last executing test programs: 3.459789235s ago: executing program 1 (id=1733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000940)={0x40, r1, 0x801, 0x70bd2e, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "ce68fb4416a9b78f2acd8231e2"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xba83542b86c80fd3}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x4) sendmmsg$inet6(r7, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x80000006}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x6c}}}], 0x30}}], 0x1, 0x40000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@newtfilter={0x60, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbbd, {0x0, 0x0, 0x0, r6, {0x5, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x45, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x88}, {0x0, 0x9, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x0, 0x1, {0xd}}, @TCA_EMATCH_TREE_HDR={0x0, 0x1, {0x100}}, @TCA_EMATCH_TREE_HDR]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) 3.282571978s ago: executing program 4 (id=1734): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x4, 0x0, 0x2014, 0x2, 0x5775d27f, 0x67fffff, 0xba5}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x48}, 0x1, 0x0, 0x0, 0x2c04c845}, 0x800) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x48}, 0x1, 0x0, 0x0, 0x2c04c845}, 0x800) 3.171696773s ago: executing program 1 (id=1736): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0, 0xffffffffffffffff}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002002) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8], 0x12) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000fe0000000000000000010000850000002e000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x8, 0x12, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/18, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x8000000, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000740)=0x400000d2, 0x4) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000140)=0x2000000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r7, @ANYRESDEC=r7, @ANYRESOCT=r10], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f00000005c0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e21, 0x5, 0x4e21, 0x821b, 0x8, 0x20, 0x20, 0x0, 0x0, r11}, {0x1, 0x0, 0x20, 0x4, 0x5, 0x5, 0x4, 0x9}, {0x8, 0x0, 0x6, 0x5}, 0x100, 0x0, 0x0, 0x1, 0x2, 0x1}, {{@in=@multicast2, 0x4d5, 0x33}, 0xa, @in6=@loopback, 0x3506, 0x4, 0x2, 0xa, 0xfffffff7, 0x7, 0x4ce9}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x1c, 0x0, 0x41100, 0xd8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000003a00)={0x0, 0x0, "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", "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"}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x6d, "1f5411f8bfcfbe523ef0aec3ab28de1c81f21022178145077048b9908b942cb3afbb00fd0aaa862e0e38826caaeaf60e1e7c48b59b0fca39a66f7dec011744ff8af6eca5c40ec272d0427a1143aaa44d4fda4e68ab00764a4cf5935b352b4b177bb1a986696cc6fd382e0d57e5"}, &(0x7f00000003c0)=0x75) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r14, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x4, 0x0, 0x0, 0x5, 0x40}, 0xe) shutdown(r14, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000600)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xce}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r14, 0x84, 0x71, &(0x7f0000000180)={r15, 0x8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000540)={r13, 0x78, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0xfb29, @empty, 0x14da}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd828}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000580)=0x10) 3.126605665s ago: executing program 2 (id=1737): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$inet(0x2, 0x3, 0x1) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) (async) r3 = socket(0x10, 0x80002, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x20400) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000540)={{r2, &(0x7f00000002c0)='-}{+:{[.+\x00', 0x202000, &(0x7f0000000300)={@align=0x4, {0x1, 0x41, 0xa, 0x9c7}}, 0x9, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x84a2}, {[0x80, 0x66d496f4, 0x1, 0xfffffffc]}, 0x5, 0xcc, &(0x7f0000000440)=""/204}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r4, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f00000006c0)='%-5lx \x00'}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0xdbf, 0x5, 0x9, 0x40000, r5, 0x9, '\x00', 0x0, r4, 0x2, 0x2, 0x2, 0xa}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) (async) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) bind$netlink(r10, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r11, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r13, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x4000886}, 0x0) mmap(&(0x7f0000212000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x1bc39000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r6, 0x0, &(0x7f0000000140)=""/75}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) (async) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000100)=0x4) (async) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.11012424s ago: executing program 4 (id=1738): r0 = socket(0x11, 0x80a, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) 2.875117871s ago: executing program 4 (id=1739): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f00000008c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536002d346c6b0ce4840c4e5ad94a461cdbfee9bdb942352359a351d1ec", 0x4c, 0x810, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000300)={'c', ' *:* ', 'rm\x00'}, 0x9) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x26, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@typed={0x4, 0x117, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000090000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x1000007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r6) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "a4c51a4d1bc77a24", "245586e7cae61db3a53c3b701d5a3efe", "0a1ad2f4", "63fd2e1ecc22a424"}, 0x28) (async) setsockopt$inet6_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304}, "3b4ab2c1144068b2", "963e11e0be5f9fd4fa47d22055202c7b", "9df00001", "b327c6e40e868fa2"}, 0x28) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) 2.699897635s ago: executing program 2 (id=1740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@flushpolicy={0x12c, 0x1d, 0x200, 0x70bd2a, 0x25dfdbfd, "", [@algo_auth={0xce, 0x1, {{'blake2s-160-x86\x00'}, 0x430, "91a2e662779d3b56c6a375716a4b39fce10c4d0befe518311101288f17e2bc484ac78024601e238a02acee8b751bdf06c01ca5ee10bcb34de45a0876c491795ea69891f4a34c32d8beb41144a0081e4f456546389849570a7f0e4b1a229096f27885ff9b4fe12322324f148e392e5822d5582c06a5f2a4db37906f41398e0815ab285eb42a60"}}, @iptfs_reorder_window={0x6, 0x25, 0x8001}, @lastused={0xc, 0xf, 0x6}, @iptfs_reorder_window={0x6}, @mark={0xc, 0x15, {0x35075b, 0x7}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2a, 0x4}}, @coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x12c}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1411, 0x8, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x18}}, 0x40024) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0xb4d5f59234a458bb, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x4017, 0x1, 0xf0bd29, 0x25dfdbfa, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x20044002) 2.364263618s ago: executing program 2 (id=1741): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0x3b8}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000400)={r4, &(0x7f0000000000)='(&\x00', 0x20000, &(0x7f0000000080)={@_ha_fsid={[0x6, 0x4]}, {0x1, 0x0, 0x7, 0x5}}, 0x1, &(0x7f00000002c0), &(0x7f00000003c0)=0x7}) openat$cgroup_type(r5, &(0x7f00000004c0), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_buf(r7, 0x1, 0x3e, &(0x7f00000001c0)=""/67, &(0x7f0000000280)=0x43) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2.303515443s ago: executing program 3 (id=1742): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001500)=ANY=[@ANYBLOB="3000000019000100fdffffff000000000a1000000000ff000002000008001e00000400000c0009"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.179760655s ago: executing program 3 (id=1743): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvmmsg(r1, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10002200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="002f1a000000000000000000000000000000e700b2f53ca031b57bcb5684efc1081c2abab7b878850cb5aa02f250c7cb668a21fa614da33b22f3aa08", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000804) 2.155793773s ago: executing program 1 (id=1744): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0x14, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x35, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4381d2cb}, 0x94) 2.063349138s ago: executing program 0 (id=1745): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000080000000000000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000010400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000400)="882f1242b009007d39f301003c60", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001080)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000026c0)="40b679c0f01821df96b7f8364960c37b205e6456e606b9cbb31a172bdf2c7df50b78fab38c7c19cc0919d1a1bd0ea169b18aaf0f53bc519a0b543f9c7a68e69f87dbe8fa1dc839a805f9451434e9076188515d043a34f62958b9c750ae95a11ae5a625b43ee1c84499ab65277464d796", 0x70}], 0x1, 0x0, 0x0, 0x8012}], 0x1, 0x4044) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r7, 0x0, 0x0}, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000380)) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, r0, 0x100000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex=r7, 0x1f, 0x0, 0x1000, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x1f, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009f150000000000003241040001000000181000006df70caac3fb1301904ea9f7d9af", @ANYRES32=r2, @ANYBLOB="0000000000000000997920000800000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000185b0000000000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x6, 0x81, &(0x7f0000000780)=""/129, 0x40f00, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x0, 0xe, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r1, r2, r0], &(0x7f0000000900)=[{0x5, 0x1, 0x5, 0xc}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@ifindex=r7, r3, 0x25, 0x11, r3, @void, @value=r9, @void, @void, r8}, 0x20) 2.017262234s ago: executing program 1 (id=1746): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140)={0x4, "7e14a3"}, 0x6) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x20040010) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010001ffffcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000240012800b00010067726574617000001400028008000700ac141428060003002e50f1ff08001f000900000008000a00", @ANYRES32=r3, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c090}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=r7, @ANYBLOB="3000128009000100766c616e000000002000028006000100020000000c0002000b0000001d0000000600050088a80000"], 0x58}}, 0x0) 1.903207967s ago: executing program 4 (id=1747): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 64) r1 = socket(0x840000000002, 0x3, 0x100) (rerun: 64) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0xb, 0x5, 0x2, 0x6}, 0x10) (async) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) (async) syz_genetlink_get_family_id$mptcp(0x0, r1) (async) setsockopt$inet_buf(r1, 0x0, 0x4, 0x0, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 1.683040106s ago: executing program 0 (id=1748): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x202, 0x9, 0x5, 0x1, 0xfd}, 0x8) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req3={0x6, 0x200, 0x3b, 0x100, 0xa12b, 0x4, 0x8243}, 0x1c) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20024090) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000410007012cbd7000fadbdf25037c0001e4e80010800574d10448001000"], 0x28}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r6, {0x1, 0x9}, {0x0, 0xffff}, {0xfff2, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) (async) write$tun(r3, &(0x7f0000000500)=ANY=[], 0xfdef) 1.340728127s ago: executing program 1 (id=1749): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000440)="0000000000000060145b4ebeada5", 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xa) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f2, {0x0, 0x0, 0x0, r9, {0x1, 0x3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x1, 0x3, 0x403}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x22}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000001200), 0x0, 0x200000000000}}, 0x40) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffffffffffff59}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d00000000000100ffffffff000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYBLOB="231f5d03d921d465aa947fe8678ec6ed15acfa04289e5f0dfb9458ccee59df2d0c3b127fa2e936293fd81c43e9fec702fd1eeef51cc6b3512ef013e9f1e93e8bf351"], 0x38}}, 0x8d4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0x0, 0xffff}, {0xffe0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffff80}]}, 0x2c}}, 0x4c850) 1.299793323s ago: executing program 2 (id=1750): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0x4, &(0x7f0000000340)=ANY=[@ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffeb6) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f00000000c0)=0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x2f, 0x9, 0x70bd24, 0x25dfdbfb, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@delneigh={0x88, 0x1d, 0x400, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r5, 0x1, 0x9, 0x3}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NDA_DST_MAC={0xa, 0x1, @random="7a68a0c7699e"}, @NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_LINK_NETNSID={0x8}, @NDA_PROTOCOL={0x5, 0xc, 0x3}, @NDA_MASTER={0x8, 0x9, 0x3}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_VNI={0x8, 0x7, 0x6}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_PORT={0x6, 0x6, 0x4e24}]}, 0x88}, 0x1, 0x0, 0x0, 0x4044064}, 0x4040040) 1.139293147s ago: executing program 3 (id=1751): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x28, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) socket$inet6(0xa, 0x80002, 0x0) 1.015743755s ago: executing program 3 (id=1752): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000100)={0x2, 0x4e26, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000140)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e040000000000000100b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0bab566913ef2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f0000000440)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f0000000340)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa00000000000000000000000000dcfc79aa30d51b47ae8a658993ace0c6117a176d8ed928b70fac29b5a92b9f2396ca48579b0a02b5d56469b7684cea6a38457c8575115b97022eb30415bb47f4de4b7029a2dec1d1b3cdee060907e10129873640a61de4ae4b797cc0ce85532990d1d493e2779311d22a296ad682a656635959f78ea547fc7cd635c83f4f0905641f66a8e9a02c01001b83cbdcd90a6260ff", 0xc2}, {&(0x7f0000000b40)="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", 0x2af}], 0x5}}], 0x1, 0x40080a0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 961.377114ms ago: executing program 4 (id=1753): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@local, 0x0, 0x80, 0xa, 0x0, 0x0, 0xa0}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x1, @local}, 0x4a, {0x2, 0x0, @local}}) socket$packet(0x11, 0x2, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060300000000000000000007000002050005000a00000009788dc4d0fc3aac5b9100020073797a31002c9196699220678c2c85908aa9a7000000050001000700000011000300686173683a69703c6d61726b000000001400078008"], 0x60}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900250000000005000000", 0x29}], 0x1) 859.107796ms ago: executing program 0 (id=1754): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd5000fadbdf2555000000080001004f001e0208000300", @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x200440c1}, 0x24008000) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x6, 0x1, 0x7fff, 0x5, 0x7, 0x9, 0xcc26, 0xffb, 0xae, 0x5, 0xbd, 0x8001, 0x1, 0x3, 0x5, 0x80000001, 0xffd, 0xb, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x7, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x5, 0xd, 0xe, 0x2b11, 0xb6, 0x8, 0x1c00, 0xbfc, 0x8, 0xbed4, 0x200000d, 0x80000fe, 0x3, 0x0, 0x8, 0x8, 0x8, 0x79f, 0x2, 0x1, 0x5, 0x4, 0x7, 0x5, 0x10, 0x101, 0xdb, 0x1fa0860a, 0x200, 0xaa, 0x8081, 0x2, 0x4, 0x4007, 0x80002, 0x2, 0x2af, 0xf5, 0x5, 0x2, 0x6, 0x6, 0x7, 0x7, 0x4009, 0x0, 0x2, 0x0, 0x401, 0x751, 0x0, 0x3, 0x0, 0x8001, 0x4, 0xe, 0x6, 0x6, 0x3, 0x80000000, 0xecde, 0x405a3, 0x7, 0x7f, 0x80100, 0x5, 0x252, 0x81, 0xb, 0x3, 0x20006, 0x5, 0x8, 0xb, 0x2, 0x8ec9, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x2, 0x0, 0x801, 0x2, 0x40040, 0x996, 0x8, 0x0, 0x401, 0x66cd, 0x6, 0x8000, 0x2008da0, 0x1fc, 0x0, 0x4]}}) r6 = socket(0x1d, 0x2, 0x6) unshare(0x20000400) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0}, 0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x6a, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCPNADDRESOURCE(r6, 0x89e0, &(0x7f0000000440)=0x7) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[], 0x10448) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000400000000000000010000006268000000000000406a8c0010000000053b010000000000182100003d04c544fa3fc216b853f0e36f7b402077246b484c4842be9827fee31600b38abf98772ba757d7e5e8bb0722c5bfd16e4468", @ANYRES32=r7, @ANYBLOB="00000000000000009500000000000000", @ANYRES32=r3], &(0x7f0000000480)='syzkaller\x00', 0xaf, 0x16, &(0x7f00000004c0)=""/22, 0x40f00, 0x18, '\x00', r8, 0x0, r7, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xc, 0xffff, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000700)=[r7, r9, r7, 0x1, r7, r7, r7, r7], &(0x7f0000000740)=[{0x0, 0x2, 0x5, 0xc}, {0x3, 0x5, 0x2, 0x5}, {0x3, 0x1, 0xc}, {0x5, 0x5, 0x10, 0x6}, {0x0, 0x3, 0x2, 0x3}], 0x10, 0xbf}, 0x94) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000111401fffc0000000000000008004a000100000008000300feffff7f08004a000100000008004b0013000000080001"], 0x48}, 0x1, 0x0, 0x0, 0x24000844}, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r11, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114380000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 690.39484ms ago: executing program 1 (id=1755): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0xf679000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b0000000000404627af6a8d00e6006d8fa000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3e608b9cdb042d2643fcbb2c5a57df67d074af6e8dafe0900"/194], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x94}], 0x2}, 0x200}], 0x1, 0x0, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff8f, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) 559.319011ms ago: executing program 2 (id=1756): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0x14, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x35, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x4381d2cb}, 0x94) 532.300369ms ago: executing program 4 (id=1757): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f0000000640)=0x10) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000003c0), 0x8) close(r3) unshare(0x8040480) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000400002bdd1e8ef0159c39e743dae958", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdb7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000cc0)=@in6={0x21, 0x2800, 0x2, 0x1c, {0x2f, 0x1b59, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, 0x24) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00', 0x0, 0x20, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000100)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x0, 0x1}}, 0x44) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0xf4}}, 0x40814) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) 523.07702ms ago: executing program 3 (id=1758): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x84}}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001200000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f0000000280)="170007000200020000ffbe8c5ede7688a2006c0001feffff7f77fc5ad90200fb6a880000d6c9db0000f804d41fabdb15d088bd8b7001800a0000ebfc0607bdff59100ac49cc3b7e63a10fb66b8c6dbb6e2f036345761547a681f009ceeff5acba400001fb700674f8cc8e365d00b5033bf79ac2dfc061f15023901dee2000000000062068f5ee50c9dfdc94333d3ce1def08af9b1c568302ff3102ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a5b47b6df7b23", 0xc1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r3, 0x2e, 0x0, r3, @void, @value=0x0}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00010c000000000000000007000000", @ANYRES32=r9, @ANYBLOB="80000200080001007f0000010a00020001"], 0x30}}, 0x0) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r6}, 0x8) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, 0x0, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000000000000000021000000900010073797a30000000000900020073992cecd20000000800034000000001080008400000"], 0x6c}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc4}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r13, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x8, 0x0, 0x0}}, 0x10) 479.611836ms ago: executing program 0 (id=1759): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xd, 0xfff3}}, @TCA_U32_SEL={0x14, 0x5, {0x8, 0x6, 0x19, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100040000000000000002030000fffc4e220200000308000000000000380000000100"/56, @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f000000000000000008000300"], 0x54}}, 0x200040c4) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) 395.978807ms ago: executing program 2 (id=1760): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x100000) unshare(0x6a020400) socket$xdp(0x2c, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x100000) (async) unshare(0x6a020400) (async) 303.409065ms ago: executing program 0 (id=1761): r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0x56, "5920c4366603f6af7773854c3957707a1ca629753189b13b7ccf303feabed4e8be71da9301ae01c999847f035ce625a45b752f3c2cf553a8b5038a84afab449d430fb3304c89d673fd7d37382683727aff5a3f53d51e"}, &(0x7f0000000400)=0x5e) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={r1, @in6={{0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, 0x2, 0xdf, 0x907, 0x3, 0x14, 0x4}, &(0x7f00000005c0)=0x9c) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @private=0xa010102}]}}}]}, 0x40}}, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getchain={0x3c, 0x66, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffff}, {0x4, 0xa}, {0xa, 0xc}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}]}, 0x3c}}, 0x20000000) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="7c01000013000101000000000000000064010102000000000000000000000000000000000000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006a80)={0x14, 0x41, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000008a00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 56.492928ms ago: executing program 0 (id=1762): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xdc, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6d763b83}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x190}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000002030101000000100000000002000000080001000100000209000200000000000200000008000440000000020800054000000002"], 0x38}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24044080) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf250a000000"], 0x14}}, 0x4040000) socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e24, 0x3, 'lc\x00', 0x39ffc08b9a63492e, 0x8, 0x77}, {@private=0xa010102, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 3 (id=1763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c00, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000040afd69588f92e79feffffff017c0000040042800c00018006000600800a000014000290100006800c2a7cfe0c9fb4aad75be7da207186f08406bf363fe9581171b56d94d2f0fac6c2c2e76c57ecf095"], 0x38}, 0x1, 0x0, 0x0, 0x4048015}, 0xc000) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) kernel console output (not intermixed with test programs): g): Released all slaves [ 100.537325][ T6045] xt_hashlimit: size too large, truncated to 1048576 [ 101.013909][ T6058] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 101.202942][ T6065] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 101.202968][ T6065] syzkaller1: Linktype set failed because interface is up [ 101.519492][ T6083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.80'. [ 101.952790][ T6108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.86'. [ 102.127598][ T39] IPVS: starting estimator thread 0... [ 102.171958][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.171998][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172026][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172052][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172079][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172105][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172131][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172158][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172183][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172210][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172237][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172263][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172288][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172314][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172340][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172366][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172392][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172417][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172443][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172469][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172535][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172562][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172588][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172614][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172641][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172667][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172693][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172719][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172746][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172773][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172799][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172825][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172851][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172877][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172903][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172928][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172954][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.172979][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173005][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173031][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173057][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173083][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173108][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173134][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173159][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173185][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173212][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173238][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173264][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173290][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173317][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173343][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173369][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173395][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173421][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173447][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.173475][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.198908][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.199010][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.199069][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.199134][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.199206][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.199270][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.199337][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.199402][ T6103] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 102.228053][ T6119] IPVS: using max 23 ests per chain, 55200 per kthread [ 103.070795][ T6131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.88'. [ 103.070820][ T6131] netlink: 36 bytes leftover after parsing attributes in process `syz.2.88'. [ 103.073745][ T6131] vlan0: entered promiscuous mode [ 103.750755][ T6156] netlink: 'syz.2.96': attribute type 1 has an invalid length. [ 105.036532][ T6187] syzkaller0: entered promiscuous mode [ 105.036558][ T6187] syzkaller0: entered allmulticast mode [ 105.297286][ T6194] tipc: Enabling of bearer rejected, failed to enable media [ 105.715509][ T6222] __nla_validate_parse: 3 callbacks suppressed [ 105.715531][ T6222] netlink: 40 bytes leftover after parsing attributes in process `syz.0.111'. [ 105.751381][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 106.101472][ T6232] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 107.420746][ T6277] netlink: 'syz.1.123': attribute type 21 has an invalid length. [ 107.456444][ T6274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.502811][ T6277] 8021q: VLANs not supported on ip6gre0 [ 107.815654][ T6293] tipc: Failed to remove unknown binding: 66,1,1/0:1504427908/1504427910 [ 107.815688][ T6293] tipc: Failed to remove unknown binding: 66,1,1/0:1504427908/1504427910 [ 108.409433][ T6308] syzkaller0: entered promiscuous mode [ 108.409457][ T6308] syzkaller0: entered allmulticast mode [ 109.333059][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'. [ 109.363357][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.140'. [ 109.463025][ T6334] netlink: 84 bytes leftover after parsing attributes in process `syz.4.140'. [ 109.562559][ T6345] tipc: Cannot configure node identity twice [ 109.562577][ T6345] tipc: Cannot configure node identity twice [ 109.563961][ T6345] veth1_macvtap: left promiscuous mode [ 109.604458][ T6345] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 109.661714][ T6345] bond1: option mode: invalid value (7) [ 109.675577][ T6345] bond1 (unregistering): Released all slaves [ 109.909931][ T6353] : renamed from dummy0 [ 109.999266][ T6360] netlink: 52 bytes leftover after parsing attributes in process `syz.4.147'. [ 110.000460][ T6360] netlink: 52 bytes leftover after parsing attributes in process `syz.4.147'. [ 110.048013][ T6360] bridge_slave_0: left allmulticast mode [ 110.048040][ T6360] bridge_slave_0: left promiscuous mode [ 110.049615][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.117620][ T6360] bridge_slave_1: left allmulticast mode [ 110.117648][ T6360] bridge_slave_1: left promiscuous mode [ 110.117899][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.322315][ T6360] bond0: (slave bond_slave_0): Releasing backup interface [ 110.412549][ T6360] bond0: (slave bond_slave_1): Releasing backup interface [ 110.479516][ T6360] team0: Port device team_slave_0 removed [ 110.503520][ T6360] team0: Port device team_slave_1 removed [ 110.504523][ T6360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.504545][ T6360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.524306][ T6374] netlink: 'syz.2.148': attribute type 10 has an invalid length. [ 110.524367][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 110.564065][ T6360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.564088][ T6360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.630629][ T6360] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.771994][ T6381] netlink: 56 bytes leftover after parsing attributes in process `syz.0.150'. [ 110.993467][ T31] audit: type=1800 audit(1790445872.853:2): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.153" name="blkio.bfq.time_recursive" dev="tmpfs" ino=142 res=0 errno=0 [ 111.441134][ T6414] ip_tables: iptables: counters copy to user failed while replacing table [ 111.447310][ T6414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.575988][ T6401] IPVS: starting estimator thread 0... [ 111.576032][ T6422] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 111.592699][ T6422] netlink: 'syz.1.162': attribute type 1 has an invalid length. [ 111.636078][ T6422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.644204][ T6422] bond1: entered promiscuous mode [ 111.644228][ T6422] bond1: entered allmulticast mode [ 111.669210][ T6422] netlink: 44 bytes leftover after parsing attributes in process `syz.1.162'. [ 111.677337][ T6423] IPVS: using max 24 ests per chain, 57600 per kthread [ 111.809576][ T6431] netlink: 'syz.1.164': attribute type 18 has an invalid length. [ 111.809601][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 111.845759][ T6431] netlink: 'syz.1.164': attribute type 18 has an invalid length. [ 111.845783][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 111.855040][ T50] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.855095][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.855130][ T50] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.855165][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.218728][ T6444] ip6tnl0: Caught tx_queue_len zero misconfig [ 113.197756][ T6470] netlink: 84 bytes leftover after parsing attributes in process `syz.1.176'. [ 113.201256][ T6474] netlink: 964 bytes leftover after parsing attributes in process `syz.0.178'. [ 113.201313][ T6474] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 113.244195][ T6481] lo: entered allmulticast mode [ 113.251447][ T6474] lo: left allmulticast mode [ 113.349869][ T6483] syzkaller1: entered promiscuous mode [ 113.349894][ T6483] syzkaller1: entered allmulticast mode [ 113.661775][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 113.749538][ T6490] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 113.800225][ T6490] syz_tun: entered promiscuous mode [ 113.953286][ T6514] lo: Caught tx_queue_len zero misconfig [ 114.171504][ T6516] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 114.360846][ T6523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.397487][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 114.539122][ T6522] hsr_slave_1 (unregistering): left promiscuous mode [ 114.693353][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.694887][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.883157][ T6538] netlink: 88 bytes leftover after parsing attributes in process `syz.1.193'. [ 115.230628][ T6558] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 115.230666][ T6558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.587480][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.203'. [ 115.783465][ T6571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.798049][ T6579] macvtap1: entered allmulticast mode [ 115.838917][ T5751] hid-generic 0005:10CF:0002.0001: unknown main item tag 0x0 [ 115.874398][ T5751] hid-generic 0005:10CF:0002.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 116.068373][ T6597] netlink: 'syz.0.209': attribute type 11 has an invalid length. [ 117.238366][ T6655] netlink: 36 bytes leftover after parsing attributes in process `syz.4.219'. [ 117.289735][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 117.289770][ T6657] netlink: 1 bytes leftover after parsing attributes in process `syz.4.219'. [ 118.201987][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 118.202016][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 118.612409][ T6682] Bluetooth: MGMT ver 1.23 [ 118.633450][ T6682] netlink: 'syz.2.224': attribute type 1 has an invalid length. [ 118.633473][ T6682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.224'. [ 118.660161][ T6683] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 118.660603][ T6681] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 118.771341][ T6687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.228'. [ 119.184319][ T6703] syzkaller1: entered promiscuous mode [ 119.184343][ T6703] syzkaller1: entered allmulticast mode [ 119.339927][ T6715] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 119.340064][ T6715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.341894][ T6715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.233'. [ 119.493566][ T6713] netlink: 'syz.0.232': attribute type 12 has an invalid length. [ 119.578172][ T6724] netlink: 32 bytes leftover after parsing attributes in process `syz.2.236'. [ 119.579345][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'. [ 120.001957][ T6742] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 120.334768][ T6752] x_tables: duplicate underflow at hook 3 [ 120.490461][ T6764] veth1_macvtap: left promiscuous mode [ 121.238239][ T6789] bond2: entered allmulticast mode [ 121.314123][ T6790] macvlan2: entered promiscuous mode [ 121.314148][ T6790] macvlan2: entered allmulticast mode [ 121.327683][ T6790] bond2: entered promiscuous mode [ 121.331220][ T6790] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.363989][ T6790] bond2: left promiscuous mode [ 122.223770][ T6826] syz_tun: entered promiscuous mode [ 122.233015][ T6826] syz_tun: left promiscuous mode [ 132.877255][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.877352][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.031304][ T6880] bond3: entered allmulticast mode [ 144.111005][ T6880] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 144.111886][ T6880] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 144.628818][ T6869] syzkaller1: entered promiscuous mode [ 144.628845][ T6869] syzkaller1: entered allmulticast mode [ 145.319011][ T6930] __nla_validate_parse: 13 callbacks suppressed [ 145.319035][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'. [ 145.906444][ T6954] netlink: 27 bytes leftover after parsing attributes in process `syz.2.297'. [ 145.977577][ T6958] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 146.031794][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 146.503201][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'. [ 146.620972][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 146.714275][ T6978] syzkaller0: entered promiscuous mode [ 146.714301][ T6978] syzkaller0: entered allmulticast mode [ 146.768601][ T6979] ip6t_hbh: Not strict - not implemented [ 146.806586][ T6979] netlink: 92 bytes leftover after parsing attributes in process `syz.4.305'. [ 147.047624][ T6990] netlink: 48 bytes leftover after parsing attributes in process `syz.3.310'. [ 147.303910][ T6983] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 147.330408][ T6983] bond2 (unregistering): Released all slaves [ 147.439850][ T7004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.312'. [ 147.447985][ T7005] netlink: 'syz.2.311': attribute type 5 has an invalid length. [ 147.861972][ T7019] ip_tables: iptables: counters copy to user failed while replacing table [ 148.016778][ T7025] netlink: zone id is out of range [ 148.016797][ T7025] netlink: zone id is out of range [ 148.016807][ T7025] netlink: zone id is out of range [ 148.016816][ T7025] netlink: zone id is out of range [ 148.016825][ T7025] netlink: zone id is out of range [ 148.016834][ T7025] netlink: zone id is out of range [ 148.017065][ T7025] netlink: zone id is out of range [ 148.017075][ T7025] netlink: zone id is out of range [ 148.017084][ T7025] netlink: zone id is out of range [ 148.507622][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.530323][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.844870][ T7020] veth3: left promiscuous mode [ 148.905212][ T59] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.905263][ T59] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.905300][ T59] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.905335][ T59] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.169088][ T7063] netlink: 'syz.0.324': attribute type 1 has an invalid length. [ 149.272217][ T7063] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.316272][ T7071] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20000 [ 149.338800][ T7072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.323'. [ 149.392715][ T7066] bond2: (slave veth3): Enslaving as an active interface with a down link [ 149.394110][ T7068] team_slave_1: Caught tx_queue_len zero misconfig [ 149.451753][ T7075] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 149.497927][ T7075] bond2: (slave batadv1): making interface the new active one [ 149.524080][ T7075] batadv1: entered promiscuous mode [ 149.524675][ T7075] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 149.551028][ T6401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.551049][ T6401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.788367][ T7063] ip6tnl1: left allmulticast mode [ 149.803272][ T7063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.858631][ T13] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 150.402247][ T7112] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 150.413982][ T7110] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 150.462863][ T7110] bond4 (unregistering): Released all slaves [ 150.592137][ T7112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.936259][ T7134] xt_LOG: level 115 >= 8 [ 151.466826][ T7144] netlink: 'syz.0.339': attribute type 32 has an invalid length. [ 151.576430][ T7150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.341'. [ 152.015550][ T990] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 152.019601][ T7163] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 152.580142][ T7185] syzkaller1: entered promiscuous mode [ 152.580166][ T7185] syzkaller1: entered allmulticast mode [ 153.234488][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 153.234513][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.359'. [ 153.446231][ T7224] tipc: Enabling of bearer rejected, failed to enable media [ 153.492765][ T7222] xt_socket: unknown flags 0x4 [ 153.496638][ T7213] netlink: 'syz.3.362': attribute type 16 has an invalid length. [ 153.496660][ T7213] netlink: 'syz.3.362': attribute type 17 has an invalid length. [ 154.142673][ T7249] syzkaller0: entered promiscuous mode [ 154.142699][ T7249] syzkaller0: entered allmulticast mode [ 154.155691][ T7248] sctp: [Deprecated]: syz.2.367 (pid 7248) Use of int in maxseg socket option. [ 154.155691][ T7248] Use struct sctp_assoc_value instead [ 154.540383][ T7266] block nbd0: server does not support multiple connections per device. [ 154.557610][ T7266] block nbd0: shutting down sockets [ 154.922729][ T7257] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 155.311278][ T7271] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.311305][ T7271] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 155.478578][ T7271] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.478605][ T7271] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 155.553035][ T7271] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.553060][ T7271] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 155.658127][ T7271] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.658187][ T7271] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 155.817045][ T7271] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 155.817069][ T7271] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 156.528811][ T7342] netlink: 'syz.4.383': attribute type 3 has an invalid length. [ 156.570879][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'. [ 156.624534][ T7343] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.628561][ T7343] bridge0: port 3(bond3) entered blocking state [ 156.629988][ T7343] bridge0: port 3(bond3) entered disabled state [ 156.631089][ T7343] bond3: entered allmulticast mode [ 156.657273][ T7343] bond3: entered promiscuous mode [ 156.658444][ T7343] bridge0: port 3(bond3) entered blocking state [ 156.658598][ T7343] bridge0: port 3(bond3) entered forwarding state [ 156.834229][ T7361] FAULT_INJECTION: forcing a failure. [ 156.834229][ T7361] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 156.834293][ T7361] CPU: 0 UID: 0 PID: 7361 Comm: syz.0.387 Not tainted syzkaller #0 PREEMPT(full) [ 156.834317][ T7361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.834343][ T7361] Call Trace: [ 156.834356][ T7361] [ 156.834365][ T7361] dump_stack_lvl+0xe8/0x150 [ 156.834412][ T7361] should_fail_ex+0x410/0x560 [ 156.834442][ T7361] _copy_to_iter+0x1e4/0x1810 [ 156.834474][ T7361] ? do_raw_spin_lock+0x12b/0x2f0 [ 156.834510][ T7361] ? __pfx__copy_to_iter+0x10/0x10 [ 156.834535][ T7361] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 156.834565][ T7361] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 156.834590][ T7361] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 156.834629][ T7361] __skb_datagram_iter+0xf8/0x980 [ 156.834662][ T7361] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 156.834688][ T7361] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 156.834729][ T7361] skb_copy_datagram_iter+0xb5/0x240 [ 156.834766][ T7361] pppoe_recvmsg+0x135/0x200 [ 156.834799][ T7361] ? __pfx_pppoe_recvmsg+0x10/0x10 [ 156.834833][ T7361] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 156.834861][ T7361] ? security_socket_recvmsg+0x7e/0x2c0 [ 156.834896][ T7361] ? __pfx_pppoe_recvmsg+0x10/0x10 [ 156.834924][ T7361] sock_recvmsg+0x196/0x1e0 [ 156.834953][ T7361] __sys_recvfrom+0x231/0x3a0 [ 156.834988][ T7361] ? __pfx___sys_recvfrom+0x10/0x10 [ 156.835049][ T7361] ? do_user_addr_fault+0xc4c/0x1340 [ 156.835077][ T7361] __x64_sys_recvfrom+0xde/0x100 [ 156.835110][ T7361] do_syscall_64+0x166/0x520 [ 156.835148][ T7361] ? trace_irq_disable+0x3b/0x140 [ 156.835171][ T7361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.835195][ T7361] ? clear_bhb_loop+0x70/0xc0 [ 156.835222][ T7361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.835244][ T7361] RIP: 0033:0x7fda08f5e98e [ 156.835272][ T7361] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.835291][ T7361] RSP: 002b:00007fda09dd1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 156.835319][ T7361] RAX: ffffffffffffffda RBX: 00007fda09dd36c0 RCX: 00007fda08f5e98e [ 156.835336][ T7361] RDX: 0000000000001000 RSI: 00007fda09dd2000 RDI: 0000000000000003 [ 156.835350][ T7361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.835363][ T7361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 156.835376][ T7361] R13: 00007fda09dd1f58 R14: 00007fda09dd2000 R15: 0000000000000000 [ 156.835409][ T7361] [ 157.142853][ T7351] tipc: Started in network mode [ 157.142886][ T7351] tipc: Node identity 16565c64dc74, cluster identity 4711 [ 157.143265][ T7351] tipc: Enabled bearer , priority 0 [ 157.213849][ T7351] netlink: 76 bytes leftover after parsing attributes in process `syz.1.386'. [ 157.341961][ T159] bridge0: port 3(bond3) entered disabled state [ 157.483644][ T7350] tipc: Disabling bearer [ 158.010649][ T7396] netlink: 'syz.2.393': attribute type 2 has an invalid length. [ 158.010674][ T7396] netlink: 224 bytes leftover after parsing attributes in process `syz.2.393'. [ 158.181358][ T7398] netlink: 'syz.2.393': attribute type 10 has an invalid length. [ 158.310617][ T7404] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 158.585619][ T7398] team0: Port device  added [ 158.729771][ T7411] net_ratelimit: 486 callbacks suppressed [ 158.729796][ T7411] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 158.733123][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.396'. [ 158.847506][ T7421] FAULT_INJECTION: forcing a failure. [ 158.847506][ T7421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.847543][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.1.399 Not tainted syzkaller #0 PREEMPT(full) [ 158.847567][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.847580][ T7421] Call Trace: [ 158.847589][ T7421] [ 158.847602][ T7421] dump_stack_lvl+0xe8/0x150 [ 158.847639][ T7421] should_fail_ex+0x410/0x560 [ 158.847671][ T7421] _copy_to_iter+0x1e4/0x1810 [ 158.847704][ T7421] ? do_raw_spin_lock+0x12b/0x2f0 [ 158.847742][ T7421] ? __pfx__copy_to_iter+0x10/0x10 [ 158.847769][ T7421] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 158.847800][ T7421] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 158.847828][ T7421] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 158.847869][ T7421] __skb_datagram_iter+0xf8/0x980 [ 158.847901][ T7421] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 158.847928][ T7421] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 158.847972][ T7421] skb_copy_datagram_iter+0xb5/0x240 [ 158.848010][ T7421] pppoe_recvmsg+0x135/0x200 [ 158.848044][ T7421] ? __pfx_pppoe_recvmsg+0x10/0x10 [ 158.848079][ T7421] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 158.848106][ T7421] ? security_socket_recvmsg+0x7e/0x2c0 [ 158.848141][ T7421] ? __pfx_pppoe_recvmsg+0x10/0x10 [ 158.848171][ T7421] sock_recvmsg+0x196/0x1e0 [ 158.848199][ T7421] __sys_recvfrom+0x231/0x3a0 [ 158.848235][ T7421] ? __pfx___sys_recvfrom+0x10/0x10 [ 158.848296][ T7421] ? do_user_addr_fault+0xc4c/0x1340 [ 158.848324][ T7421] __x64_sys_recvfrom+0xde/0x100 [ 158.848357][ T7421] do_syscall_64+0x166/0x520 [ 158.848394][ T7421] ? trace_irq_disable+0x3b/0x140 [ 158.848416][ T7421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.848437][ T7421] ? clear_bhb_loop+0x70/0xc0 [ 158.848463][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.848483][ T7421] RIP: 0033:0x7fd59df5e98e [ 158.848502][ T7421] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 158.848520][ T7421] RSP: 002b:00007fd59eed1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 158.848541][ T7421] RAX: ffffffffffffffda RBX: 00007fd59eed36c0 RCX: 00007fd59df5e98e [ 158.848556][ T7421] RDX: 0000000000001000 RSI: 00007fd59eed2000 RDI: 0000000000000003 [ 158.848571][ T7421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.848582][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 158.848594][ T7421] R13: 00007fd59eed1f58 R14: 00007fd59eed2000 R15: 0000000000000000 [ 158.848627][ T7421] [ 159.138041][ T7420] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 159.188102][ T7413] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.190765][ T7418] bond4: option ad_select: unable to set because the bond device is up [ 159.600196][ T7444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.403'. [ 159.603427][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 159.904602][ T7448] netlink: 'syz.4.404': attribute type 1 has an invalid length. [ 159.984202][ T7448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.010155][ T7462] netlink: 'syz.1.407': attribute type 4 has an invalid length. [ 160.046113][ T7465] netlink: 'syz.1.407': attribute type 4 has an invalid length. [ 160.159762][ T7461] bond1: (slave veth3): Enslaving as an active interface with a down link [ 160.293537][ T7478] netlink: NAT attribute has 8 unknown bytes [ 160.293576][ T7478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.630136][ T7448] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 160.979279][ T7469] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 160.999034][ T7469] bond1: (slave batadv1): making interface the new active one [ 161.000714][ T7469] batadv1: entered promiscuous mode [ 161.001939][ T7469] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 161.368004][ T13] batadv1: left promiscuous mode [ 161.368251][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'. [ 161.394201][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'. [ 161.797981][ T7540] Bluetooth: hci0: unsupported parameter 5135 [ 161.798004][ T7540] Bluetooth: hci0: unsupported parameter 8192 [ 161.798020][ T7540] Bluetooth: hci0: unsupported parameter 5135 [ 161.798033][ T7540] Bluetooth: hci0: unsupported parameter 8192 [ 161.851287][ T7543] Bluetooth: hci0: unsupported parameter 5135 [ 161.851309][ T7543] Bluetooth: hci0: unsupported parameter 8192 [ 161.851322][ T7543] Bluetooth: hci0: unsupported parameter 5135 [ 161.851335][ T7543] Bluetooth: hci0: unsupported parameter 8192 [ 162.172259][ T7555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.175200][ T7555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.422'. [ 162.252334][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'. [ 162.302715][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'. [ 162.376299][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.423'. [ 162.376325][ T7562] netlink: 14 bytes leftover after parsing attributes in process `syz.0.423'. [ 164.015668][ T159] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.015718][ T159] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.015755][ T159] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.015791][ T159] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.017979][ T7600] syz.0.429 (7600) used greatest stack depth: 17392 bytes left [ 164.162240][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.435'. [ 164.163196][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.435'. [ 164.471278][ T7629] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 164.490701][ T7629] netlink: 'syz.2.438': attribute type 16 has an invalid length. [ 164.490724][ T7629] netlink: 'syz.2.438': attribute type 17 has an invalid length. [ 164.783414][ T7637] netlink: 100 bytes leftover after parsing attributes in process `syz.0.440'. [ 164.903280][ T7640] netlink: zone id is out of range [ 164.903298][ T7640] netlink: zone id is out of range [ 164.903316][ T7640] netlink: zone id is out of range [ 164.903325][ T7640] netlink: zone id is out of range [ 164.903333][ T7640] netlink: zone id is out of range [ 164.903342][ T7640] netlink: zone id is out of range [ 164.903350][ T7640] netlink: zone id is out of range [ 164.903359][ T7640] netlink: zone id is out of range [ 164.903416][ T7640] netlink: zone id is out of range [ 164.903425][ T7640] netlink: zone id is out of range [ 165.025521][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.026209][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.319636][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 165.686769][ T7629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.708171][ T7629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.798083][ T7629] vlan0: left promiscuous mode [ 165.863304][ T7629] vlan2: left promiscuous mode [ 165.863332][ T7629] bridge0: left promiscuous mode [ 165.878353][ T7629] macvtap1: left allmulticast mode [ 165.878544][ T7629] bond2: left allmulticast mode [ 165.890873][ T7637] netlink: 239 bytes leftover after parsing attributes in process `syz.0.440'. [ 165.899513][ T1416] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.902532][ T159] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.902722][ T159] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.902824][ T159] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.443979][ T7669] FAULT_INJECTION: forcing a failure. [ 166.443979][ T7669] name failslab, interval 1, probability 0, space 0, times 0 [ 166.444017][ T7669] CPU: 0 UID: 0 PID: 7669 Comm: syz.4.447 Not tainted syzkaller #0 PREEMPT(full) [ 166.444058][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.444079][ T7669] Call Trace: [ 166.444093][ T7669] [ 166.444109][ T7669] dump_stack_lvl+0xe8/0x150 [ 166.444158][ T7669] should_fail_ex+0x410/0x560 [ 166.444191][ T7669] should_failslab+0xa8/0x100 [ 166.444218][ T7669] ? mas_alloc_nodes+0x291/0x350 [ 166.444248][ T7669] kmem_cache_alloc_noprof+0xa1/0x600 [ 166.444286][ T7669] ? mas_alloc_nodes+0x291/0x350 [ 166.444322][ T7669] mas_alloc_nodes+0x291/0x350 [ 166.444355][ T7669] mas_preallocate+0x42a/0x840 [ 166.444384][ T7669] ? rcu_is_watching+0x16/0xb0 [ 166.444412][ T7669] ? trace_kmem_cache_alloc+0x29/0xe0 [ 166.444447][ T7669] ? __pfx_mas_preallocate+0x10/0x10 [ 166.444484][ T7669] ? anon_vma_name+0x61/0x210 [ 166.444512][ T7669] ? __mas_set_range+0x11a/0x3a0 [ 166.444545][ T7669] __split_vma+0x2fb/0xa60 [ 166.444580][ T7669] ? validate_mm+0x42e/0x4f0 [ 166.444608][ T7669] ? __pfx___split_vma+0x10/0x10 [ 166.444636][ T7669] ? rcu_is_watching+0x16/0xb0 [ 166.444682][ T7669] ? __pfx___up_read+0x10/0x10 [ 166.444717][ T7669] vms_gather_munmap_vmas+0x322/0x1370 [ 166.444745][ T7669] ? vms_complete_munmap_vmas+0x980/0xbe0 [ 166.444784][ T7669] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 166.444834][ T7669] do_vmi_align_munmap+0x2b4/0x4b0 [ 166.444882][ T7669] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 166.444932][ T7669] ? mas_walk+0x37e/0x490 [ 166.444962][ T7669] ? mas_find+0x642/0xcb0 [ 166.444996][ T7669] do_vmi_munmap+0x252/0x2d0 [ 166.445030][ T7669] __vm_munmap+0x241/0x3e0 [ 166.445061][ T7669] ? __pfx___vm_munmap+0x10/0x10 [ 166.445087][ T7669] ? vm_mmap_pgoff+0x35a/0x4e0 [ 166.445140][ T7669] __x64_sys_munmap+0x60/0x70 [ 166.445175][ T7669] do_syscall_64+0x166/0x520 [ 166.445204][ T7669] ? trace_irq_disable+0x3b/0x140 [ 166.445227][ T7669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.445250][ T7669] ? clear_bhb_loop+0x70/0xc0 [ 166.445278][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.445300][ T7669] RIP: 0033:0x7fa42159df87 [ 166.445321][ T7669] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.445339][ T7669] RSP: 002b:00007fa42245dd18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 166.445362][ T7669] RAX: ffffffffffffffda RBX: 00007fa418000000 RCX: 00007fa42159df87 [ 166.445379][ T7669] RDX: 0000000000000000 RSI: 0000000003600000 RDI: 00007fa41c000000 [ 166.445394][ T7669] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 166.445407][ T7669] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 166.445421][ T7669] R13: 0000000000001000 R14: 00007fa41c000000 R15: 0000000000a00000 [ 166.445457][ T7669] [ 167.803274][ T7678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.818365][ T7682] syz_tun: entered allmulticast mode [ 167.818971][ T7682] syz_tun: left allmulticast mode [ 167.911190][ T7683] dvmrp6: entered allmulticast mode [ 168.066535][ T7696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.453'. [ 168.416930][ T7713] netlink: 'syz.2.458': attribute type 2 has an invalid length. [ 168.471421][ T7713] þ: entered promiscuous mode [ 168.641178][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 168.732702][ T7729] netlink: 44 bytes leftover after parsing attributes in process `syz.0.464'. [ 168.732728][ T7729] netlink: 35 bytes leftover after parsing attributes in process `syz.0.464'. [ 168.732743][ T7729] netlink: 'syz.0.464': attribute type 5 has an invalid length. [ 168.732755][ T7729] netlink: 'syz.0.464': attribute type 6 has an invalid length. [ 168.732766][ T7729] netlink: 35 bytes leftover after parsing attributes in process `syz.0.464'. [ 170.202288][ T7790] bond5: entered allmulticast mode [ 170.269399][ T7791] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 170.270909][ T7791] bond5: (slave wireguard1): Error -95 calling set_mac_address [ 170.424523][ T7797] netlink: 27 bytes leftover after parsing attributes in process `syz.3.478'. [ 170.457043][ T7811] syzkaller0: entered promiscuous mode [ 170.457068][ T7811] syzkaller0: entered allmulticast mode [ 170.463374][ T7811] net_ratelimit: 5 callbacks suppressed [ 170.463395][ T7811] TC_ACT_REPEAT abuse ? [ 170.825735][ T7823] xt_hashlimit: size too large, truncated to 1048576 [ 170.884454][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 171.010079][ T7834] netlink: 14 bytes leftover after parsing attributes in process `syz.1.485'. [ 171.423472][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.488'. [ 171.533106][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.490'. [ 171.893856][ T7851] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 171.924385][ T1416] IPVS: starting estimator thread 0... [ 171.935694][ T7851] x_tables: duplicate underflow at hook 1 [ 172.005645][ T7875] IPVS: using max 27 ests per chain, 64800 per kthread [ 172.685620][ T7889] xt_policy: output policy not valid in PREROUTING and INPUT [ 172.913117][ T7895] nbd: must specify a device to reconfigure [ 173.176731][ T7915] __nla_validate_parse: 1 callbacks suppressed [ 173.176748][ T7915] netlink: 27 bytes leftover after parsing attributes in process `syz.3.500'. [ 173.257251][ T7928] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 173.257478][ T7930] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 173.562997][ T7940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.503'. [ 173.563022][ T7940] netlink: 20 bytes leftover after parsing attributes in process `syz.4.503'. [ 174.433524][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 175.303759][ T8023] netlink: 'syz.1.521': attribute type 10 has an invalid length. [ 175.366067][ T8023] team0 (unregistering): Port device team_slave_0 removed [ 175.384918][ T8023] team0 (unregistering): Port device team_slave_1 removed [ 175.794609][ T8036] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.833476][ T8036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.065613][ T8036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.065642][ T8036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.100374][ T8036] veth1_vlan: left promiscuous mode [ 176.101687][ T8036] veth0_vlan: left promiscuous mode [ 176.118688][ T8036] veth0_vlan: entered promiscuous mode [ 176.123659][ T8036] veth1_vlan: entered promiscuous mode [ 176.148786][ T8036] veth0_macvtap: left promiscuous mode [ 176.152090][ T8036] veth0_macvtap: entered promiscuous mode [ 176.175330][ T8036] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.176078][ T8036] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 176.176644][ T8036] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.178002][ T8036] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.179337][ T8036] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.180017][ T8036] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 176.433778][ T159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.434882][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.434927][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.434963][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.045834][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 177.045857][ T8085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.538'. [ 177.741066][ T8106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.544'. [ 177.758360][ T8105] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.127015][ T8122] geneve2: entered promiscuous mode [ 178.322402][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 178.602387][ T8134] ieee802154 phy0 wpan0: encryption failed: -22 [ 178.857861][ T409] IPVS: starting estimator thread 0... [ 178.930905][ T8147] atomic_op ffff888031f399e0 conn xmit_atomic 0000000000000000 [ 178.954226][ T8155] IPVS: using max 27 ests per chain, 64800 per kthread [ 179.286090][ T8168] syzkaller0: entered promiscuous mode [ 179.286114][ T8168] syzkaller0: entered allmulticast mode [ 179.441287][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 179.441311][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 179.441336][ T8179] netlink: 'syz.1.562': attribute type 11 has an invalid length. [ 180.189287][ T8203] netlink: 820 bytes leftover after parsing attributes in process `syz.3.567'. [ 180.189374][ T8203] netlink: 820 bytes leftover after parsing attributes in process `syz.3.567'. [ 180.650351][ T8225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.571'. [ 181.340634][ T8258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.583'. [ 181.424377][ T8258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.583'. [ 181.612206][ T8258] bridge2: entered promiscuous mode [ 182.042866][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.589'. [ 182.067997][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.592'. [ 182.070932][ T8283] netlink: 'syz.2.592': attribute type 39 has an invalid length. [ 182.208266][ T8281] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.253861][ T8287] bond2: entered allmulticast mode [ 182.280000][ T8294] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.280273][ T8294] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.653723][ T8342] __nla_validate_parse: 72 callbacks suppressed [ 183.653745][ T8342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.610'. [ 183.761859][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 183.960824][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.609'. [ 183.983472][ T8358] netlink: 'syz.3.614': attribute type 12 has an invalid length. [ 184.086692][ T8352] syzkaller0: entered promiscuous mode [ 184.086720][ T8352] syzkaller0: entered allmulticast mode [ 184.236069][ T8373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.615'. [ 184.361488][ T8376] netlink: 'syz.0.616': attribute type 11 has an invalid length. [ 184.444311][ T8379] x_tables: duplicate underflow at hook 2 [ 186.310720][ T8392] bridge0: port 4(veth0_virt_wifi) entered blocking state [ 186.310827][ T8392] bridge0: port 4(veth0_virt_wifi) entered disabled state [ 186.310997][ T8392] veth0_virt_wifi: entered allmulticast mode [ 186.338259][ T8392] veth0_virt_wifi: entered promiscuous mode [ 186.468996][ T8406] netlink: 108 bytes leftover after parsing attributes in process `syz.4.628'. [ 186.539405][ T8402] Bluetooth: hci1: too big key_count value 29096 [ 186.619088][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.630'. [ 186.619299][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.630'. [ 186.619496][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.630'. [ 186.619679][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.630'. [ 186.619855][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.630'. [ 186.771646][ T8407] syzkaller0: entered promiscuous mode [ 186.771667][ T8407] syzkaller0: entered allmulticast mode [ 186.861271][ T8403] syz_tun: entered allmulticast mode [ 186.864151][ T8403] netlink: 'syz.1.626': attribute type 1 has an invalid length. [ 187.096695][ T8428] openvswitch: netlink: Multiple metadata blocks provided [ 187.119842][ T8428] netlink: 'syz.0.633': attribute type 2 has an invalid length. [ 187.151581][ T8398] syz_tun: left allmulticast mode [ 187.193694][ T8428] veth4: entered allmulticast mode [ 187.250820][ T8432] netlink: 'syz.0.633': attribute type 12 has an invalid length. [ 188.012270][ T8470] openvswitch: netlink: Key 14 has unexpected len 2 expected 28 [ 188.314051][ T8482] syzkaller0: entered promiscuous mode [ 188.314068][ T8482] syzkaller0: entered allmulticast mode [ 189.526702][ T8582] netlink: 'syz.2.662': attribute type 1 has an invalid length. [ 189.566779][ T8587] __nla_validate_parse: 33 callbacks suppressed [ 189.566802][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.661'. [ 189.697346][ T8587] syzkaller0: entered promiscuous mode [ 189.697370][ T8587] syzkaller0: entered allmulticast mode [ 190.338227][ T8610] bridge0: port 3(erspan0) entered blocking state [ 190.338411][ T8610] bridge0: port 3(erspan0) entered disabled state [ 190.338576][ T8610] erspan0: entered allmulticast mode [ 190.362404][ T8610] erspan0: entered promiscuous mode [ 190.604067][ T8663] batman_adv: batadv0: Adding interface: macvtap1 [ 190.604087][ T8663] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.604129][ T8663] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 190.978247][ T8498] workqueue: Failed to create a rescuer kthread for wq "nfc28_nci_cmd_wq": -EINTR [ 191.009888][ T8693] netlink: 104 bytes leftover after parsing attributes in process `syz.2.671'. [ 191.063999][ T8693] netlink: 'syz.2.671': attribute type 1 has an invalid length. [ 191.096234][ T8695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.671'. [ 191.151070][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 191.280665][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'. [ 191.294298][ T8669] batman_adv: batadv0: Removing interface: macvtap1 [ 191.600699][ T8693] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.708281][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.674'. [ 191.748909][ T8698] bond4: (slave veth3): Enslaving as an active interface with a down link [ 192.002935][ T8714] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 192.187564][ T8724] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.677'. [ 192.199674][ T8724] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.677'. [ 192.258702][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'. [ 192.366081][ T8728] syzkaller0: entered promiscuous mode [ 192.366104][ T8728] syzkaller0: entered allmulticast mode [ 192.394472][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.681'. [ 192.531160][ T8741] xt_socket: unknown flags 0x4c [ 192.648335][ T8733] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.652283][ T8733] bond2: (slave bond3): Enslaving as an active interface with an up link [ 192.833222][ T8739] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 192.877035][ T31] audit: type=1804 audit(1790445954.733:3): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.685" name="/newroot/149/cgroup.controllers" dev="tmpfs" ino=776 res=1 errno=0 [ 192.878697][ T31] audit: type=1800 audit(1790445954.743:4): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.685" name="cgroup.controllers" dev="tmpfs" ino=776 res=0 errno=0 [ 193.877560][ T8797] netlink: 'syz.0.697': attribute type 1 has an invalid length. [ 194.049131][ T8803] netlink: 'syz.2.699': attribute type 9 has an invalid length. [ 194.049443][ T8803] netlink: 'syz.2.699': attribute type 9 has an invalid length. [ 194.325371][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.325435][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.325607][ T8806] bond7: (slave bridge2): making interface the new active one [ 194.391162][ T8806] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 194.423915][ T8809] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 194.444891][ T8809] batman_adv: batadv0: Adding interface: gretap2 [ 194.444919][ T8809] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.445228][ T8809] batman_adv: batadv0: Interface activated: gretap2 [ 194.819121][ T8835] __nla_validate_parse: 38 callbacks suppressed [ 194.819144][ T8835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.707'. [ 195.328493][ T8856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.712'. [ 195.699352][ T8868] block nbd0: not configured, cannot reconfigure [ 196.284809][ T8898] netlink: 104 bytes leftover after parsing attributes in process `syz.0.721'. [ 196.560657][ T8906] x_tables: duplicate entry at hook 1 [ 196.667352][ T8913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.727'. [ 196.701587][ T8906] netlink: 'syz.3.724': attribute type 1 has an invalid length. [ 196.751861][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.726'. [ 196.983643][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.729'. [ 197.344149][ T8946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.734'. [ 197.884905][ T8958] netlink: 196 bytes leftover after parsing attributes in process `syz.2.738'. [ 198.356001][ T8974] syzkaller0: Caught tx_queue_len zero misconfig [ 198.630518][ T8982] No such timeout policy "syz0" [ 199.027073][ T8995] netlink: 452 bytes leftover after parsing attributes in process `syz.3.752'. [ 199.344165][ T9009] netlink: 32 bytes leftover after parsing attributes in process `syz.0.755'. [ 199.364639][ T9013] netlink: 'syz.1.757': attribute type 11 has an invalid length. [ 199.691064][ T9018] bond10: option arp_validate: invalid value (1048579) [ 199.727452][ T9018] bond10 (unregistering): Released all slaves [ 199.871586][ T9036] netlink: 48 bytes leftover after parsing attributes in process `syz.4.759'. [ 199.919968][ T9009] bond9: option arp_validate: invalid value (1048579) [ 200.297140][ T9034] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check. [ 200.306130][ T159] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.307223][ T159] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.340669][ T159] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.345628][ T159] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.611229][ T9067] bridge0: port 3(bond0) entered blocking state [ 200.612961][ T9067] bridge0: port 3(bond0) entered disabled state [ 200.613341][ T9067] bond0: entered allmulticast mode [ 200.613360][ T9067] bond_slave_0: entered allmulticast mode [ 200.613398][ T9067] bond_slave_1: entered allmulticast mode [ 200.668127][ T9067] bond0: entered promiscuous mode [ 200.668151][ T9067] bond_slave_0: entered promiscuous mode [ 200.668353][ T9067] bond_slave_1: entered promiscuous mode [ 200.721545][ T9067] netlink: 40 bytes leftover after parsing attributes in process `syz.3.767'. [ 200.903778][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 200.905731][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 200.954377][ T9081] netlink: 'syz.4.770': attribute type 5 has an invalid length. [ 201.164460][ T9086] ip_tables: iptables: counters copy to user failed while replacing table [ 201.244455][ T9094] ip_tables: iptables: counters copy to user failed while replacing table [ 202.070549][ T9090] netlink: 'syz.3.774': attribute type 29 has an invalid length. [ 202.070575][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'. [ 202.285429][ T9109] openvswitch: netlink: nsh attribute has 9009 unknown bytes. [ 202.292304][ T9110] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 202.353449][ T9112] netlink: 9900 bytes leftover after parsing attributes in process `syz.0.777'. [ 202.452376][ T9125] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 202.477016][ T9110] bond2: option mode: invalid value (8) [ 202.504899][ T9128] netlink: 'syz.3.778': attribute type 10 has an invalid length. [ 202.504921][ T9128] netlink: 40 bytes leftover after parsing attributes in process `syz.3.778'. [ 202.530279][ T9110] bond2 (unregistering): Released all slaves [ 202.760057][ T9112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.760084][ T9112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.761499][ T9112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.761519][ T9112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.850114][ T9128] dummy0: entered promiscuous mode [ 203.381373][ T9154] syzkaller0: entered promiscuous mode [ 203.381397][ T9154] syzkaller0: entered allmulticast mode [ 203.481638][ T9157] Cannot find del_set index 4 as target [ 203.689216][ T9169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.754314][ T9172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.754343][ T9172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.805273][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 203.916647][ T9175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.936122][ T9172] hsr_slave_0: left promiscuous mode [ 203.938081][ T9172] hsr_slave_1: left promiscuous mode [ 204.427289][ T9195] netlink: 76 bytes leftover after parsing attributes in process `syz.3.798'. [ 204.606208][ T9202] netlink: 128 bytes leftover after parsing attributes in process `syz.2.800'. [ 204.606236][ T9202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.658642][ T9208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.874958][ T9213] __nla_validate_parse: 5 callbacks suppressed [ 204.874979][ T9213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.802'. [ 205.352693][ T9241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.808'. [ 205.551322][ T9246] bridge0: port 4(wlan1) entered blocking state [ 205.553663][ T9246] bridge0: port 4(wlan1) entered disabled state [ 205.553863][ T9246] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 205.577731][ T9246] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 205.616015][ T9246] mac80211_hwsim hwsim6 wlan1 (unregistering): left allmulticast mode [ 205.616048][ T9246] mac80211_hwsim hwsim6 wlan1 (unregistering): left promiscuous mode [ 205.617671][ T9246] bridge0: port 4(wlan1) entered disabled state [ 205.620171][ T9249] nbd: must specify a size in bytes for the device [ 205.907640][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'. [ 205.950872][ T9258] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 206.589815][ T9275] netlink: 164 bytes leftover after parsing attributes in process `syz.2.814'. [ 207.531257][ T9286] netlink: 'syz.1.818': attribute type 1 has an invalid length. [ 208.087755][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 209.568836][ T9314] ip_tables: iptables: counters copy to user failed while replacing table [ 209.628645][ T9304] tipc: Enabled bearer , priority 0 [ 209.633343][ T9314] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 209.828179][ T9328] netlink: 'syz.1.825': attribute type 1 has an invalid length. [ 209.942488][ T9328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.224543][ T9326] bond3: (slave veth0_to_bond): making interface the new active one [ 210.238090][ T9326] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 210.242209][ T9328] bond3: entered promiscuous mode [ 210.242232][ T9328] veth0_to_bond: entered promiscuous mode [ 210.242436][ T9328] bond3: entered allmulticast mode [ 210.242450][ T9328] veth0_to_bond: entered allmulticast mode [ 210.283276][ T9335] macvlan3: entered promiscuous mode [ 210.283295][ T9335] macvlan3: entered allmulticast mode [ 210.296583][ T9335] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 210.313492][ T9335] bond3: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 210.770840][ T5729] tipc: Node number set to 218169095 [ 210.956356][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 211.032475][ T9365] netlink: 5396 bytes leftover after parsing attributes in process `syz.3.834'. [ 211.032501][ T9365] openvswitch: netlink: Flow key attr not present in new flow. [ 211.260608][ T9375] netlink: 36 bytes leftover after parsing attributes in process `syz.3.834'. [ 211.491572][ T9394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.838'. [ 211.494610][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.838'. [ 211.589397][ T5631] block nbd0: Receive control failed (result -107) [ 211.826108][ T9403] netlink: 48 bytes leftover after parsing attributes in process `syz.0.839'. [ 211.977601][ T9416] x_tables: duplicate underflow at hook 2 [ 212.006358][ T9417] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 212.096441][ T9421] xt_TCPMSS: Only works on TCP SYN packets [ 212.266527][ T9426] netlink: 32 bytes leftover after parsing attributes in process `syz.2.846'. [ 212.267712][ T9426] netlink: 32 bytes leftover after parsing attributes in process `syz.2.846'. [ 213.190680][ T9447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.850'. [ 213.190723][ T9447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.850'. [ 214.635841][ T159] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.635932][ T159] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.635969][ T159] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.636004][ T159] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.800723][ T9453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.816900][ T9453] veth0: entered promiscuous mode [ 214.817541][ T9453] veth0: left promiscuous mode [ 215.810944][ T5631] block nbd1: Receive control failed (result -32) [ 215.907461][ T9484] syzkaller1: entered promiscuous mode [ 215.907486][ T9484] syzkaller1: entered allmulticast mode [ 215.940115][ T9494] netlink: 'syz.4.860': attribute type 23 has an invalid length. [ 215.940141][ T9494] netlink: 'syz.4.860': attribute type 6 has an invalid length. [ 215.940158][ T9494] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.368201][ T9504] __nla_validate_parse: 1 callbacks suppressed [ 216.368221][ T9504] netlink: 32 bytes leftover after parsing attributes in process `syz.2.862'. [ 216.495104][ T9504] IPVS: Error connecting to the multicast addr [ 217.020187][ T9525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.864'. [ 217.057782][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'. [ 217.090526][ T9527] macsec1: entered promiscuous mode [ 217.249834][ T9527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.865'. [ 217.254391][ T9527] ip6tnl0: Caught tx_queue_len zero misconfig [ 217.366621][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 217.366755][ T9527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.470288][ T9527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.476377][ T9530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.865'. [ 217.614149][ T9552] netlink: 40 bytes leftover after parsing attributes in process `syz.3.870'. [ 217.951020][ T9560] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 217.951120][ T9560] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 217.951289][ T9560] veth0_virt_wifi: entered allmulticast mode [ 217.984667][ T9560] veth0_virt_wifi: entered promiscuous mode [ 218.041936][ T9560] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 218.042045][ T9560] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 218.052005][ T9567] netlink: 260 bytes leftover after parsing attributes in process `syz.0.876'. [ 218.540781][ T9598] netlink: 48 bytes leftover after parsing attributes in process `syz.2.880'. [ 218.567758][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'. [ 218.671666][ T9610] netlink: 'syz.0.879': attribute type 4 has an invalid length. [ 218.734383][ T9610] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 218.874565][ T9621] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 219.180636][ T9631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.192138][ T9631] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.616896][ T9631] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.616924][ T9631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.620317][ T9631] veth1_vlan: left promiscuous mode [ 219.621324][ T9631] veth0_vlan: left promiscuous mode [ 219.622679][ T9631] veth0_vlan: entered promiscuous mode [ 219.624584][ T9631] veth1_vlan: entered promiscuous mode [ 219.635649][ T9631] veth1_macvtap: left promiscuous mode [ 219.637291][ T9631] veth0_macvtap: left promiscuous mode [ 219.640270][ T9631] veth0_macvtap: entered promiscuous mode [ 219.643177][ T9631] veth1_macvtap: entered promiscuous mode [ 219.657783][ T9631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.662609][ T9631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.665643][ T9631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.669942][ T9631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.671632][ T9631] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 219.719178][ T1416] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.719462][ T1416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.739389][ T1416] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.739639][ T1416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.783551][ T1416] bridge0: port 4(veth0_virt_wifi) entered blocking state [ 219.783627][ T1416] bridge0: port 4(veth0_virt_wifi) entered forwarding state [ 219.914234][ T1416] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.923287][ T1113] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.923993][ T1113] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.924464][ T1113] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.092794][ T9659] ip6gre2: entered allmulticast mode [ 221.013689][ T9709] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 221.040683][ T9701] erspan0: entered promiscuous mode [ 221.064928][ T9701] erspan0: left promiscuous mode [ 221.138789][ T9714] openvswitch: netlink: Multiple metadata blocks provided [ 221.575173][ T9729] __nla_validate_parse: 8 callbacks suppressed [ 221.575195][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.911'. [ 221.676517][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'. [ 221.676541][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.912'. [ 221.676566][ T9732] netlink: 'syz.0.912': attribute type 11 has an invalid length. [ 221.676580][ T9732] netlink: 'syz.0.912': attribute type 14 has an invalid length. [ 221.678815][ T9733] netlink: 52 bytes leftover after parsing attributes in process `syz.0.912'. [ 221.742506][ T9739] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 221.952806][ T9741] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 223.206273][ T9787] netlink: 'syz.0.921': attribute type 16 has an invalid length. [ 223.206297][ T9787] netlink: 'syz.0.921': attribute type 17 has an invalid length. [ 223.454433][ T9787] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 223.504564][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 223.531387][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'. [ 223.842226][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 223.962686][ T9830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.931'. [ 224.028601][ T9834] Cannot find del_set index 4 as target [ 224.140791][ T9836] netlink: 'syz.0.935': attribute type 1 has an invalid length. [ 224.899784][ T9867] Bluetooth: MGMT ver 1.23 [ 224.993672][ T9869] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 225.061725][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'. [ 225.229918][ T9884] xt_l2tp: missing protocol rule (udp|l2tpip) [ 225.458716][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 225.513057][ T9896] ip_tables: iptables: counters copy to user failed while replacing table [ 225.619576][ T9901] nbd: must specify at least one socket [ 225.940304][ T9906] tipc: Enabling of bearer rejected, failed to enable media [ 226.252876][ T9934] tipc: Can't bind to reserved service type 2 [ 226.481856][ T9945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.643879][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.963'. [ 226.643995][ T9935] openvswitch: netlink: Message has 4 unknown bytes. [ 227.715599][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 227.874592][ T9977] openvswitch: netlink: Message has 8 unknown bytes. [ 228.202655][ T9974] bridge0: port 3(erspan0) entered blocking state [ 228.202791][ T9974] bridge0: port 3(erspan0) entered forwarding state [ 228.250830][ T9974] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.285919][ T9974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.343866][ T9974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.354275][ T9974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.371647][ T9974] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 228.480629][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.480760][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.484573][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.484758][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.823275][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 229.116207][T10027] netlink: 'syz.0.985': attribute type 1 has an invalid length. [ 229.116250][T10027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.301774][T10031] syzkaller0: entered promiscuous mode [ 229.301801][T10031] syzkaller0: entered allmulticast mode [ 229.621126][T10051] SET target dimension over the limit! [ 229.834438][T10059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.988'. [ 229.834464][T10059] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 231.312517][T10035] syzkaller1: entered promiscuous mode [ 231.312542][T10035] syzkaller1: entered allmulticast mode [ 231.347722][T10043] syzkaller0: left promiscuous mode [ 231.350312][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 231.694197][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 231.832688][T10084] netlink: 96 bytes leftover after parsing attributes in process `syz.3.999'. [ 231.862830][T10085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.999'. [ 232.026815][T10069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.995'. [ 232.286378][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 232.513337][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 232.528414][T10107] netlink: 'syz.0.1006': attribute type 23 has an invalid length. [ 234.738805][T10146] netlink: 'syz.2.1013': attribute type 1 has an invalid length. [ 234.793340][T10146] lo: entered promiscuous mode [ 234.805678][T10146] tunl0: entered promiscuous mode [ 234.814498][T10146] gre0: entered promiscuous mode [ 234.854233][T10146] gretap0: entered promiscuous mode [ 234.927870][T10146] bridge0: port 3(erspan0) entered disabled state [ 234.928717][T10146] ip_vti0: entered promiscuous mode [ 234.969306][T10146] ip6_vti0: entered promiscuous mode [ 234.990967][T10146] sit0: entered promiscuous mode [ 235.026814][T10146] ip6tnl0: entered promiscuous mode [ 235.096966][T10146] ip6gre0: entered promiscuous mode [ 235.102707][T10146] ip6gretap0: entered promiscuous mode [ 235.119757][T10157] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1016'. [ 235.145384][T10146] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.145996][T10146] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.147021][T10146] bridge0: entered promiscuous mode [ 235.153927][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1017'. [ 235.545032][T10173] netlink: 'syz.0.1021': attribute type 8 has an invalid length. [ 235.545054][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1021'. [ 235.545106][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1021'. [ 235.628946][T10176] 8021q: VLANs not supported on ip6gre0 [ 235.640966][T10177] 8021q: VLANs not supported on ip6gre0 [ 235.805898][T10186] netlink: 'syz.0.1026': attribute type 1 has an invalid length. [ 236.721819][T10228] bond4: entered allmulticast mode [ 236.991537][T10230] syzkaller0: entered promiscuous mode [ 236.991578][T10230] syzkaller0: entered allmulticast mode [ 237.032418][T10235] macvlan3: entered promiscuous mode [ 237.032442][T10235] macvlan3: entered allmulticast mode [ 237.049861][T10235] bond4: (slave macvlan3): Opening slave failed [ 237.121854][T10244] macvlan3: entered promiscuous mode [ 237.121878][T10244] macvlan3: entered allmulticast mode [ 237.143460][T10244] bond4: (slave macvlan3): Opening slave failed [ 237.522363][T10247] __nla_validate_parse: 4 callbacks suppressed [ 237.522384][T10247] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1038'. [ 237.522526][T10251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1038'. [ 238.104182][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 240.087127][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 240.142263][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 240.171477][T10276] nft_compat: unsupported protocol 0 [ 240.237566][T10281] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 240.372279][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1047'. [ 240.372371][T10288] tunl0: Caught tx_queue_len zero misconfig [ 240.511141][T10295] geneve1: entered promiscuous mode [ 240.614245][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 240.665634][T10299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1051'. [ 240.698071][T10304] netlink: 'syz.4.1053': attribute type 5 has an invalid length. [ 240.776666][T10306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1052'. [ 240.924578][T10318] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1056'. [ 240.958265][T10305] netlink: Failed to add GPL helper -22 [ 240.958327][T10305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.960860][T10304] netlink: Failed to add GPL helper -22 [ 240.960912][T10304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.117932][T10322] syzkaller0: entered promiscuous mode [ 241.117958][T10322] syzkaller0: entered allmulticast mode [ 241.161877][T10321] tipc: Enabled bearer , priority 0 [ 241.189739][T10321] syzkaller0: mtu less than device minimum [ 241.258700][T10315] batman_adv: batadv0: Adding interface: macvlan1 [ 241.258728][T10315] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.258761][T10315] batman_adv: batadv0: Interface activated: macvlan1 [ 241.918748][T10351] openvswitch: netlink: Flow actions attr not present in new flow. [ 241.938028][T10351] IPVS: set_ctl: invalid protocol: 5678 172.20.20.187:0 [ 241.958774][T10351] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 242.115516][T10360] netlink: 'syz.1.1068': attribute type 10 has an invalid length. [ 242.133171][T10362] SET target dimension over the limit! [ 242.290621][T10360] bond0: (slave bond_slave_0): Releasing backup interface [ 242.352281][T10358] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 242.352326][T10358] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 242.352369][T10358] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 242.441250][T10358] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 242.512132][T10365] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 242.514600][T10358] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 242.560863][ T990] tipc: Node number set to 3391249508 [ 242.580896][T10367] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 242.812154][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1075'. [ 242.841666][T10383] gre0: Caught tx_queue_len zero misconfig [ 242.843075][T10384] netlink: 'syz.4.1072': attribute type 29 has an invalid length. [ 243.080792][T10396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1077'. [ 243.392454][T10411] xt_hashlimit: size too large, truncated to 1048576 [ 243.469550][T10414] @0Ù: renamed from bond_slave_1 (while UP) [ 244.063873][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'. [ 244.288222][T10445] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1089'. [ 244.334639][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 244.463385][T10454] netlink: 'syz.1.1091': attribute type 11 has an invalid length. [ 244.584387][T10457] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 244.750428][T10465] netlink: 'syz.0.1094': attribute type 1 has an invalid length. [ 244.779423][ T6401] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.779555][ T6401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.904346][T10465] 8021q: adding VLAN 0 to HW filter on device bond11 [ 244.922779][T10463] macvlan3: entered promiscuous mode [ 244.922803][T10463] macvlan3: entered allmulticast mode [ 244.924532][T10463] bond11: entered promiscuous mode [ 244.938043][T10463] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 246.059555][T10463] bond11: left promiscuous mode [ 246.514496][T10465] macvlan3: entered promiscuous mode [ 246.514520][T10465] macvlan3: entered allmulticast mode [ 246.515583][T10465] bond11: entered promiscuous mode [ 246.516295][T10465] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 247.021108][T10465] bond11: left promiscuous mode [ 247.068318][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'. [ 247.174093][T10476] macsec1: entered promiscuous mode [ 247.174121][T10476] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 247.175536][T10476] macsec1: entered allmulticast mode [ 247.175559][T10476] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 247.175941][T10476] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 247.225476][T10476] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 247.225510][T10476] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 247.539889][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1102'. [ 247.558495][T10493] tipc: Started in network mode [ 247.558529][T10493] tipc: Node identity 785634120000000021436587, cluster identity 4711 [ 247.726894][T10526] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1103'. [ 247.797825][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 247.797927][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'. [ 247.797956][T10530] netlink: 'syz.1.1105': attribute type 12 has an invalid length. [ 247.797972][T10530] netlink: 'syz.1.1105': attribute type 11 has an invalid length. [ 248.591151][T10561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1108'. [ 248.647592][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1113'. [ 249.046925][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'. [ 249.046972][T10576] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1118'. [ 249.076175][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'. [ 249.076228][T10576] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1118'. [ 249.135688][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1117'. [ 249.335224][T10584] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1121'. [ 249.481504][T10585] bridge3: entered promiscuous mode [ 249.481529][T10585] bridge3: entered allmulticast mode [ 249.533655][T10585] team0: Port device bridge3 added [ 249.582968][T10588] bridge0: port 4(team0) entered blocking state [ 249.583065][T10588] bridge0: port 4(team0) entered disabled state [ 249.583230][T10588] team0: entered allmulticast mode [ 249.583247][T10588] team_slave_0: entered allmulticast mode [ 249.583265][T10588] team_slave_1: entered allmulticast mode [ 249.647229][T10588] : entered allmulticast mode [ 249.692875][T10588] team0: entered promiscuous mode [ 249.692901][T10588] team_slave_0: entered promiscuous mode [ 249.693115][T10588] team_slave_1: entered promiscuous mode [ 249.694185][T10588] : entered promiscuous mode [ 249.826415][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 249.854284][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1128'. [ 250.080447][T10613] veth7: entered allmulticast mode [ 250.447702][T10628] syzkaller0: entered promiscuous mode [ 250.447729][T10628] syzkaller0: entered allmulticast mode [ 250.700591][T10651] xt_l2tp: invalid flags combination: 8 [ 253.602695][T10707] __nla_validate_parse: 116 callbacks suppressed [ 253.602713][T10707] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1150'. [ 253.624430][T10708] Cannot find add_set index 2 as target [ 253.768063][T10709] netlink: 'syz.0.1149': attribute type 5 has an invalid length. [ 253.815284][T10712] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1152'. [ 253.949930][T10726] syzkaller1: entered promiscuous mode [ 253.949955][T10726] syzkaller1: entered allmulticast mode [ 254.037740][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1157'. [ 254.240635][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1161'. [ 254.400195][T10743] sctp: [Deprecated]: syz.4.1160 (pid 10743) Use of int in max_burst socket option. [ 254.400195][T10743] Use struct sctp_assoc_value instead [ 254.403815][T10754] syzkaller0: left promiscuous mode [ 254.403837][T10754] syzkaller0: left allmulticast mode [ 254.525388][T10766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1166'. [ 254.601028][T10768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1167'. [ 254.601068][T10768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1167'. [ 254.603438][T10768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1167'. [ 254.687199][T10768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1167'. [ 254.855710][T10773] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1168'. [ 254.889887][T10773] vlan1: entered allmulticast mode [ 254.889911][T10773] erspan0: entered allmulticast mode [ 255.748213][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.748275][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.863864][T10795] net_ratelimit: 1 callbacks suppressed [ 255.863887][T10795] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 256.704001][T10850] netlink: 'syz.2.1182': attribute type 12 has an invalid length. [ 257.660180][T10886] syzkaller0: entered promiscuous mode [ 257.660206][T10886] syzkaller0: entered allmulticast mode [ 258.777499][T10924] xt_bpf: check failed: parse error [ 259.125055][T10942] __nla_validate_parse: 9 callbacks suppressed [ 259.125078][T10942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1211'. [ 259.183696][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'. [ 259.252610][T10942] syzkaller0: entered promiscuous mode [ 259.252637][T10942] syzkaller0: entered allmulticast mode [ 259.281205][T10947] tipc: Enabled bearer , priority 10 [ 259.331313][T10946] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1210'. [ 261.242362][ T59] tipc: Subscription rejected, illegal request [ 261.448653][T10965] syz_tun: entered allmulticast mode [ 261.448882][T10965] syz_tun: left allmulticast mode [ 261.449820][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 261.449845][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 261.449863][T10966] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1213'. [ 261.517848][T10970] dvmrp6: entered allmulticast mode [ 261.519387][ T990] tipc: Node number set to 1494569365 [ 261.549491][T10991] vlan2: entered promiscuous mode [ 261.549515][T10991] bridge0: entered promiscuous mode [ 261.597119][T10992] bridge0: port 5(erspan0) entered blocking state [ 261.597295][T10992] bridge0: port 5(erspan0) entered disabled state [ 261.597465][T10992] erspan0: entered allmulticast mode [ 261.626696][T10992] erspan0: entered promiscuous mode [ 261.627423][T10992] bridge0: port 5(erspan0) entered blocking state [ 261.627522][T10992] bridge0: port 5(erspan0) entered forwarding state [ 261.841740][T10998] tipc: Enabling of bearer rejected, already enabled [ 261.873927][T10999] syzkaller0: mtu less than device minimum [ 262.174441][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'. [ 262.823217][T11036] bridge_slave_0: left allmulticast mode [ 262.823249][T11036] bridge_slave_0: left promiscuous mode [ 262.823601][T11036] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.870537][T11036] bond0: left allmulticast mode [ 262.870569][T11036] bond_slave_0: left allmulticast mode [ 262.870588][T11036] bond_slave_1: left allmulticast mode [ 262.870612][T11036] bond0: left promiscuous mode [ 262.870631][T11036] bond_slave_0: left promiscuous mode [ 262.870940][T11036] bond_slave_1: left promiscuous mode [ 262.873815][T11036] bridge0: port 3(bond0) entered disabled state [ 262.908049][T11036] bridge_slave_1: left allmulticast mode [ 262.908124][T11036] bridge_slave_1: left promiscuous mode [ 262.912199][T11036] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.943410][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1231'. [ 262.943460][T11039] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1231'. [ 262.960158][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1231'. [ 263.312325][T11042] netlink: 'syz.3.1232': attribute type 10 has an invalid length. [ 263.346093][T11042] team0 (unregistering): Port device team_slave_0 removed [ 263.364416][T11042] team0 (unregistering): Port device team_slave_1 removed [ 264.103331][T11078] netlink: 'syz.2.1240': attribute type 2 has an invalid length. [ 266.446218][T11078] : entered promiscuous mode [ 266.660922][T11085] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 266.683428][T11085] bond5 (unregistering): Released all slaves [ 266.911968][T11109] tipc: Enabling of bearer rejected, failed to enable media [ 267.033079][T11115] __nla_validate_parse: 3 callbacks suppressed [ 267.033101][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'. [ 267.034459][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1246'. [ 267.362529][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'. [ 267.377987][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'. [ 267.410760][T11123] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 267.413298][T11123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.435946][T11123] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 267.454954][T11123] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.458138][T11123] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.471678][T11127] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 267.496861][ T10] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 267.532980][ T6401] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 267.566740][ T6401] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 267.782231][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1251'. [ 267.967740][T11142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1254'. [ 268.265001][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1258'. [ 268.573089][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 268.573117][T11165] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1259'. [ 268.913012][T11184] ±ÿ: Caught tx_queue_len zero misconfig [ 269.272347][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'. [ 269.403314][T11214] bond0: (slave ip6tnl0): refused to change device type [ 269.411755][T11214] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 269.544427][T11222] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 269.893875][T11244] netlink: 'syz.4.1278': attribute type 2 has an invalid length. [ 270.439967][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054c6fc00: rx timeout, send abort [ 270.442359][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054c6fc00: 0x2ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 270.537924][T11265] netlink: 'syz.2.1286': attribute type 6 has an invalid length. [ 270.537948][T11265] netlink: 'syz.2.1286': attribute type 5 has an invalid length. [ 270.538997][T11265] netlink: 'syz.2.1286': attribute type 6 has an invalid length. [ 270.539017][T11265] netlink: 'syz.2.1286': attribute type 5 has an invalid length. [ 271.370850][T11294] pim6reg: entered allmulticast mode [ 271.599602][T11293] pim6reg: left allmulticast mode [ 272.220523][T11324] netlink: 'syz.2.1298': attribute type 2 has an invalid length. [ 272.220547][T11324] netlink: 'syz.2.1298': attribute type 3 has an invalid length. [ 272.220561][T11324] __nla_validate_parse: 10 callbacks suppressed [ 272.220574][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1298'. [ 272.717213][T11233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.131123][T11354] pim6reg: entered allmulticast mode [ 273.163242][T11354] team0: entered allmulticast mode [ 273.168178][T11354] pim6reg: left allmulticast mode [ 273.375671][T11368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1307'. [ 273.432862][T11354] team0: left allmulticast mode [ 273.442879][T11368] netlink: 'syz.1.1307': attribute type 2 has an invalid length. [ 273.453937][T11368] netlink: 'syz.1.1307': attribute type 1 has an invalid length. [ 273.655248][T11370] syzkaller0: entered promiscuous mode [ 273.655272][T11370] syzkaller0: entered allmulticast mode [ 274.602697][T11414] netlink: 'syz.2.1314': attribute type 17 has an invalid length. [ 275.155900][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 275.155925][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1321'. [ 275.156165][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 275.156181][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1321'. [ 275.242062][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 275.242088][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 275.242114][T11454] netlink: 'syz.1.1323': attribute type 13 has an invalid length. [ 275.242129][T11454] netlink: 'syz.1.1323': attribute type 12 has an invalid length. [ 275.710939][T11477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1329'. [ 276.383741][T11473] netlink: 'syz.1.1326': attribute type 1 has an invalid length. [ 276.393228][T11484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1326'. [ 276.465127][ T1405] batadv1: left promiscuous mode [ 276.747973][T11503] syzkaller1: entered promiscuous mode [ 276.747997][T11503] syzkaller1: entered allmulticast mode [ 277.267513][T11521] tipc: Started in network mode [ 277.267562][T11521] tipc: Node identity ac1414aa, cluster identity 4711 [ 277.268469][T11521] tipc: New replicast peer: 172.20.20.187 [ 277.277835][T11521] tipc: Enabled bearer , priority 10 [ 277.334263][T11524] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1340'. [ 277.398207][T11543] Bluetooth: hci0: unsupported parameter 5135 [ 277.398232][T11543] Bluetooth: hci0: unsupported parameter 8192 [ 277.398245][T11543] Bluetooth: hci0: unsupported parameter 5135 [ 277.398258][T11543] Bluetooth: hci0: unsupported parameter 8192 [ 277.584504][T11551] bond0: (slave bond_slave_0): Releasing backup interface [ 277.604103][T11551] bond0: (slave bond_slave_1): Releasing backup interface [ 277.620569][T11551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.634124][T11551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.642994][T11551] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 277.736659][T11554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 277.832075][T11566] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1346'. [ 278.251888][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'. [ 278.385554][ T5737] tipc: Node number set to 2886997162 [ 279.392577][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 279.392638][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 279.424890][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 279.447130][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 279.447192][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 279.522789][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 279.522854][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 281.093325][T11582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.399915][T11630] sctp: [Deprecated]: syz.1.1360 (pid 11630) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.399915][T11630] Use struct sctp_sack_info instead [ 281.442607][T11628] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 281.725652][T11643] netlink: 'syz.0.1364': attribute type 3 has an invalid length. [ 281.797053][T11647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.937512][T11655] netlink: 'syz.2.1367': attribute type 1 has an invalid length. [ 282.089855][T11661] netlink: 'syz.0.1369': attribute type 3 has an invalid length. [ 282.091895][T11661] netlink: Invalid conntrack helper [ 282.091927][T11661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.688691][T11683] __nla_validate_parse: 6 callbacks suppressed [ 282.688714][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1374'. [ 282.777136][T11682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.793480][T11682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.809720][T11682] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 282.810757][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1375'. [ 282.813935][T11682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 282.838179][T11682] 8021q: adding VLAN 0 to HW filter on device bond4 [ 282.877319][T11682] 8021q: adding VLAN 0 to HW filter on device bond5 [ 282.896750][T11682] 8021q: adding VLAN 0 to HW filter on device bond6 [ 282.915191][T11682] 8021q: adding VLAN 0 to HW filter on device bond7 [ 282.918997][T11682] 8021q: adding VLAN 0 to HW filter on device bond8 [ 282.940110][T11682] 8021q: adding VLAN 0 to HW filter on device bond9 [ 282.941816][T11682] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 282.984975][T11682] 8021q: adding VLAN 0 to HW filter on device bond10 [ 283.036075][T11538] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.036127][T11538] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.036167][T11538] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.036206][T11538] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.107136][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 283.160268][T11693] tipc: Resetting bearer [ 283.188232][T11693] tipc: Disabling bearer [ 283.192348][T11701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1378'. [ 283.251056][T11700] tunl0: Caught tx_queue_len zero misconfig [ 283.308176][T11704] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 283.600637][ T31] audit: type=1804 audit(1790446045.463:5): pid=11714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1381" name="/newroot/284/cgroup.controllers" dev="tmpfs" ino=1495 res=1 errno=0 [ 283.601135][ T31] audit: type=1800 audit(1790446045.463:6): pid=11714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1381" name="cgroup.controllers" dev="tmpfs" ino=1495 res=0 errno=0 [ 283.704011][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1381'. [ 283.803279][T11720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1383'. [ 283.815827][T11720] netlink: 'syz.1.1383': attribute type 4 has an invalid length. [ 283.815849][T11720] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1383'. [ 285.497467][T11676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 285.775585][T11738] netlink: 'syz.4.1389': attribute type 5 has an invalid length. [ 285.871697][T11733] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1388'. [ 285.898189][T11750] IPVS: Error connecting to the multicast addr [ 285.911857][T11733] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1388'. [ 286.006875][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1388'. [ 286.314833][T11537] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.314913][T11537] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.315001][T11537] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.315038][T11537] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.441248][T11776] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 287.048424][T11811] netlink: 'syz.3.1410': attribute type 1 has an invalid length. [ 287.048451][T11811] netlink: 'syz.3.1410': attribute type 1 has an invalid length. [ 287.050923][T11811] netlink: 'syz.3.1410': attribute type 2 has an invalid length. [ 288.175926][T11845] __nla_validate_parse: 10 callbacks suppressed [ 288.175949][T11845] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1418'. [ 289.499201][T11823] gretap0: entered promiscuous mode [ 289.841612][T11863] ip6gre1: entered promiscuous mode [ 289.841637][T11863] ip6gre1: entered allmulticast mode [ 289.843313][T11533] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 289.843496][T11533] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 289.857940][T11863] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 289.875859][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 290.118750][T11872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1428'. [ 290.397625][ T5729] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 290.784231][ T5729] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 290.800967][T11872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.957153][T11896] can: request_module (can-proto-3) failed. [ 291.259165][T11911] sctp: [Deprecated]: syz.4.1437 (pid 11911) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.259165][T11911] Use struct sctp_sack_info instead [ 291.312707][T11913] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1438'. [ 291.348059][T11916] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1440'. [ 291.373538][T11917] netlink: 'syz.1.1439': attribute type 1 has an invalid length. [ 291.445511][T11920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1442'. [ 291.471513][T11923] ip_tables: iptables: counters copy to user failed while replacing table [ 291.473187][T11921] ip_tables: iptables: counters copy to user failed while replacing table [ 291.699714][T11932] netlink: 'syz.1.1444': attribute type 8 has an invalid length. [ 292.100258][T11924] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 292.113899][T11924] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 292.316826][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'. [ 292.367909][T11942] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 292.520573][T11957] bond0: (slave bond_slave_1): Releasing backup interface [ 292.566595][T11967] netlink: 'syz.3.1451': attribute type 10 has an invalid length. [ 292.674067][T11971] netlink: 'syz.3.1451': attribute type 10 has an invalid length. [ 292.807979][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 292.809889][T11974] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1453'. [ 292.834211][T11965] IPVS: Unknown mcast interface: batadv_slave_0 [ 292.872560][T11971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 292.890713][T11971] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 292.977603][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'. [ 293.240169][T11985] ieee802154 phy0 wpan0: encryption failed: -22 [ 293.308256][T11991] batman_adv: batadv0: Adding interface: syzkaller0 [ 293.308278][T11991] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.308312][T11991] batman_adv: batadv0: Interface activated: syzkaller0 [ 293.600678][T11999] pim6reg99999999: entered allmulticast mode [ 293.709632][T12005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.830861][T12011] netlink: 'syz.4.1463': attribute type 58 has an invalid length. [ 293.830887][T12011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1463'. [ 293.994862][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.112168][T11982] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 294.160778][T11982] batman_adv: batadv0: Removing interface: syzkaller0 [ 294.204008][T12017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1465'. [ 294.294389][T12022] netlink: 344 bytes leftover after parsing attributes in process `syz.4.1465'. [ 294.299069][T12022] netlink: 344 bytes leftover after parsing attributes in process `syz.4.1465'. [ 294.299765][T12022] netlink: 344 bytes leftover after parsing attributes in process `syz.4.1465'. [ 294.311404][T12022] netlink: 344 bytes leftover after parsing attributes in process `syz.4.1465'. [ 294.313354][T12022] netlink: 344 bytes leftover after parsing attributes in process `syz.4.1465'. [ 294.313586][T12022] netlink: 344 bytes leftover after parsing attributes in process `syz.4.1465'. [ 294.322814][T12022] netlink: 344 bytes leftover after parsing attributes in process `syz.4.1465'. [ 294.323075][T12022] netlink: 344 bytes leftover after parsing attributes in process `syz.4.1465'. [ 294.615995][T12034] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.616036][T12034] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.102640][T12046] TC_ACT_REPEAT abuse ? [ 295.128588][T12057] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 295.251956][T12063] netlink: 'syz.3.1475': attribute type 5 has an invalid length. [ 295.251981][T12063] netlink: 'syz.3.1475': attribute type 15 has an invalid length. [ 295.498772][ T5737] bridge0: entered promiscuous mode [ 295.654329][T12084] ip_tables: iptables: counters copy to user failed while replacing table [ 295.752017][T12087] bridge_slave_0: Caught tx_queue_len zero misconfig [ 295.773487][T12087] xt_cgroup: no path or classid specified [ 295.814990][T11535] IPVS: starting estimator thread 0... [ 295.905049][T12096] IPVS: using max 27 ests per chain, 64800 per kthread [ 296.065443][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 296.165823][T12118] netlink: 'syz.4.1490': attribute type 2 has an invalid length. [ 296.221398][ T5282] netdevsim netdevsim1 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 296.223439][ T5282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 296.249702][T12118] netlink: 'syz.4.1490': attribute type 3 has an invalid length. [ 297.960571][T12179] netlink: 'syz.4.1506': attribute type 1 has an invalid length. [ 298.022666][T12181] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 298.024306][T12179] bond5: entered promiscuous mode [ 298.031977][T12179] 8021q: adding VLAN 0 to HW filter on device bond5 [ 298.078551][T12179] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 298.078579][T12179] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 298.078597][T12179] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 298.250796][T12189] netlink: 'syz.4.1508': attribute type 5 has an invalid length. [ 298.798199][T12210] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 298.819606][T12210] bridge_slave_1: Caught tx_queue_len zero misconfig [ 299.291250][T12225] xt_policy: output policy not valid in PREROUTING and INPUT [ 299.308338][T12225] __nla_validate_parse: 68 callbacks suppressed [ 299.308358][T12225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1518'. [ 299.594208][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'. [ 300.240817][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1528'. [ 300.241480][T12270] netlink: 'syz.1.1528': attribute type 2 has an invalid length. [ 300.241502][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1528'. [ 300.614017][T12288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.401720][T12307] syzkaller0: entered promiscuous mode [ 301.401747][T12307] syzkaller0: entered allmulticast mode [ 301.432873][T12315] netlink: 'syz.1.1537': attribute type 4 has an invalid length. [ 301.432896][T12315] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1537'. [ 302.238791][T12359] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.239128][T12359] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.239492][T12359] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.239802][T12359] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.243279][T12359] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.243602][T12359] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.243910][T12359] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.465039][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.237768][T12384] netlink: 'syz.1.1546': attribute type 11 has an invalid length. [ 303.237793][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'. [ 304.943580][T12398] lo: left promiscuous mode [ 304.943778][T12398] tunl0: left promiscuous mode [ 304.943946][T12398] gre0: left promiscuous mode [ 304.944077][T12398] gretap0: left promiscuous mode [ 304.944341][T12398] ip_vti0: left promiscuous mode [ 304.954048][T12398] ip6_vti0: left promiscuous mode [ 304.962615][T12398] sit0: left promiscuous mode [ 304.963072][T12398] ip6tnl0: left promiscuous mode [ 304.963402][T12398] ip6gre0: left promiscuous mode [ 304.963735][T12398] ip6gretap0: left promiscuous mode [ 304.964093][T12398] bridge0: left promiscuous mode [ 304.971522][T12399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1550'. [ 304.971615][T12399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1550'. [ 305.029753][T12401] netlink: 'syz.1.1550': attribute type 1 has an invalid length. [ 305.029777][T12401] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1550'. [ 305.464148][T12398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.504897][T12398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.896138][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1551'. [ 306.209486][T12438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1560'. [ 306.242591][T12445] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1563'. [ 306.312212][T12451] sit0: Caught tx_queue_len zero misconfig [ 306.336623][T12451] netlink: 'syz.4.1564': attribute type 1 has an invalid length. [ 306.412419][T12457] netlink: 'syz.0.1565': attribute type 7 has an invalid length. [ 306.412441][T12457] netlink: 'syz.0.1565': attribute type 8 has an invalid length. [ 306.455321][T12457] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1565'. [ 306.663503][T12465] syzkaller0: entered promiscuous mode [ 306.663531][T12465] syzkaller0: entered allmulticast mode [ 306.713650][T12469] tipc: Enabled bearer , priority 0 [ 306.725264][T12469] syzkaller0: MTU too low for tipc bearer [ 306.725287][T12469] tipc: Disabling bearer [ 306.813356][T12471] net_ratelimit: 26 callbacks suppressed [ 306.813382][T12471] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 306.849662][T12467] IPVS: Scheduler module ip_vs_sip not found [ 306.872781][T12475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1569'. [ 306.939894][T12472] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1568'. [ 307.289562][T12497] netlink: 'syz.4.1574': attribute type 1 has an invalid length. [ 307.319235][T12481] syzkaller0: entered promiscuous mode [ 307.319263][T12481] syzkaller0: entered allmulticast mode [ 307.323654][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1575'. [ 307.364050][T12497] 8021q: adding VLAN 0 to HW filter on device bond6 [ 307.393460][T12499] gre1: entered promiscuous mode [ 307.393491][T12499] gre1: entered allmulticast mode [ 309.313925][T12497] bond6: (slave geneve3): making interface the new active one [ 309.324111][T12497] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 309.732302][T12504] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 309.732635][T12504] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.732989][T12504] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.112722][T12504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.551369][T12504] geneve1: left promiscuous mode [ 310.632320][T12504] bond1: left promiscuous mode [ 310.632348][T12504] bond1: left allmulticast mode [ 310.648761][T12504] tipc: Resetting bearer [ 310.650750][T12504] syzkaller0: left promiscuous mode [ 310.650765][T12504] syzkaller0: left allmulticast mode [ 310.696017][T12504] bond2: left allmulticast mode [ 310.701510][T12504] bond3: left promiscuous mode [ 310.701534][T12504] veth0_to_bond: left promiscuous mode [ 310.701759][T12504] bond3: left allmulticast mode [ 310.701774][T12504] veth0_to_bond: left allmulticast mode [ 310.702027][T12504] bond4: left allmulticast mode [ 310.776692][T12504] gre1: left promiscuous mode [ 310.776726][T12504] gre1: left allmulticast mode [ 310.948334][T11533] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.948383][T11533] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.150419][T12532] Bluetooth: hci0: unsupported parameter 5161 [ 311.150445][T12532] Bluetooth: hci0: unsupported parameter 8192 [ 311.150460][T12532] Bluetooth: hci0: unsupported parameter 5161 [ 311.150473][T12532] Bluetooth: hci0: unsupported parameter 8192 [ 311.202313][T12535] __nla_validate_parse: 1 callbacks suppressed [ 311.202335][T12535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1585'. [ 311.250882][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1580'. [ 311.250910][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1580'. [ 311.486234][T11535] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.486274][T11535] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.486319][T11535] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.486355][T11535] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.703835][T12556] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1587'. [ 312.089563][T12575] netlink: 'syz.3.1591': attribute type 1 has an invalid length. [ 312.396966][T12575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1591'. [ 312.423814][T12585] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.1593:12585 [ 312.538680][T12575] bond2: (slave bridge4): making interface the new active one [ 312.539277][T12575] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 312.772210][T12598] ipt_ah: unknown flags FF [ 313.207302][T12618] netlink: 'syz.0.1602': attribute type 1 has an invalid length. [ 313.207328][T12618] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1602'. [ 313.207552][T12620] netlink: 'syz.0.1602': attribute type 1 has an invalid length. [ 313.207570][T12620] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1602'. [ 313.477834][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 313.562806][T12626] team1: entered promiscuous mode [ 313.562884][T12626] team1: entered allmulticast mode [ 313.563356][T12626] 8021q: adding VLAN 0 to HW filter on device team1 [ 314.403460][T12662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.459695][T12662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1611'. [ 314.611207][T12671] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1613'. [ 314.856108][T12690] rdma_op ffff888054caca38 conn xmit_rdma 0000000000000000 [ 315.033791][T12696] netlink: 'syz.1.1622': attribute type 3 has an invalid length. [ 315.062913][T12694] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:0 [ 315.098026][T12694] netlink: 'syz.3.1621': attribute type 1 has an invalid length. [ 315.163661][T12694] 8021q: adding VLAN 0 to HW filter on device bond4 [ 315.247434][T12694] bond4: entered promiscuous mode [ 315.247465][T12694] bond4: entered allmulticast mode [ 315.725057][T12714] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 315.725501][T12714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.876620][T12722] tipc: Enabling of bearer rejected, failed to enable media [ 315.932613][T12724] netlink: 'syz.2.1626': attribute type 1 has an invalid length. [ 315.947325][T12728] Bluetooth: hci0: unsupported parameter 5135 [ 315.947350][T12728] Bluetooth: hci0: unsupported parameter 8192 [ 315.947366][T12728] Bluetooth: hci0: unsupported parameter 5135 [ 315.947380][T12728] Bluetooth: hci0: unsupported parameter 8192 [ 316.208959][T12724] 8021q: adding VLAN 0 to HW filter on device bond5 [ 316.230357][T12734] __nla_validate_parse: 2 callbacks suppressed [ 316.230380][T12734] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1626'. [ 316.230596][T12735] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1626'. [ 316.367917][T12746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1635'. [ 316.367956][T12746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1635'. [ 316.387599][T12746] erspan0: entered promiscuous mode [ 316.391988][T12746] gretap0: entered promiscuous mode [ 316.399368][T12746] hsr2: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 316.399430][T12746] hsr2: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 316.675795][T12759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1637'. [ 316.765725][T12763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1639'. [ 317.195521][T12785] netlink: 5396 bytes leftover after parsing attributes in process `syz.1.1645'. [ 317.195548][T12785] openvswitch: netlink: Flow key attr not present in new flow. [ 317.620985][T12800] syzkaller1: entered promiscuous mode [ 317.621011][T12800] syzkaller1: entered allmulticast mode [ 317.664439][T12807] netlink: 'syz.2.1647': attribute type 1 has an invalid length. [ 317.712977][T12807] 8021q: adding VLAN 0 to HW filter on device bond6 [ 317.869560][T12814] netlink: 'syz.0.1648': attribute type 6 has an invalid length. [ 317.869584][T12814] netlink: 'syz.0.1648': attribute type 7 has an invalid length. [ 317.869599][T12814] netlink: 'syz.0.1648': attribute type 8 has an invalid length. [ 317.869613][T12814] netlink: 'syz.0.1648': attribute type 7 has an invalid length. [ 317.869627][T12814] netlink: 1252 bytes leftover after parsing attributes in process `syz.0.1648'. [ 318.026080][T12830] IPVS: set_ctl: invalid protocol: 29 172.20.20.62:20001 [ 318.026192][T12830] IPVS: set_ctl: invalid protocol: 29 172.20.20.62:20001 [ 318.067000][T12817] trusted_key: syz.4.1649 sent an empty control message without MSG_MORE. [ 318.136422][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1654'. [ 318.196177][T12836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1653'. [ 319.511410][T12894] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 319.744837][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.537438][T12969] __nla_validate_parse: 89 callbacks suppressed [ 321.537541][T12969] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1682'. [ 321.830283][T12982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1685'. [ 321.911744][T12977] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1683'. [ 321.930889][T12977] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1683'. [ 322.011995][T12989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1684'. [ 322.064017][T12989] syzkaller1: entered promiscuous mode [ 322.064042][T12989] syzkaller1: entered allmulticast mode [ 322.084363][T12992] tc_dump_action: action bad kind [ 322.181942][T12961] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 322.369240][T13005] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 322.369272][T13005] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 322.369463][T13005] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1689'. [ 322.495260][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'. [ 322.548412][T13008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1689'. [ 322.618318][T13013] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1691'. [ 322.635821][T13010] netlink: 3560 bytes leftover after parsing attributes in process `syz.3.1690'. [ 322.889642][T13020] tipc: New replicast peer: 127.0.0.1 [ 322.908431][T13020] tipc: Enabled bearer , priority 10 [ 323.254062][T13035] ip_tables: iptables: counters copy to user failed while replacing table [ 323.632829][T13068] netlink: 'syz.0.1701': attribute type 2 has an invalid length. [ 323.947054][T13079] 8021q: VLANs not supported on ip6_vti0 [ 324.292811][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 324.513537][T11542] tipc: Subscription rejected, illegal request [ 324.523847][T13115] xt_l2tp: missing protocol rule (udp|l2tpip) [ 325.417799][T13149] netlink: 'syz.1.1718': attribute type 21 has an invalid length. [ 325.470068][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 325.608130][T13160] openvswitch: netlink: Flow key attr not present in new flow. [ 326.186374][T13183] pim6reg: entered allmulticast mode [ 326.194456][T13183] pim6reg: left allmulticast mode [ 326.520532][T13207] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 326.520571][T13207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.795296][T13221] netlink: 'syz.2.1730': attribute type 10 has an invalid length. [ 327.040910][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 327.314415][T13230] __nla_validate_parse: 13 callbacks suppressed [ 327.314438][T13230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1731'. [ 327.751832][T13251] xt_hashlimit: size too large, truncated to 1048576 [ 327.781888][T13247] 8021q: adding VLAN 0 to HW filter on device bond7 [ 327.896767][T11533] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.901423][T13254] xt_hashlimit: size too large, truncated to 1048576 [ 327.905537][T11533] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.905811][T11533] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.905850][T11533] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.962672][T13244] xt_hashlimit: size too large, truncated to 1048576 [ 327.981195][T13271] xt_hashlimit: size too large, truncated to 1048576 [ 328.117986][T13263] netlink: 'syz.4.1739': attribute type 1 has an invalid length. [ 328.118010][T13263] netlink: 756 bytes leftover after parsing attributes in process `syz.4.1739'. [ 328.705129][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 328.866456][T13298] netlink: 'syz.1.1746': attribute type 1 has an invalid length. [ 329.023000][T13306] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1746'. [ 329.049160][T13298] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.135045][T13312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1748'. [ 329.135071][T13312] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 329.202086][T13303] bond5: (slave gretap1): making interface the new active one [ 329.203107][T13303] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 329.245518][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 329.705461][T13324] syzkaller0: entered promiscuous mode [ 329.705487][T13324] syzkaller0: entered allmulticast mode [ 329.740263][T13324] gre0: Caught tx_queue_len zero misconfig [ 329.760972][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1749'. [ 329.869166][T13334] batadv1: entered promiscuous mode [ 329.869192][T13334] batadv1: entered allmulticast mode [ 329.911236][T13336] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1753'. [ 329.913049][T13336] bridge0: port 1(syz_tun) entered blocking state [ 329.933653][T13336] bridge0: port 1(syz_tun) entered disabled state [ 329.933831][T13336] syz_tun: entered allmulticast mode [ 329.950171][T13336] syz_tun: entered promiscuous mode [ 329.951924][T13336] bridge0: port 1(syz_tun) entered blocking state [ 329.952841][T13336] bridge0: port 1(syz_tun) entered forwarding state [ 329.979013][T13339] netlink: 'syz.4.1753': attribute type 9 has an invalid length. [ 330.003877][T13338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1754'. [ 330.011438][T13338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1754'. [ 330.073120][T13341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1754'. [ 330.074597][T13341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1754'. [ 330.805359][ C0] ================================================================== [ 330.805378][ C0] BUG: KASAN: double-free in rcu_free_sheaf+0x31/0x200 [ 330.805409][ C0] Free of addr ffff88802af25980 by task syz.0.1762/13370 [ 330.805425][ C0] [ 330.805437][ C0] CPU: 0 UID: 0 PID: 13370 Comm: syz.0.1762 Not tainted syzkaller #0 PREEMPT(full) [ 330.805466][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.805485][ C0] Call Trace: [ 330.805494][ C0] [ 330.805504][ C0] dump_stack_lvl+0xe8/0x150 [ 330.805538][ C0] print_address_description+0x55/0x1e0 [ 330.805570][ C0] print_report+0x58/0x70 [ 330.805597][ C0] ? rcu_free_sheaf+0x31/0x200 [ 330.805619][ C0] kasan_report_invalid_free+0xea/0x110 [ 330.805651][ C0] ? rcu_free_sheaf+0x31/0x200 [ 330.805677][ C0] ? rcu_free_sheaf+0x31/0x200 [ 330.805700][ C0] __kasan_slab_pre_free+0x104/0x120 [ 330.805736][ C0] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 330.805769][ C0] ? rcu_core+0x8a8/0x1260 [ 330.805794][ C0] rcu_free_sheaf+0x31/0x200 [ 330.805817][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 330.805848][ C0] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 330.805871][ C0] ? rcu_core+0x8a8/0x1260 [ 330.805894][ C0] rcu_core+0x926/0x1260 [ 330.805928][ C0] ? __pfx_rcu_core+0x10/0x10 [ 330.805955][ C0] ? lapic_next_event+0x11/0x20 [ 330.805984][ C0] handle_softirqs+0x226/0x860 [ 330.806018][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 330.806052][ C0] __irq_exit_rcu+0xcb/0x220 [ 330.806082][ C0] irq_exit_rcu+0x9/0x30 [ 330.806109][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 330.806141][ C0] [ 330.806149][ C0] [ 330.806158][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 330.806184][ C0] RIP: 0010:lock_is_held_type+0x106/0x150 [ 330.806217][ C0] Code: 1b 00 00 b8 ff ff ff ff 65 0f c1 05 ac cc ae 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 48 c7 [ 330.806239][ C0] RSP: 0000:ffffc900038b7820 EFLAGS: 00000206 [ 330.806263][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 8000000000000001 [ 330.806280][ C0] RDX: 0000000000000000 RSI: ffffffff8e69edb7 RDI: ffffffff8c6dac80 [ 330.806297][ C0] RBP: 00000000ffffffff R08: ffffea0001cb1907 R09: 1ffffd4000396320 [ 330.806315][ C0] R10: dffffc0000000000 R11: fffff94000396321 R12: 0000000000000246 [ 330.806331][ C0] R13: ffff88807bf98000 R14: ffff888076895f18 R15: 0000000000000005 [ 330.806362][ C0] xas_next_entry+0x1e6/0x3f0 [ 330.806395][ C0] next_uptodate_folio+0x29/0x6e0 [ 330.806447][ C0] ? folio_unlock+0x101/0x160 [ 330.806475][ C0] filemap_map_pages+0x174a/0x2170 [ 330.806521][ C0] ? filemap_map_pages+0x1d1/0x2170 [ 330.806560][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 330.806592][ C0] ? lock_acquire+0x115/0x350 [ 330.806619][ C0] ? lock_acquire+0x115/0x350 [ 330.806644][ C0] ? do_pte_missing+0x140c/0x34b0 [ 330.806665][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 330.806697][ C0] ? do_pte_missing+0x140c/0x34b0 [ 330.806729][ C0] do_pte_missing+0x20ae/0x34b0 [ 330.806759][ C0] ? handle_mm_fault+0xf1/0x3750 [ 330.806795][ C0] handle_mm_fault+0x1a53/0x3750 [ 330.806833][ C0] ? handle_mm_fault+0xf1/0x3750 [ 330.806872][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 330.806903][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 330.806938][ C0] ? __pfx_do_futex+0x10/0x10 [ 330.806982][ C0] do_user_addr_fault+0xa4f/0x1340 [ 330.807013][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 330.807039][ C0] exc_page_fault+0x6a/0xc0 [ 330.807070][ C0] asm_exc_page_fault+0x26/0x30 [ 330.807093][ C0] RIP: 0033:0x7fda08e72980 [ 330.807115][ C0] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 40 40 00 00 0f 85 1f fe ff ff e9 d3 fd ff ff 0f 1f 44 [ 330.807136][ C0] RSP: 002b:00007ffdbeae2330 EFLAGS: 00010202 [ 330.807157][ C0] RAX: 000000110c2c8000 RBX: ffffffff8a1016f4 RCX: 0000000000000006 [ 330.807175][ C0] RDX: 00000000000016f4 RSI: 000000000000005b RDI: 0000000000000040 [ 330.807190][ C0] RBP: 0000000000000000 R08: 00007fda09210000 R09: 00007fda09212000 [ 330.807206][ C0] R10: 000000008a1016f8 R11: 0000000000000003 R12: 00007fda09226038 [ 330.807223][ C0] R13: 00000000000002de R14: ffffffff8a101164 R15: 00007fda09d55720 [ 330.807241][ C0] ? nf_tables_newrule+0xa4/0x28a0 [ 330.807277][ C0] ? nf_tables_newrule+0x634/0x28a0 [ 330.807318][ C0] [ 330.807327][ C0] [ 330.807333][ C0] Allocated by task 11538: [ 330.807345][ C0] kasan_save_track+0x3e/0x80 [ 330.807369][ C0] __kasan_kmalloc+0x93/0xb0 [ 330.807393][ C0] __kmalloc_cache_noprof+0x321/0x600 [ 330.807415][ C0] hwsim_update_pib+0x7e/0x400 [ 330.807446][ C0] hwsim_set_promiscuous_mode+0x196/0x2e0 [ 330.807478][ C0] drv_set_promiscuous_mode+0x159/0x2e0 [ 330.807506][ C0] drv_start+0x4ea/0x1010 [ 330.807529][ C0] mac802154_scan_worker+0x8e6/0xe60 [ 330.807555][ C0] process_scheduled_works+0xc3d/0x1630 [ 330.807584][ C0] worker_thread+0xa47/0xfb0 [ 330.807625][ C0] kthread+0x38b/0x480 [ 330.807644][ C0] ret_from_fork+0x514/0xb70 [ 330.807662][ C0] ret_from_fork_asm+0x1a/0x30 [ 330.807720][ C0] [ 330.807726][ C0] Freed by task 13370: [ 330.807737][ C0] kasan_save_track+0x3e/0x80 [ 330.807759][ C0] kasan_save_free_info+0x40/0x50 [ 330.807791][ C0] __kasan_slab_free+0x5c/0x80 [ 330.807815][ C0] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 330.807842][ C0] rcu_free_sheaf+0x31/0x200 [ 330.807863][ C0] rcu_core+0x926/0x1260 [ 330.807885][ C0] handle_softirqs+0x226/0x860 [ 330.807914][ C0] __irq_exit_rcu+0xcb/0x220 [ 330.807942][ C0] irq_exit_rcu+0x9/0x30 [ 330.807969][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 330.807999][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 330.808023][ C0] [ 330.808029][ C0] The buggy address belongs to the object at ffff88802af25980 [ 330.808029][ C0] which belongs to the cache kmalloc-64 of size 64 [ 330.808050][ C0] The buggy address is located 0 bytes inside of [ 330.808050][ C0] 64-byte region [ffff88802af25980, ffff88802af259c0) [ 330.808074][ C0] [ 330.808080][ C0] The buggy address belongs to the physical page: [ 330.808106][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2af25 [ 330.808128][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 330.808157][ C0] page_type: f5(slab) [ 330.808178][ C0] raw: 00fff00000000000 ffff88801b0418c0 dead000000000100 dead000000000122 [ 330.808198][ C0] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 330.808211][ C0] page dumped because: kasan: bad access detected [ 330.808229][ C0] page_owner tracks the page as allocated [ 330.808238][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14690757143 [ 330.808274][ C0] post_alloc_hook+0x1f9/0x250 [ 330.808308][ C0] get_page_from_freelist+0x2209/0x2280 [ 330.808332][ C0] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 330.808356][ C0] allocate_slab+0x7d/0x620 [ 330.808383][ C0] refill_objects+0x2d5/0x350 [ 330.808411][ C0] __pcs_replace_empty_main+0x2c8/0x6c0 [ 330.808438][ C0] __kmalloc_cache_noprof+0x39b/0x600 [ 330.808459][ C0] __component_add+0x59/0x520 [ 330.808488][ C0] usb_hub_create_port_device+0x4b7/0xc40 [ 330.808518][ C0] hub_probe+0x26bc/0x3c00 [ 330.808543][ C0] usb_probe_interface+0x788/0xe50 [ 330.808573][ C0] really_probe+0x254/0xae0 [ 330.808600][ C0] __driver_probe_device+0x1e8/0x360 [ 330.808626][ C0] driver_probe_device+0x4f/0x240 [ 330.808653][ C0] __device_attach_driver+0x270/0x410 [ 330.808680][ C0] bus_for_each_drv+0x258/0x2f0 [ 330.808720][ C0] page_owner free stack trace missing [ 330.808729][ C0] [ 330.808735][ C0] Memory state around the buggy address: [ 330.808748][ C0] ffff88802af25880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 330.808765][ C0] ffff88802af25900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 330.808782][ C0] >ffff88802af25980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 330.808794][ C0] ^ [ 330.808806][ C0] ffff88802af25a00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 330.808822][ C0] ffff88802af25a80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 330.808834][ C0] ================================================================== [ 330.808882][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 331.632875][ C0] CPU: 0 UID: 0 PID: 13370 Comm: syz.0.1762 Not tainted syzkaller #0 PREEMPT(full) [ 331.642261][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.652326][ C0] Call Trace: [ 331.655622][ C0] [ 331.658502][ C0] vpanic+0x56d/0xa60 [ 331.662511][ C0] ? rcu_is_watching+0x16/0xb0 [ 331.667290][ C0] ? __pfx_vpanic+0x10/0x10 [ 331.671825][ C0] panic+0xc5/0xd0 [ 331.675571][ C0] ? __pfx_panic+0x10/0x10 [ 331.680022][ C0] check_panic_on_warn+0x89/0xb0 [ 331.684980][ C0] end_report+0x73/0x170 [ 331.689243][ C0] ? rcu_free_sheaf+0x31/0x200 [ 331.694019][ C0] kasan_report_invalid_free+0xfa/0x110 [ 331.699589][ C0] ? rcu_free_sheaf+0x31/0x200 [ 331.704368][ C0] ? rcu_free_sheaf+0x31/0x200 [ 331.709149][ C0] __kasan_slab_pre_free+0x104/0x120 [ 331.714456][ C0] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 331.720030][ C0] ? rcu_core+0x8a8/0x1260 [ 331.724489][ C0] rcu_free_sheaf+0x31/0x200 [ 331.729101][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 331.735386][ C0] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 331.740609][ C0] ? rcu_core+0x8a8/0x1260 [ 331.745041][ C0] rcu_core+0x926/0x1260 [ 331.749309][ C0] ? __pfx_rcu_core+0x10/0x10 [ 331.754005][ C0] ? lapic_next_event+0x11/0x20 [ 331.758889][ C0] handle_softirqs+0x226/0x860 [ 331.763702][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 331.768511][ C0] __irq_exit_rcu+0xcb/0x220 [ 331.773177][ C0] irq_exit_rcu+0x9/0x30 [ 331.777459][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 331.783150][ C0] [ 331.786098][ C0] [ 331.789063][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 331.795076][ C0] RIP: 0010:lock_is_held_type+0x106/0x150 [ 331.800880][ C0] Code: 1b 00 00 b8 ff ff ff ff 65 0f c1 05 ac cc ae 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 48 c7 [ 331.820506][ C0] RSP: 0000:ffffc900038b7820 EFLAGS: 00000206 [ 331.826592][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 8000000000000001 [ 331.834584][ C0] RDX: 0000000000000000 RSI: ffffffff8e69edb7 RDI: ffffffff8c6dac80 [ 331.842578][ C0] RBP: 00000000ffffffff R08: ffffea0001cb1907 R09: 1ffffd4000396320 [ 331.850576][ C0] R10: dffffc0000000000 R11: fffff94000396321 R12: 0000000000000246 [ 331.858576][ C0] R13: ffff88807bf98000 R14: ffff888076895f18 R15: 0000000000000005 [ 331.866586][ C0] xas_next_entry+0x1e6/0x3f0 [ 331.871299][ C0] next_uptodate_folio+0x29/0x6e0 [ 331.876352][ C0] ? folio_unlock+0x101/0x160 [ 331.881055][ C0] filemap_map_pages+0x174a/0x2170 [ 331.886214][ C0] ? filemap_map_pages+0x1d1/0x2170 [ 331.891444][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 331.896927][ C0] ? lock_acquire+0x115/0x350 [ 331.901631][ C0] ? lock_acquire+0x115/0x350 [ 331.906331][ C0] ? do_pte_missing+0x140c/0x34b0 [ 331.911641][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 331.917123][ C0] ? do_pte_missing+0x140c/0x34b0 [ 331.922269][ C0] do_pte_missing+0x20ae/0x34b0 [ 331.927190][ C0] ? handle_mm_fault+0xf1/0x3750 [ 331.932168][ C0] handle_mm_fault+0x1a53/0x3750 [ 331.937144][ C0] ? handle_mm_fault+0xf1/0x3750 [ 331.942120][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 331.947430][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 331.952659][ C0] ? __pfx_do_futex+0x10/0x10 [ 331.957373][ C0] do_user_addr_fault+0xa4f/0x1340 [ 331.962512][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 331.967903][ C0] exc_page_fault+0x6a/0xc0 [ 331.972439][ C0] asm_exc_page_fault+0x26/0x30 [ 331.977333][ C0] RIP: 0033:0x7fda08e72980 [ 331.981772][ C0] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 40 40 00 00 0f 85 1f fe ff ff e9 d3 fd ff ff 0f 1f 44 [ 332.001418][ C0] RSP: 002b:00007ffdbeae2330 EFLAGS: 00010202 [ 332.007508][ C0] RAX: 000000110c2c8000 RBX: ffffffff8a1016f4 RCX: 0000000000000006 [ 332.015496][ C0] RDX: 00000000000016f4 RSI: 000000000000005b RDI: 0000000000000040 [ 332.023482][ C0] RBP: 0000000000000000 R08: 00007fda09210000 R09: 00007fda09212000 [ 332.031472][ C0] R10: 000000008a1016f8 R11: 0000000000000003 R12: 00007fda09226038 [ 332.039456][ C0] R13: 00000000000002de R14: ffffffff8a101164 R15: 00007fda09d55720 [ 332.047448][ C0] ? nf_tables_newrule+0xa4/0x28a0 [ 332.052593][ C0] ? nf_tables_newrule+0x634/0x28a0 [ 332.057823][ C0] [ 332.061471][ C0] Kernel Offset: disabled [ 332.065814][ C0] Rebooting in 86400 seconds..