last executing test programs: 8.773624555s ago: executing program 3 (id=9581): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x149a40, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b1401"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x10) write(r3, &(0x7f00000000c0)="510003000000", 0x6) r4 = socket$kcm(0x2, 0x8, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x81, &(0x7f00000001c0)="020000000980ffff", 0x8) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000002034a94030008000400ffffffffffffaaaaaaaaaabb080045f0002c00000000002f9078ac1e0001e0000001000065580018907804e700000000000086ddffff000000009821d9f02f84492bbbd4be4a7a07f7270fbaebe2e58bf3bdde78b12eb4751b464bae68804e044ea798fa712ba4216e80c8c72337f678"], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 7.401352969s ago: executing program 2 (id=9592): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 6.4717781s ago: executing program 2 (id=9598): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x14, r4, 0x100, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x8001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x33) socket(0x2, 0x80805, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendfile(r5, r3, 0x0, 0x10000) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x38, r2, 0x239b5da1764946cd, 0x70bd2d, 0x25dfcbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "887f9e1804d2635ee9cfef1cb8"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40400d4) 6.01446501s ago: executing program 2 (id=9601): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) shutdown(r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000d00)=r5, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 5.197277086s ago: executing program 4 (id=9605): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0xd, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x41800, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket(0x10, 0x80003, 0x0) recvmmsg$unix(r8, &(0x7f0000000600)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000240)=""/151, 0x97}, {&(0x7f0000000340)=""/70, 0x46}, {&(0x7f0000000080)=""/55, 0x37}, {&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f00000003c0)=""/5, 0x5}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/65, 0x41}, {&(0x7f0000000500)=""/20, 0x14}], 0x9, &(0x7f0000000680)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}], 0x1, 0x102, &(0x7f00000007c0)={0x77359400}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.885295444s ago: executing program 2 (id=9606): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000700)=0x91, 0x4) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0x1, 0xfffffffc}}], 0x18, 0x4c00}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004441) shutdown(r2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_rxnfc={0x30, 0x7, 0x20000000009, {0xb, @udp_ip6_spec={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0x4e23, 0x1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, 0x7fff, 0x5, [0x10001, 0x6]}, @ah_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, {0x0, @remote, 0x3, 0x4, [0xfffffffa, 0x7f]}, 0x8, 0x8}}}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000003c0)={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000100)={r8, 0x7}, 0x8) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) socket(0x2b, 0x6, 0x8000) 4.695180744s ago: executing program 3 (id=9609): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a00000000000000010000002a000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f000000000000080000000000000001"], 0xc4}}, 0x8044) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r4, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r4, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @chandef_params, @beacon, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r7, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) write(r8, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @private0, 0x9}, 0x1c) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x9518b9f5c562785a}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) 4.577753099s ago: executing program 0 (id=9611): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 4.477279197s ago: executing program 0 (id=9612): r0 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r1, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}}) 4.294320396s ago: executing program 0 (id=9613): unshare(0x26020480) unshare(0x700) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000280)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000006380)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000000) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) socket$nl_xfrm(0x10, 0x3, 0x6) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) 4.278173446s ago: executing program 4 (id=9614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x9c}}, 0x0) 4.200055756s ago: executing program 4 (id=9615): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r6 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0100000000000000004000150000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000400009dd34e042f30a6aef4d2a3f9aef0c222df150000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001700)={{}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) shutdown(r5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r4, 0x1) bind$alg(r1, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) close(0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) 4.19853702s ago: executing program 3 (id=9625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x9c}}, 0x0) 4.023574884s ago: executing program 3 (id=9616): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) shutdown(r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000d00)=r5, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 4.019940004s ago: executing program 0 (id=9617): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001500)={0x0, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0x8}}, 0x8, 0xfffc}, &(0x7f00000015c0)=0x90) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(0xffffffffffffffff, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000007b030000000000008500000083000000790900000000000055090100000000009500000000000000bf91000000000000b70200000200000b8500000069000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 3.60261244s ago: executing program 1 (id=9619): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x8, {[@mss={0x2, 0x4, 0xb}]}}, {"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"}}}}, 0xfce) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = socket(0x1000000000000010, 0x80802, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000), 0x4) sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001500)={0x0, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0x8}}, 0x8, 0xfffc}, &(0x7f00000015c0)=0x90) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r5, 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000005c0)={r7, 0x0, 0x0, 0xfffffffe}, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000140000007b030000000000008500000083000000790900000000000055090100000000009500000000000000bf91000000000000b70200000200000b8500000069000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 3.597646451s ago: executing program 0 (id=9620): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x8, {[@mss={0x2, 0x4, 0xb}]}}, {"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"}}}}, 0xfce) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001500)={0x0, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0x8}}, 0x8, 0xfffc}, &(0x7f00000015c0)=0x90) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r5, 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000005c0)={r7, 0x0, 0x0, 0xfffffffe}, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000140000007b030000000000008500000083000000790900000000000055090100000000009500000000000000bf91000000000000b70200000200000b8500000069000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 3.41440543s ago: executing program 4 (id=9621): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, 0x0, 0x40000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'veth1_virt_wifi\x00', @random="010000201000"}) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) getpeername$unix(r3, &(0x7f0000000240)=@abs, &(0x7f00000000c0)=0x6e) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000000000000000000000071100a000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x98}}, 0x0) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) 3.108193373s ago: executing program 1 (id=9622): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.017204489s ago: executing program 0 (id=9623): r0 = socket(0x1e, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[], 0xd0}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x200342, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) unshare(0x2c020400) socket$rxrpc(0x21, 0x2, 0x2) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) 2.98489143s ago: executing program 3 (id=9624): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0xffff, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2=0xe0000001}}, {{0x2, 0x4e21, @local}}}, 0x108) 2.952521058s ago: executing program 1 (id=9626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x101, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, 0x0, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc47318ccc3455"], 0x48}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) 2.2991193s ago: executing program 3 (id=9627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.240718337s ago: executing program 1 (id=9628): unshare(0x26020480) unshare(0x700) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000280)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000006380)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000000) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) socket$nl_xfrm(0x10, 0x3, 0x6) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) 2.113052072s ago: executing program 1 (id=9629): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 1.853105245s ago: executing program 4 (id=9630): pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$tun(r0, &(0x7f0000000480)={@val={0x0, 0xfbfb}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @empty, @loopback, @broadcast, @rand_addr=0x64010100}}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000004c0)={r4, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0x6, 0xffdffffd}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) 1.618375108s ago: executing program 4 (id=9631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001500)={0x0, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0x8}}, 0x8, 0xfffc}, &(0x7f00000015c0)=0x90) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(0xffffffffffffffff, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000007b030000000000008500000083000000790900000000000055090100000000009500000000000000bf91000000000000b70200000200000b8500000069000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1.173380269s ago: executing program 1 (id=9632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) poll(0x0, 0x0, 0x7) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000d80)=[@hopopts={{0x20, 0x29, 0x36, {0x3c, 0x1, '\x00', [@padn, @generic={0x9}, @ra={0x5, 0x2, 0x4}]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x16}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x33, 0x4, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x41}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}], 0x78}}], 0x2, 0x4040005) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x1ad72f7) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000004000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a519007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 75.985882ms ago: executing program 2 (id=9633): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="dc52b390", 0x4}, {&(0x7f0000000100)="7681", 0x2}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000080)="ca2d", 0x2}, {0x0}], 0x5, 0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={r3, 0x7, 0x10}, &(0x7f0000000140)=0xc) close(r1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x14, r4, 0x300, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4011) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r5, 0x0, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 0s ago: executing program 2 (id=9634): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x8, {[@mss={0x2, 0x4, 0xb}]}}, {"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"}}}}, 0xfce) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = socket(0x1000000000000010, 0x80802, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000), 0x4) sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001500)={0x0, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0x8}}, 0x8, 0xfffc}, &(0x7f00000015c0)=0x90) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r5, 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000005c0)={r7, 0x0, 0x0, 0xfffffffe}, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000140000007b030000000000008500000083000000790900000000000055090100000000009500000000000000bf91000000000000b70200000200000b8500000069000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) kernel console output (not intermixed with test programs): unce:0kB free_pcp:9728kB local_pcp:5920kB free_cma:0kB [ 726.571120][T26449] lowmem_reserve[]: 0 0 0 0 0 [ 726.577108][T26449] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 726.591497][T26449] Node 0 DMA32: 1820*4kB (UME) 548*8kB (UM) 180*16kB (UME) 602*32kB (UME) 208*64kB (UME) 99*128kB (UME) 42*256kB (UME) 18*512kB (UME) 6*1024kB (UE) 0*2048kB 184*4096kB (M) = 839568kB [ 726.610824][T26449] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 726.624222][T26449] Node 1 Normal: 201*4kB (UME) 46*8kB (UME) 38*16kB (UME) 207*32kB (UME) 71*64kB (UME) 14*128kB (UME) 4*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3899284kB [ 726.644290][T26449] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 726.918762][T26449] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 726.948484][T26449] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 726.976763][T26449] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 727.019774][T26449] 46743 total pagecache pages [ 727.029326][T26449] 0 pages in swap cache [ 727.038257][T26449] Free swap = 124996kB [ 727.047605][T26449] Total swap = 124996kB [ 727.057721][T26449] 2097051 pages RAM [ 727.061545][T26449] 0 pages HighMem/MovableOnly [ 727.073292][T26449] 425645 pages reserved [ 727.093264][T26449] 0 pages cma reserved [ 727.410178][T26483] netlink: 120 bytes leftover after parsing attributes in process `syz.4.7847'. [ 727.634071][T26487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7849'. [ 728.909745][T26512] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7855'. [ 729.095679][T26516] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7855'. [ 729.413258][T26509] lo speed is unknown, defaulting to 1000 [ 729.676308][T26536] tipc: Enabled bearer , priority 0 [ 729.685701][T26536] syzkaller0: entered promiscuous mode [ 729.691351][T26536] syzkaller0: entered allmulticast mode [ 729.756334][T26536] tipc: Resetting bearer [ 729.757673][T26538] netlink: 'syz.4.7863': attribute type 1 has an invalid length. [ 729.771851][T26509] hsr0 speed is unknown, defaulting to 1000 [ 729.818767][T26538] 8021q: adding VLAN 0 to HW filter on device bond10 [ 729.832938][T26533] tipc: Resetting bearer [ 729.872812][T26533] tipc: Disabling bearer [ 729.904026][T26538] gretap1: entered promiscuous mode [ 729.930190][T26538] bond10: (slave gretap1): making interface the new active one [ 729.956432][T26538] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 730.089701][T26538] macvlan3: entered promiscuous mode [ 730.095375][T26538] macvlan3: entered allmulticast mode [ 730.102122][T26538] bond10: entered promiscuous mode [ 730.108484][T26538] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 730.117985][T26538] bond10: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 730.135881][T26538] bond10: left promiscuous mode [ 730.157555][T26546] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 730.158221][T26523] lo speed is unknown, defaulting to 1000 [ 730.250124][T26546] netlink: 'syz.0.7865': attribute type 10 has an invalid length. [ 730.647654][T26523] hsr0 speed is unknown, defaulting to 1000 [ 731.292697][T26572] netlink: 'syz.1.7873': attribute type 12 has an invalid length. [ 732.096127][T26585] tipc: Enabled bearer , priority 0 [ 732.104843][T26585] syzkaller0: entered promiscuous mode [ 732.110330][T26585] syzkaller0: entered allmulticast mode [ 732.138052][T26584] tipc: Resetting bearer [ 732.175679][T26584] tipc: Disabling bearer [ 732.385622][T26573] lo speed is unknown, defaulting to 1000 [ 732.459896][T26588] tun0: tun_chr_ioctl cmd 2148045848 [ 732.485768][T26588] tun0: tun_chr_ioctl cmd 21731 [ 732.947309][T26573] hsr0 speed is unknown, defaulting to 1000 [ 733.196930][T26592] lo speed is unknown, defaulting to 1000 [ 733.369024][T26610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7884'. [ 733.563817][T23590] page_pool_release_retry() stalled pool shutdown: id 188, 3329 inflight 181 sec [ 733.698031][T26592] hsr0 speed is unknown, defaulting to 1000 [ 733.979412][T26629] netlink: 'syz.1.7887': attribute type 10 has an invalid length. [ 734.492719][T26619] lo speed is unknown, defaulting to 1000 [ 734.672892][T26616] mpoa:mpoad_close: () going down [ 734.763676][T26619] hsr0 speed is unknown, defaulting to 1000 [ 734.811060][T26642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7891'. [ 735.274757][T26647] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7893'. [ 735.298497][T26658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7893'. [ 735.318790][T26658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7893'. [ 735.370282][T26647] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7893'. [ 735.958486][T26667] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 735.972684][T26671] tipc: Enabled bearer , priority 0 [ 736.033680][T26668] syzkaller0: entered promiscuous mode [ 736.039182][T26668] syzkaller0: entered allmulticast mode [ 736.049442][T26670] netlink: 'syz.2.7900': attribute type 10 has an invalid length. [ 736.119791][T26670] bond0: (slave wlan1): Opening slave failed [ 736.213910][T26668] tipc: Resetting bearer [ 736.262747][T26665] tipc: Resetting bearer [ 736.296331][T26665] tipc: Disabling bearer [ 736.307003][T26674] tipc: Enabled bearer , priority 0 [ 736.323908][T26674] tipc: Resetting bearer [ 736.363857][T26673] tipc: Disabling bearer [ 737.225470][T26709] tipc: Enabled bearer , priority 10 [ 737.286393][T26712] tipc: Enabled bearer , priority 0 [ 737.315699][T26712] syzkaller0: entered promiscuous mode [ 737.321194][T26712] syzkaller0: entered allmulticast mode [ 737.408175][T26712] tipc: Resetting bearer [ 737.473921][T26710] tipc: Resetting bearer [ 737.619235][T26710] tipc: Disabling bearer [ 737.922355][T26723] bond5: (slave veth13): Releasing active interface [ 737.937759][T26723] bond8: (slave gretap4): Releasing active interface [ 737.981138][T26723] bond9: (slave veth17): Releasing active interface [ 738.011903][T26723] bond10: (slave gretap5): Releasing active interface [ 738.037048][T26723] bond11: (slave bond12): Releasing backup interface [ 738.046800][T26723] bond11: (slave bond12): the permanent HWaddr of slave - ce:07:25:bf:08:84 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 738.069012][T26723] bond11: (slave gretap6): making interface the new active one [ 738.090684][T26723] bond11: (slave gretap6): Releasing backup interface [ 738.108756][T26723] bond13: (slave veth19): Releasing backup interface [ 738.185493][T26723] bond14: (slave bridge11): Releasing backup interface [ 738.229752][T26726] team0: Failed to send options change via netlink (err -105) [ 738.290895][T26726] team0: Mode changed to "activebackup" [ 738.749460][T26736] syzkaller0: entered promiscuous mode [ 738.786283][T26736] syzkaller0: entered allmulticast mode [ 739.658240][T26782] netlink: 248 bytes leftover after parsing attributes in process `syz.3.7934'. [ 739.719061][T26784] tipc: Enabled bearer , priority 0 [ 739.728657][T26784] syzkaller0: entered promiscuous mode [ 739.734821][T26784] syzkaller0: entered allmulticast mode [ 739.761447][T26784] tipc: Resetting bearer [ 739.768045][T26784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.781318][T26783] tipc: Resetting bearer [ 739.817606][T26783] tipc: Disabling bearer [ 739.956991][T26787] tipc: Enabling of bearer rejected, failed to enable media [ 741.059666][T26817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7940'. [ 741.105563][T26808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7939'. [ 741.120323][T26808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7939'. [ 741.172074][T26815] netlink: 'syz.2.7939': attribute type 13 has an invalid length. [ 741.214918][T26815] netlink: 'syz.2.7939': attribute type 17 has an invalid length. [ 741.262825][T26805] lo speed is unknown, defaulting to 1000 [ 741.484229][T26823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7941'. [ 741.600234][T26815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 741.733111][T26805] hsr0 speed is unknown, defaulting to 1000 [ 741.734059][T26807] lo speed is unknown, defaulting to 1000 [ 741.802978][T26827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7942'. [ 742.619509][T26807] hsr0 speed is unknown, defaulting to 1000 [ 742.926995][T26836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.692795][T26883] mac80211_hwsim hwsim28 wlan1: left allmulticast mode [ 744.772746][T26883] netlink: 'syz.0.7958': attribute type 10 has an invalid length. [ 745.367341][T26903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7964'. [ 745.444056][T26884] lo speed is unknown, defaulting to 1000 [ 745.654073][T26904] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7963'. [ 745.766803][T26912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7966'. [ 746.071124][T26922] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7969'. [ 746.113121][T26884] hsr0 speed is unknown, defaulting to 1000 [ 746.238278][T26921] gtp0: left allmulticast mode [ 746.249418][T26921] macsec2: left allmulticast mode [ 746.264289][T26921] team0: left allmulticast mode [ 746.271684][T26921] geneve2: left allmulticast mode [ 746.404614][T26926] tipc: Enabling of bearer rejected, failed to enable media [ 747.131660][T26947] netlink: 'syz.1.7976': attribute type 16 has an invalid length. [ 747.160259][T26947] netlink: 'syz.1.7976': attribute type 17 has an invalid length. [ 747.186902][T26950] tipc: Enabled bearer , priority 0 [ 747.227123][T26954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7976'. [ 747.266999][T26945] syzkaller0: entered promiscuous mode [ 747.272783][T26945] syzkaller0: entered allmulticast mode [ 747.273085][T26947] IPv6: NLM_F_REPLACE set, but no existing node found! [ 747.304419][T26955] netlink: 'syz.2.7977': attribute type 1 has an invalid length. [ 747.322762][T26956] netlink: 'syz.3.7975': attribute type 10 has an invalid length. [ 747.334029][T26945] tipc: Resetting bearer [ 747.352154][T26955] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7977'. [ 747.398185][T26944] tipc: Resetting bearer [ 747.599039][T26944] tipc: Disabling bearer [ 747.832007][T26967] netlink: 'syz.0.7980': attribute type 12 has an invalid length. [ 747.900851][T26967] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7980'. [ 748.057315][T26980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7982'. [ 748.067612][T26980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7982'. [ 748.310983][T26982] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7983'. [ 748.416275][T26984] tipc: Enabling of bearer rejected, failed to enable media [ 748.791507][T26997] pim6reg: entered allmulticast mode [ 748.805014][T26997] pim6reg: left allmulticast mode [ 749.084126][T26974] lo speed is unknown, defaulting to 1000 [ 749.421338][T27003] netlink: 'syz.4.7988': attribute type 10 has an invalid length. [ 749.682926][T27024] netlink: 'syz.4.7990': attribute type 13 has an invalid length. [ 749.692236][T27023] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 749.716287][T27024] netlink: 'syz.4.7990': attribute type 17 has an invalid length. [ 749.835417][T27024] erspan0: left promiscuous mode [ 749.919619][T27024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.057630][T27024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 750.077227][T26974] hsr0 speed is unknown, defaulting to 1000 [ 750.112929][T27010] lo speed is unknown, defaulting to 1000 [ 750.526295][T27022] lo speed is unknown, defaulting to 1000 [ 750.724947][T27010] hsr0 speed is unknown, defaulting to 1000 [ 750.773479][T27022] hsr0 speed is unknown, defaulting to 1000 [ 751.551906][T27028] lo speed is unknown, defaulting to 1000 [ 751.945714][T27028] hsr0 speed is unknown, defaulting to 1000 [ 752.934787][T27061] tipc: Enabling of bearer rejected, failed to enable media [ 752.996618][T27068] netlink: 'syz.2.8001': attribute type 10 has an invalid length. [ 753.018225][T27068] bond0: (slave wlan1): Opening slave failed [ 753.258698][T27078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8003'. [ 753.267808][T27078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8003'. [ 753.307110][T27079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8002'. [ 753.901267][T27097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8017'. [ 753.957079][T27101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8008'. [ 753.976796][T27102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8017'. [ 754.331606][T27117] netlink: 'syz.1.8011': attribute type 1 has an invalid length. [ 754.372749][T27117] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8011'. [ 755.328006][T27138] tipc: Enabled bearer , priority 0 [ 755.336031][T27138] syzkaller0: entered promiscuous mode [ 755.341515][T27138] syzkaller0: entered allmulticast mode [ 755.371433][T27138] tipc: Resetting bearer [ 755.383968][T27137] tipc: Resetting bearer [ 755.489607][T27137] tipc: Disabling bearer [ 755.798383][T27143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8021'. [ 756.005544][T27149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8022'. [ 756.247941][T27155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8025'. [ 756.782670][T27172] tipc: Enabled bearer , priority 0 [ 756.817490][T27172] syzkaller0: entered promiscuous mode [ 756.823001][T27172] syzkaller0: entered allmulticast mode [ 757.141029][T27178] tipc: Resetting bearer [ 757.201990][T27169] tipc: Resetting bearer [ 757.308214][T27169] tipc: Disabling bearer [ 757.484417][T27183] tipc: Enabled bearer , priority 0 [ 757.495935][T27183] syzkaller0: entered promiscuous mode [ 757.501449][T27183] syzkaller0: entered allmulticast mode [ 757.515016][T27183] tipc: Resetting bearer [ 757.527579][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.536024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.573850][T27180] tipc: Resetting bearer [ 757.602315][T27180] tipc: Disabling bearer [ 757.622654][T27151] lo speed is unknown, defaulting to 1000 [ 757.622845][T27186] tipc: Enabled bearer , priority 10 [ 757.807150][T27198] tipc: Enabling of bearer rejected, failed to enable media [ 758.549479][T27191] lo speed is unknown, defaulting to 1000 [ 758.568967][T27151] hsr0 speed is unknown, defaulting to 1000 [ 759.008283][T27191] hsr0 speed is unknown, defaulting to 1000 [ 759.393343][T27230] tipc: Enabled bearer , priority 0 [ 759.472819][T27227] syzkaller0: entered promiscuous mode [ 759.478466][T27227] syzkaller0: entered allmulticast mode [ 759.489187][T27222] lo speed is unknown, defaulting to 1000 [ 759.576913][T27227] tipc: Resetting bearer [ 759.655043][T27226] tipc: Resetting bearer [ 759.778705][T27226] tipc: Disabling bearer [ 759.933418][T27222] hsr0 speed is unknown, defaulting to 1000 [ 760.132014][T27235] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 760.339341][T27217] lo speed is unknown, defaulting to 1000 [ 760.478226][T27241] geneve4: entered promiscuous mode [ 760.735452][T27247] tipc: Enabling of bearer rejected, failed to enable media [ 761.140972][T27217] hsr0 speed is unknown, defaulting to 1000 [ 761.365364][T27259] __nla_validate_parse: 1 callbacks suppressed [ 761.365381][T27259] netlink: 264 bytes leftover after parsing attributes in process `syz.0.8056'. [ 761.798572][T27267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8059'. [ 762.280917][T27285] tipc: Enabling of bearer rejected, failed to enable media [ 762.324917][T27287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.341785][T27287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8066'. [ 762.426383][T27294] IPVS: Unknown mcast interface: bond0 [ 762.472169][T27294] IPVS: stopping backup sync thread 22304 ... [ 762.527991][T27301] netlink: 260 bytes leftover after parsing attributes in process `syz.1.8068'. [ 762.585843][T27294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8068'. [ 762.633473][T27294] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8068'. [ 763.041366][T27307] tipc: Enabling of bearer rejected, already enabled [ 763.778813][T27327] nbd: nbd0 already in use [ 763.789296][T27327] block nbd0: NBD_DISCONNECT [ 763.812960][T27327] block nbd0: Send disconnect failed -32 [ 763.828705][T27327] block nbd0: shutting down sockets [ 763.902321][T27333] netlink: 87 bytes leftover after parsing attributes in process `syz.3.8077'. [ 764.012476][T27329] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 764.047013][T27329] syzkaller0: entered promiscuous mode [ 764.053228][T27329] syzkaller0: entered allmulticast mode [ 764.085190][T27338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8081'. [ 764.869783][T27369] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8089'. [ 764.883636][T27369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8089'. [ 766.315844][T27372] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 766.321529][T27370] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 766.337902][T27370] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 766.354078][T27370] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 766.487946][T27374] tipc: Enabled bearer , priority 0 [ 766.501756][T27374] syzkaller0: entered promiscuous mode [ 766.508011][T27374] syzkaller0: entered allmulticast mode [ 766.532033][T27379] netlink: 'syz.3.8091': attribute type 4 has an invalid length. [ 766.547905][T27376] tipc: Enabled bearer , priority 0 [ 766.561008][T27376] syzkaller0: entered promiscuous mode [ 766.568190][T27376] syzkaller0: entered allmulticast mode [ 766.589020][T27374] tipc: Resetting bearer [ 766.596857][T27382] bpq0: entered promiscuous mode [ 766.611272][T27376] tipc: Resetting bearer [ 766.637397][T27373] tipc: Resetting bearer [ 766.671677][T27373] tipc: Disabling bearer [ 766.717671][T27375] tipc: Resetting bearer [ 766.778706][T27375] tipc: Disabling bearer [ 766.967806][T27389] tipc: Enabled bearer , priority 0 [ 766.977905][T27389] syzkaller0: entered promiscuous mode [ 766.987457][T27389] syzkaller0: entered allmulticast mode [ 767.013526][T27391] tipc: Enabled bearer , priority 0 [ 767.024684][T27391] tipc: Resetting bearer [ 767.066450][T27390] tipc: Disabling bearer [ 767.167128][T27389] tipc: Resetting bearer [ 767.193504][T27388] tipc: Resetting bearer [ 767.257293][T27388] tipc: Disabling bearer [ 767.288898][T27404] tipc: Enabled bearer , priority 0 [ 767.298546][T27404] syzkaller0: entered promiscuous mode [ 767.304930][T27404] syzkaller0: entered allmulticast mode [ 767.334447][T27404] tipc: Resetting bearer [ 767.376482][T27402] tipc: Resetting bearer [ 767.441861][T27421] __nla_validate_parse: 1 callbacks suppressed [ 767.441879][T27421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8102'. [ 767.459525][T27402] tipc: Disabling bearer [ 767.840352][T27444] netlink: 'syz.4.8105': attribute type 10 has an invalid length. [ 767.877517][T27441] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 768.314511][T27454] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8109'. [ 768.481985][T27460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 768.559825][T27464] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8113'. [ 768.576557][T27467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8111'. [ 768.997288][T27476] syzkaller0: entered promiscuous mode [ 769.002787][T27476] syzkaller0: entered allmulticast mode [ 769.479147][T27483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8118'. [ 769.506264][T27483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8118'. [ 769.775144][T27495] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8119'. [ 769.835098][T27499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8122'. [ 770.298883][T27505] vlan1: entered promiscuous mode [ 770.304892][T27505] vlan1: entered allmulticast mode [ 770.310030][T27505] hsr_slave_1: entered allmulticast mode [ 770.410390][T27505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8124'. [ 771.739931][T27522] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8126'. [ 771.929289][T27509] tipc: Enabling of bearer rejected, failed to enable media [ 772.136308][T27522] bond0: entered promiscuous mode [ 772.141374][T27522] bond0: entered allmulticast mode [ 772.184330][T27522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.690547][T27540] __nla_validate_parse: 2 callbacks suppressed [ 772.690565][T27540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8132'. [ 772.713574][T27540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8132'. [ 772.755199][T27527] lo speed is unknown, defaulting to 1000 [ 773.417382][T27527] hsr0 speed is unknown, defaulting to 1000 [ 773.673806][T27545] lo speed is unknown, defaulting to 1000 [ 774.134357][T27545] hsr0 speed is unknown, defaulting to 1000 [ 774.460768][T27571] netlink: 'syz.1.8138': attribute type 10 has an invalid length. [ 774.534338][T23590] page_pool_release_retry() stalled pool shutdown: id 123, 3329 inflight 363 sec [ 775.069781][T27578] tipc: Enabled bearer , priority 0 [ 775.098846][T27578] syzkaller0: entered promiscuous mode [ 775.105216][T27578] syzkaller0: entered allmulticast mode [ 775.144989][T27582] tipc: New replicast peer: 255.255.255.255 [ 775.166067][T27582] tipc: Enabled bearer , priority 10 [ 775.175000][T27576] tipc: Resetting bearer [ 775.254360][T27576] tipc: Disabling bearer [ 775.737997][T27587] tipc: Enabled bearer , priority 0 [ 775.793874][T27587] syzkaller0: entered promiscuous mode [ 775.824356][T27587] syzkaller0: entered allmulticast mode [ 775.934090][T27587] tipc: Resetting bearer [ 775.963117][T27586] tipc: Resetting bearer [ 776.134640][T27586] tipc: Disabling bearer [ 776.312632][T27596] netlink: 'syz.0.8146': attribute type 1 has an invalid length. [ 776.338515][T27596] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8146'. [ 776.828799][T27605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8149'. [ 776.857746][T27605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8149'. [ 776.929432][T27599] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8148'. [ 777.641810][T27631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8156'. [ 777.726069][T27633] rdma_rxe: rxe_newlink: failed to add wg0 [ 778.010324][T27641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8161'. [ 778.053605][T27641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8161'. [ 778.068565][T27643] netlink: 'syz.1.8162': attribute type 3 has an invalid length. [ 778.105695][T27643] lo: entered allmulticast mode [ 778.192678][T27643] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.244033][T27643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 778.331705][T27642] lo: left allmulticast mode [ 778.582748][T27658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8168'. [ 779.321813][T27650] lo speed is unknown, defaulting to 1000 [ 780.086476][T27650] hsr0 speed is unknown, defaulting to 1000 [ 780.240856][T27701] netlink: 'syz.1.8181': attribute type 2 has an invalid length. [ 780.275931][T27689] lo speed is unknown, defaulting to 1000 [ 780.395917][T27701] k›*·]‘: entered promiscuous mode [ 780.492928][T27704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 780.564520][T27703] batman_adv: batadv0: Adding interface: ip6gretap3 [ 780.571459][T27703] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 780.674281][T27703] batman_adv: batadv0: Interface activated: ip6gretap3 [ 780.785094][T27704] veth0_to_team: entered promiscuous mode [ 780.791075][T27704] veth0_to_team: entered allmulticast mode [ 781.043031][T27689] hsr0 speed is unknown, defaulting to 1000 [ 781.459736][T27715] netlink: 'syz.2.8183': attribute type 1 has an invalid length. [ 781.506271][T27715] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8183'. [ 781.814130][T27719] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 781.847438][T27719] netlink: 'syz.0.8185': attribute type 10 has an invalid length. [ 782.459342][T27740] netlink: 'syz.0.8189': attribute type 16 has an invalid length. [ 782.467682][T27740] netlink: 'syz.0.8189': attribute type 17 has an invalid length. [ 782.578395][T27740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.621402][T27740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 783.296286][T27750] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8192'. [ 783.671058][T27768] netlink: 'syz.0.8198': attribute type 10 has an invalid length. [ 783.708654][T27768] netlink: 'syz.0.8198': attribute type 10 has an invalid length. [ 783.743976][T27772] netlink: 'syz.1.8199': attribute type 10 has an invalid length. [ 783.752892][T27772] netlink: 'syz.1.8199': attribute type 10 has an invalid length. [ 783.817401][T27771] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8201'. [ 783.842602][T27775] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 783.973606][T27776] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8201'. [ 784.098246][T27752] lo speed is unknown, defaulting to 1000 [ 784.747129][T27796] netlink: 248 bytes leftover after parsing attributes in process `syz.4.8206'. [ 785.044939][T27799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8207'. [ 785.066182][T27799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8207'. [ 785.076596][T27752] hsr0 speed is unknown, defaulting to 1000 [ 785.465485][T27810] tipc: Enabled bearer , priority 0 [ 785.504734][T27802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8209'. [ 785.540859][T27810] tipc: Resetting bearer [ 785.873683][T27806] tipc: Disabling bearer [ 785.960902][T27821] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8212'. [ 786.033031][T27818] veth13: entered promiscuous mode [ 786.196515][T27824] !: renamed from dummy0 (while UP) [ 786.535325][T27835] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8217'. [ 786.547706][T27835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8217'. [ 786.604636][T27838] netlink: 'syz.0.8217': attribute type 4 has an invalid length. [ 787.357988][T27856] netlink: 'syz.2.8222': attribute type 4 has an invalid length. [ 787.536397][T27860] syzkaller0: entered promiscuous mode [ 787.563937][T27860] syzkaller0: entered allmulticast mode [ 788.110012][T27879] netlink: 'syz.3.8226': attribute type 1 has an invalid length. [ 789.870693][T27918] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 790.149041][T27921] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 790.201275][T27926] syzkaller0: entered promiscuous mode [ 790.222656][T27926] syzkaller0: entered allmulticast mode [ 791.693526][T27924] lo speed is unknown, defaulting to 1000 [ 791.956044][T27949] netlink: 'syz.1.8242': attribute type 4 has an invalid length. [ 792.236044][T27959] netlink: 'syz.3.8244': attribute type 4 has an invalid length. [ 792.361710][T27924] hsr0 speed is unknown, defaulting to 1000 [ 792.975292][T27963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.992713][T27963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.078467][T27971] sctp: [Deprecated]: syz.3.8247 (pid 27971) Use of int in max_burst socket option. [ 793.078467][T27971] Use struct sctp_assoc_value instead [ 793.164875][T27970] __nla_validate_parse: 7 callbacks suppressed [ 793.164894][T27970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8248'. [ 793.276094][T27976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8248'. [ 793.293150][T27977] team0: Unable to change to the same mode the team is in [ 794.074163][T27997] syzkaller0: entered promiscuous mode [ 794.079746][T27997] syzkaller0: entered allmulticast mode [ 794.351833][T28008] netlink: 'syz.1.8259': attribute type 4 has an invalid length. [ 794.364371][T19764] page_pool_release_retry() stalled pool shutdown: id 188, 3329 inflight 242 sec [ 794.712848][T28019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.530917][T28031] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 795.541534][T28030] IPVS: stopping backup sync thread 28031 ... [ 795.556084][T28030] netlink: 260 bytes leftover after parsing attributes in process `syz.4.8264'. [ 795.575226][T28030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8264'. [ 795.588159][T28030] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8264'. [ 795.777213][T28042] netlink: 'syz.3.8269': attribute type 4 has an invalid length. [ 796.419904][T28058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8273'. [ 796.448386][T28058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8273'. [ 796.813797][T28049] lo speed is unknown, defaulting to 1000 [ 797.514927][T28059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.099713][T28060] lo speed is unknown, defaulting to 1000 [ 798.123815][T28049] hsr0 speed is unknown, defaulting to 1000 [ 798.420125][T28081] bpq0: left promiscuous mode [ 798.629617][T28084] netlink: 'syz.3.8278': attribute type 10 has an invalid length. [ 798.718247][T28060] hsr0 speed is unknown, defaulting to 1000 [ 798.833662][T28088] : entered promiscuous mode [ 799.207616][T28096] netlink: 'syz.1.8284': attribute type 4 has an invalid length. [ 799.220573][T28099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8285'. [ 799.229965][T28099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8285'. [ 799.239089][T28096] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8284'. [ 799.469313][T28104] syzkaller0: entered promiscuous mode [ 799.478090][T28104] syzkaller0: entered allmulticast mode [ 799.720538][T28102] netlink: 'syz.1.8287': attribute type 10 has an invalid length. [ 799.966697][T28094] lo speed is unknown, defaulting to 1000 [ 800.108658][T28118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 800.178175][T28118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8290'. [ 800.307983][T28121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8291'. [ 801.007674][T28094] hsr0 speed is unknown, defaulting to 1000 [ 801.293212][T28136] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 801.960922][T28150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8296'. [ 801.962769][T28152] netlink: 'syz.1.8297': attribute type 4 has an invalid length. [ 801.970191][T28150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8296'. [ 802.118204][T28156] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 803.366823][T28191] syzkaller0: entered promiscuous mode [ 803.424787][T28191] syzkaller0: entered allmulticast mode [ 803.479645][T28193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8310'. [ 803.490750][T28193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8310'. [ 803.545085][T28197] netlink: 'syz.2.8309': attribute type 4 has an invalid length. [ 803.691221][T28203] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8313'. [ 803.720376][T28203] unsupported nlmsg_type 40 [ 807.070364][T28225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8321'. [ 807.081937][T28225] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 807.867795][T28247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8325'. [ 807.878006][T28247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8325'. [ 808.304193][T28259] syzkaller0: entered promiscuous mode [ 808.351865][T28259] syzkaller0: entered allmulticast mode [ 809.262457][T28288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 809.467606][T28297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8337'. [ 809.512279][T28297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8337'. [ 809.650218][T28304] netlink: 'syz.0.8339': attribute type 21 has an invalid length. [ 809.678875][T28304] ipvlan2: entered promiscuous mode [ 809.687163][T28304] bridge0: port 1(ipvlan2) entered blocking state [ 809.697534][T28304] bridge0: port 1(ipvlan2) entered disabled state [ 809.705425][T28304] ipvlan2: entered allmulticast mode [ 809.723116][T28304] 0ªî{X¹¦: entered allmulticast mode [ 809.764983][T28304] ipvlan2: left allmulticast mode [ 809.778717][T28304] 0ªî{X¹¦: left allmulticast mode [ 811.253096][T28327] syzkaller1: entered allmulticast mode [ 811.792695][T28338] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 811.823679][T28336] syzkaller0: entered promiscuous mode [ 811.843426][T28336] syzkaller0: entered allmulticast mode [ 811.891958][T28340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8349'. [ 811.901055][T28340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8349'. [ 812.073748][T28344] syzkaller0: entered promiscuous mode [ 812.103639][T28344] syzkaller0: entered allmulticast mode [ 812.146098][T28348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.567444][T28364] syzkaller1: entered allmulticast mode [ 812.632401][T28366] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8356'. [ 813.214650][T28381] batman_adv: batadv0: Interface deactivated: ip6gretap3 [ 813.243491][T28381] batman_adv: batadv0: Removing interface: ip6gretap3 [ 813.399606][T28372] netlink: 'syz.2.8357': attribute type 10 has an invalid length. [ 814.683935][T28410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8366'. [ 815.112604][T28421] netlink: 'syz.1.8367': attribute type 2 has an invalid length. [ 815.140540][T28421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8367'. [ 815.691815][T28434] Unsupported ieee802154 address type: 0 [ 816.491410][T28424] lo speed is unknown, defaulting to 1000 [ 817.063817][T28466] netlink: 'syz.3.8377': attribute type 4 has an invalid length. [ 817.247286][T28424] hsr0 speed is unknown, defaulting to 1000 [ 817.783581][T28479] syz.3.8380: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 817.865263][T28479] CPU: 1 UID: 0 PID: 28479 Comm: syz.3.8380 Not tainted 6.16.0-syzkaller-12122-g3b5ca25ecfa8 #0 PREEMPT(full) [ 817.865318][T28479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 817.865339][T28479] Call Trace: [ 817.865347][T28479] [ 817.865356][T28479] dump_stack_lvl+0x189/0x250 [ 817.865388][T28479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 817.865412][T28479] ? __pfx__printk+0x10/0x10 [ 817.865438][T28479] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 817.865461][T28479] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 817.865485][T28479] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 817.865511][T28479] warn_alloc+0x214/0x310 [ 817.865540][T28479] ? stack_depot_save_flags+0x40/0x860 [ 817.865565][T28479] ? __pfx_warn_alloc+0x10/0x10 [ 817.865601][T28479] ? kasan_save_track+0x4f/0x80 [ 817.865625][T28479] ? xskq_create+0x56/0x170 [ 817.865645][T28479] ? xsk_init_queue+0xb0/0x110 [ 817.865663][T28479] ? xsk_setsockopt+0x4dc/0x8d0 [ 817.865680][T28479] ? do_sock_setsockopt+0x17c/0x1b0 [ 817.865705][T28479] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 817.865728][T28479] ? do_syscall_64+0xfa/0x3b0 [ 817.865750][T28479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.865785][T28479] __vmalloc_node_range_noprof+0x125/0x12f0 [ 817.865846][T28479] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 817.865880][T28479] ? __kasan_kmalloc+0x93/0xb0 [ 817.865907][T28479] vmalloc_user_noprof+0xad/0xf0 [ 817.865933][T28479] ? xskq_create+0xbf/0x170 [ 817.865955][T28479] xskq_create+0xbf/0x170 [ 817.865980][T28479] xsk_init_queue+0xb0/0x110 [ 817.866003][T28479] xsk_setsockopt+0x4dc/0x8d0 [ 817.866026][T28479] ? __pfx_xsk_setsockopt+0x10/0x10 [ 817.866047][T28479] ? __pfx_aa_sk_perm+0x10/0x10 [ 817.866076][T28479] ? aa_sock_opt_perm+0xff/0x1b0 [ 817.866105][T28479] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 817.866125][T28479] ? __pfx_xsk_setsockopt+0x10/0x10 [ 817.866147][T28479] do_sock_setsockopt+0x17c/0x1b0 [ 817.866176][T28479] __x64_sys_setsockopt+0x13f/0x1b0 [ 817.866208][T28479] do_syscall_64+0xfa/0x3b0 [ 817.866230][T28479] ? lockdep_hardirqs_on+0x9c/0x150 [ 817.866251][T28479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.866270][T28479] ? clear_bhb_loop+0x60/0xb0 [ 817.866294][T28479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.866312][T28479] RIP: 0033:0x7fcd57b8ebe9 [ 817.866329][T28479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.866346][T28479] RSP: 002b:00007fcd55dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 817.866366][T28479] RAX: ffffffffffffffda RBX: 00007fcd57db6090 RCX: 00007fcd57b8ebe9 [ 817.866380][T28479] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 817.866391][T28479] RBP: 00007fcd57c11e19 R08: 0000000000000004 R09: 0000000000000000 [ 817.866404][T28479] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.866416][T28479] R13: 00007fcd57db6128 R14: 00007fcd57db6090 R15: 00007fff98ea2c38 [ 817.866448][T28479] [ 817.866455][T28479] Mem-Info: [ 818.221185][T28479] active_anon:10243 inactive_anon:0 isolated_anon:0 [ 818.221185][T28479] active_file:1419 inactive_file:40123 isolated_file:0 [ 818.221185][T28479] unevictable:768 dirty:477 writeback:0 [ 818.221185][T28479] slab_reclaimable:12091 slab_unreclaimable:267369 [ 818.221185][T28479] mapped:39450 shmem:4453 pagetables:1036 [ 818.221185][T28479] sec_pagetables:0 bounce:0 [ 818.221185][T28479] kernel_misc_reclaimable:0 [ 818.221185][T28479] free:1133444 free_pcp:22577 free_cma:0 [ 818.317325][T28479] Node 0 active_anon:45072kB inactive_anon:0kB active_file:5676kB inactive_file:160292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:161900kB dirty:1904kB writeback:0kB shmem:20276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13392kB pagetables:4012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 818.416239][T28479] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 818.531659][T28479] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 818.550991][T28449] lo speed is unknown, defaulting to 1000 [ 818.647334][T28479] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 818.675643][T28479] Node 0 DMA32 free:621064kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43128kB inactive_anon:0kB active_file:5676kB inactive_file:158720kB unevictable:1536kB writepending:1904kB present:3129332kB managed:2557520kB mlocked:0kB bounce:0kB free_pcp:85380kB local_pcp:26132kB free_cma:0kB [ 818.728056][T28479] lowmem_reserve[]: 0 0 1 1 1 [ 818.732928][T28479] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 818.813016][T28479] lowmem_reserve[]: 0 0 0 0 0 [ 818.823466][T28479] Node 1 Normal free:3901624kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7456kB local_pcp:3296kB free_cma:0kB [ 818.923514][T28479] lowmem_reserve[]: 0 0 0 0 0 [ 818.948563][T28479] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 819.003351][T28479] Node 0 DMA32: 4435*4kB (UM) 1137*8kB (UME) 825*16kB (UM) 607*32kB (UME) 36*64kB (UME) 54*128kB (M) 32*256kB (UM) 13*512kB (M) 7*1024kB (UM) 5*2048kB (UM) 130*4096kB (UM) = 633412kB [ 819.063291][T28479] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 819.080734][T28479] Node 1 Normal: 204*4kB (UME) 47*8kB (UME) 39*16kB (UME) 233*32kB (UME) 88*64kB (UME) 17*128kB (UME) 4*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3901624kB [ 819.106106][T28479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 819.118893][T28479] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 819.131154][T28479] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 819.143465][T28479] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 819.152897][T28479] 46974 total pagecache pages [ 819.158376][T28479] 0 pages in swap cache [ 819.162535][T28479] Free swap = 124996kB [ 819.166931][T28479] Total swap = 124996kB [ 819.171271][T28479] 2097051 pages RAM [ 819.175212][T28479] 0 pages HighMem/MovableOnly [ 819.179906][T28479] 425645 pages reserved [ 819.184164][T28479] 0 pages cma reserved [ 819.191668][T28449] hsr0 speed is unknown, defaulting to 1000 [ 819.370068][T28507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8386'. [ 819.685196][T28512] netlink: 'syz.4.8388': attribute type 1 has an invalid length. [ 820.157212][T28520] lo: entered allmulticast mode [ 820.188630][T28520] dvmrp1: entered allmulticast mode [ 820.226707][T28519] lo: left allmulticast mode [ 820.446371][T28510] netlink: 'syz.3.8386': attribute type 13 has an invalid length. [ 820.473321][T28510] netlink: 'syz.3.8386': attribute type 17 has an invalid length. [ 820.999689][T28510] tipc: Resetting bearer [ 821.098419][T28510] tipc: Resetting bearer [ 821.174819][T28510] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.212045][T28510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 821.235798][T23069] lo speed is unknown, defaulting to 1000 [ 821.244687][T23069] syz0: Port: 1 Link ACTIVE [ 821.250528][T23579] lo speed is unknown, defaulting to 1000 [ 821.280903][T28507] lo speed is unknown, defaulting to 1000 [ 821.959401][T28507] hsr0 speed is unknown, defaulting to 1000 [ 823.205817][ T5870] block nbd0: Receive control failed (result -32) [ 823.222731][T28574] lo speed is unknown, defaulting to 1000 [ 823.424586][T28588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8412'. [ 823.513942][T28588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8412'. [ 824.144458][T28598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8416'. [ 824.185626][T28598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8416'. [ 824.326330][T28599] 8021q: adding VLAN 0 to HW filter on device bond11 [ 824.372845][T28599] bond11: entered promiscuous mode [ 824.751610][T28599] bond11 (unregistering): Released all slaves [ 824.827133][T28574] hsr0 speed is unknown, defaulting to 1000 [ 824.974751][T28608] syzkaller0: entered promiscuous mode [ 824.988273][T28608] syzkaller0: entered allmulticast mode [ 825.989571][T28640] tipc: Enabling of bearer rejected, failed to enable media [ 826.017669][T28640] syzkaller0: entered promiscuous mode [ 826.027680][T28640] syzkaller0: entered allmulticast mode [ 826.196151][T28630] lo speed is unknown, defaulting to 1000 [ 826.303571][T28646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 826.576639][T28630] hsr0 speed is unknown, defaulting to 1000 [ 826.606202][T28655] netlink: 'syz.4.8427': attribute type 10 has an invalid length. [ 826.732509][T28628] lo speed is unknown, defaulting to 1000 [ 827.721665][T28664] lo speed is unknown, defaulting to 1000 [ 827.909818][T28673] netlink: 'syz.1.8431': attribute type 4 has an invalid length. [ 828.028015][T28637] lo speed is unknown, defaulting to 1000 [ 828.028015][T28628] hsr0 speed is unknown, defaulting to 1000 [ 828.094547][T28664] hsr0 speed is unknown, defaulting to 1000 [ 828.536650][T28637] hsr0 speed is unknown, defaulting to 1000 [ 829.420037][T28685] tipc: Enabling of bearer rejected, failed to enable media [ 829.479677][T28687] syzkaller0: entered promiscuous mode [ 829.503343][T28687] syzkaller0: entered allmulticast mode [ 830.035380][T28697] netlink: 1360 bytes leftover after parsing attributes in process `syz.0.8437'. [ 830.059220][T28697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8437'. [ 830.496521][T28718] netlink: 'syz.0.8442': attribute type 4 has an invalid length. [ 830.531338][T28712] netlink: 'syz.4.8441': attribute type 1 has an invalid length. [ 830.540968][T28712] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8441'. [ 830.564818][T28712] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8441'. [ 831.183855][T28725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 831.986200][T28736] tipc: Enabling of bearer rejected, failed to enable media [ 832.014583][T28736] syzkaller0: entered promiscuous mode [ 832.024953][T28736] syzkaller0: entered allmulticast mode [ 832.156105][T28738] siw: device registration error -23 [ 832.563575][T28756] netlink: 'syz.1.8451': attribute type 1 has an invalid length. [ 832.585283][T28756] netlink: 208 bytes leftover after parsing attributes in process `syz.1.8451'. [ 832.614717][T28759] tipc: Enabling of bearer rejected, failed to enable media [ 833.170593][T28744] lo speed is unknown, defaulting to 1000 [ 833.359950][T28784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8457'. [ 833.409271][T28784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8457'. [ 833.608683][T28790] netlink: 'syz.2.8459': attribute type 4 has an invalid length. [ 833.806945][T28744] hsr0 speed is unknown, defaulting to 1000 [ 834.846810][T28793] lo speed is unknown, defaulting to 1000 [ 834.924395][T19764] page_pool_release_retry() stalled pool shutdown: id 123, 3329 inflight 423 sec [ 835.112024][T28815] netlink: 'syz.0.8465': attribute type 4 has an invalid length. [ 835.638292][T28793] hsr0 speed is unknown, defaulting to 1000 [ 835.697446][T28830] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8467'. [ 835.721870][T28830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8467'. [ 836.191634][T28846] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8471'. [ 836.205630][T28846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8471'. [ 836.249496][T28846] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8471'. [ 836.270444][T28846] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8471'. [ 836.760536][T28813] lo speed is unknown, defaulting to 1000 [ 837.138228][T28813] hsr0 speed is unknown, defaulting to 1000 [ 837.935846][T28874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8479'. [ 838.028652][T28881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.326204][T28888] syzkaller0: entered promiscuous mode [ 838.338880][T28888] syzkaller0: entered allmulticast mode [ 840.009444][T28932] netlink: 'syz.3.8493': attribute type 1 has an invalid length. [ 840.042115][T28932] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8493'. [ 840.075474][T28932] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8493'. [ 840.098467][T28938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.109136][T28940] tipc: Enabling of bearer rejected, failed to enable media [ 840.153911][T28936] syzkaller0: entered promiscuous mode [ 840.171887][T28936] syzkaller0: entered allmulticast mode [ 840.491010][T28953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8499'. [ 840.500817][T28954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 840.539084][T28955] netlink: 'syz.2.8498': attribute type 10 has an invalid length. [ 840.829304][T28930] lo speed is unknown, defaulting to 1000 [ 841.326466][T28930] hsr0 speed is unknown, defaulting to 1000 [ 841.418690][T28971] syzkaller1: entered allmulticast mode [ 841.594831][T28975] __nla_validate_parse: 1 callbacks suppressed [ 841.594848][T28975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8505'. [ 841.758767][T28975] bridge10: port 1(veth19) entered blocking state [ 841.767621][T28975] bridge10: port 1(veth19) entered disabled state [ 841.774387][T28975] veth19: entered allmulticast mode [ 841.781683][T28975] veth19: entered promiscuous mode [ 841.804142][T28981] bridge10: port 2(veth0_to_bond) entered blocking state [ 841.811319][T28981] bridge10: port 2(veth0_to_bond) entered disabled state [ 841.863760][T28981] veth0_to_bond: entered allmulticast mode [ 841.875470][T28981] veth0_to_bond: entered promiscuous mode [ 841.926581][T28975] vlan2: entered allmulticast mode [ 841.931796][T28975] veth1: entered allmulticast mode [ 841.937390][T28975] bridge10: port 3(vlan2) entered blocking state [ 841.943977][T28975] bridge10: port 3(vlan2) entered disabled state [ 841.953590][T28975] vlan2: entered promiscuous mode [ 842.249414][T28993] syzkaller0: entered promiscuous mode [ 842.273889][T28993] syzkaller0: entered allmulticast mode [ 842.769008][T29002] bpq0: entered promiscuous mode [ 843.649185][T29021] lo speed is unknown, defaulting to 1000 [ 843.864279][T29021] hsr0 speed is unknown, defaulting to 1000 [ 843.936835][T29028] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 844.363777][T29041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.665848][T29043] tipc: Enabled bearer , priority 10 [ 845.151757][T29055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8527'. [ 845.722158][T29069] netlink: 844 bytes leftover after parsing attributes in process `syz.1.8532'. [ 845.781044][T29070] netlink: 'syz.3.8531': attribute type 4 has an invalid length. [ 846.230711][T29084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8534'. [ 846.259581][T29084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8534'. [ 846.287032][T29084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8534'. [ 846.306793][T29084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8534'. [ 846.780336][T29065] lo speed is unknown, defaulting to 1000 [ 847.115187][T29065] hsr0 speed is unknown, defaulting to 1000 [ 847.380000][T29119] syzkaller0: entered promiscuous mode [ 847.448118][T29119] syzkaller0: entered allmulticast mode [ 847.503749][T29119] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 847.972677][T29128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8548'. [ 848.001235][T29128] geneve4: entered promiscuous mode [ 848.012105][T29128] geneve4: entered allmulticast mode [ 848.062911][ T1166] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.082238][ T1166] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.163416][ T1166] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.182989][ T1166] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.563070][T29135] netlink: 'syz.2.8549': attribute type 3 has an invalid length. [ 848.572014][T29142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8553'. [ 848.650733][T29140] ip6gre1: entered promiscuous mode [ 849.402049][T29155] netlink: 'syz.4.8557': attribute type 3 has an invalid length. [ 849.444430][T29155] syz_tun: entered allmulticast mode [ 849.502241][T29155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 849.524512][T29164] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8556'. [ 849.555805][T29162] ¾x9ÿytes_recu: renamed from bridge_slave_0 [ 849.630118][T29153] syz_tun: left allmulticast mode [ 850.655405][T29180] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 850.899919][T29189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8566'. [ 851.338731][T29200] netlink: 'syz.0.8568': attribute type 4 has an invalid length. [ 851.616551][T29208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8571'. [ 851.852634][T29215] netlink: 'syz.1.8572': attribute type 4 has an invalid length. [ 851.896149][T29217] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8573'. [ 851.928227][T29217] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8573'. [ 851.970464][T29221] dvmrp1: left allmulticast mode [ 852.078973][T29217] rdma_rxe: rxe_newlink: failed to add lo [ 852.157833][T29217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 852.301693][T29232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8577'. [ 852.683594][ T5870] Bluetooth: hci0: command tx timeout [ 853.374692][T29279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8589'. [ 853.515789][T29284] netlink: 172 bytes leftover after parsing attributes in process `syz.1.8590'. [ 853.995008][T29301] tipc: Enabling of bearer rejected, failed to enable media [ 854.160725][T29318] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 854.684490][T19764] page_pool_release_retry() stalled pool shutdown: id 188, 3329 inflight 302 sec [ 854.795824][T29336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8600'. [ 854.804971][T29337] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8601'. [ 854.845840][T29337] Set syz0 is full, maxelem 0 reached [ 855.187238][T29351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8607'. [ 855.208118][T29351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8607'. [ 855.828573][T29339] lo speed is unknown, defaulting to 1000 [ 856.023749][T29366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8608'. [ 857.076603][T29395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8615'. [ 857.262156][T29397] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8615'. [ 857.315118][T29339] hsr0 speed is unknown, defaulting to 1000 [ 857.323860][T29389] rdma_rxe: rxe_newlink: failed to add lo [ 857.344422][T29387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.102987][T29419] netlink: 432 bytes leftover after parsing attributes in process `syz.3.8620'. [ 858.210038][T29416] tipc: Enabling of bearer rejected, failed to enable media [ 858.230588][T29416] syzkaller0: entered promiscuous mode [ 858.236780][T29416] syzkaller0: entered allmulticast mode [ 858.517165][T29434] vxcan0: entered promiscuous mode [ 858.632630][T29437] tipc: Enabling of bearer rejected, failed to enable media [ 858.648137][T29437] syzkaller0: entered promiscuous mode [ 858.654808][T29437] syzkaller0: entered allmulticast mode [ 859.160209][T29458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8633'. [ 859.211771][T29458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8633'. [ 859.626576][T29463] tipc: Enabling of bearer rejected, failed to enable media [ 859.649381][T29463] syzkaller0: entered promiscuous mode [ 859.671135][T29463] syzkaller0: entered allmulticast mode [ 860.496058][T29468] lo speed is unknown, defaulting to 1000 [ 860.745865][T29482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8639'. [ 861.288380][T29499] netlink: 'syz.2.8640': attribute type 10 has an invalid length. [ 861.595636][T29468] hsr0 speed is unknown, defaulting to 1000 [ 861.615539][T29472] lo speed is unknown, defaulting to 1000 [ 862.122858][T29520] netlink: 'syz.4.8645': attribute type 4 has an invalid length. [ 862.599798][T29473] lo speed is unknown, defaulting to 1000 [ 862.633067][T29472] hsr0 speed is unknown, defaulting to 1000 [ 862.862164][T29529] syzkaller0: entered promiscuous mode [ 862.882734][T29529] syzkaller0: entered allmulticast mode [ 863.451766][T29473] hsr0 speed is unknown, defaulting to 1000 [ 863.928391][T29549] syzkaller0: entered promiscuous mode [ 864.004085][T29549] syzkaller0: entered allmulticast mode [ 864.512304][T29560] IPVS: stopping backup sync thread 27372 ... [ 864.817838][T29567] tipc: Enabling of bearer rejected, failed to enable media [ 864.859130][T29567] syzkaller0: entered promiscuous mode [ 864.873272][T29567] syzkaller0: entered allmulticast mode [ 864.951489][T29573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8656'. [ 866.273671][T29594] syzkaller0: entered promiscuous mode [ 866.279174][T29594] syzkaller0: entered allmulticast mode [ 866.514480][T29608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8666'. [ 866.523897][T29608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8666'. [ 866.619798][T29612] netlink: 'syz.0.8665': attribute type 10 has an invalid length. [ 866.789062][T29622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8669'. [ 867.621775][T29617] lo speed is unknown, defaulting to 1000 [ 867.629121][T29643] syzkaller0: entered promiscuous mode [ 867.635057][T29643] syzkaller0: entered allmulticast mode [ 868.347328][T29652] netlink: 'syz.4.8675': attribute type 2 has an invalid length. [ 868.483103][T29650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8676'. [ 868.570864][T29659] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8678'. [ 868.601282][T29659] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8678'. [ 868.633782][T29659] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8678'. [ 868.673531][T29659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8678'. [ 868.721992][T29617] hsr0 speed is unknown, defaulting to 1000 [ 869.218926][T29679] netlink: 'syz.1.8681': attribute type 10 has an invalid length. [ 869.241999][T29664] veth13: left promiscuous mode [ 869.305480][T29681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8682'. [ 869.574346][T29690] netlink: 'syz.0.8686': attribute type 1 has an invalid length. [ 869.709012][T29690] 8021q: adding VLAN 0 to HW filter on device bond10 [ 869.893930][T29694] 8021q: adding VLAN 0 to HW filter on device bond10 [ 869.916542][T29694] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 869.945065][T29694] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 870.022605][T29706] netlink: 'syz.4.8687': attribute type 4 has an invalid length. [ 870.070280][T29705] veth15: entered promiscuous mode [ 870.108922][T29707] erspan0: entered allmulticast mode [ 870.470951][T29719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8689'. [ 871.295154][T29746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 871.426640][T29752] netlink: 'syz.1.8694': attribute type 10 has an invalid length. [ 872.144831][T29763] syzkaller0: entered promiscuous mode [ 872.150377][T29763] syzkaller0: entered allmulticast mode [ 872.482374][T29774] netlink: 'syz.4.8701': attribute type 4 has an invalid length. [ 872.541904][T29772] netlink: 'syz.0.8700': attribute type 25 has an invalid length. [ 872.799264][T29782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 872.826046][T29784] netlink: 'syz.3.8704': attribute type 5 has an invalid length. [ 872.834061][T29784] netlink: 'syz.3.8704': attribute type 17 has an invalid length. [ 872.850325][T29784] tipc: Resetting bearer [ 872.895478][T29784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 873.130969][T29790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8708'. [ 873.157654][T29790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8708'. [ 873.460864][T29797] syzkaller0: entered promiscuous mode [ 873.467039][T29797] syzkaller0: entered allmulticast mode [ 873.570025][T29799] syzkaller0: entered promiscuous mode [ 873.593893][T29799] syzkaller0: entered allmulticast mode [ 874.007262][T29807] tipc: Enabled bearer , priority 0 [ 874.034703][T29807] tipc: Resetting bearer [ 874.097973][T29806] tipc: Disabling bearer [ 874.437584][T29822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8717'. [ 874.493653][T29823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 874.986036][T29830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8719'. [ 875.073263][T29813] lo speed is unknown, defaulting to 1000 [ 875.658838][T29840] tipc: Resetting bearer [ 875.773848][T29840] bond0: left promiscuous mode [ 875.778825][T29840] bond0: left allmulticast mode [ 875.813504][T23590] lo speed is unknown, defaulting to 1000 [ 875.844116][T23590] syz0: Port: 1 Link DOWN [ 875.906786][T23591] lo speed is unknown, defaulting to 1000 [ 875.916254][T29813] hsr0 speed is unknown, defaulting to 1000 [ 876.175737][T29855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8724'. [ 876.740576][T29864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8726'. [ 876.908383][T29848] lo speed is unknown, defaulting to 1000 [ 877.084729][T29874] tipc: Enabled bearer , priority 0 [ 877.100553][T29874] tipc: Resetting bearer [ 877.147115][T29873] tipc: Disabling bearer [ 877.186281][T29876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.323013][T29880] veth0_to_team: left promiscuous mode [ 877.334831][T29880] veth0_to_team: left allmulticast mode [ 877.349824][T29880] geneve4: left promiscuous mode [ 877.355845][T29880] geneve4: left allmulticast mode [ 877.362993][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.387272][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.426223][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.447917][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.468267][T29848] hsr0 speed is unknown, defaulting to 1000 [ 878.188473][T29902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8736'. [ 878.567364][T29907] netlink: 'syz.2.8737': attribute type 10 has an invalid length. [ 878.877868][T29923] vxcan2: entered promiscuous mode [ 879.106010][T29910] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8738'. [ 879.339719][T29936] netlink: 'syz.4.8742': attribute type 4 has an invalid length. [ 879.460382][T29940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.486942][T29916] lo speed is unknown, defaulting to 1000 [ 880.456051][T29916] hsr0 speed is unknown, defaulting to 1000 [ 880.628443][T29930] lo speed is unknown, defaulting to 1000 [ 880.715019][T29967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.392421][T29961] lo speed is unknown, defaulting to 1000 [ 881.520219][T29930] hsr0 speed is unknown, defaulting to 1000 [ 881.520481][T29960] lo speed is unknown, defaulting to 1000 [ 881.533341][T29961] hsr0 speed is unknown, defaulting to 1000 [ 881.958386][T29951] lo speed is unknown, defaulting to 1000 [ 882.111666][T29960] hsr0 speed is unknown, defaulting to 1000 [ 882.223487][T29951] hsr0 speed is unknown, defaulting to 1000 [ 883.331920][T29982] !: renamed from dummy0 [ 885.240227][T29985] lo speed is unknown, defaulting to 1000 [ 885.258304][T30013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 886.062520][T30029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8759'. [ 886.189015][T29985] hsr0 speed is unknown, defaulting to 1000 [ 886.501737][T30038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8761'. [ 886.971004][T30029] lo speed is unknown, defaulting to 1000 [ 887.431390][T30048] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 887.447409][T30029] hsr0 speed is unknown, defaulting to 1000 [ 888.430095][T30062] syzkaller0: entered promiscuous mode [ 888.464456][T30062] syzkaller0: entered allmulticast mode [ 888.746143][T30056] lo speed is unknown, defaulting to 1000 [ 889.249351][T30056] hsr0 speed is unknown, defaulting to 1000 [ 889.811860][T30083] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8770'. [ 889.982989][T30089] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8770'. [ 890.040042][T30083] batadv0: entered promiscuous mode [ 890.051667][T30083] batadv0: entered allmulticast mode [ 890.079799][T30087] netlink: 'syz.1.8771': attribute type 4 has an invalid length. [ 890.725506][T30106] sctp: [Deprecated]: syz.4.8776 (pid 30106) Use of int in max_burst socket option deprecated. [ 890.725506][T30106] Use struct sctp_assoc_value instead [ 890.784358][T30106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8776'. [ 891.170993][T30117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8779'. [ 891.191046][T30117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8779'. [ 891.235697][T30116] syzkaller0: entered promiscuous mode [ 891.242329][T30116] syzkaller0: entered allmulticast mode [ 891.592234][T30130] netlink: 'syz.3.8792': attribute type 1 has an invalid length. [ 891.623418][T30130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8792'. [ 891.674960][T30130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8792'. [ 891.876827][T30125] netlink: 'syz.4.8782': attribute type 5 has an invalid length. [ 891.908692][T30125] netlink: 'syz.4.8782': attribute type 17 has an invalid length. [ 892.053125][T30125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 892.141671][T30148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8786'. [ 892.153083][T30148] netlink: 'syz.1.8786': attribute type 29 has an invalid length. [ 892.680514][T30171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8793'. [ 893.271110][T30140] lo speed is unknown, defaulting to 1000 [ 893.480570][T30187] syzkaller0: entered promiscuous mode [ 893.486354][T30187] syzkaller0: entered allmulticast mode [ 893.610937][T30192] netlink: 'syz.1.8797': attribute type 4 has an invalid length. [ 893.744246][T30196] netlink: 'syz.0.8798': attribute type 3 has an invalid length. [ 893.777596][T30143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8783'. [ 893.794863][T30143] netlink: 'syz.2.8783': attribute type 13 has an invalid length. [ 893.802695][T30143] netlink: 'syz.2.8783': attribute type 17 has an invalid length. [ 893.865613][T30143] tipc: Resetting bearer [ 893.878376][T30143] tipc: Resetting bearer [ 893.912782][T30143] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.928804][T30202] netlink: 'syz.3.8799': attribute type 13 has an invalid length. [ 893.974378][T30143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 894.027285][T30200] erspan0: left allmulticast mode [ 894.055704][T30200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.090129][T30200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 894.178254][T30202] tipc: Resetting bearer [ 894.184496][T30202] tipc: Resetting bearer [ 894.206403][T30202] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.220211][T30202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 894.240010][T30205] IPVS: Unknown mcast interface: veth1_to_bridge [ 894.249355][T23579] lo speed is unknown, defaulting to 1000 [ 894.255361][T23579] syz0: Port: 1 Link ACTIVE [ 894.284641][T30208] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.295151][T30208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 894.311509][T30140] hsr0 speed is unknown, defaulting to 1000 [ 894.343811][T30196] siw: device registration error -23 [ 894.360815][T30202] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8799'. [ 894.379560][T23579] lo speed is unknown, defaulting to 1000 [ 894.562503][T30224] tipc: Enabled bearer , priority 0 [ 894.587147][T30224] tipc: Resetting bearer [ 894.612063][T30222] tipc: Disabling bearer [ 894.833049][T30228] syzkaller0: entered promiscuous mode [ 894.837248][T30232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8805'. [ 894.848165][T30228] syzkaller0: entered allmulticast mode [ 895.326426][T30241] syzkaller0: entered promiscuous mode [ 895.343390][T30241] syzkaller0: entered allmulticast mode [ 895.480860][T30242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8809'. [ 895.726964][T23591] page_pool_release_retry() stalled pool shutdown: id 123, 3329 inflight 484 sec [ 895.883901][T30262] tipc: Resetting bearer [ 895.938087][T30262] team0: Mode changed to "broadcast" [ 895.985496][T30262] vlan0: entered promiscuous mode [ 895.996280][T30262] team_slave_1: entered promiscuous mode [ 896.050486][T30262] tipc: Enabled bearer , priority 0 [ 896.344965][T30270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8816'. [ 896.748714][T30295] validate_nla: 5 callbacks suppressed [ 896.748732][T30295] netlink: 'syz.2.8822': attribute type 2 has an invalid length. [ 896.821241][T30298] bpq0: left promiscuous mode [ 897.127635][T30317] netlink: 'syz.0.8823': attribute type 10 has an invalid length. [ 897.592549][T30295] tipc: Resetting bearer [ 897.608111][T30295] tipc: Resetting bearer [ 897.701293][T30332] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8827'. [ 897.721397][T30332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8827'. [ 897.732564][T30332] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8827'. [ 897.746142][T30332] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8827'. [ 897.761289][T30334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8828'. [ 897.820082][T30336] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.8828'. [ 897.889298][T30326] syzkaller0: entered promiscuous mode [ 897.895251][T30326] syzkaller0: entered allmulticast mode [ 898.235953][T30356] netlink: 'syz.4.8834': attribute type 4 has an invalid length. [ 898.421665][T30363] syzkaller0: entered promiscuous mode [ 898.439567][T30363] syzkaller0: entered allmulticast mode [ 899.377130][T30379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8838'. [ 899.432647][T30380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 899.559522][T30388] netlink: 'syz.2.8839': attribute type 10 has an invalid length. [ 899.849018][T30393] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8841'. [ 900.151802][T30404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8844'. [ 900.219889][T30407] tipc: Enabled bearer , priority 0 [ 900.241076][T30407] tipc: Resetting bearer [ 900.260231][T30406] tipc: Disabling bearer [ 900.941497][T30431] tipc: Enabled bearer , priority 0 [ 900.982655][T30431] syzkaller0: entered promiscuous mode [ 901.005256][T30431] syzkaller0: entered allmulticast mode [ 901.221954][T30425] bond10: (slave gretap1): Releasing active interface [ 901.323765][T30428] tipc: Resetting bearer [ 901.389810][T30428] tipc: Disabling bearer [ 901.630458][T30451] __nla_validate_parse: 1 callbacks suppressed [ 901.630476][T30451] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8854'. [ 901.961265][T30447] netlink: 536 bytes leftover after parsing attributes in process `syz.2.8853'. [ 901.994527][T30461] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 902.054609][T30469] netlink: 'syz.4.8860': attribute type 4 has an invalid length. [ 902.113078][T30469] netlink: 'syz.4.8860': attribute type 4 has an invalid length. [ 902.117515][T30447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8853'. [ 902.297949][T30472] syzkaller0: entered promiscuous mode [ 902.308022][T30472] syzkaller0: entered allmulticast mode [ 902.386087][T30481] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8863'. [ 903.418845][T30485] lo speed is unknown, defaulting to 1000 [ 904.193785][T30511] syzkaller0: entered promiscuous mode [ 904.199290][T30511] syzkaller0: entered allmulticast mode [ 904.317985][T30485] hsr0 speed is unknown, defaulting to 1000 [ 905.638334][T30538] netlink: 'syz.3.8877': attribute type 10 has an invalid length. [ 906.502888][T30560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8882'. [ 906.669903][T30566] syzkaller0: entered promiscuous mode [ 906.680886][T30566] syzkaller0: entered allmulticast mode [ 906.694871][T30524] lo speed is unknown, defaulting to 1000 [ 906.817534][T30569] netlink: 'syz.0.8885': attribute type 1 has an invalid length. [ 906.915569][T30571] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 906.934879][T30571] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 907.159810][T30584] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8889'. [ 907.169478][T30545] lo speed is unknown, defaulting to 1000 [ 907.175522][T30524] hsr0 speed is unknown, defaulting to 1000 [ 907.765102][T30598] netlink: 'syz.0.8890': attribute type 13 has an invalid length. [ 907.892948][T30577] lo speed is unknown, defaulting to 1000 [ 908.272038][T30577] hsr0 speed is unknown, defaulting to 1000 [ 908.328863][T30587] lo speed is unknown, defaulting to 1000 [ 908.335754][T30545] hsr0 speed is unknown, defaulting to 1000 [ 908.814058][T30587] hsr0 speed is unknown, defaulting to 1000 [ 910.129314][T30624] syzkaller1: entered promiscuous mode [ 910.140905][T30624] syzkaller1: entered allmulticast mode [ 910.166868][T30624] netlink: 'syz.1.8894': attribute type 15 has an invalid length. [ 910.722221][T30643] netlink: 'syz.4.8899': attribute type 4 has an invalid length. [ 912.152300][T30670] lo speed is unknown, defaulting to 1000 [ 912.595550][T30708] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 912.717444][T30715] netlink: 'syz.3.8911': attribute type 10 has an invalid length. [ 913.187251][T30724] tipc: Enabled bearer , priority 0 [ 913.224778][T30724] syzkaller0: entered promiscuous mode [ 913.243819][T30724] syzkaller0: entered allmulticast mode [ 913.261158][T30670] hsr0 speed is unknown, defaulting to 1000 [ 913.280642][T30726] syzkaller0: entered promiscuous mode [ 913.307142][T30726] syzkaller0: entered allmulticast mode [ 913.346644][T30724] tipc: Resetting bearer [ 913.370050][T30723] tipc: Resetting bearer [ 913.402557][T30723] tipc: Disabling bearer [ 913.556462][T30736] netlink: 'syz.2.8915': attribute type 5 has an invalid length. [ 913.565272][T30736] netlink: 'syz.2.8915': attribute type 17 has an invalid length. [ 913.631409][T30736] tipc: Resetting bearer [ 913.664758][T30736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 913.934391][T30698] lo speed is unknown, defaulting to 1000 [ 914.123574][T30748] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 914.132808][T30748] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 914.525192][T30698] hsr0 speed is unknown, defaulting to 1000 [ 914.767192][T19764] page_pool_release_retry() stalled pool shutdown: id 188, 3329 inflight 362 sec [ 915.170158][T30748] lo speed is unknown, defaulting to 1000 [ 915.489208][T30779] tipc: Enabled bearer , priority 0 [ 915.507983][T30779] syzkaller0: entered promiscuous mode [ 915.523575][T30779] syzkaller0: entered allmulticast mode [ 915.547613][T30782] svc: failed to register nfsdv3 RPC service (errno 111). [ 915.550919][T30779] tipc: Resetting bearer [ 915.558845][T30782] svc: failed to register nfsaclv3 RPC service (errno 111). [ 915.574408][T30778] tipc: Resetting bearer [ 915.624270][T30778] tipc: Disabling bearer [ 915.664217][T30748] hsr0 speed is unknown, defaulting to 1000 [ 915.940034][T30789] tipc: Enabling of bearer rejected, already enabled [ 916.310928][T30803] syzkaller1: entered promiscuous mode [ 916.322369][T30803] syzkaller1: entered allmulticast mode [ 916.894586][T30817] netlink: 'syz.0.8933': attribute type 303 has an invalid length. [ 917.079752][T30814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8933'. [ 917.656031][T30844] tipc: Enabled bearer , priority 0 [ 917.676294][T30844] syzkaller0: entered promiscuous mode [ 917.681793][T30844] syzkaller0: entered allmulticast mode [ 917.732616][T30848] tipc: Resetting bearer [ 917.881606][T30843] tipc: Resetting bearer [ 917.994115][T30843] tipc: Disabling bearer [ 918.028627][T30857] syzkaller1: entered promiscuous mode [ 918.038544][T30857] syzkaller1: entered allmulticast mode [ 918.240219][T30865] syzkaller0: entered promiscuous mode [ 918.277112][T30865] syzkaller0: entered allmulticast mode [ 918.296269][T30835] lo speed is unknown, defaulting to 1000 [ 918.381459][T30871] syzkaller1: entered promiscuous mode [ 918.419896][T30871] syzkaller1: entered allmulticast mode [ 918.461070][T30871] netlink: 'syz.4.8947': attribute type 15 has an invalid length. [ 918.730855][T30880] netlink: 844 bytes leftover after parsing attributes in process `syz.0.8950'. [ 918.776391][T30880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8950'. [ 918.797386][T30854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 918.858741][T30855] lo speed is unknown, defaulting to 1000 [ 918.858741][T30835] hsr0 speed is unknown, defaulting to 1000 [ 919.009224][T30885] netlink: 'syz.4.8951': attribute type 4 has an invalid length. [ 919.289152][T30897] syzkaller0: entered promiscuous mode [ 919.298110][T30892] netlink: 'syz.4.8953': attribute type 15 has an invalid length. [ 919.318417][T30897] syzkaller0: entered allmulticast mode [ 919.406931][T30902] syzkaller1: entered promiscuous mode [ 919.412525][T30902] syzkaller1: entered allmulticast mode [ 919.428635][T30901] netlink: 'syz.3.8956': attribute type 15 has an invalid length. [ 919.436018][T30895] syzkaller1: entered promiscuous mode [ 919.443820][T30895] syzkaller1: entered allmulticast mode [ 919.535917][T30904] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 919.578540][T30855] hsr0 speed is unknown, defaulting to 1000 [ 919.895079][T30913] netlink: 192 bytes leftover after parsing attributes in process `syz.4.8959'. [ 919.913738][T30913] netlink: zone id is out of range [ 919.974887][T30913] netlink: zone id is out of range [ 920.021710][T30913] netlink: zone id is out of range [ 920.042056][T30913] netlink: zone id is out of range [ 920.114248][T30913] netlink: zone id is out of range [ 920.119399][T30913] netlink: zone id is out of range [ 920.153910][T30913] netlink: zone id is out of range [ 920.166995][T30913] netlink: zone id is out of range [ 920.202611][T30913] netlink: zone id is out of range [ 920.268063][T30913] netlink: zone id is out of range [ 920.795241][T30906] lo speed is unknown, defaulting to 1000 [ 921.256429][T30906] hsr0 speed is unknown, defaulting to 1000 [ 921.783307][T30940] lo speed is unknown, defaulting to 1000 [ 923.001892][T30940] hsr0 speed is unknown, defaulting to 1000 [ 923.024236][T30948] siw: device registration error -23 [ 923.930354][T30964] lo speed is unknown, defaulting to 1000 [ 924.148324][T30964] hsr0 speed is unknown, defaulting to 1000 [ 924.934515][T31002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8974'. [ 924.963371][T31002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8974'. [ 925.022632][T30999] tipc: Resetting bearer [ 925.405431][T31012] netlink: 'syz.1.8976': attribute type 4 has an invalid length. [ 925.717466][T30989] lo speed is unknown, defaulting to 1000 [ 925.973823][T31028] syzkaller0: entered promiscuous mode [ 925.980923][T31028] syzkaller0: entered allmulticast mode [ 926.591247][T31039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8986'. [ 926.601924][T31042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8983'. [ 926.641019][T30989] hsr0 speed is unknown, defaulting to 1000 [ 926.779453][T31048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8986'. [ 927.021257][T31052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8987'. [ 927.030433][T31052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8987'. [ 927.430749][T31069] net_ratelimit: 28 callbacks suppressed [ 927.430769][T31069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 927.798553][T31081] syzkaller0: entered promiscuous mode [ 927.815976][T31081] syzkaller0: entered allmulticast mode [ 928.497794][T31100] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8999'. [ 928.515605][T31098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9000'. [ 928.525163][T31098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9000'. [ 928.770787][T31110] tipc: Enabled bearer , priority 0 [ 928.785757][T31110] syzkaller0: entered promiscuous mode [ 928.791422][T31110] syzkaller0: entered allmulticast mode [ 928.802300][T31110] tipc: Resetting bearer [ 928.810929][T31109] tipc: Resetting bearer [ 928.862414][T31109] tipc: Disabling bearer [ 929.155814][T31126] syzkaller1: entered promiscuous mode [ 929.171187][T31126] syzkaller1: entered allmulticast mode [ 929.197177][T31129] tipc: Enabled bearer , priority 0 [ 929.207419][T31126] netlink: 'syz.0.9008': attribute type 15 has an invalid length. [ 929.239373][T31130] syzkaller0: entered promiscuous mode [ 929.254980][T31130] syzkaller0: entered allmulticast mode [ 929.310103][T31132] syzkaller1: entered promiscuous mode [ 929.318630][T31132] syzkaller1: entered allmulticast mode [ 929.332344][T31129] tipc: Resetting bearer [ 929.351941][T31132] netlink: 'syz.4.9010': attribute type 15 has an invalid length. [ 929.423974][T31128] tipc: Resetting bearer [ 929.479690][T31128] tipc: Disabling bearer [ 929.562135][T31134] syzkaller0: entered promiscuous mode [ 929.594855][T31134] syzkaller0: entered allmulticast mode [ 929.701131][T31114] lo speed is unknown, defaulting to 1000 [ 929.861175][T31143] netlink: 'syz.2.9014': attribute type 4 has an invalid length. [ 930.388615][T31168] tipc: Enabled bearer , priority 0 [ 930.404174][T31114] hsr0 speed is unknown, defaulting to 1000 [ 930.455707][T31168] syzkaller0: entered promiscuous mode [ 930.461211][T31168] syzkaller0: entered allmulticast mode [ 930.513437][T31168] tipc: Resetting bearer [ 930.566364][T31171] geneve5: entered promiscuous mode [ 930.573808][T31171] geneve5: entered allmulticast mode [ 930.586998][T31165] tipc: Resetting bearer [ 930.674021][T31165] tipc: Disabling bearer [ 930.763947][T25054] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 44028 - 0 [ 930.772243][T25054] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 41724 - 0 [ 930.791268][T31179] __nla_validate_parse: 2 callbacks suppressed [ 930.791288][T31179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9022'. [ 930.828191][T25054] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 44028 - 0 [ 930.842853][T25054] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 41724 - 0 [ 930.895249][T25054] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 44028 - 0 [ 930.908284][T25054] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 41724 - 0 [ 930.917135][T25054] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 44028 - 0 [ 930.925886][T25054] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 41724 - 0 [ 930.978902][T31184] tipc: Enabled bearer , priority 0 [ 931.006682][T31184] syzkaller0: entered promiscuous mode [ 931.017067][T31184] syzkaller0: entered allmulticast mode [ 931.129720][T31156] lo speed is unknown, defaulting to 1000 [ 931.132400][T31184] tipc: Resetting bearer [ 931.149640][T31183] tipc: Resetting bearer [ 931.204022][T31183] tipc: Disabling bearer [ 931.431715][T31195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9027'. [ 931.441103][T31195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9027'. [ 931.571414][T31200] netlink: 'syz.4.9028': attribute type 4 has an invalid length. [ 931.909454][T31156] hsr0 speed is unknown, defaulting to 1000 [ 931.967000][T31208] netlink: 'syz.4.9031': attribute type 4 has an invalid length. [ 932.002142][T31208] netlink: 17 bytes leftover after parsing attributes in process `syz.4.9031'. [ 932.656494][T31224] netlink: 'syz.4.9033': attribute type 303 has an invalid length. [ 932.788017][T31222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9033'. [ 933.066325][T31229] erspan0: entered promiscuous mode [ 933.101022][T31229] batman_adv: batadv0: Adding interface: macvlan3 [ 933.108260][T31229] batman_adv: batadv0: Interface activated: macvlan3 [ 933.228930][T31231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9035'. [ 933.268231][T31193] lo speed is unknown, defaulting to 1000 [ 933.459089][T31241] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 933.500180][T31241] syzkaller0: entered promiscuous mode [ 933.533524][T31241] syzkaller0: entered allmulticast mode [ 933.776224][T31251] syzkaller0: entered allmulticast mode [ 933.798549][T31250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9039'. [ 933.834298][T31193] hsr0 speed is unknown, defaulting to 1000 [ 933.843573][T31250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9039'. [ 933.949775][T31253] netlink: 'syz.3.9040': attribute type 15 has an invalid length. [ 934.000377][T31245] syzkaller0 (unregistering): left allmulticast mode [ 934.148787][T31250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 934.281059][T31256] syzkaller1: entered promiscuous mode [ 934.291381][T31256] syzkaller1: entered allmulticast mode [ 934.669878][T31274] netlink: 'syz.3.9047': attribute type 13 has an invalid length. [ 934.681048][T31274] netlink: 'syz.3.9047': attribute type 17 has an invalid length. [ 934.739477][T31274] tipc: Resetting bearer [ 934.755262][T31274] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.776936][T31274] tipc: Resetting bearer [ 934.786321][T31274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 935.571985][T31288] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9048'. [ 935.639257][T31290] netlink: 'syz.2.9049': attribute type 4 has an invalid length. [ 935.656857][T31288] tipc: Enabling of bearer rejected, already enabled [ 935.680173][T31288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9048'. [ 935.719990][T31288] tipc: Disabling bearer [ 935.903977][T31296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9051'. [ 935.917924][T31296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9051'. [ 936.119185][T31274] lo speed is unknown, defaulting to 1000 [ 936.398113][T31316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9055'. [ 936.760061][T31274] hsr0 speed is unknown, defaulting to 1000 [ 938.005904][T31333] syzkaller0: entered promiscuous mode [ 938.011418][T31333] syzkaller0: entered allmulticast mode [ 938.170622][T31341] ÿ: renamed from bond_slave_0 [ 940.556797][T31398] netlink: 'syz.1.9076': attribute type 12 has an invalid length. [ 941.051199][T31409] netlink: 'syz.3.9078': attribute type 4 has an invalid length. [ 941.316180][T31418] bridge0: port 1(erspan0) entered blocking state [ 941.352189][T31418] bridge0: port 1(erspan0) entered disabled state [ 941.369119][T31418] erspan0: entered allmulticast mode [ 941.413292][T31418] erspan0: entered promiscuous mode [ 941.444375][T31422] erspan0: left allmulticast mode [ 941.482739][T31422] erspan0: left promiscuous mode [ 941.493921][T31422] bridge0: port 1(erspan0) entered disabled state [ 941.530727][T31392] lo speed is unknown, defaulting to 1000 [ 942.025020][T31437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9087'. [ 942.359416][T31442] syzkaller0: entered promiscuous mode [ 942.370857][T31442] syzkaller0: entered allmulticast mode [ 942.422866][T31392] hsr0 speed is unknown, defaulting to 1000 [ 943.786733][T31481] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 945.481272][T31462] tipc: Enabling of bearer rejected, failed to enable media [ 945.767391][T31516] IPv6: Can't replace route, no match found [ 945.899888][T31485] lo speed is unknown, defaulting to 1000 [ 946.180698][T31485] hsr0 speed is unknown, defaulting to 1000 [ 946.739568][T31529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9105'. [ 946.762202][T31529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9105'. [ 946.788830][T31529] netlink: 'syz.3.9105': attribute type 4 has an invalid length. [ 946.827116][T31532] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9105'. [ 947.411450][T31490] lo speed is unknown, defaulting to 1000 [ 947.558545][T31541] tipc: Resetting bearer [ 947.605268][T31541] tipc: Resetting bearer [ 947.692223][T31541] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 947.812036][T31541] vlan0: left promiscuous mode [ 947.852724][T31541] team_slave_1: left promiscuous mode [ 947.883817][T31553] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9107'. [ 947.903402][T23579] lo speed is unknown, defaulting to 1000 [ 947.909162][T23579] syz0: Port: 1 Link DOWN [ 947.927832][T31490] hsr0 speed is unknown, defaulting to 1000 [ 947.998489][T23579] lo speed is unknown, defaulting to 1000 [ 948.111104][T31557] netlink: 'syz.4.9110': attribute type 10 has an invalid length. [ 948.128963][T31557] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9110'. [ 948.178714][T31561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9110'. [ 948.238707][T31561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9110'. [ 948.444078][T31557] geneve0: left allmulticast mode [ 948.451989][T31557] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 948.577960][T31561] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 948.633079][T31568] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 949.319279][T31578] syzkaller0: entered promiscuous mode [ 949.327441][T31578] syzkaller0: entered allmulticast mode [ 949.779829][T31609] netlink: 'syz.0.9117': attribute type 1 has an invalid length. [ 949.865259][T31609] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9117'. [ 950.153073][T31615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9119'. [ 950.163062][T31615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9119'. [ 950.214873][T31615] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9119'. [ 950.444917][T31625] syzkaller1: entered promiscuous mode [ 950.463737][T31625] syzkaller1: entered allmulticast mode [ 950.476605][T31625] netlink: 'syz.2.9123': attribute type 15 has an invalid length. [ 950.551102][T31618] dvmrp8: entered allmulticast mode [ 950.579809][T31618] openvswitch: netlink: Flow key attr not present in new flow. [ 950.675965][T31617] dvmrp8: left allmulticast mode [ 950.857595][T31635] tipc: Enabled bearer , priority 0 [ 950.899439][T31631] tipc: Resetting bearer [ 950.956378][T31630] tipc: Disabling bearer [ 951.139665][T31642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9128'. [ 951.611585][ T30] audit: type=1800 audit(1755151085.041:19): pid=31649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9128" name="memory.events" dev="tmpfs" ino=9844 res=0 errno=0 [ 952.049881][T31669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9136'. [ 952.173677][T31671] tipc: Enabled bearer , priority 0 [ 952.200237][T31671] syzkaller0: entered promiscuous mode [ 952.211325][T31671] syzkaller0: entered allmulticast mode [ 952.220396][T31673] netlink: 'syz.4.9138': attribute type 4 has an invalid length. [ 952.280560][T31671] tipc: Resetting bearer [ 952.292849][T31670] tipc: Resetting bearer [ 952.335055][T31670] tipc: Disabling bearer [ 952.386037][T31679] tipc: Enabling of bearer rejected, failed to enable media [ 952.424301][T31679] syzkaller0: entered promiscuous mode [ 952.430227][T31679] syzkaller0: entered allmulticast mode [ 952.488275][T31681] tipc: Enabled bearer , priority 0 [ 952.498423][T31681] syzkaller0: entered promiscuous mode [ 952.509002][T31681] syzkaller0: entered allmulticast mode [ 952.568405][T31681] tipc: Resetting bearer [ 952.596638][T31680] tipc: Resetting bearer [ 952.639221][T31680] tipc: Disabling bearer [ 954.052831][T31703] lo speed is unknown, defaulting to 1000 [ 954.289306][T31733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9154'. [ 954.556539][T31744] nbd: must specify at least one socket [ 954.594049][T31750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9156'. [ 954.620769][T31748] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 954.704755][T31748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9158'. [ 954.726143][T31748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9158'. [ 954.899928][T31703] hsr0 speed is unknown, defaulting to 1000 [ 954.942957][T31763] netlink: 'syz.3.9161': attribute type 1 has an invalid length. [ 955.246511][T31769] 8021q: adding VLAN 0 to HW filter on device bond15 [ 955.354710][T31707] lo speed is unknown, defaulting to 1000 [ 955.479504][T31763] veth21: entered promiscuous mode [ 955.563069][T31763] bond15: (slave veth21): Enslaving as a backup interface with a down link [ 956.164409][T31765] bond15: (slave veth21): Releasing backup interface [ 956.544372][T31801] netlink: 'syz.3.9165': attribute type 13 has an invalid length. [ 956.552214][T31801] netlink: 'syz.3.9165': attribute type 17 has an invalid length. [ 956.621067][T31801] tipc: Resetting bearer [ 956.641078][T31801] tipc: Resetting bearer [ 956.664385][T31801] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.693658][T31801] tipc: Resetting bearer [ 956.699250][T31801] tipc: Resetting bearer [ 956.764010][T23591] page_pool_release_retry() stalled pool shutdown: id 123, 3329 inflight 545 sec [ 956.793907][T31801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 956.869047][T31707] hsr0 speed is unknown, defaulting to 1000 [ 956.875181][T23590] lo speed is unknown, defaulting to 1000 [ 956.883880][T23590] syz0: Port: 1 Link ACTIVE [ 956.888472][T23590] lo speed is unknown, defaulting to 1000 [ 957.034255][T31806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.101680][T31801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.170989][T31801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.993739][T31833] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9173'. [ 958.140250][T31836] netlink: 'syz.1.9172': attribute type 6 has an invalid length. [ 958.164352][T31802] lo speed is unknown, defaulting to 1000 [ 958.434338][T31840] syzkaller0: entered promiscuous mode [ 958.439849][T31840] syzkaller0: entered allmulticast mode [ 959.449147][T31849] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 961.056853][T31775] lo speed is unknown, defaulting to 1000 [ 961.056896][T31802] hsr0 speed is unknown, defaulting to 1000 [ 961.380167][T31859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 961.471198][T31775] hsr0 speed is unknown, defaulting to 1000 [ 962.615252][T31867] geneve5: left promiscuous mode [ 962.620334][T31867] geneve5: left allmulticast mode [ 962.750402][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 44028 - 0 [ 962.786662][ T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 41724 - 0 [ 962.865864][ T1113] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 44028 - 0 [ 962.908252][ T1113] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 41724 - 0 [ 962.940792][ T1113] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 44028 - 0 [ 962.981360][ T1113] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 41724 - 0 [ 963.399970][ T1113] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 44028 - 0 [ 963.450378][ T1113] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 41724 - 0 [ 963.892697][T31877] lo speed is unknown, defaulting to 1000 [ 964.093508][T31919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9190'. [ 964.171797][T31923] sock: sock_timestamping_bind_phc: sock not bind to device [ 964.380247][T31877] hsr0 speed is unknown, defaulting to 1000 [ 964.592616][T31915] lo speed is unknown, defaulting to 1000 [ 965.573848][T31928] lo speed is unknown, defaulting to 1000 [ 965.735726][T31958] tun0: tun_chr_ioctl cmd 2147767520 [ 965.789939][T31915] hsr0 speed is unknown, defaulting to 1000 [ 965.793763][T31925] lo speed is unknown, defaulting to 1000 [ 965.849609][T31928] hsr0 speed is unknown, defaulting to 1000 [ 966.210841][T31916] lo speed is unknown, defaulting to 1000 [ 966.353501][T31916] hsr0 speed is unknown, defaulting to 1000 [ 966.379409][T31925] hsr0 speed is unknown, defaulting to 1000 [ 968.352985][T31995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 968.382389][T31996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 968.723067][T32005] syzkaller1: entered promiscuous mode [ 968.744627][T32005] syzkaller1: entered allmulticast mode [ 968.780464][T32005] netlink: 'syz.0.9212': attribute type 15 has an invalid length. [ 969.187812][T32019] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9216'. [ 969.198675][T32017] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9217'. [ 969.235923][T32017] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9217'. [ 969.245480][T32020] tipc: Enabled bearer , priority 0 [ 969.315293][T32017] netlink: 'syz.3.9217': attribute type 5 has an invalid length. [ 969.332746][T32017] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9217'. [ 969.441136][T32025] syzkaller0: entered promiscuous mode [ 969.455193][T32025] syzkaller0: entered allmulticast mode [ 969.516134][T32026] netlink: 192 bytes leftover after parsing attributes in process `syz.3.9217'. [ 969.557341][T32025] tipc: Resetting bearer [ 969.606237][T32018] tipc: Resetting bearer [ 969.629580][T32018] tipc: Disabling bearer [ 969.671329][T32035] tipc: Resetting bearer [ 969.985161][T32017] lo speed is unknown, defaulting to 1000 [ 970.052235][T32048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9225'. [ 970.160673][T32051] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.9225'. [ 970.701357][T32017] hsr0 speed is unknown, defaulting to 1000 [ 970.709510][T32050] rdma_rxe: rxe_newlink: failed to add macvlan1 [ 971.206295][T32070] netlink: 'syz.4.9231': attribute type 10 has an invalid length. [ 973.914005][T32126] netlink: 'syz.0.9243': attribute type 13 has an invalid length. [ 973.921863][T32126] netlink: 'syz.0.9243': attribute type 17 has an invalid length. [ 974.041024][T32126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 974.137176][T32129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9246'. [ 974.146391][T32129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9246'. [ 974.176600][T32112] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9245'. [ 974.278748][T32136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9247'. [ 974.429743][ T30] audit: type=1800 audit(1755151107.861:20): pid=32122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9245" name="cgroup.controllers" dev="tmpfs" ino=9539 res=0 errno=0 [ 974.573346][T32143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 974.602788][T32144] netlink: 'syz.3.9248': attribute type 3 has an invalid length. [ 974.816215][T32120] lo speed is unknown, defaulting to 1000 [ 974.844029][T19764] page_pool_release_retry() stalled pool shutdown: id 188, 3329 inflight 423 sec [ 975.457662][T32126] lo speed is unknown, defaulting to 1000 [ 975.469768][T32120] hsr0 speed is unknown, defaulting to 1000 [ 976.084708][T32138] lo speed is unknown, defaulting to 1000 [ 976.091894][T32126] hsr0 speed is unknown, defaulting to 1000 [ 976.776623][T32138] hsr0 speed is unknown, defaulting to 1000 [ 976.907044][T32187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9257'. [ 977.131623][T32193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9258'. [ 977.145715][T32193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9258'. [ 977.491331][T32199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9261'. [ 977.909767][T32207] netlink: 'syz.4.9262': attribute type 1 has an invalid length. [ 977.921636][T32207] netlink: 244 bytes leftover after parsing attributes in process `syz.4.9262'. [ 978.582840][T32230] tipc: Enabled bearer , priority 0 [ 978.590690][T32230] syzkaller0: entered promiscuous mode [ 978.596449][T32230] syzkaller0: entered allmulticast mode [ 978.685880][T32230] tipc: Resetting bearer [ 978.759553][T32241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9271'. [ 978.823694][T32228] tipc: Resetting bearer [ 978.921425][T32228] tipc: Disabling bearer [ 979.685209][T32263] syzkaller1: entered promiscuous mode [ 979.690719][T32263] syzkaller1: entered allmulticast mode [ 979.728283][T32267] netlink: 'syz.2.9278': attribute type 4 has an invalid length. [ 979.749560][T32263] netlink: 'syz.4.9274': attribute type 15 has an invalid length. [ 979.982864][T32272] netlink: 'syz.2.9279': attribute type 16 has an invalid length. [ 979.990882][T32272] netlink: 'syz.2.9279': attribute type 17 has an invalid length. [ 980.125955][T32276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9281'. [ 980.437139][T32292] bpq0: entered promiscuous mode [ 980.806242][T32306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 980.899890][T32309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9289'. [ 981.151718][T32318] IPv6: Can't replace route, no match found [ 981.312615][T32278] lo speed is unknown, defaulting to 1000 [ 981.889980][T32278] hsr0 speed is unknown, defaulting to 1000 [ 982.943892][T32364] syzkaller1: entered promiscuous mode [ 982.958954][T32364] syzkaller1: entered allmulticast mode [ 983.011258][T32364] netlink: 'syz.1.9303': attribute type 15 has an invalid length. [ 983.318849][T32379] syzkaller1: entered promiscuous mode [ 983.337258][T32379] syzkaller1: entered allmulticast mode [ 983.522683][T32390] netlink: 'syz.3.9308': attribute type 4 has an invalid length. [ 984.515089][T32415] batman_adv: batadv0: Interface deactivated: macvlan3 [ 984.736021][T32428] syzkaller1: entered promiscuous mode [ 984.748514][T32428] syzkaller1: entered allmulticast mode [ 984.774182][T32430] syzkaller0: entered promiscuous mode [ 984.779675][T32430] syzkaller0: entered allmulticast mode [ 984.787510][T32428] netlink: 'syz.0.9317': attribute type 15 has an invalid length. [ 984.821034][T32432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9319'. [ 984.830555][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9319'. [ 985.149399][T32450] netlink: 'syz.4.9324': attribute type 4 has an invalid length. [ 986.023537][T32488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9331'. [ 986.043746][T32488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9331'. [ 986.068146][T32489] netlink: 'syz.0.9332': attribute type 1 has an invalid length. [ 986.618389][T32482] lo speed is unknown, defaulting to 1000 [ 986.624501][T32499] syzkaller0: entered promiscuous mode [ 986.652873][T32499] syzkaller0: entered allmulticast mode [ 987.030706][T32482] hsr0 speed is unknown, defaulting to 1000 [ 987.406731][T32515] netlink: 'syz.2.9339': attribute type 15 has an invalid length. [ 987.672968][T32521] syzkaller1: entered promiscuous mode [ 987.678696][T32521] syzkaller1: entered allmulticast mode [ 988.191604][T32542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9344'. [ 988.244130][T32542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9344'. [ 988.671778][T32565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9350'. [ 988.994880][T32558] lo speed is unknown, defaulting to 1000 [ 989.119502][T32582] netlink: 'syz.1.9352': attribute type 4 has an invalid length. [ 989.267039][T32587] syzkaller1: entered promiscuous mode [ 989.272664][T32587] syzkaller1: entered allmulticast mode [ 989.283691][T32587] netlink: 'syz.2.9353': attribute type 15 has an invalid length. [ 989.657965][T32595] netlink: 'syz.2.9357': attribute type 4 has an invalid length. [ 989.692074][T32594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9355'. [ 989.701375][T32594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9355'. [ 989.763947][T32558] hsr0 speed is unknown, defaulting to 1000 [ 990.035676][T32617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9362'. [ 990.790104][T32642] syzkaller0: entered promiscuous mode [ 990.795880][T32642] syzkaller0: entered allmulticast mode [ 991.477142][T32650] syzkaller0: entered promiscuous mode [ 991.482801][T32647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9371'. [ 991.498281][T32650] syzkaller0: entered allmulticast mode [ 991.506271][T32651] syzkaller1: entered promiscuous mode [ 991.517603][T32651] syzkaller1: entered allmulticast mode [ 991.525202][T32647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9371'. [ 991.532595][T32651] netlink: 'syz.1.9373': attribute type 15 has an invalid length. [ 992.282200][T32689] syzkaller0: entered promiscuous mode [ 992.288050][T32689] syzkaller0: entered allmulticast mode [ 992.325230][T32688] netlink: 'syz.3.9383': attribute type 4 has an invalid length. [ 993.322874][T32713] syzkaller1: entered promiscuous mode [ 993.386603][T32713] syzkaller1: entered allmulticast mode [ 993.416336][T32715] netlink: 'syz.1.9387': attribute type 15 has an invalid length. [ 993.623708][T32723] netlink: 'syz.4.9388': attribute type 15 has an invalid length. [ 993.817901][T32727] syzkaller0: entered promiscuous mode [ 993.856011][T32727] syzkaller0: entered allmulticast mode [ 993.863070][T32721] syzkaller1: entered promiscuous mode [ 993.870284][T32721] syzkaller1: entered allmulticast mode [ 994.062211][T32735] netlink: 'syz.1.9390': attribute type 4 has an invalid length. [ 994.078901][T32707] lo speed is unknown, defaulting to 1000 [ 994.634958][T32707] hsr0 speed is unknown, defaulting to 1000 [ 995.083133][T32759] netlink: 'syz.3.9396': attribute type 4 has an invalid length. [ 995.361166][T32764] tipc: Enabling of bearer rejected, already enabled [ 995.420320][ T302] netlink: 'syz.3.9401': attribute type 4 has an invalid length. [ 995.502532][T32767] syzkaller0: entered promiscuous mode [ 995.513438][T32767] syzkaller0: entered allmulticast mode [ 996.682611][ T330] syzkaller0: entered promiscuous mode [ 996.691140][ T330] syzkaller0: entered allmulticast mode [ 996.971365][ T351] netlink: 'syz.1.9412': attribute type 4 has an invalid length. [ 997.007891][ T355] netlink: 'syz.3.9411': attribute type 10 has an invalid length. [ 997.041922][ T356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9413'. [ 997.068350][ T356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9413'. [ 997.235323][ T362] tipc: Enabling of bearer rejected, already enabled [ 997.364940][ T366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 997.612589][ T380] syzkaller0: entered promiscuous mode [ 997.628526][ T380] syzkaller0: entered allmulticast mode [ 997.984952][ T394] netlink: 'syz.2.9425': attribute type 10 has an invalid length. [ 998.171198][ T406] syzkaller1: entered promiscuous mode [ 998.200601][ T406] syzkaller1: entered allmulticast mode [ 998.225892][ T408] netlink: 'syz.3.9427': attribute type 15 has an invalid length. [ 998.396687][ T410] syzkaller1: entered promiscuous mode [ 998.412401][ T410] syzkaller1: entered allmulticast mode [ 998.456468][ T410] netlink: 'syz.2.9428': attribute type 15 has an invalid length. [ 998.778688][ T425] netlink: 'syz.0.9434': attribute type 4 has an invalid length. [ 999.056555][ T432] netlink: 'syz.0.9437': attribute type 4 has an invalid length. [ 999.377427][ T423] lo speed is unknown, defaulting to 1000 [ 999.689820][ T442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9439'. [ 999.716820][ T442] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9439'. [ 999.737296][ T442] netlink: 34 bytes leftover after parsing attributes in process `syz.0.9439'. [ 999.997529][ T423] hsr0 speed is unknown, defaulting to 1000 [ 1000.228037][ T453] syzkaller1: entered promiscuous mode [ 1000.233760][ T453] syzkaller1: entered allmulticast mode [ 1000.246111][ T453] netlink: 'syz.2.9441': attribute type 15 has an invalid length. [ 1000.519840][ T459] syzkaller1: entered promiscuous mode [ 1000.559189][ T459] syzkaller1: entered allmulticast mode [ 1000.589105][ T459] netlink: 'syz.1.9444': attribute type 15 has an invalid length. [ 1000.690485][ T463] netlink: 'syz.4.9447': attribute type 4 has an invalid length. [ 1000.886419][ T468] bond9 (unregistering): Released all slaves [ 1000.936365][ T475] tipc: Enabling of bearer rejected, already enabled [ 1000.987365][ T477] syzkaller0: entered promiscuous mode [ 1000.992875][ T477] syzkaller0: entered allmulticast mode [ 1001.780112][ T486] bond16 (unregistering): Released all slaves [ 1002.199122][ T506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9458'. [ 1002.208249][ T506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9458'. [ 1002.328591][ T511] syzkaller1: entered promiscuous mode [ 1002.350916][ T511] syzkaller1: entered allmulticast mode [ 1002.512206][ T518] syzkaller1: entered promiscuous mode [ 1002.521802][ T518] syzkaller1: entered allmulticast mode [ 1002.540621][ T520] tipc: Enabling of bearer rejected, failed to enable media [ 1002.541063][ T518] validate_nla: 2 callbacks suppressed [ 1002.541077][ T518] netlink: 'syz.1.9461': attribute type 15 has an invalid length. [ 1003.045527][ T534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9466'. [ 1003.125755][ T543] tipc: Enabled bearer , priority 0 [ 1003.144056][ T543] syzkaller0: entered promiscuous mode [ 1003.149563][ T543] syzkaller0: entered allmulticast mode [ 1003.220893][ T543] tipc: Resetting bearer [ 1003.254406][ T542] tipc: Resetting bearer [ 1003.289622][ T542] tipc: Disabling bearer [ 1003.419458][ T550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1003.588597][ T553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9471'. [ 1003.698859][ T550] siw: device registration error -23 [ 1004.098022][ T560] tipc: Enabled bearer , priority 0 [ 1004.128295][ T560] tipc: Resetting bearer [ 1004.290285][ T557] tipc: Disabling bearer [ 1004.810922][ T577] netlink: 'syz.1.9479': attribute type 2 has an invalid length. [ 1004.900477][ T577] : entered promiscuous mode [ 1004.993858][ T582] smc: net device bond0 erased user defined pnetid SYZ [ 1005.448000][ T582] bond0 (unregistering): Released all slaves [ 1005.856071][ T621] dvmrp8: entered allmulticast mode [ 1005.878098][ T621] openvswitch: netlink: Flow key attr not present in new flow. [ 1005.922873][ T619] dvmrp8: left allmulticast mode [ 1006.156073][ T629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1007.142859][ T638] netlink: 'syz.2.9494': attribute type 4 has an invalid length. [ 1007.368526][ T649] netlink: 'syz.3.9499': attribute type 4 has an invalid length. [ 1007.465247][ T653] tipc: Enabling of bearer rejected, already enabled [ 1008.317142][ T681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1008.492064][ T688] netlink: 'syz.2.9507': attribute type 13 has an invalid length. [ 1008.546266][ T688] netlink: 'syz.2.9507': attribute type 17 has an invalid length. [ 1008.731637][ T688] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.746043][ T688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1008.869777][ T688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1008.965594][ T688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1009.111549][ T702] netlink: 'syz.0.9509': attribute type 10 has an invalid length. [ 1009.725969][ T720] netlink: 'syz.1.9515': attribute type 13 has an invalid length. [ 1009.738832][ T720] netlink: 'syz.1.9515': attribute type 17 has an invalid length. [ 1009.750141][ T692] lo speed is unknown, defaulting to 1000 [ 1009.998545][ T720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.114643][ T720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1010.147480][ T732] netlink: 'syz.0.9516': attribute type 15 has an invalid length. [ 1010.350982][ T728] syzkaller1: entered promiscuous mode [ 1010.364362][ T728] syzkaller1: entered allmulticast mode [ 1010.457897][ T692] hsr0 speed is unknown, defaulting to 1000 [ 1010.574416][ T719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1010.915015][ T745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1011.290229][ T723] lo speed is unknown, defaulting to 1000 [ 1012.320179][ T723] hsr0 speed is unknown, defaulting to 1000 [ 1012.518453][ T771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9528'. [ 1012.588418][ T772] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.9528'. [ 1013.537039][ T787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9533'. [ 1013.546712][ T787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9533'. [ 1013.562301][ T790] netlink: 'syz.2.9534': attribute type 4 has an invalid length. [ 1014.633752][ T827] syzkaller1: entered promiscuous mode [ 1014.641882][ T827] syzkaller1: entered allmulticast mode [ 1014.657377][ T828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9547'. [ 1014.659915][ T827] netlink: 'syz.3.9546': attribute type 15 has an invalid length. [ 1014.676726][ T828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9547'. [ 1014.719326][ T829] tipc: Enabling of bearer rejected, already enabled [ 1014.814217][ T832] netlink: 'syz.1.9548': attribute type 4 has an invalid length. [ 1014.914924][ T839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1014.938058][ T840] rdma_rxe: rxe_newlink: failed to add macvlan1 [ 1015.610559][ T853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1016.016365][ T852] gretap1: left promiscuous mode [ 1016.042248][ T852] ip6gre1: left promiscuous mode [ 1016.397775][ T868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9559'. [ 1016.425063][ T868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9559'. [ 1016.819250][ T884] syzkaller1: entered promiscuous mode [ 1016.843571][T19764] page_pool_release_retry() stalled pool shutdown: id 123, 3329 inflight 605 sec [ 1016.843594][ T884] syzkaller1: entered allmulticast mode [ 1016.889020][ T884] netlink: 'syz.2.9566': attribute type 15 has an invalid length. [ 1017.058078][ T892] netlink: 'syz.3.9567': attribute type 4 has an invalid length. [ 1017.362192][ T899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9570'. [ 1017.376715][ T901] syzkaller1: entered promiscuous mode [ 1017.382355][ T901] syzkaller1: entered allmulticast mode [ 1017.396681][ T899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9570'. [ 1017.420136][ T901] netlink: 'syz.0.9571': attribute type 15 has an invalid length. [ 1017.555435][ T908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1018.050374][ T934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9579'. [ 1018.565149][ T949] syzkaller1: entered promiscuous mode [ 1018.570727][ T949] syzkaller1: entered allmulticast mode [ 1018.599193][ T949] netlink: 'syz.2.9580': attribute type 15 has an invalid length. [ 1018.736948][ T958] netlink: 'syz.1.9583': attribute type 4 has an invalid length. [ 1018.751122][ T960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9584'. [ 1018.775207][ T960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9584'. [ 1018.994079][ T966] netlink: 'syz.0.9587': attribute type 4 has an invalid length. [ 1019.267544][ T974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9585'. [ 1019.622006][ T979] syzkaller1: entered promiscuous mode [ 1019.661775][ T979] syzkaller1: entered allmulticast mode [ 1019.677260][ T982] netlink: 'syz.1.9588': attribute type 15 has an invalid length. [ 1019.717646][ T944] netlink: 248 bytes leftover after parsing attributes in process `syz.3.9581'. [ 1019.747564][ T30] audit: type=1800 audit(1755151153.181:21): pid=963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9585" name="cgroup.controllers" dev="tmpfs" ino=9827 res=0 errno=0 [ 1020.085771][ T994] syzkaller1: entered promiscuous mode [ 1020.099346][ T994] syzkaller1: entered allmulticast mode [ 1020.118088][ T950] lo speed is unknown, defaulting to 1000 [ 1020.661846][ T950] hsr0 speed is unknown, defaulting to 1000 [ 1021.006660][ T1021] netlink: 'syz.2.9598': attribute type 4 has an invalid length. [ 1021.041052][ T1023] netlink: 'syz.1.9599': attribute type 4 has an invalid length. [ 1021.094096][ T1008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9595'. [ 1022.176273][ T1047] syzkaller1: entered promiscuous mode [ 1022.192564][ T1047] syzkaller1: entered allmulticast mode [ 1022.228806][ T1047] netlink: 'syz.1.9604': attribute type 15 has an invalid length. [ 1022.275852][ T30] audit: type=1800 audit(1755151155.711:22): pid=1042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9603" name="memory.events" dev="tmpfs" ino=9507 res=0 errno=0 [ 1022.649456][ T1066] tipc: Enabling of bearer rejected, failed to enable media [ 1023.843789][ T1109] syzkaller1: entered promiscuous mode [ 1023.863341][ T1109] syzkaller1: entered allmulticast mode [ 1023.885536][ T1109] netlink: 'syz.1.9619': attribute type 15 has an invalid length. [ 1023.917488][ T1111] syzkaller1: entered promiscuous mode [ 1023.936116][ T1111] syzkaller1: entered allmulticast mode [ 1023.969492][ T1111] netlink: 'syz.0.9620': attribute type 15 has an invalid length. [ 1024.512370][ T1123] syzkaller0: entered promiscuous mode [ 1024.533323][ T1123] syzkaller0: entered allmulticast mode [ 1024.913431][ T1124] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1027.405981][ T1174] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 1027.417898][ T1174] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 1027.427431][ T1174] CPU: 1 UID: 0 PID: 1174 Comm: modprobe Not tainted 6.16.0-syzkaller-12122-g3b5ca25ecfa8 #0 PREEMPT(full) [ 1027.438866][ T1174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1027.448907][ T1174] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 1027.454708][ T1174] Code: 01 48 c7 c7 a0 4c 98 8b be 4b 03 00 00 48 c7 c2 e0 4c 98 8b e8 a4 bd 71 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 4d f7 ff 49 8b 07 a8 03 75 62 [ 1027.474303][ T1174] RSP: 0018:ffffc90003c8f6f8 EFLAGS: 00010206 [ 1027.480360][ T1174] RAX: 000000001fffe000 RBX: ffffffff822bc7f9 RCX: 5acaaf4a86520600 [ 1027.488313][ T1174] RDX: 0000000000000000 RSI: ffffffff8be32660 RDI: ffffffff8be32620 [ 1027.496265][ T1174] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822bc7f9 [ 1027.504223][ T1174] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: dffffc0000000000 [ 1027.512275][ T1174] R13: ffff8880b873b540 R14: 0000000000000001 R15: 00000000ffff0000 [ 1027.520237][ T1174] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 1027.529154][ T1174] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1027.535723][ T1174] CR2: 00007f0c604f9e9c CR3: 000000000df36000 CR4: 00000000003526f0 [ 1027.543681][ T1174] Call Trace: [ 1027.546951][ T1174] [ 1027.549868][ T1174] refill_obj_stock+0x254/0x850 [ 1027.554720][ T1174] ? refill_obj_stock+0x116/0x850 [ 1027.559743][ T1174] __memcg_slab_free_hook+0x127/0x3d0 [ 1027.565110][ T1174] ? unlink_anon_vmas+0x614/0x670 [ 1027.570129][ T1174] kmem_cache_free+0x223/0x400 [ 1027.574890][ T1174] unlink_anon_vmas+0x614/0x670 [ 1027.579762][ T1174] free_pgtables+0x72b/0x9c0 [ 1027.584341][ T1174] ? __pfx_free_pgtables+0x10/0x10 [ 1027.589439][ T1174] ? __pfx_down_write+0x10/0x10 [ 1027.594276][ T1174] ? __mas_set_range+0x12f/0x3c0 [ 1027.599207][ T1174] exit_mmap+0x444/0xb50 [ 1027.603433][ T1174] ? uprobe_clear_state+0x20f/0x290 [ 1027.608615][ T1174] ? __pfx_exit_mmap+0x10/0x10 [ 1027.613361][ T1174] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 1027.618984][ T1174] ? __pfx_exit_aio+0x10/0x10 [ 1027.623651][ T1174] ? uprobe_clear_state+0x274/0x290 [ 1027.628836][ T1174] __mmput+0x118/0x430 [ 1027.632909][ T1174] exit_mm+0x1da/0x2c0 [ 1027.636966][ T1174] ? __pfx_exit_mm+0x10/0x10 [ 1027.641539][ T1174] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 1027.646988][ T1174] ? rcu_is_watching+0x15/0xb0 [ 1027.651746][ T1174] do_exit+0x648/0x2300 [ 1027.655890][ T1174] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1027.661261][ T1174] ? __pfx_do_exit+0x10/0x10 [ 1027.665864][ T1174] ? _raw_spin_unlock_irq+0x23/0x50 [ 1027.671056][ T1174] ? lockdep_hardirqs_on+0x9c/0x150 [ 1027.676248][ T1174] do_group_exit+0x21c/0x2d0 [ 1027.680833][ T1174] __x64_sys_exit_group+0x3f/0x40 [ 1027.685847][ T1174] x64_sys_call+0x21f7/0x2200 [ 1027.690512][ T1174] do_syscall_64+0xfa/0x3b0 [ 1027.695090][ T1174] ? lockdep_hardirqs_on+0x9c/0x150 [ 1027.700276][ T1174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.706328][ T1174] ? clear_bhb_loop+0x60/0xb0 [ 1027.710988][ T1174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.716864][ T1174] RIP: 0033:0x7f0c606586c5 [ 1027.721260][ T1174] Code: Unable to access opcode bytes at 0x7f0c6065869b. [ 1027.728258][ T1174] RSP: 002b:00007ffe26cb81b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 1027.736653][ T1174] RAX: ffffffffffffffda RBX: 00007f0c60759fe8 RCX: 00007f0c606586c5 [ 1027.744616][ T1174] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 1027.752580][ T1174] RBP: 0000000000000001 R08: 00007ffe26cb8148 R09: 0000000000000000 [ 1027.760540][ T1174] R10: 00007ffe26cb7fe0 R11: 0000000000000206 R12: 0000000000000000 [ 1027.768506][ T1174] R13: 0000000000000001 R14: 00007f0c60758680 R15: 00007f0c6075a000 [ 1027.776490][ T1174] [ 1027.779512][ T1174] Modules linked in: [ 1027.783735][ T1174] ---[ end trace 0000000000000000 ]--- [ 1027.789193][ T1174] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 1027.795027][ T1174] Code: 01 48 c7 c7 a0 4c 98 8b be 4b 03 00 00 48 c7 c2 e0 4c 98 8b e8 a4 bd 71 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 4d f7 ff 49 8b 07 a8 03 75 62 [ 1027.814888][ T1174] RSP: 0018:ffffc90003c8f6f8 EFLAGS: 00010206 [ 1027.815983][ T1175] netlink: 'syz.2.9634': attribute type 15 has an invalid length. [ 1027.820974][ T1174] RAX: 000000001fffe000 RBX: ffffffff822bc7f9 RCX: 5acaaf4a86520600 [ 1027.837191][ T1174] RDX: 0000000000000000 RSI: ffffffff8be32660 RDI: ffffffff8be32620 [ 1027.845417][ T1174] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822bc7f9 [ 1027.853641][ T1174] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: dffffc0000000000 [ 1027.861615][ T1174] R13: ffff8880b873b540 R14: 0000000000000001 R15: 00000000ffff0000 [ 1027.869797][ T1174] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 1027.879109][ T1174] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1027.886030][ T1174] CR2: 00007f0c604f9e9c CR3: 000000000df36000 CR4: 00000000003526f0 [ 1027.894581][ T1174] Kernel panic - not syncing: Fatal exception [ 1027.900894][ T1174] Kernel Offset: disabled [ 1027.905200][ T1174] Rebooting in 86400 seconds..