last executing test programs: 4.211971392s ago: executing program 0 (id=1909): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x4000) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000040)) 3.69791145s ago: executing program 0 (id=1915): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f00000000c0)="76399d837cd38cb29017f7eafcf5214b616c67e7173dcc7a76b5c05f17f54acf9bcd34d7d283ec78a3d7503565a2e030945f1832206ae53f42e6c8fdd6545f9fe8647b4356fa901c5996c9b47159ba1ed221bfc63d2b3ea2ecb7e12d35257a410169ef18e0da5c3cbc73dd8fddd5aa6184cae10d986c69a785629a1ac4889b370d8157c4e1ee413ca675df90365405c281a721e0d18b8a079389885b29d942a7910c7e52ef06563642c601299b28e66059712c38", 0xb4, 0x8000, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x3, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x254ac3, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) 3.042934039s ago: executing program 0 (id=1926): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000010000107000040000000001a0a0000000600010011"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80), 0x0, 0x0) 3.006375324s ago: executing program 0 (id=1928): r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x68, r0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:ptmx_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c805}, 0x20000800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffffffc}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x44}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x40054) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, r6, 0x2, 0x3, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x18, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000740)='syzkaller\x00', 0x9, 0x41, &(0x7f0000000880)=""/65, 0x41100, 0x40, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000900)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0xb, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000a00)=[r4, r9, r4, r4], &(0x7f0000000a40)=[{0x1, 0x4, 0x3, 0x6}, {0x5, 0x1, 0xf, 0x9}, {0x1, 0x2, 0x0, 0x5}, {0x0, 0x1, 0xe, 0x1}, {0x5, 0x5, 0xb, 0x2}, {0x1, 0x3, 0xe, 0x3}], 0x10, 0x8001}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000111401090000000000000000080005"], 0x18}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.78012765s ago: executing program 0 (id=1930): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000019580)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=""/189, 0xe3, 0xbd, 0x1, 0xfffffffd, 0x10000}, 0x28) pipe(&(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000019700)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="0748e1422f6a7483ab0d0a2b0d00000000000020a33f00"/32, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB='\x00'/28], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000019700)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="0748e1422f6a7483ab0d0a2b0d00000000000020a33f00"/32, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000001500)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x400000}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, r1}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000001500)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x400000}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, r1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r6}, 0x4) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[], 0x23c}}, 0x20040149) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x40000000015, 0x5, 0x0) (async) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r8, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r9 = socket(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r10, &(0x7f0000000a00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf255700000008000300", @ANYRES32=0x0, @ANYBLOB="0600950000080000060095000700000006009500ff070000060095000400000006009500010000000600950006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008841) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000380)=@base={0x15, 0xfffffffe, 0x8, 0x20000002, 0x2000, 0xffffffffffffffff, 0xfffffeff, '\x00', r7, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r11, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r11}, &(0x7f0000000140), &(0x7f0000000180)=r9}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r11, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r9}, 0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000), &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000), &(0x7f00000000c0)=0x8) pipe(&(0x7f0000000040)) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 2.590297668s ago: executing program 0 (id=1933): r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020f02500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf07f}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 2.454817071s ago: executing program 2 (id=1937): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x90000005}) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) writev(r1, &(0x7f0000000780)=[{&(0x7f00000001c0)="02a51c4fd963", 0x6}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x90000005}) (async) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) (async) writev(r1, &(0x7f0000000780)=[{&(0x7f00000001c0)="02a51c4fd963", 0x6}], 0x1) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) (async) 2.35532065s ago: executing program 3 (id=1939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0x4b, 0xa0, &(0x7f00000000c0)="81914927b59bcfa9427af17d9eb4a712e044584b9f3a05185baadbf5f2839297ac603cd4edac6c2766b1b903df1130edd4cf011dce1d064d5b220eadf7d533ea99b658bac512318b1af6d3", &(0x7f0000000200)=""/160, 0x1, 0x0, 0xc6, 0xaf, &(0x7f00000002c0)="eef893a0cfbdc1db25cd5d319be285a103c4f5962d2612ab3f8803c90d18fa958cdcb6f337361ba11811c0c755578cdfb576a5248398aee0050d663d9a4b1dd3a8f094741acf0166563343d0fc5d39b39a64acb8f3d7169a2b36cdd7479757b9415f20c1297b0651865afdafd13f2fee1c9d542f28bfe4c1a46cdb56ceea3b0b2eb94236edf9dde08e1907b3b518a7e4674d210ef37c19354867a05484e3190ff7b6ea187454ee486b129e3a4b634cc271d2e401051c844e3e4e8b2d2fe9721c5a385ddddd87", &(0x7f00000003c0)="4752348bbb8d499b7cbd09add0e9a2faf94f125ff512e40de093c07ac8b3560990d34c7cff2ce479605148a1db35f2a074b711dff97bd6cde5b10b7469fecd7ab98fe98c139107d8a78fc7ba1fb31007caef3b98b2ba3e0dff59435bf1fe60783eab9d9ed68dde2ef3ac86df527987d3775366f083880f219617904522414e2d4685fe209f2b613f3885ad5b4f4572e137782ee0d915e1e99b99e4ea3d4906d5f62c5f0a654c0c0635899ff719f6f3", 0x4, 0x0, 0x6}, 0x50) 2.262135379s ago: executing program 3 (id=1941): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x60) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x38, r6, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r3) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x7c, r9, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x30a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x96}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xea}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8041}, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x602d, 0x4) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.221043922s ago: executing program 1 (id=1942): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @random="44379fce1039"}, 0x14) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000f3f5971e15c63a300000091c8cea444414aea350afd4e3c324c64ff228ee4522d507c44fb2f6274d3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c30a00fe4100000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000000000000015d7da67d3fdde06f367ed18f433876fea6a42063566255c7cc4b3f59eeee0b8dc1cfd8c440b0d0d87"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.184808699s ago: executing program 2 (id=1943): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000005c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xa6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r8 = accept(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r6], 0x48) shutdown(r8, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r8}, 0x47) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10042, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r10, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x42}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240200000840800034000000007080004400000000f08000140000000001c0005800c000100707b796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x4, 0x2, 0x9, 0xefeb, 0x8, 0x6, 0x1, 0x9}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x60}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.058567498s ago: executing program 1 (id=1945): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001914019e"], 0x10}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000a08000140000000170900010073797a30000000000900020073797a3200"], 0x78}}, 0x10) 1.938539843s ago: executing program 3 (id=1947): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd28, 0x40000, {0x2, 0x1f, 0xd, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000020605000000000000100000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000200007800c00018004000140000000000800084000000000080006400000000005000500020000000500010006"], 0x68}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x200, 0x70bd2c, 0x65dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 1.907233759s ago: executing program 1 (id=1948): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x20, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}}, 0x1c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\fA\x00\x00', @ANYRES16=r7, @ANYBLOB="04002dbd7000fcdbdf250e0000001c0003800800010003000000080001000100000008000100070000004c0007800c00030080000000000000000c00030004000000000000000c00040003000000000000000800010008000000080002000600000008000200010000800c0004000200000000000000140003800800020009000000080002000b000000440007800c000300d4560000000000000c00040073060000000000000c000300010000000000000008000100090000000c000400070000000000000008000100010000001c0002800400040008000100000000000c00038008000200ffffffff1c000580080001006574680008000100657468000800010075647000"], 0x10c}, 0x1, 0x0, 0x0, 0x4004}, 0x24040020) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x280) 1.861792902s ago: executing program 2 (id=1949): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000003000000002000000000000000000000300000000010000000300000002000000000000000000000203000000090000000000000c"], 0x0, 0x4a}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x13, 0x0) 1.766916548s ago: executing program 4 (id=1950): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="19388793d9f37d7625a155eb1644d97d2e9e5ad2884d8a97e218344808ba1038622c3c8d7bfec887f8e63f90079bd1c5f2d606022857a0ad5484b6c129a1a06c05d38c2ab2642ec9c764ad54d6e27ffd69f6cc211d7515a3ecec9c61f296eed398ebc94bccc76cc0ebc9d16b2b", 0x63}, {&(0x7f00000000c0)="fa3ea03985bfc5abab298c9f387abaf8892d4f0aae0928a10169d9be5b7d223890180fba952c5f93368710b6da01b283677001f235a2a348e619", 0x3a}, {&(0x7f0000000340)="c5c1426b3e8bc7f9374c510863a072712613d531b60966aa88781cf98cf3d8f644fdca31c955c498808e76c58734b1ef3465c0ac94df6d4c4c4424e0ca8afce29816de9eb19fac9a5d30a4a087d44dd009b4c4f99a6a6c6d8abb53dbf55d89cb2df5b9790be4bc2a1c67f1ede60d526719ee5a651734ccffb38c79191fff74b44f0d7026154c5ca42e7ab4a2f0b4910d989899704dc7ee85d68f19091fdb1c618b6bc4d8c6b6e0f2a37f6ae53d9e0d7bf898ba429b166a12cacd3d22f135d7ead1d5fafbbf209ee62dbe875d92197bb0be9ff11101d85a", 0xd7}, {&(0x7f0000000200)="fbcbd966e088025b72cb8a615f5d9cab55d16a120bed4b6a420fc2a3972eebf5b64c34a7c7435940f8e309feeffd630641356a9dfd40dd39f4a1f51a032a3dc39c13b3c5dacca7a432c2ea45e5480e61ea36abc83970ca61a5b02172c385653c1d96096416ac20c8f5438912", 0xa}, {&(0x7f0000000100)="6505eff5f23b009b4e373c01769d7833e1aca87f6b03000000000000009c4706d794b713daacafc5ec0f75297363", 0x27}], 0x5, 0x0, 0x4f, 0x1f000801}, 0x8010) 1.766513986s ago: executing program 3 (id=1951): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8eb6}]}) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x4e}, 0x28) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x42073, 0xffffffffffffffff, 0x4c90000) 1.708643718s ago: executing program 4 (id=1952): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d2c651b101fa"}, 0x10) unshare(0x22020600) poll(&(0x7f0000000080)=[{r0, 0x4000}], 0x1, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18f9000000000000000000000000000091103f0000664c4bc7c5136cd6000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.63565188s ago: executing program 2 (id=1953): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r0) socket$kcm(0xa, 0x3, 0x87) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000030400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000000100000001c0012800600010069706970000000000c00028008001400010000009cc4df29c538408c3a2d681d3fa54dff6fa45f7346caa09882a79b619d032ab484ae7165f699104778f080c5695c979a66ee2282a3802894cbb30bb26bd5960cb7753f59e0b7c67bf81e4d7dd7ea3e36f9230b19165288f2953fbbdfb9ba2e0b7f91a676da4c8534091702b3fda6b8b765f0713467ad34a412c580a716b02cbf154e21d6df281f2e42753072b4fb99ab435922b9b2b427eeaaaf71ed9dd447c8db8b"], 0x3c}}, 0x20000000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xac, r6, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r8}, 0x10) unshare(0x22020600) connect$inet(r7, &(0x7f0000000500)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002c3d0400000000000000000076cf9c404d7dcaa290019418795aee2ff25d780995fa8ad6db99c997b7d474403e607703c9b4324c772daaef1f755a3dbb40649ad229fcf2f714c7de187f17de4e9117607fe8644492f1293e7535b811da2aaab5252e610dc1a9bc6f68229ecfbf9b672ba48bd379067e012fa6817d09b0539e55570cbeeeee2a0d58c7e1d1622438a63da0aa3c67a73bf3e5d9c579b042c902e1f76400d5fcf3c6c719f4a21a597dd7bcbc439dc68d02fe443790b179766b5bcf0a"], 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) 746.832367ms ago: executing program 4 (id=1954): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x0, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 445.146817ms ago: executing program 4 (id=1955): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x40000041, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 407.968037ms ago: executing program 1 (id=1956): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x568, 0x3c8, 0x12, 0x600, 0x0, 0x202, 0x498, 0x2e8, 0x2e8, 0x498, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}}, 0x0, 0x398, 0x3c8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa0318236000000c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b50700", 0x2}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x3f, 0x0, [{0x8, 0xb, 0x7}, {0x1, 0x4, 0x80, 0x2}, {0x9, 0x4, 0xf8, 0xfffffff5}, {0x3, 0x8d, 0x5, 0xfffffc93}, {0x3, 0x0, 0x0, 0x4}, {0xa, 0x60, 0xee, 0xb}, {0x81, 0x0, 0xf3, 0x100}, {0x0, 0xff, 0x81, 0xed65}, {0x1bd4, 0x0, 0x6, 0xa}, {0x800, 0x1, 0xf1, 0x1}, {0x8000, 0x82, 0x9, 0x3}, {0x617, 0x9, 0xb9, 0x864}, {0x2, 0x5, 0x10, 0x1}, {0xdb8b, 0xb, 0x9, 0x2}, {0x8, 0x40, 0x8}, {0xfff1, 0x2, 0x5, 0x2}, {0x10, 0xc7, 0x2, 0x8}, {0x6, 0x0, 0xd, 0x80}, {0x95f1, 0x8, 0x2, 0x600000}, {0x1, 0x2f, 0xfb, 0x6}, {0x6, 0x4c, 0xfc, 0x80}, {0x4c24, 0x83, 0x7, 0xcbf4d91}, {0x3, 0x7, 0x9, 0xc9}, {0x3, 0x2, 0x7, 0x7fff}, {0x9, 0x6, 0x3, 0x6a9}, {0x3, 0x3, 0x10, 0x7}, {0x400, 0x1, 0x7, 0x8000}, {0x5a8a, 0x3, 0x5, 0x8}, {0x9d5, 0xff, 0xb, 0xedc6}, {0x9, 0xc, 0xfa, 0x1}, {0x2, 0x9, 0xae, 0xb478}, {0x5, 0x9, 0x0, 0x3}, {0x7fff, 0xd, 0x2, 0x9}, {0x1, 0x96, 0x5, 0xfffffffe}, {0x4, 0xeb, 0x10}, {0x8, 0x4, 0x0, 0x5}, {0x9, 0x0, 0xd, 0x4}, {0x6, 0xd6, 0xe, 0x3}, {0x5, 0xc, 0xc, 0x3}, {0x0, 0x6, 0x3, 0x3}, {0xd90, 0x2, 0x0, 0x1}, {0x2, 0xfd, 0x7f, 0x400000}, {0xaa0, 0xc, 0xff}, {0x7, 0x9, 0x1, 0xa6c}, {0x8, 0x9, 0x3, 0x5}, {0x7db0, 0xf6, 0x4, 0x6}, {0x7, 0x3, 0x8, 0xfffff6d9}, {0x8e35, 0x0, 0x5, 0x3ff}, {0xcfa6, 0x9, 0x9, 0x7}, {0x4be, 0x7, 0x1, 0x3ff}, {0x16bd, 0xff, 0xa, 0x47c}, {0xd8b, 0x3, 0x6, 0xd635}, {0x5, 0x3, 0x0, 0x6}, {0x2, 0x9, 0x5, 0x49}, {0x8, 0x3, 0x31, 0x3de}, {0xaa7, 0x0, 0xff, 0xfffffc4a}, {0x400, 0x81, 0xc, 0x1}, {0x1, 0x9, 0x4, 0x81}, {0x30, 0x6, 0x9, 0x6}, {0x8, 0x81, 0xd, 0x149}, {0x7f, 0x7, 0x3, 0x59b}, {0x9, 0x1d, 0x7, 0x3}, {0xf, 0x4d, 0x1, 0x6}, {0x6, 0x3, 0x1, 0xfffffffb}], {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x0) 326.735621ms ago: executing program 3 (id=1957): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) (async, rerun: 64) r4 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) r5 = socket$pppl2tp(0x18, 0x1, 0x1) close(0x3) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x2, {0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}}}, 0x3a) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0) (async) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) (async) r7 = socket$isdn(0x22, 0x3, 0x2) ioctl$int_in(r7, 0x5421, &(0x7f00000000c0)=0x9) (async) setsockopt$inet6_int(r6, 0x29, 0x1a, 0x0, 0xfdb7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000000)={r10, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000400)={r10, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}}, 0x90) (async, rerun: 32) r11 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) connect$inet6(r11, &(0x7f0000000140)={0xa, 0x4e24, 0x4, @mcast1, 0x12}, 0x1c) socket$kcm(0x2, 0x5, 0x84) 292.997078ms ago: executing program 4 (id=1958): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000002000000000000000002000004680800000000000001000000000000000000000001"], 0x0, 0x4a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 277.983848ms ago: executing program 2 (id=1959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x840) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0x4c}}, 0x0) 210.72934ms ago: executing program 3 (id=1960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{}, [@mcast1]}}}]}, 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}}, 0x20}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYBLOB="ffff"], 0x40}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000005f00070127bd70002d2486ba8f0000000000000177467c00000400fc805e0e07e7d50a76000180080002800400178008000700", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 197.161245ms ago: executing program 1 (id=1961): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010"], 0x10}], 0x1}, 0x24000000) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18) (async, rerun: 64) r3 = socket(0x2a, 0x2, 0x0) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100e1a1f8ac3756", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) (rerun: 64) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r5) (async) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) (async, rerun: 64) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (rerun: 64) 144.788975ms ago: executing program 4 (id=1962): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0x62, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000846, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000680)=0xfffffffffffffffe, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000008c0)={0x0, 0x0, "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", "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"}) (async) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 82.776059ms ago: executing program 2 (id=1963): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0010000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="08000400000058"], 0x4c}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) sendmsg$nl_xfrm(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x2, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0) (async) recvmmsg(r1, &(0x7f0000000900), 0x40000000000002a, 0x40000161, 0x0) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_mreq(r4, 0x29, 0x1, 0x0, &(0x7f00000003c0)) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000000002000000e000000100000000000000000000000000fa8535ee8d3f7be8ff927d1f7300000000000000000000000000000000000000000000000000430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008fa7b73db1c40143354766c700000000000000ed6671c85d02a0121145ade67c000000"], 0x90) 0s ago: executing program 1 (id=1964): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$ax25(r1, &(0x7f0000000100)="f89fccc331c98f06af32d3047072136d55e00f06", 0x14, 0x240000c5, &(0x7f0000000140)={{0x3, @default, 0x5}, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061107e000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000000000000810000000100f16fbf7443bc36dbc548db512c50030000006d0d0eef46f014555fd5b6b3b0745bc1d55d5636fd627f2872924c8d04218a7e0d2e927d0bd59b8d52ea6ae1b958bdcb2e26a2ac50d4f4dd50db7761db89c3b1cbe077e8cec6d6c9630f6527062e45ce85ed13cf79e101277e2f97a6c4132a4ba2bfb61d0160640009a5f6105ee5a8b3a8799346e5f3553f846c0d6829cc5a79e6fae5e8e25d058daaa1e8719f36", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x20008880}}], 0x2, 0x4c054) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611074000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) kernel console output (not intermixed with test programs): 73] batadv1: entered promiscuous mode [ 105.112662][ T3509] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 105.123403][ T3509] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 105.275966][ T6507] tc_dump_action: action bad kind [ 105.290366][ T6509] netlink: 'syz.2.160': attribute type 16 has an invalid length. [ 105.363658][ T6509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.403413][ T6507] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 105.611621][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'. [ 105.639032][ T6521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.165'. [ 105.643171][ T6519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.164'. [ 105.730366][ T6521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.165'. [ 105.934289][ T6532] netlink: 256 bytes leftover after parsing attributes in process `syz.1.168'. [ 106.020006][ T6526] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.054906][ T6526] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 106.102847][ T6540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.169'. [ 106.225605][ T6526] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.259462][ T6526] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 106.332872][ T6526] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.348501][ T6526] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 106.423706][ T6557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.175'. [ 106.436057][ T6526] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.450702][ T6526] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 106.608742][ T6526] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 106.647224][ T6526] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 106.725631][ T6575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.835017][ T6575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.925620][ T6575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.949329][ T6575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.975340][ T6575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.018966][ T6575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.059064][ T6575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.072623][ T6581] batadv_slave_1: entered promiscuous mode [ 107.080428][ T6581] batadv_slave_1: left promiscuous mode [ 107.086735][ T6575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.097843][ T6575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.136243][ T6575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.167016][ T6585] xt_socket: unknown flags 0x50 [ 107.259077][ T6588] validate_nla: 1 callbacks suppressed [ 107.259096][ T6588] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 107.777523][ T6613] x_tables: duplicate underflow at hook 3 [ 107.840019][ T6611] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 107.840041][ T30] audit: type=1800 audit(1760445864.906:2): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.186" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 107.908947][ T6611] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 107.962178][ T6611] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 108.377236][ T6641] Driver unsupported XDP return value 0 on prog (id 102) dev N/A, expect packet loss! [ 108.605765][ T6654] delete_channel: no stack [ 108.677383][ T6659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.868272][ T6676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.092043][ T6744] __nla_validate_parse: 13 callbacks suppressed [ 110.092065][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'. [ 110.271962][ T6751] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 110.846451][ T6780] netlink: 'syz.3.230': attribute type 3 has an invalid length. [ 110.886206][ T6780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.230'. [ 110.950557][ T6784] netlink: 56 bytes leftover after parsing attributes in process `syz.2.229'. [ 110.965486][ T6782] tipc: Started in network mode [ 110.970392][ T6782] tipc: Node identity 3e742409c179, cluster identity 4711 [ 110.979011][ T6782] tipc: Enabled bearer , priority 0 [ 111.058873][ T6784] bond1 (unregistering): Released all slaves [ 111.098905][ T6793] syzkaller0: entered promiscuous mode [ 111.106424][ T6793] syzkaller0: entered allmulticast mode [ 111.121831][ T6782] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 111.169779][ T6797] tipc: New replicast peer: 255.255.255.255 [ 111.183301][ T6797] tipc: Enabled bearer , priority 10 [ 111.208047][ T6782] tipc: Resetting bearer [ 111.233010][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.234'. [ 111.247652][ T6782] syzkaller1: entered promiscuous mode [ 111.255150][ T6782] syzkaller1: entered allmulticast mode [ 111.279987][ T6781] tipc: Resetting bearer [ 111.350173][ T6781] tipc: Disabling bearer [ 111.660743][ T6820] netlink: 48 bytes leftover after parsing attributes in process `syz.3.239'. [ 111.778890][ T6820] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 111.801536][ T6820] bond1 (unregistering): Released all slaves [ 111.829948][ T10] IPVS: starting estimator thread 0... [ 111.953381][ T6839] tipc: Started in network mode [ 111.982280][ T6839] tipc: Node identity e694667471f9, cluster identity 4711 [ 111.989652][ T6833] IPVS: using max 26 ests per chain, 62400 per kthread [ 112.027110][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 112.036359][ T6839] tipc: Enabled bearer , priority 0 [ 112.061377][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 112.175683][ T6822] tipc: Disabling bearer [ 112.303142][ T43] tipc: Node number set to 1912591506 [ 112.466519][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 112.595779][ T6872] netlink: 788 bytes leftover after parsing attributes in process `syz.0.251'. [ 112.626369][ T6863] team0: Port device team_slave_1 removed [ 112.879505][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 112.902800][ T6882] netlink: 'syz.1.252': attribute type 24 has an invalid length. [ 112.965049][ T6885] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 113.257395][ T6898] ip6gre1: entered allmulticast mode [ 114.230255][ T3509] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.268684][ T3509] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.300038][ T3509] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.333406][ T3509] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.616272][ T6964] warning: `syz.2.271' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.707337][ T6967] x_tables: duplicate underflow at hook 3 [ 114.738217][ T6973] x_tables: duplicate underflow at hook 3 [ 114.799910][ T6972] gretap1: entered promiscuous mode [ 114.813427][ T6972] gretap1: entered allmulticast mode [ 114.822499][ T6966] syz.1.272 (6966) used greatest stack depth: 17832 bytes left [ 115.072649][ T6988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.092985][ T6983] netlink: 'syz.0.279': attribute type 4 has an invalid length. [ 115.120376][ T6983] netlink: 'syz.0.279': attribute type 4 has an invalid length. [ 115.155058][ T6986] __nla_validate_parse: 6 callbacks suppressed [ 115.155077][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 115.173302][ T6991] syzkaller1: entered promiscuous mode [ 115.178813][ T6991] syzkaller1: entered allmulticast mode [ 115.293139][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'. [ 115.327625][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.283'. [ 115.649370][ T7016] netlink: 168 bytes leftover after parsing attributes in process `syz.1.287'. [ 116.184040][ T7045] bond1 (unregistering): Released all slaves [ 116.414736][ T7059] vlan2: entered allmulticast mode [ 116.480658][ T7063] netlink: 'syz.2.303': attribute type 2 has an invalid length. [ 116.493105][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 116.659521][ T7071] Bluetooth: hci0: invalid length 39, exp 2 for type 22 [ 116.793863][ T7076] tipc: Enabling of bearer rejected, media not registered [ 117.015167][ T7087] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 117.032749][ T7087] netlink: 'syz.1.314': attribute type 50 has an invalid length. [ 117.118938][ T7099] netlink: 'syz.1.317': attribute type 1 has an invalid length. [ 117.126546][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 117.153519][ T7099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.117170][ T7167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 118.325795][ T7179] netlink: 'syz.1.335': attribute type 8 has an invalid length. [ 119.175153][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 119.342717][ T7189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.339'. [ 119.843641][ T7212] SET target dimension over the limit! [ 119.862908][ T7210] bond1: Unable to set down delay as MII monitoring is disabled [ 119.872936][ T7210] bond1 (unregistering): Released all slaves [ 119.910751][ T7205] netlink: 32 bytes leftover after parsing attributes in process `syz.4.344'. [ 120.102855][ T7221] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 120.191632][ T7227] tipc: Enabled bearer , priority 0 [ 120.199416][ T7227] syzkaller0: entered promiscuous mode [ 120.205650][ T7227] syzkaller0: entered allmulticast mode [ 120.214763][ T7227] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 120.268097][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 120.281609][ T7236] netlink: 64 bytes leftover after parsing attributes in process `syz.0.352'. [ 120.322292][ T7227] tipc: Resetting bearer [ 120.472755][ T7226] tipc: Resetting bearer [ 120.495779][ T7226] tipc: Disabling bearer [ 120.538355][ T7253] C: renamed from team_slave_0 (while UP) [ 120.575316][ T7253] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 120.594622][ T7253] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 120.671896][ T7263] openvswitch: netlink: Key type 251 is out of range max 32 [ 120.845679][ T7271] netlink: 224 bytes leftover after parsing attributes in process `syz.4.364'. [ 121.071360][ T7283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.367'. [ 121.091208][ T7286] ksmbd: Unknown IPC event: 3, ignore. [ 121.132351][ T7285] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.368'. [ 121.523271][ T7291] netlink: 44 bytes leftover after parsing attributes in process `syz.4.370'. [ 121.625471][ T7293] netlink: 248 bytes leftover after parsing attributes in process `syz.4.370'. [ 122.738185][ T7333] netlink: 224 bytes leftover after parsing attributes in process `syz.0.380'. [ 122.886747][ T7341] xt_cluster: node mask cannot exceed total number of nodes [ 122.908696][ T7343] netlink: 216 bytes leftover after parsing attributes in process `syz.4.382'. [ 122.930814][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 123.409665][ T7372] netlink: 'syz.4.394': attribute type 8 has an invalid length. [ 123.473193][ T7378] IPVS: Unknown mcast interface: vcan0 [ 124.201135][ T7411] ip6gre1: entered allmulticast mode [ 124.427479][ T7428] netlink: 'syz.0.414': attribute type 1 has an invalid length. [ 124.549712][ T7428] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 124.675676][ T7428] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 124.807837][ T7443] gretap1: entered promiscuous mode [ 124.813291][ T7443] gretap1: entered allmulticast mode [ 124.829499][ T7443] bond1: (slave gretap1): making interface the new active one [ 124.846082][ T7443] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 125.028582][ T7461] openvswitch: netlink: Missing key (keys=40, expected=100) [ 125.384529][ T7484] __nla_validate_parse: 9 callbacks suppressed [ 125.384549][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 125.652483][ T7493] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20003 [ 126.181504][ T7490] netlink: 5 bytes leftover after parsing attributes in process `syz.3.428'. [ 126.192165][ T7490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.428'. [ 126.273895][ T7532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.439'. [ 126.311332][ T7531] xt_hashlimit: size too large, truncated to 1048576 [ 126.320004][ T7529] veth1_to_bond: entered allmulticast mode [ 126.327775][ T7534] tipc: Failed to obtain node identity [ 126.335715][ T7534] tipc: Enabling of bearer rejected, failed to enable media [ 126.344600][ T7528] veth1_to_bond: left allmulticast mode [ 126.404876][ T7536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.439'. [ 126.875431][ T7558] xt_cluster: node mask cannot exceed total number of nodes [ 126.913422][ T7562] syz.3.448 uses old SIOCAX25GETINFO [ 126.933325][ T7560] netlink: 'syz.0.447': attribute type 1 has an invalid length. [ 127.107257][ T7560] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.200747][ T7569] bond2: (slave veth5): Enslaving as an active interface with a down link [ 127.253174][ T7585] netlink: 'syz.3.453': attribute type 3 has an invalid length. [ 127.457515][ T7593] netlink: 'syz.1.456': attribute type 29 has an invalid length. [ 127.493040][ T7593] netlink: 'syz.1.456': attribute type 29 has an invalid length. [ 127.519898][ T7593] netlink: 500 bytes leftover after parsing attributes in process `syz.1.456'. [ 127.575379][ T7599] netlink: 24 bytes leftover after parsing attributes in process `syz.3.458'. [ 127.586337][ T3509] tipc: Subscription rejected, illegal request [ 128.400657][ T7633] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 128.418735][ T7652] syz.3.474: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 128.448816][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 128.449892][ T7633] bond2 (unregistering): Released all slaves [ 128.464691][ T7652] CPU: 0 UID: 0 PID: 7652 Comm: syz.3.474 Not tainted syzkaller #0 PREEMPT(full) [ 128.464719][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.464740][ T7652] Call Trace: [ 128.464749][ T7652] [ 128.464759][ T7652] dump_stack_lvl+0x189/0x250 [ 128.464802][ T7652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.464825][ T7652] ? __pfx__printk+0x10/0x10 [ 128.464848][ T7652] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 128.464878][ T7652] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 128.464910][ T7652] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 128.464943][ T7652] warn_alloc+0x214/0x310 [ 128.464974][ T7652] ? stack_depot_save_flags+0x41b/0x860 [ 128.465006][ T7652] ? __pfx_warn_alloc+0x10/0x10 [ 128.465041][ T7652] ? kasan_save_track+0x3e/0x80 [ 128.465070][ T7652] ? __kasan_kmalloc+0x93/0xb0 [ 128.465104][ T7652] ? xsk_setsockopt+0x4dc/0x8d0 [ 128.465125][ T7652] ? do_sock_setsockopt+0x179/0x1b0 [ 128.465147][ T7652] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 128.465166][ T7652] ? do_syscall_64+0xfa/0xfa0 [ 128.465189][ T7652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.465219][ T7652] __vmalloc_node_range_noprof+0x125/0x12d0 [ 128.465293][ T7652] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 128.465329][ T7652] ? __kasan_kmalloc+0x93/0xb0 [ 128.465368][ T7652] vmalloc_user_noprof+0xad/0xf0 [ 128.465400][ T7652] ? xskq_create+0xbf/0x170 [ 128.465426][ T7652] xskq_create+0xbf/0x170 [ 128.465454][ T7652] xsk_init_queue+0xb0/0x110 [ 128.465481][ T7652] xsk_setsockopt+0x4dc/0x8d0 [ 128.465507][ T7652] ? __pfx_xsk_setsockopt+0x10/0x10 [ 128.465534][ T7652] ? __pfx_aa_sk_perm+0x10/0x10 [ 128.465563][ T7652] ? aa_sock_opt_perm+0xff/0x1b0 [ 128.465596][ T7652] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 128.465617][ T7652] ? __pfx_xsk_setsockopt+0x10/0x10 [ 128.465641][ T7652] do_sock_setsockopt+0x179/0x1b0 [ 128.465672][ T7652] __x64_sys_setsockopt+0x13f/0x1b0 [ 128.465702][ T7652] do_syscall_64+0xfa/0xfa0 [ 128.465726][ T7652] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.465752][ T7652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.465772][ T7652] ? clear_bhb_loop+0x60/0xb0 [ 128.465798][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.465818][ T7652] RIP: 0033:0x7f392578eec9 [ 128.465847][ T7652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.465865][ T7652] RSP: 002b:00007f3926638038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 128.465888][ T7652] RAX: ffffffffffffffda RBX: 00007f39259e5fa0 RCX: 00007f392578eec9 [ 128.465903][ T7652] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 128.465916][ T7652] RBP: 00007f3925811f91 R08: 0000000000000004 R09: 0000000000000000 [ 128.465929][ T7652] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.465942][ T7652] R13: 00007f39259e6038 R14: 00007f39259e5fa0 R15: 00007ffc5fc96908 [ 128.465979][ T7652] [ 128.465992][ T7652] Mem-Info: [ 128.768457][ T7652] active_anon:5263 inactive_anon:0 isolated_anon:0 [ 128.768457][ T7652] active_file:2436 inactive_file:39895 isolated_file:0 [ 128.768457][ T7652] unevictable:768 dirty:46 writeback:0 [ 128.768457][ T7652] slab_reclaimable:10575 slab_unreclaimable:97014 [ 128.768457][ T7652] mapped:34156 shmem:1358 pagetables:1070 [ 128.768457][ T7652] sec_pagetables:0 bounce:0 [ 128.768457][ T7652] kernel_misc_reclaimable:0 [ 128.768457][ T7652] free:1336477 free_pcp:11977 free_cma:0 [ 128.779969][ T7636] team0: Device geneve3 is up. Set it down before adding it as a team port [ 128.827294][ T7652] Node 0 active_anon:20984kB inactive_anon:0kB active_file:9744kB inactive_file:159376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136680kB dirty:180kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13068kB pagetables:4184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 128.863904][ T7652] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 128.920292][ T7652] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 128.950946][ T7652] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 128.977815][ T7652] Node 0 DMA32 free:1430192kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20984kB inactive_anon:0kB active_file:9744kB inactive_file:159376kB unevictable:1536kB writepending:180kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:33932kB local_pcp:20768kB free_cma:0kB [ 129.011885][ T7652] lowmem_reserve[]: 0 0 1 1 1 [ 129.016962][ T7652] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.053513][ T7652] lowmem_reserve[]: 0 0 0 0 0 [ 129.059290][ T7652] Node 1 Normal free:3901764kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14144kB local_pcp:7936kB free_cma:0kB [ 129.099680][ T7652] lowmem_reserve[]: 0 0 0 0 0 [ 129.099745][ T7666] syzkaller1: entered promiscuous mode [ 129.099754][ T7652] [ 129.099772][ T7666] syzkaller1: entered allmulticast mode [ 129.130615][ T7652] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 129.166345][ T7652] Node 0 DMA32: 575*4kB (M) 211*8kB (UME) 196*16kB (UM) 270*32kB (UM) 68*64kB (UME) 32*128kB (UM) 11*256kB (UM) 10*512kB (UM) 17*1024kB (UM) 6*2048kB (UME) 334*4096kB (UM) = 1429908kB [ 129.218227][ T7652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 129.233506][ T7652] Node 1 Normal: 181*4kB (UE) 42*8kB (UME) 38*16kB (UME) 82*32kB (UME) 28*64kB (UME) 5*128kB (UME) 3*256kB (ME) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UE) 949*4096kB (M) = 3901764kB [ 129.253375][ T7652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.267605][ T7672] tipc: Started in network mode [ 129.275656][ T7672] tipc: Node identity 8a339f25c2b2, cluster identity 4711 [ 129.277652][ T7652] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 129.292528][ T7672] tipc: Enabled bearer , priority 0 [ 129.299872][ T7652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.307518][ T7672] syzkaller0: entered promiscuous mode [ 129.319009][ T7652] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 129.331287][ T7652] 43686 total pagecache pages [ 129.332068][ T7672] syzkaller0: entered allmulticast mode [ 129.336624][ T7652] 0 pages in swap cache [ 129.362657][ T7652] Free swap = 124996kB [ 129.385521][ T7672] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 129.399595][ T7652] Total swap = 124996kB [ 129.411344][ T7652] 2097051 pages RAM [ 129.437795][ T7652] 0 pages HighMem/MovableOnly [ 129.451464][ T7652] 424543 pages reserved [ 129.456580][ T7652] 0 pages cma reserved [ 129.486776][ T7672] tipc: Resetting bearer [ 129.507364][ T7671] tipc: Resetting bearer [ 129.540730][ T7671] tipc: Disabling bearer [ 129.674522][ T7691] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 129.824291][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.483'. [ 129.907788][ T7703] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 129.907788][ T7704] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 129.908948][ T7706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.486'. [ 129.928474][ T7697] netlink: 'syz.4.483': attribute type 1 has an invalid length. [ 129.949670][ T7706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.136504][ T7720] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 130.279537][ T7727] vlan2: entered promiscuous mode [ 130.296617][ T7727] bridge0: entered promiscuous mode [ 130.557895][ T7743] x_tables: duplicate underflow at hook 2 [ 130.558010][ T7742] x_tables: duplicate underflow at hook 2 [ 131.126794][ T7766] netlink: 'syz.2.502': attribute type 7 has an invalid length. [ 131.161329][ T7774] __nla_validate_parse: 4 callbacks suppressed [ 131.161349][ T7774] netlink: 72 bytes leftover after parsing attributes in process `syz.1.505'. [ 131.540471][ T7785] team0 (unregistering): Port device team_slave_0 removed [ 131.574865][ T7785] team0 (unregistering): Port device team_slave_1 removed [ 131.686883][ T7796] netlink: 4144 bytes leftover after parsing attributes in process `syz.2.512'. [ 131.709502][ T7801] netlink: 'syz.4.513': attribute type 4 has an invalid length. [ 131.844353][ T7807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.515'. [ 131.931562][ T7808] tap0: tun_chr_ioctl cmd 2148553947 [ 132.132558][ T7824] netlink: 56 bytes leftover after parsing attributes in process `syz.4.518'. [ 132.182455][ T7831] netlink: 88 bytes leftover after parsing attributes in process `syz.1.520'. [ 132.193393][ T7832] netlink: 'syz.4.518': attribute type 1 has an invalid length. [ 132.316502][ T7824] bond1 (unregistering): Released all slaves [ 132.331172][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.524'. [ 132.344688][ T7841] netlink: 224 bytes leftover after parsing attributes in process `syz.3.524'. [ 132.354414][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.524'. [ 132.497144][ T7838] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 132.514146][ T7850] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 132.590037][ T7854] netlink: 'syz.2.527': attribute type 10 has an invalid length. [ 132.628635][ T7854] team0: Device ipvlan1 failed to register rx_handler [ 132.706696][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.722055][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.864891][ T7863] tipc: Started in network mode [ 132.880147][ T7863] tipc: Node identity fed0e4a47b93, cluster identity 4711 [ 132.894268][ T7863] tipc: Enabled bearer , priority 0 [ 132.922775][ T7857] netlink: 'syz.0.528': attribute type 1 has an invalid length. [ 132.967225][ T7863] tipc: Disabling bearer [ 133.088010][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'. [ 133.247585][ T7894] netlink: 40 bytes leftover after parsing attributes in process `syz.4.537'. [ 133.500680][ T7900] syzkaller1: entered promiscuous mode [ 133.522054][ T7900] syzkaller1: entered allmulticast mode [ 133.548190][ T7905] tipc: Enabled bearer , priority 0 [ 133.558251][ T7905] syzkaller0: entered promiscuous mode [ 133.572347][ T7905] syzkaller0: entered allmulticast mode [ 133.737079][ T7905] dvmrp0: entered allmulticast mode [ 133.817733][ T7902] tipc: Resetting bearer [ 133.869528][ T7902] tipc: Disabling bearer [ 134.231651][ T7940] bond1: option mode: invalid value (133) [ 134.245155][ T7940] bond1 (unregistering): Released all slaves [ 134.527278][ T7151] IPVS: starting estimator thread 0... [ 134.625936][ T7959] IPVS: using max 27 ests per chain, 64800 per kthread [ 134.716007][ T7967] Bluetooth: MGMT ver 1.23 [ 134.769333][ T7971] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 134.831436][ T7973] macsec1: entered promiscuous mode [ 134.837400][ T7973] macsec1: entered allmulticast mode [ 134.845550][ T7973] bond2: (slave macsec1): Error -34 calling dev_set_mtu [ 135.257328][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.265312][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.324204][ T7999] netlink: 'syz.4.567': attribute type 1 has an invalid length. [ 135.376590][ T7986] bridge_slave_0: left allmulticast mode [ 135.382619][ T7986] bridge_slave_0: left promiscuous mode [ 135.389992][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.415135][ T7986] bridge_slave_1: left allmulticast mode [ 135.420936][ T7986] bridge_slave_1: left promiscuous mode [ 135.427264][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.473756][ T7986] bond0: (slave bond_slave_0): Releasing backup interface [ 135.540139][ T7986] bond0: (slave bond_slave_1): Releasing backup interface [ 135.595712][ T7986] team0: Port device team_slave_0 removed [ 135.643270][ T7986] team0: Port device team_slave_1 removed [ 135.678626][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.690802][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.710741][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.728796][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.755941][ T7986] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.864394][ T7999] bond3: entered promiscuous mode [ 135.911589][ T7999] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.035812][ T8004] bond3: (slave bridge5): making interface the new active one [ 136.045030][ T8004] bridge5: entered promiscuous mode [ 136.051591][ T8004] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 136.065205][ T8021] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 136.204650][ T8034] __nla_validate_parse: 12 callbacks suppressed [ 136.204671][ T8034] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.575'. [ 136.291489][ T8034] openvswitch: netlink: Key type 30 is not supported [ 136.627360][ T8058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.643033][ T8066] netlink: 'syz.2.584': attribute type 4 has an invalid length. [ 136.730285][ T8064] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 136.744747][ T8064] bond1 (unregistering): Released all slaves [ 136.905328][ T8073] tipc: Enabled bearer , priority 0 [ 136.969354][ T8073] syzkaller0: entered promiscuous mode [ 136.987343][ T8073] syzkaller0: entered allmulticast mode [ 136.999233][ T8078] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 137.033388][ T8073] netlink: 'syz.0.586': attribute type 7 has an invalid length. [ 137.083715][ T8073] tipc: Resetting bearer [ 137.161830][ T8071] tipc: Resetting bearer [ 137.249794][ T8090] netlink: 'syz.2.593': attribute type 21 has an invalid length. [ 137.258276][ T8090] netlink: 128 bytes leftover after parsing attributes in process `syz.2.593'. [ 137.304464][ T8096] netlink: 'syz.2.593': attribute type 21 has an invalid length. [ 137.312687][ T8096] netlink: 128 bytes leftover after parsing attributes in process `syz.2.593'. [ 137.340074][ T8071] tipc: Disabling bearer [ 137.355736][ T8090] netlink: 'syz.2.593': attribute type 4 has an invalid length. [ 137.365167][ T8090] netlink: 'syz.2.593': attribute type 5 has an invalid length. [ 137.388468][ T8090] netlink: 3 bytes leftover after parsing attributes in process `syz.2.593'. [ 137.418348][ T8096] netlink: 'syz.2.593': attribute type 4 has an invalid length. [ 137.456494][ T8096] netlink: 'syz.2.593': attribute type 5 has an invalid length. [ 137.484120][ T8096] netlink: 3 bytes leftover after parsing attributes in process `syz.2.593'. [ 137.533150][ T8099] tipc: Enabled bearer , priority 0 [ 137.588754][ T8101] syzkaller0: entered promiscuous mode [ 137.602148][ T8101] syzkaller0: entered allmulticast mode [ 137.665208][ T8099] tipc: Resetting bearer [ 137.714296][ T8098] tipc: Resetting bearer [ 137.794916][ T8098] tipc: Disabling bearer [ 137.811743][ T8121] netlink: 1260 bytes leftover after parsing attributes in process `syz.1.601'. [ 137.859734][ T8122] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 137.883612][ T8118] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 138.052826][ T8127] netlink: 'syz.1.603': attribute type 3 has an invalid length. [ 138.093011][ T8133] netlink: 5 bytes leftover after parsing attributes in process `syz.0.604'. [ 138.108541][ T8133] 0ªî{X¹¦: renamed from gretap0 [ 138.134335][ T8133] 0ªî{X¹¦: entered allmulticast mode [ 138.141799][ T8133] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 138.152631][ T8137] netlink: 44 bytes leftover after parsing attributes in process `syz.4.606'. [ 138.212224][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.606'. [ 138.267389][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'. [ 138.436989][ T8154] !: renamed from dummy0 (while UP) [ 138.556838][ T8161] macvlan0: entered promiscuous mode [ 138.566327][ T8161] batadv0: entered promiscuous mode [ 138.574981][ T8161] hsr1: entered allmulticast mode [ 138.580150][ T8161] macvlan0: entered allmulticast mode [ 138.586008][ T8161] veth1_vlan: entered allmulticast mode [ 138.591608][ T8161] batadv0: entered allmulticast mode [ 138.600066][ T8161] macvlan0: left promiscuous mode [ 138.609922][ T8161] batadv0: left promiscuous mode [ 138.754888][ T8166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.797927][ T8166] bond0: (slave rose0): Enslaving as an active interface with an up link [ 138.899228][ T8172] bond1: option lp_interval: invalid value (0) [ 138.906707][ T8172] bond1: option lp_interval: allowed values 1 - 2147483647 [ 138.919013][ T8172] bond1 (unregistering): Released all slaves [ 138.951691][ T8179] bridge0: port 3(team0) entered disabled state [ 138.958552][ T8179] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.966608][ T8179] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.986043][ T8179] bridge0: port 3(team0) entered blocking state [ 138.988326][ T8185] sctp: [Deprecated]: syz.3.619 (pid 8185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.988326][ T8185] Use struct sctp_sack_info instead [ 138.992511][ T8179] bridge0: port 3(team0) entered forwarding state [ 139.015473][ T8179] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.022707][ T8179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.030240][ T8179] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.037500][ T8179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.050817][ T8179] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 139.925024][ T8237] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 140.265338][ T8260] xt_l2tp: missing protocol rule (udp|l2tpip) [ 140.607276][ T8276] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 140.617748][ T8276] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 141.176300][ T8303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.277151][ T8309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.676314][ T8332] syzkaller0: entered promiscuous mode [ 141.700295][ T8332] syzkaller0: entered allmulticast mode [ 141.751515][ T8332] tipc: Enabled bearer , priority 0 [ 141.784937][ T8331] tipc: Resetting bearer [ 142.207904][ T8356] validate_nla: 5 callbacks suppressed [ 142.207924][ T8356] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 142.763933][ T7140] tipc: Node number set to 4279051273 [ 142.888189][ T8331] tipc: Disabling bearer [ 142.913086][ T8356] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 143.232495][ T8377] __nla_validate_parse: 6 callbacks suppressed [ 143.232518][ T8377] netlink: 68 bytes leftover after parsing attributes in process `syz.4.676'. [ 143.310238][ T8379] x_tables: duplicate entry at hook 2 [ 143.529359][ T8394] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 143.545189][ T8395] netlink: 88 bytes leftover after parsing attributes in process `syz.3.682'. [ 143.568756][ T8395] IPVS: length: 239 != 24 [ 143.575789][ T8395] netlink: 'syz.3.682': attribute type 10 has an invalid length. [ 143.586702][ T8395] netlink: 40 bytes leftover after parsing attributes in process `syz.3.682'. [ 143.688166][ T8404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.684'. [ 143.691309][ T8395] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 143.719091][ T8397] tipc: Enabled bearer , priority 0 [ 143.762054][ T8408] syzkaller0: entered promiscuous mode [ 143.767589][ T8408] syzkaller0: entered allmulticast mode [ 143.813485][ T8397] tipc: Resetting bearer [ 143.840036][ T8396] tipc: Resetting bearer [ 143.871843][ T8396] tipc: Disabling bearer [ 143.890047][ T8416] netlink: 'syz.3.688': attribute type 1 has an invalid length. [ 144.014785][ T8417] netlink: 'syz.2.686': attribute type 8 has an invalid length. [ 144.046072][ T8420] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 144.058589][ T8424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.689'. [ 144.058589][ T8423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.689'. [ 144.140458][ T8416] netlink: 48 bytes leftover after parsing attributes in process `syz.3.688'. [ 144.297639][ T8438] netlink: 'syz.0.691': attribute type 1 has an invalid length. [ 144.330003][ T8438] netlink: 228 bytes leftover after parsing attributes in process `syz.0.691'. [ 144.364138][ T8438] netlink: 'syz.0.691': attribute type 1 has an invalid length. [ 144.446495][ T8431] bond4: (slave gretap0): making interface the new active one [ 144.498972][ T8431] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 144.694921][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'. [ 144.722943][ T8453] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 144.755229][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'. [ 144.764950][ T8459] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 145.333888][ T8493] tipc: Enabled bearer , priority 0 [ 145.356224][ T8493] syzkaller0: entered promiscuous mode [ 145.376277][ T8493] syzkaller0: entered allmulticast mode [ 145.447993][ T8503] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 145.466060][ T8503] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 145.488659][ T8503] gretap1: entered promiscuous mode [ 145.494851][ T8503] gretap1: entered allmulticast mode [ 145.533631][ T8493] tipc: Resetting bearer [ 145.544852][ T8492] tipc: Resetting bearer [ 145.579298][ T8492] tipc: Disabling bearer [ 145.618686][ T8519] netlink: 'syz.1.716': attribute type 12 has an invalid length. [ 145.644563][ T3420] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.658715][ T3420] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.668775][ T3420] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.678890][ T3420] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.844053][ T8527] sctp: [Deprecated]: syz.4.721 (pid 8527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.844053][ T8527] Use struct sctp_sack_info instead [ 146.485837][ T8559] bond2 (unregistering): Released all slaves [ 146.603243][ T8563] nbd1: detected capacity change from 0 to 127 [ 146.617144][ T5837] block nbd1: Receive control failed (result -32) [ 146.619510][ T6251] block nbd1: Send control failed (result -32) [ 146.631614][ T6251] block nbd1: Request send failed, requeueing [ 146.646624][ T122] block nbd1: Dead connection, failed to find a fallback [ 146.654891][ T122] block nbd1: shutting down sockets [ 146.660665][ T122] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.673965][ T122] Buffer I/O error on dev nbd1, logical block 0, async page read [ 146.684135][ T6251] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.693964][ T6251] Buffer I/O error on dev nbd1, logical block 1, async page read [ 146.703602][ T6251] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.713156][ T6251] Buffer I/O error on dev nbd1, logical block 2, async page read [ 146.721265][ T6251] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.730945][ T6251] Buffer I/O error on dev nbd1, logical block 3, async page read [ 146.739295][ T6251] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.749266][ T6251] Buffer I/O error on dev nbd1, logical block 0, async page read [ 146.757656][ T6251] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.767234][ T6251] Buffer I/O error on dev nbd1, logical block 1, async page read [ 146.780145][ T6251] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.791658][ T6251] Buffer I/O error on dev nbd1, logical block 2, async page read [ 146.801798][ T6251] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.811706][ T6251] Buffer I/O error on dev nbd1, logical block 3, async page read [ 146.820138][ T6251] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.832943][ T6251] Buffer I/O error on dev nbd1, logical block 0, async page read [ 146.844739][ T6251] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.858690][ T6251] Buffer I/O error on dev nbd1, logical block 1, async page read [ 146.873345][ T6251] ldm_validate_partition_table(): Disk read failed. [ 146.886784][ T6251] Dev nbd1: unable to read RDB block 0 [ 146.897004][ T6251] nbd1: unable to read partition table [ 146.920148][ T6251] ldm_validate_partition_table(): Disk read failed. [ 146.934109][ T6251] Dev nbd1: unable to read RDB block 0 [ 146.945785][ T6251] nbd1: unable to read partition table [ 147.298246][ T8589] netlink: 'syz.1.737': attribute type 1 has an invalid length. [ 148.019311][ T8626] tipc: Enabled bearer , priority 0 [ 148.040550][ T8626] syzkaller0: entered promiscuous mode [ 148.052964][ T8626] syzkaller0: entered allmulticast mode [ 148.118086][ T8626] tipc: Resetting bearer [ 148.126263][ T8625] tipc: Resetting bearer [ 148.153184][ T8625] tipc: Disabling bearer [ 148.577988][ T8651] __nla_validate_parse: 79 callbacks suppressed [ 148.578011][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.755'. [ 148.845316][ T8663] netlink: 'syz.4.759': attribute type 3 has an invalid length. [ 148.854153][ T8663] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.759'. [ 149.012812][ T8673] netlink: 52 bytes leftover after parsing attributes in process `syz.0.764'. [ 149.175084][ T8680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.768'. [ 149.206524][ T8680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.768'. [ 149.397064][ T8689] netlink: 'syz.0.770': attribute type 1 has an invalid length. [ 149.408480][ T8689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 149.592921][ T8703] No such timeout policy "syz1" [ 149.647611][ T8707] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 149.656558][ T8707] netlink: 220 bytes leftover after parsing attributes in process `syz.0.774'. [ 149.950610][ T8713] netlink: 52 bytes leftover after parsing attributes in process `syz.4.777'. [ 150.175263][ T8727] netlink: 'syz.3.780': attribute type 15 has an invalid length. [ 150.445932][ T8750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.788'. [ 150.539397][ T8755] netlink: 'syz.3.789': attribute type 1 has an invalid length. [ 150.620784][ T8755] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.646243][ T8755] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 150.666342][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.791'. [ 150.724301][ T8755] veth7: entered promiscuous mode [ 150.742888][ T8755] bond2: (slave veth7): Enslaving as an active interface with a down link [ 150.825812][ T8755] bond2: entered allmulticast mode [ 150.868074][ T8758] veth9: entered promiscuous mode [ 150.885265][ T8758] bond2: (slave veth9): Enslaving as an active interface with a down link [ 151.286029][ T8799] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 151.314774][ T8799] tipc: New replicast peer: 255.255.255.255 [ 151.321458][ T8799] tipc: Enabled bearer , priority 10 [ 152.432091][ T7140] tipc: Node number set to 1216454437 [ 153.171719][ C0] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 153.174356][ T8864] netlink: 'syz.1.816': attribute type 21 has an invalid length. [ 153.233316][ T8856] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 153.265373][ T8864] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.292598][ T8856] bond2 (unregistering): Released all slaves [ 153.342587][ T8864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.349865][ T8864] IPv6: NLM_F_CREATE should be set when creating new route [ 153.357221][ T8864] IPv6: NLM_F_CREATE should be set when creating new route [ 153.364519][ T8864] IPv6: NLM_F_CREATE should be set when creating new route [ 153.490281][ T8857] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 153.491100][ T8860] wg1 speed is unknown, defaulting to 1000 [ 153.532382][ T8860] wg1 speed is unknown, defaulting to 1000 [ 153.554405][ T8860] wg1 speed is unknown, defaulting to 1000 [ 153.629482][ T8860] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 153.648466][ T8860] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 153.691754][ T8860] wg1 speed is unknown, defaulting to 1000 [ 153.700601][ T8860] wg1 speed is unknown, defaulting to 1000 [ 153.718455][ T8860] wg1 speed is unknown, defaulting to 1000 [ 153.752599][ T8860] wg1 speed is unknown, defaulting to 1000 [ 153.763484][ T8860] wg1 speed is unknown, defaulting to 1000 [ 153.771559][ T8882] netlink: 'syz.1.824': attribute type 11 has an invalid length. [ 153.984432][ T8900] __nla_validate_parse: 3 callbacks suppressed [ 153.984453][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 154.034052][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.827'. [ 154.060162][ T8900] netlink: 'syz.0.827': attribute type 20 has an invalid length. [ 154.195106][ T8915] netlink: 'syz.1.831': attribute type 12 has an invalid length. [ 154.271801][ T8917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.832'. [ 154.421250][ T8917] C: entered allmulticast mode [ 154.429321][ T8917] C: left allmulticast mode [ 154.514686][ T8930] netlink: 212388 bytes leftover after parsing attributes in process `syz.2.835'. [ 154.584221][ T8930] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 154.824953][ T8939] netlink: 'syz.3.837': attribute type 21 has an invalid length. [ 154.933229][ T8955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.844'. [ 154.982235][ T5901] IPVS: starting estimator thread 0... [ 154.998251][ T8961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.847'. [ 155.021103][ T8958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.035252][ T8961] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 155.036535][ T8961] block (null): Could not allocate knbd recv work queue. [ 155.094767][ T8961] nbd: failed to add new device [ 155.101243][ T8959] IPVS: using max 27 ests per chain, 64800 per kthread [ 155.303914][ T8976] netlink: 'syz.1.849': attribute type 1 has an invalid length. [ 155.313382][ T8975] xt_HMARK: proto mask must be zero with L3 mode [ 155.356612][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.851'. [ 155.406940][ T8975] SET target dimension over the limit! [ 155.413053][ T8975] Bluetooth: hci0: invalid length 39, exp 2 for type 29 [ 155.585221][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.856'. [ 155.656328][ T8998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.859'. [ 155.804179][ T9011] netlink: 256 bytes leftover after parsing attributes in process `syz.0.858'. [ 156.253359][ T9039] netlink: 'syz.0.865': attribute type 1 has an invalid length. [ 156.426279][ T9046] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.540503][ T9054] netlink: 'syz.2.870': attribute type 10 has an invalid length. [ 156.576001][ T9046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.590280][ T9046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.648907][ T9046] veth1_vlan: left allmulticast mode [ 156.701686][ T9046] netdevsim netdevsim3 ÿÿÿÿÿÿ: left promiscuous mode [ 156.737191][ T9046] gretap1: left promiscuous mode [ 156.745213][ T9046] veth7: left promiscuous mode [ 156.751737][ T9046] veth9: left promiscuous mode [ 156.771359][ T9053] veth1_to_bond: entered promiscuous mode [ 156.824448][ T9054] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 156.863783][ T3420] netdevsim netdevsim3 ÿÿÿÿÿÿ: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.887858][ T3420] netdevsim netdevsim3 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.926954][ T3420] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.954185][ T3420] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.972760][ T3420] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.013035][ T3420] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.036642][ T3420] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.053577][ T9063] delete_channel: no stack [ 157.074983][ T3420] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.274074][ T9085] ip6erspan0: entered promiscuous mode [ 157.307571][ T9085] ip6erspan0: entered allmulticast mode [ 157.344939][ T9093] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 157.616696][ T9078] syzkaller0: entered promiscuous mode [ 157.623438][ T9078] syzkaller0: entered allmulticast mode [ 157.631172][ T9100] syzkaller0: entered promiscuous mode [ 157.637862][ T9100] syzkaller0: entered allmulticast mode [ 158.926206][ T9120] bridge0: Device is already in use. [ 159.052620][ T9128] __nla_validate_parse: 6 callbacks suppressed [ 159.052640][ T9128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.888'. [ 159.525877][ T9157] netlink: 'syz.2.894': attribute type 2 has an invalid length. [ 159.552154][ T9159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.895'. [ 159.626065][ T9164] xt_ecn: cannot match TCP bits for non-tcp packets [ 159.700582][ T9167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.897'. [ 160.010152][ T9183] netlink: 40 bytes leftover after parsing attributes in process `syz.3.903'. [ 160.065887][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 160.312348][ T9190] netlink: 'syz.4.906': attribute type 1 has an invalid length. [ 160.450613][ T9192] netlink: 236 bytes leftover after parsing attributes in process `syz.3.907'. [ 160.521487][ T9202] netlink: 51 bytes leftover after parsing attributes in process `syz.4.911'. [ 160.533014][ T9203] netlink: 'syz.2.910': attribute type 5 has an invalid length. [ 160.602406][ T9203] netlink: 'syz.2.910': attribute type 5 has an invalid length. [ 160.604280][ T9210] netlink: 'syz.4.913': attribute type 8 has an invalid length. [ 160.686127][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 160.723735][ T9212] netlink: 'syz.3.912': attribute type 30 has an invalid length. [ 160.750177][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 160.865557][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.912'. [ 161.097424][ T9225] syzkaller0: entered promiscuous mode [ 161.122746][ T9225] syzkaller0: entered allmulticast mode [ 163.126528][ T9236] netlink: 'syz.0.921': attribute type 4 has an invalid length. [ 163.134733][ T9237] netlink: 'syz.0.921': attribute type 4 has an invalid length. [ 163.265954][ T9252] netlink: 'syz.2.924': attribute type 58 has an invalid length. [ 164.173808][ T9297] __nla_validate_parse: 8 callbacks suppressed [ 164.173827][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'. [ 164.346344][ T9306] netlink: 40 bytes leftover after parsing attributes in process `syz.3.941'. [ 164.387226][ T9310] netlink: 'syz.4.943': attribute type 15 has an invalid length. [ 164.435064][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 164.489399][ T60] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 164.522386][ T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 164.556360][ T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 164.590739][ T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 164.863449][ T9341] syzkaller0: entered promiscuous mode [ 164.902587][ T9341] syzkaller0: entered allmulticast mode [ 165.335039][ T9364] veth1_vlan: left promiscuous mode [ 165.358806][ T9366] tipc: Enabling of bearer rejected, failed to enable media [ 165.371028][ T9368] ipt_REJECT: TCP_RESET invalid for non-tcp [ 165.387496][ T9368] IPVS: set_ctl: invalid protocol: 108 172.30.0.1:20004 [ 165.412691][ T9368] tipc: Enabling of bearer rejected, failed to enable media [ 165.574465][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'. [ 165.662905][ T9387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.964'. [ 165.712354][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'. [ 165.934076][ T9409] netlink: 72 bytes leftover after parsing attributes in process `syz.0.965'. [ 165.952134][ T9409] netlink: 72 bytes leftover after parsing attributes in process `syz.0.965'. [ 166.014754][ T9419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.966'. [ 166.138839][ T9424] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜z [ 166.654822][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.975'. [ 167.179052][ T9477] netlink: 'syz.0.984': attribute type 6 has an invalid length. [ 167.190340][ T9477] netlink: 'syz.0.984': attribute type 1 has an invalid length. [ 168.327731][ T9522] netlink: 'syz.3.998': attribute type 1 has an invalid length. [ 168.359737][ T9522] netlink: 'syz.3.998': attribute type 1 has an invalid length. [ 168.392373][ T9522] netlink: 'syz.3.998': attribute type 2 has an invalid length. [ 168.983347][ T9558] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 168.990735][ T9560] netlink: 'syz.0.1011': attribute type 1 has an invalid length. [ 169.320124][ T9558] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.398057][ T9561] bond4: (slave geneve2): making interface the new active one [ 169.437178][ T9561] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 169.563306][ T9580] IPv6: NLM_F_CREATE should be specified when creating new route [ 169.629182][ T9580] __nla_validate_parse: 16 callbacks suppressed [ 169.629203][ T9580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1016'. [ 169.641297][ T9586] netlink: zone id is out of range [ 169.673479][ T9586] netlink: zone id is out of range [ 169.678656][ T9586] netlink: zone id is out of range [ 169.706263][ T9586] netlink: zone id is out of range [ 169.711441][ T9586] netlink: zone id is out of range [ 169.813073][ T9586] netlink: zone id is out of range [ 169.842339][ T9586] netlink: zone id is out of range [ 169.882139][ T9586] netlink: zone id is out of range [ 169.904631][ T9586] netlink: zone id is out of range [ 169.945592][ T9586] netlink: zone id is out of range [ 170.183360][ T9610] netlink: 'syz.1.1022': attribute type 1 has an invalid length. [ 170.197846][ T6251] udevd[6251]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 170.290956][ T9614] netlink: 'syz.4.1025': attribute type 10 has an invalid length. [ 170.384480][ T9614] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 170.613918][ T9630] team0: Device vti0 is of different type [ 170.919072][ T9651] netlink: 'syz.0.1034': attribute type 12 has an invalid length. [ 170.927860][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1035'. [ 171.071193][ T9654] veth1_macvtap: left promiscuous mode [ 171.646167][ T9685] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1044'. [ 171.677336][ T9681] 8021q: adding VLAN 0 to HW filter on device bond5 [ 171.749096][ T9681] 8021q: adding VLAN 0 to HW filter on device bond5 [ 171.786380][ T9681] bond5: (slave geneve3): making interface the new active one [ 171.843031][ T9681] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 171.862106][ T9399] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 171.963618][ T9692] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1047'. [ 171.993934][ T9399] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 172.012169][ T9399] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 172.038045][ T9696] mac80211_hwsim hwsim8 ÿ: renamed from wlan1 [ 172.074818][ T9399] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 172.195882][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1049'. [ 172.205686][ T9703] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1050'. [ 172.232204][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1049'. [ 172.526089][ T9717] validate_nla: 3 callbacks suppressed [ 172.526111][ T9717] netlink: 'syz.0.1054': attribute type 1 has an invalid length. [ 172.580507][ T9717] netlink: 'syz.0.1054': attribute type 3 has an invalid length. [ 172.595475][ T9717] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1054'. [ 172.647603][ T9717] tipc: Enabled bearer , priority 0 [ 172.657466][ T9720] netlink: 'syz.4.1056': attribute type 3 has an invalid length. [ 172.668500][ T9717] syzkaller0: entered promiscuous mode [ 172.675016][ T9717] syzkaller0: entered allmulticast mode [ 172.685247][ T9721] netlink: 'syz.1.1055': attribute type 83 has an invalid length. [ 172.706531][ T9717] tipc: Resetting bearer [ 172.733966][ T9721] netlink: 'syz.1.1055': attribute type 1 has an invalid length. [ 172.775951][ T9721] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.963087][ T9731] netlink: 'syz.2.1058': attribute type 12 has an invalid length. [ 172.981376][ T9731] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1058'. [ 173.028173][ T9731] netlink: 'syz.2.1058': attribute type 12 has an invalid length. [ 173.039578][ T9731] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1058'. [ 173.051701][ T9731] netlink: 'syz.2.1058': attribute type 12 has an invalid length. [ 173.061253][ T9731] netlink: 'syz.2.1058': attribute type 12 has an invalid length. [ 173.079256][ T9731] netlink: 'syz.2.1058': attribute type 12 has an invalid length. [ 173.210944][ T9747] netlink: 'syz.1.1064': attribute type 11 has an invalid length. [ 173.258774][ T9746] veth5: entered promiscuous mode [ 173.267636][ T9746] veth5: entered allmulticast mode [ 173.299228][ T9749] tap0: tun_chr_ioctl cmd 2148553947 [ 173.340928][ T9716] tipc: Resetting bearer [ 173.365303][ T9716] tipc: Disabling bearer [ 174.160426][ T9798] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 174.339742][ T9804] tipc: Enabled bearer , priority 0 [ 174.375023][ T9804] syzkaller0: entered promiscuous mode [ 174.380629][ T9804] syzkaller0: entered allmulticast mode [ 174.485164][ T9821] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:65534 [ 174.494508][ T9819] macvlan2: entered promiscuous mode [ 174.499866][ T9819] macvlan2: entered allmulticast mode [ 174.545253][ T9819] bond6: (slave macvlan2): Opening slave failed [ 174.568650][ T9803] tipc: Resetting bearer [ 174.627976][ T9803] tipc: Disabling bearer [ 174.826722][ T9832] nbd: must specify an index to disconnect [ 174.836906][ T9838] __nla_validate_parse: 40 callbacks suppressed [ 174.836927][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 174.838820][ T9840] lo: entered promiscuous mode [ 174.858413][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 174.888701][ T9840] net_ratelimit: 16 callbacks suppressed [ 174.888721][ T9840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.913045][ T9835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1093'. [ 174.929980][ T9843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.968524][ T9849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1098'. [ 175.036855][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'. [ 175.163914][ T9858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1101'. [ 175.194498][ T9854] tipc: Enabled bearer , priority 0 [ 175.255036][ T9854] tipc: Resetting bearer [ 175.271350][ T9866] C: renamed from team_slave_0 [ 175.283594][ T9866] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 175.393749][ T9852] tipc: Disabling bearer [ 175.566327][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 175.597776][ T9884] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1106'. [ 175.610675][ T9886] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 175.624696][ T9883] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1106'. [ 175.644941][ T9886] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 175.959287][ T9910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1114'. [ 176.065815][ T9918] veth1_macvtap: left promiscuous mode [ 176.117334][ T9922] x_tables: duplicate underflow at hook 3 [ 176.686564][ T9948] wg1 speed is unknown, defaulting to 1000 [ 176.933072][ T9962] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 177.126617][ T9966] vlan2: entered promiscuous mode [ 177.133363][ T9966] vlan2: entered allmulticast mode [ 177.142215][ T9966] hsr_slave_1: entered allmulticast mode [ 177.565627][ T9989] validate_nla: 38 callbacks suppressed [ 177.565649][ T9989] netlink: 'syz.1.1139': attribute type 1 has an invalid length. [ 177.588203][ T9989] netlink: 'syz.1.1139': attribute type 1 has an invalid length. [ 177.832539][ T9999] tipc: New replicast peer: 255.255.255.255 [ 177.839569][ T9999] tipc: Enabled bearer , priority 10 [ 177.851562][ T9999] netlink: 'syz.0.1142': attribute type 8 has an invalid length. [ 178.322490][T10026] netlink: 'syz.3.1152': attribute type 11 has an invalid length. [ 178.615017][T10040] tipc: Enabling of bearer rejected, already enabled [ 178.707848][ T7141] IPVS: starting estimator thread 0... [ 178.842268][T10050] IPVS: using max 24 ests per chain, 57600 per kthread [ 178.944203][T10061] netlink: 'syz.3.1162': attribute type 6 has an invalid length. [ 179.169549][T10076] netlink: 'syz.3.1167': attribute type 29 has an invalid length. [ 179.281713][T10081] syzkaller0: entered promiscuous mode [ 179.292695][T10081] syzkaller0: entered allmulticast mode [ 179.556542][T10086] bond3: Unable to set up delay as MII monitoring is disabled [ 179.587013][T10086] bond3 (unregistering): Released all slaves [ 179.845180][T10117] __nla_validate_parse: 21 callbacks suppressed [ 179.845201][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'. [ 179.877502][T10121] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1179'. [ 180.072944][T10132] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 180.076004][T10125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.477836][T10145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1186'. [ 180.547976][T10148] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1185'. [ 180.692691][T10157] netlink: 'syz.4.1189': attribute type 4 has an invalid length. [ 180.822962][T10161] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1191'. [ 180.992878][T10167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1193'. [ 181.133214][T10182] netlink: 'syz.1.1196': attribute type 1 has an invalid length. [ 181.305627][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1194'. [ 181.344235][T10180] batadv1: left allmulticast mode [ 181.351441][T10180] batadv1: left promiscuous mode [ 181.377089][T10194] netlink: 'syz.0.1198': attribute type 142 has an invalid length. [ 181.377242][T10180] bridge0: port 2(batadv1) entered disabled state [ 181.387832][T10198] IPVS: length: 251 != 8 [ 181.404907][T10198] sctp: [Deprecated]: syz.4.1200 (pid 10198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.404907][T10198] Use struct sctp_sack_info instead [ 181.424936][T10180] bridge_slave_0: left allmulticast mode [ 181.430640][T10180] bridge_slave_0: left promiscuous mode [ 181.444657][T10180] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.567693][T10203] 8021q: VLANs not supported on vcan0 [ 181.849601][T10215] 8021q: adding VLAN 0 to HW filter on device bond6 [ 182.082343][T10228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1208'. [ 182.565063][T10250] tipc: Enabled bearer , priority 0 [ 182.604775][T10250] syzkaller0: entered promiscuous mode [ 182.613916][T10250] syzkaller0: entered allmulticast mode [ 182.721691][T10250] tipc: Resetting bearer [ 182.744112][T10249] tipc: Resetting bearer [ 182.771028][T10249] tipc: Disabling bearer [ 182.801415][T10265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.822584][T10273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1219'. [ 182.876644][T10261] IPVS: persistence engine module ip_vs_pe_À not found [ 183.024403][T10281] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1223'. [ 183.084999][T10284] team0: left allmulticast mode [ 183.106381][T10284] team_slave_0: left allmulticast mode [ 183.111910][T10284] team_slave_1: left allmulticast mode [ 183.144454][T10284] dummy0: left allmulticast mode [ 183.149930][T10284] team0: left promiscuous mode [ 183.169452][T10284] team_slave_0: left promiscuous mode [ 183.175841][T10284] team_slave_1: left promiscuous mode [ 183.181539][T10284] dummy0: left promiscuous mode [ 183.188853][T10284] bridge0: port 3(team0) entered disabled state [ 183.199611][T10284] bridge_slave_1: left allmulticast mode [ 183.205986][T10284] bridge_slave_1: left promiscuous mode [ 183.211727][T10284] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.221860][T10284] bridge_slave_0: left promiscuous mode [ 183.227725][T10284] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.254001][T10284] bond0: (slave bridge0): Releasing backup interface [ 183.805702][T10337] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20003 [ 183.818316][T10330] syz.3.1236: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 183.833859][T10330] CPU: 0 UID: 0 PID: 10330 Comm: syz.3.1236 Not tainted syzkaller #0 PREEMPT(full) [ 183.833889][T10330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.833903][T10330] Call Trace: [ 183.833912][T10330] [ 183.833922][T10330] dump_stack_lvl+0x189/0x250 [ 183.833963][T10330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.833988][T10330] ? __pfx__printk+0x10/0x10 [ 183.834012][T10330] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 183.834044][T10330] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 183.834078][T10330] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 183.834113][T10330] warn_alloc+0x214/0x310 [ 183.834146][T10330] ? stack_depot_save_flags+0x40/0x860 [ 183.834179][T10330] ? __pfx_warn_alloc+0x10/0x10 [ 183.834215][T10330] ? kasan_save_track+0x3e/0x80 [ 183.834245][T10330] ? __kasan_kmalloc+0x93/0xb0 [ 183.834278][T10330] ? xsk_setsockopt+0x4dc/0x8d0 [ 183.834299][T10330] ? do_sock_setsockopt+0x179/0x1b0 [ 183.834323][T10330] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 183.834346][T10330] ? do_syscall_64+0xfa/0xfa0 [ 183.834372][T10330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.834406][T10330] __vmalloc_node_range_noprof+0x125/0x12d0 [ 183.834473][T10330] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 183.834511][T10330] ? __kasan_kmalloc+0x93/0xb0 [ 183.834552][T10330] vmalloc_user_noprof+0xad/0xf0 [ 183.834584][T10330] ? xskq_create+0xbf/0x170 [ 183.834611][T10330] xskq_create+0xbf/0x170 [ 183.834640][T10330] xsk_init_queue+0xb0/0x110 [ 183.834668][T10330] xsk_setsockopt+0x4dc/0x8d0 [ 183.834695][T10330] ? __pfx_xsk_setsockopt+0x10/0x10 [ 183.834722][T10330] ? __pfx_aa_sk_perm+0x10/0x10 [ 183.834753][T10330] ? aa_sock_opt_perm+0xff/0x1b0 [ 183.834788][T10330] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 183.834813][T10330] ? __pfx_xsk_setsockopt+0x10/0x10 [ 183.834839][T10330] do_sock_setsockopt+0x179/0x1b0 [ 183.834870][T10330] __x64_sys_setsockopt+0x13f/0x1b0 [ 183.834902][T10330] do_syscall_64+0xfa/0xfa0 [ 183.834928][T10330] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.834955][T10330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.834982][T10330] ? clear_bhb_loop+0x60/0xb0 [ 183.835011][T10330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.835032][T10330] RIP: 0033:0x7f392578eec9 [ 183.835053][T10330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.835084][T10330] RSP: 002b:00007f3926638038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.835106][T10330] RAX: ffffffffffffffda RBX: 00007f39259e5fa0 RCX: 00007f392578eec9 [ 183.835122][T10330] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 183.835135][T10330] RBP: 00007f3925811f91 R08: 0000000000000004 R09: 0000000000000000 [ 183.835148][T10330] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.835162][T10330] R13: 00007f39259e6038 R14: 00007f39259e5fa0 R15: 00007ffc5fc96908 [ 183.835195][T10330] [ 183.835275][T10330] Mem-Info: [ 183.903989][T10343] openvswitch: netlink: Flow key attr not present in new flow. [ 183.913998][T10330] active_anon:5976 inactive_anon:0 isolated_anon:0 [ 183.913998][T10330] active_file:2564 inactive_file:39915 isolated_file:0 [ 183.913998][T10330] unevictable:768 dirty:32 writeback:22 [ 183.913998][T10330] slab_reclaimable:11294 slab_unreclaimable:100408 [ 183.913998][T10330] mapped:29104 shmem:1356 pagetables:1295 [ 183.913998][T10330] sec_pagetables:0 bounce:0 [ 183.913998][T10330] kernel_misc_reclaimable:0 [ 183.913998][T10330] free:1327225 free_pcp:12190 free_cma:0 [ 184.149645][T10347] netlink: 'syz.4.1240': attribute type 3 has an invalid length. [ 184.195933][T10330] Node 0 active_anon:24004kB inactive_anon:0kB active_file:10256kB inactive_file:159456kB unevictable:6436kB isolated(anon):0kB isolated(file):0kB mapped:120516kB dirty:128kB writeback:88kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13972kB pagetables:5152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 184.252658][T10330] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 184.317890][T10330] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.352397][T10330] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 184.358507][T10330] Node 0 DMA32 free:1383008kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23904kB inactive_anon:0kB active_file:10256kB inactive_file:159456kB unevictable:12436kB writepending:216kB zspages:0kB present:3129332kB managed:2561672kB mlocked:11000kB bounce:0kB free_pcp:32192kB local_pcp:12680kB free_cma:0kB [ 184.394036][T10330] lowmem_reserve[]: 0 0 1 1 1 [ 184.399127][T10330] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.430006][T10330] lowmem_reserve[]: 0 0 0 0 0 [ 184.436661][T10330] Node 1 Normal free:3902532kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14000kB local_pcp:5988kB free_cma:0kB [ 184.438696][T10354] netlink: 'syz.0.1241': attribute type 11 has an invalid length. [ 184.473364][T10330] lowmem_reserve[]: 0 0 0 0 0 [ 184.482856][T10330] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 184.497176][T10330] Node 0 DMA32: 0*4kB 790*8kB (UE) 540*16kB (UE) 610*32kB (UME) 478*64kB (UM) 412*128kB (UM) 353*256kB (UM) 260*512kB (UME) 172*1024kB (UME) 8*2048kB (UME) 207*4096kB (UM) = 1381680kB [ 184.516283][T10330] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 184.571872][T10330] Node 1 Normal: 181*4kB (UE) 42*8kB (UME) 38*16kB (UME) 90*32kB (UME) 28*64kB (UME) 5*128kB (UME) 3*256kB (ME) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 949*4096kB (M) = 3902532kB [ 184.612410][T10330] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.685290][T10330] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.697403][T10330] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.707924][T10330] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.717609][T10330] 43851 total pagecache pages [ 184.723369][T10330] 0 pages in swap cache [ 184.727685][T10330] Free swap = 124996kB [ 184.732317][T10330] Total swap = 124996kB [ 184.740403][T10330] 2097051 pages RAM [ 184.744742][T10330] 0 pages HighMem/MovableOnly [ 184.749575][T10330] 424543 pages reserved [ 184.754573][T10330] 0 pages cma reserved [ 184.774907][T10335] bond3 (unregistering): Released all slaves [ 184.961389][T10377] __nla_validate_parse: 9 callbacks suppressed [ 184.961409][T10377] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1246'. [ 185.057146][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1248'. [ 185.121033][T10385] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 185.152305][T10383] team0: Port device team_slave_1 removed [ 185.303415][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 185.485440][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'. [ 185.551749][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'. [ 185.588653][T10408] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1252'. [ 185.695918][T10411] syzkaller1: entered promiscuous mode [ 185.701535][T10411] syzkaller1: entered allmulticast mode [ 185.806432][T10419] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1256'. [ 186.104009][T10432] lo: entered allmulticast mode [ 186.111423][T10434] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1259'. [ 186.145861][T10432] lo: left allmulticast mode [ 186.152270][T10433] nbd2: detected capacity change from 0 to 127 [ 186.410783][ T5837] block nbd2: Receive control failed (result -104) [ 186.580637][T10462] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1267'. [ 186.794293][T10474] macvlan0: entered promiscuous mode [ 194.147151][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.265984][T10501] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 209.279265][T10504] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1280'. [ 209.279583][T10499] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 209.296892][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 209.312995][T10503] netlink: 'syz.1.1277': attribute type 8 has an invalid length. [ 209.341303][T10501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1277'. [ 209.361170][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1279'. [ 209.481913][T10501] bond7 (unregistering): Released all slaves [ 209.763373][T10522] netlink: 'syz.0.1284': attribute type 1 has an invalid length. [ 209.830520][T10528] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1285'. [ 209.857875][T10522] bond7: (slave bridge4): making interface the new active one [ 209.866408][T10522] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 209.875250][T10529] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1285'. [ 210.627822][T10560] syzkaller0: entered promiscuous mode [ 210.633769][T10560] syzkaller0: entered allmulticast mode [ 210.998771][T10582] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 211.202731][T10594] netlink: 'syz.0.1306': attribute type 4 has an invalid length. [ 211.234534][T10594] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1306'. [ 211.345464][ T5837] Bluetooth: hci0: command tx timeout [ 211.544798][T10614] netlink: 'syz.3.1314': attribute type 1 has an invalid length. [ 211.588751][T10614] bond3: entered promiscuous mode [ 211.595220][T10614] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.618451][T10615] bond3: (slave bridge0): making interface the new active one [ 211.626511][T10615] bridge0: entered promiscuous mode [ 211.633789][T10615] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 211.684880][T10621] veth0: entered promiscuous mode [ 211.685271][T10615] netlink: 'syz.3.1314': attribute type 5 has an invalid length. [ 211.732190][T10614] netlink: 'syz.3.1314': attribute type 5 has an invalid length. [ 211.773078][T10620] veth0: left promiscuous mode [ 211.864073][T10630] bond7 (unregistering): Released all slaves [ 211.954328][T10636] netlink: 'syz.2.1319': attribute type 1 has an invalid length. [ 212.006249][T10643] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1319'. [ 212.017375][T10642] tipc: Enabled bearer , priority 0 [ 212.249034][T10649] tipc: Resetting bearer [ 212.272165][T10642] syzkaller0: entered promiscuous mode [ 212.277928][T10642] syzkaller0: entered allmulticast mode [ 212.280890][T10650] IPVS: set_ctl: invalid protocol: 108 172.20.20.51:20002 [ 212.371530][T10637] tipc: Resetting bearer [ 212.444429][T10660] xt_socket: unknown flags 0xe4 [ 212.478498][T10637] tipc: Disabling bearer [ 212.875213][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 213.043673][T10687] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1331'. [ 213.258293][T10699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.074129][T10752] unsupported nlmsg_type 40 [ 214.104785][T10750] netlink: 'syz.4.1351': attribute type 1 has an invalid length. [ 214.116460][T10750] netlink: 'syz.4.1351': attribute type 1 has an invalid length. [ 214.304325][T10771] __nla_validate_parse: 5 callbacks suppressed [ 214.304345][T10771] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1357'. [ 214.345333][T10771] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1357'. [ 214.368382][T10771] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1357'. [ 214.471415][T10781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1359'. [ 214.616977][T10784] netlink: 'syz.3.1358': attribute type 11 has an invalid length. [ 214.716170][T10789] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20001 [ 214.734954][T10792] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20001 [ 214.744786][T10789] xt_hashlimit: overflow, try lower: 3/0 [ 214.749633][T10792] xt_hashlimit: overflow, try lower: 3/0 [ 214.820344][T10794] netlink: 'syz.0.1363': attribute type 1 has an invalid length. [ 214.926046][T10798] 8021q: adding VLAN 0 to HW filter on device bond9 [ 214.935018][T10798] bond8: (slave bond9): making interface the new active one [ 214.943119][T10798] bond8: (slave bond9): Enslaving as an active interface with an up link [ 214.963652][T10794] bond8: (slave gretap2): Enslaving as a backup interface with an up link [ 214.973323][T10794] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1363'. [ 214.985994][T10794] 8021q: adding VLAN 0 to HW filter on device bond8 [ 215.062074][T10797] netlink: 'syz.4.1364': attribute type 1 has an invalid length. [ 215.127183][T10814] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 215.284863][T10816] syzkaller1: entered promiscuous mode [ 215.290400][T10816] syzkaller1: entered allmulticast mode [ 215.318031][T10820] netlink: 'syz.4.1371': attribute type 4 has an invalid length. [ 215.400481][T10822] xt_ecn: cannot match TCP bits for non-tcp packets [ 215.460815][T10828] bridge4: entered promiscuous mode [ 215.479969][T10828] bridge4: entered allmulticast mode [ 215.689586][T10843] netem: incorrect gi model size [ 215.732432][T10843] netem: change failed [ 215.831634][T10854] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1379'. [ 215.858737][T10855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1380'. [ 215.868079][T10855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1380'. [ 216.019229][T10862] xt_NFQUEUE: number of total queues is 0 [ 216.279689][T10873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1386'. [ 216.350079][T10873] vxcan6: entered allmulticast mode [ 216.380030][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'. [ 216.413116][T10875] vlan2: entered promiscuous mode [ 216.418418][T10875] vlan2: entered allmulticast mode [ 216.462370][T10875] hsr_slave_1: entered allmulticast mode [ 216.551209][ T56] block nbd2: Possible stuck request ffff8880253b5080: control (read@0,1024B). Runtime 30 seconds [ 216.563332][ T56] block nbd2: Possible stuck request ffff8880253b5240: control (read@1024,1024B). Runtime 30 seconds [ 216.574584][ T56] block nbd2: Possible stuck request ffff8880253b5400: control (read@2048,1024B). Runtime 30 seconds [ 216.585907][ T56] block nbd2: Possible stuck request ffff8880253b55c0: control (read@3072,1024B). Runtime 30 seconds [ 216.745461][T10889] xt_SECMARK: invalid mode: 9 [ 217.870765][T10957] sctp: [Deprecated]: syz.0.1410 (pid 10957) Use of int in max_burst socket option. [ 217.870765][T10957] Use struct sctp_assoc_value instead [ 218.465855][T10983] geneve2: entered promiscuous mode [ 218.492836][T10983] geneve2: entered allmulticast mode [ 218.517476][ T9398] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 218.527200][ T9398] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 218.682850][T10983] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.694194][T10983] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.719468][ T9398] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 218.869933][ T7140] IPVS: starting estimator thread 0... [ 218.962075][T11006] IPVS: using max 25 ests per chain, 60000 per kthread [ 219.040787][T11017] only policy match revision 0 supported [ 219.042577][T11017] unable to load match [ 219.481153][T11051] __nla_validate_parse: 7 callbacks suppressed [ 219.481175][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1439'. [ 219.605242][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 219.644860][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 219.823038][T11066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1442'. [ 219.855041][T11070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1444'. [ 219.875562][T11069] geneve3: entered promiscuous mode [ 219.882328][T11069] geneve3: entered allmulticast mode [ 219.894816][ T9397] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 219.907759][ T9397] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 219.926276][T11069] IPVS: Unknown mcast interface: vcan0 [ 219.942304][ T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 219.960883][ T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 220.001719][T11069] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.021229][T11069] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.038483][T11069] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 220.060851][T11081] ip6erspan0: left promiscuous mode [ 220.067322][T11081] bond3: left promiscuous mode [ 220.082457][T11081] bridge0: left promiscuous mode [ 220.088921][T11081] vlan2: left promiscuous mode [ 220.108745][T11069] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.132494][T11069] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.152843][T11069] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 220.176755][T11089] netlink: 'syz.4.1449': attribute type 29 has an invalid length. [ 220.235690][T11069] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.262658][T11069] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.284117][T11069] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 220.348100][T11069] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.371708][T11069] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.391888][T11069] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 220.592753][T10983] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.611368][T10983] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.642501][T10983] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 220.714760][ T9398] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.723159][ T9398] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 220.723428][T11108] nbd3: detected capacity change from 0 to 63 [ 220.731441][ T9398] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 220.748853][ T9398] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.760190][ T9398] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 220.768890][ T9398] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 220.779190][T11114] block nbd3: NBD_DISCONNECT [ 220.787336][T11114] block nbd3: Disconnected due to user request. [ 220.796903][T11114] block nbd3: shutting down sockets [ 220.830077][T10983] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.843247][ C0] blk_print_req_error: 138 callbacks suppressed [ 220.843269][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.858713][ C0] buffer_io_error: 138 callbacks suppressed [ 220.858733][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 220.865113][T10983] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.883459][T10983] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 220.885408][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.903034][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 220.910883][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.919985][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 220.927876][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.937007][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 220.950570][ T5976] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.987627][ T9402] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.996262][ T9402] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 220.999397][ T5976] Buffer I/O error on dev nbd3, logical block 0, async page read [ 221.007727][ T9402] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 221.031604][ T5976] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.052899][ T5976] Buffer I/O error on dev nbd3, logical block 1, async page read [ 221.060989][ T5976] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.071151][ T5976] Buffer I/O error on dev nbd3, logical block 2, async page read [ 221.080038][ T5976] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.109089][ T5976] Buffer I/O error on dev nbd3, logical block 3, async page read [ 221.138437][T10983] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.159606][ T5976] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.172221][T10983] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.192825][ T5976] Buffer I/O error on dev nbd3, logical block 0, async page read [ 221.211113][ T5976] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.212505][T10983] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 221.221396][ T5976] Buffer I/O error on dev nbd3, logical block 1, async page read [ 221.250062][ T5976] ldm_validate_partition_table(): Disk read failed. [ 221.258098][ T9397] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.260390][ T5976] Dev nbd3: unable to read RDB block 0 [ 221.274926][ T5976] nbd3: unable to read partition table [ 221.282457][ T9397] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 221.298110][ T5976] ldm_validate_partition_table(): Disk read failed. [ 221.311489][ T9397] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 221.324416][ T5976] Dev nbd3: unable to read RDB block 0 [ 221.357962][ T5976] nbd3: unable to read partition table [ 221.498203][T11136] bond4: ARP target 1.0.0.0 is already present [ 221.504996][T11136] bond4: option arp_ip_target: invalid value (1) [ 221.517661][T11136] bond4 (unregistering): Released all slaves [ 221.554791][ T9402] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.582967][ T9402] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 221.594378][ T9402] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 221.670223][ T9402] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.716740][ T9402] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 221.737109][ T9402] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 221.772099][ T9402] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.803477][T11156] netlink: 'syz.2.1466': attribute type 1 has an invalid length. [ 221.803783][ T9402] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 221.831578][ T9402] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 221.936719][T11164] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1464'. [ 221.983022][ T9400] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.022019][ T9400] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 222.056486][ T9400] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 222.240735][T11177] wg1 speed is unknown, defaulting to 1000 [ 222.334321][T11184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1474'. [ 222.397674][T11186] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1475'. [ 222.426561][T11186] SET target dimension over the limit! [ 222.436366][T11188] xt_socket: unknown flags 0xe4 [ 222.767749][T11194] bond2: option mode: invalid value (133) [ 222.784643][T11194] bond2 (unregistering): Released all slaves [ 222.863768][T11214] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1484'. [ 222.996197][T11221] x_tables: unsorted entry at hook 2 [ 223.312903][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1492'. [ 223.851315][T11274] gretap0: entered promiscuous mode [ 223.872342][T11274] vlan3: entered promiscuous mode [ 224.140423][T11294] Cannot find add_set index 1 as target [ 224.192393][T11299] Cannot find add_set index 1 as target [ 224.537989][T11321] __nla_validate_parse: 2 callbacks suppressed [ 224.538008][T11321] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.1517'. [ 225.859210][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1523'. [ 225.876217][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1523'. [ 225.879947][T11352] xt_hashlimit: invalid rate [ 226.045658][T11359] xt_ecn: cannot match TCP bits for non-tcp packets [ 226.050501][T11356] macvlan0: left promiscuous mode [ 226.062346][T11356] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 226.073843][T11356] bond3: left promiscuous mode [ 226.078673][T11356] bridge5: left promiscuous mode [ 226.085673][T11356] gretap1: left promiscuous mode [ 226.094703][ T5886] wg1 speed is unknown, defaulting to 1000 [ 226.116690][T11360] netlink: 'syz.3.1527': attribute type 16 has an invalid length. [ 226.124816][T11360] netlink: 'syz.3.1527': attribute type 17 has an invalid length. [ 226.144563][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1526'. [ 226.771891][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 226.790329][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 226.813437][T11384] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1534'. [ 226.967996][T11392] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1536'. [ 227.028425][T11398] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1538'. [ 227.268931][T11410] netlink: 'syz.1.1540': attribute type 2 has an invalid length. [ 227.556670][T11422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1543'. [ 227.987991][T11451] netlink: 'syz.2.1552': attribute type 1 has an invalid length. [ 228.014344][T11451] netlink: 'syz.2.1552': attribute type 1 has an invalid length. [ 228.022765][T11451] netlink: 'syz.2.1552': attribute type 2 has an invalid length. [ 228.244416][T11461] xt_ct_set_helper: 6 callbacks suppressed [ 228.244438][T11461] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.074791][T11542] sctp: [Deprecated]: syz.4.1575 (pid 11542) Use of int in maxseg socket option. [ 230.074791][T11542] Use struct sctp_assoc_value instead [ 230.645508][T11578] __nla_validate_parse: 10 callbacks suppressed [ 230.645532][T11578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1585'. [ 230.685764][T11578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1585'. [ 230.800370][T11583] syzkaller0: entered promiscuous mode [ 230.806846][T11583] syzkaller0: entered allmulticast mode [ 230.814607][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1588'. [ 230.906992][T11592] Cannot find set identified by id 0 to match [ 231.195004][T11608] bond7: entered promiscuous mode [ 231.420093][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1597'. [ 231.467766][ T9397] netdevsim netdevsim3 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.487238][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1597'. [ 231.490269][ T9397] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.569210][ T9397] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.609659][ T9397] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.739727][T11651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1605'. [ 231.791131][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1607'. [ 231.815371][T11658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1603'. [ 231.827884][T11645] bond7 (unregistering): Released all slaves [ 231.900255][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1605'. [ 232.145249][T11675] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.172206][T11675] tipc: Enabled bearer , priority 10 [ 232.199020][T11675] tipc: Enabling of bearer rejected, failed to enable media [ 232.226307][T11681] xt_cgroup: xt_cgroup: no path or classid specified [ 232.235658][T11679] netlink: 'syz.2.1612': attribute type 1 has an invalid length. [ 232.252422][T11679] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1612'. [ 232.282790][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.313208][T11675] wg1 speed is unknown, defaulting to 1000 [ 232.327485][T11685] netlink: 'syz.4.1613': attribute type 1 has an invalid length. [ 232.411543][T11683] bond8 (unregistering): Released all slaves [ 232.422125][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.562123][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.702497][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.842121][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.982134][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.122704][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.191669][T11730] batadv_slave_1: entered promiscuous mode [ 233.202823][T11730] batadv_slave_1: left promiscuous mode [ 233.264864][ T5901] tipc: Node number set to 2540529268 [ 233.402322][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.461503][T11748] gretap0: entered promiscuous mode [ 233.505214][T11748] 0ªî{X¹¦: renamed from gretap0 [ 233.537193][T11748] 0ªî{X¹¦: left promiscuous mode [ 233.552531][T11748] 0ªî{X¹¦: entered allmulticast mode [ 233.573227][T11748] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 234.051288][ T60] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 234.082942][ T60] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.111801][ T60] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 234.126832][T11787] netlink: 'syz.3.1644': attribute type 1 has an invalid length. [ 234.229276][T11790] netlink: 'syz.4.1645': attribute type 23 has an invalid length. [ 234.848736][T11827] netlink: 'syz.0.1655': attribute type 1 has an invalid length. [ 234.849940][T11821] 8021q: adding VLAN 0 to HW filter on device bond7 [ 234.898168][T11827] 8021q: adding VLAN 0 to HW filter on device bond10 [ 234.931151][T11827] 8021q: adding VLAN 0 to HW filter on device bond10 [ 234.955077][T11827] bond10: (slave geneve3): making interface the new active one [ 234.977092][T11827] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 234.998022][ T60] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 235.017207][ T60] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 235.039345][ T60] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 235.048226][ T60] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 235.383411][T11855] netlink: 'syz.4.1666': attribute type 1 has an invalid length. [ 235.400758][T11847] hsr_slave_0 (unregistering): left promiscuous mode [ 235.463436][T11858] pimreg: entered allmulticast mode [ 235.483816][T11860] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 235.496813][T11860] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 235.535292][T11857] macvtap1: entered promiscuous mode [ 235.540664][T11857] vlan0: entered promiscuous mode [ 235.547844][T11857] macvtap1: entered allmulticast mode [ 235.553503][T11857] vlan0: entered allmulticast mode [ 235.558771][T11857] veth0_vlan: entered allmulticast mode [ 235.572780][T11855] gretap2: entered promiscuous mode [ 235.581242][T11855] bond8: (slave gretap2): making interface the new active one [ 235.588739][T11857] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 235.605348][T11855] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 235.626439][T11863] macvtap2: entered promiscuous mode [ 235.631856][T11863] macvtap2: entered allmulticast mode [ 235.659544][T11860] macvlan2: entered promiscuous mode [ 235.665123][T11860] macvlan2: entered allmulticast mode [ 235.671060][T11860] bond8: (slave macvlan2): Error -98 calling set_mac_address [ 235.833639][T11873] ipt_ECN: cannot use operation on non-tcp rule [ 235.840594][T11876] raw_sendmsg: syz.1.1668 forgot to set AF_INET. Fix it! [ 235.860981][T11878] netlink: 'syz.4.1670': attribute type 15 has an invalid length. [ 236.027453][T11891] __nla_validate_parse: 21 callbacks suppressed [ 236.027475][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1673'. [ 236.100866][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1673'. [ 236.410667][T11918] 8021q: VLANs not supported on lo [ 236.556389][T11930] netlink: 'syz.4.1686': attribute type 21 has an invalid length. [ 236.564515][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1686'. [ 236.587967][T11930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1686'. [ 236.602087][T11930] netlink: 'syz.4.1686': attribute type 7 has an invalid length. [ 236.607896][T11926] netlink: 'syz.2.1683': attribute type 4 has an invalid length. [ 236.627723][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1686'. [ 236.644508][T11935] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 236.778911][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1689'. [ 236.799744][T11941] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 236.821876][T11941] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1688'. [ 236.833200][T11946] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1689'. [ 236.931468][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1690'. [ 237.142170][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1696'. [ 237.283810][T11974] validate_nla: 2 callbacks suppressed [ 237.283830][T11974] netlink: 'syz.2.1698': attribute type 1 has an invalid length. [ 237.342299][ C0] net_ratelimit: 5 callbacks suppressed [ 237.342321][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 237.576835][T11990] netlink: 'syz.1.1706': attribute type 33 has an invalid length. [ 237.586477][T11999] netlink: 'syz.2.1707': attribute type 1 has an invalid length. [ 237.962455][T12020] nbd: couldn't find a device at index 0 [ 238.074548][T12029] can: request_module (can-proto-0) failed. [ 238.382198][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 238.723698][T12069] netlink: 'syz.0.1728': attribute type 10 has an invalid length. [ 239.079720][T12081] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 239.358757][T12092] netdevsim netdevsim2: Direct firmware load for . [ 239.358757][T12092] failed with error -2 [ 239.381031][T12092] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 239.381031][T12092] [ 239.422141][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.460258][T12095] bond9: option resend_igmp: invalid value (32767) [ 239.467982][T12095] bond9: option resend_igmp: allowed values 0 - 255 [ 239.479607][T12095] bond9 (unregistering): Released all slaves [ 239.540539][T12100] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 239.842699][T12124] netlink: 'syz.1.1746': attribute type 11 has an invalid length. [ 239.879592][T12124] netlink: 'syz.1.1746': attribute type 11 has an invalid length. [ 239.956237][T12123] pim6reg1: entered promiscuous mode [ 239.965729][T12123] pim6reg1: entered allmulticast mode [ 240.235822][T12142] tipc: Enabled bearer , priority 0 [ 240.267403][T12142] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 240.323737][T12140] tipc: Disabling bearer [ 240.462202][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 241.055115][T12199] 8ÿ: entered promiscuous mode [ 241.409897][T12219] __nla_validate_parse: 16 callbacks suppressed [ 241.409920][T12219] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1774'. [ 241.497386][T12224] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1776'. [ 241.503134][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 241.535630][ T30] audit: type=1800 audit(1760445998.606:3): pid=12212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1771" name="memory.events" dev="tmpfs" ino=1800 res=0 errno=0 [ 241.765828][T12233] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1777'. [ 241.802497][T12233] tunl0: entered promiscuous mode [ 241.835714][T12233] netlink: 'syz.1.1777': attribute type 3 has an invalid length. [ 241.858280][T12233] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1777'. [ 242.542205][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 242.565191][T12290] netlink: 'syz.4.1791': attribute type 1 has an invalid length. [ 242.565956][T12292] netlink: 'syz.4.1791': attribute type 1 has an invalid length. [ 242.589038][T12291] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 242.881394][T12311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1799'. [ 243.086813][T12324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1803'. [ 243.114934][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1803'. [ 243.224971][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1807'. [ 243.480198][T12340] syzkaller0: entered promiscuous mode [ 243.486399][T12340] syzkaller0: entered allmulticast mode [ 243.582229][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 243.826213][T12354] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 243.834002][T12354] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 244.622900][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 244.820553][T12366] C: entered promiscuous mode [ 244.826009][T12366] netlink: 'syz.4.1814': attribute type 2 has an invalid length. [ 244.834323][T12366] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 245.092738][T12389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1819'. [ 245.393440][T12415] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1828'. [ 245.560548][T12421] netlink: 'syz.1.1831': attribute type 29 has an invalid length. [ 245.662231][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.755462][T12407] infiniband syz0: set down [ 245.760290][T12407] infiniband syz0: added ipvlan1 [ 245.895516][T12407] RDS/IB: syz0: added [ 245.917034][T12407] smc: adding ib device syz0 with port count 1 [ 245.924762][T12437] xt_hashlimit: overflow, try lower: 3/0 [ 245.941478][T12407] smc: ib device syz0 port 1 has no pnetid [ 246.040146][T12441] sctp: [Deprecated]: syz.3.1836 (pid 12441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.040146][T12441] Use struct sctp_sack_info instead [ 246.178533][T12450] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 246.389054][T12459] openvswitch: netlink: EtherType 306 is less than min 600 [ 246.629972][ T56] block nbd2: Possible stuck request ffff8880253b5080: control (read@0,1024B). Runtime 60 seconds [ 246.641622][ T56] block nbd2: Possible stuck request ffff8880253b5240: control (read@1024,1024B). Runtime 60 seconds [ 246.653057][ T56] block nbd2: Possible stuck request ffff8880253b5400: control (read@2048,1024B). Runtime 60 seconds [ 246.670780][ T56] block nbd2: Possible stuck request ffff8880253b55c0: control (read@3072,1024B). Runtime 60 seconds [ 246.702304][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.912991][T12468] erspan0: entered promiscuous mode [ 246.930261][T12468] erspan0: entered allmulticast mode [ 246.947548][T12468] netlink: 'syz.1.1845': attribute type 12 has an invalid length. [ 247.159069][T12496] __nla_validate_parse: 3 callbacks suppressed [ 247.159091][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1851'. [ 247.286681][T12505] tipc: Enabled bearer , priority 0 [ 247.306390][T12505] syzkaller0: entered promiscuous mode [ 247.325999][T12505] syzkaller0: entered allmulticast mode [ 247.371573][T12508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1855'. [ 247.397554][T12511] netlink: 'syz.0.1856': attribute type 1 has an invalid length. [ 247.452435][T12511] bond11 (unregistering): Released all slaves [ 247.512289][T12505] tipc: Resetting bearer [ 247.527088][T12521] netlink: 'syz.4.1858': attribute type 1 has an invalid length. [ 247.546371][T12518] ip6erspan1: entered promiscuous mode [ 247.561692][T12518] ip6erspan1: entered allmulticast mode [ 247.604193][T12504] tipc: Resetting bearer [ 247.710748][T12504] tipc: Disabling bearer [ 247.742389][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.832798][T12531] xt_bpf: check failed: parse error [ 247.936997][T12535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1864'. [ 248.020866][T12541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1865'. [ 248.036084][T12541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1865'. [ 248.221611][T12550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1867'. [ 248.244099][T12552] sctp: [Deprecated]: syz.1.1866 (pid 12552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.244099][T12552] Use struct sctp_sack_info instead [ 248.285911][T12556] xt_l2tp: v2 doesn't support IP mode [ 248.782212][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 249.060625][T12582] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1879'. [ 249.107251][T12585] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 249.129536][T12585] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.140081][T12585] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 249.173162][T12591] tipc: Enabled bearer , priority 0 [ 249.183311][T12591] syzkaller0: entered promiscuous mode [ 249.189164][T12591] syzkaller0: entered allmulticast mode [ 249.268269][T12585] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 249.282673][T12585] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.300120][T12597] netlink: 'syz.0.1883': attribute type 13 has an invalid length. [ 249.309513][T12585] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 249.328567][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1882'. [ 249.339951][T12596] tipc: Resetting bearer [ 249.490035][T12597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.500198][T12597] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.524308][T12597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.584151][T12585] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 249.621291][T12585] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.652305][T12585] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 249.671145][T12610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1888'. [ 249.686207][T12590] tipc: Resetting bearer [ 249.686614][T12610] netlink: 'syz.2.1888': attribute type 4 has an invalid length. [ 249.700481][T12610] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1888'. [ 249.718252][T12590] tipc: Disabling bearer [ 249.731494][T12602] netlink: 'syz.3.1885': attribute type 18 has an invalid length. [ 249.796846][T12602] netlink: 'syz.3.1885': attribute type 18 has an invalid length. [ 249.822728][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 250.009406][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 250.031566][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 250.042924][ T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.119895][ T9398] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 250.128205][ T9398] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 250.152361][ T9398] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.186455][ T9398] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 250.196635][ T9398] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 250.206469][ T9398] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.215309][ T9398] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 250.224700][ T9398] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 250.233682][ T9398] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.309770][T12636] dvmrp0: entered allmulticast mode [ 250.323577][T12637] bridge: RTM_NEWNEIGH with invalid ether address [ 250.862549][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 250.993466][T12651] team0: Device vti0 is up. Set it down before adding it as a team port [ 251.032637][T12647] syzkaller0: entered promiscuous mode [ 251.052188][T12647] syzkaller0: entered allmulticast mode [ 251.062671][T12647] sch_tbf: burst 125 is lower than device syzkaller0 mtu (1514) ! [ 251.465266][T12676] delete_channel: no stack [ 251.564140][T12682] netlink: 'syz.0.1909': attribute type 1 has an invalid length. [ 251.637067][T12689] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 251.644957][T12686] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 251.675555][ T30] audit: type=1107 audit(1760446008.746:4): pid=12684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 251.678208][T12688] bond11: (slave gretap3): making interface the new active one [ 251.777716][ T30] audit: type=1107 audit(1760446008.746:5): pid=12684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 251.788652][T12688] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 251.902099][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.101128][T12707] netlink: 'syz.1.1916': attribute type 1 has an invalid length. [ 252.242711][T12707] bond8: entered promiscuous mode [ 252.259618][T12707] 8021q: adding VLAN 0 to HW filter on device bond8 [ 252.284705][T12721] __nla_validate_parse: 6 callbacks suppressed [ 252.284736][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1919'. [ 252.392197][T12721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1919'. [ 252.419055][T12712] 8021q: adding VLAN 0 to HW filter on device bond8 [ 252.427543][T12712] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 252.444261][T12712] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 252.463761][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1922'. [ 252.477213][T12712] bond8: (slave wireguard0): making interface the new active one [ 252.485640][T12712] wireguard0: entered promiscuous mode [ 252.493139][T12712] bond8: (slave wireguard0): Enslaving as an active interface with an up link [ 252.845219][T12740] bond10 (unregistering): Released all slaves [ 252.942210][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.960475][T12749] netlink: 'syz.4.1927': attribute type 3 has an invalid length. [ 252.970939][T12749] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1927'. [ 253.177608][T12767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1936'. [ 253.218517][T12774] netlink: 'syz.4.1934': attribute type 21 has an invalid length. [ 253.245549][T12771] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.274305][T12771] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 253.310253][T12771] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 253.369204][T12771] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 253.396822][T12774] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1934'. [ 253.445093][T12790] netlink: 'syz.3.1941': attribute type 1 has an invalid length. [ 253.511751][T12771] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.532435][T12771] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 253.554648][T12799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1943'. [ 253.571359][T12771] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 253.581604][T12771] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 253.615729][T12790] bridge0: Device is already in use. [ 253.669802][T12802] netlink: 'syz.4.1946': attribute type 11 has an invalid length. [ 253.685717][T12771] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.699467][T12771] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 253.718305][T12771] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 253.728857][T12771] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 253.799319][T12771] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.809787][T12771] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 253.820367][T12771] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 253.831330][T12771] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 253.872417][T12816] tipc: Enabled bearer , priority 10 [ 253.982487][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 254.913869][T12836] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 255.022371][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 255.189684][ T9397] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.213913][ T9397] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 255.243540][ T9397] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 255.251870][ T9397] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 255.297455][ T9400] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.336995][ T9400] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 255.352948][T12843] xt_bpf: check failed: parse error [ 255.358840][T12843] xt_l2tp: v2 doesn't support IP mode [ 255.372267][ T9400] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 255.380723][ T9400] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 255.443781][ T9400] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.461333][ T9400] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 255.486065][ T9400] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 255.513615][ T9400] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 255.560081][ T9400] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.570439][ T9400] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 255.579830][ T9400] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 255.592816][ T9400] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 255.599196][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.611796][T12777] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.637873][T12777] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 255.666038][T12777] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 255.686362][T12777] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 255.728759][ T9400] ================================================================== [ 255.736968][ T9400] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 255.744533][ T9400] Read of size 8 at addr ffff88807c328eb0 by task kworker/u8:20/9400 [ 255.752600][ T9400] [ 255.754937][ T9400] CPU: 0 UID: 0 PID: 9400 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 255.754959][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.754972][ T9400] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 255.754998][ T9400] Call Trace: [ 255.755006][ T9400] [ 255.755013][ T9400] dump_stack_lvl+0x189/0x250 [ 255.755033][ T9400] ? __kasan_check_byte+0x12/0x40 [ 255.755062][ T9400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.755079][ T9400] ? lock_release+0x4b/0x3e0 [ 255.755099][ T9400] ? __virt_addr_valid+0x4a5/0x5c0 [ 255.755124][ T9400] print_report+0xca/0x240 [ 255.755145][ T9400] ? __mutex_lock+0x147/0x1350 [ 255.755165][ T9400] kasan_report+0x118/0x150 [ 255.755179][ T9400] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 255.755200][ T9400] ? __mutex_lock+0x147/0x1350 [ 255.755225][ T9400] __mutex_lock+0x147/0x1350 [ 255.755248][ T9400] ? __mutex_lock+0x5bb/0x1350 [ 255.755272][ T9400] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 255.755293][ T9400] ? __pfx___mutex_lock+0x10/0x10 [ 255.755317][ T9400] ? __lock_acquire+0xab9/0xd20 [ 255.755338][ T9400] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 255.755383][ T9400] ? process_scheduled_works+0x9ef/0x17b0 [ 255.755402][ T9400] ? process_scheduled_works+0x9ef/0x17b0 [ 255.755420][ T9400] process_scheduled_works+0xae1/0x17b0 [ 255.755451][ T9400] ? __pfx_process_scheduled_works+0x10/0x10 [ 255.755476][ T9400] worker_thread+0x8a0/0xda0 [ 255.755506][ T9400] kthread+0x711/0x8a0 [ 255.755531][ T9400] ? __pfx_worker_thread+0x10/0x10 [ 255.755549][ T9400] ? __pfx_kthread+0x10/0x10 [ 255.755572][ T9400] ? _raw_spin_unlock_irq+0x23/0x50 [ 255.755590][ T9400] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.755610][ T9400] ? __pfx_kthread+0x10/0x10 [ 255.755633][ T9400] ret_from_fork+0x4bc/0x870 [ 255.755652][ T9400] ? __pfx_ret_from_fork+0x10/0x10 [ 255.755672][ T9400] ? __switch_to_asm+0x39/0x70 [ 255.755691][ T9400] ? __switch_to_asm+0x33/0x70 [ 255.755710][ T9400] ? __pfx_kthread+0x10/0x10 [ 255.755733][ T9400] ret_from_fork_asm+0x1a/0x30 [ 255.755761][ T9400] [ 255.755767][ T9400] [ 255.959112][ T9400] Allocated by task 12771: [ 255.963571][ T9400] kasan_save_track+0x3e/0x80 [ 255.968268][ T9400] __kasan_kmalloc+0x93/0xb0 [ 255.972870][ T9400] __kmalloc_noprof+0x411/0x7f0 [ 255.977733][ T9400] udp_tunnel_nic_netdevice_event+0x4c3/0x1810 [ 255.983894][ T9400] notifier_call_chain+0x1b6/0x3e0 [ 255.989035][ T9400] register_netdevice+0x1608/0x1ae0 [ 255.994251][ T9400] nsim_create+0xae8/0xf10 [ 255.998671][ T9400] __nsim_dev_port_add+0x6b6/0xb10 [ 256.003790][ T9400] nsim_dev_port_add_all+0x37/0xf0 [ 256.008909][ T9400] nsim_dev_reload_up+0x451/0x780 [ 256.013956][ T9400] devlink_reload+0x4ec/0x8d0 [ 256.018742][ T9400] devlink_nl_reload_doit+0xb35/0xd50 [ 256.024116][ T9400] genl_family_rcv_msg_doit+0x215/0x300 [ 256.029670][ T9400] genl_rcv_msg+0x60e/0x790 [ 256.034203][ T9400] netlink_rcv_skb+0x208/0x470 [ 256.038971][ T9400] genl_rcv+0x28/0x40 [ 256.042958][ T9400] netlink_unicast+0x82c/0x9e0 [ 256.047743][ T9400] netlink_sendmsg+0x805/0xb30 [ 256.052526][ T9400] __sock_sendmsg+0x21c/0x270 [ 256.057211][ T9400] ____sys_sendmsg+0x505/0x830 [ 256.061978][ T9400] ___sys_sendmsg+0x21f/0x2a0 [ 256.066662][ T9400] __x64_sys_sendmsg+0x19b/0x260 [ 256.071606][ T9400] do_syscall_64+0xfa/0xfa0 [ 256.076112][ T9400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.082020][ T9400] [ 256.084361][ T9400] Freed by task 12777: [ 256.088450][ T9400] kasan_save_track+0x3e/0x80 [ 256.093152][ T9400] __kasan_save_free_info+0x46/0x50 [ 256.098369][ T9400] __kasan_slab_free+0x5c/0x80 [ 256.103148][ T9400] kfree+0x19a/0x6d0 [ 256.107050][ T9400] udp_tunnel_nic_netdevice_event+0x11ab/0x1810 [ 256.113301][ T9400] notifier_call_chain+0x1b6/0x3e0 [ 256.118420][ T9400] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 256.124846][ T9400] unregister_netdevice_queue+0x33c/0x380 [ 256.130574][ T9400] nsim_destroy+0x1dd/0x670 [ 256.135085][ T9400] __nsim_dev_port_del+0x14d/0x1b0 [ 256.140209][ T9400] nsim_dev_reload_destroy+0x288/0x490 [ 256.145678][ T9400] nsim_dev_reload_down+0x8a/0xc0 [ 256.150710][ T9400] devlink_reload+0x1b6/0x8d0 [ 256.155391][ T9400] devlink_nl_reload_doit+0xb35/0xd50 [ 256.160768][ T9400] genl_family_rcv_msg_doit+0x215/0x300 [ 256.166330][ T9400] genl_rcv_msg+0x60e/0x790 [ 256.170839][ T9400] netlink_rcv_skb+0x208/0x470 [ 256.175616][ T9400] genl_rcv+0x28/0x40 [ 256.179604][ T9400] netlink_unicast+0x82c/0x9e0 [ 256.184383][ T9400] netlink_sendmsg+0x805/0xb30 [ 256.189152][ T9400] __sock_sendmsg+0x21c/0x270 [ 256.193861][ T9400] ____sys_sendmsg+0x505/0x830 [ 256.198723][ T9400] ___sys_sendmsg+0x21f/0x2a0 [ 256.203406][ T9400] __x64_sys_sendmsg+0x19b/0x260 [ 256.208358][ T9400] do_syscall_64+0xfa/0xfa0 [ 256.212869][ T9400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.218763][ T9400] [ 256.221086][ T9400] Last potentially related work creation: [ 256.226797][ T9400] kasan_save_stack+0x3e/0x60 [ 256.231487][ T9400] kasan_record_aux_stack+0xbd/0xd0 [ 256.236701][ T9400] insert_work+0x3d/0x330 [ 256.241043][ T9400] __queue_work+0xbaf/0xfb0 [ 256.245576][ T9400] queue_work_on+0x181/0x270 [ 256.250174][ T9400] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 256.255814][ T9400] udp_tunnel_push_rx_port+0x180/0x200 [ 256.261286][ T9400] geneve_offload_rx_ports+0xd7/0x160 [ 256.266668][ T9400] geneve_netdevice_event+0x6a/0x80 [ 256.272006][ T9400] notifier_call_chain+0x1b6/0x3e0 [ 256.277136][ T9400] call_netdevice_notifiers+0x88/0xc0 [ 256.282523][ T9400] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 256.288697][ T9400] notifier_call_chain+0x1b6/0x3e0 [ 256.293824][ T9400] register_netdevice+0x1608/0x1ae0 [ 256.299037][ T9400] nsim_create+0xae8/0xf10 [ 256.303459][ T9400] __nsim_dev_port_add+0x6b6/0xb10 [ 256.308609][ T9400] nsim_dev_port_add_all+0x37/0xf0 [ 256.313732][ T9400] nsim_dev_reload_up+0x451/0x780 [ 256.318767][ T9400] devlink_reload+0x4ec/0x8d0 [ 256.323448][ T9400] devlink_nl_reload_doit+0xb35/0xd50 [ 256.328826][ T9400] genl_family_rcv_msg_doit+0x215/0x300 [ 256.334413][ T9400] genl_rcv_msg+0x60e/0x790 [ 256.338929][ T9400] netlink_rcv_skb+0x208/0x470 [ 256.343698][ T9400] genl_rcv+0x28/0x40 [ 256.347711][ T9400] netlink_unicast+0x82c/0x9e0 [ 256.352508][ T9400] netlink_sendmsg+0x805/0xb30 [ 256.357283][ T9400] __sock_sendmsg+0x21c/0x270 [ 256.361973][ T9400] ____sys_sendmsg+0x505/0x830 [ 256.366738][ T9400] ___sys_sendmsg+0x21f/0x2a0 [ 256.371420][ T9400] __x64_sys_sendmsg+0x19b/0x260 [ 256.376366][ T9400] do_syscall_64+0xfa/0xfa0 [ 256.380876][ T9400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.386772][ T9400] [ 256.389097][ T9400] Second to last potentially related work creation: [ 256.395698][ T9400] kasan_save_stack+0x3e/0x60 [ 256.400386][ T9400] kasan_record_aux_stack+0xbd/0xd0 [ 256.405589][ T9400] insert_work+0x3d/0x330 [ 256.409941][ T9400] __queue_work+0xcd2/0xfb0 [ 256.414452][ T9400] queue_work_on+0x181/0x270 [ 256.419048][ T9400] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 256.424684][ T9400] udp_tunnel_push_rx_port+0x180/0x200 [ 256.430168][ T9400] vxlan_offload_rx_ports+0x139/0x200 [ 256.435551][ T9400] vxlan_netdevice_event+0x111/0x470 [ 256.440844][ T9400] notifier_call_chain+0x1b6/0x3e0 [ 256.445960][ T9400] call_netdevice_notifiers+0x88/0xc0 [ 256.451344][ T9400] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 256.457504][ T9400] notifier_call_chain+0x1b6/0x3e0 [ 256.462626][ T9400] register_netdevice+0x1608/0x1ae0 [ 256.467830][ T9400] nsim_create+0xae8/0xf10 [ 256.472246][ T9400] __nsim_dev_port_add+0x6b6/0xb10 [ 256.477368][ T9400] nsim_dev_port_add_all+0x37/0xf0 [ 256.482510][ T9400] nsim_dev_reload_up+0x451/0x780 [ 256.487549][ T9400] devlink_reload+0x4ec/0x8d0 [ 256.492231][ T9400] devlink_nl_reload_doit+0xb35/0xd50 [ 256.497605][ T9400] genl_family_rcv_msg_doit+0x215/0x300 [ 256.503161][ T9400] genl_rcv_msg+0x60e/0x790 [ 256.507671][ T9400] netlink_rcv_skb+0x208/0x470 [ 256.512441][ T9400] genl_rcv+0x28/0x40 [ 256.516432][ T9400] netlink_unicast+0x82c/0x9e0 [ 256.521212][ T9400] netlink_sendmsg+0x805/0xb30 [ 256.525997][ T9400] __sock_sendmsg+0x21c/0x270 [ 256.530682][ T9400] ____sys_sendmsg+0x505/0x830 [ 256.535462][ T9400] ___sys_sendmsg+0x21f/0x2a0 [ 256.540141][ T9400] __x64_sys_sendmsg+0x19b/0x260 [ 256.545081][ T9400] do_syscall_64+0xfa/0xfa0 [ 256.549592][ T9400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.555487][ T9400] [ 256.557809][ T9400] The buggy address belongs to the object at ffff88807c328e00 [ 256.557809][ T9400] which belongs to the cache kmalloc-256 of size 256 [ 256.571861][ T9400] The buggy address is located 176 bytes inside of [ 256.571861][ T9400] freed 256-byte region [ffff88807c328e00, ffff88807c328f00) [ 256.585656][ T9400] [ 256.587983][ T9400] The buggy address belongs to the physical page: [ 256.594393][ T9400] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c328 [ 256.603160][ T9400] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 256.611655][ T9400] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 256.619197][ T9400] page_type: f5(slab) [ 256.623184][ T9400] raw: 00fff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 256.631766][ T9400] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 256.640479][ T9400] head: 00fff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 256.649157][ T9400] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 256.657836][ T9400] head: 00fff00000000001 ffffea0001f0ca01 00000000ffffffff 00000000ffffffff [ 256.666535][ T9400] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 256.675201][ T9400] page dumped because: kasan: bad access detected [ 256.681623][ T9400] page_owner tracks the page as allocated [ 256.687337][ T9400] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5827, tgid 5827 (syz-executor), ts 90161073513, free_ts 89953012339 [ 256.708719][ T9400] post_alloc_hook+0x240/0x2a0 [ 256.713498][ T9400] get_page_from_freelist+0x2365/0x2440 [ 256.719063][ T9400] __alloc_frozen_pages_noprof+0x181/0x370 [ 256.724891][ T9400] alloc_pages_mpol+0x232/0x4a0 [ 256.729753][ T9400] allocate_slab+0x96/0x3a0 [ 256.734262][ T9400] ___slab_alloc+0xe94/0x18a0 [ 256.738947][ T9400] __slab_alloc+0x65/0x100 [ 256.743365][ T9400] __kmalloc_noprof+0x471/0x7f0 [ 256.748224][ T9400] fib_create_info+0x172d/0x3210 [ 256.753167][ T9400] fib_table_insert+0xc6/0x1b50 [ 256.758024][ T9400] fib_magic+0x2c4/0x390 [ 256.762268][ T9400] fib_add_ifaddr+0x144/0x5f0 [ 256.766949][ T9400] fib_inetaddr_event+0x12e/0x190 [ 256.771983][ T9400] notifier_call_chain+0x1b6/0x3e0 [ 256.777101][ T9400] blocking_notifier_call_chain+0x6a/0x90 [ 256.782827][ T9400] __inet_insert_ifa+0xa13/0xbf0 [ 256.787778][ T9400] page last free pid 9 tgid 9 stack trace: [ 256.793584][ T9400] __free_frozen_pages+0xbc4/0xd30 [ 256.798729][ T9400] __slab_free+0x2e7/0x390 [ 256.803154][ T9400] qlist_free_all+0x97/0x140 [ 256.807754][ T9400] kasan_quarantine_reduce+0x148/0x160 [ 256.813223][ T9400] __kasan_slab_alloc+0x22/0x80 [ 256.818088][ T9400] __kmalloc_cache_noprof+0x36f/0x6f0 [ 256.823469][ T9400] nsim_fib_event+0x4dc/0x8a30 [ 256.828236][ T9400] nsim_fib_event_work+0x249/0x3b0 [ 256.833362][ T9400] process_scheduled_works+0xae1/0x17b0 [ 256.838913][ T9400] worker_thread+0x8a0/0xda0 [ 256.843510][ T9400] kthread+0x711/0x8a0 [ 256.847584][ T9400] ret_from_fork+0x4bc/0x870 [ 256.852174][ T9400] ret_from_fork_asm+0x1a/0x30 [ 256.856945][ T9400] [ 256.859271][ T9400] Memory state around the buggy address: [ 256.864898][ T9400] ffff88807c328d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 256.872958][ T9400] ffff88807c328e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 256.881016][ T9400] >ffff88807c328e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 256.889079][ T9400] ^ [ 256.894737][ T9400] ffff88807c328f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 256.902834][ T9400] ffff88807c328f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 256.910888][ T9400] ================================================================== [ 256.920110][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 256.955772][ T9400] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 256.963018][ T9400] CPU: 1 UID: 0 PID: 9400 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 256.972582][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.982648][ T9400] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 256.989946][ T9400] Call Trace: [ 256.993227][ T9400] [ 256.996162][ T9400] dump_stack_lvl+0x99/0x250 [ 257.000757][ T9400] ? __asan_memcpy+0x40/0x70 [ 257.005352][ T9400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.010555][ T9400] ? __pfx__printk+0x10/0x10 [ 257.015151][ T9400] vpanic+0x237/0x6d0 [ 257.019142][ T9400] ? __pfx_vpanic+0x10/0x10 [ 257.023654][ T9400] ? preempt_schedule+0xae/0xc0 [ 257.028509][ T9400] ? __pfx_preempt_schedule+0x10/0x10 [ 257.033893][ T9400] panic+0xb9/0xc0 [ 257.037627][ T9400] ? __pfx_panic+0x10/0x10 [ 257.042063][ T9400] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 257.047960][ T9400] ? __mutex_lock+0x147/0x1350 [ 257.052733][ T9400] check_panic_on_warn+0x89/0xb0 [ 257.057680][ T9400] ? __mutex_lock+0x147/0x1350 [ 257.062456][ T9400] end_report+0x78/0x160 [ 257.066716][ T9400] kasan_report+0x129/0x150 [ 257.071224][ T9400] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 257.077132][ T9400] ? __mutex_lock+0x147/0x1350 [ 257.081906][ T9400] __mutex_lock+0x147/0x1350 [ 257.086515][ T9400] ? __mutex_lock+0x5bb/0x1350 [ 257.091292][ T9400] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 257.097538][ T9400] ? __pfx___mutex_lock+0x10/0x10 [ 257.102581][ T9400] ? __lock_acquire+0xab9/0xd20 [ 257.107453][ T9400] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 257.113536][ T9400] ? process_scheduled_works+0x9ef/0x17b0 [ 257.119270][ T9400] ? process_scheduled_works+0x9ef/0x17b0 [ 257.125002][ T9400] process_scheduled_works+0xae1/0x17b0 [ 257.130572][ T9400] ? __pfx_process_scheduled_works+0x10/0x10 [ 257.136568][ T9400] worker_thread+0x8a0/0xda0 [ 257.141181][ T9400] kthread+0x711/0x8a0 [ 257.145266][ T9400] ? __pfx_worker_thread+0x10/0x10 [ 257.150383][ T9400] ? __pfx_kthread+0x10/0x10 [ 257.154981][ T9400] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.160186][ T9400] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.165389][ T9400] ? __pfx_kthread+0x10/0x10 [ 257.170073][ T9400] ret_from_fork+0x4bc/0x870 [ 257.174679][ T9400] ? __pfx_ret_from_fork+0x10/0x10 [ 257.179798][ T9400] ? __switch_to_asm+0x39/0x70 [ 257.184567][ T9400] ? __switch_to_asm+0x33/0x70 [ 257.189337][ T9400] ? __pfx_kthread+0x10/0x10 [ 257.193938][ T9400] ret_from_fork_asm+0x1a/0x30 [ 257.198720][ T9400] [ 257.202087][ T9400] Kernel Offset: disabled [ 257.206408][ T9400] Rebooting in 86400 seconds..