12441] netlink: 'syz.0.1895': attribute type 1 has an invalid length. [ 307.744996][T12453] sctp: [Deprecated]: syz.2.1903 (pid 12453) Use of int in max_burst socket option. [ 307.744996][T12453] Use struct sctp_assoc_value instead [ 308.242843][T12487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1916'. [ 308.576612][T12503] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1923'. [ 310.400512][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'. [ 310.411149][T12588] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1950'. [ 310.677830][T12605] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1959'. [ 310.696763][T12605] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1959'. [ 310.806253][T12615] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1963'. [ 310.845156][T12609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1960'. [ 310.869779][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1960'. [ 310.891150][T12609] tc_dump_action: action bad kind [ 310.908405][T12620] tipc: Enabling of bearer rejected, failed to enable media [ 311.159471][T12636] netlink: 'syz.4.1968': attribute type 13 has an invalid length. [ 311.304390][T12639] syzkaller0: entered promiscuous mode [ 311.365671][T12639] syzkaller0: entered allmulticast mode [ 311.699915][T12650] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1976'. [ 311.742597][T12660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.897886][T12673] netlink: 'syz.0.1984': attribute type 29 has an invalid length. [ 311.907830][T12670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1980'. [ 311.914153][T12673] netlink: 548 bytes leftover after parsing attributes in process `syz.0.1984'. [ 312.180867][T12697] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1991'. [ 312.191343][T12697] .70: renamed from hsr0 [ 312.207618][T12697] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 312.228992][T12697] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.266601][T12697] .70: entered allmulticast mode [ 312.276703][T12697] hsr_slave_0: entered allmulticast mode [ 312.293937][T12703] xt_socket: unknown flags 0xfc [ 312.323424][T12697] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 312.379122][T12710] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1997'. [ 312.484956][T12718] wg1: entered promiscuous mode [ 312.492072][T12718] wg1: entered allmulticast mode [ 312.642762][T12722] tipc: Enabled bearer , priority 0 [ 312.726717][T12722] syzkaller0: entered promiscuous mode [ 312.732429][T12722] syzkaller0: entered allmulticast mode [ 312.738827][T12722] tipc: Resetting bearer [ 312.766676][T12721] tipc: Resetting bearer [ 313.074212][T12751] netlink: 'syz.3.2007': attribute type 10 has an invalid length. [ 313.673312][T12747] delete_channel: no stack [ 314.005400][T12721] tipc: Disabling bearer [ 314.024888][T12751] team0: Port device syz_tun added [ 314.030234][ T5837] tipc: Node number set to 2167800058 [ 314.134920][T12744] lo speed is unknown, defaulting to 1000 [ 315.111813][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.119103][ C0] bridge0: topology change detected, propagating [ 315.125938][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.133136][ C0] bridge0: topology change detected, propagating [ 316.119425][T12812] __nla_validate_parse: 9 callbacks suppressed [ 316.119442][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 316.581540][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2030'. [ 316.895470][ T5835] block nbd0: Receive control failed (result -32) [ 316.950174][T12847] netlink: 'syz.1.2036': attribute type 14 has an invalid length. [ 317.208382][T12859] ================================================================== [ 317.216466][T12859] BUG: KASAN: slab-use-after-free in macvlan_forward_source+0x512/0x630 [ 317.224807][T12859] Read of size 2 at addr ffff888049b96dfc by task syz.3.2038/12859 [ 317.232693][T12859] [ 317.235029][T12859] CPU: 1 UID: 0 PID: 12859 Comm: syz.3.2038 Not tainted syzkaller #0 PREEMPT(full) [ 317.235052][T12859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 317.235068][T12859] Call Trace: [ 317.235075][T12859] [ 317.235084][T12859] dump_stack_lvl+0x189/0x250 [ 317.235110][T12859] ? rcu_is_watching+0x15/0xb0 [ 317.235129][T12859] ? __kasan_check_byte+0x12/0x40 [ 317.235148][T12859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.235168][T12859] ? rcu_is_watching+0x15/0xb0 [ 317.235187][T12859] ? lock_release+0x4b/0x3e0 [ 317.235206][T12859] ? __virt_addr_valid+0x1c8/0x5c0 [ 317.235227][T12859] ? __virt_addr_valid+0x4a5/0x5c0 [ 317.235251][T12859] print_report+0xca/0x240 [ 317.235271][T12859] ? macvlan_forward_source+0x512/0x630 [ 317.235294][T12859] kasan_report+0x118/0x150 [ 317.235310][T12859] ? sock_def_readable+0xbe/0x550 [ 317.235333][T12859] ? macvlan_forward_source+0x512/0x630 [ 317.235361][T12859] macvlan_forward_source+0x512/0x630 [ 317.235390][T12859] macvlan_handle_frame+0x1ba/0x12e0 [ 317.235418][T12859] ? __pfx_macvlan_handle_frame+0x10/0x10 [ 317.235440][T12859] __netif_receive_skb_core+0x96f/0x3060 [ 317.235481][T12859] ? __kernel_text_address+0xd/0x40 [ 317.235506][T12859] ? unwind_get_return_address+0x4d/0x90 [ 317.235527][T12859] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 317.235550][T12859] ? arch_stack_walk+0xfc/0x150 [ 317.235575][T12859] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 317.235598][T12859] ? stack_trace_save+0x9c/0xe0 [ 317.235628][T12859] ? __pfx_stack_trace_save+0x10/0x10 [ 317.235650][T12859] ? stack_depot_save_flags+0x40/0x860 [ 317.235680][T12859] ? netif_receive_skb+0x115/0x790 [ 317.235701][T12859] ? netif_receive_skb+0x115/0x790 [ 317.235723][T12859] __netif_receive_skb+0x72/0x380 [ 317.235747][T12859] ? netif_receive_skb+0x115/0x790 [ 317.235767][T12859] netif_receive_skb+0x1cb/0x790 [ 317.235788][T12859] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 317.235806][T12859] ? __pfx_netif_receive_skb+0x10/0x10 [ 317.235829][T12859] ? tun_rx_batched+0x160/0x730 [ 317.235850][T12859] tun_rx_batched+0x1b9/0x730 [ 317.235868][T12859] ? __lock_acquire+0xab9/0xd20 [ 317.235887][T12859] ? __pfx_tun_rx_batched+0x10/0x10 [ 317.235908][T12859] ? tun_get_user+0x272f/0x3e90 [ 317.235934][T12859] tun_get_user+0x2b65/0x3e90 [ 317.235957][T12859] ? tun_get_user+0x6f6/0x3e90 [ 317.235977][T12859] ? tun_get_user+0x272f/0x3e90 [ 317.235998][T12859] ? __pfx_tun_get_user+0x10/0x10 [ 317.236018][T12859] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 317.236046][T12859] ? rcu_is_watching+0x15/0xb0 [ 317.236066][T12859] ? rcu_read_unlock_special+0x3a2/0x4b0 [ 317.236089][T12859] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 317.236109][T12859] ? tun_get+0x1c/0x2f0 [ 317.236132][T12859] ? tun_get+0x1c/0x2f0 [ 317.236152][T12859] tun_chr_write_iter+0x113/0x200 [ 317.236172][T12859] vfs_write+0x5c9/0xb30 [ 317.236195][T12859] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 317.236215][T12859] ? __pfx_vfs_write+0x10/0x10 [ 317.236243][T12859] ? __fget_files+0x2a/0x420 [ 317.236264][T12859] ksys_write+0x145/0x250 [ 317.236287][T12859] ? __pfx_ksys_write+0x10/0x10 [ 317.236310][T12859] ? do_syscall_64+0xbe/0xfa0 [ 317.236329][T12859] do_syscall_64+0xfa/0xfa0 [ 317.236345][T12859] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.236363][T12859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.236380][T12859] ? clear_bhb_loop+0x60/0xb0 [ 317.236400][T12859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.236418][T12859] RIP: 0033:0x7ff02ab8e17f [ 317.236433][T12859] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 317.236449][T12859] RSP: 002b:00007ff02ba4a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 317.236467][T12859] RAX: ffffffffffffffda RBX: 00007ff02ade6180 RCX: 00007ff02ab8e17f [ 317.236479][T12859] RDX: 000000000000002a RSI: 0000200000000840 RDI: 00000000000000c8 [ 317.236489][T12859] RBP: 00007ff02ac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 317.236499][T12859] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000000 [ 317.236509][T12859] R13: 00007ff02ade6218 R14: 00007ff02ade6180 R15: 00007ffd9a4a23f8 [ 317.236530][T12859] [ 317.236537][T12859] [ 317.642804][T12859] Allocated by task 12215: [ 317.647198][T12859] kasan_save_track+0x3e/0x80 [ 317.651861][T12859] __kasan_kmalloc+0x93/0xb0 [ 317.656428][T12859] __kvmalloc_node_noprof+0x5cd/0x910 [ 317.661782][T12859] futex_hash_allocate+0x43b/0xe60 [ 317.666877][T12859] copy_process+0x21aa/0x3c00 [ 317.671532][T12859] kernel_clone+0x21e/0x840 [ 317.676013][T12859] __se_sys_clone3+0x256/0x2d0 [ 317.680755][T12859] do_syscall_64+0xfa/0xfa0 [ 317.685239][T12859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.691107][T12859] [ 317.693407][T12859] Freed by task 12215: [ 317.697448][T12859] kasan_save_track+0x3e/0x80 [ 317.702105][T12859] __kasan_save_free_info+0x46/0x50 [ 317.707282][T12859] __kasan_slab_free+0x5c/0x80 [ 317.712026][T12859] kfree+0x19a/0x6d0 [ 317.715902][T12859] __mmput+0x38d/0x430 [ 317.719946][T12859] exit_mm+0x1da/0x2c0 [ 317.723995][T12859] do_exit+0x648/0x2300 [ 317.728131][T12859] do_group_exit+0x21c/0x2d0 [ 317.732701][T12859] __x64_sys_exit_group+0x3f/0x40 [ 317.737707][T12859] x64_sys_call+0x21f7/0x2200 [ 317.742359][T12859] do_syscall_64+0xfa/0xfa0 [ 317.746839][T12859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.752711][T12859] [ 317.755014][T12859] The buggy address belongs to the object at ffff888049b96000 [ 317.755014][T12859] which belongs to the cache kmalloc-cg-4k of size 4096 [ 317.769303][T12859] The buggy address is located 3580 bytes inside of [ 317.769303][T12859] freed 4096-byte region [ffff888049b96000, ffff888049b97000) [ 317.783249][T12859] [ 317.785551][T12859] The buggy address belongs to the physical page: [ 317.791949][T12859] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888049b94000 pfn:0x49b90 [ 317.801987][T12859] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 317.810460][T12859] memcg:ffff88807e122ec1 [ 317.814674][T12859] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 317.822636][T12859] page_type: f5(slab) [ 317.826595][T12859] raw: 00fff00000000040 ffff88801a030500 0000000000000000 dead000000000001 [ 317.835157][T12859] raw: ffff888049b94000 0000000000040003 00000000f5000000 ffff88807e122ec1 [ 317.843717][T12859] head: 00fff00000000040 ffff88801a030500 0000000000000000 dead000000000001 [ 317.852364][T12859] head: ffff888049b94000 0000000000040003 00000000f5000000 ffff88807e122ec1 [ 317.861011][T12859] head: 00fff00000000003 ffffea000126e401 00000000ffffffff 00000000ffffffff [ 317.869658][T12859] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 317.878298][T12859] page dumped because: kasan: bad access detected [ 317.884688][T12859] page_owner tracks the page as allocated [ 317.890379][T12859] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8850, tgid 8844 (syz.1.736), ts 165074214151, free_ts 160156552633 [ 317.911626][T12859] post_alloc_hook+0x240/0x2a0 [ 317.916376][T12859] get_page_from_freelist+0x2365/0x2440 [ 317.921897][T12859] __alloc_frozen_pages_noprof+0x181/0x370 [ 317.927679][T12859] alloc_pages_mpol+0x232/0x4a0 [ 317.932506][T12859] allocate_slab+0x96/0x350 [ 317.936986][T12859] ___slab_alloc+0xf56/0x1990 [ 317.941640][T12859] __slab_alloc+0x65/0x100 [ 317.946032][T12859] __kmalloc_noprof+0x471/0x7f0 [ 317.950866][T12859] __register_sysctl_table+0x72/0x1340 [ 317.956304][T12859] __addrconf_sysctl_register+0x328/0x4c0 [ 317.962009][T12859] addrconf_init_net+0x4d6/0x790 [ 317.966926][T12859] ops_init+0x35c/0x5c0 [ 317.971057][T12859] setup_net+0xfe/0x320 [ 317.975186][T12859] copy_net_ns+0x34e/0x4e0 [ 317.979582][T12859] create_new_namespaces+0x3f3/0x720 [ 317.984843][T12859] unshare_nsproxy_namespaces+0x11c/0x170 [ 317.990540][T12859] page last free pid 8623 tgid 8623 stack trace: [ 317.996840][T12859] __free_frozen_pages+0xbc4/0xd30 [ 318.001935][T12859] __put_partials+0x146/0x170 [ 318.006592][T12859] put_cpu_partial+0x1f2/0x2e0 [ 318.011330][T12859] __slab_free+0x2b9/0x390 [ 318.015725][T12859] qlist_free_all+0x97/0x140 [ 318.020297][T12859] kasan_quarantine_reduce+0x148/0x160 [ 318.025734][T12859] __kasan_slab_alloc+0x22/0x80 [ 318.030567][T12859] __kmalloc_noprof+0x3c3/0x7f0 [ 318.035406][T12859] tomoyo_realpath_from_path+0xe3/0x5d0 [ 318.040938][T12859] tomoyo_path_perm+0x213/0x4b0 [ 318.045765][T12859] security_inode_getattr+0x12f/0x330 [ 318.051117][T12859] __x64_sys_newfstat+0xfc/0x200 [ 318.056030][T12859] do_syscall_64+0xfa/0xfa0 [ 318.060510][T12859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.066382][T12859] [ 318.068683][T12859] Memory state around the buggy address: [ 318.074286][T12859] ffff888049b96c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.082322][T12859] ffff888049b96d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.090357][T12859] >ffff888049b96d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.098390][T12859] ^ [ 318.106344][T12859] ffff888049b96e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.114386][T12859] ffff888049b96e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.122420][T12859] ================================================================== [ 318.130584][T12859] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 318.137773][T12859] CPU: 1 UID: 0 PID: 12859 Comm: syz.3.2038 Not tainted syzkaller #0 PREEMPT(full) [ 318.147144][T12859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.157198][T12859] Call Trace: [ 318.160473][T12859] [ 318.163398][T12859] dump_stack_lvl+0x99/0x250 [ 318.167998][T12859] ? __asan_memcpy+0x40/0x70 [ 318.172592][T12859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.177797][T12859] ? __pfx__printk+0x10/0x10 [ 318.182390][T12859] vpanic+0x237/0x6d0 [ 318.186383][T12859] ? __pfx_vpanic+0x10/0x10 [ 318.190899][T12859] panic+0xb9/0xc0 [ 318.194626][T12859] ? __pfx_panic+0x10/0x10 [ 318.199046][T12859] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 318.204932][T12859] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 318.210821][T12859] ? macvlan_forward_source+0x512/0x630 [ 318.216355][T12859] check_panic_on_warn+0x89/0xb0 [ 318.221279][T12859] ? macvlan_forward_source+0x512/0x630 [ 318.226805][T12859] end_report+0x78/0x160 [ 318.231024][T12859] kasan_report+0x129/0x150 [ 318.235504][T12859] ? sock_def_readable+0xbe/0x550 [ 318.240518][T12859] ? macvlan_forward_source+0x512/0x630 [ 318.246051][T12859] macvlan_forward_source+0x512/0x630 [ 318.251411][T12859] macvlan_handle_frame+0x1ba/0x12e0 [ 318.256682][T12859] ? __pfx_macvlan_handle_frame+0x10/0x10 [ 318.262384][T12859] __netif_receive_skb_core+0x96f/0x3060 [ 318.268006][T12859] ? __kernel_text_address+0xd/0x40 [ 318.273188][T12859] ? unwind_get_return_address+0x4d/0x90 [ 318.278801][T12859] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 318.284935][T12859] ? arch_stack_walk+0xfc/0x150 [ 318.289776][T12859] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 318.295824][T12859] ? stack_trace_save+0x9c/0xe0 [ 318.300657][T12859] ? __pfx_stack_trace_save+0x10/0x10 [ 318.306010][T12859] ? stack_depot_save_flags+0x40/0x860 [ 318.311456][T12859] ? netif_receive_skb+0x115/0x790 [ 318.316549][T12859] ? netif_receive_skb+0x115/0x790 [ 318.321641][T12859] __netif_receive_skb+0x72/0x380 [ 318.326657][T12859] ? netif_receive_skb+0x115/0x790 [ 318.331751][T12859] netif_receive_skb+0x1cb/0x790 [ 318.336689][T12859] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 318.342476][T12859] ? __pfx_netif_receive_skb+0x10/0x10 [ 318.347921][T12859] ? tun_rx_batched+0x160/0x730 [ 318.352753][T12859] tun_rx_batched+0x1b9/0x730 [ 318.357416][T12859] ? __lock_acquire+0xab9/0xd20 [ 318.362249][T12859] ? __pfx_tun_rx_batched+0x10/0x10 [ 318.367427][T12859] ? tun_get_user+0x272f/0x3e90 [ 318.372264][T12859] tun_get_user+0x2b65/0x3e90 [ 318.376923][T12859] ? tun_get_user+0x6f6/0x3e90 [ 318.381671][T12859] ? tun_get_user+0x272f/0x3e90 [ 318.386513][T12859] ? __pfx_tun_get_user+0x10/0x10 [ 318.391522][T12859] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 318.398446][T12859] ? rcu_is_watching+0x15/0xb0 [ 318.403190][T12859] ? rcu_read_unlock_special+0x3a2/0x4b0 [ 318.408805][T12859] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 318.414248][T12859] ? tun_get+0x1c/0x2f0 [ 318.418389][T12859] ? tun_get+0x1c/0x2f0 [ 318.422537][T12859] tun_chr_write_iter+0x113/0x200 [ 318.427557][T12859] vfs_write+0x5c9/0xb30 [ 318.431818][T12859] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 318.437353][T12859] ? __pfx_vfs_write+0x10/0x10 [ 318.442106][T12859] ? __fget_files+0x2a/0x420 [ 318.446677][T12859] ksys_write+0x145/0x250 [ 318.450992][T12859] ? __pfx_ksys_write+0x10/0x10 [ 318.455825][T12859] ? do_syscall_64+0xbe/0xfa0 [ 318.460484][T12859] do_syscall_64+0xfa/0xfa0 [ 318.464972][T12859] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.470147][T12859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.476194][T12859] ? clear_bhb_loop+0x60/0xb0 [ 318.480851][T12859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.486720][T12859] RIP: 0033:0x7ff02ab8e17f [ 318.491118][T12859] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 318.510701][T12859] RSP: 002b:00007ff02ba4a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 318.519096][T12859] RAX: ffffffffffffffda RBX: 00007ff02ade6180 RCX: 00007ff02ab8e17f [ 318.527050][T12859] RDX: 000000000000002a RSI: 0000200000000840 RDI: 00000000000000c8 [ 318.535010][T12859] RBP: 00007ff02ac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 318.542970][T12859] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000000 [ 318.550928][T12859] R13: 00007ff02ade6218 R14: 00007ff02ade6180 R15: 00007ffd9a4a23f8 [ 318.558894][T12859] [ 318.562146][T12859] Kernel Offset: disabled [ 318.566445][T12859] Rebooting in 86400 seconds..