last executing test programs: 4.843656832s ago: executing program 1 (id=8565): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x24, 0x68, 0x100, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x4, 0x0, 0x25}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x8001) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/net\x00') syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000200)) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000100)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r7, &(0x7f00000001c0)={0x2c, 0x0, r6}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 4.449358862s ago: executing program 3 (id=8570): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(r3) (async, rerun: 64) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) (async, rerun: 64) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18060000000000000000000000000000711076000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000d8e600"/18], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900a60d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x20000011) (async) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r10}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) 4.186811579s ago: executing program 3 (id=8573): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private0}, 0xb5) (async, rerun: 64) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x3, 0x2, {0xa, 0x4e24, 0xac3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}, 0x3a) (rerun: 64) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r6}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x4}]}, 0x10) (async) bind$bt_hci(r9, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async, rerun: 32) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (rerun: 32) nanosleep(0x0, 0x0) (async, rerun: 32) r10 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000d1401022abd7000fbd9df2508000100000000000800038000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000240)={'netpci0\x00', {0x2, 0x0, @dev}}) (async, rerun: 64) r13 = socket(0x29, 0x2, 0x0) (rerun: 64) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x200008c0) (async) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r11, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 3.877364088s ago: executing program 2 (id=8575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000440), &(0x7f0000000140)=r2}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400000000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003000739f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r7, 0x1, 0x70bd25, 0x25dfdc01, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x80000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x3400c012) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0xf, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x4004814) 3.846064204s ago: executing program 3 (id=8576): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@updsa={0x10c, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {{@in=@remote, @in6=@mcast2, 0x4e22, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x734c4b15b9d5c4b4}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x2b}, @in6=@remote, {0x7, 0x4, 0x7, 0x5, 0x0, 0x3ba, 0x8000, 0x1}, {0x7, 0x8, 0x30, 0xa}, {0x7a0c39ff, 0x0, 0x2}, 0x70bd28, 0x3506, 0xa, 0x2, 0x67, 0x5c}, [@encap={0x1c, 0x4, {0x0, 0x4e21, 0x4e23, @in=@empty}}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="700000007922fffa9e63aaaaaaaaaabb080045180029006500e00000024e234e223a0454a219412738e3f40055e57818bb80ff235c17a20b42be654ec1bbd41fae93a28a42a81f5f3a7ed198dfb3a1f410ce3afa4aa7cd2fc815c880342a6ec250e95dd9000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c0000690780001ef"], 0x3b) ioctl(r2, 0x1, &(0x7f00000001c0)="4b021bc4187c079003c267a9f2b083535132ed85a83fc858187ac9853c5b2ba2ca87ba6537154718cfb24b09f70935005b029ad99547602b942e27c3ac6ff45f7b520fe03cbb8a66e7806ef6d0b1136d2e2e0d7d7924acbd590a21118d74f9526dc4abc626b5b37c3f0049d64624a93f7d25d1c1f5d34b746e7a6ab63de46308a8dc50db5ce4b45e63babaf74575a4900e07b2f9fb6068c43206d930d424fa5f7028") 3.639399064s ago: executing program 2 (id=8577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x990, 0x50bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x80000001}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd2b, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 3.331718002s ago: executing program 1 (id=8578): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_buf(r1, 0x0, 0x50, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0)=0x800, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f8", 0x4}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x15}, @local}}}], 0x20}, 0x4080) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xcea1, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x67) sendto$inet6(r0, 0x0, 0x0, 0x4088010, 0x0, 0x0) 3.301652962s ago: executing program 4 (id=8579): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000005c0), 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000840)=ANY=[@ANYRESOCT=r0], 0xb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="2f989e7971eaa356f07ab6940d5726a986e4c4ec7e96c01a77211eb226b446d597b10d", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x20002, 0x0) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f00000006c0)) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f00000006c0)={{}, {0x3}, 0x40, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)="7633ec24f75ea7bec0dc64a86b0447fbd73d92433c5126524691a8eab5a73a378fb55992e13e02ce", 0x28, 0x0, &(0x7f0000000540)={0x2, 0x116, {0x0, 0xc, 0xc2, "839f10ebf319d05975e4dec57946ed13e23bcd333b88e59361deb576bd2e8e3e4f60fd63277ef83bad3418cac5b53e10928bd7ada5ef6d0b948ff7772013c1848d717fe512b75826dca3fd1b58f1cd4eafe279795dbc0255b08cb006bc922ef742e4db2ed4a0f236468ca70fef1ee23449abadaf3bdb37a0a50fd3eb1a7c0e365fc6481b6dbf2b1999f8d8a8aa366bb9b4b3b154961fb805f92848f82bcf152865c025cf5eabff8f6e6d17e7e5e87f89b2ed95c9daf45588b0bdafa0d0804a89605e", 0x47, "18db1fccc8f805735ffccb6820c40e0e4a55a878a15e2589f83f2107496221bc285c98f9885c18be9765a436eaf42f05fd61218daeb9c6162d4d3a1e2bb68dd07885bf4082ab12"}, 0x28, "936a5f8d6a5d230b1714c113532842eae70003bbb79df7ba072549c1af040c74db209691027bbefa"}, 0x14a}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a40)={0x0, 0x3e7, 0x5, [0xeda, 0x8, 0x7, 0x5, 0x7f]}, &(0x7f0000000a80)=0x12) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000ac0)={r8, @in6={{0xa, 0x4e22, 0x1, @remote, 0x4}}, [0xa, 0x5, 0xd, 0x6, 0x200, 0x200, 0x6, 0xa000000000000, 0x4c2, 0x8, 0x7, 0x5, 0x1, 0x1, 0x5]}, &(0x7f0000000bc0)=0x100) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r9, r7, 0x4, r7}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) accept4$packet(r10, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000008c0)=0x14, 0x80800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3.205069386s ago: executing program 0 (id=8580): r0 = socket$inet(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r1}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x3, 0x3, 0x0, 0x0, 0x37}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 2.931604171s ago: executing program 1 (id=8581): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x4000}]}}]}, 0x38}}, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, 0x0, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'xfrm0\x00', 0x0}) socket$inet(0x2, 0x4, 0x686) r7 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0xffffffff}, 0x10, 0x100800) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r7, 0x4002f516, &(0x7f0000000140)={0x1, 0x2}) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r6, 0x1019}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)="1349dabc20f333db509ded966aba92bb4e066bb3c1149120be1e11ac7100a6f9ad6aab331aa06c0b2153aaa8059112602d7489844cb14e4f20c4d75535c0a96b235f75b05f2ca120a68a818fd28d28e3153cf426050000000eecffe5d3bf0d517b2c015b3db10b7b5aa57f5fd4286c85f9e627d3ef9bd27f955ee772", 0x7c}], 0x1}, 0x40851) 2.870396054s ago: executing program 2 (id=8582): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x439, 0x270bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0xb8a1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @private=0xa010100}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYRES64, @ANYBLOB="8a49a1d083fb1997438b84dafea92ea496e55ab72dbbab69", @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRES64=r1, @ANYBLOB="857040916d26205513929b2a6b5ed9cf9149773d9b0123939505ee62999c5645a5b0ea1101a9eb10729aec1e26c66ffb40a396e71e", @ANYRES64=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=0x0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 2.758394143s ago: executing program 4 (id=8583): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x646f835d58a82cb8, 0xffffffffffffffff, 0x80000000) write$cgroup_pid(r0, &(0x7f0000000340), 0x12) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x7, 0x3, [0x3ff, 0x4, 0x1]}, &(0x7f00000000c0)=0xe) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x1ff, 0x8004, 0x7fff, 0x9, r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r1, 0x1ff, 0x2, 0x1, 0x7, 0x2, 0x6, 0x5, {r1, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x3, 0x3, 0x9, 0x3, 0x2}}, &(0x7f00000002c0)=0xb0) 2.708430061s ago: executing program 3 (id=8584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ab000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 2.65931018s ago: executing program 0 (id=8585): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200)={0x80000000, 0xf04, 0xfecf, 0x70, 0x7}, 0x14) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=@gettaction={0x1c0, 0x32, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x543}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbb37}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x80a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4b7}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x1000}, 0x50) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x16}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1f}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="fc3a5c586fd4"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d1f595503486f8fd4856988585cb6019"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "7ae52224f3479e0a0e11c8f23627f139"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="93b34e3c0e41"}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xb}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2004c014}, 0x11) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x584a, @empty}, 0x1c) listen(r3, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRESHEX=r4, @ANYRESOCT=r0, @ANYRESDEC=r4], 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a"], 0x44}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24040800}, 0x44885) bind$can_j1939(r8, &(0x7f00000000c0), 0x18) 2.646077972s ago: executing program 1 (id=8586): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x43, 0x9, 0xffffffff, 0x25dfdbfb, {0x2}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) splice(r3, &(0x7f0000000040)=0x7, r2, 0x0, 0x800000000ff, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x7f}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f00000007c0), &(0x7f0000000640)=r4}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r5, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r5, 0x0, &(0x7f0000000400)=""/154}, 0x20) sendmmsg(r2, &(0x7f0000007fc0), 0x0, 0x20044050) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000360009000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000000036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b0113000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a8cb62d81814c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c550282778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b358f571cd15af64f69951d79e5b57ba3640d345fbe1c9bf7ca74846bf4c2a73a80cee7c15839e2326694f6f5cc5408cbfdef7c6868299b1c8cdaf52740cc2e66daafc00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1800000073fbd1dfdd2e5977068d3b80751e4c954522d601f1db2cb1ef978a3bb521b15be8e48bf1b6e059fc93979f3ebdcdcb6499ab6039545dc47ea0c8c213bc5b56b34e9509bbe43f49c5552c94fc8820208a9ebc8d7d01db81440f2dc173eaf72d38a55d781626af2cb659462212c726bcb7699426f34c51ecefcc65d24bb5c87d37a84dde6ba6c223e791608ff3d4392cf47555f53b45ecd69357f608033c9073ceb504dd08f474c2a047fdc89f1c5a6ec21fb9142ee631dded96863b87f6a0495faa82ec39a935e1b0373750", @ANYRES16=r9, @ANYBLOB="831026bd7000fcdbdf251600000004000180"], 0x18}, 0x1, 0x0, 0x0, 0xbde8b7aa92ee725b}, 0x80) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0xa44f) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000340)=0x9111050) pwritev(r6, &(0x7f00000002c0)=[{&(0x7f0000000240)="00214717a7070000000003060000000000000000aaa6729043098c737d317c447bd55c0b041d5874f72cf86d73d3b92ef9d7", 0x32}], 0x1, 0x7, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x86}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x73af1245f84d7000, 0xff, 0x11}, 0x2c) 2.421569416s ago: executing program 4 (id=8587): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e22, 0x2000000, @private1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x15, 0x1, 0x0, 0x0, {0x15}}, 0x14}}, 0x0) 2.265291933s ago: executing program 2 (id=8588): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="f001000016000100000000000000f7fffe01fd00000000000000000000000001ac1414bb00000000000000000000000000000000000000000000802000000000fe158c166e82a93edf08326b3f123f72e695b836d63e86a0e7022834e8af3a3c879690e9401ce1b262dc7f5d92ae3f69b593aee5b3f29e4b66f2f137fbb5c88f86eb24", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efffffffffffffff03000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff040000000000000000000000040000001000000000000000000000000000000002000000b1a0010008000c00c40000000c001c00", @ANYRES32=0x0, @ANYBLOB="00000000e4000600fe8000000000000000000000000000bbff0200000000000000000000000000014e2100014e230000020000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010100000000000000000000000000000004d36c000000ffffffff000000000000000000000000ff070000000000000200000000000000fbffffffffffffffb82ea45c0000000008000000000000000d00000000000000010100000000000002000000000000000200000000000000df000000000000000600000000000000020000000000000001040040020000000300000028bd700006350000020001d15500000000000000"], 0x1f0}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x10}, &(0x7f0000000140)=0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) recvfrom$l2tp(r2, &(0x7f0000000040)=""/210, 0xd2, 0x40, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 2.211465436s ago: executing program 4 (id=8589): syz_emit_ethernet(0x86, &(0x7f0000000980)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @local, {[@timestamp_addr={0x44, 0x1c, 0xfc, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0xb}, 0x4e210000}, {@remote, 0x6}, {@private=0xa010100, 0x3ff}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x3, [{@multicast1}, {@rand_addr, 0x7d}, {@dev}, {@private}, {@broadcast}]}]}}}}}}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x2, 0xffffffffffff17f4}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x34, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20000253) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410001002a007000040000000100000004004480140001800d00108006000a003a000000e10000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) recvmsg$unix(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/47, 0x2f}], 0x1}, 0x40010142) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x4048005) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)={0x140, r1, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xade}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "a1890a341e68bda478981261204ef04cc395767e5a46230fcbf4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9b01}, @TIPC_NLA_NODE_REKEYING={0x27, 0x6, 0x2356}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) 2.133137648s ago: executing program 1 (id=8590): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x1071, 0xffffffffffffffff, 0x469f2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe8c, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000a4330000000000001c250800000000000600000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f000000000000000700000000000000020000006c000000000000002abd700004350000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240009000f00000000000000ceed00000000000009000000000000000001"], 0x15c}, 0x1, 0x0, 0x0, 0x20048851}, 0x24008005) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffa, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x87}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0xfe, 0x1000000000000195, 0xf, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x844) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) mmap(&(0x7f00003bd000/0x1000)=nil, 0x1000, 0x2000001, 0x10, 0xffffffffffffffff, 0xffffe000) (async) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000001c0)={r2, r2, 0x1, 0x66, &(0x7f0000000140)="f7848a01a42384844b0399c231e83ad7af7b0e6cfadac6eb775949f9ba90f09a6b275074838b99ffa96145e4bf4b6a6a437e726a9f75ccbf456d4b5477ca08f093b7230c6e9eb82b62b14f785d0e28ad2dd9145e410342540156c989e8eab44ba3dfd3fa7f5c", 0x3, 0x3, 0x512, 0x0, 0x91, 0x2, 0x4, 'syz1\x00'}) (async) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4) (async) r6 = socket(0x840000000002, 0x3, 0xff) shutdown(r6, 0x1) sendmsg$inet(r6, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="974501000000000001008cc5595c4a9b8f52ac8e", 0x14}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) readv(r7, &(0x7f00000014c0)=[{&(0x7f0000002540)=""/4108, 0x1064}, {&(0x7f0000001400)=""/136, 0x94}], 0x2) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r7) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1860000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="00000000000f0000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000c009500000000000000bf91000005000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r8]}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r10, r9}, 0xc) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) recvfrom$inet(r3, &(0x7f0000000400)=""/174, 0xae, 0x1, &(0x7f00000004c0)={0x2, 0x4e20, @private=0xa010101}, 0x10) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, &(0x7f0000000040)) 1.795158555s ago: executing program 0 (id=8591): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff9) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000580)=ANY=[@ANYBLOB="c400004019000100000000000000f07deb365e2520ee0cd3565e5e21594d84d98029000000000000d19bc3b65287c75caec62f35b600000000ff020000001a00000000000000f4ff0000000008", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000800600000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a00000000000004000000008040000200000000000008000000000000000000000000000000000c0015005a07350008000000"], 0xc4}}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000100061106a000000000000000000000000009500000000000000"], 0x0}, 0x90) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) getsockname(r4, 0x0, &(0x7f0000000140)) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a00000002100010027bd70000000000064010102000000000000000000000000ff02000000000000000000000700000000000000000000020a0000a073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100fc00000000000000000000000000000100000000000000000000000000000000fc020000000000000000000000000001e00000010000000000000000000000003c040000000000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0xc0, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x7, 0x7, 0x5]}, @CTA_LABELS_MASK={0x14, 0x17, [0x9, 0x3, 0x8, 0xb0bf]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x10, 0x1, 0x2, 0xfffffff5]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x602, 0x2, 0x8, 0x4, 0x12, 0xc]}, @CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r5 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) connect$unix(r7, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000040)={{0xff, @multicast2, 0x4e22, 0x0, 'sed\x00', 0x12, 0x0, 0x59}, {@empty, 0x4e20, 0x10000, 0x3, 0x49e, 0x100}}, 0x44) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x62, @dev={0xac, 0x14, 0x14, 0x14}, 0x4e20, 0x1, 'wrr\x00', 0x2, 0x6, 0x27}, 0x2c) 1.781256431s ago: executing program 2 (id=8592): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x14, 0x0, 0x0, 0x1, 0xfd, 0x1}, [@RTA_TABLE={0x8, 0xf, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5000020010003704000000000000000000000018", @ANYRES32=0x0, @ANYBLOB="8b040400000000003000128008000100736974002400028008000100", @ANYRES32=0x0, @ANYBLOB="08000300ffffffff080002007f0000010600080003000000"], 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000043000701037c000004004780159ebd6cb340e6f653764dc91a8207cc8d07ecab5ba1de4f5d7800000063865f8a86db66901c8d7cd32b34d96ab27fb9523b673ecc62131da89c9ef5b6fd80fdac21eb1af9"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0xc000) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000001000000014000000"], 0x0, 0x36, 0x0, 0x1}, 0x20) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, &(0x7f00000004c0)='N', 0x0}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000050001030300000000000000e00000040000feff0076657468314f746f5f62726964676500"], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x44004) socket$igmp(0x2, 0x3, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010003904ffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="01980000131300001cb8877e7fb4b0fb8d81f948be59d73d000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 1.648844901s ago: executing program 4 (id=8593): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000009000), 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @private}}}], 0x20}, 0x0) 1.62184533s ago: executing program 0 (id=8594): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r3, 0x4}, &(0x7f0000000180)=0x8) 1.565369624s ago: executing program 0 (id=8595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 1.460523488s ago: executing program 4 (id=8596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0200"}) (async) r3 = socket$kcm(0x11, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async) r6 = socket(0xa, 0x3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x6, 0x0, &(0x7f0000000840)) (async) close(0x3) 1.411275327s ago: executing program 0 (id=8597): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x37cb7880}, {0x0, 0xfe, 0x10}, {0x6, 0x0, 0x0, 0x8007}]}) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x118, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x2, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r7, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"/2097], 0x7a0}, 0x1, 0x0, 0x0, 0x4090}, 0x800) 1.345795316s ago: executing program 3 (id=8598): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(r1) epoll_create1(0x80000) write$cgroup_int(r1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x20044840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={0x268, 0x0, 0x5, 0x705, 0x0, 0x0, {0x0, 0x0, 0x6}, [{{0x254, 0x1, {{0x3}, 0xff, 0x2, 0x7f, 0x9a86, 0xd, 'syz0\x00', "222594798440f178f54c1996367e8548d2f42520daad81c283ec6a7143dd82a7", "1d206a30902bdc634df190b76b099c46caf760ab3d99c21b66216930ad84f241", [{0x2, 0x81, {0x3, 0x9}}, {0x4, 0x4, {0x2, 0x3}}, {0x3, 0x6, {0x2}}, {0x6, 0x8, {0x3, 0xffffff81}}, {0x3ff, 0x694a, {0x3, 0x1}}, {0x4000, 0x40, {0x312aaede4e4f2d9f, 0x2}}, {0x0, 0xe, {0x3, 0x6}}, {0x8, 0x8, {0x0, 0x6}}, {0x0, 0x2, {0x0, 0x2}}, {0x7, 0x81f, {0x1, 0x2}}, {0x8, 0x8, {0x3, 0x7}}, {0x1, 0xf085, {0x1, 0x6}}, {0x8001, 0x4, {0x3, 0x9}}, {0x1, 0x97, {0x2, 0x9}}, {0xfff, 0x5, {0x2, 0xffffffff}}, {0x2, 0x5, {0x0, 0x2}}, {0x8, 0x8, {0x2, 0x8001}}, {0x5, 0xffff, {0x0, 0x8}}, {0x4f6, 0x4, {0x1, 0x5}}, {0x8cfd, 0x8, {0x2, 0x5}}, {0x2, 0x1, {0x2, 0xfffffff7}}, {0x9c1d, 0x0, {0x1, 0xf804}}, {0xa4, 0x1ff, {0x2, 0x6}}, {0xa, 0x0, {0x1, 0x539}}, {0x7, 0x2, {0x2, 0x4}}, {0x9, 0x0, {0x2, 0x3df}}, {0x1, 0x1b, {0x0, 0xc}}, {0x3, 0xa7, {0x1, 0x1d}}, {0x6, 0x7, {0x3, 0x7}}, {0x478, 0x8, {0x1, 0x7}}, {0x2, 0x5}, {0x209, 0x7, {0x3, 0xc}}, {0x8, 0x0, {0x2, 0x8965}}, {0x4, 0x9, {0x0, 0x7f95}}, {0x6, 0x9, {0x3, 0x1}}, {0x42, 0x7, {0x1, 0x5}}, {0x80, 0x5, {0x2, 0x2}}, {0x7, 0x5, {0x1, 0xbd5}}, {0x7d, 0x0, {0x0, 0x1000}}, {0x4, 0x4, {0x0, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x10}, 0x24000800) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20014020) 1.216541999s ago: executing program 3 (id=8599): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)=@newtaction={0x18, 0x76, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0x4}]}, 0x18}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x10}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYRESHEX=r0], 0x50) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) (async) socket(0x8, 0x3, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x3, 0x87) pselect6(0x40, &(0x7f0000000040)={0xd0, 0x0, 0x10, 0x7c6, 0xfdb1, 0x5, 0xc16d, 0x7}, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESHEX=r6, @ANYBLOB="6ebe6ab3cd5961c25e4b77a1df358c3354bfdad63845e477551f6d3d6d8066c428cfbf1fbd4af3f387e16f34ccc05ca3583f55b2efcf88b62861b4bb80436757631cd67d9a68ec4a58067b5cd20699fb5ea426610031eb7ab042d3d47cbaa41bb845700acacb9a5d5aa24a2167998382c6e6e54d930f0335b2e9fc6e65dd5493"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x40040) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(0xffffffffffffffff, 0x84, 0x1007d, &(0x7f00000010c0)="a571001015f0390900355fcf7a", 0xd) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="06e30400d697c8ff"], 0xc) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x6}, 0x8) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) 1.164300174s ago: executing program 1 (id=8600): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001800000000000000000000000700000007038b0100000000"], 0x38}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000100001000000000000000000ac574400000000000000007f000001000000000000000000000000000000000000000002000000000a00ff8000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x180}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) r6 = socket(0x10, 0x803, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, r4}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={0xffffffffffffffff, r7}, 0xc) syz_emit_ethernet(0x1a7, &(0x7f0000000580)={@link_local, @link_local, @void, {@ipv4={0x800, @dccp={{0xe, 0x4, 0x1, 0xf, 0x199, 0x65, 0x0, 0xb, 0x21, 0x0, @rand_addr=0x64010101, @private=0xa010101, {[@lsrr={0x83, 0xf, 0x70, [@multicast1, @multicast1, @loopback]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0xf, "dfc3e72356a16d0fdd85051726"}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x0, 0x3, "cf29a4", 0x9, "3cf83a"}, "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"}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dvmrp1\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@remote, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="c7f528f0adf8", @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote}}}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r11, 0x84, 0x1, 0x0, &(0x7f0000000040)) socket$vsock_stream(0x28, 0x1, 0x0) sendto$packet(r9, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x2}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x4}]}}]}, 0x58}}, 0x0) syz_emit_ethernet(0x1016, &(0x7f00000010c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81004000001142027f62ef"], 0x0) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r12, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r12, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0xffe0, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x41d808}]}}]}, 0x3c}}, 0x20040054) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000a515cfcccc2b9f19103d9e2b99607c757cad4cc7096fc2131f96c8bae281b877ed3ebc2ef9e5f9649c936c1f7f3ae0179cd585e38cb42a90f3", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005001600030000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 0s ago: executing program 2 (id=8601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008, 0x7}, {0x100000001, 0x8, 0xcc}, {0xf6}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x804) kernel console output (not intermixed with test programs): ce deactivated: batadv_slave_0 [ 829.191954][T30363] batadv_slave_0: entered promiscuous mode [ 829.208143][T30365] netlink: 'syz.4.6456': attribute type 2 has an invalid length. [ 829.255758][T30231] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.273615][T30231] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.306464][T30231] bridge_slave_0: entered allmulticast mode [ 829.355919][T30231] bridge_slave_0: entered promiscuous mode [ 829.404084][T30231] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.427603][T30231] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.445665][T30231] bridge_slave_1: entered allmulticast mode [ 829.456310][T30373] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6460'. [ 829.470158][T30231] bridge_slave_1: entered promiscuous mode [ 829.504631][T30374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6459'. [ 829.541824][T30374] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6459'. [ 829.562015][T30374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6459'. [ 829.607165][T30231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.625458][T30374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6459'. [ 829.661985][T30231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.841492][T30231] team0: Port device team_slave_0 added [ 829.896275][T30231] team0: Port device team_slave_1 added [ 829.990290][T30231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.999064][T30231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.027993][T30231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.069899][T30396] bond0: entered promiscuous mode [ 830.075083][T30396] bond_slave_0: entered promiscuous mode [ 830.080983][T30396] bond_slave_1: entered promiscuous mode [ 830.089265][T30396] batadv0: entered promiscuous mode [ 830.099031][T30396] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 830.139045][T30396] bond0: left promiscuous mode [ 830.144484][T30396] bond_slave_0: left promiscuous mode [ 830.150384][T30396] bond_slave_1: left promiscuous mode [ 830.158397][T30396] batadv0: left promiscuous mode [ 830.182514][T30231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.189773][T30231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.219438][T30231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.243549][T30399] tipc: Started in network mode [ 830.249015][T30399] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 830.257452][T30399] tipc: Enabled bearer , priority 24 [ 830.464853][T30231] hsr_slave_0: entered promiscuous mode [ 830.473653][T30231] hsr_slave_1: entered promiscuous mode [ 830.493850][T30231] debugfs: 'hsr0' already exists in 'hsr' [ 830.515960][T30231] Cannot create hsr debugfs directory [ 830.597238][T30404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.712045][T30417] netlink: 41 bytes leftover after parsing attributes in process `syz.1.6471'. [ 830.722635][T30417] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6471'. [ 830.732050][T30417] netlink: 41 bytes leftover after parsing attributes in process `syz.1.6471'. [ 830.911542][T25435] Bluetooth: hci4: command tx timeout [ 831.550632][ T5727] tipc: Node number set to 10005162 [ 831.836455][T30231] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.848761][T30231] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.859629][T30231] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 832.184412][T30465] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6481'. [ 832.244503][T30231] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 832.259051][T30231] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.271182][T30231] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 832.364912][T30475] IPv6: sit1: Disabled Multicast RS [ 832.402464][T30462] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 832.427077][T30469] syz_tun: entered allmulticast mode [ 832.493902][T30231] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 832.504324][T30231] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.514652][T30231] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 832.546738][T30469] syz_tun: left allmulticast mode [ 832.770585][T30486] syzkaller0: entered promiscuous mode [ 832.777704][T30486] syzkaller0: entered allmulticast mode [ 832.917204][T30231] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 832.937711][T30231] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.970490][T30231] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 832.991043][T25435] Bluetooth: hci4: command tx timeout [ 837.205567][T30516] __nla_validate_parse: 4 callbacks suppressed [ 837.205588][T30516] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6496'. [ 837.328969][T30519] syzkaller0: entered promiscuous mode [ 837.343892][T30519] syzkaller0: entered allmulticast mode [ 837.442334][T30519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6495'. [ 837.492907][T30527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6501'. [ 837.527558][T30525] syzkaller0: entered promiscuous mode [ 837.533171][T30525] syzkaller0: entered allmulticast mode [ 837.857231][T30543] netlink: 'syz.0.6503': attribute type 32 has an invalid length. [ 837.881763][T30543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6503'. [ 841.824660][T30231] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 841.846502][T30231] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 841.861041][T30231] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 841.882945][T30231] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 841.891337][T30543] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 841.900976][T30231] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 841.944123][T30231] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 842.002526][T30231] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 842.020095][T30231] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 842.071465][T30554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6507'. [ 842.257949][T30231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.293494][T30231] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.414471][T25875] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.421724][T25875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.462812][T25875] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.470086][T25875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.521800][T30577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6513'. [ 843.037636][T30598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6516'. [ 843.319247][T30610] netlink: 'syz.4.6519': attribute type 1 has an invalid length. [ 843.337124][T30613] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6519'. [ 843.370647][T30610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 843.632943][T30628] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6523'. [ 843.674458][T30231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.713156][T30633] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6523'. [ 843.993392][T30644] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6527'. [ 844.010147][T30652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.014867][T30231] veth0_vlan: entered promiscuous mode [ 844.074476][T30231] veth1_vlan: entered promiscuous mode [ 844.116224][T30653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6528'. [ 844.178287][T30652] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.378431][T30231] veth0_macvtap: entered promiscuous mode [ 844.422410][T30231] veth1_macvtap: entered promiscuous mode [ 844.501649][T30231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.537982][T30231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.620361][T30671] syz_tun: entered allmulticast mode [ 844.674059][T25878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.694508][T30671] dvmrp8: entered allmulticast mode [ 844.702621][T25878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.762568][T25878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.812890][T30677] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6534'. [ 844.815610][T25878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.856346][T30669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6533'. [ 844.969358][T30669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6533'. [ 845.230495][T30684] ¾x9ÿ: left allmulticast mode [ 845.240256][T30684] ¾x9ÿ: left promiscuous mode [ 845.255295][T30684] bridge0: port 1(1¾x9ÿ) entered disabled state [ 845.299682][T30684] bridge_slave_1: left allmulticast mode [ 845.309404][T30684] bridge_slave_1: left promiscuous mode [ 845.319038][T30684] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.378456][T30684] bond0: (slave bond_slave_0): Releasing backup interface [ 845.417339][T30684] bond0: (slave bond_slave_1): Releasing backup interface [ 845.489249][T30684] team0: Port device team_slave_0 removed [ 845.513739][T30684] team0: Port device team_slave_1 removed [ 845.525300][T30684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.539556][T30684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.571783][T30684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.582356][T30684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.609569][T30684] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 845.750229][T30670] syz_tun: left allmulticast mode [ 845.820154][T25875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.885681][T25875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.050266][T25875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.094821][T25875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.092907][T30747] tc action pedit offset -64 out of bounds [ 847.181387][T30751] netlink: 'syz.3.6551': attribute type 1 has an invalid length. [ 847.201478][T30750] netlink: 'syz.1.6552': attribute type 2 has an invalid length. [ 847.269628][T30750] : entered promiscuous mode [ 847.554568][T30763] __nla_validate_parse: 2 callbacks suppressed [ 847.554624][T30763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6554'. [ 847.585281][T30763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6554'. [ 847.594301][T30763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6554'. [ 847.651743][T30766] bond0: entered allmulticast mode [ 847.656935][T30766] bond_slave_0: entered allmulticast mode [ 847.702243][T30766] bond_slave_1: entered allmulticast mode [ 847.925833][T30772] netlink: 'syz.4.6557': attribute type 17 has an invalid length. [ 847.936962][T30772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6557'. [ 847.958432][T30772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6557'. [ 847.987101][T30772] gretap0: entered promiscuous mode [ 848.045780][T30772] gretap0: left promiscuous mode [ 848.262818][T30800] netlink: 'syz.2.6563': attribute type 1 has an invalid length. [ 848.285056][T30797] rdma_rxe: rxe_newlink: failed to add wg2 [ 848.293180][T30784] syzkaller0: entered promiscuous mode [ 848.298782][T30784] syzkaller0: entered allmulticast mode [ 848.311371][T30791] tipc: Started in network mode [ 848.316302][T30791] tipc: Node identity ac14140f, cluster identity 4711 [ 848.350180][T30806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6563'. [ 848.369217][T30806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6563'. [ 848.415267][T30791] tipc: Enabled bearer , priority 10 [ 848.534911][T30807] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 848.649658][T30816] openvswitch: netlink: IPv4 tunnel dst address is zero [ 848.658582][T30816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 852.547174][ T187] tipc: Node number set to 2886997007 [ 852.639015][T30835] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6571'. [ 852.675849][T30832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6570'. [ 852.698733][T30832] syzkaller0: entered promiscuous mode [ 852.720906][T30832] syzkaller0: entered allmulticast mode [ 852.873352][T30840] sctp: [Deprecated]: syz.3.6573 (pid 30840) Use of int in max_burst socket option. [ 852.873352][T30840] Use struct sctp_assoc_value instead [ 853.087312][T30842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6574'. [ 853.254905][T30842] syzkaller0: entered promiscuous mode [ 853.260429][T30842] syzkaller0: entered allmulticast mode [ 853.529439][T30871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6581'. [ 853.980901][T30886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6586'. [ 854.208632][T30897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6590'. [ 854.460071][T30904] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6595'. [ 854.528498][T30908] netlink: 'syz.4.6594': attribute type 21 has an invalid length. [ 854.578863][T30908] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6594'. [ 854.591574][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 854.672033][T30917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6598'. [ 854.742308][T30917] netlink: 'syz.1.6598': attribute type 1 has an invalid length. [ 854.824462][T30928] x_tables: duplicate underflow at hook 3 [ 854.843294][T30931] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6598'. [ 854.859013][T30929] x_tables: duplicate underflow at hook 3 [ 854.910411][T30917] 8021q: adding VLAN 0 to HW filter on device bond3 [ 854.928952][T30928] netlink: 'syz.3.6599': attribute type 16 has an invalid length. [ 855.198181][T30949] netlink: 'syz.1.6604': attribute type 1 has an invalid length. [ 855.271224][T30949] 8021q: adding VLAN 0 to HW filter on device bond4 [ 855.384775][T30949] bond4: (slave geneve2): making interface the new active one [ 855.399925][T30949] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 855.443036][T30966] batman_adv: batadv0: Adding interface: dummy0 [ 855.449609][T30970] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 855.466533][T30966] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.547462][T30966] batman_adv: batadv0: Interface activated: dummy0 [ 855.659255][T30967] batadv0: mtu less than device minimum [ 855.677080][T30967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 855.700915][T30967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 855.712846][T30967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 855.724790][T30967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 855.736727][T30967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 855.748558][T30967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 855.760509][T30967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 855.772363][T30967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 855.784350][T30967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 856.195385][T31011] xt_nat: multiple ranges no longer supported [ 856.718954][T31037] netlink: 'syz.0.6627': attribute type 1 has an invalid length. [ 857.264075][T31037] 8021q: adding VLAN 0 to HW filter on device bond3 [ 857.303174][T31051] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 857.318715][T31051] block nbd5: Unsupported socket: should be TCP or UNIX. [ 857.841908][T31060] __nla_validate_parse: 6 callbacks suppressed [ 857.841927][T31060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6633'. [ 857.987937][T31065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6634'. [ 858.418864][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6639'. [ 858.451325][T31079] netlink: 'syz.1.6639': attribute type 10 has an invalid length. [ 858.468858][T31084] netlink: 'syz.3.6640': attribute type 21 has an invalid length. [ 858.487704][T31079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6639'. [ 858.958240][T31103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.968284][T31101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6646'. [ 858.988330][T31096] syzkaller1: entered promiscuous mode [ 859.000081][T31101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6646'. [ 859.009642][T31096] syzkaller1: entered allmulticast mode [ 859.028830][T31101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6646'. [ 859.028973][ T9114] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.037827][T31101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6646'. [ 859.059240][ T9114] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.121631][T31106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.152279][ T9114] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.169925][ T9114] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.185017][T31109] siw: device registration error -23 [ 859.423049][T31119] netlink: 'syz.0.6651': attribute type 1 has an invalid length. [ 859.465111][T31123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6654'. [ 859.543250][T31128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6652'. [ 860.616899][T31176] netlink: 'syz.2.6670': attribute type 10 has an invalid length. [ 861.062470][T31188] netlink: 'syz.2.6675': attribute type 1 has an invalid length. [ 861.130567][T31189] netlink: 'syz.1.6674': attribute type 10 has an invalid length. [ 861.150095][T31188] veth3: entered promiscuous mode [ 861.163712][T31188] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 861.206352][T31189] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.264944][T31189] team0: entered allmulticast mode [ 861.277393][T31189] team_slave_0: entered allmulticast mode [ 861.297392][T31189] team_slave_1: entered allmulticast mode [ 861.368038][T31188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 861.493994][T31199] sctp: [Deprecated]: syz.0.6677 (pid 31199) Use of int in max_burst socket option deprecated. [ 861.493994][T31199] Use struct sctp_assoc_value instead [ 861.877797][T31210] tipc: Started in network mode [ 861.911603][T31210] tipc: Node identity 9e997c7b6786, cluster identity 4711 [ 861.931356][T31210] tipc: Enabled bearer , priority 0 [ 862.039679][T31216] can: request_module (can-proto-3) failed. [ 862.158300][T31220] syzkaller0: entered promiscuous mode [ 862.173867][T31220] syzkaller0: entered allmulticast mode [ 862.186101][T31220] tipc: Resetting bearer [ 862.235729][T31209] tipc: Resetting bearer [ 862.505050][T31236] atomic_op ffff888029a3e998 conn xmit_atomic 0000000000000000 [ 862.755346][T31246] netlink: 'syz.4.6685': attribute type 1 has an invalid length. [ 866.447006][T31209] tipc: Disabling bearer [ 866.479125][T17698] tipc: Node number set to 4179590267 [ 866.756075][T31273] netlink: 'syz.3.6694': attribute type 10 has an invalid length. [ 866.767503][T31275] netlink: 'syz.4.6691': attribute type 1 has an invalid length. [ 866.788908][T31273] __nla_validate_parse: 8 callbacks suppressed [ 866.788926][T31273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6694'. [ 866.806525][T31275] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6691'. [ 866.831547][T31275] netlink: 'syz.4.6691': attribute type 1 has an invalid length. [ 867.301188][T31299] sctp: [Deprecated]: syz.4.6699 (pid 31299) Use of int in max_burst socket option deprecated. [ 867.301188][T31299] Use struct sctp_assoc_value instead [ 867.647222][T31311] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 867.670170][T31313] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 867.728055][T31311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6703'. [ 868.025164][T31330] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6709'. [ 868.040295][T31330] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.047807][T31330] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.239389][T31336] syzkaller0: entered promiscuous mode [ 868.258302][T31336] syzkaller0: entered allmulticast mode [ 868.312570][T31341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6712'. [ 868.313803][T31340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6712'. [ 868.321678][T31341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6712'. [ 868.328725][T31341] geneve2: entered promiscuous mode [ 868.348007][T31339] netlink: 216 bytes leftover after parsing attributes in process `syz.4.6711'. [ 868.357129][T31339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6711'. [ 868.371295][T31340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6712'. [ 868.728662][T31368] netlink: 'syz.2.6719': attribute type 1 has an invalid length. [ 868.835616][T31372] 8021q: adding VLAN 0 to HW filter on device bond3 [ 868.855351][T31372] bond2: (slave bond3): making interface the new active one [ 868.871830][T31372] bond2: (slave bond3): Enslaving as an active interface with an up link [ 868.899345][T31368] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 869.131925][T31339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 869.416419][T31382] netlink: 'syz.3.6722': attribute type 10 has an invalid length. [ 869.464228][T31382] geneve1: entered promiscuous mode [ 869.483496][T31382] team0: Port device geneve1 added [ 870.312284][T31416] netlink: 'syz.2.6731': attribute type 2 has an invalid length. [ 870.346598][T31416] netlink: 'syz.2.6731': attribute type 8 has an invalid length. [ 871.238211][T31460] netlink: 'syz.0.6744': attribute type 4 has an invalid length. [ 871.385260][T31436] lo speed is unknown, defaulting to 1000 [ 871.393600][T31436] lo speed is unknown, defaulting to 1000 [ 871.662488][T31475] netlink: 'syz.2.6749': attribute type 7 has an invalid length. [ 871.708257][T31475] netlink: 'syz.2.6749': attribute type 8 has an invalid length. [ 871.826948][ T5826] IPVS: starting estimator thread 0... [ 871.830361][T31483] __nla_validate_parse: 74 callbacks suppressed [ 871.830379][T31483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6751'. [ 871.835398][T31481] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6752'. [ 871.917448][T31488] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6749'. [ 871.979810][T31491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6754'. [ 872.017928][T31494] netlink: 'syz.2.6755': attribute type 83 has an invalid length. [ 872.146069][T31482] IPVS: using max 35 ests per chain, 84000 per kthread [ 872.210933][T31496] netlink: 'syz.3.6756': attribute type 12 has an invalid length. [ 872.257091][T31499] Cannot find add_set index 0 as target [ 872.275025][T31499] netlink: 'syz.4.6759': attribute type 1 has an invalid length. [ 872.565699][T31511] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6761'. [ 872.608325][T31499] 8021q: adding VLAN 0 to HW filter on device bond2 [ 872.647832][T31504] bond2: (slave gretap1): making interface the new active one [ 872.657222][T31504] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 872.915952][T31528] netlink: 288 bytes leftover after parsing attributes in process `syz.2.6767'. [ 873.171372][T31534] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 873.423034][T31546] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6770'. [ 874.163577][T31579] netlink: 'syz.4.6782': attribute type 2 has an invalid length. [ 874.680251][T31593] net_ratelimit: 13 callbacks suppressed [ 874.680294][T31593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 874.757618][T31599] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6788'. [ 874.854468][T31604] netlink: 'syz.0.6790': attribute type 21 has an invalid length. [ 874.890359][T31604] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6790'. [ 874.958891][T31604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6790'. [ 875.326777][T31621] syz_tun: refused to change device tx_queue_len [ 875.523326][T31629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 876.241124][T31649] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 876.258898][T31651] netlink: 'syz.1.6802': attribute type 4 has an invalid length. [ 876.291300][T31648] netlink: 'syz.0.6800': attribute type 1 has an invalid length. [ 876.327947][T31648] netlink: 'syz.0.6800': attribute type 1 has an invalid length. [ 876.604436][T31648] 8021q: adding VLAN 0 to HW filter on device bond5 [ 876.686204][T31648] bond4: (slave bond5): making interface the new active one [ 876.706361][T31648] bond4: (slave bond5): Enslaving as an active interface with an up link [ 876.817550][T31674] netlink: 'syz.2.6806': attribute type 1 has an invalid length. [ 876.829829][T31675] openvswitch: netlink: Key type 153 is out of range max 32 [ 876.842988][T31674] __nla_validate_parse: 5 callbacks suppressed [ 876.843056][T31674] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6806'. [ 876.872730][T31678] openvswitch: netlink: Key type 153 is out of range max 32 [ 876.880645][T31658] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 876.904895][T31671] 8021q: adding VLAN 0 to HW filter on device bond4 [ 876.937476][T31678] x_tables: unsorted underflow at hook 4 [ 876.984068][T31678] only policy match revision 0 supported [ 876.984089][T31678] unable to load match [ 877.319088][T31694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6814'. [ 877.746692][T31712] ipvlan1: entered promiscuous mode [ 877.769844][T31712] ipvlan1: entered allmulticast mode [ 877.798382][T25435] Bluetooth: hci2: command 0x0406 tx timeout [ 877.807283][T31712] veth0_vlan: entered allmulticast mode [ 877.833681][T31717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6817'. [ 878.081009][T31693] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 878.119681][T31693] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 878.272105][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.355651][T31693] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 878.377956][T31693] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 878.558769][T31740] ipt_REJECT: ECHOREPLY no longer supported. [ 878.566117][T31693] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 878.579556][T31693] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 878.711977][T31693] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 878.748906][T31693] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 878.953969][T31693] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 878.982534][T31693] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 879.352714][T31753] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.443794][T31767] netlink: 'syz.0.6833': attribute type 39 has an invalid length. [ 879.469148][T31767] hsr_slave_0: left promiscuous mode [ 879.497596][T31767] hsr_slave_1: left promiscuous mode [ 879.627562][T31770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6835'. [ 879.754230][T31772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6836'. [ 880.085330][T31786] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6838'. [ 880.201774][T31787] syzkaller1: entered promiscuous mode [ 880.207315][T31787] syzkaller1: entered allmulticast mode [ 880.500007][T31799] netlink: 'syz.4.6845': attribute type 1 has an invalid length. [ 880.504940][T31801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6848'. [ 880.690966][T31799] macvlan2: entered promiscuous mode [ 880.696357][T31799] macvlan2: entered allmulticast mode [ 880.703041][T31799] bond3: entered promiscuous mode [ 880.708948][T31799] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 880.725282][T31799] bond3: left promiscuous mode [ 880.753880][T31813] xt_hashlimit: size too large, truncated to 1048576 [ 881.264951][T31832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6855'. [ 881.268652][T31841] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6857'. [ 881.510261][T31849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6859'. [ 881.513693][T31852] netlink: 'syz.2.6862': attribute type 1 has an invalid length. [ 881.527467][T31853] netlink: 'syz.2.6862': attribute type 1 has an invalid length. [ 881.581955][T31853] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 881.584036][T31852] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 881.628030][T31854] sit3: entered promiscuous mode [ 881.655086][T31854] sit3: entered allmulticast mode [ 881.959522][T31882] __nla_validate_parse: 2 callbacks suppressed [ 881.959544][T31882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6869'. [ 881.980590][T31882] syzkaller0: entered promiscuous mode [ 881.990345][T31882] syzkaller0: entered allmulticast mode [ 882.061640][T31884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6870'. [ 882.093389][T31884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6870'. [ 882.222853][T31884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6870'. [ 882.232413][T31884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6870'. [ 882.346253][T31894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6872'. [ 882.358206][T31894] netlink: 'syz.1.6872': attribute type 10 has an invalid length. [ 882.367023][T31894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6872'. [ 882.495817][T31898] xt_hashlimit: size too large, truncated to 1048576 [ 882.496796][T31899] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6873'. [ 882.736375][T31905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6875'. [ 882.760357][T31905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6875'. [ 885.148148][T32008] openvswitch: netlink: Multiple metadata blocks provided [ 885.409361][T32019] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 885.649238][T32033] openvswitch: netlink: Actions may not be safe on all matching packets [ 885.830827][ T5286] veth0_vlan: left promiscuous mode [ 885.844977][T29583] veth0_vlan: entered promiscuous mode [ 886.107446][T32045] syzkaller0: entered promiscuous mode [ 886.113078][T32045] syzkaller0: entered allmulticast mode [ 886.506056][T32060] xt_connbytes: Forcing CT accounting to be enabled [ 886.546906][T32060] Cannot find set identified by id 1 to match [ 886.557157][T32063] : renamed from bond0 (while UP) [ 886.966423][T32077] netlink: 'syz.2.6922': attribute type 2 has an invalid length. [ 887.041274][T32077] : entered promiscuous mode [ 887.107573][T32086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 887.121040][T32085] __nla_validate_parse: 4 callbacks suppressed [ 887.121064][T32085] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6924'. [ 887.368783][T32097] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 887.453568][T32091] syzkaller0: entered promiscuous mode [ 887.465567][T32105] netlink: 'syz.1.6927': attribute type 21 has an invalid length. [ 887.474145][T32091] syzkaller0: entered allmulticast mode [ 887.520070][T32105] IPv6: NLM_F_CREATE should be specified when creating new route [ 887.569431][T32105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 887.576792][T32105] IPv6: NLM_F_CREATE should be set when creating new route [ 887.584254][T32105] IPv6: NLM_F_CREATE should be set when creating new route [ 887.591734][T32105] IPv6: NLM_F_CREATE should be set when creating new route [ 887.709761][T32091] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6926'. [ 888.329136][T32141] netlink: 'syz.0.6938': attribute type 4 has an invalid length. [ 888.382920][T32141] netlink: 'syz.0.6938': attribute type 4 has an invalid length. [ 888.427064][T32141] xt_l2tp: invalid flags combination: 8 [ 888.433248][T32150] netlink: 'syz.1.6940': attribute type 4 has an invalid length. [ 888.485311][T32150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6940'. [ 888.665262][T32158] xt_hashlimit: size too large, truncated to 1048576 [ 889.033393][T32171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6946'. [ 889.078705][T32171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6946'. [ 889.146646][T32174] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6947'. [ 889.657576][T32185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 889.693589][T32186] xt_bpf: check failed: parse error [ 890.384134][T32210] netlink: 'syz.4.6960': attribute type 1 has an invalid length. [ 890.556681][T32210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.645080][T32217] bond0: (slave geneve2): making interface the new active one [ 890.655605][T32217] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 891.071119][T32236] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6962'. [ 891.072225][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 891.272082][T32253] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 891.523504][T32267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6972'. [ 891.569628][T32270] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6973'. [ 891.746375][T32281] bond0: entered allmulticast mode [ 891.751966][T32281] bond_slave_0: entered allmulticast mode [ 891.805074][T32281] bond_slave_1: entered allmulticast mode [ 891.862899][T32286] syzkaller0: entered promiscuous mode [ 891.875383][T32286] syzkaller0: entered allmulticast mode [ 891.886579][T32286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6980'. [ 892.167923][T32311] Cannot find add_set index 0 as target [ 892.392182][T32319] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.510973][T32327] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6987'. [ 892.587325][T32334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6993'. [ 892.693212][T32339] netlink: 6212 bytes leftover after parsing attributes in process `syz.4.6994'. [ 893.208374][T32369] gre0: entered promiscuous mode [ 893.213896][T32369] gre0: entered allmulticast mode [ 893.301996][T32373] netlink: 'syz.3.7002': attribute type 1 has an invalid length. [ 893.518149][T32373] 8021q: adding VLAN 0 to HW filter on device bond4 [ 893.599820][T32377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7003'. [ 893.682628][T32379] vlan2: entered promiscuous mode [ 893.716756][T32379] bond4: entered promiscuous mode [ 893.737496][T32379] vlan2: entered allmulticast mode [ 893.761049][T32379] bond4: entered allmulticast mode [ 893.809298][T32385] bond4: (slave bridge2): making interface the new active one [ 893.816870][T32385] bridge2: entered promiscuous mode [ 893.822329][T32385] bridge2: entered allmulticast mode [ 893.829089][T32385] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 894.050275][T32411] netlink: 'syz.1.7008': attribute type 4 has an invalid length. [ 894.092838][T32411] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7008'. [ 894.177810][T32411] .`: renamed from bond0 [ 894.227349][T32418] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7011'. [ 894.282359][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 895.424757][T32481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7027'. [ 895.449052][T32481] pim6reg: entered allmulticast mode [ 895.539987][T32486] netlink: 'syz.4.7029': attribute type 1 has an invalid length. [ 895.553345][T32486] netlink: 'syz.4.7029': attribute type 3 has an invalid length. [ 895.561190][T32486] netlink: 172 bytes leftover after parsing attributes in process `syz.4.7029'. [ 895.570254][T32486] NCSI netlink: No device for ifindex 813332851 [ 895.590272][T32489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7030'. [ 895.600019][T32489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7030'. [ 895.749504][T32495] x_tables: unsorted underflow at hook 1 [ 895.758669][T32494] syzkaller0: entered promiscuous mode [ 895.764834][T32494] syzkaller0: entered allmulticast mode [ 895.774026][T32499] lo: entered promiscuous mode [ 895.782057][T32499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 895.922027][T32507] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 895.922079][T32497] sctp: [Deprecated]: syz.1.7033 (pid 32497) Use of int in maxseg socket option. [ 895.922079][T32497] Use struct sctp_assoc_value instead [ 896.311780][T32520] xt_l2tp: missing protocol rule (udp|l2tpip) [ 896.412410][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807b058800: rx timeout, send abort [ 896.421737][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807b058800: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 896.514832][T32527] IPVS: set_ctl: invalid protocol: 60 172.20.20.61:20000 [ 896.534304][ T29] audit: type=1800 audit(1784575413.531:12): pid=32526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7044" name=0A dev="tmpfs" ino=1030 res=0 errno=0 [ 896.542714][T32527] IPVS: set_ctl: invalid protocol: 60 172.20.20.61:20000 [ 896.747232][T32535] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 896.917177][T32540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 897.014152][T32540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.248196][T32558] atomic_op ffff888053d45198 conn xmit_atomic 0000000000000000 [ 897.312914][T32562] netlink: 'syz.4.7054': attribute type 1 has an invalid length. [ 897.449428][T32567] macvtap1: entered allmulticast mode [ 897.535022][T32562] vlan2: entered allmulticast mode [ 897.642679][T32567] bond4: (slave bridge2): making interface the new active one [ 897.651750][T32567] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 897.653900][T32578] xt_l2tp: invalid flags combination: 8 [ 897.694117][T32567] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 897.717391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 897.871958][T32591] netlink: 'syz.1.7060': attribute type 19 has an invalid length. [ 897.872561][T32586] netlink: 'syz.2.7061': attribute type 1 has an invalid length. [ 897.879942][T32591] __nla_validate_parse: 3 callbacks suppressed [ 897.879967][T32591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7060'. [ 897.880913][T32591] netlink: 'syz.1.7060': attribute type 19 has an invalid length. [ 897.908119][T32586] netlink: 124 bytes leftover after parsing attributes in process `syz.2.7061'. [ 897.910578][T32591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7060'. [ 898.308306][T32618] siw: device registration error -23 [ 898.373645][T32618] netlink: 'syz.2.7068': attribute type 25 has an invalid length. [ 898.383273][T32622] netlink: 'syz.2.7068': attribute type 25 has an invalid length. [ 898.402061][T32618] ±ÿª¨úrBº“: renamed from lo (while UP) [ 898.685651][T32641] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7075'. [ 898.740394][T32641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7075'. [ 898.900052][T32654] syzkaller0: entered promiscuous mode [ 898.943855][T32654] syzkaller0: entered allmulticast mode [ 899.205970][T32670] netlink: 'syz.1.7080': attribute type 33 has an invalid length. [ 899.303387][T32670] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 899.316877][T32670] bond0 (unregistering): Released all slaves [ 899.379331][T32677] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7081'. [ 899.400489][T32677] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7081'. [ 899.589680][T32687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7083'. [ 899.617846][T32689] netlink: 'syz.1.7084': attribute type 2 has an invalid length. [ 900.378329][T32727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7092'. [ 900.414659][T32727] netlink: 'syz.2.7092': attribute type 1 has an invalid length. [ 900.444226][T32727] netlink: 'syz.2.7092': attribute type 1 has an invalid length. [ 900.475974][T32727] netlink: 'syz.2.7092': attribute type 1 has an invalid length. [ 900.494262][T32727] netlink: 'syz.2.7092': attribute type 1 has an invalid length. [ 900.511186][T32727] netlink: 'syz.2.7092': attribute type 5 has an invalid length. [ 900.529381][T32727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7092'. [ 900.637493][T32737] bond6 (unregistering): Released all slaves [ 901.153489][ T306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 902.030055][ T349] netlink: 'syz.2.7119': attribute type 1 has an invalid length. [ 902.475545][ T368] team0: Port device team_slave_0 removed [ 903.025106][ T386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.349671][T25860] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.421612][T25860] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.437253][T25860] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.611552][ T423] __nla_validate_parse: 8 callbacks suppressed [ 903.611574][ T423] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7142'. [ 903.635424][ T425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7143'. [ 903.644525][ T425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7143'. [ 903.663017][T25861] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.663121][ T425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7143'. [ 903.682677][T25861] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.682724][T25861] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.741455][ T425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7143'. [ 903.853700][ T428] syzkaller0: entered promiscuous mode [ 903.859249][ T428] syzkaller0: entered allmulticast mode [ 904.074311][ T438] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7145'. [ 904.193374][ T444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7148'. [ 908.386030][ T463] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7153'. [ 908.406112][ T464] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7153'. [ 908.432123][ T29] audit: type=1107 audit(1784575425.421:13): pid=461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 908.504070][ T470] syzkaller0: entered promiscuous mode [ 908.512863][ T470] syzkaller0: entered allmulticast mode [ 908.533094][ T473] syzkaller1: entered promiscuous mode [ 908.538637][ T473] syzkaller1: entered allmulticast mode [ 908.546134][ T464] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7153'. [ 908.649035][ T479] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7160'. [ 908.665392][ T479] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 908.963413][ T489] vcan0: entered allmulticast mode [ 908.969664][ T489] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7163'. [ 909.127974][ T493] netlink: 'syz.2.7164': attribute type 27 has an invalid length. [ 909.153565][ T493] netlink: 'syz.2.7164': attribute type 4 has an invalid length. [ 909.164741][ T492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7165'. [ 909.181549][ T493] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7164'. [ 909.572472][ T501] ipt_ECN: cannot use operation on non-tcp rule [ 909.683781][ T504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.731469][ T505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7169'. [ 909.772906][ T505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7169'. [ 909.800597][ T505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7169'. [ 909.905169][ T510] bridge3: entered promiscuous mode [ 909.934154][ T510] bridge3: entered allmulticast mode [ 909.945055][ T512] tipc: Enabling of bearer rejected, failed to enable media [ 910.137429][ T516] syzkaller0: entered promiscuous mode [ 910.144630][ T516] syzkaller0: entered allmulticast mode [ 910.521546][ T543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7181'. [ 910.717680][ T555] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7184'. [ 910.745336][ T555] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7184'. [ 910.755253][ T555] netlink: 'syz.1.7184': attribute type 6 has an invalid length. [ 910.765865][ T555] netlink: 'syz.1.7184': attribute type 5 has an invalid length. [ 910.930979][ T566] netlink: 'syz.3.7189': attribute type 1 has an invalid length. [ 910.969325][ T566] 8021q: adding VLAN 0 to HW filter on device bond5 [ 910.994840][ T566] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 911.047621][ T570] gre1: entered promiscuous mode [ 911.094348][ T570] gre1: entered allmulticast mode [ 911.155236][ T566] macvlan2: entered promiscuous mode [ 911.160625][ T566] macvlan2: entered allmulticast mode [ 911.170943][ T566] bond5: entered promiscuous mode [ 911.176044][ T566] veth0_to_bond: entered promiscuous mode [ 911.182502][ T566] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 911.190265][ T566] bond5: left promiscuous mode [ 911.195085][ T566] veth0_to_bond: left promiscuous mode [ 912.089607][ T631] netlink: 'syz.0.7209': attribute type 12 has an invalid length. [ 912.102263][T25860] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.133672][T25878] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.142669][T25878] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.151630][T25878] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.422494][ T643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 912.534243][ T649] netlink: 'syz.3.7216': attribute type 1 has an invalid length. [ 913.060920][ T679] netlink: 'syz.1.7224': attribute type 12 has an invalid length. [ 913.740691][ T709] __nla_validate_parse: 11 callbacks suppressed [ 913.740713][ T709] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7235'. [ 914.010832][ T727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7240'. [ 914.250982][ T734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7243'. [ 914.306094][ T734] macvtap2: entered promiscuous mode [ 914.311432][ T734] vlan0: entered promiscuous mode [ 914.331646][ T734] macvtap2: entered allmulticast mode [ 914.337083][ T734] vlan0: entered allmulticast mode [ 914.342238][ T734] veth0_vlan: entered allmulticast mode [ 914.527102][ T746] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7249'. [ 914.595985][ T753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7250'. [ 914.596477][ T749] syzkaller1: entered promiscuous mode [ 914.610398][ T749] syzkaller1: entered allmulticast mode [ 915.246917][ T788] netlink: 'syz.4.7258': attribute type 1 has an invalid length. [ 915.322109][ T788] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7258'. [ 915.382153][ T788] netlink: 'syz.4.7258': attribute type 1 has an invalid length. [ 915.399345][ T788] netlink: 'syz.4.7258': attribute type 1 has an invalid length. [ 915.407129][ T788] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7258'. [ 915.461254][ T788] netlink: 'syz.4.7258': attribute type 1 has an invalid length. [ 915.551515][ T788] netlink: 'syz.4.7258': attribute type 1 has an invalid length. [ 915.559497][ T788] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7258'. [ 915.569109][ T788] netlink: 'syz.4.7258': attribute type 1 has an invalid length. [ 915.608711][ T788] netlink: 'syz.4.7258': attribute type 1 has an invalid length. [ 915.617796][ T788] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7258'. [ 915.684870][ T788] netlink: 'syz.4.7258': attribute type 1 has an invalid length. [ 915.715350][ T816] syz_tun: entered allmulticast mode [ 915.753103][ T788] netlink: 'syz.4.7258': attribute type 1 has an invalid length. [ 915.762831][ T788] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7258'. [ 915.781654][ T788] netlink: 'syz.4.7258': attribute type 1 has an invalid length. [ 915.799799][ T817] syz_tun: left allmulticast mode [ 915.857569][ T822] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 916.376345][ T837] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 916.718130][ T861] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 917.190054][ T893] macvlan0: entered promiscuous mode [ 917.318175][ T902] tipc: Enabled bearer , priority 0 [ 917.326312][ T902] syzkaller0: entered promiscuous mode [ 917.381371][ T902] syzkaller0: entered allmulticast mode [ 917.422396][ T902] tipc: Resetting bearer [ 917.435496][ T901] tipc: Resetting bearer [ 917.511382][ T901] tipc: Disabling bearer [ 917.651044][ T917] bridge_slave_1: left allmulticast mode [ 917.656914][ T917] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.666025][ T917] bridge_slave_0: left allmulticast mode [ 917.687581][ T917] bridge_slave_0: left promiscuous mode [ 917.700760][ T917] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.501337][ T965] x_tables: duplicate underflow at hook 2 [ 918.638053][ T975] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode [ 918.650276][ T975] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode [ 918.651815][ T978] openvswitch: netlink: Message has 512 unknown bytes. [ 919.521852][ T1032] openvswitch: netlink: IPv4 tun info is not correct [ 919.548736][ T1032] __nla_validate_parse: 40 callbacks suppressed [ 919.548758][ T1032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7324'. [ 919.729451][ T1043] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7326'. [ 919.799276][ T1043] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7326'. [ 920.196879][ T1075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7332'. [ 920.272389][ T1081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.285669][ T1075] netlink: 39759 bytes leftover after parsing attributes in process `syz.4.7332'. [ 920.308655][ T1086] netlink: 182 bytes leftover after parsing attributes in process `syz.0.7337'. [ 920.334471][ T1083] vlan3: entered allmulticast mode [ 920.339846][ T1083] veth1_virt_wifi: entered allmulticast mode [ 920.379602][ T1081] vlan3: entered promiscuous mode [ 920.395119][ T1081] bond0: entered promiscuous mode [ 920.400429][ T1081] vlan3: entered allmulticast mode [ 920.405587][ T1081] bond0: entered allmulticast mode [ 920.521476][ T1090] bond0: (slave bridge3): making interface the new active one [ 920.529020][ T1090] bridge3: entered promiscuous mode [ 920.555835][ T1090] bridge3: entered allmulticast mode [ 920.563572][ T1090] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 920.844944][ T1118] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7346'. [ 920.919261][ T1119] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7348'. [ 921.079017][ T1120] tcf_pedit_act: 7 callbacks suppressed [ 921.079037][ T1120] tc action pedit unable to extract header offset for header type (0x4) [ 921.096395][ T1120] tc action pedit unable to extract header offset for header type (0x4) [ 921.104824][ T1120] tc action pedit unable to extract header offset for header type (0x4) [ 921.113234][ T1120] tc action pedit unable to extract header offset for header type (0x4) [ 921.121613][ T1120] tc action pedit unable to extract header offset for header type (0x4) [ 921.129948][ T1120] tc action pedit unable to extract header offset for header type (0x4) [ 921.138315][ T1120] tc action pedit unable to extract header offset for header type (0x4) [ 921.147066][ T1120] tc action pedit unable to extract header offset for header type (0x4) [ 921.155545][ T1120] tc action pedit unable to extract header offset for header type (0x4) [ 921.164126][ T1120] tc action pedit unable to extract header offset for header type (0x4) [ 921.172535][ T1120] 0: reclassify loop, rule prio 0, protocol 800 [ 921.203113][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7350'. [ 921.224200][ T1120] validate_nla: 66 callbacks suppressed [ 921.224220][ T1120] netlink: 'syz.1.7347': attribute type 11 has an invalid length. [ 921.274871][ T1127] netlink: 'syz.1.7347': attribute type 4 has an invalid length. [ 921.282476][ T1125] IPv6: sit2: Disabled Multicast RS [ 921.283991][ T1127] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7347'. [ 921.289483][ T1125] sit2: entered allmulticast mode [ 921.418900][ T1134] syzkaller0: entered promiscuous mode [ 921.436717][ T1134] syzkaller0: entered allmulticast mode [ 921.831267][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 922.344092][ T29] audit: type=1804 audit(1784575439.341:14): pid=1171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7363" name="/newroot/302/cgroup.controllers" dev="tmpfs" ino=1559 res=1 errno=0 [ 922.363095][ T1175] veth0: entered promiscuous mode [ 922.402534][ T29] audit: type=1800 audit(1784575439.341:15): pid=1171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7363" name="cgroup.controllers" dev="tmpfs" ino=1559 res=0 errno=0 [ 922.482240][ T1174] veth0: left promiscuous mode [ 922.715053][ T1179] syzkaller1: entered promiscuous mode [ 922.734845][ T1179] syzkaller1: entered allmulticast mode [ 923.217693][ T1201] tc action pedit offset -64 out of bounds [ 923.964712][ T1211] netlink: 'syz.2.7378': attribute type 16 has an invalid length. [ 923.998198][ T1211] netlink: 'syz.2.7378': attribute type 3 has an invalid length. [ 924.030002][ T1218] Unsupported ieee802154 address type: 0 [ 924.059591][ T1212] erspan0: entered promiscuous mode [ 924.194540][ T1217] tun0: tun_chr_ioctl cmd 1074025675 [ 924.200055][ T1217] tun0: persist enabled [ 924.369514][ T1243] openvswitch: netlink: Actions may not be safe on all matching packets [ 924.648732][ T1254] __nla_validate_parse: 8 callbacks suppressed [ 924.648752][ T1254] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7391'. [ 924.675434][ T1254] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.682672][ T1254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.693515][ T1254] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7391'. [ 924.702959][ T1254] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.761138][ T1258] netlink: 59 bytes leftover after parsing attributes in process `syz.4.7393'. [ 925.013381][ T1261] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7394'. [ 925.074962][ T1261] syzkaller0: entered promiscuous mode [ 925.081535][ T1261] syzkaller0: entered allmulticast mode [ 925.082096][ T1267] netlink: 'syz.0.7395': attribute type 32 has an invalid length. [ 925.127517][ T1267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7395'. [ 925.415369][ T1267] bond6: Setting coupled_control to off (0) [ 952.513485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 957.646381][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 991.395618][ T1315] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7405'. [ 991.589299][ T1328] netlink: 220 bytes leftover after parsing attributes in process `syz.4.7407'. [ 991.937210][ T1312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7402'. [ 991.987626][ T1346] netlink: 'syz.4.7413': attribute type 1 has an invalid length. [ 991.996511][ T1346] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7413'. [ 992.006786][ T1346] block nbd0: NBD_DISCONNECT [ 992.013139][ T1346] block nbd0: Send disconnect failed -32 [ 992.033549][ T1346] block nbd0: shutting down sockets [ 992.305934][ T1354] netlink: 'syz.4.7415': attribute type 8 has an invalid length. [ 992.343269][ T1355] netlink: 'syz.4.7415': attribute type 8 has an invalid length. [ 992.596482][ T1367] netlink: 1132 bytes leftover after parsing attributes in process `syz.2.7414'. [ 992.676668][ T1370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7418'. [ 992.905203][ T1374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7419'. [ 992.948670][ T1376] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7420'. [ 992.956698][ T1374] gtp1: entered promiscuous mode [ 992.975577][ T1374] gtp1: entered allmulticast mode [ 993.310011][ T1392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7423'. [ 993.434236][ T1394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7425'. [ 993.735828][ T1413] siw: device registration error -23 [ 993.865378][ T1423] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 994.335144][ T1445] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 994.371466][ T1447] netlink: 'syz.2.7439': attribute type 11 has an invalid length. [ 994.417193][ T1448] netlink: 'syz.4.7438': attribute type 1 has an invalid length. [ 994.552253][ T1448] 8021q: adding VLAN 0 to HW filter on device bond5 [ 994.582797][ T1459] openvswitch: netlink: IP tunnel dst address not specified [ 994.598217][ T1443] bond5: (slave veth3): Enslaving as an active interface with a down link [ 994.619743][ T1443] netlink: 'syz.4.7438': attribute type 7 has an invalid length. [ 994.686985][ T1464] sctp: [Deprecated]: syz.1.7444 (pid 1464) Use of int in maxseg socket option. [ 994.686985][ T1464] Use struct sctp_assoc_value instead [ 994.705204][ T1465] netlink: 'syz.3.7445': attribute type 6 has an invalid length. [ 994.862692][ T1475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 995.049402][ T1484] tc_dump_action: action bad kind [ 995.126061][ T1491] batman_adv: batadv0: Interface deactivated: dummy0 [ 995.145952][ T1491] batman_adv: batadv0: Removing interface: dummy0 [ 996.057978][ T1528] netlink: 'syz.1.7464': attribute type 10 has an invalid length. [ 996.065868][ T1528] openvswitch: netlink: Flow key attr not present in new flow. [ 996.196356][ T1533] netlink: 'syz.0.7466': attribute type 7 has an invalid length. [ 996.217244][ T1533] netlink: 'syz.0.7466': attribute type 8 has an invalid length. [ 996.330983][ T1541] xt_TCPMSS: Only works on TCP SYN packets [ 996.727215][ T1575] __nla_validate_parse: 18 callbacks suppressed [ 996.727234][ T1575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7479'. [ 996.750071][T25862] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 996.763729][T25862] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 996.771836][ T808] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 996.815281][ T1572] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7478'. [ 996.943839][ T1578] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7480'. [ 997.199102][ T1589] xt_hashlimit: size too large, truncated to 1048576 [ 997.474638][T17698] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 997.594246][ T1601] netlink: 'syz.2.7488': attribute type 142 has an invalid length. [ 997.596369][ T1603] netlink: 'syz.4.7489': attribute type 4 has an invalid length. [ 997.628578][ T1603] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7489'. [ 997.793953][T17698] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 997.864924][ T1612] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7491'. [ 998.006511][ T1614] tipc: Enabled bearer , priority 0 [ 998.015409][ T1614] syzkaller0: entered promiscuous mode [ 998.021061][ T1614] syzkaller0: entered allmulticast mode [ 998.140747][ T1614] tipc: Resetting bearer [ 998.178361][ T1613] tipc: Resetting bearer [ 998.240579][ T1613] tipc: Disabling bearer [ 998.275231][ T1629] openvswitch: netlink: Actions may not be safe on all matching packets [ 998.318727][ T1630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7496'. [ 998.321847][ T1629] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.358347][ T1629] bridge_slave_0: left allmulticast mode [ 998.367996][ T1629] bridge_slave_0: left promiscuous mode [ 998.373967][ T1629] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.523606][ T1633] vcan1: entered promiscuous mode [ 998.528726][ T1633] vcan1: entered allmulticast mode [ 998.740566][ T1646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7503'. [ 998.763544][ T1643] xt_CT: No such helper "syz1" [ 998.949668][ T1654] netlink: 'syz.4.7506': attribute type 1 has an invalid length. [ 999.007684][ T1654] bond6: entered promiscuous mode [ 999.013479][ T1654] 8021q: adding VLAN 0 to HW filter on device bond6 [ 999.022534][ T1660] tipc: Enabling of bearer rejected, media not registered [ 999.045765][ T1660] netlink: 'syz.0.7507': attribute type 2 has an invalid length. [ 999.080383][ T1664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7509'. [ 999.117549][ T1664] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7509'. [ 999.137494][ T1666] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 999.138647][ T1664] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 999.154873][ T1667] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7507'. [ 999.246064][ T1669] netlink: 'syz.4.7511': attribute type 6 has an invalid length. [ 999.574442][ T1688] vlan1: entered allmulticast mode [ 999.935112][ T1707] geneve2: entered promiscuous mode [ 1000.120440][ T1721] netlink: 'syz.1.7528': attribute type 16 has an invalid length. [ 1000.185306][ T1721] vcan1: entered promiscuous mode [ 1000.190414][ T1721] vcan1: entered allmulticast mode [ 1000.279638][ T1727] tunl0: entered promiscuous mode [ 1000.285330][ T1727] tunl0: entered allmulticast mode [ 1000.477055][ T1733] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1000.635684][ T1748] netlink: 'syz.3.7536': attribute type 11 has an invalid length. [ 1000.657464][ T1749] netlink: 'syz.3.7536': attribute type 11 has an invalid length. [ 1000.671327][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1001.551150][ T1781] wg0: entered promiscuous mode [ 1001.566606][ T1781] wg0: entered allmulticast mode [ 1001.854079][ T1788] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 1001.874058][ T1788] __nla_validate_parse: 12 callbacks suppressed [ 1001.874078][ T1788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7546'. [ 1002.264646][ T1802] netlink: 'syz.3.7551': attribute type 1 has an invalid length. [ 1002.344941][ T1810] netlink: 'syz.4.7552': attribute type 1 has an invalid length. [ 1002.414591][ T1813] netlink: 'syz.1.7553': attribute type 2 has an invalid length. [ 1002.421239][ T1802] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1002.455180][ T1816] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7552'. [ 1002.473953][ T1813] netlink: 'syz.1.7553': attribute type 2 has an invalid length. [ 1002.648818][ T1814] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1002.667177][ T1810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7552'. [ 1002.690471][T25875] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1002.712737][ T1810] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1002.722993][ T1826] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1002.893583][T25875] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1002.945039][ T1839] SET target dimension over the limit! [ 1002.953935][ T1841] SET target dimension over the limit! [ 1002.975871][ T1836] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7558'. [ 1003.024578][ T1844] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7561'. [ 1003.396838][ T1862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7568'. [ 1003.753364][ T1883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7573'. [ 1003.805231][ T1883] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1003.822126][ T1883] netlink: 'syz.1.7573': attribute type 1 has an invalid length. [ 1003.970880][ T1890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7576'. [ 1004.480404][ T1905] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1004.480420][ T1913] netlink: 'syz.1.7579': attribute type 18 has an invalid length. [ 1004.499586][ T1905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7578'. [ 1004.834097][ T1926] syzkaller1: entered promiscuous mode [ 1004.839710][ T1926] syzkaller1: entered allmulticast mode [ 1004.959066][ T1933] netlink: 'syz.4.7587': attribute type 15 has an invalid length. [ 1004.967039][ T1933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7587'. [ 1005.126922][ T1939] tipc: Enabled bearer , priority 0 [ 1005.144624][ T1934] tipc: Disabling bearer [ 1005.168841][ T1937] netlink: 'syz.1.7588': attribute type 1 has an invalid length. [ 1005.572808][ T1951] netlink: 'syz.2.7595': attribute type 13 has an invalid length. [ 1006.870860][ T2011] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 1007.157379][ T1998] lo speed is unknown, defaulting to 1000 [ 1007.164905][ T1998] lo speed is unknown, defaulting to 1000 [ 1007.376481][ T2028] __nla_validate_parse: 6 callbacks suppressed [ 1007.376495][ T2028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7615'. [ 1007.429986][ T2030] syzkaller0: entered promiscuous mode [ 1007.435486][ T2030] syzkaller0: entered allmulticast mode [ 1007.742999][ T2036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7618'. [ 1008.201496][ T2048] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7622'. [ 1008.411971][ T2060] netlink: 'syz.2.7627': attribute type 3 has an invalid length. [ 1008.443174][ T2060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7627'. [ 1008.455004][ T2060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7627'. [ 1008.465356][ T2062] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7628'. [ 1008.707691][ T2070] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 1008.775780][ T2074] netlink: 284 bytes leftover after parsing attributes in process `syz.0.7633'. [ 1008.832408][ T2074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7633'. [ 1008.834131][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1008.878033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1009.072099][ T2094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7640'. [ 1009.154426][ T2094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7640'. [ 1009.583110][T25303] block nbd0: Receive control failed (result -107) [ 1010.009782][ T2138] ipt_REJECT: ECHOREPLY no longer supported. [ 1010.235863][ T2146] bond4: invalid ARP target 0.0.0.0 specified for addition [ 1010.250504][ T2146] bond4: option arp_ip_target: invalid value (0) [ 1010.258851][ T2154] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1010.282224][ T2146] bond4 (unregistering): Released all slaves [ 1010.888763][ T2170] block nbd5: Unsupported socket: should be TCP or UNIX. [ 1012.054374][ T2225] veth0_to_bond: entered allmulticast mode [ 1012.118925][ T2225] syzkaller1: entered promiscuous mode [ 1012.139940][ T2225] syzkaller1: entered allmulticast mode [ 1012.257388][ T2234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1012.438568][ T2238] __nla_validate_parse: 15 callbacks suppressed [ 1012.438590][ T2238] netlink: 71 bytes leftover after parsing attributes in process `syz.2.7680'. [ 1012.497494][ T2243] netlink: 'syz.2.7680': attribute type 11 has an invalid length. [ 1012.513012][ T29] audit: type=1800 audit(1784575529.511:16): pid=2241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7682" name="memory.events" dev="tmpfs" ino=1620 res=0 errno=0 [ 1012.523704][ T2243] netlink: 'syz.2.7680': attribute type 4 has an invalid length. [ 1012.558676][ T2243] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7680'. [ 1012.638233][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888059b88000: rx timeout, send abort [ 1012.971281][ T2264] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7686'. [ 1013.091333][ T2264] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 1013.104046][ T2264] 0ªî{X¹¦: entered allmulticast mode [ 1013.122774][ T2264] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1013.146306][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888059b8b800: rx timeout, send abort [ 1013.250671][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888059b88000: abort rx timeout. Force session deactivation [ 1013.654621][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888059b8b800: abort rx timeout. Force session deactivation [ 1013.788445][ T2288] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7693'. [ 1013.807358][ T2291] ±ÿª¨úrBº“: Caught tx_queue_len zero misconfig [ 1013.841996][ T2286] vlan0: entered promiscuous mode [ 1014.029571][ T2298] netlink: 'syz.4.7694': attribute type 1 has an invalid length. [ 1014.049371][ T2298] netlink: 'syz.4.7694': attribute type 2 has an invalid length. [ 1014.086724][ T2298] netlink: 'syz.4.7694': attribute type 39 has an invalid length. [ 1014.194535][ T2307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7694'. [ 1014.226722][ T2307] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7694'. [ 1014.245297][ T2308] ip6t_REJECT: ECHOREPLY is not supported [ 1014.298452][ T2298] hsr_slave_0: left promiscuous mode [ 1014.318023][ T2298] hsr_slave_1: left promiscuous mode [ 1014.705909][ T2319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7701'. [ 1014.720473][ T2316] x_tables: duplicate underflow at hook 2 [ 1014.825317][ T2319] bond7: Invalid ad_actor_system MAC address. [ 1014.839460][ T2319] bond7: option ad_actor_system: invalid value (1) [ 1014.854401][ T2313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7700'. [ 1014.864722][ T2313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7700'. [ 1014.893595][ T2319] bond7 (unregistering): Released all slaves [ 1015.352018][ T2343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7708'. [ 1015.387674][ T2343] netlink: 'syz.4.7708': attribute type 7 has an invalid length. [ 1015.424657][ T2343] netlink: 'syz.4.7708': attribute type 8 has an invalid length. [ 1015.652730][ T2338] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1015.682956][ T2338] syzkaller0: entered promiscuous mode [ 1015.688781][ T2338] syzkaller0: entered allmulticast mode [ 1016.268398][ T2385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1016.275841][ T2385] IPv6: NLM_F_CREATE should be set when creating new route [ 1016.315644][ T2384] ipvlan2: entered allmulticast mode [ 1016.321915][ T2384] syz_tun: entered allmulticast mode [ 1016.329402][ T2384] syz_tun: port 1(ipvlan2) entered blocking state [ 1016.354549][ T2384] syz_tun: port 1(ipvlan2) entered disabled state [ 1016.415870][ T2389] macvlan0: entered promiscuous mode [ 1016.713456][ T2398] netlink: 'syz.3.7727': attribute type 39 has an invalid length. [ 1016.807290][ T2404] netlink: 'syz.2.7728': attribute type 1 has an invalid length. [ 1016.819010][ T2404] netlink: 'syz.2.7728': attribute type 1 has an invalid length. [ 1017.156127][ T2400] vlan1 (unregistering): left allmulticast mode [ 1017.189191][ T2400] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 1017.574775][ T2430] __nla_validate_parse: 7 callbacks suppressed [ 1017.574796][ T2430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7735'. [ 1017.591832][ T2429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7735'. [ 1017.694617][ T2442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7733'. [ 1017.769467][ T2446] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7733'. [ 1017.931665][ T2454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7738'. [ 1018.075350][ T2458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7739'. [ 1018.409078][ T2484] sctp: [Deprecated]: syz.1.7740 (pid 2484) Use of int in maxseg socket option. [ 1018.409078][ T2484] Use struct sctp_assoc_value instead [ 1018.530215][ T2480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7745'. [ 1018.692015][ T2494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7750'. [ 1018.703403][ T2494] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7750'. [ 1018.744550][ T2494] gretap2: entered promiscuous mode [ 1018.755890][ T2494] gretap2: entered allmulticast mode [ 1018.918873][ T2502] netlink: 'syz.4.7751': attribute type 13 has an invalid length. [ 1019.198876][ T2512] netlink: 'syz.3.7758': attribute type 1 has an invalid length. [ 1019.216505][ T2516] netlink: 'syz.3.7758': attribute type 1 has an invalid length. [ 1019.257121][ T2512] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1019.295108][ T2518] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1019.304889][ T2523] tipc: Enabling of bearer rejected, failed to enable media [ 1019.351165][ T2528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7756'. [ 1019.368001][ T2528] netlink: 'syz.1.7756': attribute type 4 has an invalid length. [ 1019.553063][ T2527] mac80211_hwsim hwsim46 syzkaller0: left promiscuous mode [ 1019.560359][ T2527] mac80211_hwsim hwsim46 syzkaller0: left allmulticast mode [ 1020.198074][ T2571] netlink: 'syz.0.7768': attribute type 1 has an invalid length. [ 1020.349410][ T2584] bond7: (slave gretap3): making interface the new active one [ 1020.359906][ T2584] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 1020.854890][ T2636] syzkaller0: entered promiscuous mode [ 1020.863459][ T2636] syzkaller0: entered allmulticast mode [ 1020.873134][ T2636] netlink: 'syz.3.7781': attribute type 13 has an invalid length. [ 1020.926601][ T2636] netlink: 'syz.3.7781': attribute type 58 has an invalid length. [ 1021.148342][ T2652] netlink: 'syz.0.7784': attribute type 2 has an invalid length. [ 1021.380059][ T2652] : entered promiscuous mode [ 1021.653246][ T2684] nbd: illegal input index 65508 [ 1021.674148][ T2686] syzkaller0: entered promiscuous mode [ 1021.679691][ T2686] syzkaller0: entered allmulticast mode [ 1021.762999][ T2688] vlan0: entered promiscuous mode [ 1021.768587][ T2688] hsr0: entered promiscuous mode [ 1021.774703][ T2688] vlan0: entered allmulticast mode [ 1021.781301][ T2688] hsr0: entered allmulticast mode [ 1021.786725][ T2688] hsr_slave_0: entered allmulticast mode [ 1021.794259][ T2688] hsr_slave_1: entered allmulticast mode [ 1021.804030][ T2688] ip6t_srh: unknown srh invflags 4000 [ 1021.817628][ T2688] smc: adding net device vlan1 with user defined pnetid SYZ2 [ 1022.367156][ T2720] €Â: renamed from vlan1 [ 1022.466898][ T2726] Bluetooth: MGMT ver 1.23 [ 1022.595885][ T2740] netlink: 'syz.4.7810': attribute type 1 has an invalid length. [ 1022.846068][ T2752] veth3: entered allmulticast mode [ 1022.901636][ T2760] lo: entered promiscuous mode [ 1022.906404][ T2762] __nla_validate_parse: 14 callbacks suppressed [ 1022.906426][ T2762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7814'. [ 1022.909575][ T2760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1023.157906][ T2765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7815'. [ 1023.203561][ T2767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7818'. [ 1023.277634][ T2778] tipc: Started in network mode [ 1023.282576][ T2778] tipc: Node identity f601b593bf3, cluster identity 4711 [ 1023.290339][ T2778] tipc: Enabled bearer , priority 0 [ 1023.410380][ T2776] tipc: Disabling bearer [ 1023.540297][ T2791] openvswitch: netlink: IPv4 tun info is not correct [ 1023.548223][ T2784] openvswitch: netlink: IPv4 tun info is not correct [ 1023.551062][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1023.747284][ T2802] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7825'. [ 1023.789152][ T2804] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7827'. [ 1023.805978][ T2802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7825'. [ 1023.846541][ T2801] syzkaller0: entered promiscuous mode [ 1023.852118][ T2801] syzkaller0: entered allmulticast mode [ 1023.859690][ T2802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.906443][ T2802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.958157][ T2798] netlink: 'syz.0.7824': attribute type 1 has an invalid length. [ 1026.803757][ T2810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1028.541396][ T2866] netlink: 'syz.0.7835': attribute type 127 has an invalid length. [ 1029.170288][ T2908] netlink: 'syz.1.7846': attribute type 18 has an invalid length. [ 1029.178191][ T2908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7846'. [ 1029.271121][ T2915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7846'. [ 1029.280159][ T2915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7846'. [ 1029.538251][ T2925] tc_dump_action: action bad kind [ 1029.575027][ T2925] netlink: 'syz.0.7849': attribute type 4 has an invalid length. [ 1029.588531][ T2925] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7849'. [ 1029.590366][ T2927] netlink: 'syz.1.7850': attribute type 2 has an invalid length. [ 1029.947469][ T2917] lo speed is unknown, defaulting to 1000 [ 1030.033142][ T2917] lo speed is unknown, defaulting to 1000 [ 1030.304014][ T2950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1030.485631][ T2959] bond0: (slave gre0): refused to change device type [ 1030.492471][ T2963] bond0: (slave gre0): refused to change device type [ 1030.536131][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.544193][ T2963] batadv_slave_0: entered promiscuous mode [ 1031.077251][ T2979] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1031.135528][ T2980] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1031.438867][ T2990] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7869'. [ 1031.475157][ T2998] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1031.710090][ T3006] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7874'. [ 1031.816403][ T3006] ip6gre3: entered allmulticast mode [ 1031.945289][ T3016] netlink: 'syz.2.7878': attribute type 7 has an invalid length. [ 1031.954228][ T3012] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7876'. [ 1031.954248][ T3017] netlink: 'syz.2.7878': attribute type 7 has an invalid length. [ 1031.994520][ T3012] netlink: 'syz.1.7876': attribute type 39 has an invalid length. [ 1032.016936][ T3012] hsr_slave_0: left promiscuous mode [ 1032.023437][ T3012] hsr_slave_1: left promiscuous mode [ 1032.070337][ T3012] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 1032.117750][ T3023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7876'. [ 1032.293522][ T3028] netlink: 'syz.4.7881': attribute type 1 has an invalid length. [ 1032.917626][ T3055] netlink: 'syz.2.7888': attribute type 13 has an invalid length. [ 1032.931389][ T3055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7888'. [ 1032.946787][ T3055] netlink: 'syz.2.7888': attribute type 13 has an invalid length. [ 1032.997336][ T3055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7888'. [ 1033.016955][ T3059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1033.035358][ T3060] syzkaller1: entered promiscuous mode [ 1033.046338][ T3060] syzkaller1: entered allmulticast mode [ 1033.362690][ T3060] bond5: (slave veth0_to_bond): Releasing backup interface [ 1033.373559][ T3060] bond0: (slave bond_slave_0): Releasing backup interface [ 1033.381895][ T3060] bond_slave_0: left allmulticast mode [ 1033.390033][ T3060] bond0: (slave bond_slave_1): Releasing backup interface [ 1033.398132][ T3060] bond_slave_1: left allmulticast mode [ 1033.408231][ T3060] team_slave_0: left promiscuous mode [ 1033.414845][ T3060] team0: Port device team_slave_0 removed [ 1033.440268][ T3060] team_slave_1: left promiscuous mode [ 1033.447027][ T3060] team0: Port device team_slave_1 removed [ 1033.456718][ T3060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.466756][ T3060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1033.476492][ T3060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.489386][ T3060] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1033.505708][ T3050] lo speed is unknown, defaulting to 1000 [ 1033.513909][ T3050] lo speed is unknown, defaulting to 1000 [ 1035.479218][ T3129] __nla_validate_parse: 1 callbacks suppressed [ 1035.479239][ T3129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7907'. [ 1035.601422][ T3129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7907'. [ 1035.966203][ T3156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7912'. [ 1036.542655][ T3173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7918'. [ 1036.566479][ T3173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7918'. [ 1036.594122][ T3174] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1036.755247][ T3183] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7922'. [ 1036.891268][ T3189] netlink: 'syz.3.7923': attribute type 1 has an invalid length. [ 1036.899506][ T3188] netlink: 'syz.3.7923': attribute type 1 has an invalid length. [ 1036.912084][ T3189] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7923'. [ 1036.922353][ T3188] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7923'. [ 1037.338074][ T3206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7926'. [ 1037.559878][ T3218] netlink: 'syz.4.7929': attribute type 1 has an invalid length. [ 1037.631081][ T3218] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1037.774201][ T3218] bond8: (slave geneve3): making interface the new active one [ 1037.793999][ T3218] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 1038.438759][ T3223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1038.452143][ T3220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7930'. [ 1039.087129][ T3291] 0ªî{X¹¦: entered promiscuous mode [ 1039.093463][ T3291] 0ªî{X¹¦: left allmulticast mode [ 1039.227540][ T29] audit: type=1804 audit(1784575556.221:17): pid=3293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7951" name="/newroot/432/cgroup.controllers" dev="tmpfs" ino=2225 res=1 errno=0 [ 1039.268521][ T29] audit: type=1800 audit(1784575556.221:18): pid=3293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7951" name="cgroup.controllers" dev="tmpfs" ino=2225 res=0 errno=0 [ 1039.314908][ T3293] netlink: 'syz.1.7951': attribute type 12 has an invalid length. [ 1039.331634][ T3301] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1040.011419][ T9112] bond5 (unregistering): (slave ip6gre1): Releasing backup interface [ 1040.019585][ T9112] ip6gre1 (unregistering): left promiscuous mode [ 1040.134302][ T9112] bond14 (unregistering): (slave ip6gre2): Releasing backup interface [ 1040.154293][ T9112] ip6gre2 (unregistering): left promiscuous mode [ 1040.341917][ T3328] netlink: 'syz.4.7961': attribute type 63 has an invalid length. [ 1040.474752][ T9112] bond7 (unregistering): (slave gretap1): Releasing backup interface [ 1040.578764][ T9112] bond18 (unregistering): (slave geneve3): Releasing active interface [ 1040.617053][ T9112] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1040.732570][ T9112] bond10 (unregistering): (slave bridge3): Releasing backup interface [ 1040.773489][ T9112] bond12 (unregistering): (slave bridge8): Releasing backup interface [ 1040.787548][ T9112] bridge8 (unregistering): left promiscuous mode [ 1040.799195][ T9112] bond17 (unregistering): (slave bridge9): Releasing backup interface [ 1040.807494][ T9112] bridge9 (unregistering): left promiscuous mode [ 1040.822432][ T9112] bond19 (unregistering): (slave bridge10): Releasing backup interface [ 1040.831442][ T9112] bridge10 (unregistering): left promiscuous mode [ 1040.843035][ T3336] __nla_validate_parse: 12 callbacks suppressed [ 1040.843054][ T3336] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7962'. [ 1040.866521][ T9112] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.875758][ T9112] .` (unregistering): Released all slaves [ 1040.885835][ T9112] bond1 (unregistering): Released all slaves [ 1040.900899][ T9112] bond2 (unregistering): Released all slaves [ 1040.924728][ T9112] bond3 (unregistering): (slave bond4): Releasing backup interface [ 1040.947932][ T9112] bond3 (unregistering): Released all slaves [ 1040.962788][ T9112] bond4 (unregistering): Released all slaves [ 1040.977417][ T9112] bond5 (unregistering): Released all slaves [ 1040.992692][ T9112] bond6 (unregistering): Released all slaves [ 1041.007247][ T9112] bond7 (unregistering): Released all slaves [ 1041.024419][ T9112] bond8 (unregistering): Released all slaves [ 1041.049726][ T9112] bond9 (unregistering): Released all slaves [ 1041.072202][ T9112] bond0 (unregistering): Released all slaves [ 1041.089328][ T9112] bond10 (unregistering): Released all slaves [ 1041.107146][ T9112] bond11 (unregistering): Released all slaves [ 1041.124340][ T9112] bond12 (unregistering): Released all slaves [ 1041.141300][ T9112] bond13 (unregistering): Released all slaves [ 1041.172051][ T9112] bond14 (unregistering): Released all slaves [ 1041.189231][ T9112] bond15 (unregistering): Released all slaves [ 1041.206614][ T9112] bond16 (unregistering): Released all slaves [ 1041.223658][ T9112] bond17 (unregistering): Released all slaves [ 1041.241341][ T9112] bond18 (unregistering): Released all slaves [ 1041.269285][ T9112] bond19 (unregistering): Released all slaves [ 1041.315508][ T9112] bond20 (unregistering): Released all slaves [ 1041.370183][ T3316] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7958'. [ 1041.728127][ T3344] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7964'. [ 1041.737927][ T3342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7963'. [ 1041.759249][ T3349] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1041.785960][ T3344] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7964'. [ 1041.994173][ T3361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7968'. [ 1042.019982][ T3361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7968'. [ 1042.114010][ T3364] netlink: 'syz.0.7970': attribute type 8 has an invalid length. [ 1042.139035][ T3366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7971'. [ 1042.337072][ T3371] tipc: Started in network mode [ 1042.342658][ T3371] tipc: Node identity 0004, cluster identity 4711 [ 1042.361679][ T3375] sctp: [Deprecated]: syz.1.7974 (pid 3375) Use of int in max_burst socket option deprecated. [ 1042.361679][ T3375] Use struct sctp_assoc_value instead [ 1042.605835][ T3382] x_tables: duplicate underflow at hook 1 [ 1042.700013][ T3394] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7978'. [ 1042.709302][ T3394] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7978'. [ 1043.006168][ T5727] IPVS: starting estimator thread 0... [ 1043.215621][ T3409] xt_cgroup: xt_cgroup: no path or classid specified [ 1043.291359][ T3402] IPVS: using max 24 ests per chain, 57600 per kthread [ 1043.461031][ T9112] hsr_slave_0: left promiscuous mode [ 1043.467060][ T9112] hsr_slave_1: left promiscuous mode [ 1043.479098][ T9112] veth1_vlan: left promiscuous mode [ 1043.485807][ T9112] veth0_vlan: left promiscuous mode [ 1043.507517][ T3389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1044.041681][ T9112] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 1044.274037][ T9112] team0 (unregistering): Port device team_slave_1 removed [ 1044.297700][ T9112] team0 (unregistering): Port device team_slave_0 removed [ 1044.474132][ T3423] syzkaller0: entered promiscuous mode [ 1044.481390][ T3423] syzkaller0: entered allmulticast mode [ 1044.486002][T25878] smbdirect: ib_dev[syz2] removed [ 1044.488545][ T3424] bond0: Caught tx_queue_len zero misconfig [ 1044.872017][ T3440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1045.130677][ T3448] syzkaller0: entered promiscuous mode [ 1045.136219][ T3448] syzkaller0: entered allmulticast mode [ 1049.624396][ T9112] IPVS: stop unused estimator thread 0... [ 1049.720352][ T3485] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode [ 1049.728313][ T3485] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode [ 1049.739269][ T3492] __nla_validate_parse: 2 callbacks suppressed [ 1049.739291][ T3492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8007'. [ 1049.812707][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1049.984195][ T3508] netlink: 'syz.1.8013': attribute type 23 has an invalid length. [ 1050.044467][ T3511] syzkaller1: entered promiscuous mode [ 1050.062113][ T3511] syzkaller1: entered allmulticast mode [ 1050.341822][ T3525] syz_tun: entered allmulticast mode [ 1050.402148][ T3528] netlink: 'syz.4.8017': attribute type 9 has an invalid length. [ 1050.411115][ T3525] syz_tun: left allmulticast mode [ 1050.600259][ T3540] netlink: 240 bytes leftover after parsing attributes in process `syz.4.8017'. [ 1050.613989][ T3528] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1050.624624][ T3528] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.651757][ T3540] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8017'. [ 1050.758235][ T3546] netlink: 'syz.0.8024': attribute type 15 has an invalid length. [ 1050.844383][ T3528] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1050.854717][ T3528] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.889008][ T3546] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1050.918524][ T3556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8026'. [ 1051.134571][ T3560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8028'. [ 1051.192694][ T3528] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1051.240767][ T3528] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.251442][ T3568] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8030'. [ 1051.279624][ T3570] netlink: 'syz.2.8031': attribute type 1 has an invalid length. [ 1051.287420][ T3570] netlink: 'syz.2.8031': attribute type 7 has an invalid length. [ 1051.289179][ T3568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8030'. [ 1051.295167][ T3570] netlink: 'syz.2.8031': attribute type 8 has an invalid length. [ 1051.295190][ T3570] netlink: 208 bytes leftover after parsing attributes in process `syz.2.8031'. [ 1051.295209][ T3570] NCSI netlink: No device for ifindex 65584 [ 1051.383650][ T3573] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8032'. [ 1051.484966][ T3573] tipc: Enabled bearer , priority 0 [ 1051.646826][ T3573] tipc: Disabling bearer [ 1051.887537][ T3528] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1051.901879][ T3528] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.932914][ T3591] veth1_macvtap: left promiscuous mode [ 1052.344306][ T9112] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1052.354584][ T9112] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.363788][ T3609] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8039'. [ 1052.411950][ T9112] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1052.438567][ T9112] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.592902][ T3617] 0ªî{X¹¦: renamed from gretap0 [ 1052.601343][ T3617] 0ªî{X¹¦: entered allmulticast mode [ 1052.611247][ T3617] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1052.627302][T25878] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1052.635519][T25878] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.643776][T25878] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1052.670518][T25878] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.873607][ T3627] syzkaller0: entered promiscuous mode [ 1052.916589][ T3627] syzkaller0: entered allmulticast mode [ 1053.240157][ T3645] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1053.268468][ T5727] IPVS: starting estimator thread 0... [ 1053.558081][ T3649] IPVS: using max 25 ests per chain, 60000 per kthread [ 1053.630928][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1057.552298][ T3665] Bluetooth: MGMT ver 1.23 [ 1057.653594][ T3669] veth1_to_bond: entered allmulticast mode [ 1057.678250][ T3675] veth1_to_bond: entered promiscuous mode [ 1057.704695][ T3669] __nla_validate_parse: 2 callbacks suppressed [ 1057.704716][ T3669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8055'. [ 1057.728460][ T3665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1057.738397][ T3682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8055'. [ 1057.772343][ T3669] veth1_to_bond (unregistering): left allmulticast mode [ 1057.780288][ T3669] veth1_to_bond (unregistering): left promiscuous mode [ 1057.819470][ T3669] bond0: (slave bond_slave_1): Releasing backup interface [ 1057.931759][ T3688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8059'. [ 1057.937399][ T3686] xt_hashlimit: size too large, truncated to 1048576 [ 1057.962279][ T3688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8059'. [ 1057.999896][ T3690] gre3: entered promiscuous mode [ 1058.005833][ T3690] gre3: entered allmulticast mode [ 1058.022167][ T3692] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8059'. [ 1058.236501][ T3694] gre0: left promiscuous mode [ 1058.250170][ T3694] gre0: left allmulticast mode [ 1058.262653][ T3700] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8062'. [ 1058.317147][ T3700] netlink: 'syz.0.8062': attribute type 15 has an invalid length. [ 1058.428956][ T3710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8065'. [ 1058.569261][ T3718] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8065'. [ 1058.627909][ T3721] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8062'. [ 1058.668892][ T3694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.676895][ T3694] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1058.679365][ T3722] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1058.892256][ T3694] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 1058.918982][ T3713] netlink: 'syz.0.8062': attribute type 29 has an invalid length. [ 1058.928557][ T3713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8062'. [ 1059.731053][ T3768] netlink: 'syz.2.8083': attribute type 1 has an invalid length. [ 1059.752975][ T3771] netlink: 'syz.0.8084': attribute type 1 has an invalid length. [ 1059.807912][ T3771] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1059.852401][ T3768] macvlan2: entered promiscuous mode [ 1059.901143][ T3768] macvlan2: entered allmulticast mode [ 1060.240182][ T3796] geneve3: entered promiscuous mode [ 1060.255671][ T3795] syzkaller0: entered promiscuous mode [ 1060.261209][ T3795] syzkaller0: entered allmulticast mode [ 1060.270421][ T3795] netlink: 'syz.2.8090': attribute type 1 has an invalid length. [ 1060.326828][ T3795] bond5 (unregistering): Released all slaves [ 1061.147970][ T3839] netlink: 'syz.4.8106': attribute type 1 has an invalid length. [ 1061.841740][ T3876] "syz.3.8117" (3876) uses obsolete ecb(arc4) skcipher [ 1062.030365][ T3881] tipc: Enabling of bearer rejected, failed to enable media [ 1062.534170][ T3912] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1062.712570][ T3925] __nla_validate_parse: 15 callbacks suppressed [ 1062.712591][ T3925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8131'. [ 1062.782989][ T3927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8132'. [ 1062.805550][ T3927] syzkaller0: entered promiscuous mode [ 1062.819668][ T3927] syzkaller0: entered allmulticast mode [ 1062.943092][ T3933] syzkaller0: entered promiscuous mode [ 1062.948931][ T3933] syzkaller0: entered allmulticast mode [ 1063.132923][ T3946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8138'. [ 1063.144288][ T3947] syzkaller0: entered promiscuous mode [ 1063.150087][ T3947] syzkaller0: entered allmulticast mode [ 1063.796241][ T3969] netlink: 'syz.0.8144': attribute type 9 has an invalid length. [ 1064.168595][ T3989] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8149'. [ 1064.466466][ T4002] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8154'. [ 1064.512092][ T5727] page_pool_release_retry() stalled pool shutdown: id 186, 1 inflight 60 sec [ 1065.092079][ T4027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8162'. [ 1065.180067][ T4027] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8162'. [ 1065.578325][ T4051] : renamed from bond0 [ 1065.597869][ T4054] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8169'. [ 1065.641791][ T4056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1065.819388][ T4061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8171'. [ 1065.889566][ T4067] netlink: 'syz.2.8172': attribute type 10 has an invalid length. [ 1065.913893][ T4067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8172'. [ 1065.964214][ T4067] team0: entered allmulticast mode [ 1066.001076][ T4067] team_slave_0: entered allmulticast mode [ 1066.026417][ T4067] team_slave_1: entered allmulticast mode [ 1066.063974][ T4067] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1066.120994][ T4075] ip6tnl0: Caught tx_queue_len zero misconfig [ 1066.189011][ T4088] netlink: 'syz.3.8177': attribute type 2 has an invalid length. [ 1066.588515][ T4103] sctp: [Deprecated]: syz.2.8181 (pid 4103) Use of int in max_burst socket option. [ 1066.588515][ T4103] Use struct sctp_assoc_value instead [ 1067.138073][ T4127] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1067.470230][ T4107] lo speed is unknown, defaulting to 1000 [ 1068.150146][ T4144] bond8 (unregistering): Released all slaves [ 1068.500921][ T4176] netlink: 'syz.3.8200': attribute type 2 has an invalid length. [ 1068.740125][ T4189] __nla_validate_parse: 4 callbacks suppressed [ 1068.740145][ T4189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8201'. [ 1068.985729][ T4195] geneve3: entered promiscuous mode [ 1069.043326][ T4206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8206'. [ 1069.118885][ T4206] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1069.214708][ T4201] netlink: 'syz.2.8207': attribute type 1 has an invalid length. [ 1069.355982][ T4219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8213'. [ 1069.368405][ T4219] netlink: 'syz.2.8213': attribute type 1 has an invalid length. [ 1069.376190][ T4219] netlink: 244 bytes leftover after parsing attributes in process `syz.2.8213'. [ 1069.390053][ T4219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8213'. [ 1069.789378][ T4236] vlan0: entered allmulticast mode [ 1069.796174][ T4236] bond0: entered allmulticast mode [ 1069.960262][ T4243] netlink: 'syz.1.8219': attribute type 10 has an invalid length. [ 1070.064444][ T4248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8220'. [ 1070.087290][ T4251] netlink: 'syz.2.8222': attribute type 5 has an invalid length. [ 1070.095014][ T4248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8220'. [ 1070.124193][ T4252] netlink: 'syz.2.8222': attribute type 5 has an invalid length. [ 1070.733307][ T4271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8227'. [ 1070.768117][ T4271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8227'. [ 1071.061048][ T4284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8230'. [ 1071.420494][ T4308] syzkaller0: entered promiscuous mode [ 1071.434705][ T4308] syzkaller0: entered allmulticast mode [ 1071.506039][ T4308] block nbd6: Unsupported socket: should be TCP or UNIX. [ 1071.594841][ T4320] netlink: 'syz.0.8243': attribute type 7 has an invalid length. [ 1071.614974][ T29] audit: type=1804 audit(1784575588.611:19): pid=4323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8244" name="/newroot/344/cgroup.controllers" dev="tmpfs" ino=1773 res=1 errno=0 [ 1071.662871][ T29] audit: type=1800 audit(1784575588.611:20): pid=4323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8244" name="cgroup.controllers" dev="tmpfs" ino=1773 res=0 errno=0 [ 1071.738753][ T4327] syzkaller0: entered promiscuous mode [ 1071.744770][ T4327] syzkaller0: entered allmulticast mode [ 1072.263774][ T4344] veth1_macvtap: entered promiscuous mode [ 1072.269995][ T4344] macsec2: entered promiscuous mode [ 1072.281005][ T4344] veth1_macvtap: left promiscuous mode [ 1072.333559][ T4347] bond7: Invalid ad_actor_system MAC address. [ 1072.339914][ T4347] bond7: option ad_actor_system: invalid value (1) [ 1072.357350][ T4347] bond7 (unregistering): Released all slaves [ 1072.560313][ T4326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1072.628393][ T4353] tipc: Enabled bearer , priority 24 [ 1072.703347][ T4355] netlink: 'syz.1.8254': attribute type 1 has an invalid length. [ 1073.037598][ T4355] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1073.738752][ T4401] nbd: socks must be embedded in a SOCK_ITEM attr [ 1073.857720][ T9] tipc: Node number set to 262144 [ 1078.145992][ T4433] netlink: 'syz.1.8274': attribute type 1 has an invalid length. [ 1078.161036][ T4433] netlink: 'syz.1.8274': attribute type 3 has an invalid length. [ 1078.170570][ T4433] __nla_validate_parse: 9 callbacks suppressed [ 1078.170589][ T4433] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8274'. [ 1078.346315][ T4450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8271'. [ 1078.370336][ T4429] bond4: (slave bond5): Releasing backup interface [ 1078.376920][ T4429] bond4: (slave bond5): the permanent HWaddr of slave - d2:62:6f:12:5b:40 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1078.393828][ T4429] bond4: (slave gretap1): making interface the new active one [ 1078.393914][ T4453] xt_limit: Overflow, try lower: 271964/0 [ 1078.415554][ T4453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8278'. [ 1078.431855][ T4429] bond4: (slave gretap1): Releasing backup interface [ 1078.481753][ T4429] bond7: (slave gretap3): Releasing active interface [ 1078.937812][ T4463] netlink: 6212 bytes leftover after parsing attributes in process `syz.3.8279'. [ 1079.026238][ T4472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8283'. [ 1079.075997][ T4478] netlink: 'syz.1.8282': attribute type 12 has an invalid length. [ 1079.287989][ T4482] gretap4: entered promiscuous mode [ 1079.297035][ T4482] batman_adv: batadv0: Adding interface: gretap4 [ 1079.304631][ T4482] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1079.326166][ T4482] batman_adv: batadv0: Not using interface gretap4 (retrying later): interface not active [ 1079.329080][ T4483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8287'. [ 1079.338644][ T4482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8287'. [ 1079.374995][ T4492] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1079.382611][ T4492] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1079.409591][ T4486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1079.416230][ T4493] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1079.725433][ T4507] bridge7: entered allmulticast mode [ 1079.906320][ T4512] syzkaller0: entered promiscuous mode [ 1079.919655][ T4512] syzkaller0: entered allmulticast mode [ 1080.303764][ T4545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8301'. [ 1080.357943][ T4543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8301'. [ 1080.392519][ T4548] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1080.413929][ T4548] syzkaller0: entered promiscuous mode [ 1080.419468][ T4548] syzkaller0: entered allmulticast mode [ 1080.436932][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8305'. [ 1082.912575][ T4520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1083.301936][ T4570] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1083.378304][ T4567] syzkaller0: entered promiscuous mode [ 1083.393846][ T4567] syzkaller0: entered allmulticast mode [ 1083.627339][ T4586] ipt_REJECT: ECHOREPLY no longer supported. [ 1086.184778][ T4561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1086.570466][ T4594] syzkaller0: entered promiscuous mode [ 1086.579282][ T4594] syzkaller0: entered allmulticast mode [ 1087.036607][ T4627] __nla_validate_parse: 1 callbacks suppressed [ 1087.036652][ T4627] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8323'. [ 1087.058552][ T4627] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8323'. [ 1087.283398][ T4637] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8326'. [ 1089.500369][ T4593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1090.127529][ T4661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8333'. [ 1090.416698][ T4674] syzkaller1: entered promiscuous mode [ 1090.468125][ T4674] syzkaller1: entered allmulticast mode [ 1090.573747][ T4683] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8339'. [ 1091.231342][ T4713] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1091.659035][ T4737] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8349'. [ 1091.945265][ T4708] netlink: 188 bytes leftover after parsing attributes in process `syz.1.8346'. [ 1092.001180][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.009072][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.223050][ T4746] bond0 (unregistering): (slave geneve2): Releasing active interface [ 1096.235046][ T4746] bond0 (unregistering): Released all slaves [ 1096.633637][ T4768] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8356'. [ 1096.803042][ T4771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8359'. [ 1096.856974][ T4778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8361'. [ 1097.064268][ T4778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8361'. [ 1097.315576][ T4793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8365'. [ 1097.697466][ T4779] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8360'. [ 1098.024021][ T4812] mac80211_hwsim hwsim46 syzkaller0: left promiscuous mode [ 1098.048660][ T4812] mac80211_hwsim hwsim46 syzkaller0: left allmulticast mode [ 1098.094486][ T4815] netlink: 'syz.4.8369': attribute type 15 has an invalid length. [ 1098.120575][ T4816] syzkaller0: entered promiscuous mode [ 1098.126106][ T4816] syzkaller0: entered allmulticast mode [ 1098.177314][ T4820] tipc: Enabled bearer , priority 10 [ 1098.291752][ T4826] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8372'. [ 1098.355271][ T4828] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1098.403182][ T4830] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1098.589375][ T4848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1098.629361][ T4854] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1099.109920][ T4882] veth0_to_bond: Caught tx_queue_len zero misconfig [ 1099.351483][ T9096] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 1099.527914][ T4909] netlink: 'syz.2.8396': attribute type 1 has an invalid length. [ 1099.773514][ T4920] netlink: 'syz.0.8399': attribute type 1 has an invalid length. [ 1099.826624][ T4920] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1099.836357][ T4920] bond9: (slave bond10): making interface the new active one [ 1099.872948][ T4920] bond9: (slave bond10): Enslaving as an active interface with an up link [ 1099.910086][ T4920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8399'. [ 1099.921502][ T4895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1099.925903][ T4920] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1100.097474][ T4941] netlink: 208 bytes leftover after parsing attributes in process `syz.2.8405'. [ 1100.128562][ T4946] macvlan0: entered promiscuous mode [ 1100.268671][ T4932] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8405'. [ 1100.281966][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.285308][ T4957] bond0: Error: CAN devices cannot be enslaved [ 1100.292725][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.350279][ T5016] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1102.430388][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8418'. [ 1102.462759][ T5022] netlink: 'syz.1.8418': attribute type 1 has an invalid length. [ 1102.546854][ T5022] bond8: entered promiscuous mode [ 1102.554360][ T5022] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1102.568890][ T5019] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8420'. [ 1102.588536][ T5028] x_tables: duplicate underflow at hook 3 [ 1102.616021][ T5022] bond8: (slave bridge5): making interface the new active one [ 1102.625915][ T5022] bridge5: entered promiscuous mode [ 1102.633643][ T5022] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 1102.870550][ T5039] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8426'. [ 1103.139534][ T5065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8434'. [ 1103.196265][ T5064] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8434'. [ 1103.248475][ T5067] syzkaller0: entered promiscuous mode [ 1103.261142][ T5067] syzkaller0: entered allmulticast mode [ 1103.270233][ T5069] netlink: 'syz.0.8436': attribute type 49 has an invalid length. [ 1103.496393][ T5069] ip6gretap0: entered promiscuous mode [ 1103.512457][ T5069] ip6gretap0: entered allmulticast mode [ 1103.569742][ T5086] netlink: 'syz.4.8439': attribute type 7 has an invalid length. [ 1103.593010][ T5084] Unsupported xt match [ 1103.593032][ T5084] unable to load match [ 1103.695313][ T5072] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8438'. [ 1103.695425][ T5069] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode [ 1103.717213][ T5069] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode [ 1104.153378][ T5108] netlink: 'syz.4.8447': attribute type 13 has an invalid length. [ 1104.167772][ T5108] netlink: 'syz.4.8447': attribute type 58 has an invalid length. [ 1104.178157][ T5108] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8447'. [ 1108.514191][ T5155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8458'. [ 1109.157996][ T5192] netlink: 'syz.3.8468': attribute type 83 has an invalid length. [ 1109.325062][ T5205] bond0: entered promiscuous mode [ 1109.347840][ T5205] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1109.355405][ T5204] netlink: 'syz.4.8472': attribute type 1 has an invalid length. [ 1109.395271][ T5205] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1109.551914][ T5220] Cannot find del_set index 65532 as target [ 1109.592167][ T5211] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1109.620844][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8470'. [ 1110.053758][ T5245] xt_hashlimit: size too large, truncated to 1048576 [ 1110.952348][ T5302] netlink: 'syz.0.8491': attribute type 1 has an invalid length. [ 1110.998206][ T5302] bond11: entered promiscuous mode [ 1111.004404][ T5302] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1111.031833][ T5295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8489'. [ 1111.243255][ T5317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8496'. [ 1111.463156][ T5317] macvtap0: entered promiscuous mode [ 1111.469247][ T5317] macvtap0: entered allmulticast mode [ 1111.476283][ T5325] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8498'. [ 1111.486218][ T5317] veth1_vlan: entered allmulticast mode [ 1111.587544][ T5328] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1112.365852][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8509'. [ 1112.404461][ T5364] netlink: 'syz.2.8509': attribute type 10 has an invalid length. [ 1112.433045][ T5364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8509'. [ 1112.507492][ T5364] geneve2: entered promiscuous mode [ 1112.522208][ T5364] geneve2: entered allmulticast mode [ 1113.197799][ T5381] netlink: 'syz.2.8511': attribute type 1 has an invalid length. [ 1113.221648][ T5381] netlink: 'syz.2.8511': attribute type 2 has an invalid length. [ 1113.328245][ T5387] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1113.357048][ T5381] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1113.470148][ T5391] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8513'. [ 1113.508357][ T5393] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8513'. [ 1114.818341][ T5396] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8514'. [ 1114.848439][ T5344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1115.214309][ T5410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8517'. [ 1115.247851][ T5410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8517'. [ 1115.387750][ T5413] SET target dimension over the limit! [ 1115.463452][ T5420] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8518'. [ 1115.812693][ T5439] netlink: 252 bytes leftover after parsing attributes in process `syz.2.8524'. [ 1115.843758][ T5438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8524'. [ 1115.968888][ T5446] netlink: 'syz.3.8525': attribute type 5 has an invalid length. [ 1116.059882][ T5451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1116.188095][ T5435] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8523'. [ 1116.287407][ T5440] netlink: 'syz.0.8523': attribute type 3 has an invalid length. [ 1116.316348][ T5440] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8523'. [ 1116.350885][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1116.509861][ T5464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8532'. [ 1116.551933][ T5464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8532'. [ 1116.617376][ T5468] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1116.764411][ T5469] netlink: 'syz.4.8534': attribute type 16 has an invalid length. [ 1116.828036][ T5469] netlink: 'syz.4.8534': attribute type 17 has an invalid length. [ 1116.849589][ T5469] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1117.490514][ T5504] netlink: 'syz.2.8545': attribute type 10 has an invalid length. [ 1117.513604][ T5504] openvswitch: netlink: Flow key attr not present in new flow. [ 1121.688768][T25860] pim6reg: left allmulticast mode [ 1121.728012][T25860] dvmrp0: left allmulticast mode [ 1121.755652][T25860] lo: left allmulticast mode [ 1122.252932][T25860] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1122.486326][T25860] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 1122.494556][T25860] bridge4 (unregistering): left promiscuous mode [ 1122.517898][T25860] bond0 (unregistering): Released all slaves [ 1122.541036][T25860] bond1 (unregistering): Released all slaves [ 1122.564855][T25860] bond2 (unregistering): Released all slaves [ 1122.588708][T25860] bond3 (unregistering): Released all slaves [ 1122.618645][T25860] bond4 (unregistering): Released all slaves [ 1122.639665][T25860] bond5 (unregistering): Released all slaves [ 1122.674583][T25860] bond6 (unregistering): Released all slaves [ 1122.715526][T25860] bond7 (unregistering): Released all slaves [ 1122.736240][T25860] bond8 (unregistering): Released all slaves [ 1122.757544][T25860] bond9 (unregistering): Released all slaves [ 1123.184824][T25860] tipc: Disabling bearer [ 1123.190426][T25860] tipc: Left network mode [ 1123.372386][ T5566] __nla_validate_parse: 8 callbacks suppressed [ 1123.372407][ T5566] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8560'. [ 1123.429792][ T5568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8561'. [ 1123.473859][ T5571] netlink: 'syz.2.8563': attribute type 1 has an invalid length. [ 1123.483667][ T5568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8561'. [ 1123.492709][ T5568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8561'. [ 1123.531593][ T5573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8562'. [ 1124.335158][ T5597] syzkaller0: entered promiscuous mode [ 1124.340955][ T5597] syzkaller0: entered allmulticast mode [ 1124.412353][ T5589] syzkaller0: entered promiscuous mode [ 1124.432897][ T5589] syzkaller0: entered allmulticast mode [ 1124.886665][ T5622] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8572'. [ 1124.955200][ T5622] netlink: 'syz.0.8572': attribute type 1 has an invalid length. [ 1125.410307][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8577'. [ 1125.497038][ T5660] netlink: 'syz.2.8577': attribute type 12 has an invalid length. [ 1126.306399][ T5680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8582'. [ 1126.364925][ T5680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8582'. [ 1126.512824][T24326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.533933][ T5697] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1126.679252][T24326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.729878][T24326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.942938][ T5705] syzkaller0: entered promiscuous mode [ 1126.945929][ T5722] netlink: 248 bytes leftover after parsing attributes in process `syz.2.8588'. [ 1126.948472][ T5705] syzkaller0: entered allmulticast mode [ 1127.284815][T25860] hsr_slave_0: left promiscuous mode [ 1127.329236][T25860] hsr_slave_1: left promiscuous mode [ 1127.397270][T25860] veth0_to_team: left promiscuous mode [ 1127.406572][T25860] vlan0: left allmulticast mode [ 1127.411491][T25860] veth0_vlan: left allmulticast mode [ 1127.460591][T25860] vlan0: left promiscuous mode [ 1127.466266][T25860] veth1_vlan: left promiscuous mode [ 1127.471688][T25860] veth0_vlan: left promiscuous mode [ 1128.565320][ T35] smc: removing ib device syz0 [ 1128.906066][ T3723] syz0: Port: 1 Link DOWN [ 1129.020074][ T5727] ================================================================== [ 1129.028210][ T5727] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250 [ 1129.037261][ T5727] Read of size 1 at addr ffff88807156ae09 by task kworker/1:4/5727 [ 1129.045168][ T5727] [ 1129.047506][ T5727] CPU: 1 UID: 0 PID: 5727 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 1129.047527][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1129.047540][ T5727] Workqueue: events smc_ib_port_event_work [ 1129.047640][ T5727] Call Trace: [ 1129.047647][ T5727] [ 1129.047654][ T5727] dump_stack_lvl+0xe8/0x150 [ 1129.047685][ T5727] print_address_description+0x55/0x1e0 [ 1129.047717][ T5727] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1129.047737][ T5727] print_report+0x58/0x70 [ 1129.047760][ T5727] kasan_report+0x117/0x150 [ 1129.047790][ T5727] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1129.047814][ T5727] __ethtool_get_link_ksettings+0x230/0x250 [ 1129.047839][ T5727] __ethtool_get_link_ksettings+0x11f/0x250 [ 1129.047864][ T5727] ib_get_eth_speed+0x180/0x7f0 [ 1129.047968][ T5727] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1129.047999][ T5727] ? do_raw_spin_unlock+0xf5/0x210 [ 1129.048022][ T5727] ? rxe_query_port+0x6b/0x3d0 [ 1129.048074][ T5727] rxe_query_port+0x93/0x3d0 [ 1129.048094][ T5727] ib_query_port+0x16e/0x830 [ 1129.048135][ T5727] smc_ib_port_event_work+0x147/0x920 [ 1129.048162][ T5727] ? rcu_is_watching+0x15/0xb0 [ 1129.048205][ T5727] ? process_scheduled_works+0xa20/0x14e0 [ 1129.048224][ T5727] process_scheduled_works+0xa8e/0x14e0 [ 1129.048256][ T5727] ? __pfx_process_scheduled_works+0x10/0x10 [ 1129.048280][ T5727] ? assign_work+0x3cf/0x5d0 [ 1129.048300][ T5727] worker_thread+0xa47/0xfb0 [ 1129.048326][ T5727] ? __kthread_parkme+0x71/0x1f0 [ 1129.048352][ T5727] kthread+0x388/0x470 [ 1129.048377][ T5727] ? __pfx_worker_thread+0x10/0x10 [ 1129.048394][ T5727] ? __pfx_kthread+0x10/0x10 [ 1129.048419][ T5727] ret_from_fork+0x514/0xb70 [ 1129.048465][ T5727] ? __pfx_ret_from_fork+0x10/0x10 [ 1129.048488][ T5727] ? __switch_to+0xc89/0x1420 [ 1129.048511][ T5727] ? __pfx_kthread+0x10/0x10 [ 1129.048536][ T5727] ret_from_fork_asm+0x1a/0x30 [ 1129.048559][ T5727] [ 1129.048566][ T5727] [ 1129.236548][ T5727] Allocated by task 17740: [ 1129.240977][ T5727] kasan_save_track+0x3e/0x80 [ 1129.245713][ T5727] __kasan_kmalloc+0x93/0xb0 [ 1129.250315][ T5727] __kvmalloc_node_noprof+0x53f/0x860 [ 1129.255731][ T5727] alloc_netdev_mqs+0xa9/0x12b0 [ 1129.260653][ T5727] rtnl_create_link+0x321/0xd70 [ 1129.265595][ T5727] rtnl_newlink_create+0x25f/0xb00 [ 1129.270727][ T5727] rtnl_newlink+0x167f/0x1bd0 [ 1129.275432][ T5727] rtnetlink_rcv_msg+0x802/0xc00 [ 1129.280394][ T5727] netlink_rcv_skb+0x226/0x4a0 [ 1129.285216][ T5727] netlink_unicast+0x7bb/0x940 [ 1129.290024][ T5727] netlink_sendmsg+0x813/0xb40 [ 1129.294797][ T5727] sock_sendmsg_nosec+0x13a/0x180 [ 1129.299887][ T5727] __sys_sendto+0x408/0x5a0 [ 1129.304437][ T5727] __x64_sys_sendto+0xde/0x100 [ 1129.309226][ T5727] do_syscall_64+0x174/0x580 [ 1129.313829][ T5727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.319735][ T5727] [ 1129.322064][ T5727] Freed by task 25860: [ 1129.326137][ T5727] kasan_save_track+0x3e/0x80 [ 1129.330826][ T5727] kasan_save_free_info+0x40/0x50 [ 1129.335859][ T5727] __kasan_slab_free+0x5c/0x80 [ 1129.340636][ T5727] kfree+0x1c5/0x640 [ 1129.344578][ T5727] device_release+0xc4/0x1f0 [ 1129.349253][ T5727] kobject_put+0x222/0x550 [ 1129.353738][ T5727] netdev_run_todo+0xf56/0x10d0 [ 1129.358603][ T5727] default_device_exit_batch+0x966/0x9e0 [ 1129.364259][ T5727] ops_undo_list+0x4b4/0x8d0 [ 1129.368902][ T5727] cleanup_net+0x572/0x810 [ 1129.373332][ T5727] process_scheduled_works+0xa8e/0x14e0 [ 1129.378897][ T5727] worker_thread+0xa47/0xfb0 [ 1129.383495][ T5727] kthread+0x388/0x470 [ 1129.387578][ T5727] ret_from_fork+0x514/0xb70 [ 1129.392268][ T5727] ret_from_fork_asm+0x1a/0x30 [ 1129.397041][ T5727] [ 1129.399379][ T5727] The buggy address belongs to the object at ffff88807156a000 [ 1129.399379][ T5727] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1129.413712][ T5727] The buggy address is located 3593 bytes inside of [ 1129.413712][ T5727] freed 4096-byte region [ffff88807156a000, ffff88807156b000) [ 1129.427703][ T5727] [ 1129.430038][ T5727] The buggy address belongs to the physical page: [ 1129.436460][ T5727] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x71568 [ 1129.445227][ T5727] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1129.453734][ T5727] memcg:ffff888071569011 [ 1129.457974][ T5727] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1129.465582][ T5727] page_type: f5(slab) [ 1129.469597][ T5727] raw: 00fff00000000040 ffff88801b01c500 dead000000000100 dead000000000122 [ 1129.478205][ T5727] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff888071569011 [ 1129.486803][ T5727] head: 00fff00000000040 ffff88801b01c500 dead000000000100 dead000000000122 [ 1129.495482][ T5727] head: 0000000000000000 0000200000040004 00000000f5000000 ffff888071569011 [ 1129.504162][ T5727] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1129.512841][ T5727] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1129.521512][ T5727] page dumped because: kasan: bad access detected [ 1129.527931][ T5727] page_owner tracks the page as allocated [ 1129.533649][ T5727] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16943, tgid 16943 (syz-executor), ts 460603821874, free_ts 460585198000 [ 1129.557101][ T5727] post_alloc_hook+0x1f9/0x250 [ 1129.561967][ T5727] get_page_from_freelist+0x21fa/0x2270 [ 1129.567528][ T5727] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1129.573344][ T5727] allocate_slab+0x79/0x5e0 [ 1129.577864][ T5727] refill_objects+0x2d5/0x350 [ 1129.582550][ T5727] __pcs_replace_empty_main+0x2bf/0x6b0 [ 1129.588113][ T5727] __kvmalloc_node_noprof+0x66b/0x860 [ 1129.593497][ T5727] alloc_netdev_mqs+0xa9/0x12b0 [ 1129.598358][ T5727] rtnl_create_link+0x321/0xd70 [ 1129.603225][ T5727] veth_newlink+0x246/0xb70 [ 1129.607828][ T5727] rtnl_newlink_create+0x310/0xb00 [ 1129.612946][ T5727] rtnl_newlink+0x167f/0x1bd0 [ 1129.617635][ T5727] rtnetlink_rcv_msg+0x802/0xc00 [ 1129.622589][ T5727] netlink_rcv_skb+0x226/0x4a0 [ 1129.627572][ T5727] netlink_unicast+0x7bb/0x940 [ 1129.632344][ T5727] netlink_sendmsg+0x813/0xb40 [ 1129.637119][ T5727] page last free pid 1240 tgid 1240 stack trace: [ 1129.643448][ T5727] free_pages_prepare+0x960/0xa60 [ 1129.648485][ T5727] __free_contig_range_common+0x174/0x340 [ 1129.654216][ T5727] free_pages_bulk+0x48/0x120 [ 1129.658902][ T5727] vfree+0x224/0x4a0 [ 1129.662804][ T5727] delayed_vfree_work+0x55/0x80 [ 1129.667663][ T5727] process_scheduled_works+0xa8e/0x14e0 [ 1129.673216][ T5727] worker_thread+0xa47/0xfb0 [ 1129.677818][ T5727] kthread+0x388/0x470 [ 1129.681895][ T5727] ret_from_fork+0x514/0xb70 [ 1129.686498][ T5727] ret_from_fork_asm+0x1a/0x30 [ 1129.691267][ T5727] [ 1129.693595][ T5727] Memory state around the buggy address: [ 1129.699227][ T5727] ffff88807156ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1129.707296][ T5727] ffff88807156ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1129.715649][ T5727] >ffff88807156ae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1129.723714][ T5727] ^ [ 1129.728045][ T5727] ffff88807156ae80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1129.736108][ T5727] ffff88807156af00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1129.744173][ T5727] ================================================================== [ 1129.796811][ T5727] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1129.804076][ T5727] CPU: 1 UID: 0 PID: 5727 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 1129.813477][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1129.823728][ T5727] Workqueue: events smc_ib_port_event_work [ 1129.829671][ T5727] Call Trace: [ 1129.832966][ T5727] [ 1129.836001][ T5727] vpanic+0x56c/0xa60 [ 1129.840017][ T5727] ? __pfx_vpanic+0x10/0x10 [ 1129.844575][ T5727] panic+0xc5/0xd0 [ 1129.848330][ T5727] ? __pfx_panic+0x10/0x10 [ 1129.852786][ T5727] ? preempt_schedule_thunk+0x16/0x40 [ 1129.858189][ T5727] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1129.864383][ T5727] ? preempt_schedule_thunk+0x16/0x40 [ 1129.869809][ T5727] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1129.875909][ T5727] check_panic_on_warn+0x89/0xb0 [ 1129.880882][ T5727] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1129.886975][ T5727] end_report+0x73/0x170 [ 1129.891245][ T5727] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1129.897338][ T5727] kasan_report+0x128/0x150 [ 1129.901877][ T5727] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1129.907972][ T5727] __ethtool_get_link_ksettings+0x230/0x250 [ 1129.913891][ T5727] __ethtool_get_link_ksettings+0x11f/0x250 [ 1129.919978][ T5727] ib_get_eth_speed+0x180/0x7f0 [ 1129.924850][ T5727] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1129.930246][ T5727] ? do_raw_spin_unlock+0xf5/0x210 [ 1129.935381][ T5727] ? rxe_query_port+0x6b/0x3d0 [ 1129.940159][ T5727] rxe_query_port+0x93/0x3d0 [ 1129.944760][ T5727] ib_query_port+0x16e/0x830 [ 1129.949376][ T5727] smc_ib_port_event_work+0x147/0x920 [ 1129.954772][ T5727] ? rcu_is_watching+0x15/0xb0 [ 1129.959556][ T5727] ? process_scheduled_works+0xa20/0x14e0 [ 1129.965289][ T5727] process_scheduled_works+0xa8e/0x14e0 [ 1129.970859][ T5727] ? __pfx_process_scheduled_works+0x10/0x10 [ 1129.976855][ T5727] ? assign_work+0x3cf/0x5d0 [ 1129.981481][ T5727] worker_thread+0xa47/0xfb0 [ 1129.986099][ T5727] ? __kthread_parkme+0x71/0x1f0 [ 1129.991142][ T5727] kthread+0x388/0x470 [ 1129.995230][ T5727] ? __pfx_worker_thread+0x10/0x10 [ 1130.000355][ T5727] ? __pfx_kthread+0x10/0x10 [ 1130.004977][ T5727] ret_from_fork+0x514/0xb70 [ 1130.009584][ T5727] ? __pfx_ret_from_fork+0x10/0x10 [ 1130.014713][ T5727] ? __switch_to+0xc89/0x1420 [ 1130.019402][ T5727] ? __pfx_kthread+0x10/0x10 [ 1130.024008][ T5727] ret_from_fork_asm+0x1a/0x30 [ 1130.028791][ T5727] [ 1130.031981][ T5727] Kernel Offset: disabled [ 1130.036332][ T5727] Rebooting in 86400 seconds..