last executing test programs: 7.906699114s ago: executing program 3 (id=7601): socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20044100) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000ff0f0000040000000600000001000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000340)=r0}, 0x20) close(0x3) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x7fff, r2}, 0x38) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) close(r7) write(r5, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x2, 0x1, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4000, 0x6, 0x2, 'pptp\x00', 'syz1\x00', {0x7fff}}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fb51f0f52069d37c378114554bc1e3e5a78752f61e0d49d5eddd143e2044"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r11, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r12 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, 0x0) connect$qrtr(r12, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r12, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@getrule={0x14, 0x22, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044015}, 0x40008) 6.960604856s ago: executing program 3 (id=7615): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r2, 0x29, 0x6, 0x0, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd700d0000000080000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r3], 0x40}}, 0x0) 6.794310237s ago: executing program 3 (id=7617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000001040108000000000000000000000001080005400000000105000100010000000800036300002fdb08000440000000030a0002000df9bd2711"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="17ffffffffffffec000000000500000018010000756c6c2500000000002020207b1af8ff00000000bfa10000ffffffbf07010000f8ffffffb7020000f5ffffffb703000009000000850000002d0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @mcast2, 0x3}, 0x1c) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001740)={{r0, &(0x7f0000000000)='&}\x00', 0x2001, &(0x7f0000000080)={@_ha_fsid={[0x4, 0x2]}, {0x60, 0x1, 0x1, 0x401}}, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x2}, 0x7, &(0x7f0000001640)=[{0x3, 0x0, &(0x7f0000000180)='\xa4-.!\x00', &(0x7f0000000340)="fde7d86ea1c4752c03530a7f7b5f60328d00c08bbe795751ca388b8498386ace0282e69f92f14af2ce6331cae4fc09da6d0a12081f2c9de733a97679068ed8dff95d4a1eb854423852085c", 0x4b, 0x8}, {0x3, 0xa, &(0x7f00000002c0)='rose0\x00', &(0x7f00000003c0)="b90c053831edd9d81f6a8d99de71ecdcdd21d76a1fae605d8b2cac446fc962c37207a7a203f1f52db19a0e499049b670e345df3d706a17c5e4018ae214", 0x3d, 0x2}, {0x3, 0x3, &(0x7f0000000400)='/dev/net/tun\x00', &(0x7f0000000440)="601c990722917aa67ba4534b236e6697de1b8499835156066158200912b259e5d52922e57034ea1b8ea98becabb5c8990f24024be90957", 0x37, 0x20}, {0x1, 0xfffffff8, &(0x7f0000000480)='rose0\x00', &(0x7f00000004c0)="0d32b2361d477ee83b903ccbf59707ff0558503d4ba6feca9af69e90b69c4d90ee71b509272897a4cf10c51aed9f648c21bb25da43376e", 0x37, 0x30}, {0x3, 0x8, &(0x7f0000000500)='/dev/net/tun\x00', &(0x7f0000000540)="58c812e5ddfb314e7cbffc44292de7b965207a2df0cc3c6f4369e0aa54ffae83e856d9f13a48783af56c4768dd700d70dd30a460c578bbb83f6b28d1", 0x3c, 0x10}, {0x2, 0x63, &(0x7f0000000580)='\'\x00', &(0x7f00000005c0)="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", 0x1000, 0x8}, {0x1, 0x1, &(0x7f00000015c0)=']\x00', &(0x7f0000001600)="c5bd338e2ea4437b3f14b9a8ad1d892e0ec1d222f102e81dfc7bc2db41b1a535a64d44e2a10d6715d6ad7fb02844", 0x2e}]}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0xff39, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 6.361310894s ago: executing program 3 (id=7620): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 6.191988482s ago: executing program 3 (id=7622): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x4, 0x1, 0x1, {0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff8}}}, 0x32) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1d) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) recvmsg$can_raw(r1, &(0x7f0000000280)={&(0x7f0000001780)=@can, 0x80, &(0x7f0000001700)=[{&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000100)=""/159, 0x9f}, {&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000400)=""/49, 0x31}, {&(0x7f0000001680)=""/121, 0x79}], 0x6, &(0x7f00000004c0)=""/167, 0xa7}, 0x40000040) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="400000001000370400000000000000005ad50000c8319750a1e33e7dd4833c4182feb2081dd96ae3", @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000300ffffffff080002007f000001"], 0x40}}, 0x0) 5.731386102s ago: executing program 0 (id=7625): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'veth1_to_team\x00', {0x3}, 0x22d}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x48, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x34, 0x11, 0x0, 0x1, [@nested={0x2e, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aa", @typed={0x5, 0x4a, 0x0, 0x0, @str='\x00'}]}]}]}, 0x48}], 0x1}, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r2, &(0x7f0000000040)="50fea7400000", 0x6, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f00000003c0)={&(0x7f0000000080)=0x7, 0x4, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000300)}) 5.305864032s ago: executing program 0 (id=7627): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@ldst={0x3, 0x2, 0x6, 0x9, 0x4, 0x10, 0x1}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0xffffffff, 0xd7c4, 0xfffffff9}, 0x10) write(r0, &(0x7f0000000280)="240000001e005f0214fffffffffffff8070000001d005200"/36, 0x24) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) unshare(0x62040200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4320000}]}]}, 0x80}}, 0x80) 2.555886537s ago: executing program 1 (id=7637): r0 = socket(0x2d, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3", 0x30}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x1, 0x503, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x44000) recvmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/56, 0x38}, {&(0x7f0000000740)=""/83, 0x53}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c80)=""/93, 0x5d}], 0x1}}], 0x2, 0x41, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000007110b2000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) 2.17311184s ago: executing program 2 (id=7639): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000020025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000100000008001b0000000000080029000000010008000d00800000007fe8a79c9070b84bb64a4d5d27a180cb03601de570ffb78899ac0c96c5d5de64281f9297f6ff498292d355155ca4857d19a218f2d41f3551447c5871ac60146ba7911ce67431d52a517a49e29e92ff300e4b850115b2be4aaa455eda2dce41"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 2.001336511s ago: executing program 2 (id=7641): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x101}, 0x1c) 1.919551283s ago: executing program 1 (id=7642): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002840)=ANY=[@ANYBLOB="140000003c00010329bd0d00fcffffff05000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc000084) 1.852021015s ago: executing program 2 (id=7643): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x31) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) r4 = accept$alg(r0, 0x0, 0x0) r5 = socket(0x6, 0x5, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) setsockopt(r9, 0x0, 0x19, 0x0, 0x0) r11 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) connect$can_bcm(r5, &(0x7f0000000340), 0x10) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000007c0)=""/169, 0xa9}, {&(0x7f0000000140)=""/249, 0xf9}, {&(0x7f0000000240)=""/171, 0xab}], 0x3}, 0x79e83a3f607a94f4) 1.817482058s ago: executing program 0 (id=7645): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r1}, 0xc) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000004580)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0xff, 0xffffff00, 'team0\x00', 'veth0\x00', {}, {0xff}, 0x11, 0x2, 0x8ec61fc4e1c84de5}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x5, 0xa, [0x2, 0xc, 0x3e, 0x2a, 0x24, 0x18, 0x3d, 0x38, 0xc, 0xf, 0x33, 0x2d, 0x0, 0x29, 0x3f, 0x27], 0x2, 0x2, 0x9}}}, {{@ip={@empty, @empty, 0xff000000, 0xff, 'ip6gretap0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x21, 0x2, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x1, 0x5, 0x3, 'syz0\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@getroute={0x14, 0x1a, 0x700, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9f", @ANYRES16=r6, @ANYBLOB="997425bd7000fbdbdf2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x2400c805}, 0x2400c000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000030000000100000f07000000030000000100000005530000004f0030"], 0x0, 0x35, 0x0, 0x9}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff0000", 0x26}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[], 0xfe33) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x3, 0x0, 0x0, 0x7, 0x2100}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x1, 0x1}, 0x28) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB="740000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="080000000000a1b32e15e6a40642b02242003e720000ab", @ANYRES32=r9, @ANYBLOB="44001280090001007866726d000000003400028008000200010000000800010002000000080002000200000008000200010000000800020003000000080002000200000008000500", @ANYRES32=r9, @ANYBLOB], 0x74}}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000013c0)=@newlink={0x70, 0x10, 0xffffffffffffffff, 0x303d2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x12021}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff0, 0x40}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x200005}}]}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x70}, 0x1, 0x0, 0x0, 0x44048}, 0x8000002) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r8) sendmsg$SEG6_CMD_SET_TUNSRC(r8, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000226bd7000fbdbdf25030000000800020040000000050006000f00000014000100ff02000000000000000000000000000114000100fe8000000005000000000000000000bb0800030007000000"], 0x54}, 0x1, 0x0, 0x0, 0x20044080}, 0xc041) write(0xffffffffffffffff, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={r1, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0], 0x0, 0x8, &(0x7f0000000f80)=[{}], 0x8, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x1c, 0xf, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x7}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x83, &(0x7f0000000d80)=""/131, 0x40f00, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x5, 0xc, 0x7, 0xb27}, 0x10, r12, r1, 0x7, &(0x7f00000011c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001200)=[{0x4, 0x5, 0x6, 0x6}, {0x2, 0x3, 0x3}, {0x4, 0x5, 0x5, 0x1}, {0x0, 0x5, 0x2}, {0x4, 0x2, 0x2, 0x9}, {0x3, 0x4, 0xb, 0x1}, {0x1, 0x3, 0x4, 0x2}], 0x10, 0xfffffffa}, 0x94) 1.762320434s ago: executing program 1 (id=7646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.636189684s ago: executing program 1 (id=7648): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000001c0)=0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r2, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e21, 0x2, @private2, 0x4000000c}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000200)="8000e859667fbc13", 0x8}], 0x1, &(0x7f0000000100)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x33, 0x2, 0x2, 0x2, 0x0, [@empty]}}}], 0x28}, 0x8040) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0xffffffff, 0x800000, {0x0, 0x0, 0x0, 0x0, 0x70200, 0x440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}]}, 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24045094) r5 = socket(0x10, 0x803, 0x40) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x30, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x0, 0x5, {0x6}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1.568503583s ago: executing program 4 (id=7649): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket(0x2b, 0x80801, 0x1) getsockname$inet6(r1, 0x0, &(0x7f0000000080)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0xb, 0x4) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) sendmmsg(r2, &(0x7f0000002e40)=[{{&(0x7f0000000280)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[{0x10, 0x110, 0x80000001}], 0x10}}], 0x1, 0x800) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc0c4) 1.495375718s ago: executing program 2 (id=7650): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000b00)="66b88c73b297848e54", 0x9}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd25, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xff, 0x1, 0x0, 0x4, 0x3600}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24040884) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x146) 1.461605265s ago: executing program 0 (id=7651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x34, r1, 0x301, 0x70bd25, 0x25dfdbfe, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x90) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596", @ANYRESHEX=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) close(r3) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000002c0), 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg(r5, &(0x7f0000000200)={0x0, 0xfffffffffffffd27, &(0x7f0000000040)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100070000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd1b642383656d4d2449155037", 0x55}], 0x1}, 0x4000080) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) unshare(0xa020480) r7 = gettid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x10, &(0x7f0000000200)=""/16, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) r8 = syz_open_procfs$namespace(r7, &(0x7f0000000040)='ns/mnt\x00') unshare(0x6020400) close(r8) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000004, 0x8010, r3, 0x44617000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e21, 0xffffff80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c}, 0x1c) syz_emit_ethernet(0x29a, &(0x7f0000000980)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "372385", 0x264, 0x11, 0xff, @mcast1, @dev={0xfe, 0x80, '\x00', 0x15}, {[@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x2, 0x68}, @hopopts={0x67, 0x11, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @pad1, @generic={0xf7, 0x4b, "14d74d88f8ba3180c5301c2ea7762b43c6b4317ac89cb495b408f395a99ee5cdbe2d7c36ea422839e5227ae5ce88901cfefcf74d24c00c899dbcb4636d791b1487e166bc8cf40cd47f8b9b"}, @calipso={0x7, 0x28, {0x2, 0x8, 0x0, 0x9, [0x7ff, 0xd, 0x1, 0x800000000000]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x73, 0x0, 0x3, 0x0, 0x0, 0x5, 0x65}, @routing={0x3c, 0x10, 0x2, 0x7, 0x0, [@private2, @empty, @ipv4={'\x00', '\xff\xff', @empty}, @empty, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty]}, @fragment={0x29, 0x0, 0xf8, 0x1, 0x0, 0x10, 0x68}, @srh={0x32, 0xc, 0x4, 0x6, 0x6, 0x4, 0x3, [@mcast2, @private1, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x3a, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x81}]}], {0x4e20, 0x4e20, 0xbc, 0x0, @opaque="d0a362a41d9f4fc6ad85980d1bef907920dc433c5cfa922f653943621e7b778c679541ceffdf81966421fea0ef37ae12d18128859cbd288d1e6e9f9889358ee8ecb39ac1b4b5bd4b26a88eed31fc122077d7bea1d8194c36d7a480bff260147f3a170999f2708e57470777872af55cd6fffecf61584c4b18568f20b5a8324b2293e4021f2c7d53bd44c15dbfce91526252a1452b8dc625867c47a42d84493477a9de516cd8f043af396fdaa36c4e670c28ef02ad"}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000120003006269746d61743a69702c6d616300000005000400001500000900020073797a3000000000140007800500140007000000080008400000000005000500020000000500010006000000"], 0x60}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000180)=0x4) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r9, 0x107, 0xb, 0x0, &(0x7f0000000240)=0x47ee917f) 1.420420744s ago: executing program 4 (id=7652): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xe, 0x5, 0x928, 0x80000001, 0x100, 0x4, 0x897, 0x0, 0x7, 0x7, 0x247, 0x6, 0x200800, 0x8001, 0xffffffff, 0x4, 0x100, 0xffff, 0x2, 0x40, 0x5, 0x0, 0x9e}}) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x2d, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1c000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x101}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xffffff01, 0x8, &(0x7f0000000040)=""/8, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x0, 0x9, 0xe8e}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=[{0x5, 0x1, 0xc, 0x4}], 0x10, 0x5}, 0x94) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r1, r2, 0x19, 0x0, @void}, 0x10) 1.363758256s ago: executing program 1 (id=7653): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r1, r0, 0x4, r0}, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x2, 0x1, 0x46, @mcast2, @mcast1, 0x7800, 0x7800, 0x8, 0xffff}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0x1, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = socket(0x10, 0x3, 0x0) accept(r3, &(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000300)=0x80) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) write(r3, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@empty, 0x0}, &(0x7f0000000080)=0x14) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x8, r4, 0x5fae}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0xc) close(r5) 1.310156317s ago: executing program 2 (id=7654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x59}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa}]}, 0x8c}}, 0x4000001) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) 1.271254511s ago: executing program 0 (id=7655): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, @long={0x3, 0x3}}, 0x14, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x24008860) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r7) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {0x0, 0xfff3}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x6, 0x4cd}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r13, 0x3c}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f267", 0x2}], 0x1}, 0x4004014) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r14, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r14, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xffffffff, 0x4, 0x6}, &(0x7f0000000100)=0x10) 1.219246804s ago: executing program 4 (id=7656): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x110a, &(0x7f0000000c40)={@link_local={0x3}, @multicast, @void, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0xf, 0x10fc, 0x67, 0x0, 0xcd, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "5f0e50fd378a87ff9078b58345b28049b907e8c94b7c84f7d1105a3cee45e7b2b7d23fc0eb5de07b1c030dc9d6705eeef89a3eb977949b1b86798d3d721099e137a4f08599d08eed0cb02d745c3a0419c1c8b4b85c424c6725f2dc05bbb19c3b7700f141148e9e1c7c260f"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x5], "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"}, {0x8, 0x88be, 0x3, {{0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x7f}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x3, {{0xc, 0x2, 0x7, 0x3, 0x1, 0x3, 0x0, 0x1}, 0x2, {0xce0, 0x6, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "4e6a469a7cfdc092174d54189ce5b3d9b2930c71d4e333b8b28b6e05014899556c16f453e677d60096ce88f000ba32662f282e5c1f1446"}}}}}}}, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x47, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611898000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) unshare(0x20000400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x108003, 0x10, 0x4, 0x9, 0xa4, 0xbfb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x7, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x2, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0x10, 0x6, 0x100, 0x6, 0x1bf6, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x0, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x7, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x300000, 0x9, 0xbbce, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x7, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x80000000, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0xa0006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x10000008, 0x8, 0x5, 0x1fc, 0x1ff, 0x3]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="725eb862"]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}, 0x1, 0x0, 0x0, 0xc020}, 0x4040) 1.117227695s ago: executing program 1 (id=7657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000000000)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x10000080) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x2) shutdown(r2, 0x0) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = accept(r3, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000002240)="ee", 0x1, 0x4404c06d, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000240)={r1, &(0x7f00000000c0)='%\x00', 0x200100, &(0x7f0000000140)={@align=0x7, {0x5, 0x1, 0x7fff, 0x1}}, 0xb, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x2}) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r8}}, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003e7dfffff08300008a00000000000000010000000000000049060000000000000400000000000000000000000000000000000000000000000000000000000000b5ca000000ffffff070000000000000000000000000000000700000000000000ff0300"/240]) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.069136419s ago: executing program 2 (id=7658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xd73, 0xffffffffffffffff, 0x80, 0x401}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xfff1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 859.242248ms ago: executing program 0 (id=7659): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000800095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) (async, rerun: 32) sendmsg$inet(r3, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="98"], 0x98}, 0x80) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001000370429bd7000ffdbdf2c00000000", @ANYRES32=0x0, @ANYBLOB="890c040000000000500012800b000100697036746e6c000040000280140003002001000000000000000000000000000008000100", @ANYRES32, @ANYBLOB="0400130014000200fe"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4004804) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x1000}, 0x4) 812.302955ms ago: executing program 4 (id=7660): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x80000000, 0x0, 0x0, 0x100, 0x70, '\x00', r1, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0)=[0x1], &(0x7f0000000700), 0x4, 0x100000}}, 0x40) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x1010, r3, 0x0) 721.738883ms ago: executing program 4 (id=7661): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000340)={{0xffffffffffffffff, &(0x7f0000000040)='%&\x00', 0x210000, &(0x7f00000001c0)={@_ha_fsid={[0x72, 0x8]}, {0x3, 0x2, 0x6, 0x1f1}}, 0x4, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x8}, {[0x7f, 0x2, 0x80, 0x4]}, 0x6, 0x9c, &(0x7f0000000280)=""/156}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x6, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x41}, 0x8, 0x720, 0x10000, 0x40e1}}) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x9, 0x2, 0x2, 0x4c200, r0, 0xf, '\x00', r1, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="1800851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000006608000000000000180000000800000000000000000000009500000000000000c60a000000000102180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0xe8) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="00012dbd7000fcdbdf250900000008003a00080e0000080032003eed000008000600", @ANYRES32, @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x24000890}, 0x40) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xc, "e8"}], 0x30}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000000)={0x3, 0x401}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000e99b4b842a7d75e1b14e720173e1b2f7cc91444b4d2f8b3bb672230811f055c4bec7d393ccd76990477cdbfb8e6cf5593eba9608f9f9d3d7f5b68c9d94ed0d0d39613d9d060573707bb5b82d229bcca529f04c82fdf9eb266e017f70337ff5b052f9df75f991e760c17ecf3e8aece3cecbeb9cb0ba352fb68a4718ba4ae630cb83dc9832e0889388a96c92a7cd32aa143064b1fc85da8fa108efce7e2b1344bf07f8e197d3209c3938ff57c0a300dc5530e3dff3999b1ca4119489c461bc98e49f73afcffc189792fa4ab5f8", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="03000000030000000400"/28], 0x50) 503.765909ms ago: executing program 4 (id=7662): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x40000480) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x6533, 0x4) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r2, 0x0, 0x0, 0x2043, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000000000)=0x30) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x2}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x30, 0x61, 0x5f]}}, 0x0, 0x41}, 0x28) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x3, 0x6, {{0x41, 0x4, 0x1, 0xa, 0x104, 0x64, 0x0, 0xc, 0x29, 0x0, @remote, @multicast1, {[@ssrr={0x89, 0xb, 0x63, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x34, 0x4a, 0x1, 0x6, [{@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xc8f}, {@multicast1, 0xff}, {@broadcast, 0x2}, {@remote, 0xc}, {@multicast2, 0x8}]}, @noop, @timestamp={0x44, 0x1c, 0xb7, 0x0, 0x5, [0x0, 0xffffffff, 0x8, 0x43, 0x80000001, 0x7fffffff]}, @lsrr={0x83, 0x17, 0xf, [@dev={0xac, 0x14, 0x14, 0x30}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x30}]}, @generic={0x44, 0x10, "a263b6b846a853be63b19e5adc89"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0xaf, 0x1, 0x8, [{@multicast1, 0x3ff}, {@rand_addr=0x64010101, 0xfffffffa}, {@remote, 0xe}, {@remote, 0x8001}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast2, 0x800}, {@loopback}, {@rand_addr=0x64010102, 0x9}, {@multicast2, 0xc}]}, @ssrr={0x89, 0x13, 0x4, [@private=0xa010101, @multicast1, @loopback, @remote]}]}}}}}) sendmsg$nl_route(r4, 0x0, 0x0) 0s ago: executing program 3 (id=7663): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r1, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xd97}, {&(0x7f0000001580)=""/230, 0xe6}], 0x2}, 0x4}, {{&(0x7f0000000080)=@tipc=@id, 0x80, &(0x7f0000002680)=[{&(0x7f0000000140)=""/3, 0x3}, {&(0x7f0000002840)=""/106, 0x6a}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/193, 0xc1}, {&(0x7f00000014c0)=""/69, 0x45}], 0x5}, 0x9}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/23, 0x17}], 0x1, &(0x7f0000002700)=""/68, 0x44}, 0x8}], 0x3, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x306) kernel console output (not intermixed with test programs): .162374][T30207] netlink: zone id is out of range [ 1137.172563][T30207] netlink: zone id is out of range [ 1137.177916][T30207] netlink: zone id is out of range [ 1137.194467][T30222] lo speed is unknown, defaulting to 1000 [ 1137.340395][T30248] pim6reg: entered allmulticast mode [ 1137.357059][T30247] pim6reg: left allmulticast mode [ 1137.465870][T28561] Bluetooth: hci4: command tx timeout [ 1137.619479][T30229] lo speed is unknown, defaulting to 1000 [ 1137.629155][T30198] lo speed is unknown, defaulting to 1000 [ 1137.907906][T30261] pim6reg1: entered promiscuous mode [ 1137.923526][T30261] pim6reg1: entered allmulticast mode [ 1138.018798][T30229] lo speed is unknown, defaulting to 1000 [ 1138.036600][T30222] lo speed is unknown, defaulting to 1000 [ 1138.048809][T30198] lo speed is unknown, defaulting to 1000 [ 1138.745050][T30229] lo speed is unknown, defaulting to 1000 [ 1138.928320][T30198] chnl_net:caif_netlink_parms(): no params data found [ 1139.073037][T30222] lo speed is unknown, defaulting to 1000 [ 1139.148915][T30198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.156538][T30198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.164258][T30198] bridge_slave_0: entered allmulticast mode [ 1139.181293][T30198] bridge_slave_0: entered promiscuous mode [ 1139.248816][T30198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.255942][T30198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.279155][T30198] bridge_slave_1: entered allmulticast mode [ 1139.287326][T30198] bridge_slave_1: entered promiscuous mode [ 1139.389883][T30198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.413657][T30198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.462266][T30287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6131'. [ 1139.471779][T30288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6131'. [ 1139.485812][T30287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6131'. [ 1139.548665][T28561] Bluetooth: hci4: command tx timeout [ 1139.671093][T30198] team0: Port device team_slave_0 added [ 1139.679770][T30292] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6132'. [ 1139.719827][T30198] team0: Port device team_slave_1 added [ 1140.324945][T30198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.345814][T30198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.423056][T30198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.463051][T30198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.470277][T30198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.511287][T30198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.923813][T30198] hsr_slave_0: entered promiscuous mode [ 1140.931416][T30198] hsr_slave_1: entered promiscuous mode [ 1140.938300][T30198] debugfs: 'hsr0' already exists in 'hsr' [ 1140.960369][T30198] Cannot create hsr debugfs directory [ 1141.180612][T30325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6142'. [ 1141.313404][T30327] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6143'. [ 1141.414889][T30329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6142'. [ 1141.535500][T30337] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6146'. [ 1141.566325][T30341] netlink: 'syz.4.6143': attribute type 21 has an invalid length. [ 1141.577895][T30341] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6143'. [ 1141.624237][T30341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6143'. [ 1141.625083][T28561] Bluetooth: hci4: command tx timeout [ 1141.732006][T30346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6148'. [ 1141.765408][T30198] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1141.791421][T30198] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.812010][T30198] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1141.923161][T30346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6148'. [ 1141.973831][T30198] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1141.994010][T30198] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.004254][T30198] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1142.093876][T30198] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1142.106847][T30198] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.117094][T30198] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1142.202591][T30361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6150'. [ 1142.226356][T30361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6150'. [ 1142.240841][T30198] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1142.270290][T30198] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.287216][T30198] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1142.502779][T30365] netlink: 'syz.4.6151': attribute type 1 has an invalid length. [ 1142.578433][T30365] bond10: entered promiscuous mode [ 1142.592520][T30365] bond10: entered allmulticast mode [ 1142.599660][T30365] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1142.623044][T30372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.669021][T30198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1142.691603][T30378] ip6gre2: entered promiscuous mode [ 1142.696879][T30378] ip6gre2: entered allmulticast mode [ 1142.710503][T30198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1142.726423][T30198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1142.744437][T30198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1142.887485][T30396] batadv_slave_0: entered promiscuous mode [ 1142.930051][T30405] netlink: 'syz.0.6159': attribute type 2 has an invalid length. [ 1142.962176][T30198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.002713][T30405] l24): entered promiscuous mode [ 1143.009602][T30395] batadv_slave_0: left promiscuous mode [ 1143.022872][T30198] 8021q: adding VLAN 0 to HW filter on device team0 [ 1143.058914][T21849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.066273][T21849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1143.101600][T21844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.108826][T21844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1143.304207][T30420] team0: Port device veth19 added [ 1143.321552][T30409] lo speed is unknown, defaulting to 1000 [ 1143.447044][T30427] mac80211_hwsim hwsim48 syzkaller0: left promiscuous mode [ 1143.461850][T30427] mac80211_hwsim hwsim48 syzkaller0: left allmulticast mode [ 1143.494844][T30427] tipc: Resetting bearer [ 1143.721099][T28561] Bluetooth: hci4: command tx timeout [ 1143.808761][T30434] netlink: 'syz.3.6167': attribute type 1 has an invalid length. [ 1144.149330][T30198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.413590][T30409] lo speed is unknown, defaulting to 1000 [ 1144.430113][T30198] veth0_vlan: entered promiscuous mode [ 1144.450974][T30409] lo speed is unknown, defaulting to 1000 [ 1144.470261][T30198] veth1_vlan: entered promiscuous mode [ 1144.575192][T30198] veth0_macvtap: entered promiscuous mode [ 1144.600940][T30198] veth1_macvtap: entered promiscuous mode [ 1144.634305][T30456] netlink: 'syz.0.6173': attribute type 1 has an invalid length. [ 1144.649990][T30198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1144.670820][T30198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1144.732822][T30456] bond1: entered promiscuous mode [ 1144.760117][T30456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1144.795529][T21841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.828634][T21841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.852327][T21841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.864685][T21835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.041945][T21835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.043152][T30466] lo speed is unknown, defaulting to 1000 [ 1145.066152][T21835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.135067][T21844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.159474][T21844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.364161][T30474] x_tables: duplicate underflow at hook 2 [ 1145.551285][T30478] net_ratelimit: 343 callbacks suppressed [ 1145.551311][T30478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1145.566800][T30466] lo speed is unknown, defaulting to 1000 [ 1145.623937][T30466] lo speed is unknown, defaulting to 1000 [ 1145.658359][T30479] lo speed is unknown, defaulting to 1000 [ 1146.426698][T30479] lo speed is unknown, defaulting to 1000 [ 1146.647309][T30479] lo speed is unknown, defaulting to 1000 [ 1146.817518][T30510] __nla_validate_parse: 20 callbacks suppressed [ 1146.817541][T30510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6186'. [ 1146.944739][T30517] syzkaller0: entered allmulticast mode [ 1146.969381][T30517] syzkaller0 (unregistering): left allmulticast mode [ 1147.376931][T30528] rdma_rxe: rxe_newlink: failed to add lo [ 1147.449474][T30533] netlink: 'syz.3.6194': attribute type 1 has an invalid length. [ 1147.542694][T30537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6192'. [ 1147.630225][T30530] netlink: 'syz.2.6192': attribute type 11 has an invalid length. [ 1147.638118][T30530] netlink: 'syz.2.6192': attribute type 23 has an invalid length. [ 1147.646440][T30530] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6192'. [ 1147.802401][T30533] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1147.885364][T30536] bond12: (slave geneve3): making interface the new active one [ 1147.897279][T30536] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 1147.959567][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1147.988831][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1148.028954][T30542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6196'. [ 1148.038939][T30542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6196'. [ 1148.048062][T30542] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6196'. [ 1148.057809][T30542] netlink: 'syz.1.6196': attribute type 3 has an invalid length. [ 1148.071327][T30542] netlink: 'syz.1.6196': attribute type 2 has an invalid length. [ 1148.079641][T30542] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6196'. [ 1148.090319][T30542] netlink: 'syz.1.6196': attribute type 2 has an invalid length. [ 1148.111194][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1148.155330][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1148.317133][T30549] netlink: 'syz.1.6197': attribute type 13 has an invalid length. [ 1148.824964][T30570] netlink: 636 bytes leftover after parsing attributes in process `syz.0.6203'. [ 1148.976580][T30582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6206'. [ 1149.155862][T30594] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1149.172431][T30596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6209'. [ 1149.490963][T30605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1149.520570][T30605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1149.583478][T30605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1149.591570][T30605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.699950][T30593] lo speed is unknown, defaulting to 1000 [ 1150.334776][T30593] lo speed is unknown, defaulting to 1000 [ 1150.334909][T30627] lo speed is unknown, defaulting to 1000 [ 1150.352190][T30593] lo speed is unknown, defaulting to 1000 [ 1150.477582][T30634] netlink: 'syz.4.6221': attribute type 8 has an invalid length. [ 1151.034139][T30649] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1152.176242][T30627] lo speed is unknown, defaulting to 1000 [ 1152.229243][T30627] lo speed is unknown, defaulting to 1000 [ 1152.572343][T30691] __nla_validate_parse: 24 callbacks suppressed [ 1152.572368][T30691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6231'. [ 1152.655051][T30693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6232'. [ 1152.679778][T30693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6232'. [ 1152.701199][T30693] netlink: 'syz.2.6232': attribute type 3 has an invalid length. [ 1152.790425][T30696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6233'. [ 1152.923510][T30698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6234'. [ 1152.945731][T30698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6234'. [ 1153.044435][T30703] sock: sock_set_timeout: `syz.4.6236' (pid 30703) tries to set negative timeout [ 1153.291602][T30712] netlink: 'syz.0.6238': attribute type 1 has an invalid length. [ 1153.647642][T30712] bond2: entered promiscuous mode [ 1153.653511][T30712] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1153.833150][T30713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1153.848854][T30713] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 1153.863578][T30713] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1153.876755][T30713] bond2: (slave vti0): making interface the new active one [ 1153.888734][T30713] vti0: entered promiscuous mode [ 1153.896032][T30713] bond2: (slave vti0): Enslaving as an active interface with an up link [ 1154.705169][T30744] tipc: Started in network mode [ 1154.728680][T30744] tipc: Node identity f6fcaedcecb7, cluster identity 4711 [ 1154.748863][T30744] tipc: Enabled bearer , priority 0 [ 1154.799565][T30745] syzkaller0: entered promiscuous mode [ 1154.828986][T30745] syzkaller0: entered allmulticast mode [ 1154.888971][T30744] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6248'. [ 1154.902817][T30745] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6248'. [ 1154.934154][T30744] tipc: Resetting bearer [ 1155.142273][T30742] tipc: Resetting bearer [ 1155.237838][T30742] tipc: Disabling bearer [ 1155.471311][T30762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6255'. [ 1155.472791][T30760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6254'. [ 1155.600714][T30762] lo speed is unknown, defaulting to 1000 [ 1156.075650][T30762] lo speed is unknown, defaulting to 1000 [ 1156.091302][T30762] lo speed is unknown, defaulting to 1000 [ 1156.493128][T30802] netlink: 'syz.1.6266': attribute type 13 has an invalid length. [ 1156.529339][T30800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.537445][T30800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.554295][T30802] netlink: 'syz.1.6266': attribute type 17 has an invalid length. [ 1156.830418][T30800] veth1_vlan: left allmulticast mode [ 1156.997313][T30802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.017098][T30802] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.039048][T30802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1157.205313][ T7831] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1157.215220][ T7831] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.228943][ T7831] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1157.237959][ T7831] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.247748][ T7831] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1157.257396][ T7831] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.333716][T30814] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1157.376415][ T7831] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1157.409473][ T7831] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.630997][T24239] IPVS: starting estimator thread 0... [ 1157.647214][T17409] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1157.658001][T17409] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1157.666676][T17409] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1157.691193][T17409] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1157.699971][T30832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1157.707238][T30832] IPv6: NLM_F_CREATE should be set when creating new route [ 1157.721220][T17409] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1157.748971][T30828] IPVS: using max 28 ests per chain, 67200 per kthread [ 1157.910961][T30835] macvtap1: entered promiscuous mode [ 1157.916699][T30835] macvtap1: entered allmulticast mode [ 1157.928848][T30835] veth1_vlan: entered allmulticast mode [ 1158.200544][T30847] C: renamed from team_slave_0 (while UP) [ 1158.214775][T30847] netlink: 'syz.0.6278': attribute type 4 has an invalid length. [ 1158.231392][T30847] netlink: 'syz.0.6278': attribute type 1 has an invalid length. [ 1158.242910][T30847] netlink: 'syz.0.6278': attribute type 2 has an invalid length. [ 1158.252587][T30847] __nla_validate_parse: 1 callbacks suppressed [ 1158.252606][T30847] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6278'. [ 1158.284843][T30847] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1158.356095][T30829] lo speed is unknown, defaulting to 1000 [ 1158.910283][T30829] lo speed is unknown, defaulting to 1000 [ 1158.919359][T30829] lo speed is unknown, defaulting to 1000 [ 1159.307169][T30865] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6282'. [ 1159.368057][T30865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.394110][T30870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6283'. [ 1159.421451][T30865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.438127][T30870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6283'. [ 1159.452048][T30865] bond0 (unregistering): Released all slaves [ 1159.477892][T30873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6282'. [ 1159.514236][T30873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.625745][T30876] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6285'. [ 1159.797937][T30829] chnl_net:caif_netlink_parms(): no params data found [ 1159.860959][T28561] Bluetooth: hci1: command tx timeout [ 1159.907499][T30829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.917177][T30829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.924811][T30829] bridge_slave_0: entered allmulticast mode [ 1159.932521][T30829] bridge_slave_0: entered promiscuous mode [ 1159.940017][T30887] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6287'. [ 1159.950481][T30829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.958390][T30829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.965873][T30829] bridge_slave_1: entered allmulticast mode [ 1159.973945][T30829] bridge_slave_1: entered promiscuous mode [ 1160.007114][T30829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.020139][T30829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.051305][T30829] team0: Port device team_slave_0 added [ 1160.060050][T30829] team0: Port device team_slave_1 added [ 1160.087620][T30829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.095631][T30829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.123540][T30829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.139614][T30829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.146684][T30829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.173545][T30829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.238142][T30889] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1160.275443][T30829] hsr_slave_0: entered promiscuous mode [ 1160.288412][T30829] hsr_slave_1: entered promiscuous mode [ 1160.295990][T30829] debugfs: 'hsr0' already exists in 'hsr' [ 1160.304958][T30829] Cannot create hsr debugfs directory [ 1160.656888][T30907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6294'. [ 1160.671075][T30829] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1160.730616][T30829] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1160.797286][T30914] netlink: 'syz.1.6296': attribute type 1 has an invalid length. [ 1160.810052][T30829] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1160.871019][T30829] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1161.159438][T30829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1161.181679][T30829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1161.226221][T30829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1161.555272][T30931] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1161.567633][T30829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1161.681703][T30936] lo speed is unknown, defaulting to 1000 [ 1161.734483][T30946] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.6302'. [ 1161.760254][T30946] netlink: 'syz.1.6302': attribute type 1 has an invalid length. [ 1161.768125][T30946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6302'. [ 1161.946434][T28561] Bluetooth: hci1: command tx timeout [ 1161.973166][T30829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.014187][T30829] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.034486][ T7831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.041883][ T7831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.073093][T21844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.080370][T21844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.150506][T30957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1162.377833][T30936] lo speed is unknown, defaulting to 1000 [ 1162.430806][T30936] lo speed is unknown, defaulting to 1000 [ 1162.862665][T30829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1163.086991][T30829] veth0_vlan: entered promiscuous mode [ 1163.144839][T30829] veth1_vlan: entered promiscuous mode [ 1163.254358][T30829] veth0_macvtap: entered promiscuous mode [ 1163.322408][T30829] veth1_macvtap: entered promiscuous mode [ 1163.399778][T30829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1163.482448][T30829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1163.496203][T31017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1163.532242][T21839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.583449][T31019] erspan0: entered promiscuous mode [ 1163.710741][T31019] 8021q: adding VLAN 0 to HW filter on device .` [ 1163.738435][T31019] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.767351][T31019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1163.818946][T21839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.836048][T21839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.895770][T24232] lo speed is unknown, defaulting to 1000 [ 1163.905841][T21839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.918650][T24232] syz0: Port: 1 Link ACTIVE [ 1163.944432][T24232] lo speed is unknown, defaulting to 1000 [ 1164.018674][T28561] Bluetooth: hci1: command tx timeout [ 1164.195060][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.223637][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.335984][T31033] __nla_validate_parse: 3 callbacks suppressed [ 1164.336005][T31033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6326'. [ 1164.356474][T31032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6326'. [ 1164.369737][T21844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.377689][T21844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.545956][T31039] netlink: 'syz.4.6327': attribute type 1 has an invalid length. [ 1164.597933][T31040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6328'. [ 1164.704874][T31046] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1164.736497][T31046] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1164.749176][T31048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6270'. [ 1164.768674][T31042] can: request_module (can-proto-0) failed. [ 1164.783230][T31046] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1164.806627][T31052] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6329'. [ 1165.117371][T17409] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1165.128582][T17409] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1165.140981][T17409] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1165.150968][T17409] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1165.161297][T17409] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1165.289336][T31062] lo speed is unknown, defaulting to 1000 [ 1165.758247][T31082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6342'. [ 1165.901460][T31062] lo speed is unknown, defaulting to 1000 [ 1165.912975][T31062] lo speed is unknown, defaulting to 1000 [ 1166.104386][T28561] Bluetooth: hci1: command tx timeout [ 1166.202923][T31097] lo speed is unknown, defaulting to 1000 [ 1166.696897][T31107] lo speed is unknown, defaulting to 1000 [ 1166.715882][T31062] chnl_net:caif_netlink_parms(): no params data found [ 1166.735781][T31097] lo speed is unknown, defaulting to 1000 [ 1166.782485][T31097] lo speed is unknown, defaulting to 1000 [ 1167.082147][T31062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.110295][T31062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.117632][T31062] bridge_slave_0: entered allmulticast mode [ 1167.151027][T31062] bridge_slave_0: entered promiscuous mode [ 1167.181137][T31062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.188418][T31062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.211746][T31062] bridge_slave_1: entered allmulticast mode [ 1167.219000][T28561] Bluetooth: hci3: command tx timeout [ 1167.239995][T31062] bridge_slave_1: entered promiscuous mode [ 1167.248043][T31107] lo speed is unknown, defaulting to 1000 [ 1167.276043][T31123] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6348'. [ 1167.292331][T31107] lo speed is unknown, defaulting to 1000 [ 1167.311866][T31062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.332870][T31062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.368274][T31122] 8021q: VLANs not supported on lo [ 1167.402047][T31125] netlink: 'syz.1.6349': attribute type 3 has an invalid length. [ 1167.410176][T31125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6349'. [ 1167.469249][T31123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6348'. [ 1167.510073][T31062] team0: Port device team_slave_0 added [ 1167.518308][T31062] team0: Port device team_slave_1 added [ 1167.644585][T31062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.652179][T31062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.682962][T31062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.697517][T31134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6351'. [ 1167.700806][T31062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1167.713774][T31062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.741062][T31062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.002792][T31134] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1168.113969][T31062] hsr_slave_0: entered promiscuous mode [ 1168.149780][T31062] hsr_slave_1: entered promiscuous mode [ 1168.197012][T31062] debugfs: 'hsr0' already exists in 'hsr' [ 1168.203618][T31062] Cannot create hsr debugfs directory [ 1168.211825][T31136] lo speed is unknown, defaulting to 1000 [ 1168.486385][T31142] ipt_ECN: cannot use operation on non-tcp rule [ 1168.720538][T31136] lo speed is unknown, defaulting to 1000 [ 1168.788639][T31136] lo speed is unknown, defaulting to 1000 [ 1169.299618][T28561] Bluetooth: hci3: command tx timeout [ 1169.312693][T31159] FAULT_INJECTION: forcing a failure. [ 1169.312693][T31159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.368940][T31159] CPU: 0 UID: 0 PID: 31159 Comm: syz.0.6358 Not tainted syzkaller #0 PREEMPT(full) [ 1169.368971][T31159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1169.368985][T31159] Call Trace: [ 1169.368994][T31159] [ 1169.369003][T31159] dump_stack_lvl+0xe8/0x150 [ 1169.369038][T31159] should_fail_ex+0x412/0x560 [ 1169.369071][T31159] _copy_from_user+0x2d/0xb0 [ 1169.369105][T31159] sk_setsockopt+0x2b3/0x2e80 [ 1169.369146][T31159] ? __pfx_sk_setsockopt+0x10/0x10 [ 1169.369180][T31159] ? aa_sk_perm+0x6d5/0x900 [ 1169.369216][T31159] ? __pfx_aa_sk_perm+0x10/0x10 [ 1169.369243][T31159] ? __fget_files+0x2a/0x420 [ 1169.369272][T31159] ? aa_sock_opt_perm+0xff/0x1a0 [ 1169.369302][T31159] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1169.369331][T31159] do_sock_setsockopt+0x11b/0x1b0 [ 1169.369368][T31159] __x64_sys_setsockopt+0x13d/0x1b0 [ 1169.369405][T31159] do_syscall_64+0x14d/0xf80 [ 1169.369434][T31159] ? trace_irq_disable+0x3b/0x150 [ 1169.369462][T31159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.369484][T31159] ? clear_bhb_loop+0x40/0x90 [ 1169.369509][T31159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.369531][T31159] RIP: 0033:0x7ff25139c799 [ 1169.369552][T31159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.369570][T31159] RSP: 002b:00007ff24f5cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1169.369594][T31159] RAX: ffffffffffffffda RBX: 00007ff251616090 RCX: 00007ff25139c799 [ 1169.369609][T31159] RDX: 000000000000000f RSI: 0000000000000001 RDI: 0000000000000003 [ 1169.369621][T31159] RBP: 00007ff24f5cd090 R08: 0000000000000004 R09: 0000000000000000 [ 1169.369634][T31159] R10: 0000200000356ffc R11: 0000000000000246 R12: 0000000000000001 [ 1169.369648][T31159] R13: 00007ff251616128 R14: 00007ff251616090 R15: 00007ffc30e221b8 [ 1169.369684][T31159] [ 1169.745211][T21844] bond9 (unregistering): (slave geneve3): Releasing active interface [ 1170.086371][T21844] bond0 (unregistering): (slave 30): Releasing backup interface [ 1170.097246][T21844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.109443][T21844] bond0 (unregistering): Released all slaves [ 1170.122904][T21844] bond1 (unregistering): Released all slaves [ 1170.158490][T21844] bond2 (unregistering): Released all slaves [ 1170.184189][T21844] bond3 (unregistering): (slave veth7): Releasing active interface [ 1170.197642][T21844] bond3 (unregistering): Released all slaves [ 1170.217156][T21844] bond4 (unregistering): Released all slaves [ 1170.233086][T21844] bond5 (unregistering): Released all slaves [ 1170.247427][T21844] bond6 (unregistering): Released all slaves [ 1170.274306][T21844] bond7 (unregistering): Released all slaves [ 1170.287795][T21844] bond8 (unregistering): Released all slaves [ 1170.303120][T21844] bond9 (unregistering): Released all slaves [ 1170.550356][T21844] 5nè‹Ò: left promiscuous mode [ 1170.671623][T21844] tipc: Left network mode [ 1170.891628][T31062] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1170.951426][T31062] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1171.012233][T31062] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1171.054800][T31062] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1171.339545][T31191] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 1171.382101][T28561] Bluetooth: hci3: command tx timeout [ 1171.605620][T31197] __nla_validate_parse: 1 callbacks suppressed [ 1171.605642][T31197] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6365'. [ 1172.003868][T31062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.081162][T31208] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1172.127139][T31210] netlink: 428 bytes leftover after parsing attributes in process `syz.1.6369'. [ 1172.190906][T31062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.201005][T31210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6369'. [ 1172.217462][T21849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.224998][T21849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.300599][T21849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.307811][T21849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1172.471968][T31213] tipc: Enabled bearer , priority 0 [ 1172.711904][T31220] syzkaller0: entered promiscuous mode [ 1172.717443][T31220] syzkaller0: entered allmulticast mode [ 1172.727301][T31213] tipc: Resetting bearer [ 1172.736944][T31212] tipc: Resetting bearer [ 1172.830859][T31212] tipc: Disabling bearer [ 1173.234998][T31240] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1173.257567][T31240] bond3 (unregistering): Released all slaves [ 1173.446780][T31250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6379'. [ 1173.470779][T28561] Bluetooth: hci3: command tx timeout [ 1173.489177][T31251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6378'. [ 1173.653043][T31248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6378'. [ 1173.808125][T31251] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1173.880625][T31251] bond1 (unregistering): Released all slaves [ 1173.915082][T31258] netlink: 'syz.3.6380': attribute type 4 has an invalid length. [ 1173.960185][T31259] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6381'. [ 1174.176021][T21844] hsr_slave_0: left promiscuous mode [ 1174.189710][T21844] hsr_slave_1: left promiscuous mode [ 1174.916119][T31266] syzkaller0: refused to change device tx_queue_len [ 1175.066176][T31271] bond3: entered allmulticast mode [ 1175.168276][T31062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1175.482715][T31288] tipc: Enabling of bearer rejected, failed to enable media [ 1175.527643][T21844] IPVS: stop unused estimator thread 0... [ 1175.890674][T31315] Bluetooth: MGMT ver 1.23 [ 1176.262178][T31062] veth0_vlan: entered promiscuous mode [ 1176.306899][T31062] veth1_vlan: entered promiscuous mode [ 1176.373148][T31062] veth0_macvtap: entered promiscuous mode [ 1176.386957][T31062] veth1_macvtap: entered promiscuous mode [ 1176.425963][T31330] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6397'. [ 1176.435937][T31330] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6397'. [ 1176.437570][T31062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1176.468036][T31062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1176.501657][T21844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.527404][T21844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.562733][T21844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.614541][T21844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.690330][T31344] bridge1: entered allmulticast mode [ 1176.812072][T31347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6401'. [ 1176.848274][T31347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6401'. [ 1176.869721][T21837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.881035][T21837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.999490][T21841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1177.018373][T31355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6403'. [ 1177.038197][T21841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.272264][T31362] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6405'. [ 1177.300159][T31364] xt_l2tp: v2 doesn't support IP mode [ 1177.472182][T31371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6407'. [ 1177.632412][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1177.790539][T31391] x_tables: duplicate underflow at hook 2 [ 1177.891912][T31389] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6412'. [ 1178.291077][T31397] bond1: Removing last arp target with arp_interval on [ 1178.362042][T31404] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1178.487388][T31409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6418'. [ 1178.599826][T31415] batadv_slave_1: entered promiscuous mode [ 1178.690084][T31419] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1178.733791][T31427] netlink: 'syz.1.6420': attribute type 23 has an invalid length. [ 1178.937293][T31413] batadv_slave_1: left promiscuous mode [ 1179.234301][T31446] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20001 [ 1179.506121][T31453] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6430'. [ 1179.665554][T31454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6429'. [ 1180.133679][T31476] netlink: 'syz.4.6436': attribute type 5 has an invalid length. [ 1182.435382][T31464] lo speed is unknown, defaulting to 1000 [ 1182.617183][T31485] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1182.936101][T31490] lo speed is unknown, defaulting to 1000 [ 1182.943301][T31464] lo speed is unknown, defaulting to 1000 [ 1182.953811][T31464] lo speed is unknown, defaulting to 1000 [ 1183.138568][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 1183.146803][ C1] lec:lec_tx_timeout: lec0 [ 1183.152673][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1183.241426][T31490] lo speed is unknown, defaulting to 1000 [ 1183.475713][T31490] lo speed is unknown, defaulting to 1000 [ 1184.608979][T31513] mac80211_hwsim hwsim84 wlan0: entered allmulticast mode [ 1185.302933][T31526] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6448'. [ 1185.312478][T31526] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6448'. [ 1185.527062][T31529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6449'. [ 1185.654382][T31536] netlink: 'syz.4.6450': attribute type 1 has an invalid length. [ 1185.746962][T31535] lo speed is unknown, defaulting to 1000 [ 1186.201283][T31552] xt_l2tp: invalid flags combination: 0 [ 1186.342868][T31535] lo speed is unknown, defaulting to 1000 [ 1186.384331][T31535] lo speed is unknown, defaulting to 1000 [ 1186.770575][T31579] netlink: 'syz.0.6465': attribute type 39 has an invalid length. [ 1187.149545][T31585] lo speed is unknown, defaulting to 1000 [ 1187.560595][T31585] lo speed is unknown, defaulting to 1000 [ 1187.575119][T31585] lo speed is unknown, defaulting to 1000 [ 1187.575517][T31605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6473'. [ 1187.590545][T31607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6473'. [ 1187.811968][T31611] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6474'. [ 1187.837453][T31611] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6474'. [ 1187.886564][T31611] netlink: 'syz.2.6474': attribute type 29 has an invalid length. [ 1187.917988][T31611] netlink: 'syz.2.6474': attribute type 29 has an invalid length. [ 1187.927576][T31611] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6474'. [ 1187.937415][T31611] unsupported nla_type 58 [ 1187.943999][T31611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6474'. [ 1187.961936][T31618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6476'. [ 1188.178687][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1188.186883][ C1] lec:lec_tx_timeout: lec0 [ 1189.604988][T31670] netlink: 'syz.4.6488': attribute type 11 has an invalid length. [ 1190.415416][T31711] netlink: 'syz.2.6498': attribute type 1 has an invalid length. [ 1190.615088][T31711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1190.644268][T31721] __nla_validate_parse: 8 callbacks suppressed [ 1190.644290][T31721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6500'. [ 1190.696230][T31714] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1190.705449][T31716] netem: incorrect gi model size [ 1190.726473][T31716] netem: change failed [ 1190.767730][T31711] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1190.776288][T31711] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1191.030540][T31735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6506'. [ 1191.057641][T31735] openvswitch: netlink: Message has 2 unknown bytes. [ 1191.089413][T31735] xt_ipcomp: unknown flags 1D [ 1191.099951][T31744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6508'. [ 1191.144860][T31744] bond2: option broadcast_neighbor: invalid value (30) [ 1191.182722][T31748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6507'. [ 1191.321780][T31763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6507'. [ 1191.322981][T31744] bond2 (unregistering): Released all slaves [ 1191.337395][T31763] netlink: 348 bytes leftover after parsing attributes in process `syz.3.6507'. [ 1191.337431][T31763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6507'. [ 1191.337448][T31763] netlink: 348 bytes leftover after parsing attributes in process `syz.3.6507'. [ 1191.337528][T31763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6507'. [ 1191.397073][T31754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1191.836006][T31777] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.871077][T31797] netlink: 'syz.3.6519': attribute type 1 has an invalid length. [ 1191.962515][T31797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1192.023587][T31802] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1192.033889][T31802] bond1: (slave batadv1): making interface the new active one [ 1192.044354][T31802] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1192.109395][T31777] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.171960][T31797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6519'. [ 1192.207523][T31797] bond1 (unregistering): (slave batadv1): Releasing active interface [ 1192.235811][T31797] bond1 (unregistering): Released all slaves [ 1192.336313][T31777] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.434121][T31777] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.455079][T31822] tipc: Enabling of bearer rejected, failed to enable media [ 1192.591114][T21837] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.622229][T21837] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.648159][T21849] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.685517][T21849] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.745861][T31833] netlink: 'syz.3.6527': attribute type 1 has an invalid length. [ 1193.275881][T31857] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1193.295742][T31857] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1193.346933][T31862] ipvlan2: entered promiscuous mode [ 1193.380598][T31870] netlink: 'syz.4.6536': attribute type 13 has an invalid length. [ 1193.396219][T31870] netlink: 'syz.4.6536': attribute type 17 has an invalid length. [ 1193.546976][T31869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.554671][T31869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.674589][T31869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1193.687567][T31869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1193.826869][T31870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.836002][T31870] 8021q: adding VLAN 0 to HW filter on device team0 [ 1193.847462][T31870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1193.893733][T31885] tipc: Started in network mode [ 1193.899325][T31885] tipc: Node identity 164b6bb05b0e, cluster identity 4711 [ 1193.906740][T31885] tipc: Enabled bearer , priority 0 [ 1193.914238][T21841] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.939490][T21835] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.973414][T21835] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.983878][T21835] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.006688][T31885] tipc: Disabling bearer [ 1194.489258][T31910] pimreg: entered allmulticast mode [ 1194.564314][T31911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1194.694756][T31920] netlink: 'syz.2.6548': attribute type 11 has an invalid length. [ 1194.714546][T31920] netlink: 'syz.2.6548': attribute type 11 has an invalid length. [ 1194.774467][T31919] lo speed is unknown, defaulting to 1000 [ 1194.892598][T31925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1195.180673][T31936] x_tables: duplicate underflow at hook 1 [ 1195.244379][T31919] lo speed is unknown, defaulting to 1000 [ 1195.252521][T31919] lo speed is unknown, defaulting to 1000 [ 1195.545686][T31939] netlink: 'syz.2.6555': attribute type 18 has an invalid length. [ 1195.570950][T31939] netlink: 'syz.2.6555': attribute type 18 has an invalid length. [ 1195.579211][T21837] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.593468][T21837] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.614393][T21837] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.659289][T21837] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.788598][T31946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1195.890323][T31950] __nla_validate_parse: 10 callbacks suppressed [ 1195.890348][T31950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6557'. [ 1196.349134][T31962] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1196.484918][T31969] netlink: 'syz.0.6562': attribute type 8 has an invalid length. [ 1196.493052][T31967] netlink: 'syz.0.6562': attribute type 8 has an invalid length. [ 1196.939621][T31976] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6558'. [ 1196.949004][T31987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6566'. [ 1197.316044][T31971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6563'. [ 1197.491124][T32006] delete_channel: no stack [ 1197.736207][T32026] netlink: 'syz.0.6575': attribute type 9 has an invalid length. [ 1197.759845][T32026] netlink: 'syz.0.6575': attribute type 11 has an invalid length. [ 1197.767723][T32026] netlink: 204124 bytes leftover after parsing attributes in process `syz.0.6575'. [ 1197.944173][T32033] "syz.3.6579" (32033) uses obsolete ecb(arc4) skcipher [ 1198.355860][T32053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6584'. [ 1198.356196][T32044] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1198.381883][T32054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6583'. [ 1198.412819][T32044] bond4: (slave lo): Enslaving as an active interface with an up link [ 1198.424588][T32044] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1198.476697][ T12] dummy0: left allmulticast mode [ 1198.505338][ T12] dummy0: left promiscuous mode [ 1198.515159][ T12] bridge0: port 4(dummy0) entered disabled state [ 1198.524862][ T12] bridge0: port 3(hsr0) entered disabled state [ 1198.544838][ T12] bridge_slave_1: left allmulticast mode [ 1198.555408][ T12] bridge_slave_1: left promiscuous mode [ 1198.565685][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.642556][ T12] bridge_slave_0: left allmulticast mode [ 1198.649940][ T12] bridge_slave_0: left promiscuous mode [ 1198.655968][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.715834][ T12] dvmrp0: left allmulticast mode [ 1199.204220][ T12] gretap0 (unregistering): left promiscuous mode [ 1199.247287][ T12] bond7 (unregistering): (slave gretap2): Releasing backup interface [ 1199.366818][ T12] bond12 (unregistering): (slave geneve3): Releasing active interface [ 1199.424471][ T12] bond11 (unregistering): (slave geneve2): Releasing active interface [ 1200.317772][ T12] bond0 (unregistering): left promiscuous mode [ 1200.324292][ T12] bond_slave_0: left promiscuous mode [ 1200.331870][ T12] bond_slave_1: left promiscuous mode [ 1200.354656][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1200.367403][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1200.378245][ T12] bond0 (unregistering): Released all slaves [ 1200.394546][ T12] bond1 (unregistering): (slave veth3): Releasing active interface [ 1200.405516][ T12] bond1 (unregistering): Released all slaves [ 1200.443877][ T12] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 1200.456922][ T12] bond2 (unregistering): Released all slaves [ 1200.487327][ T12] bond3 (unregistering): (slave veth7): Releasing active interface [ 1200.495820][ T12] batadv1: entered promiscuous mode [ 1200.504173][ T12] bond3 (unregistering): (slave batadv1): Releasing active interface [ 1200.518080][ T12] bond3 (unregistering): Released all slaves [ 1200.544345][ T12] bond4 (unregistering): Released all slaves [ 1200.584777][ T12] bond5 (unregistering): (slave veth13): Releasing backup interface [ 1200.594608][ T12] bond5 (unregistering): Released all slaves [ 1200.617010][ T12] bond6 (unregistering): Released all slaves [ 1200.642599][ T12] bond7 (unregistering): (slave bond8): Releasing backup interface [ 1200.667566][ T12] bond7 (unregistering): Released all slaves [ 1200.688191][ T12] bond8 (unregistering): Released all slaves [ 1200.708385][ T12] bond9 (unregistering): Released all slaves [ 1200.741805][ T12] bond10 (unregistering): Released all slaves [ 1200.750360][T32030] Set syz1 is full, maxelem 65536 reached [ 1200.774229][ T12] bond11 (unregistering): Released all slaves [ 1200.795055][ T12] bond12 (unregistering): Released all slaves [ 1200.965313][ T12] ÃM¯”ÛÓó: left promiscuous mode [ 1201.052547][T32080] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6587'. [ 1201.094678][ T12] tipc: Disabling bearer [ 1201.112504][ T12] tipc: Left network mode [ 1201.191639][T32082] lo speed is unknown, defaulting to 1000 [ 1201.452618][T32100] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6593'. [ 1201.788765][T32110] netlink: 'syz.4.6596': attribute type 1 has an invalid length. [ 1204.026126][T32105] netlink: 316 bytes leftover after parsing attributes in process `syz.0.6594'. [ 1204.184869][T32110] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1204.187459][T32114] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1204.238983][T32082] lo speed is unknown, defaulting to 1000 [ 1204.304249][T32134] wg1: entered promiscuous mode [ 1204.309674][T32134] wg1: entered allmulticast mode [ 1204.325363][T32082] lo speed is unknown, defaulting to 1000 [ 1204.371219][T32113] lo speed is unknown, defaulting to 1000 [ 1204.732639][T32151] veth1: entered promiscuous mode [ 1204.737746][T32151] veth1: entered allmulticast mode [ 1204.839902][T32151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6604'. [ 1205.030016][T32164] netlink: 'syz.4.6607': attribute type 5 has an invalid length. [ 1205.250600][T32175] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1205.303324][T32182] netlink: 'syz.0.6609': attribute type 7 has an invalid length. [ 1205.403053][T32113] lo speed is unknown, defaulting to 1000 [ 1205.424816][T32113] lo speed is unknown, defaulting to 1000 [ 1205.566411][T32188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6611'. [ 1205.591827][T32185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6611'. [ 1205.598694][T32188] netlink: 'syz.2.6611': attribute type 1 has an invalid length. [ 1205.615645][T32188] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6611'. [ 1205.630052][T32189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6611'. [ 1205.648895][T32185] netlink: 'syz.2.6611': attribute type 1 has an invalid length. [ 1205.693235][T32185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6611'. [ 1205.813345][T32191] netlink: 'syz.4.6612': attribute type 4 has an invalid length. [ 1205.841667][T32191] netlink: 'syz.4.6612': attribute type 4 has an invalid length. [ 1206.104299][T32200] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6616'. [ 1206.140158][T32200] netlink: 'syz.2.6616': attribute type 1 has an invalid length. [ 1206.266178][T32215] netlink: 36752 bytes leftover after parsing attributes in process `syz.2.6616'. [ 1206.713522][T32229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6623'. [ 1208.770098][T32229] hsr_slave_0: left promiscuous mode [ 1208.782483][T32229] hsr_slave_1: left promiscuous mode [ 1208.872862][T32242] siw: device registration error -23 [ 1208.953583][ T12] hsr_slave_0: left promiscuous mode [ 1208.980632][ T12] team0 (unregistering): Port device veth19 removed [ 1209.187855][T32259] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6630'. [ 1209.285420][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1209.316279][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1209.524774][T32263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6632'. [ 1209.583879][T32267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6631'. [ 1209.748160][T32267] bond2: Removing last arp target with arp_interval on [ 1209.756429][T32274] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1210.137912][T32281] ip6erspan0: entered promiscuous mode [ 1210.192894][ T12] IPVS: stop unused estimator thread 0... [ 1210.412401][T32297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6641'. [ 1210.431666][T17409] Bluetooth: hci2: command 0x0406 tx timeout [ 1210.491923][T32299] netlink: 'syz.0.6642': attribute type 9 has an invalid length. [ 1210.506152][T32299] netlink: 'syz.0.6642': attribute type 11 has an invalid length. [ 1210.515313][T32299] netlink: 'syz.0.6642': attribute type 12 has an invalid length. [ 1210.523769][T32299] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.6642'. [ 1210.556434][T32299] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6642'. [ 1210.666812][T32308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6646'. [ 1210.763435][T32307] syzkaller0: entered promiscuous mode [ 1210.772462][T32307] syzkaller0: entered allmulticast mode [ 1210.854433][T32315] netlink: 'syz.2.6647': attribute type 1 has an invalid length. [ 1211.050367][T32321] batadv0: entered promiscuous mode [ 1211.056632][T32321] vlan2: entered promiscuous mode [ 1211.113162][T32327] sctp: [Deprecated]: syz.2.6652 (pid 32327) Use of int in max_burst socket option deprecated. [ 1211.113162][T32327] Use struct sctp_assoc_value instead [ 1211.170791][T32329] netlink: 'syz.1.6653': attribute type 1 has an invalid length. [ 1211.188726][T32329] nbd: couldn't find device at index -427251215 [ 1211.553873][T32346] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1211.780118][T32364] __nla_validate_parse: 2 callbacks suppressed [ 1211.780141][T32364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6664'. [ 1211.807799][T32364] netlink: 'syz.1.6664': attribute type 21 has an invalid length. [ 1211.831755][T32362] team0 (unregistering): Port device team_slave_0 removed [ 1211.876052][T32362] team0 (unregistering): Port device team_slave_1 removed [ 1212.237251][T32395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6671'. [ 1212.383989][T32396] lo speed is unknown, defaulting to 1000 [ 1212.653926][T32416] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6676'. [ 1213.297028][T32443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6681'. [ 1213.331621][T32443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6681'. [ 1213.336441][T32445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6681'. [ 1213.378178][T32396] lo speed is unknown, defaulting to 1000 [ 1213.388127][T32445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6681'. [ 1213.399964][T32396] lo speed is unknown, defaulting to 1000 [ 1213.784645][T32457] bond3 (unregistering): Released all slaves [ 1213.803403][T32468] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20003 [ 1213.927785][T32462] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6684'. [ 1213.947191][ T5488] veth1_macvtap: left promiscuous mode [ 1214.201438][T32467] siw: device registration error -23 [ 1214.322209][T32487] xt_hashlimit: size too large, truncated to 1048576 [ 1214.533733][T32495] netlink: 'syz.3.6690': attribute type 21 has an invalid length. [ 1214.553922][T32495] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6690'. [ 1214.601793][T32496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.609085][T32496] bridge0: port 1(bridge_slave_0) entered listening state [ 1214.622112][T32495] netlink: 'syz.3.6690': attribute type 21 has an invalid length. [ 1214.638560][T32495] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6690'. [ 1214.729184][T32496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1216.169101][T32554] lo speed is unknown, defaulting to 1000 [ 1216.218015][T32567] netlink: 'syz.1.6709': attribute type 13 has an invalid length. [ 1216.804542][T32554] lo speed is unknown, defaulting to 1000 [ 1216.837684][T21835] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.848390][T32554] lo speed is unknown, defaulting to 1000 [ 1216.869352][T21835] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.888388][T21835] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.914249][T21835] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1217.166898][T32608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1217.174357][T32608] IPv6: NLM_F_CREATE should be set when creating new route [ 1217.209714][T32611] netlink: 'syz.0.6720': attribute type 1 has an invalid length. [ 1217.347223][T32617] x_tables: duplicate entry at hook 3 [ 1217.432217][T32611] bond0: entered promiscuous mode [ 1217.440135][T32611] bond0: entered allmulticast mode [ 1217.449244][T32611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.795429][T32651] netlink: 'syz.1.6733': attribute type 21 has an invalid length. [ 1218.829995][T32651] __nla_validate_parse: 4 callbacks suppressed [ 1218.830019][T32651] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6733'. [ 1218.962128][T32656] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6734'. [ 1219.319858][T32676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6739'. [ 1219.375572][T32673] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6738'. [ 1219.423058][T32673] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6738'. [ 1219.500876][T32673] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6738'. [ 1219.831335][T32680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.839205][T32680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.996494][T32680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1220.021742][T32680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1220.214317][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1220.224897][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.268684][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1220.277796][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.308992][T32691] lo speed is unknown, defaulting to 1000 [ 1220.314823][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1220.342568][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.369248][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1220.384923][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.535614][T32712] netlink: 180 bytes leftover after parsing attributes in process `syz.3.6750'. [ 1220.586230][T32712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6750'. [ 1220.597868][T32714] netlink: 'syz.4.6751': attribute type 6 has an invalid length. [ 1220.606265][T32714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6751'. [ 1220.907575][T32691] lo speed is unknown, defaulting to 1000 [ 1220.942059][T32691] lo speed is unknown, defaulting to 1000 [ 1221.129162][T32724] netlink: 'syz.3.6755': attribute type 21 has an invalid length. [ 1221.139891][T32724] netlink: 'syz.3.6755': attribute type 22 has an invalid length. [ 1221.148633][T32724] netlink: 'syz.3.6755': attribute type 23 has an invalid length. [ 1221.209817][T32724] netlink: 'syz.3.6755': attribute type 25 has an invalid length. [ 1221.217780][T32724] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6755'. [ 1221.392748][T32727] Can't find ip_set type bitmap:ip,mac [ 1222.175058][T32759] wg1: entered promiscuous mode [ 1222.198865][T32759] wg1: entered allmulticast mode [ 1222.881603][ T331] netlink: set zone limit has 4 unknown bytes [ 1223.130414][ T329] siw: device registration error -23 [ 1223.302601][ T347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1223.374786][ T349] tipc: Enabled bearer , priority 0 [ 1223.399775][ T349] syzkaller0: entered promiscuous mode [ 1223.436294][ T349] syzkaller0: entered allmulticast mode [ 1223.624599][ T348] tipc: Resetting bearer [ 1223.769842][ T348] tipc: Disabling bearer [ 1223.859899][ T374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1224.031471][ T378] __nla_validate_parse: 1 callbacks suppressed [ 1224.031503][ T378] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6780'. [ 1224.208323][ T393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6784'. [ 1224.225801][ T394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6783'. [ 1224.461776][ T29] audit: type=1800 audit(1773595279.619:13): pid=390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6782" name="memory.events" dev="tmpfs" ino=690 res=0 errno=0 [ 1224.930820][ T431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6789'. [ 1225.041850][ T431] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1225.251945][ T448] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1225.279086][ T441] lo speed is unknown, defaulting to 1000 [ 1225.319798][ T438] 8021q: VLANs not supported on gre0 [ 1225.326348][ T452] tipc: Enabled bearer , priority 0 [ 1225.349321][ T452] syzkaller0: entered promiscuous mode [ 1225.365116][ T452] syzkaller0: entered allmulticast mode [ 1225.452231][ T452] tipc: Resetting bearer [ 1225.492694][ T449] tipc: Resetting bearer [ 1225.554852][ T449] tipc: Disabling bearer [ 1225.616721][ T462] bridge0: entered allmulticast mode [ 1225.754946][ T460] syzkaller0: entered promiscuous mode [ 1225.760681][ T460] syzkaller0: entered allmulticast mode [ 1228.334516][ T441] lo speed is unknown, defaulting to 1000 [ 1228.343701][ T441] lo speed is unknown, defaulting to 1000 [ 1228.414325][ T487] lo speed is unknown, defaulting to 1000 [ 1228.777064][ T519] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6805'. [ 1228.961966][ T530] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6808'. [ 1229.139603][ T540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6810'. [ 1229.148771][ T540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6810'. [ 1229.173772][ T540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6810'. [ 1229.193170][ T540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6810'. [ 1229.313595][ T487] lo speed is unknown, defaulting to 1000 [ 1229.334687][ T487] lo speed is unknown, defaulting to 1000 [ 1229.562227][T24238] IPVS: starting estimator thread 0... [ 1229.689113][ T552] IPVS: using max 27 ests per chain, 64800 per kthread [ 1229.983326][ T566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6815'. [ 1230.096781][ T570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6816'. [ 1230.147841][ T570] nbd: must specify at least one socket [ 1230.624500][ T595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6821'. [ 1230.887908][ T603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6823'. [ 1230.928007][ T605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6824'. [ 1231.497223][ T627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6829'. [ 1231.608077][ T627] : entered promiscuous mode [ 1231.655253][ T629] openvswitch: : Dropping previously announced user features [ 1231.655267][ T631] lo speed is unknown, defaulting to 1000 [ 1232.294757][ T631] lo speed is unknown, defaulting to 1000 [ 1232.294811][ T640] lo speed is unknown, defaulting to 1000 [ 1232.311300][ T631] lo speed is unknown, defaulting to 1000 [ 1232.410301][ T656] netlink: 'syz.4.6836': attribute type 1 has an invalid length. [ 1232.418762][ T656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1232.758200][ T663] netlink: 'syz.4.6838': attribute type 2 has an invalid length. [ 1232.794724][ T663] !: entered promiscuous mode [ 1232.803215][ T660] netlink: 'syz.4.6838': attribute type 2 has an invalid length. [ 1232.891039][ T651] lo speed is unknown, defaulting to 1000 [ 1232.893339][ T640] lo speed is unknown, defaulting to 1000 [ 1233.037778][ T640] lo speed is unknown, defaulting to 1000 [ 1234.159300][ T646] lo speed is unknown, defaulting to 1000 [ 1234.165243][ T651] lo speed is unknown, defaulting to 1000 [ 1234.301186][ T651] lo speed is unknown, defaulting to 1000 [ 1234.478133][ T698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.819207][ T698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.836676][ T698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.928420][ T698] mac80211_hwsim hwsim84 wlan0: left allmulticast mode [ 1234.951374][ T711] x_tables: duplicate underflow at hook 1 [ 1234.962228][ T698] bond1: left promiscuous mode [ 1234.969091][ T698] bond2: left promiscuous mode [ 1234.975784][ T698] vti0: left promiscuous mode [ 1234.992427][ T698] bond0: left promiscuous mode [ 1234.997462][ T698] bond0: left allmulticast mode [ 1235.081220][ T646] lo speed is unknown, defaulting to 1000 [ 1235.150390][ T6367] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.171432][ T6367] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.190469][ T646] lo speed is unknown, defaulting to 1000 [ 1235.191015][ T6367] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.273172][ T6367] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.718391][ T745] netlink: 'syz.0.6852': attribute type 2 has an invalid length. [ 1235.768232][ T745] !: entered promiscuous mode [ 1237.006618][ T795] __nla_validate_parse: 4 callbacks suppressed [ 1237.006640][ T795] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6863'. [ 1237.521797][ T823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6869'. [ 1237.567325][ T817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6867'. [ 1237.689370][ T819] veth3: entered promiscuous mode [ 1237.743503][ T829] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1238.283022][ T862] vlan2: entered promiscuous mode [ 1238.319128][ T862] geneve1: entered promiscuous mode [ 1238.324698][ T862] vlan2: entered allmulticast mode [ 1238.393150][ T862] geneve1: entered allmulticast mode [ 1238.468186][ T855] syzkaller0: entered promiscuous mode [ 1238.482545][ T855] syzkaller0: entered allmulticast mode [ 1238.661585][ T878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6881'. [ 1239.069218][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1239.263964][ T899] tipc: Enabled bearer , priority 0 [ 1239.382347][ T907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6880'. [ 1239.433747][ T875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6880'. [ 1239.456597][ T899] tipc: Resetting bearer [ 1239.496504][ T890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6883'. [ 1239.560375][ T900] syzkaller0: entered promiscuous mode [ 1239.582998][ T900] syzkaller0: entered allmulticast mode [ 1239.651821][ T889] tipc: Resetting bearer [ 1239.759997][ T889] tipc: Disabling bearer [ 1240.004016][ T927] lo speed is unknown, defaulting to 1000 [ 1240.066434][ T943] netlink: 'syz.4.6891': attribute type 1 has an invalid length. [ 1240.125035][ T943] bond2: entered promiscuous mode [ 1240.139455][ T943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1240.173254][ T946] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1240.701727][T21837] bridge_slave_1: left allmulticast mode [ 1240.758863][ T975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6898'. [ 1240.759838][T21837] bridge_slave_1: left promiscuous mode [ 1240.788812][T21837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.792006][ T975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6898'. [ 1240.828069][ T975] netlink: 58 bytes leftover after parsing attributes in process `syz.2.6898'. [ 1240.873791][T21837] macsec0: left allmulticast mode [ 1241.156803][T21837] tipc: Disabling bearer [ 1241.248992][T21837] bond2 (unregistering): (slave bridge1): Releasing active interface [ 1241.362586][T21837] bond0 (unregistering): left promiscuous mode [ 1241.369479][T21837] : left promiscuous mode [ 1241.374221][T21837] bond_slave_1: left promiscuous mode [ 1241.380461][T21837] dummy0: left promiscuous mode [ 1241.391281][T21837] bond0 (unregistering): (slave 30): Releasing backup interface [ 1241.403818][T21837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1241.415115][T21837] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1241.425295][T21837] bond0 (unregistering): Released all slaves [ 1241.436995][T21837] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 1241.445485][T21837] wireguard0: left promiscuous mode [ 1241.452468][T21837] bond1 (unregistering): (slave wireguard1): Releasing backup interface [ 1241.462104][T21837] bond1 (unregistering): Released all slaves [ 1241.481402][T21837] bond2 (unregistering): Released all slaves [ 1241.494816][T21837] bond3 (unregistering): Released all slaves [ 1241.508643][T21837] bond4 (unregistering): Released all slaves [ 1241.561919][ T927] lo speed is unknown, defaulting to 1000 [ 1241.591168][ T927] lo speed is unknown, defaulting to 1000 [ 1241.619978][T21837] : left promiscuous mode [ 1241.710790][ T998] syzkaller1: entered promiscuous mode [ 1241.716422][ T998] syzkaller1: entered allmulticast mode [ 1241.752372][T21837] tipc: Disabling bearer [ 1241.769866][T21837] tipc: Left network mode [ 1242.096826][ T1010] lo speed is unknown, defaulting to 1000 [ 1243.045567][ T1010] lo speed is unknown, defaulting to 1000 [ 1243.054852][ T1010] lo speed is unknown, defaulting to 1000 [ 1243.911826][ T1088] tipc: Enabling of bearer rejected, failed to enable media [ 1243.952495][ T1090] tipc: Enabling of bearer rejected, failed to enable media [ 1243.995314][ T1090] netlink: 'syz.4.6922': attribute type 11 has an invalid length. [ 1244.013659][ T1090] __nla_validate_parse: 1 callbacks suppressed [ 1244.013683][ T1090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6922'. [ 1244.178674][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 1244.187076][ C1] lec:lec_tx_timeout: lec0 [ 1244.192581][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1244.362553][ T1110] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6925'. [ 1244.769177][ T1113] netlink: 'syz.4.6928': attribute type 3 has an invalid length. [ 1244.789993][ T1113] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6928'. [ 1244.937820][ T1124] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1245.009996][ T1130] xt_bpf: check failed: parse error [ 1245.017025][ T1130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6932'. [ 1245.079323][ T1131] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6932'. [ 1245.130595][ T1130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6932'. [ 1245.143441][T21837] hsr_slave_0: left promiscuous mode [ 1245.162514][T21837] hsr_slave_1: left promiscuous mode [ 1245.169800][T21837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.182310][T21837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1245.235620][T21837] pim6reg (unregistering): left allmulticast mode [ 1245.514272][ T1133] geneve3: entered promiscuous mode [ 1245.647162][ T1140] bond3: Unable to set up delay as MII monitoring is disabled [ 1245.661990][ T1140] bond3 (unregistering): Released all slaves [ 1245.750735][ T6367] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.761108][ T6367] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.818702][ T6367] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.857190][ T6367] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.897700][ T1145] lo speed is unknown, defaulting to 1000 [ 1245.947423][ T1148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6938'. [ 1245.994506][ T1148] vlan0: entered promiscuous mode [ 1246.005456][ T1148] gretap0: entered promiscuous mode [ 1246.027590][ T1149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1246.259195][T17409] Bluetooth: hci5: command 0x0406 tx timeout [ 1246.747967][ T1167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6940'. [ 1246.762676][T21837] IPVS: stop unused estimator thread 0... [ 1246.836636][ T1167] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1246.846614][ T1145] lo speed is unknown, defaulting to 1000 [ 1246.924033][ T1173] bond3: (slave veth7): Enslaving as an active interface with an up link [ 1246.971130][ T1181] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.6940'. [ 1246.981087][ T1167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6940'. [ 1247.030379][ T1182] syzkaller0: entered promiscuous mode [ 1247.054780][ T1182] syzkaller0: entered allmulticast mode [ 1247.888611][ T1234] sctp: [Deprecated]: syz.2.6958 (pid 1234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1247.888611][ T1234] Use struct sctp_sack_info instead [ 1248.446899][ T1255] lo speed is unknown, defaulting to 1000 [ 1248.602249][T21839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.609945][ T1264] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1248.624330][T21839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.636265][T21839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.649789][T21839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.766849][ T1272] netlink: 'syz.4.6970': attribute type 2 has an invalid length. [ 1248.776521][ T1252] lo speed is unknown, defaulting to 1000 [ 1248.783833][ T1255] lo speed is unknown, defaulting to 1000 [ 1248.900034][T28561] Bluetooth: hci3: command tx timeout [ 1249.208537][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1249.216677][ C1] lec:lec_tx_timeout: lec0 [ 1249.318371][ T1252] lo speed is unknown, defaulting to 1000 [ 1249.745679][ T1298] lo speed is unknown, defaulting to 1000 [ 1249.795691][ T1303] __nla_validate_parse: 9 callbacks suppressed [ 1249.795712][ T1303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6979'. [ 1250.044867][ T1311] tipc: Started in network mode [ 1250.051283][ T1311] tipc: Node identity 4ea388e12dfc, cluster identity 4711 [ 1250.068392][ T1311] tipc: Enabled bearer , priority 0 [ 1250.086345][ T1311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1250.126790][ T1311] syzkaller0: entered promiscuous mode [ 1250.144424][ T1311] syzkaller0: entered allmulticast mode [ 1250.227744][ T1310] tipc: Resetting bearer [ 1250.238055][ T1309] tipc: Resetting bearer [ 1250.285960][ T1309] tipc: Disabling bearer [ 1250.309366][ T1298] lo speed is unknown, defaulting to 1000 [ 1250.475790][ T1319] syzkaller1: entered promiscuous mode [ 1250.491091][ T1319] syzkaller1: entered allmulticast mode [ 1250.506515][ T1321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6983'. [ 1250.982153][ T1340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6988'. [ 1251.973505][ T1363] syzkaller1: entered promiscuous mode [ 1252.003468][ T1363] syzkaller1: entered allmulticast mode [ 1252.702302][ T1395] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7001'. [ 1252.719595][ T1395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7001'. [ 1252.818975][ T1397] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1252.851938][ T1397] bond3: (slave lo): Enslaving as an active interface with an up link [ 1252.897506][ T1405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7003'. [ 1252.899263][ T1397] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1252.998908][ T1405] vlan0: entered promiscuous mode [ 1253.013133][ T1405] bridge0: entered promiscuous mode [ 1253.064056][ T1412] netlink: 'syz.0.7003': attribute type 11 has an invalid length. [ 1253.072123][ T1412] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.7003'. [ 1253.545726][ T1436] xt_CT: No such helper "syz0" [ 1253.725763][ T1459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7019'. [ 1253.738214][ T1458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7019'. [ 1253.871966][ T1471] 8021q: VLANs not supported on nlmon0 [ 1253.912692][ T1473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7021'. [ 1254.383600][ T1495] lo speed is unknown, defaulting to 1000 [ 1254.776131][ T1503] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1254.827656][ T1507] __nla_validate_parse: 8 callbacks suppressed [ 1254.827678][ T1507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7034'. [ 1254.841637][ T1495] lo speed is unknown, defaulting to 1000 [ 1254.849652][ T1507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7034'. [ 1255.124546][ T1525] veth1_to_team: entered promiscuous mode [ 1255.139691][ T1525] veth1_to_team: left promiscuous mode [ 1255.264125][ T1532] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7039'. [ 1255.851025][ T1552] netlink: 'syz.4.7045': attribute type 1 has an invalid length. [ 1255.873325][ T1552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7045'. [ 1255.943360][ T1556] netlink: 'syz.0.7047': attribute type 1 has an invalid length. [ 1256.013328][ T1554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7046'. [ 1256.139151][ T1563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7048'. [ 1256.197111][ T1563] netlink: 'syz.4.7048': attribute type 21 has an invalid length. [ 1256.252368][ T1565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7048'. [ 1256.345926][ T1567] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1256.384999][ T1572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7050'. [ 1256.398905][ T1569] netlink: 'syz.2.7049': attribute type 1 has an invalid length. [ 1256.406709][ T1569] netlink: 174 bytes leftover after parsing attributes in process `syz.2.7049'. [ 1256.474012][ T1567] netlink: 'syz.2.7049': attribute type 1 has an invalid length. [ 1256.504245][ T1582] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7051'. [ 1256.521695][ T1578] lo speed is unknown, defaulting to 1000 [ 1256.542006][ T1582] netlink: 'syz.1.7051': attribute type 6 has an invalid length. [ 1256.751265][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a279000: rx timeout, send abort [ 1256.858243][ T1578] lo speed is unknown, defaulting to 1000 [ 1257.251421][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a278c00: rx timeout, send abort [ 1257.260078][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a279000: abort rx timeout. Force session deactivation [ 1257.557555][ T1628] netlink: 'syz.0.7064': attribute type 3 has an invalid length. [ 1257.759875][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a278c00: abort rx timeout. Force session deactivation [ 1258.031269][ T1639] lo speed is unknown, defaulting to 1000 [ 1260.368006][ T1659] __nla_validate_parse: 11 callbacks suppressed [ 1260.368028][ T1659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7070'. [ 1260.396796][ T1645] lo speed is unknown, defaulting to 1000 [ 1260.402837][ T1639] lo speed is unknown, defaulting to 1000 [ 1260.710754][ T1669] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7073'. [ 1260.861311][ T1677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7074'. [ 1260.911656][ T1678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7073'. [ 1260.927951][ T1678] nbd: nbd64 already in use [ 1261.170021][ T1645] lo speed is unknown, defaulting to 1000 [ 1261.181042][ T866] udevd[866]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1261.291246][ T1690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7078'. [ 1261.619274][T17409] Bluetooth: hci4: command 0x0406 tx timeout [ 1261.822104][ T1698] bond3: option resend_igmp: invalid value (2878) [ 1261.838706][ T1698] bond3: option resend_igmp: allowed values 0 - 255 [ 1261.851513][ T1698] bond3 (unregistering): Released all slaves [ 1262.043164][ T1705] netlink: 'syz.0.7082': attribute type 2 has an invalid length. [ 1262.500449][ T1715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7085'. [ 1262.624330][ T1719] netlink: 'syz.2.7088': attribute type 3 has an invalid length. [ 1262.721520][ T1715] netlink: 'syz.1.7085': attribute type 1 has an invalid length. [ 1262.806616][ T1715] lo speed is unknown, defaulting to 1000 [ 1263.133155][ T1715] lo speed is unknown, defaulting to 1000 [ 1263.422640][ T1752] lo speed is unknown, defaulting to 1000 [ 1263.583105][ T1754] wg1: left promiscuous mode [ 1263.638989][ T1754] wg1: left allmulticast mode [ 1263.685558][ T1754] bond2: left promiscuous mode [ 1263.824080][ T1752] lo speed is unknown, defaulting to 1000 [ 1264.465967][ T1783] tipc: Enabled bearer , priority 0 [ 1264.552088][ T1783] syzkaller0: entered promiscuous mode [ 1264.557703][ T1783] syzkaller0: entered allmulticast mode [ 1264.564430][ T1783] tipc: Resetting bearer [ 1264.575764][ T1782] tipc: Resetting bearer [ 1264.752512][ T1788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7108'. [ 1264.803984][ T1789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7108'. [ 1264.924590][ T1790] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7104'. [ 1265.184207][ T1794] Timeout policy `syz1' can only be used by L3 protocol number 33024 [ 1266.812807][ T1782] tipc: Disabling bearer [ 1266.849383][ T1790] ..0ªî{X¹¦: renamed from gretap0 [ 1266.857757][ T1790] ..0ªî{X¹¦: entered allmulticast mode [ 1266.872879][ T1790] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1266.899247][T19316] tipc: Node number set to 1296395184 [ 1267.020747][ T1797] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7109'. [ 1267.037041][ T1796] delete_channel: no stack [ 1267.477613][ T1813] netlink: 'syz.2.7116': attribute type 1 has an invalid length. [ 1267.500005][ T1813] netlink: 732 bytes leftover after parsing attributes in process `syz.2.7116'. [ 1267.566522][ T1817] netlink: 'syz.3.7117': attribute type 1 has an invalid length. [ 1267.683974][ T1817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7117'. [ 1267.773180][ T1823] lo speed is unknown, defaulting to 1000 [ 1268.137349][ T1823] lo speed is unknown, defaulting to 1000 [ 1268.334109][ T1843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7124'. [ 1268.378858][ T1843] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1271.590474][ T1857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1271.950164][ T1928] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7145'. [ 1272.081665][ T1933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7146'. [ 1272.148015][ T1937] netlink: 41 bytes leftover after parsing attributes in process `syz.0.7149'. [ 1272.159680][ T1933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7146'. [ 1272.164911][ T1937] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7149'. [ 1272.168968][ T1933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7146'. [ 1272.201638][ T1933] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7146'. [ 1272.224895][ T1940] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1272.227002][ T1938] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1272.240310][ T1937] netlink: 41 bytes leftover after parsing attributes in process `syz.0.7149'. [ 1272.246363][ T1943] netlink: 'syz.4.7150': attribute type 10 has an invalid length. [ 1272.265664][ T1943] netlink: 'syz.4.7150': attribute type 10 has an invalid length. [ 1272.280667][ T1943] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1272.484482][ T1956] lo speed is unknown, defaulting to 1000 [ 1272.626994][ T1963] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.802908][ T1963] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.823416][ T1980] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7159'. [ 1272.878667][ T1982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7158'. [ 1272.888360][ T1982] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 1272.985759][ T1963] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.175431][ T1963] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.212678][ T1956] lo speed is unknown, defaulting to 1000 [ 1273.438226][ T7831] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.530764][ T7831] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.633833][ T7831] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.653088][ T7831] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.397235][ T2010] lo speed is unknown, defaulting to 1000 [ 1274.549075][ T2016] sctp: [Deprecated]: syz.2.7168 (pid 2016) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1274.549075][ T2016] Use struct sctp_sack_info instead [ 1275.001160][ T2029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.009121][ T2029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.018400][ T2038] netlink: 'syz.1.7174': attribute type 2 has an invalid length. [ 1275.228092][ T2029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1275.246546][ T2029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1275.371645][ T2010] lo speed is unknown, defaulting to 1000 [ 1275.390881][T21849] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1275.403312][T21849] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1275.412698][T21849] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1275.429590][T21849] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1275.578929][ T2053] tipc: Enabled bearer , priority 0 [ 1275.589718][ T2052] tipc: Enabling of bearer rejected, already enabled [ 1275.598645][ T2053] syzkaller0: entered promiscuous mode [ 1275.604323][ T2053] syzkaller0: entered allmulticast mode [ 1275.619621][ T2052] tipc: Resetting bearer [ 1275.627133][ T2051] tipc: Resetting bearer [ 1275.664144][ T2051] tipc: Disabling bearer [ 1275.783526][ T2056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7178'. [ 1275.880596][ T2056] syzkaller0: entered promiscuous mode [ 1275.890987][ T2056] syzkaller0: entered allmulticast mode [ 1276.036008][ T2064] netlink: 'syz.0.7180': attribute type 1 has an invalid length. [ 1276.124997][ T2064] bond4: entered promiscuous mode [ 1276.130290][ T2064] bond4: entered allmulticast mode [ 1276.135881][ T2064] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1276.207620][ T2064] macvlan0: entered promiscuous mode [ 1276.228421][ T2064] macvlan0: entered allmulticast mode [ 1276.263453][ T2064] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1276.889585][ T2101] tc_dump_action: action bad kind [ 1276.901989][ T2101] syzkaller1: entered promiscuous mode [ 1276.907971][ T2101] syzkaller1: entered allmulticast mode [ 1277.067469][ T2110] netlink: 'syz.2.7195': attribute type 1 has an invalid length. [ 1277.115586][ T2110] bond4: entered promiscuous mode [ 1277.121766][ T2110] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1277.166711][ T2110] macvtap1: entered allmulticast mode [ 1277.260723][ T2110] bond4: (slave bridge4): making interface the new active one [ 1277.273258][ T2110] bridge4: entered promiscuous mode [ 1277.279831][ T2124] __nla_validate_parse: 3 callbacks suppressed [ 1277.279851][ T2124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7198'. [ 1277.295576][ T2110] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 1277.330138][ T2126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7199'. [ 1277.708900][ T2141] mac80211_hwsim hwsim94 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1277.968145][ T2147] syzkaller1: entered promiscuous mode [ 1277.973904][ T2147] syzkaller1: entered allmulticast mode [ 1278.143683][ T2154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7206'. [ 1278.214434][ T2155] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7206'. [ 1278.390212][ T2160] netlink: 'syz.4.7208': attribute type 1 has an invalid length. [ 1278.492505][ T2160] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1278.550971][ T2163] vlan2: entered promiscuous mode [ 1278.562761][ T2163] bond3: entered promiscuous mode [ 1278.572180][ T2163] vlan2: entered allmulticast mode [ 1278.579058][ T2163] bond3: entered allmulticast mode [ 1278.597391][ T2168] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1278.606407][ T2168] bridge3: entered allmulticast mode [ 1278.651874][ T2164] bond3: (slave bridge4): making interface the new active one [ 1278.673296][ T2164] bridge4: entered promiscuous mode [ 1278.679098][ T2164] bridge4: entered allmulticast mode [ 1278.687604][ T2164] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 1278.815786][ T2166] lo speed is unknown, defaulting to 1000 [ 1278.901591][ T2179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7212'. [ 1279.050179][ T2180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7212'. [ 1279.080086][ T2180] netlink: zone id is out of range [ 1279.096766][ T2180] netlink: zone id is out of range [ 1279.098927][ T2166] lo speed is unknown, defaulting to 1000 [ 1279.107590][ T2180] netlink: zone id is out of range [ 1279.137624][ T2180] netlink: zone id is out of range [ 1279.146805][ T2180] netlink: zone id is out of range [ 1279.162677][ T2180] netlink: zone id is out of range [ 1279.188584][ T2180] netlink: zone id is out of range [ 1279.199194][ T2180] netlink: zone id is out of range [ 1279.217541][ T2180] netlink: zone id is out of range [ 1279.248727][ T2180] netlink: zone id is out of range [ 1279.451950][ T2188] netlink: 'syz.1.7215': attribute type 29 has an invalid length. [ 1279.828329][ T2203] wg1: Caught tx_queue_len zero misconfig [ 1280.285501][ T2211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7220'. [ 1280.685735][ T2226] bond4: invalid ARP target 0.0.0.0 specified for addition [ 1280.702404][ T2226] bond4: option arp_ip_target: invalid value (0) [ 1280.720391][ T2226] bond4 (unregistering): Released all slaves [ 1280.807280][ T2234] syzkaller0: entered promiscuous mode [ 1280.842858][ T2234] syzkaller0: entered allmulticast mode [ 1280.864127][ T2231] lo speed is unknown, defaulting to 1000 [ 1281.119534][ T2236] bond6 (unregistering): Released all slaves [ 1281.122702][ T2245] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7231'. [ 1281.235304][ T2245] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7231'. [ 1281.286670][ T2244] macsec1: entered promiscuous mode [ 1281.307511][ T2244] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1281.339968][ T2245] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7231'. [ 1281.435319][ T2231] lo speed is unknown, defaulting to 1000 [ 1281.790443][ T2271] lo speed is unknown, defaulting to 1000 [ 1282.063160][ T2279] xt_TCPMSS: Only works on TCP SYN packets [ 1282.104406][T17409] Bluetooth: hci1: command 0x0406 tx timeout [ 1282.314266][ T2271] lo speed is unknown, defaulting to 1000 [ 1282.728794][ T2292] __nla_validate_parse: 1 callbacks suppressed [ 1282.728816][ T2292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7244'. [ 1282.748909][ T2284] lo speed is unknown, defaulting to 1000 [ 1282.812171][ T2292] vlan3: entered promiscuous mode [ 1282.828613][ T2292] bridge0: entered promiscuous mode [ 1283.029358][ T2296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7245'. [ 1283.081088][ T2294] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7245'. [ 1283.200460][ T2308] syzkaller1: entered promiscuous mode [ 1283.206194][ T2308] syzkaller1: entered allmulticast mode [ 1283.544945][ T2313] xt_hashlimit: size too large, truncated to 1048576 [ 1283.837888][ T2295] lo speed is unknown, defaulting to 1000 [ 1284.095395][ T2337] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7255'. [ 1284.108155][ T2341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7256'. [ 1284.121928][ T2341] Cannot find del_set index 0 as target [ 1284.140440][ T2341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7256'. [ 1284.168684][ T2343] Cannot find del_set index 0 as target [ 1284.183089][ T2346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7257'. [ 1284.189410][ T2284] lo speed is unknown, defaulting to 1000 [ 1284.198355][ T2346] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7257'. [ 1284.453639][ T2353] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7260'. [ 1284.677615][ T2295] lo speed is unknown, defaulting to 1000 [ 1285.000863][ T2371] net_ratelimit: 45 callbacks suppressed [ 1285.000887][ T2371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1285.112255][ T2379] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7268'. [ 1285.139995][ T2379] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 1285.149786][ T2379] syzkaller0: entered promiscuous mode [ 1285.155313][ T2379] syzkaller0: entered allmulticast mode [ 1285.437520][ T2390] netlink: 'syz.3.7272': attribute type 1 has an invalid length. [ 1285.912620][ T2403] veth11: entered promiscuous mode [ 1285.996840][ T2410] lo speed is unknown, defaulting to 1000 [ 1286.541189][ T2442] netlink: 'syz.0.7284': attribute type 13 has an invalid length. [ 1286.610312][ T2442] gretap0: refused to change device tx_queue_len [ 1286.621985][ T2442] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1286.738305][ T2450] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1286.891186][ T2455] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 1286.952860][ T2457] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1287.200717][ T2439] lo speed is unknown, defaulting to 1000 [ 1287.201717][ T2410] lo speed is unknown, defaulting to 1000 [ 1287.401454][ T2479] netlink: 'syz.0.7291': attribute type 1 has an invalid length. [ 1289.558567][ T2439] lo speed is unknown, defaulting to 1000 [ 1289.656175][ T2486] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1289.873424][ T2490] tipc: Resetting bearer [ 1290.156410][ T2512] netlink: 'syz.0.7296': attribute type 1 has an invalid length. [ 1290.171218][ T2512] __nla_validate_parse: 5 callbacks suppressed [ 1290.171239][ T2512] netlink: 760 bytes leftover after parsing attributes in process `syz.0.7296'. [ 1290.206638][ T2512] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7296'. [ 1290.322257][ T2519] veth6: entered allmulticast mode [ 1290.905769][ T2550] xfrm1: entered allmulticast mode [ 1291.184855][ T2564] netlink: 'syz.2.7304': attribute type 9 has an invalid length. [ 1292.438252][ T2622] atomic_op ffff888052133998 conn xmit_atomic 0000000000000000 [ 1292.576916][ T2613] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7312'. [ 1293.175589][ T2670] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1293.193765][ T2670] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1293.232924][ T2670] veth0_to_bridge: entered allmulticast mode [ 1293.308918][ T2670] veth0_to_bridge: entered promiscuous mode [ 1293.412489][ T2675] lo speed is unknown, defaulting to 1000 [ 1293.567431][ T2690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7325'. [ 1293.865142][ T2709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7327'. [ 1293.889559][ T2675] lo speed is unknown, defaulting to 1000 [ 1293.889586][ T2681] lo speed is unknown, defaulting to 1000 [ 1293.971398][ T2686] delete_channel: no stack [ 1294.574683][ T2745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7335'. [ 1294.597804][ T2681] lo speed is unknown, defaulting to 1000 [ 1295.021699][ T2775] netlink: 'syz.2.7341': attribute type 8 has an invalid length. [ 1295.030367][ T2775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7341'. [ 1295.047458][ T2777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7340'. [ 1295.059112][ T2777] netlink: 'syz.1.7340': attribute type 1 has an invalid length. [ 1295.069427][ T2775] bond0: entered promiscuous mode [ 1295.090091][ T2775] bond_slave_0: entered promiscuous mode [ 1295.106308][ T2775] bond_slave_1: entered promiscuous mode [ 1295.124173][ T2775] bond0: left promiscuous mode [ 1295.129620][ T2775] bond_slave_0: left promiscuous mode [ 1295.138390][ T2775] bond_slave_1: left promiscuous mode [ 1295.285605][ T2789] xt_NFQUEUE: number of total queues is 0 [ 1295.300460][ T2793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7344'. [ 1295.330851][ T2793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7344'. [ 1295.800983][ T2807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7347'. [ 1296.299499][ T2862] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7353'. [ 1296.602898][ T2860] syzkaller1: entered promiscuous mode [ 1296.616188][ T2860] syzkaller1: entered allmulticast mode [ 1296.855901][ T2884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7357'. [ 1296.955435][ T2881] tipc: New replicast peer: 255.255.255.255 [ 1296.974097][ T2881] tipc: Enabled bearer , priority 10 [ 1296.992790][ T2889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7358'. [ 1297.172447][ T2895] tipc: Trying to set illegal importance in message [ 1297.185705][ T2895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7361'. [ 1297.201524][ T2895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7361'. [ 1297.217255][ T2895] netlink: 'syz.3.7361': attribute type 20 has an invalid length. [ 1297.255693][ T2884] netlink: 'syz.0.7357': attribute type 3 has an invalid length. [ 1297.266584][ T2897] syzkaller0: entered promiscuous mode [ 1297.272232][ T2897] syzkaller0: entered allmulticast mode [ 1297.281016][ T2897] bond0: entered promiscuous mode [ 1297.286094][ T2897] bond_slave_0: entered promiscuous mode [ 1297.294212][ T2897] bond_slave_1: entered promiscuous mode [ 1297.306036][T19316] IPVS: starting estimator thread 0... [ 1297.320200][ T2896] bond0: left promiscuous mode [ 1297.323779][ T2905] netlink: 312 bytes leftover after parsing attributes in process `syz.3.7364'. [ 1297.327380][ T2896] bond_slave_0: left promiscuous mode [ 1297.340743][ T2896] bond_slave_1: left promiscuous mode [ 1297.370473][ T2907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7363'. [ 1297.406546][ T2905] bond2: option all_slaves_active: invalid value (13) [ 1297.413600][ T2902] IPVS: using max 36 ests per chain, 86400 per kthread [ 1297.424120][ T2905] bond2 (unregistering): Released all slaves [ 1297.766805][ T2927] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1297.778809][ T2927] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1297.981669][ T2940] macvtap0: entered promiscuous mode [ 1298.090047][T19832] tipc: Node number set to 2127584550 [ 1298.453765][ T2955] sctp: [Deprecated]: syz.1.7378 (pid 2955) Use of int in maxseg socket option. [ 1298.453765][ T2955] Use struct sctp_assoc_value instead [ 1298.550147][ T2959] sit0: entered allmulticast mode [ 1298.555982][ T2959] sit0: left allmulticast mode [ 1298.583113][ T2962] netlink: 'syz.1.7380': attribute type 16 has an invalid length. [ 1298.775366][ T2970] netlink: 'syz.0.7383': attribute type 1 has an invalid length. [ 1298.822278][ T2970] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1298.876320][ T2970] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 1299.055716][ T2976] bond6: (slave bridge3): Enslaving as an active interface with a down link [ 1299.152958][ T2988] team1: entered promiscuous mode [ 1299.158325][ T2988] team1: entered allmulticast mode [ 1299.168061][ T2988] 8021q: adding VLAN 0 to HW filter on device team1 [ 1299.283165][ T2999] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1299.324912][ T2999] bond7 (unregistering): Released all slaves [ 1299.463408][ T2996] lo speed is unknown, defaulting to 1000 [ 1299.770800][ T2999] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1299.788413][ T2999] bond7 (unregistering): Released all slaves [ 1299.882435][ T3023] netlink: 'syz.3.7396': attribute type 10 has an invalid length. [ 1299.891343][ T2996] lo speed is unknown, defaulting to 1000 [ 1299.923618][ T3005] lo speed is unknown, defaulting to 1000 [ 1299.991136][ T3023] team0: Failed to send options change via netlink (err -105) [ 1300.009095][ T3023] team0: Port device dummy0 added [ 1300.057709][ T2999] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1300.147676][ T2999] bond7 (unregistering): Released all slaves [ 1300.506506][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1300.576244][ T3036] __nla_validate_parse: 7 callbacks suppressed [ 1300.576269][ T3036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7399'. [ 1300.961664][ T3005] lo speed is unknown, defaulting to 1000 [ 1301.059139][ T3044] netlink: 'syz.1.7401': attribute type 11 has an invalid length. [ 1301.114276][ T3045] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7401'. [ 1301.301758][ T3052] netlink: 364 bytes leftover after parsing attributes in process `syz.3.7403'. [ 1301.787943][ T3063] macsec1: entered promiscuous mode [ 1301.805068][ T3063] syzkaller0: entered promiscuous mode [ 1301.875358][ T3063] syzkaller0: left promiscuous mode [ 1301.993668][ T3065] syzkaller0: entered promiscuous mode [ 1302.021411][ T3065] syzkaller0: entered allmulticast mode [ 1302.182013][ T3072] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7408'. [ 1302.262222][ T3076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7409'. [ 1302.465652][ T3082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7412'. [ 1302.483159][ T3083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7412'. [ 1302.655942][ T3087] netlink: 'syz.1.7413': attribute type 1 has an invalid length. [ 1302.777075][ T3087] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1302.849822][ T3099] IPv6: Can't replace route, no match found [ 1302.863024][ T3099] IPv6: Can't replace route, no match found [ 1302.931920][ T3091] bond6: (slave ip6erspan0): making interface the new active one [ 1302.943132][ T3091] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1302.954547][ T3099] netlink: 127 bytes leftover after parsing attributes in process `syz.3.7417'. [ 1302.980286][ T3100] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7415'. [ 1303.031208][ T3104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7418'. [ 1303.312705][ T3122] IPv6: sit3: Disabled Multicast RS [ 1303.447995][ T3124] bridge5: entered promiscuous mode [ 1303.453995][ T3124] macsec1: entered promiscuous mode [ 1303.460716][ T3124] macsec1: entered allmulticast mode [ 1303.466211][ T3124] bridge5: entered allmulticast mode [ 1303.474988][ T3124] bridge5: port 1(macsec1) entered blocking state [ 1303.481747][ T3124] bridge5: port 1(macsec1) entered disabled state [ 1303.491360][ T3124] bridge5: left allmulticast mode [ 1303.496601][ T3124] bridge5: left promiscuous mode [ 1303.549017][T19316] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1303.617397][ T3132] lo speed is unknown, defaulting to 1000 [ 1303.757083][ T3132] lo speed is unknown, defaulting to 1000 [ 1304.006228][ T3137] netlink: 'syz.2.7428': attribute type 13 has an invalid length. [ 1304.023975][T21849] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1304.259004][T24234] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1304.346954][ T3154] team0 (unregistering): Port device team_slave_0 removed [ 1304.418165][ T3154] team0 (unregistering): Port device team_slave_1 removed [ 1304.463194][ T3146] 8021q: VLANs not supported on ip_vti0 [ 1304.802634][ T3170] bond2: entered promiscuous mode [ 1304.814267][ T3170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1304.837069][ T3184] netlink: 'syz.4.7438': attribute type 3 has an invalid length. [ 1304.849230][ T3174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1304.856319][ T3174] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 1304.867622][ T3174] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 1305.059861][T21839] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1305.090004][T21839] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1305.160103][T24234] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1305.852244][ T3268] netlink: 'syz.4.7460': attribute type 1 has an invalid length. [ 1305.870240][ T3268] netlink: 'syz.4.7460': attribute type 1 has an invalid length. [ 1305.904175][ T3268] netlink: 'syz.4.7460': attribute type 61 has an invalid length. [ 1305.928309][ T3268] netlink: 'syz.4.7460': attribute type 62 has an invalid length. [ 1306.178596][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5670 ms [ 1306.186849][ C1] lec:lec_tx_timeout: lec0 [ 1306.384329][T23989] lec:lec_start_xmit: lec0:No lecd attached [ 1306.470709][ T3296] netlink: 'syz.3.7470': attribute type 2 has an invalid length. [ 1306.643804][ T3307] netlink: 'syz.3.7473': attribute type 11 has an invalid length. [ 1306.700298][ T3309] C: renamed from team_slave_0 [ 1306.714097][ T3309] netlink: 'syz.2.7475': attribute type 4 has an invalid length. [ 1306.722950][ T3309] netlink: 'syz.2.7475': attribute type 1 has an invalid length. [ 1306.731143][ T3309] __nla_validate_parse: 9 callbacks suppressed [ 1306.731163][ T3309] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7475'. [ 1306.747594][ T3309] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1307.024017][ T3325] netlink: 136 bytes leftover after parsing attributes in process `syz.2.7480'. [ 1307.033947][ T3325] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1307.580316][ T3357] ipvlan2: entered promiscuous mode [ 1307.872353][ T3369] validate_nla: 1 callbacks suppressed [ 1307.872375][ T3369] netlink: 'syz.2.7494': attribute type 1 has an invalid length. [ 1307.889738][ T3367] netlink: 280 bytes leftover after parsing attributes in process `syz.2.7494'. [ 1307.956481][ T3373] IPVS: Error connecting to the multicast addr [ 1307.969814][ T3369] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.7494'. [ 1307.985807][ T3371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7496'. [ 1308.078793][ T3371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7496'. [ 1308.095300][ T3380] netlink: 165 bytes leftover after parsing attributes in process `syz.0.7499'. [ 1308.305424][ T3387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7500'. [ 1308.349329][ T3387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7500'. [ 1308.355595][ T3390] netlink: 276 bytes leftover after parsing attributes in process `syz.0.7500'. [ 1308.391183][ T3387] netlink: 'syz.0.7500': attribute type 6 has an invalid length. [ 1308.651988][ T3417] netlink: 'syz.1.7509': attribute type 8 has an invalid length. [ 1309.040647][ T3435] lo: Caught tx_queue_len zero misconfig [ 1309.228743][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1309.303174][ T3445] lo speed is unknown, defaulting to 1000 [ 1309.698114][ T3445] lo speed is unknown, defaulting to 1000 [ 1309.698774][ T3450] lo speed is unknown, defaulting to 1000 [ 1309.738792][ T3446] : renamed from bond_slave_0 [ 1310.365575][ T3472] lo speed is unknown, defaulting to 1000 [ 1310.367754][ T3450] lo speed is unknown, defaulting to 1000 [ 1310.616267][ T3479] syzkaller0: entered promiscuous mode [ 1310.622222][ T3479] syzkaller0: entered allmulticast mode [ 1311.014310][ T3472] lo speed is unknown, defaulting to 1000 [ 1311.153890][ T3489] syzkaller0: entered promiscuous mode [ 1311.169881][ T3489] syzkaller0: entered allmulticast mode [ 1311.845669][ T3507] __nla_validate_parse: 8 callbacks suppressed [ 1311.845693][ T3507] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7534'. [ 1312.155400][ T3511] netlink: 'syz.0.7535': attribute type 3 has an invalid length. [ 1312.168565][ T3511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7535'. [ 1312.178476][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 1312.186577][ C1] lec:lec_tx_timeout: lec0 [ 1312.669722][ T3518] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7536'. [ 1312.730860][ T3518] netlink: 'syz.1.7536': attribute type 1 has an invalid length. [ 1312.845931][ T3518] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1312.972523][ T3515] macvlan2: entered promiscuous mode [ 1312.996563][ T3515] macvlan2: entered allmulticast mode [ 1313.128252][ T3518] bond7: (slave ip6gretap1): making interface the new active one [ 1313.162530][ T3518] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1313.269976][ T3548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7543'. [ 1313.417874][ T3554] xt_hashlimit: size too large, truncated to 1048576 [ 1313.424385][ T3548] lo speed is unknown, defaulting to 1000 [ 1313.454642][ T3551] ipt_ECN: cannot use operation on non-tcp rule [ 1313.500168][ T3557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7544'. [ 1313.688796][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7547'. [ 1313.964339][ T3548] lo speed is unknown, defaulting to 1000 [ 1313.971559][ T3551] lo speed is unknown, defaulting to 1000 [ 1314.557529][ T3594] lo speed is unknown, defaulting to 1000 [ 1314.599915][ T3605] netlink: 'syz.1.7558': attribute type 7 has an invalid length. [ 1314.685081][ T3551] lo speed is unknown, defaulting to 1000 [ 1314.914649][ T3617] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7562'. [ 1315.243813][ T3594] lo speed is unknown, defaulting to 1000 [ 1315.292745][ T3620] batadv1: entered promiscuous mode [ 1315.298107][ T3620] batadv1: entered allmulticast mode [ 1315.436960][ T3621] batadv1: entered promiscuous mode [ 1315.456540][ T3621] batadv1: entered allmulticast mode [ 1316.304264][ T3632] ipvlan3: entered promiscuous mode [ 1317.040881][ T3638] lo speed is unknown, defaulting to 1000 [ 1317.174683][ T3657] netlink: 'syz.1.7569': attribute type 27 has an invalid length. [ 1317.778724][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1318.164312][ T3657] bridge0: left allmulticast mode [ 1318.242587][ T3657] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1318.263850][ T3657] macvtap1: left promiscuous mode [ 1318.270644][ T3657] macvtap1: left allmulticast mode [ 1318.276182][ T3657] vlan2: left promiscuous mode [ 1318.281454][ T3657] geneve1: left promiscuous mode [ 1318.286793][ T3657] vlan2: left allmulticast mode [ 1318.298382][ T3657] geneve1: left allmulticast mode [ 1318.307556][ T3657] xfrm1: left allmulticast mode [ 1318.313359][ T3657] hsr1: left promiscuous mode [ 1318.327760][ T3657] bond3: left allmulticast mode [ 1318.334893][ T3657] geneve3: left promiscuous mode [ 1318.362016][ T3657] bridge3: left allmulticast mode [ 1318.446772][ T3657] ipvlan2: left promiscuous mode [ 1318.478345][ T3657] macvlan2: left promiscuous mode [ 1318.490970][ T3657] macvlan2: left allmulticast mode [ 1318.561213][ T3663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1318.590262][ T3663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1318.618838][ T3638] lo speed is unknown, defaulting to 1000 [ 1318.639946][T21841] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.660221][T21841] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.709826][T21841] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.723609][T21841] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.135417][ T3665] lo speed is unknown, defaulting to 1000 [ 1319.462362][ T3701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7577'. [ 1319.512776][ T3692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7577'. [ 1319.535961][ T3692] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7577'. [ 1319.839842][ T3665] lo speed is unknown, defaulting to 1000 [ 1320.152547][ T3705] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7579'. [ 1320.532692][ T3723] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7585'. [ 1320.630245][ T3727] netlink: 'syz.4.7584': attribute type 7 has an invalid length. [ 1320.656673][ T3722] netlink: 'syz.4.7584': attribute type 13 has an invalid length. [ 1320.722135][ T3729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7586'. [ 1321.099936][ T3734] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 1321.143813][ T3734] netlink: 'syz.3.7587': attribute type 1 has an invalid length. [ 1321.196039][ T3737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7587'. [ 1321.209895][ T3737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7587'. [ 1321.256408][ T3743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7587'. [ 1321.329286][ T3734] bond3: entered promiscuous mode [ 1321.341529][ T3734] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1321.499346][ T3739] bond5: entered allmulticast mode [ 1321.576641][ T3755] netlink: 'syz.3.7593': attribute type 1 has an invalid length. [ 1321.584664][ T3755] netlink: 760 bytes leftover after parsing attributes in process `syz.3.7593'. [ 1321.650994][ T3758] xt_hashlimit: size too large, truncated to 1048576 [ 1321.718890][ T3755] syzkaller1: entered promiscuous mode [ 1321.724602][ T3755] syzkaller1: entered allmulticast mode [ 1321.984042][ T3768] syzkaller0: entered promiscuous mode [ 1321.993473][ T3768] syzkaller0: entered allmulticast mode [ 1322.028196][ T3778] netlink: 'syz.4.7599': attribute type 29 has an invalid length. [ 1322.063835][ T3778] netlink: 'syz.4.7599': attribute type 29 has an invalid length. [ 1322.084259][ T3778] netlink: 'syz.4.7599': attribute type 3 has an invalid length. [ 1322.198598][ T3786] syzkaller0: entered promiscuous mode [ 1322.204312][ T3786] syzkaller0: entered allmulticast mode [ 1322.996293][ T3833] ip6gre0: entered promiscuous mode [ 1323.089983][ T3838] gtp0: entered promiscuous mode [ 1323.096881][ T3838] gtp0: entered allmulticast mode [ 1323.109051][ T3830] lo speed is unknown, defaulting to 1000 [ 1323.518903][ T3853] syzkaller1: entered promiscuous mode [ 1323.524532][ T3853] syzkaller1: entered allmulticast mode [ 1323.562713][ T3853] sctp: [Deprecated]: syz.4.7618 (pid 3853) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1323.562713][ T3853] Use struct sctp_sack_info instead [ 1323.618874][ T3830] lo speed is unknown, defaulting to 1000 [ 1323.784227][ T3859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1324.009303][ T3865] lo speed is unknown, defaulting to 1000 [ 1324.633371][ T3865] lo speed is unknown, defaulting to 1000 [ 1324.769734][ T3882] __nla_validate_parse: 8 callbacks suppressed [ 1324.769758][ T3882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7627'. [ 1325.202486][ T3882] lo speed is unknown, defaulting to 1000 [ 1325.256386][ T3897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7629'. [ 1325.308105][ T3894] netlink: 'syz.2.7629': attribute type 10 has an invalid length. [ 1325.345150][ T3894] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1325.382188][ T3897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7629'. [ 1325.442451][ T3897] bridge_slave_1: left allmulticast mode [ 1325.453858][ T3897] bridge_slave_1: left promiscuous mode [ 1325.467793][ T3897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.503880][ T3897] bridge_slave_0: left allmulticast mode [ 1325.510249][ T3897] bridge_slave_0: left promiscuous mode [ 1325.518811][ T3897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.666660][ T3897] bond0: (slave bridge0): Releasing backup interface [ 1326.147495][ T3882] lo speed is unknown, defaulting to 1000 [ 1326.807127][ T3922] nbd: must specify a size in bytes for the device [ 1327.578414][ T3929] xt_hashlimit: size too large, truncated to 1048576 [ 1327.950786][ T3941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7640'. [ 1328.003462][ T3941] netlink: 312 bytes leftover after parsing attributes in process `syz.4.7640'. [ 1328.028747][ T3941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7640'. [ 1328.381535][ T3952] netlink: 'syz.0.7645': attribute type 2 has an invalid length. [ 1328.408879][ T3952] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7645'. [ 1328.469260][ T3952] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7645'. [ 1328.604776][ T3970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7651'. [ 1328.652688][ T3970] netlink: 'syz.0.7651': attribute type 15 has an invalid length. [ 1328.753314][ T3978] pim6reg: entered allmulticast mode [ 1328.777481][ T3978] pim6reg: left allmulticast mode [ 1328.881155][ T3985] syzkaller0: entered promiscuous mode [ 1328.888987][ T3985] syzkaller0: entered allmulticast mode [ 1328.923662][ T3983] : entered promiscuous mode [ 1329.131639][ T3988] syzkaller0: entered promiscuous mode [ 1329.137252][ T3988] syzkaller0: entered allmulticast mode [ 1329.202829][ T3996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7659'. [ 1331.218523][ C0] ------------[ cut here ]------------ [ 1331.231218][ C0] ODEBUG: free active (active state 0) object: ffff888030c39090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 1331.244367][ C0] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#0: swapper/0/0 [ 1331.254695][ C0] Modules linked in: [ 1331.258933][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1331.267889][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1331.278256][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1331.284637][ C0] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1331.304286][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 1331.310426][ C0] RAX: ffffffff8a965980 RBX: ffffffff9a4d2d50 RCX: 0000000000000000 [ 1331.318424][ C0] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901bee60 [ 1331.326474][ C0] RBP: ffffffff8bcf3ce0 R08: ffff888030c39090 R09: ffffffff8bcf5000 [ 1331.334498][ C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff888030c39200 [ 1331.342712][ C0] R13: ffffffff901bee60 R14: ffff888030c39000 R15: ffff888030c39090 [ 1331.350721][ C0] FS: 0000000000000000(0000) GS:ffff888125467000(0000) knlGS:0000000000000000 [ 1331.359811][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1331.366583][ C0] CR2: 00007f4cc0fe9e80 CR3: 0000000098fc4000 CR4: 00000000003526f0 [ 1331.374787][ C0] Call Trace: [ 1331.378152][ C0] [ 1331.381063][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1331.386753][ C0] kfree+0x13a/0x630 [ 1331.390804][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 1331.395959][ C0] rose_timer_expiry+0x4cb/0x600 [ 1331.400957][ C0] ? call_timer_fn+0x178/0x640 [ 1331.405750][ C0] call_timer_fn+0x192/0x640 [ 1331.410400][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1331.415898][ C0] ? call_timer_fn+0xd4/0x640 [ 1331.420636][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1331.425862][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1331.431114][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1331.436598][ C0] __run_timer_base+0x652/0x8b0 [ 1331.441579][ C0] ? ktime_get+0x45/0x200 [ 1331.445932][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1331.451385][ C0] ? sched_clock_cpu+0x74/0x440 [ 1331.456347][ C0] run_timer_softirq+0xb7/0x170 [ 1331.461273][ C0] handle_softirqs+0x22a/0x870 [ 1331.466075][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1331.470921][ C0] __irq_exit_rcu+0x5f/0x150 [ 1331.475511][ C0] irq_exit_rcu+0x9/0x30 [ 1331.479837][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1331.485546][ C0] [ 1331.488557][ C0] [ 1331.491533][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1331.497528][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1331.503270][ C0] Code: fe 6e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 b2 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1331.523243][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 1331.529457][ C0] RAX: 0000000000395ed9 RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 1331.537537][ C0] RDX: 0000000000000001 RSI: ffffffff8df209e8 RDI: ffffffff8c27b500 [ 1331.545751][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 1331.553887][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff90112cb0 [ 1331.561935][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 1331.570138][ C0] ? do_idle+0x1bd/0x500 [ 1331.575015][ C0] default_idle+0x9/0x20 [ 1331.579342][ C0] default_idle_call+0x72/0xb0 [ 1331.584142][ C0] do_idle+0x1bd/0x500 [ 1331.588243][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1331.593542][ C0] ? __pfx_do_idle+0x10/0x10 [ 1331.598151][ C0] cpu_startup_entry+0x43/0x60 [ 1331.602985][ C0] rest_init+0x2de/0x300 [ 1331.607322][ C0] start_kernel+0x385/0x3d0 [ 1331.611994][ C0] x86_64_start_reservations+0x24/0x30 [ 1331.617480][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1331.622685][ C0] common_startup_64+0x13e/0x147 [ 1331.627657][ C0] [ 1331.630718][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1331.638017][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1331.646948][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1331.657001][ C0] Call Trace: [ 1331.660299][ C0] [ 1331.663153][ C0] vpanic+0x56c/0xa60 [ 1331.667143][ C0] ? __pfx__printk+0x10/0x10 [ 1331.671730][ C0] ? __pfx_vpanic+0x10/0x10 [ 1331.676300][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1331.681615][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1331.686992][ C0] panic+0xc5/0xd0 [ 1331.690804][ C0] ? __pfx_panic+0x10/0x10 [ 1331.695238][ C0] ? common_startup_64+0x13e/0x147 [ 1331.700372][ C0] __warn+0x315/0x4f0 [ 1331.704359][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 1331.710118][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 1331.715844][ C0] __report_bug+0x29a/0x540 [ 1331.720794][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 1331.726555][ C0] ? __pfx___report_bug+0x10/0x10 [ 1331.731720][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1331.736688][ C0] report_bug_entry+0x19a/0x290 [ 1331.741552][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 1331.747313][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 1331.753039][ C0] handle_bug+0xce/0x200 [ 1331.757374][ C0] exc_invalid_op+0x1a/0x50 [ 1331.762057][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1331.767014][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1331.773350][ C0] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1331.792975][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 1331.799065][ C0] RAX: ffffffff8a965980 RBX: ffffffff9a4d2d50 RCX: 0000000000000000 [ 1331.807085][ C0] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901bee60 [ 1331.815068][ C0] RBP: ffffffff8bcf3ce0 R08: ffff888030c39090 R09: ffffffff8bcf5000 [ 1331.823130][ C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff888030c39200 [ 1331.831104][ C0] R13: ffffffff901bee60 R14: ffff888030c39000 R15: ffff888030c39090 [ 1331.839089][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 1331.844564][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1331.850302][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1331.856090][ C0] kfree+0x13a/0x630 [ 1331.860014][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 1331.865166][ C0] rose_timer_expiry+0x4cb/0x600 [ 1331.870219][ C0] ? call_timer_fn+0x178/0x640 [ 1331.875062][ C0] call_timer_fn+0x192/0x640 [ 1331.879747][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1331.885312][ C0] ? call_timer_fn+0xd4/0x640 [ 1331.890179][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1331.895411][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1331.900622][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1331.906094][ C0] __run_timer_base+0x652/0x8b0 [ 1331.911040][ C0] ? ktime_get+0x45/0x200 [ 1331.915470][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1331.920856][ C0] ? sched_clock_cpu+0x74/0x440 [ 1331.925719][ C0] run_timer_softirq+0xb7/0x170 [ 1331.930670][ C0] handle_softirqs+0x22a/0x870 [ 1331.935442][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1331.940308][ C0] __irq_exit_rcu+0x5f/0x150 [ 1331.944903][ C0] irq_exit_rcu+0x9/0x30 [ 1331.949154][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1331.954797][ C0] [ 1331.957729][ C0] [ 1331.960663][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1331.966695][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1331.972339][ C0] Code: fe 6e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 b2 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1331.991949][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 1331.998025][ C0] RAX: 0000000000395ed9 RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 1332.006005][ C0] RDX: 0000000000000001 RSI: ffffffff8df209e8 RDI: ffffffff8c27b500 [ 1332.013983][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 1332.021956][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff90112cb0 [ 1332.029931][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 1332.037910][ C0] ? do_idle+0x1bd/0x500 [ 1332.042329][ C0] default_idle+0x9/0x20 [ 1332.046607][ C0] default_idle_call+0x72/0xb0 [ 1332.051390][ C0] do_idle+0x1bd/0x500 [ 1332.055479][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1332.060706][ C0] ? __pfx_do_idle+0x10/0x10 [ 1332.065317][ C0] cpu_startup_entry+0x43/0x60 [ 1332.070270][ C0] rest_init+0x2de/0x300 [ 1332.074607][ C0] start_kernel+0x385/0x3d0 [ 1332.079123][ C0] x86_64_start_reservations+0x24/0x30 [ 1332.084597][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1332.089716][ C0] common_startup_64+0x13e/0x147 [ 1332.094758][ C0] [ 1332.098150][ C0] Kernel Offset: disabled [ 1332.102502][ C0] Rebooting in 86400 seconds..