last executing test programs: 6.168037226s ago: executing program 2 (id=1875): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) unshare(0x2c020400) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c020000120001002dbd7000ffdbdf25260809044e214e22ff5100370700000001000000a53b000090030000ffffff7f02000000010000005b85923364aafc86c6066e1833ac250e47135edb51d7ae32117947092ee1a6a9094e16bbde9698220e96e8b777651c00b0b5692073fec626142d12b1efb5f6da492d2bdbcb132e7cad581aff4e1381d96f1d73ca79a168f4e8af407a07", @ANYRES32=r1, @ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x50, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe7b}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x5}, @TCA_TAPRIO_ATTR_FLAGS={0x8}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xff}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xe}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 5.991500556s ago: executing program 2 (id=1877): unshare(0x62040200) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000006200)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)='NQ', 0x2}], 0x1}}, {{&(0x7f0000000600)=@llc={0x1a, 0x18, 0x9, 0x6c, 0x80, 0x81, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000300)="981b", 0x2}], 0x1}}], 0x2, 0x40d5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="24000000691b317253118a850eac41085d1de3af7a3b34d73289cc777c417354f8", @ANYRES16=r3, @ANYBLOB="41002bbd7000fedbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="f81f0000000000036af371c7d8583b7ba5e6981bd2689b"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x60001044) getsockopt$sock_cred(r1, 0x1, 0x4d, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) close(r9) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRES64=r4, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYRES8=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYRES64=r10], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f91, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) 4.932282206s ago: executing program 4 (id=1889): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x70bd2a, 0xfffffffc, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0xff}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 3.170199076s ago: executing program 1 (id=1891): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x802}}, 0x2e) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xc}]}, 0x40}}, 0x0) 3.116120791s ago: executing program 4 (id=1892): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x40010, r0, 0xf2a50000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, 0x0) 3.114661673s ago: executing program 0 (id=1893): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = socket(0x10, 0x4, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000001080)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x3, 0x33, 0x20, 0x66, 0x0, 0x1, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0x4, "0f24"}]}}, {0x1e, 0xb, 0x0, @loopback}}}}}, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x8c}}, 0x0) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea1", 0x0, 0xefdf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4809}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f0000002380)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) recvmsg(r7, 0x0, 0x22) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=@ipv6_newnexthop={0x60, 0x68, 0x8, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x3}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUP={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GATEWAY={0x14, 0x6, @ip4=@private=0xa010102}, @NHA_GROUP={0x1c, 0x2, [{}, {0x1, 0xb}, {0x2, 0x8}]}, @NHA_GROUP={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7b95a050000080000008500e058a3576eb62c3a0000f2f1"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68, '\x00', r0}, 0x94) 2.95631489s ago: executing program 3 (id=1894): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[], 0x0, 0x26, 0x0, 0x1, 0xfffffffe}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1a, 0xe, &(0x7f0000000200)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd, 0x0, 0x1}, 0x10, r1}, 0x94) 2.955707095s ago: executing program 4 (id=1895): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x349, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x8000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x0, 0x8, 0x4, 0x5, {{0xa, 0x4, 0x0, 0x2, 0x28, 0x65, 0x0, 0x6, 0x7d, 0x0, @broadcast, @broadcast, {[@generic={0x94, 0x12, "a5b3ac75903f0118c7be4aa88842f541"}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x29, 0x3, 0xf8, 0x3, 0x9, @loopback, @remote, 0x8000, 0x7, 0x0, 0x2}}) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0xfcff, 0x25dfdbfc, {0x2, 0x0, 0x2}, [@NHA_OIF={0x8, 0x5, r12}]}, 0x20}, 0x1, 0x0, 0x0, 0x4002}, 0x4004010) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000880)={'vxcan0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r15, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r16, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000080), 0xc, &(0x7f0000000e80)={&(0x7f00000008c0)={0x58c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7744}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x4, 0x7, 0x2}, {0x2, 0x5, 0xbb, 0x2}, {0x38, 0x8, 0x8, 0x9}, {0x5, 0x9, 0x81, 0x5d07}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r16}}}]}}]}, 0x58c}, 0x1, 0x0, 0x0, 0x20000}, 0x10) 2.955338804s ago: executing program 1 (id=1896): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, @val=@tracing={0x0, 0x3}}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1, '\x00', r1, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) 2.868629329s ago: executing program 3 (id=1897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x2, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x2, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xa, 0xffffffb4, 0x7, 0x26, 0x4}, 0x0, 0x1, 0xfffffffe, 0x8, 0x1, 0x8, 0x20, 0x18, 0x8, 0x8, {0x80, 0x3, 0x7ff, 0x6, 0x9, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xa, 0xffffffb4, 0x7, 0x26, 0x4}, 0x0, 0x1, 0xfffffffe, 0x8, 0x1, 0x8, 0x20, 0x18, 0x8, 0x8, {0x80, 0x3, 0x7ff, 0x6, 0x9, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 2.491028543s ago: executing program 0 (id=1898): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000340)={r1, 0x0, 0x2100, 0x0, 0xee8d, 0x0, &(0x7f0000000300)=0x7}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00'}, 0x80) socket$kcm(0x2a, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xfff1}}}, 0x24}}, 0x20000000) unshare(0x2c020400) r9 = socket(0x8, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x50, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x40}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x5}, @TCA_TAPRIO_ATTR_FLAGS={0x8}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xff}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xe}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 2.43149807s ago: executing program 1 (id=1899): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7, 0x9, [0x0, 0x0, 0x3, 0x81, 0x5, 0x1, 0x80, 0x3ee3, 0x3]}, &(0x7f0000000100)=0x1a) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='\t\x00['], 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r8 = socket$kcm(0xa, 0x1, 0x106) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r9) sendmsg$kcm(r8, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.348320073s ago: executing program 4 (id=1900): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x2}, 0xc854) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x14, &(0x7f00000019c0)=ANY=[@ANYBLOB="180000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000181100"/81, @ANYBLOB="6e101fc9b7d05ebc5eead3eea1298cc6f49f4988ea4b6ba10c28e0b689d0824f054741360b832d1af2049228252c9d8b77355c6e30c41bf35adfc03260cfe2f2324298ff3a6a66ac3b3782b8a2120fb0ad7f843571418af087a604a4a7ae7831288c4f34504e388485f6180acab007ccc0f62feca97378e797b0b1bcf3dadc37c91c8e0e7dcefd80401f89491ea265490e5e46b545d01395dfbd72e77b296dd527211a1109ac9ef753e816273c83bff519fcd27fdd0fcc9666fa547f5976abf40d825e1e40fb0fe11d926bed05595873bc423bd3432c9c01dbad5719d26b813f109ef9438caeff5d27a802f2d165db96d1f71a2d09b09a372fb0ed459fd0dd09059c23cbf5416224554b7ad6c492b8cbf1bef23548c9ea52c0f835903efbecebc33545206b5d249722c82892949fe17d7afc9c70e2cdfdced74726d1e180695ac3f5f5726273f53222c4f0607f6578e8f0788efbf69de04ca2924d7cf54aeae13b2bc4da14a8e7f0a2c570437257e94194ddf9f4af7978570ba39c043fc52ba10d45a41189c00736869a37e31164888bdd0781e61f3e05cedce39ee8e2acfc1f4ae2699f10ec3115a93e1d1f817bb5c3121d3747d2ccde41c5bf8632bd2e8e6db92ff7136a15b81cc24ad67bc69f41d34e9d250a7945bb5cbc6fcfc8cfdef2ee5e3f8c8681ca5a17b5bded54fc4e47df861dfefc35c802568d1992a813ba0b611a2f326ea3a81e372290f3f9f9831ad3421902715515068ea7f068091ec73f95040c2716fc117fcef020e62f8d05b9b50ec6ebc2e194ce35912dc57701a302d5c404d4d637d076db3c31238ed1bec1c886eb9ddb5b0081210c72aac9c6718de6f8104246cc55593f367581eea68210de8184b4af267f49f419837cf914f5a6ee89d6130577dc936b5c9dcbc230dd50a3d669b3d5d6a5b3621546cc97b3f457bbce7507bb5185eb41055e9b40fbf25daa9fcf17dbe09bdcb8bcaee3c4cef9addd4f625287950a516438ddca51e3c5fb4e63e91ba186e3fc50cd7406c955a2d60aefddaba2d877c5fc7b46b9ee6b3428004da5f4d257955f39d527a5687e69246e01a02e07a9d3bf553fa341ce2bd2af245decaf0f7d703f843176104c6fa4772856a138436d65f6232113de6e62763bfbd73fdf6a4399125a7c4839b89a0f45c95308097870e1f2f6de932097dcdc3ad4ccde32dd86d208a58b2a76c25eafc7c765aab6931dbe25d66c86486e5b7f3d7fa5eb458a10b6a71a386b06c0e9926dd413c7a51f0c4a166bbc41151099f57320eb2546f5d275ab6ab2836eac429a381498ccdc1648cbd8d52605a74cfd2bdc48345d70fd5831d28dd352da918be5d499d563aa2c83c88c7f7e2cf1551bb73b42bb495601010e625c07d4e109160f67089408faa4618d1983ea0458182ede2eb31270c4cae1de45a1df192f9b9b675472e3b74405be89aa0978f34726e4342c378c38e801d487148515c5d6fefdb93f695355ff1925368c01cf07f1d6ebb077c6c57bacb28928c1b392f1dcae4c54659a3a64c661359eb1c718699d3507e1efcce752043f4173378010713c3351e83e5404ff4dd686a50a2a367e236f4579830ae0681c0ca8234dccc7d59066369b15418bcc02429b8f85983a1e9b93c5a2487c9aff8a87b3db80a89982b916b49cca3725bffb7ec64950e89cd611406b0462beff35a83816caede447d0ce6ebe8a12d55976a43c53b2700902554080139bc3551e8912d0abcdbca502fa26054ac2a6c518ce4ecede9479bff9d39712e766b23d7248ded14915ef2fcab79c0b0d8699fc29192b1550cc1f4b007b592a8df812f341fa9225a09b4267b75bb7152091117c99dec07e0b25ec4d63df16bac3f808a3526ef686fd22865975d6d14779c2bb66a4701e85294f243cfa4bdf47e37455b33f2f361ef694d786efbdd21b9f2c50f06d1659ae1201c87623513f6706010d9b41b30ecb46c62a3ba146cb9214bda1d9ab19ab89719f476ee0a643f2dd7297ec816b3746dbaee901e174d735a30b6c9c84a377fa68a5d15e3bba1995f3ef719716579d8250ceeedc12129870f032cbc868b6c9c5f63ca0596b903e2aeefb09b7c19f00b4f3facca97408152a138170d71dc3a91f1ac23978e7170bc0fabde291ea5fc4214389ff2c42687fd9ac1f7a4a0a4e5e279d21ea153472049937eacfcd59991784472359f39dda0ce4106292e757ec2616ee2c1bc094a8b1d3cd5bd3ccc5efdfc18d6e81f32145e92cc92a019dac4d13571316a5715ecdefff26a776cdd6683b00636ef1045629e77aaf37e7386a8434f5a7a19e507936e3b74fcb63dc2856172e352786de3cfa4f3d21456a61f141cd3401d2c8fa43931db6438b84665558cb35b13253d95fbc548f47420cd25048cd6de48c76016b7ea9df1792d853ee88e2b86ea026e1d077ed6a7e31437596632d24275af9255b3682deea733cac3084c271e94309672ffbf675c6033d9584c4e19c43789307c70f9cdbcc5bfd0ad7a74b5cfa9b6bd3fba02ebf5cc5f50851e6dd8a6a94719b0254a8ebdd0edd7a80b28675f18a0632e503e0c22349c02844fdd66a36b82c5c48de5b2080d4b7b0716abcd2e4aad21dbbbaaefb957321ec9b14bdbe56072e7bc6b857d0937c6873e58a1e5d6c03466f29fad9fc86c0a39fe6027d8ccc82b9f17fb0547573c12b2933fdaad591e90855ac314c03486147fcbbe9d423532274e9bd52b513362ae9bccfe7c7ca57882c3ed014da9679fef228d774ddf484d66f4d253e0337049df64c018766c301bc1365be3d9a480b688345694837f5b937174a330fdff46c8bcc8529a52e73ea51969a6c26c9969c8b4ce8c5dc0e341130b1e90d72eed4e85defbf01bc0bbd4a2d7a747b9f4540e638f781ae4ea2b402ccfaa68d143621aece5d0b5fee692e59597084ae9bc4981da9d7463149777db191e471c3242dcfbe2d0181c744b2ca650361a0655d086ea1f1abd5741a89d7951d23b935c67ba9b978050b4b60350147563370e3469203ef0ec672c244b2bb7f57187ae12d9310e6558efd39fe86c5af267657cb8b9565d705a983155a139802acaa9cfe5d04195f1c2e0dec9baa6191d515962fa67f7e3e37c7950ae33fdbe1fcfa8a0bc014013eefcbc9901374416375dac6760cb9b36febd560d1367d0e659f0c8d9ba2f4ea146e45ac9b80766c1d40155344834d013ad6ecbec6f7da3046b34bda2d8add0c2220f2a1409011c067640a11a562023517f4304008ce29ef49c12fe5f2257e5dd3be8ce60a9107105428aeca1e7b7fb452f244f36f8d129089527fcbbb317aaf0c595507cbf3bb61c0baf9136dba9af4d2fcc38646a8e1f543f80b29b00238d5ca9efb837cbf77847200f11e5a6385d86faf8057f229eaa095b9f236c48c317012cd88462549b9a346868afe7dc2f0b75aa67dd2fb1069bd7ddb83be3526ac15398fb51aedd12cf743d4ca6557ac599a8d8008ca21aa590168bf50dc4f867712faa6aaad202841acde276c2384e5bd9bc1e28eb2cb0e9f41c31d665a76cb812d749b14095d7b0b0ef76df5b8bfe7a63d4b5c6b009570a3ca8e912ad2a6f996832b2393bca68ec231b872f11cee0820560a1548ca151e859596d6b13050a99a07d30d4131c86f922bac5d26ed238c6e8ac65604f52f4187c1476c72e1dafe6feb3f1f776d999e00fde220ecebf184c8163a58411ae3d928cc9272a307865b8e8251c2bbc54252662b23bd6c86c8f6421f0dc220aad11f737a516ca77e33908434a6ccbae0455b5843f9053ea0d189254f19e914ba909dc66b352af74e23ab91aee55c284516addacec0de7ce81b3e954d07e5642a3577a8c215678eff2bd2561212938c532a57aba1579c303423e2896721c1196df1d3e4c104f7a24e5018f6a3f04fdfc8b151d34e673a7532e60b3059321d1e296371140dbaa109f316c401055a7a69589b40d1359fa42859792678d4baf3b99da0e569a42eb2fdfddd03095e45d6ded9dd8a5fe90b719d283d095c09f2a86d1268457df7cbb9eac28f187682f90b03a075a5aea4015cbfb76427ffa9c22bdd3e6573ce47b02efa1975ce90eb362dfa82abf49a8f319d8449698891a5778103c3936b41afed52a25fac475415de99a82b3cd930c8a2ff36c6fab344d726eac02a6d58ece19578d1f9d24b3831a86ef0dfad4bfe87262f3d6508be9f64aaa8e26feef8a21dc6cc072dea54135fec0368e1eaadfc1bc20686e863b0aac5c293ea7e7d14f7415b49d2f5c054529b34aa083eb6ab772a478ff6201140cf504a6e21dad81a0e502aebf8ab59922169e8e8380cfb906858e28407619f6f5e8f8662448b02f4413af5ef8077dff138737b65a1dac6e19248cc9ad681e29a9eca41d488aae77dcb230771cb13f4bf36d1a507b2cb8e73537565c072aaaa3555c2df640c9810196f3d362c2f66b1fbab2bcd55e783cd27a487b9a24be92296259b007ff810a0318a3066e3cdd4f3038f64b3b8b3cb322696ee0d1340c5ec1bd11a6ce28fd76cc39a773415e010c46a9e83f69d5859c86e56cf028264c27d9a627389ea89d4b9d61891faca37c3c19740f126666e24c15424c6db3353d0242d7321210dad3a015d274d886985b979e8e451927d742fdad558f14799eaa47ee5a46c85486498db7c17ac543fdd1acca3eeb5ad73b33887b3e8cf2fa6d314e9eee0284f4d126e83a4527ebf71843233f682712213b66ee2ae9699d62524a45969585a3494d392adaaa297406ee9269ad83e8f19209c39fbbbcc335d7ca4b11e241869eec331153ca2810e176eb3886eac3baf3d48bda7d9e24e0fe15e85a98c29d0661e86f2876937cbd33ab69f29ec2bf56b71df58d59a001b95a2030c0bde4f0d820d20cb1b11b01d61a7f8d6d0de639eca266f83057d1b679cd4f4cd4538c41461afd3dcbdcd96b507fdfc9bd9910e8599a1846d35c953654a2e7e13a04c523db773292a018f030411187e93ff17784251bbca38e9133126ca4cbe2f7f6dbdbf0b3b52a7e188c6b7ee6a1893bcefb7174cdb752812e4da043ddc92a4e6d86c07995e8fe2a1302ad0af9c37d3be68fd4dcc2bb72efc1b80bf14844559e8e2debb44050c923383daf0f1e2a81ae4f9ac058d043dd3893e24d5ea26368ffb66692989fd3afb75540a0cf61e5628fd44408e005127d02ca6a5fa63931ed053f7cc3bc21281d4c09c1b1c44ff62d5659ac59c4bcbc060b869fb7f976e103881c38af5363ffa894053662423076e1600ca1420b28ac0ec5a8f6525822119a2810634267d2f3207931eed589dc9045a7e41e3efe1b69756a9e4721e6fa949e5bd70b7a9861899940e675384cb2dfc5206a4dcb7f07027f55c2726f111245844801ae993ae344aa1a5adaea95bdf2dcff4e90c41b5a993ac6f50de95b970cedb1157522ba037644ae1e8fd6bfe071356657d185d2d00ccb4a4f654f0ace3ef07f7ecdc1e6fdad9f22f5a42cd477e0affd2d0c7304dc1793c6c08dccb378bcd4c99ca9d188ad668d6af0655d12a2904515b9e551ed6fcb17382283cda3b9df26a11ec2468de4e649554d1f823bad418500449793d5dd5c8f0b76f33b4f36923062fcef21fd1e09e530e630c92bf065736d259021a0f57dc3385fb1f9981a0ab203525e27e0f76bbd629fd10733cf1d5a2102d41e363c6eddae1766dfc3afb4eade6a711490e68a91fbfe0b04558254872d2e965221a65716f2f0e82e926ce39073056b25fc5113c43060c45879909fb2922e3b8b4ba1db84f1ec0144b7e4fad7308b8fd6df18885517a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x59, 0x0, 0x0, 0x0, 0x3}, 0x94) unshare(0x28000600) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="00000000f5fffff20000000010ffffff20b15b84001000000000001810f70df20f84a8810c1a06a8896c908fd26ba0685bc532c0ca364f1e893c6ae2e9f3fffe7aba990a93adbdcec86188bb6047ea29c7a5ef7d66df53a3adb9ec767270b1d30e3af094957c61b0d4900da8002e0033e305bd436a67fc74915f24979c840800dcd37f23", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, r1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x4, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES16=r3, @ANYRESOCT, @ANYRESDEC=r8, @ANYRESOCT=r5], 0x44}, 0x1, 0x0, 0x0, 0x4008080}, 0x15) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.239951886s ago: executing program 0 (id=1901): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}, [@alu={0x4, 0x0, 0xa, 0x0, 0x0, 0x1, 0x4}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x80) 2.239492043s ago: executing program 3 (id=1902): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r2, 0xfffffffffffff001, 0x2, 0x5}) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_team\x00', 0x0}) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000380)=""/31, 0x1f, 0x0, &(0x7f00000003c0)=""/200, 0xc8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x4e5a, 0x14, &(0x7f0000000280)=""/20, 0x41000, 0x10, '\x00', r4, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x10, 0x100, 0xc}, 0x10, r5, r3, 0xa, &(0x7f0000000540)=[r3], &(0x7f0000000580)=[{0x5, 0x2, 0x4, 0x7}, {0x3, 0x3, 0xd, 0x9}, {0x3, 0x2, 0x7, 0x1}, {0x4, 0x5, 0x0, 0x2}, {0x2, 0x2, 0x4, 0x5}, {0x3, 0x5, 0x5, 0x6}, {0x3, 0x4}, {0x3, 0x4, 0xd, 0x9}, {0x3, 0x1, 0xc}, {0x1, 0x1, 0xa, 0x2}], 0x10, 0x8}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$F2FS_IOC_SEC_TRIM_FILE(r6, 0x4018f514, &(0x7f0000000700)={0x5, 0x5, 0x1}) (async) sendmsg$nl_route(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@setneightbl={0x64, 0x43, 0x4, 0x70bd2d, 0x25dfdbfd, {0x2}, [@NDTA_THRESH1={0x8, 0x2, 0x7}, @NDTA_THRESH1={0x8, 0x2, 0x7}, @NDTA_THRESH1={0x8, 0x2, 0x3ff}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x8}, @NDTA_PARMS={0x2c, 0x6, 0x0, 0x1, [@NDTPA_IFINDEX={0x8, 0x1, r4}, @NDTPA_ANYCAST_DELAY={0xc, 0xc, 0xfc}, @NDTPA_IFINDEX={0x8, 0x1, r4}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0x4923}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), r3) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x58, r7, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c040}, 0x4000840) sendmsg$nl_route_sched(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=@getqdisc={0x24, 0x26, 0x0, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xf, 0x1}, {0xf, 0x6}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, 0x2, 0x7, 0x3, 0x0, 0x0, {0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4084) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000c00)) (async) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000c40)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000001080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000010c0)=0x0) sendmsg$NFC_CMD_VENDOR(r8, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r9, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x857c}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4) (async) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f00000011c0), 0x4) (async) bind$bt_hci(r3, &(0x7f0000001200)={0x1f, 0x0, 0x3}, 0x6) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@int=0xa, 0x4) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000001280)={0x0, 0x3c, 0x64ec, 0x809, 0x4, 0x6e}, &(0x7f00000012c0)=0x14) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001300)={r12, 0x37eb}, 0x8) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000001340)={r12, 0xe5, "67796e3f70d229f1ceb897104391f8330e8bb4a7d9bc7c5f3088d52433561da497b5c898e27522ee2813f41ff408fd8dc632fbdacab7560eaa387206f01a99130e232f7c7b69f5faef4cded7990a8a2a3d57505e5892c5d7852e585260c1fda6bffe9e7d520c57773433a02cda96cee8c8e3bdfdac96560e8bc6d8f3c51072416439e27c2fe96e3f1e9748bd60d77d0bdc983fb67093fe306622e203cfdaf3ac5306e1cfd276c5c2d5717b21251724abe02d910072e3f18f59c3a020810324625c875d308d8cdf66ad9d82d5f5a797cbf19dff82b52ffdb0b0fbe61611ab6e67ee56fe89ca"}, &(0x7f0000001440)=0xed) (async) ioctl$NILFS_IOCTL_GET_SUINFO(r11, 0x80186e84, &(0x7f0000001500)={&(0x7f0000001480)=[{0x3, 0x2}, {0xffffffffffffffff, 0x1, 0x2}, {0x1000, 0xfff, 0x7c8f76085e50155f}, {0x3ab, 0x800000, 0x2}, {0x0, 0x4, 0x1}, {0x8, 0x0, 0x2}], 0x6, 0x10, 0xfbff, 0x8000000000000000}) connect$vsock_stream(r3, &(0x7f0000001540)={0x28, 0x0, 0x2710}, 0x10) 1.401098062s ago: executing program 0 (id=1903): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create(0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001880)={{0x0, 0x8, 0x1000, 0x9, 0x1, 0x4, 0x828b, 0x4, 0x5, 0x1429, 0x0, 0xc, 0xc, 0x1, 0x7}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000116900)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "f45eea8aed62fb"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000117900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000117b00)={{0x0, 0xab7e, 0x6, 0x4, 0x491, 0x5, 0x0, 0x3f5, 0x80, 0x80, 0x8, 0x4, 0x1, 0x1, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000118b00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x6, "7fc27c7dfa4ed5"}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x72, 0xffffffffffffffff, 0xf9029000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000119b00)={{0x0, 0x10, 0x8, 0xa90d, 0x35, 0x7, 0x9, 0x10, 0x4, 0x1, 0x0, 0x6, 0x7, 0x3, 0x2}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000300)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x8, "68ac6f2426dd77"}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x42510}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r6, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x0, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe, 0x8}, {0x5, 0xffe0}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004840}, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req={0x80000001, 0x2, 0x1, 0x6}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001"], 0x118}}, 0x0) 1.299462353s ago: executing program 3 (id=1904): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r1, &(0x7f0000000380)="0295896b", &(0x7f0000000540)=""/50}, 0x20) (async, rerun: 32) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000000)='\x00', 0x842000, &(0x7f0000000080)={@_ha_fsid={[0x480, 0x1]}, {0xca8a, 0xaed, 0x3, 0x8e}}, 0x2, &(0x7f00000000c0), &(0x7f0000000180)=0x2}) (async) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000640)={r3, r3}) (async) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0xa92) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 64) ppoll(&(0x7f0000000240)=[{r4, 0x8407}, {r0, 0x2}], 0x2, 0x0, 0x0, 0x0) (rerun: 64) 1.22062497s ago: executing program 2 (id=1905): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000300)=0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000001080)={@void, @void, @eth={@broadcast, @link_local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x14, 0x68, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @multicast1}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x2}}}}}}}, 0x3e) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg$inet(r3, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000540)="a3be", 0x2}], 0x1}}], 0x1, 0x4004810) ioctl$XFS_IOC_SCRUBV_METADATA(r3, 0xc0285840, &(0x7f00000002c0)={0x3ff, 0x8001, 0x4, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000240)=[{0x12, 0xfe, 0x10}, {0x10, 0xfe, 0x6}, {0x18, 0x101, 0x462cd7d4}, {0x0, 0x1ff, 0x1000}, {0x5, 0x101, 0x40}, {0x2, 0xfe, 0x1200000}]}) 1.153401316s ago: executing program 1 (id=1906): unshare(0x400) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="59b6c909", 0x4}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000200)="f87be602784b", 0x6}], 0x1}}], 0x2, 0x4c040) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0x1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000740)={{0x0}, 0x0}, 0x20) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904ff8100000002020000000200", 0x1b) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x78) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x10}, {0xffff, 0x7}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x7d, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x8, 0x1}}}}]}, 0x58}}, 0x44884) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000140)={0x3}) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000141401"], 0x18}}, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) setsockopt$RDS_CONG_MONITOR(r9, 0x114, 0x6, 0x0, 0x0) accept4$inet(r1, &(0x7f0000000300)={0x2, 0x0, @multicast1}, &(0x7f0000000340)=0x10, 0x800) 1.117923795s ago: executing program 4 (id=1907): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, 0xfff, 0x4}, &(0x7f0000000640)=0x90) getsockopt$inet_mreqn(r0, 0x0, 0x3, &(0x7f0000000580)={@local, @loopback, 0x0}, &(0x7f00000005c0)=0xc) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@restrict={0x5, 0x0, 0x0, 0xb, 0x3}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x1}]}, {0x0, [0x1c6b10ec18b68181, 0x5f, 0xc5ab8c04f61c48a2, 0x5f, 0xff72020da58075a7, 0x0]}}, &(0x7f0000000640)=""/72, 0x3c, 0x48, 0x1, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x58c, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x38}, @alu={0x0, 0x0, 0xc, 0xb, 0x5, 0x84, 0xffffffffffffffef}, @map_fd={0x18, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}]}, &(0x7f0000000140)='syzkaller\x00', 0x5a2b, 0xf7, &(0x7f0000000480)=""/247, 0x40f00, 0x47, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000700)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000740)=[{0x0, 0x2, 0x8, 0x5}, {0x4, 0x1, 0x10, 0xc}, {0x0, 0x4, 0xa}, {0x5, 0x2, 0x6, 0x1}, {0x1, 0x1, 0x3, 0xa}, {0x2, 0x4, 0x0, 0x7}], 0x10, 0x2}, 0x94) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}}, 0x0) 992.629273ms ago: executing program 0 (id=1908): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x2, 0x8, 0x1}) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000f40), 0x4) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000400)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x20000850) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000080)={0x5a, 0x1, 0xfffffffb}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r6, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000210001002dbd700000000000ffffffff000000000000000000000000e0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000e800110000000000000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe800000000000000000000000000020000000000000000000000a0000000000000000000000000000000000fe8000000000000000000000000000bb7f000001"], 0x138}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0x0, 0x3}}}, 0x24}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x5, 0x1001, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x50) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x18e6bc551a4993c2, 0x7f, r8, 0xdf}, 0xc) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = socket(0x200000000000011, 0x2, 0xd) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r10, &(0x7f0000000080)={0x11, 0x800, r11, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r9, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x23) 925.190833ms ago: executing program 3 (id=1909): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r0 = socket(0xb, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001400b59508000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200ff020000000000000000000000000001080008000207"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400a59500000000000000000a6800c8", @ANYRES32=r2, @ANYBLOB="14000200ff020000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 751.065638ms ago: executing program 1 (id=1910): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000080), &(0x7f0000001500)=@udp6=r2}, 0x20) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @local}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000200)={0x10, {{0x29, 0x0, 0x36000000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}}}, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f250000000c22803c00010004e00000017f00000100186371ae9b1c030c10094d6a000000"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6erspan0\x00'}) 676.442428ms ago: executing program 2 (id=1911): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0x10) recvmmsg(r0, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x5c}}, 0x0) 555.449299ms ago: executing program 3 (id=1912): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000d1fc0000000007a047500e829164b4"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r12, r9, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r13) r14 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r14, 0x28) poll(&(0x7f0000000040)=[{r14, 0x20}], 0x1, 0x404) 471.26354ms ago: executing program 1 (id=1913): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005a00)=[{{&(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}], 0x18}}], 0x1, 0x400c050) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYRES32], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@local, @loopback, 0x0, "0e6a1fa6d7a0fb1a935b4458ef0ff411a55283f82c6b90362b3ec34404cca89f", 0x7, 0xc, 0x0, 0x15c}, 0x3c) 364.286711ms ago: executing program 2 (id=1914): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) (async) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@getlink={0x3c, 0x12, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8120, 0x6002}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xb6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) (async) close(0x3) 246.883402ms ago: executing program 0 (id=1915): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) pipe(0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8040) ppoll(&(0x7f0000000180), 0xfdfe, 0x0, 0x0, 0xfffffffffffffd86) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x804) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) write(r2, 0x0, 0x0) write(r1, &(0x7f00000003c0)="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", 0x1000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200009a0faeb748cb4ee18e0cb060d7a5714b2d38300100000400030008601e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000100"/28], 0x48) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) 217.617346ms ago: executing program 4 (id=1916): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x389c, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000209500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x312, 0x5, 0xd, 0x3, 0x9, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) socket(0x1, 0x6, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a010100000000e4000000010002000900010073797a30000000000900030073797a320a05000000000000000000010000050c00024000000000000000010900010073797a3000000000140000001100010000000000000000000700000a"], 0xa8}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000740)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmmsg(r7, 0x0, 0x0, 0x80) 0s ago: executing program 2 (id=1917): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000010000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd7000000000000200050028000000000000004c001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000008002400"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x604, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x74}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (rerun: 64) kernel console output (not intermixed with test programs): ve_0 may have been left with an inconsistent configuration, please check. [ 107.043048][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 107.068057][ T7261] validate_nla: 2 callbacks suppressed [ 107.068071][ T7261] netlink: 'syz.0.388': attribute type 5 has an invalid length. [ 107.110204][ T7262] netlink: 52 bytes leftover after parsing attributes in process `syz.0.388'. [ 107.137331][ T7262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.230032][ T7261] geneve2: entered promiscuous mode [ 107.244073][ T7261] geneve2: entered allmulticast mode [ 107.269061][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 107.286417][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 107.301516][ T7258] openvswitch: netlink: Invalid VLAN frame [ 107.313746][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 107.336129][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 108.787484][ T7201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.362199][ T7313] netlink: 'syz.3.405': attribute type 1 has an invalid length. [ 109.546342][ T7318] netlink: 'syz.0.406': attribute type 1 has an invalid length. [ 109.580905][ T7318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.154140][ T7326] sctp: [Deprecated]: syz.2.410 (pid 7326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.154140][ T7326] Use struct sctp_sack_info instead [ 110.202823][ T7326] sctp: [Deprecated]: syz.2.410 (pid 7326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.202823][ T7326] Use struct sctp_sack_info instead [ 110.610772][ T7341] __nla_validate_parse: 6 callbacks suppressed [ 110.610789][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'. [ 110.671355][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 110.767270][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.416'. [ 110.791282][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.808626][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.858103][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.875811][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.890187][ T7354] tipc: Enabled bearer , priority 0 [ 110.980412][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.988761][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.050591][ T7357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.064153][ T7357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.153591][ T7353] tipc: Disabling bearer [ 111.221105][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.247885][ T142] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.272330][ T142] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.281670][ T142] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.298079][ T7373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.422'. [ 111.407098][ T7377] pimreg: entered allmulticast mode [ 111.495049][ T7379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.360788][ T7381] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.508291][ T7418] netlink: 36 bytes leftover after parsing attributes in process `syz.2.433'. [ 113.160864][ T7453] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 113.547647][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'. [ 113.742058][ T7491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.453'. [ 114.010487][ T7512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.459'. [ 114.037921][ T7510] x_tables: duplicate underflow at hook 2 [ 114.220743][ T7529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.462'. [ 114.242867][ T7531] netlink: 'syz.4.464': attribute type 1 has an invalid length. [ 114.436734][ T7540] x_tables: unsorted entry at hook 2 [ 114.767233][ T7560] geneve3: entered promiscuous mode [ 115.127597][ T7575] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 116.141323][ T7623] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 117.219912][ T7659] netlink: 40 bytes leftover after parsing attributes in process `syz.0.483'. [ 117.686878][ T7652] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.139631][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.490'. [ 118.419382][ T7681] netlink: 'syz.4.491': attribute type 16 has an invalid length. [ 118.462525][ T7681] netlink: 'syz.4.491': attribute type 17 has an invalid length. [ 118.510883][ T7686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.494'. [ 118.597373][ T7681] geneve2: left promiscuous mode [ 118.609180][ T7681] ip6gre1: left promiscuous mode [ 118.617207][ T7681] ip6gre1: left allmulticast mode [ 118.631442][ T7681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.640538][ T7681] geneve3: left promiscuous mode [ 118.673646][ T7689] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 118.686176][ T7689] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 118.714925][ T7689] veth0_virt_wifi: entered allmulticast mode [ 118.749756][ T7689] veth0_virt_wifi: entered promiscuous mode [ 118.799094][ T7689] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 118.806375][ T7689] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 119.288625][ T7683] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.483558][ T7717] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.504'. [ 119.513060][ T7683] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.530139][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 119.580607][ T7709] netlink: 'syz.0.502': attribute type 8 has an invalid length. [ 119.594347][ T7709] sch_fq: defrate 0 ignored. [ 119.622080][ T7721] netlink: 84 bytes leftover after parsing attributes in process `syz.1.505'. [ 119.655364][ T7683] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.694189][ T7727] netlink: 36 bytes leftover after parsing attributes in process `syz.3.507'. [ 119.704314][ T7724] sctp: [Deprecated]: syz.1.505 (pid 7724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.704314][ T7724] Use struct sctp_sack_info instead [ 119.743558][ T7727] syzkaller0: entered promiscuous mode [ 119.750389][ T7727] syzkaller0: entered allmulticast mode [ 119.820034][ T7683] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.969342][ T98] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.997734][ T98] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.050183][ T35] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.097202][ T35] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.367613][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 120.431036][ T7752] netlink: 88 bytes leftover after parsing attributes in process `syz.2.517'. [ 120.441147][ T7752] nbd: must specify an index to disconnect [ 120.493887][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.516'. [ 120.580864][ T7759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.618420][ T7762] bond2: entered promiscuous mode [ 120.623617][ T7762] bond2: entered allmulticast mode [ 120.630054][ T7762] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.637574][ T7766] bond1: option mode: unable to set because the bond device is up [ 121.597758][ T7800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.863201][ T7791] netlink: 'syz.1.528': attribute type 6 has an invalid length. [ 121.895315][ T7818] netlink: 'syz.0.534': attribute type 61 has an invalid length. [ 122.178073][ T7828] can: request_module (can-proto-3) failed. [ 122.351595][ T7847] vlan0: entered promiscuous mode [ 122.367470][ T7847] bridge0: entered promiscuous mode [ 122.375144][ T7848] netlink: 'syz.0.541': attribute type 9 has an invalid length. [ 122.460323][ T7851] __nla_validate_parse: 9 callbacks suppressed [ 122.460339][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 122.498974][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 122.508184][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'. [ 122.802248][ T7863] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.548'. [ 123.125966][ T7879] netlink: 'syz.4.553': attribute type 1 has an invalid length. [ 123.196545][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 123.213307][ T7879] bond3: entered promiscuous mode [ 123.236172][ T7879] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.308591][ T7879] bond3: (slave bridge1): making interface the new active one [ 123.322166][ T7879] bridge1: entered promiscuous mode [ 123.330493][ T7879] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 123.337284][ T7868] openvswitch: netlink: Flow key attr not present in new flow. [ 123.346917][ T7890] IPVS: length: 4096 != 216 [ 123.645718][ T7899] bond4: (slave bond_slave_1): Device is not our slave [ 123.658742][ T7899] bond4: option active_slave: invalid value (bond_slave_1) [ 123.670673][ T7899] bond4 (unregistering): Released all slaves [ 123.828032][ T7910] netlink: 40 bytes leftover after parsing attributes in process `syz.1.558'. [ 124.161522][ T7923] netlink: 56 bytes leftover after parsing attributes in process `syz.3.563'. [ 124.162368][ T7924] netlink: 'syz.3.563': attribute type 10 has an invalid length. [ 124.191306][ T7925] netlink: 'syz.3.563': attribute type 10 has an invalid length. [ 124.211477][ T7923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.563'. [ 124.229822][ T7924] team0: Port device dummy0 added [ 124.268153][ T7925] team0: Port device dummy0 removed [ 124.285682][ T7925] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 124.517449][ T7940] xt_socket: unknown flags 0x8 [ 124.575564][ T7945] syz_tun: entered promiscuous mode [ 124.603485][ T7945] macvtap1: entered promiscuous mode [ 124.637890][ T7945] syz_tun: left promiscuous mode [ 124.642724][ T7950] netlink: 'syz.0.570': attribute type 10 has an invalid length. [ 124.697952][ T7952] netlink: 'syz.0.570': attribute type 10 has an invalid length. [ 124.718469][ T7950] bond0: (slave dummy0): Releasing backup interface [ 124.730258][ T7950] team0: Port device dummy0 added [ 124.761242][ T7952] team0: Port device dummy0 removed [ 124.790186][ T7952] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 124.801184][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'. [ 124.896368][ T7962] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.574'. [ 124.981679][ T7963] netlink: 'syz.2.573': attribute type 8 has an invalid length. [ 125.164087][ T7963] : entered promiscuous mode [ 125.428749][ T7999] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 125.849995][ T8031] netlink: 'syz.2.595': attribute type 3 has an invalid length. [ 125.901640][ T8029] vlan0: entered promiscuous mode [ 125.919188][ T8029] gretap0: entered promiscuous mode [ 125.953902][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 126.315185][ T8057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.429780][ T8064] netlink: 'syz.0.603': attribute type 1 has an invalid length. [ 126.506126][ T8064] netlink: 'syz.0.603': attribute type 1 has an invalid length. [ 126.545927][ T8065] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 126.557331][ T8065] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 126.559976][ T8072] netlink: 'syz.2.604': attribute type 2 has an invalid length. [ 126.876568][ T8090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.160640][ T8104] openvswitch: netlink: Multiple metadata blocks provided [ 127.206009][ T8106] netlink: 'syz.3.612': attribute type 32 has an invalid length. [ 127.315484][ T8106] bond3: Setting coupled_control to off (0) [ 127.798621][ T8151] __nla_validate_parse: 7 callbacks suppressed [ 127.798639][ T8151] netlink: 44 bytes leftover after parsing attributes in process `syz.2.617'. [ 128.179961][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'. [ 128.309836][ T8185] netlink: 34 bytes leftover after parsing attributes in process `syz.1.626'. [ 128.644285][ T8189] bond3: option all_slaves_active: invalid value (127) [ 128.652479][ T8189] bond3 (unregistering): Released all slaves [ 129.158337][ T8225] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 129.261020][ T8223] netlink: 36 bytes leftover after parsing attributes in process `syz.3.636'. [ 129.289264][ T8223] netlink: 36 bytes leftover after parsing attributes in process `syz.3.636'. [ 129.462046][ T8242] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 129.492651][ T8244] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 129.827383][ T8265] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 129.843711][ T8266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.648'. [ 130.039326][ T8276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.651'. [ 130.211872][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.656'. [ 130.304740][ T8297] netlink: 'syz.0.655': attribute type 1 has an invalid length. [ 130.467194][ T8307] netlink: 'syz.4.657': attribute type 1 has an invalid length. [ 130.477253][ T8301] syzkaller0: entered promiscuous mode [ 130.496171][ T8301] syzkaller0: entered allmulticast mode [ 130.516429][ T8297] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 130.607528][ T8314] gretap1: entered allmulticast mode [ 130.741526][ T8325] vxcan2: entered allmulticast mode [ 130.801111][ T8327] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 130.811866][ T8327] netlink: 'syz.0.663': attribute type 83 has an invalid length. [ 130.929496][ T8330] netlink: 'syz.0.664': attribute type 3 has an invalid length. [ 130.937381][ T8330] netlink: 152 bytes leftover after parsing attributes in process `syz.0.664'. [ 131.176950][ T8342] netlink: 32 bytes leftover after parsing attributes in process `syz.0.668'. [ 131.593620][ T8356] netlink: 'syz.1.672': attribute type 13 has an invalid length. [ 131.637436][ T8358] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.727787][ T994] IPVS: starting estimator thread 0... [ 131.844955][ T8361] IPVS: using max 39 ests per chain, 93600 per kthread [ 132.359063][ T5644] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 132.671766][ T8342] veth1_macvtap: left promiscuous mode [ 132.678574][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.684045][ T8352] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 132.688849][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.873321][ T8372] x_tables: duplicate underflow at hook 2 [ 132.959949][ T8375] nbd: socks must be embedded in a SOCK_ITEM attr [ 133.181147][ T8386] 8021q: VLANs not supported on wg0 [ 133.354715][ T8398] __nla_validate_parse: 2 callbacks suppressed [ 133.354731][ T8398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.686'. [ 133.384258][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 133.414259][ T8398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.524599][ T8409] netlink: 20 bytes leftover after parsing attributes in process `syz.1.689'. [ 133.543118][ T8413] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 133.648216][ T8420] netlink: 56 bytes leftover after parsing attributes in process `syz.0.692'. [ 133.688141][ T8415] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 133.831838][ T8429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.693'. [ 133.868535][ T8429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.693'. [ 133.899088][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.693'. [ 134.113654][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.688'. [ 134.224877][ T8447] syzkaller1: entered promiscuous mode [ 134.246516][ T8447] syzkaller1: entered allmulticast mode [ 134.526759][ T8460] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 134.677035][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.705'. [ 134.680367][ T8474] veth0_virt_wifi: entered allmulticast mode [ 134.854696][ T8479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.707'. [ 134.899081][ T8481] bond0: (slave dummy0): Releasing backup interface [ 134.936643][ T8481] bridge_slave_0: left allmulticast mode [ 134.942733][ T8481] bridge_slave_0: left promiscuous mode [ 134.950739][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.963276][ T8481] bridge_slave_1: left allmulticast mode [ 134.973573][ T8487] netlink: 'syz.1.710': attribute type 1 has an invalid length. [ 134.973997][ T8481] bridge_slave_1: left promiscuous mode [ 134.989867][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.008939][ T8481] bond0: (slave bond_slave_0): Releasing backup interface [ 135.017615][ T8481] bond0: (slave bond_slave_1): Releasing backup interface [ 135.027716][ T8481] team0: Port device team_slave_0 removed [ 135.035577][ T8481] team0: Port device team_slave_1 removed [ 135.041717][ T8481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.049657][ T8481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.058200][ T8481] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.276284][ T8492] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.307214][ T8492] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.319380][ T8492] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 135.364496][ T8501] pim6reg: entered allmulticast mode [ 135.381201][ T8500] pim6reg: left allmulticast mode [ 135.475748][ T8492] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.500883][ T8492] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.514939][ T8492] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 135.656325][ T8492] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.667253][ T8492] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.678393][ T8492] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 135.743354][ T8510] xt_hashlimit: size too large, truncated to 1048576 [ 135.867226][ T8492] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.899922][ T8492] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.926252][ T8492] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 136.184779][ T8138] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.199947][ T8138] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 136.211893][ T8138] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 136.254454][ T8138] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.266747][ T8138] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 136.277186][ T8138] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 136.300931][ T8138] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.310211][ T8138] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 136.320651][ T8138] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 136.329254][ T5644] Bluetooth: hci4: link tx timeout [ 136.335856][ T5644] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.348279][ T5644] Bluetooth: hci4: link tx timeout [ 136.354780][ T5644] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.362634][ T5644] Bluetooth: hci4: link tx timeout [ 136.367950][ T5644] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.375985][ T5644] Bluetooth: hci4: link tx timeout [ 136.382247][ T5644] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.407117][ T8138] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.416337][ T8138] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 136.425241][ T8138] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 136.511037][ T8549] 8021q: adding VLAN 0 to HW filter on device bond4 [ 136.703262][ T8557] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 137.024450][ T8575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.659687][ T8617] netlink: 'syz.3.744': attribute type 11 has an invalid length. [ 137.685384][ T8617] netlink: 'syz.3.744': attribute type 5 has an invalid length. [ 137.731507][ T8621] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 137.857573][ T8624] bond5 (unregistering): Released all slaves [ 138.126026][ T35] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.160784][ T35] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.283114][ T8641] bond3: option miimon: invalid value (18446744073709551607) [ 138.319667][ T8641] bond3: option miimon: allowed values 0 - 2147483647 [ 138.330428][ T8641] bond3 (unregistering): Released all slaves [ 138.429884][ T35] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.435839][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 138.451531][ T35] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.629674][ T8673] lo: Caught tx_queue_len zero misconfig [ 138.636269][ T8668] netlink: 'syz.3.757': attribute type 10 has an invalid length. [ 138.644925][ T8668] __nla_validate_parse: 14 callbacks suppressed [ 138.644941][ T8668] netlink: 224 bytes leftover after parsing attributes in process `syz.3.757'. [ 138.670586][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 138.871553][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.764'. [ 138.905445][ T8688] netlink: del zone limit has 8 unknown bytes [ 139.090674][ T8690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.765'. [ 139.122855][ T8690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.765'. [ 139.368731][ T8712] bridge_slave_1: left promiscuous mode [ 139.382859][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.400283][ T8712] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 139.796748][ T50] Bluetooth: hci3: command tx timeout [ 139.823948][ T8738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.777'. [ 139.842412][ T8728] netlink: 192 bytes leftover after parsing attributes in process `syz.2.776'. [ 140.036478][ T8745] macsec1: entered promiscuous mode [ 140.040283][ T8736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.778'. [ 140.041846][ T8745] virt_wifi0: entered promiscuous mode [ 140.236855][ T8754] netlink: 'syz.1.781': attribute type 49 has an invalid length. [ 140.567963][ T8754] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 140.594292][ T8754] ip6gretap0: entered promiscuous mode [ 140.608505][ T8754] ip6gretap0: entered allmulticast mode [ 140.980021][ T8786] netlink: 68 bytes leftover after parsing attributes in process `syz.0.789'. [ 141.149750][ T8791] veth0_macvtap: Caught tx_queue_len zero misconfig [ 141.315753][ T8797] netlink: 48 bytes leftover after parsing attributes in process `syz.2.791'. [ 142.117192][ T8823] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 142.167905][ T8823] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 142.290428][ T8817] macvlan0: entered promiscuous mode [ 142.321032][ T8817] macvlan0: entered allmulticast mode [ 142.345374][ T8817] bond2: (slave macvlan0): Error -98 calling set_mac_address [ 142.380089][ T8839] tipc: Enabling of bearer rejected, failed to enable media [ 142.436471][ T8848] bond5: entered promiscuous mode [ 142.441762][ T8848] bond5: entered allmulticast mode [ 142.447622][ T8848] 8021q: adding VLAN 0 to HW filter on device bond5 [ 142.639372][ T8862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.647356][ T8862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.663411][ T8862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.681079][ T8862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.137396][ T8893] netlink: 'syz.3.806': attribute type 7 has an invalid length. [ 143.175922][ T8900] netlink: 'syz.2.808': attribute type 10 has an invalid length. [ 143.286544][ T8905] netlink: 'syz.3.810': attribute type 2 has an invalid length. [ 143.435658][ T8911] can: request_module (can-proto-0) failed. [ 143.512259][ T8925] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 143.552401][ T8925] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 143.595909][ T8925] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 143.601359][ T8923] gretap1: entered allmulticast mode [ 143.624142][ T8925] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 143.644846][ T8925] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 143.665013][ T8925] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 145.589441][ T8865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 145.601173][ T8992] validate_nla: 51 callbacks suppressed [ 145.601189][ T8992] netlink: 'syz.2.815': attribute type 3 has an invalid length. [ 145.665676][ T8992] netlink: 'syz.2.815': attribute type 1 has an invalid length. [ 145.688746][ T8992] __nla_validate_parse: 72 callbacks suppressed [ 145.688759][ T8992] netlink: 224 bytes leftover after parsing attributes in process `syz.2.815'. [ 145.740102][ T8994] netlink: 'syz.3.816': attribute type 3 has an invalid length. [ 145.766717][ T8996] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.777643][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 145.798819][ T8996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.807392][ T8996] IPv6: NLM_F_CREATE should be set when creating new route [ 145.814787][ T8996] IPv6: NLM_F_CREATE should be set when creating new route [ 145.822060][ T8996] IPv6: NLM_F_CREATE should be set when creating new route [ 145.930228][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 145.949996][ T9010] netlink: 32 bytes leftover after parsing attributes in process `syz.2.820'. [ 145.957981][ T9008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.080741][ T9013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 146.185713][ T9016] batadv0: entered promiscuous mode [ 146.193330][ T9016] macsec1: entered allmulticast mode [ 146.199207][ T9016] batadv0: entered allmulticast mode [ 146.206602][ T9016] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 146.218577][ T9016] batadv0: left allmulticast mode [ 146.225549][ T9016] batadv0: left promiscuous mode [ 146.610726][ T9044] xt_l2tp: v2 sid > 0xffff: 8388608 [ 146.769232][ T9047] bond3: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 146.789319][ T9047] bond3 (unregistering): Released all slaves [ 146.907267][ T9056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.832'. [ 146.929917][ T9049] bond6: option arp_interval: invalid value (18446744072731645613) [ 146.939076][ T9049] bond6: option arp_interval: allowed values 0 - 2147483647 [ 146.949214][ T9049] bond6 (unregistering): Released all slaves [ 147.126239][ T9069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.836'. [ 147.236221][ T9079] netlink: 'syz.4.838': attribute type 3 has an invalid length. [ 147.273598][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 147.294089][ T9079] netlink: 'syz.4.838': attribute type 1 has an invalid length. [ 147.309080][ T9079] netlink: 232 bytes leftover after parsing attributes in process `syz.4.838'. [ 147.462837][ T9096] netlink: 'syz.1.841': attribute type 10 has an invalid length. [ 147.674134][ T9107] xt_l2tp: missing protocol rule (udp|l2tpip) [ 147.751207][ T9111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.845'. [ 147.918578][ T9111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.443605][ T9152] vlan0: entered promiscuous mode [ 148.879588][ T9174] netlink: 'syz.3.864': attribute type 1 has an invalid length. [ 148.900821][ T9174] netlink: 'syz.3.864': attribute type 11 has an invalid length. [ 149.243629][ T9198] sctp: [Deprecated]: syz.3.870 (pid 9198) Use of int in max_burst socket option. [ 149.243629][ T9198] Use struct sctp_assoc_value instead [ 149.773711][ T9238] netlink: 'syz.2.880': attribute type 30 has an invalid length. [ 149.801457][ T9238] bond60: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 149.815400][ T9238] bond60 (unregistering): Released all slaves [ 150.746843][ T9276] syzkaller1: entered promiscuous mode [ 150.778898][ T9276] syzkaller1: entered allmulticast mode [ 151.139024][ T9300] __nla_validate_parse: 12 callbacks suppressed [ 151.139039][ T9300] netlink: 52 bytes leftover after parsing attributes in process `syz.2.896'. [ 151.183670][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.895'. [ 151.186196][ T9300] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 151.201045][ T9300] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.208612][ T9300] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.848225][ T9324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.402955][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 152.510352][ T9360] netlink: 'syz.4.912': attribute type 1 has an invalid length. [ 152.701033][ T9369] bond6: (slave dummy0): making interface the new active one [ 152.710339][ T9369] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 152.729754][ T9375] bond6: entered promiscuous mode [ 152.744657][ T9375] dummy0: entered promiscuous mode [ 152.775410][ T9318] infiniband syz0: set down [ 152.782917][ T9318] infiniband syz0: added bond_slave_1 [ 152.883592][ T9318] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 152.912938][ T9360] bond6: (slave dummy0): Releasing active interface [ 152.929622][ T9360] dummy0: left promiscuous mode [ 152.939682][ T9318] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 152.986786][ T9318] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 153.078425][ T9360] bond0: (slave bond_slave_0): Releasing backup interface [ 153.127211][ T9360] bond0: (slave bond_slave_1): Releasing backup interface [ 153.146068][ T9393] sctp: [Deprecated]: syz.0.917 (pid 9393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.146068][ T9393] Use struct sctp_sack_info instead [ 153.169360][ T9318] RDS/IB: syz0: added [ 153.180201][ T9318] smc: adding ib device syz0 with port count 1 [ 153.185598][ T9393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.189915][ T9318] smc: ib device syz0 port 1 has no pnetid [ 153.220349][ T9360] team0: Port device team_slave_0 removed [ 153.243282][ T9360] team0: Port device team_slave_1 removed [ 153.273298][ T9360] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 153.363620][ T9359] bond6: left promiscuous mode [ 153.713110][ T9407] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20004 [ 154.309897][ T9439] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.320256][ T9439] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 154.333608][ T9439] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 154.463026][ T9439] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.494847][ T9439] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 154.513363][ T9439] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 154.616140][ T9459] netlink: 76 bytes leftover after parsing attributes in process `syz.4.931'. [ 154.673209][ T9439] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.693871][ T9439] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 154.714099][ T9439] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 154.803243][ T9439] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.853869][ T9439] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 154.878274][ T9439] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 155.060510][ T9479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.934'. [ 155.082917][ T9478] netlink: 20 bytes leftover after parsing attributes in process `syz.4.934'. [ 155.084519][ T9479] netlink: 'syz.4.934': attribute type 61 has an invalid length. [ 155.124772][ T1131] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.138437][ T1131] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 155.156689][ T1131] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 155.197543][ T1131] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.214452][ T1131] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 155.223154][ T1131] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 155.266230][ T1131] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.285091][ T1131] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 155.301906][ T1131] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 155.364829][ T1131] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.388897][ T1131] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 155.406128][ T1131] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 155.651467][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.937'. [ 155.772866][ T9497] bond7: entered promiscuous mode [ 155.793298][ T9497] 8021q: adding VLAN 0 to HW filter on device bond7 [ 155.866431][ T9497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.060763][ T9515] netlink: 'syz.4.942': attribute type 9 has an invalid length. [ 156.085013][ T9515] netlink: 'syz.4.942': attribute type 6 has an invalid length. [ 156.106796][ T9515] netlink: 'syz.4.942': attribute type 7 has an invalid length. [ 156.109701][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'. [ 156.124424][ T9515] netlink: 'syz.4.942': attribute type 8 has an invalid length. [ 156.142976][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.941'. [ 156.355152][ T9530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.943'. [ 156.604035][ T5743] IPVS: starting estimator thread 0... [ 156.647361][ T9537] netlink: 'syz.3.946': attribute type 29 has an invalid length. [ 156.670788][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 156.699429][ T9537] netlink: 'syz.3.946': attribute type 29 has an invalid length. [ 156.707453][ T9539] IPVS: using max 32 ests per chain, 76800 per kthread [ 156.731460][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 156.745041][ T9537] netlink: 'syz.3.946': attribute type 29 has an invalid length. [ 156.765799][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 156.803507][ T9551] hsr0: entered promiscuous mode [ 156.823082][ T9537] netlink: 'syz.3.946': attribute type 29 has an invalid length. [ 156.874890][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 156.910678][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 156.936804][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 156.968388][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 157.006550][ T9555] syzkaller1: entered promiscuous mode [ 157.010508][ T9564] x_tables: duplicate underflow at hook 3 [ 157.021965][ T9555] syzkaller1: entered allmulticast mode [ 157.055966][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 157.091046][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 157.143338][ T9536] hsr0: left promiscuous mode [ 157.486101][ T9593] syzkaller0: entered promiscuous mode [ 157.516015][ T9593] syzkaller0: entered allmulticast mode [ 157.810489][ T9610] netlink: 'syz.3.962': attribute type 11 has an invalid length. [ 157.886077][ T9573] validate_nla: 18 callbacks suppressed [ 157.886093][ T9573] netlink: 'syz.0.953': attribute type 10 has an invalid length. [ 157.916218][ T9573] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 158.536031][ T9647] netlink: 'syz.1.967': attribute type 11 has an invalid length. [ 158.607846][ T9638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.161562][ T9685] netlink: 'syz.4.973': attribute type 1 has an invalid length. [ 159.208121][ T9688] netlink: 'syz.3.974': attribute type 10 has an invalid length. [ 159.418017][ T9688] team0: Port device dummy0 added [ 160.209859][ T9725] syzkaller0: entered promiscuous mode [ 160.254007][ T9725] syzkaller0: entered allmulticast mode [ 160.996683][ T9782] tipc: Failed to remove unknown binding: 66,1,1/2099199:1419910047/1419910049 [ 161.100309][ T9787] sctp: [Deprecated]: syz.4.992 (pid 9787) Use of int in max_burst socket option deprecated. [ 161.100309][ T9787] Use struct sctp_assoc_value instead [ 161.234749][ T9783] block nbd1: server does not support multiple connections per device. [ 161.286349][ T9783] block nbd1: shutting down sockets [ 161.313395][ T9792] vlan2: entered promiscuous mode [ 161.321685][ T9792] bridge0: entered promiscuous mode [ 161.895368][ T9812] __nla_validate_parse: 23 callbacks suppressed [ 161.895385][ T9812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1000'. [ 161.941013][ T9807] veth0_virt_wifi: left allmulticast mode [ 162.177810][ T9807] bond2: left promiscuous mode [ 162.185014][ T9807] bond2: left allmulticast mode [ 162.201025][ T9807] bond3: left promiscuous mode [ 162.216504][ T9807] bridge1: left promiscuous mode [ 162.242752][ T9807] gretap1: left allmulticast mode [ 162.250362][ T9807] bond5: left promiscuous mode [ 162.260230][ T9807] bond5: left allmulticast mode [ 162.279155][ T9807] bond7: left promiscuous mode [ 162.292015][ T57] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.320622][ T57] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.346701][ T57] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.370490][ T57] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.433821][ T57] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.446130][ T57] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.455715][ T57] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.464786][ T57] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.489620][ T9825] netlink: 'syz.2.1002': attribute type 9 has an invalid length. [ 163.106263][ T9822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.781322][ T9870] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1014'. [ 163.821581][ T9870] netlink: 'syz.4.1014': attribute type 6 has an invalid length. [ 164.306988][ T9874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1016'. [ 164.359040][ T9874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1016'. [ 164.498676][ T9894] netlink: 'syz.3.1021': attribute type 22 has an invalid length. [ 164.528125][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1021'. [ 164.678171][ T9894] netlink: 'syz.3.1021': attribute type 22 has an invalid length. [ 164.686804][ T8136] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.701090][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1021'. [ 164.714407][ T8136] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.743648][ T8136] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.763001][ T8136] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.088460][ T9] IPVS: starting estimator thread 0... [ 165.250382][ T9926] IPVS: using max 31 ests per chain, 74400 per kthread [ 165.550660][ T9945] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1036'. [ 165.905615][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 165.938186][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 166.100834][ T9992] netlink: 'syz.4.1048': attribute type 11 has an invalid length. [ 166.109219][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'. [ 166.435475][T10001] nbd: device at index 64 is going down [ 166.660242][ T9858] udevd[9858]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 166.720434][ T9858] udevd[9858]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 166.850589][T10022] bond8 (unregistering): Released all slaves [ 166.904270][T10025] ip6tnl0: Caught tx_queue_len zero misconfig [ 166.974373][T10025] tunl0: Caught tx_queue_len zero misconfig [ 167.037430][T10025] syzkaller0: entered promiscuous mode [ 167.058138][T10025] syzkaller0: entered allmulticast mode [ 167.112698][T10031] syzkaller0: entered promiscuous mode [ 167.123926][T10031] syzkaller0: entered allmulticast mode [ 167.236414][T10042] netlink: 'syz.0.1064': attribute type 1 has an invalid length. [ 167.269897][T10042] __nla_validate_parse: 4 callbacks suppressed [ 167.269911][T10042] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1064'. [ 167.302828][T10042] netlink: 'syz.0.1064': attribute type 1 has an invalid length. [ 167.311018][T10042] netlink: 634 bytes leftover after parsing attributes in process `syz.0.1064'. [ 167.554342][T10067] ÿ: renamed from bond_slave_0 [ 167.809244][ T8142] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.819913][T10083] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1075'. [ 167.830775][T10085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1076'. [ 167.841008][T10085] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 167.864101][T10083] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1075'. [ 167.874014][ T8142] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.883658][ T8142] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.895047][ T8142] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.520667][T10110] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.009492][ T29] audit: type=1804 audit(1779078257.882:2): pid=10120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1083" name="/newroot/211/memory.events" dev="tmpfs" ino=1097 res=1 errno=0 [ 169.032834][ T29] audit: type=1800 audit(1779078257.882:3): pid=10120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1083" name="memory.events" dev="tmpfs" ino=1097 res=0 errno=0 [ 169.035168][T10120] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 169.065614][T10120] bond3 (unregistering): Released all slaves [ 169.345187][T10129] nicvf0: tun_chr_ioctl cmd 2148553947 [ 170.281662][T10047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.475907][T10136] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1090'. [ 170.648814][T10152] tipc: Enabled bearer , priority 27 [ 170.650349][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1092'. [ 170.660081][T10152] netlink: 'syz.3.1093': attribute type 1 has an invalid length. [ 170.852952][T10163] netlink: 'syz.3.1093': attribute type 10 has an invalid length. [ 170.861000][T10163] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1093'. [ 170.911786][T10157] bond5: (slave veth5): Enslaving as an active interface with a down link [ 170.959257][T10165] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1095'. [ 170.976843][T10152] team0: Port device dummy0 removed [ 171.004650][T10152] bond5: (slave dummy0): making interface the new active one [ 171.013531][T10152] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 171.023289][T10163] dummy0: entered promiscuous mode [ 171.031513][T10163] bond5: (slave dummy0): Releasing active interface [ 171.317887][T10182] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 171.551943][T10201] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1106'. [ 171.781046][ T809] tipc: Node number set to 564661960 [ 172.312669][T10233] __nla_validate_parse: 3 callbacks suppressed [ 172.312685][T10233] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1118'. [ 172.330302][T10233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1118'. [ 172.949475][T10265] netlink: 'syz.2.1126': attribute type 12 has an invalid length. [ 173.022240][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1126'. [ 173.072856][T10272] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 173.470333][T10292] netlink: 'syz.0.1133': attribute type 4 has an invalid length. [ 173.733173][T10306] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1138'. [ 173.744053][T10306] netlink: Unknown conntrack attr (0) [ 173.767517][T10306] vlan2: entered promiscuous mode [ 173.772800][T10306] gretap0: entered promiscuous mode [ 174.394783][T10332] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1145'. [ 174.540780][T10339] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 174.576602][T10339] bond3 (unregistering): Released all slaves [ 175.050972][T10369] syzkaller1: entered promiscuous mode [ 175.070850][T10369] syzkaller1: entered allmulticast mode [ 176.267482][T10403] xt_CT: No such helper "snmp" [ 176.634175][T10420] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 176.705488][T10422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1164'. [ 176.746724][T10420] 8021q: adding VLAN 0 to HW filter on device bond60 [ 176.865719][T10422] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 176.885322][T10422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1164'. [ 176.945860][T10422] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 176.979782][T10422] bond60: (slave batadv1): Enslaving as an active interface with an up link [ 177.134473][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'. [ 177.160728][T10430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1167'. [ 177.221556][T10436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1169'. [ 177.268608][T10436] batadv_slave_1: Caught tx_queue_len zero misconfig [ 177.485624][T10449] netlink: 'syz.1.1172': attribute type 13 has an invalid length. [ 177.765902][T10465] sctp: [Deprecated]: syz.4.1175 (pid 10465) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.765902][T10465] Use struct sctp_sack_info instead [ 178.461684][T10491] netlink: 'syz.4.1180': attribute type 8 has an invalid length. [ 178.510461][T10490] vlan2: entered promiscuous mode [ 178.533671][T10493] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1173'. [ 178.707585][T10495] pim6reg: entered allmulticast mode [ 178.736978][T10500] pim6reg: left allmulticast mode [ 178.927217][T10507] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 179.070956][T10512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1187'. [ 179.089797][T10512] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1187'. [ 179.107833][T10514] ±ÿ: renamed from lo [ 179.457166][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'. [ 179.473948][T10524] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1191'. [ 179.476399][T10525] netlink: 'syz.3.1192': attribute type 1 has an invalid length. [ 179.998615][T10541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1196'. [ 183.253431][T10557] netlink: 193 bytes leftover after parsing attributes in process `syz.1.1199'. [ 183.365102][T10562] netlink: 'syz.0.1201': attribute type 12 has an invalid length. [ 183.396805][T10562] netlink: 'syz.0.1201': attribute type 29 has an invalid length. [ 183.419559][T10562] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1201'. [ 183.443237][T10562] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1201'. [ 183.655003][T10563] syzkaller0: entered promiscuous mode [ 183.670858][T10563] syzkaller0: entered allmulticast mode [ 183.820146][T10580] netlink: 'syz.4.1206': attribute type 21 has an invalid length. [ 185.487966][T10580] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1206'. [ 185.589180][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1207'. [ 185.658824][T10594] netlink: 'syz.1.1208': attribute type 1 has an invalid length. [ 185.664057][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1207'. [ 185.685657][T10597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1209'. [ 185.921397][T10606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.108750][T10622] sock: sock_set_timeout: `syz.2.1216' (pid 10622) tries to set negative timeout [ 186.129568][T10624] netlink: 'syz.1.1217': attribute type 2 has an invalid length. [ 186.151369][T10623] sock: sock_set_timeout: `syz.2.1216' (pid 10623) tries to set negative timeout [ 186.192189][T10624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 186.584830][T10648] netlink: 'syz.2.1226': attribute type 11 has an invalid length. [ 186.607133][T10645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1225'. [ 186.665837][T10650] netlink: 'syz.1.1227': attribute type 1 has an invalid length. [ 186.899142][T10662] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1230'. [ 186.938181][T10664] netlink: 'syz.1.1231': attribute type 30 has an invalid length. [ 186.959019][T10664] sock: sock_timestamping_bind_phc: sock not bind to device [ 187.081601][T10670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1234'. [ 187.098791][T10670] nbd: must specify at least one socket [ 187.107496][ T29] audit: type=1800 audit(1779078275.982:4): pid=10666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1232" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1230 res=0 errno=0 [ 187.307092][T10680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1238'. [ 187.344507][T10680] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1238'. [ 187.480948][T10696] netlink: 'syz.4.1242': attribute type 12 has an invalid length. [ 187.490224][T10695] netlink: 'syz.4.1242': attribute type 12 has an invalid length. [ 187.527379][T10695] netlink: 'syz.4.1242': attribute type 39 has an invalid length. [ 187.751916][T10697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.795586][T10697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.922382][ T1131] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.938734][ T1131] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 187.955807][ T1131] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 187.976407][ T1131] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.995320][ T1131] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 188.008460][ T1131] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 188.037772][ T1131] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.053277][ T1131] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 188.062798][ T1131] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 188.072498][ T1131] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.081358][ T1131] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 188.089931][ T1131] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 188.132020][T10718] batadv1: entered promiscuous mode [ 188.157772][T10718] batadv1: entered allmulticast mode [ 188.465883][T10710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.255521][T10776] syzkaller1: entered promiscuous mode [ 189.272421][T10776] syzkaller1: entered allmulticast mode [ 189.461768][T10792] xt_l2tp: v2 tid > 0xffff: 37482740 [ 189.969509][T10805] syzkaller0: entered promiscuous mode [ 189.975343][T10805] syzkaller0: entered allmulticast mode [ 190.179278][T10807] syzkaller0: entered promiscuous mode [ 190.193857][T10807] syzkaller0: entered allmulticast mode [ 190.709580][T10820] syzkaller0: entered promiscuous mode [ 190.723798][T10820] syzkaller0: entered allmulticast mode [ 192.255887][T10785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.712282][T10849] __nla_validate_parse: 7 callbacks suppressed [ 192.712299][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 192.734607][T10849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1277'. [ 192.800719][T10861] netlink: 364 bytes leftover after parsing attributes in process `syz.3.1280'. [ 192.969900][T10874] validate_nla: 1 callbacks suppressed [ 192.969916][T10874] netlink: 'syz.0.1281': attribute type 1 has an invalid length. [ 193.059848][T10878] tipc: Failed to remove unknown binding: 66,0,0/0:204801663/204801665 [ 193.069454][T10878] tipc: Failed to remove unknown binding: 66,0,0/0:204801663/204801664 [ 193.137929][T10882] tipc: Failed to remove unknown binding: 66,0,0/0:204801663/204801665 [ 193.141633][T10883] Cannot find del_set index 8192 as target [ 193.176291][T10882] tipc: Failed to remove unknown binding: 66,0,0/0:204801663/204801664 [ 193.409970][T10874] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.972233][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1290'. [ 193.993693][T10919] batadv_slave_0: Caught tx_queue_len zero misconfig [ 194.076430][T10924] pim6reg1: entered promiscuous mode [ 194.088221][T10924] pim6reg1: entered allmulticast mode [ 194.116467][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.258455][T10932] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1295'. [ 194.325881][T10934] netlink: 'syz.2.1297': attribute type 1 has an invalid length. [ 194.478935][T10937] bond62: (slave geneve3): making interface the new active one [ 194.499948][T10937] bond62: (slave geneve3): Enslaving as an active interface with an up link [ 194.515905][T10940] x_tables: ip_tables: ah match: only valid for protocol 51 [ 194.527047][ T1109] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 194.547864][ T1109] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 194.561080][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. [ 194.577604][T10944] netlink: 'syz.4.1299': attribute type 30 has an invalid length. [ 194.577681][T10940] v: renamed from batadv0 [ 194.591034][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1299'. [ 194.606152][ T1109] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 194.624849][ T1109] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 194.710781][T10952] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.724141][T10952] netlink: 'syz.1.1302': attribute type 7 has an invalid length. [ 194.933109][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1305'. [ 194.974608][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1305'. [ 194.985923][T10961] netlink: 'syz.1.1305': attribute type 20 has an invalid length. [ 195.030542][T10966] tipc: New replicast peer: 255.255.255.255 [ 195.059137][T10966] tipc: Enabled bearer , priority 10 [ 195.158185][T10972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1309'. [ 195.168932][T10973] netlink: 'syz.3.1310': attribute type 1 has an invalid length. [ 195.202216][T10972] syzkaller0: entered promiscuous mode [ 195.207878][T10972] syzkaller0: entered allmulticast mode [ 195.281112][T10973] bond6: entered promiscuous mode [ 195.291511][T10973] 8021q: adding VLAN 0 to HW filter on device bond6 [ 195.332402][T10980] IPVS: persistence engine module ip_vs_pe_À not found [ 195.342149][T10984] bond6: (slave bridge2): making interface the new active one [ 195.359490][T10984] bridge2: entered promiscuous mode [ 195.368687][T10984] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 195.380893][ T46] IPVS: starting estimator thread 0... [ 195.409998][T10978] vlan2: entered allmulticast mode [ 195.428289][T10978] bond6: entered allmulticast mode [ 195.444256][T10978] bridge2: entered allmulticast mode [ 195.473922][T10987] IPVS: using max 42 ests per chain, 100800 per kthread [ 196.203980][ T5643] Bluetooth: hci3: command 0x0406 tx timeout [ 196.204381][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 196.216058][ T5635] Bluetooth: hci2: command 0x0406 tx timeout [ 197.383999][T11024] netlink: 'syz.2.1322': attribute type 6 has an invalid length. [ 197.436531][T11023] nbd: must specify at least one socket [ 197.530876][T11035] x_tables: duplicate underflow at hook 3 [ 197.538021][T11037] x_tables: duplicate underflow at hook 3 [ 197.627991][T11041] netlink: 'syz.3.1326': attribute type 1 has an invalid length. [ 197.653042][T11042] netlink: 'syz.4.1327': attribute type 2 has an invalid length. [ 197.853219][T11057] netlink: 'syz.1.1330': attribute type 1 has an invalid length. [ 197.987324][T11058] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.031219][T11071] validate_nla: 1 callbacks suppressed [ 198.031236][T11071] netlink: 'syz.3.1332': attribute type 66 has an invalid length. [ 198.060472][T11073] __nla_validate_parse: 8 callbacks suppressed [ 198.060489][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1334'. [ 198.130803][T11075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1334'. [ 198.185247][T11076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.382831][T11080] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1335'. [ 198.429898][T11086] veth0_macvtap: Caught tx_queue_len zero misconfig [ 198.518334][ T8142] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 198.570186][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1338'. [ 198.574084][T11097] Unsupported ieee802154 address type: 0 [ 198.656698][T11102] netlink: 'syz.3.1341': attribute type 1 has an invalid length. [ 198.677248][T11096] bond8: option broadcast_neighbor: invalid value (30) [ 198.687590][T11102] netlink: 'syz.3.1341': attribute type 11 has an invalid length. [ 198.701946][T11096] bond8 (unregistering): Released all slaves [ 198.710503][T11102] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1341'. [ 198.799866][T11108] sctp: [Deprecated]: syz.0.1343 (pid 11108) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.799866][T11108] Use struct sctp_sack_info instead [ 198.994337][T11115] netlink: 'syz.1.1345': attribute type 32 has an invalid length. [ 199.014788][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'. [ 199.046436][T11117] xt_connbytes: Forcing CT accounting to be enabled [ 199.062743][T11115] bond5: Setting coupled_control to off (0) [ 199.154487][T11122] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1347'. [ 199.193296][T11122] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1347'. [ 199.264552][T11122] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1347'. [ 199.280628][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'. [ 199.651329][T11149] syzkaller1: entered promiscuous mode [ 199.659591][T11149] syzkaller1: entered allmulticast mode [ 199.714893][T11151] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20000 [ 200.016227][T11168] netlink: 'syz.2.1364': attribute type 4 has an invalid length. [ 200.192434][T11187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.398050][T11199] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 200.520786][T11199] bond6: entered promiscuous mode [ 200.558714][T11199] bond6: entered allmulticast mode [ 200.581469][T11199] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.665120][T11208] erspan2: entered allmulticast mode [ 200.694949][T11208] bond6: (slave erspan2): making interface the new active one [ 200.702615][T11208] erspan2: entered promiscuous mode [ 200.752340][T11208] bond6: (slave erspan2): Enslaving as an active interface with an up link [ 200.797926][T11219] syz.1.1370 (11219) used obsolete PPPIOCDETACH ioctl [ 200.807041][T11225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.960694][T11236] netlink: 'syz.0.1379': attribute type 29 has an invalid length. [ 201.207519][T11248] ÿ: renamed from bond_slave_0 [ 201.671221][T11284] netlink: 'syz.0.1389': attribute type 1 has an invalid length. [ 201.698277][T11281] bond8: (slave bond_slave_1): Device is not bonding slave [ 201.705734][T11284] netlink: 'syz.0.1389': attribute type 1 has an invalid length. [ 201.726606][T11281] bond8: option active_slave: invalid value (bond_slave_1) [ 201.747524][T11281] bond8 (unregistering): Released all slaves [ 201.768177][T11280] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 201.796776][T11284] syzkaller0: entered promiscuous mode [ 201.856192][T11284] syzkaller0: entered allmulticast mode [ 201.945097][T11298] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 202.139704][T11307] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 203.091575][T11337] netlink: 'syz.1.1403': attribute type 15 has an invalid length. [ 203.517679][T11354] __nla_validate_parse: 16 callbacks suppressed [ 203.517695][T11354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1408'. [ 203.560450][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 203.642436][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1408'. [ 203.801986][T11354] 8021q: adding VLAN 0 to HW filter on device bond8 [ 203.870729][T11363] 8021q: adding VLAN 0 to HW filter on device bond8 [ 203.912973][T11363] bond8: (slave vcan0): The slave device specified does not support setting the MAC address [ 203.949437][T11363] bond8: (slave vcan0): Error -95 calling set_mac_address [ 203.974825][T11380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1411'. [ 203.985013][T11386] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1413'. [ 204.009665][T11386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1413'. [ 204.515695][T11417] netlink: 'syz.4.1418': attribute type 1 has an invalid length. [ 204.522577][T11418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1419'. [ 204.534235][T11417] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1418'. [ 204.553499][T11417] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1418'. [ 204.597371][T11417] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1418'. [ 204.922276][T11434] netlink: 'syz.1.1423': attribute type 5 has an invalid length. [ 205.006398][T11434] geneve3: entered promiscuous mode [ 205.011747][T11434] geneve3: entered allmulticast mode [ 205.024780][ T35] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 205.055416][ T35] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 205.090685][ T35] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 205.120273][ T35] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 205.211107][T11445] netlink: 'syz.1.1425': attribute type 1 has an invalid length. [ 207.308843][T11491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.327134][T11491] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.370217][T11491] 8021q: adding VLAN 0 to HW filter on device v [ 207.547799][T11491] batman_adv: v: Interface activated: batadv_slave_0 [ 207.570264][T11491] batman_adv: v: Interface activated: batadv_slave_1 [ 207.587509][T11491] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.606644][T11491] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 207.618015][T11491] veth1_vlan: left promiscuous mode [ 207.625874][T11491] veth0_vlan: left promiscuous mode [ 207.633332][T11491] veth0_vlan: entered promiscuous mode [ 207.641644][T11491] veth1_vlan: entered promiscuous mode [ 207.668185][T11491] veth1_macvtap: left promiscuous mode [ 207.675647][T11491] veth0_macvtap: left promiscuous mode [ 207.682873][T11491] veth0_macvtap: entered promiscuous mode [ 207.691151][T11491] veth1_macvtap: entered promiscuous mode [ 207.707210][T11491] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 207.725733][T11491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.747289][T11491] netdevsim netdevsim1 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 207.759552][T11491] 8021q: adding VLAN 0 to HW filter on device eth0 [ 207.769489][T11491] netdevsim netdevsim1 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 207.780275][T11491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 207.788341][T11491] netdevsim netdevsim1 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 207.799153][T11491] 8021q: adding VLAN 0 to HW filter on device eth2 [ 207.807125][T11491] netdevsim netdevsim1 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 207.817714][T11491] 8021q: adding VLAN 0 to HW filter on device eth3 [ 207.830198][T11491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.840991][T11491] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.851681][T11491] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.866901][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.874082][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.883626][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.890810][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.941553][ T57] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.962448][T11520] netlink: 'syz.1.1442': attribute type 30 has an invalid length. [ 207.970365][ T57] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.970431][ T57] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.970461][ T57] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.045545][T11521] netlink: 'syz.1.1442': attribute type 30 has an invalid length. [ 208.077626][T11522] netlink: 'syz.1.1442': attribute type 30 has an invalid length. [ 208.405828][T11535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.442587][T11535] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.484778][T11535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.581194][T11535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.591191][T11535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.605080][T11535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.615923][T11535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.639381][T11535] veth1_vlan: left promiscuous mode [ 208.645931][T11535] veth0_vlan: left promiscuous mode [ 208.651771][T11535] veth0_vlan: entered promiscuous mode [ 208.659727][T11535] veth1_vlan: entered promiscuous mode [ 208.669861][T11535] veth0_macvtap: left promiscuous mode [ 208.684102][T11535] veth0_macvtap: entered promiscuous mode [ 208.696316][T11535] veth1_macvtap: entered promiscuous mode [ 208.712034][T11535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.725558][T11535] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.739052][T11535] 8021q: adding VLAN 0 to HW filter on device eth0 [ 208.748212][T11535] 8021q: adding VLAN 0 to HW filter on device eth1 [ 208.758721][T11535] 8021q: adding VLAN 0 to HW filter on device eth2 [ 208.769279][T11535] 8021q: adding VLAN 0 to HW filter on device eth3 [ 208.778438][T11535] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.795210][T11528] bond0: entered promiscuous mode [ 208.801265][T11528] batadv0: entered promiscuous mode [ 208.810567][T11528] batadv0: left promiscuous mode [ 208.816113][T11528] bond0: left promiscuous mode [ 208.833229][T11540] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 208.846772][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.854009][ T35] bridge0: port 1(bridge_slave_0) entered listening state [ 208.900316][ T48] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.912160][ T48] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.924722][ T48] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 208.937135][ T48] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.945942][ T48] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.955225][ T48] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 208.963536][ T48] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.976053][ T48] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.984998][ T48] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 209.000013][ T48] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.008725][ T48] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.017506][ T48] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 209.791443][T11565] netlink: 'syz.1.1453': attribute type 1 has an invalid length. [ 209.803565][T11565] netlink: 'syz.1.1453': attribute type 1 has an invalid length. [ 209.815747][T11565] sctp: [Deprecated]: syz.1.1453 (pid 11565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.815747][T11565] Use struct sctp_sack_info instead [ 210.667543][T11507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.863577][T11569] __nla_validate_parse: 13 callbacks suppressed [ 210.863594][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1455'. [ 210.909360][ T809] IPVS: starting estimator thread 0... [ 211.003891][T11576] IPVS: using max 31 ests per chain, 74400 per kthread [ 211.249608][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 211.312832][T11594] IPVS: Scheduler module ip_vs_sip not found [ 211.445225][T11611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1465'. [ 211.637186][ T13] bond0: (slave bond_slave_0): interface is now down [ 211.667281][ T13] bond0: (slave bond_slave_1): interface is now down [ 211.836900][ T12] bond0: (slave bond_slave_0): interface is now down [ 211.852850][ T12] bond0: (slave bond_slave_1): interface is now down [ 212.004979][ T57] bond0: (slave bond_slave_0): interface is now down [ 212.013790][ T57] bond0: (slave bond_slave_1): interface is now down [ 212.165998][ T48] bond0: (slave bond_slave_0): interface is now down [ 212.172787][ T48] bond0: (slave bond_slave_1): interface is now down [ 212.204572][ T48] bond0: now running without any active interface! [ 212.382391][T11645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1478'. [ 212.577818][T11655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1480'. [ 212.632017][T11655] PKCS7: Unknown OID: [4] (bad) [ 212.642599][T11655] PKCS7: Only support pkcs7_signedData type [ 212.698170][ T29] audit: type=1107 audit(1779078301.572:5): pid=11656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 212.746717][T11659] syzkaller0: entered promiscuous mode [ 212.752249][T11659] syzkaller0: entered allmulticast mode [ 212.782321][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 212.803949][T11659] netlink: 'syz.2.1481': attribute type 15 has an invalid length. [ 212.825929][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1481'. [ 213.191136][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1490'. [ 213.220270][T11688] openvswitch: netlink: ufid size 32 bytes exceeds the range (1, 16) [ 213.432027][T11701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1495'. [ 213.944716][T11708] tc_dump_action: action bad kind [ 214.486425][T11731] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1503'. [ 214.908588][T11752] --map-set only usable from mangle table [ 215.685555][T11777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.900870][T11791] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1519'. [ 215.913100][T11784] openvswitch: netlink: Message has 4 unknown bytes. [ 215.938342][T11791] netlink: 'syz.1.1519': attribute type 1 has an invalid length. [ 215.957598][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.973242][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.411072][T11803] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20004 [ 216.544439][T11808] netlink: 'syz.2.1526': attribute type 13 has an invalid length. [ 217.168729][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1532'. [ 217.220205][T11836] netlink: 'syz.4.1532': attribute type 4 has an invalid length. [ 217.426084][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1537'. [ 217.678721][T11859] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1540'. [ 217.698057][T11855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.836560][T11855] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.187214][T11870] netlink: 'syz.4.1543': attribute type 1 has an invalid length. [ 218.387977][T11880] netlink: 'syz.4.1543': attribute type 10 has an invalid length. [ 218.396980][T11880] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1543'. [ 218.426494][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1544'. [ 218.615361][T11874] bond9: (slave veth7): Enslaving as an active interface with a down link [ 218.654977][T11875] bond9: (slave dummy0): making interface the new active one [ 218.663600][T11875] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 218.673219][T11880] dummy0: entered promiscuous mode [ 218.695588][T11880] bond9: (slave dummy0): Releasing active interface [ 218.812869][T11890] netlink: 'syz.2.1547': attribute type 1 has an invalid length. [ 218.814362][T11886] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.832444][T11886] bridge_slave_0 (unregistering): left allmulticast mode [ 218.851859][T11886] bridge_slave_0 (unregistering): left promiscuous mode [ 218.876234][T11886] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.940388][T11895] IPVS: Scheduler module ip_vs_sip not found [ 219.066280][T11898] dummy0: left promiscuous mode [ 219.388406][T11898] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.409958][T11898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.465790][T11898] veth1_vlan: left promiscuous mode [ 219.483437][T11898] veth0_vlan: left promiscuous mode [ 219.511153][T11898] veth0_vlan: entered promiscuous mode [ 219.539545][T11898] veth1_vlan: entered promiscuous mode [ 219.575045][T11898] veth1_macvtap: left promiscuous mode [ 219.591822][T11898] veth0_macvtap: left promiscuous mode [ 219.611478][T11898] veth0_macvtap: entered promiscuous mode [ 219.634469][ T5644] Bluetooth: hci4: command 0x0405 tx timeout [ 219.646208][T11898] veth1_macvtap: entered promiscuous mode [ 219.664672][T11898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.682240][T11898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.691451][T11898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.735518][T11928] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1555'. [ 219.756410][T11898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.770476][T11898] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.780815][T11898] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.799478][T11898] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.813113][T11898] 8021q: adding VLAN 0 to HW filter on device bond5 [ 219.831380][T11898] 8021q: adding VLAN 0 to HW filter on device bond6 [ 219.845495][T11898] 8021q: adding VLAN 0 to HW filter on device bond7 [ 219.860814][T11898] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 219.970671][ T35] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.979827][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.008193][ T35] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.017365][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.027229][ T35] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.039762][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.213070][T11947] netlink: 'syz.2.1560': attribute type 1 has an invalid length. [ 220.228761][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1560'. [ 220.252302][ T35] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.282578][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.347557][T11945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1561'. [ 220.443214][T11954] pim6reg: entered allmulticast mode [ 220.459538][T11958] pim6reg: left allmulticast mode [ 220.520198][T11957] netlink: 'syz.0.1565': attribute type 21 has an invalid length. [ 220.543114][T11957] netlink: 'syz.0.1565': attribute type 22 has an invalid length. [ 220.570659][T11957] netlink: 'syz.0.1565': attribute type 23 has an invalid length. [ 220.585985][T11957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1565'. [ 221.069849][T11989] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 221.140544][T11989] syzkaller0: entered promiscuous mode [ 221.169641][T11989] syzkaller0: entered allmulticast mode [ 221.183284][T11997] __nla_validate_parse: 1 callbacks suppressed [ 221.183299][T11997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1576'. [ 221.364699][T12012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1576'. [ 221.436721][T12015] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 221.525679][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'. [ 221.548774][T12022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1582'. [ 221.625557][T12020] vlan2: entered promiscuous mode [ 221.641022][T12029] netlink: 4616 bytes leftover after parsing attributes in process `syz.4.1583'. [ 221.642762][T12020] geneve1: entered promiscuous mode [ 221.669596][T12020] vlan2: entered allmulticast mode [ 221.683883][T12020] geneve1: entered allmulticast mode [ 221.731468][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'. [ 221.994999][T12044] veth0_to_team: entered promiscuous mode [ 222.491417][T12066] validate_nla: 2 callbacks suppressed [ 222.499655][T12066] netlink: 'syz.2.1591': attribute type 8 has an invalid length. [ 222.729174][T12046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.780738][T12072] netlink: 'syz.3.1592': attribute type 1 has an invalid length. [ 222.865844][T12074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1592'. [ 222.918152][T12072] bond7: entered promiscuous mode [ 222.943616][T12072] 8021q: adding VLAN 0 to HW filter on device bond7 [ 223.002503][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'. [ 223.101924][T12086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1595'. [ 223.198768][T12089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1595'. [ 223.284217][T12095] syzkaller0: entered promiscuous mode [ 223.314184][T12095] syzkaller0: entered allmulticast mode [ 223.788504][T12130] netlink: 'syz.1.1606': attribute type 1 has an invalid length. [ 223.811426][T12130] netlink: 'syz.1.1606': attribute type 2 has an invalid length. [ 223.828442][T12130] netlink: 'syz.1.1606': attribute type 1 has an invalid length. [ 224.286471][T12159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.321297][T12162] netlink: 'syz.2.1613': attribute type 1 has an invalid length. [ 224.461659][ T5644] Bluetooth: hci4: link tx timeout [ 224.468114][ T5644] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 224.516480][T12162] 8021q: adding VLAN 0 to HW filter on device bond63 [ 224.558780][T12166] bond63: (slave batadv2): Opening slave failed [ 225.603663][T12197] tipc: Enabled bearer , priority 0 [ 225.620815][T12197] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 225.636849][T12197] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 226.199969][T12215] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.1627:12215 [ 226.514350][ T5644] Bluetooth: hci4: command 0x0405 tx timeout [ 226.559871][T12209] __nla_validate_parse: 10 callbacks suppressed [ 226.559889][T12209] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1626'. [ 227.244930][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1632'. [ 227.354277][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1634'. [ 227.372395][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'. [ 227.401275][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'. [ 227.559600][T12253] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1636'. [ 227.580419][T12255] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1636'. [ 227.742276][T12261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1639'. [ 227.795992][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1640'. [ 227.810232][T12263] xt_hashlimit: overflow, rate too high: 0 [ 228.458557][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1646'. [ 228.524787][T12285] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 228.612987][T12283] block nbd1: Unsupported socket: should be TCP or UNIX. [ 228.649613][T12287] syzkaller1: entered promiscuous mode [ 228.675751][T12287] syzkaller1: entered allmulticast mode [ 228.684959][T12304] netlink: 'syz.2.1651': attribute type 1 has an invalid length. [ 228.876323][T12308] bond64: (slave vxcan3): The slave device specified does not support setting the MAC address [ 228.893167][T12308] bond64: (slave vxcan3): Error -95 calling set_mac_address [ 229.056341][T12312] bond64: (slave bridge4): Enslaving as an active interface with a down link [ 229.118228][T12304] macvlan0: entered promiscuous mode [ 229.123561][T12304] macvlan0: entered allmulticast mode [ 229.170217][T12304] bond64: entered promiscuous mode [ 229.194504][T12304] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 229.226268][T12304] bond64: left promiscuous mode [ 230.079604][T12357] syzkaller0: entered promiscuous mode [ 230.100662][T12357] syzkaller0: entered allmulticast mode [ 230.227380][T12359] syzkaller0: entered promiscuous mode [ 230.237178][T12359] syzkaller0: entered allmulticast mode [ 230.359146][T12373] xt_bpf: check failed: parse error [ 230.379895][T12373] openvswitch: netlink: Message has 584 unknown bytes. [ 230.406694][T12373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.467707][T12380] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 230.513486][T12384] xt_bpf: check failed: parse error [ 231.092377][T12422] xt_hashlimit: size too large, truncated to 1048576 [ 231.117388][T12421] xt_hashlimit: size too large, truncated to 1048576 [ 231.759824][T12437] __nla_validate_parse: 4 callbacks suppressed [ 231.759842][T12437] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1679'. [ 231.760842][T12435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.279578][T12459] netlink: 'syz.3.1684': attribute type 1 has an invalid length. [ 232.325956][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'. [ 232.752244][T12480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1690'. [ 232.760905][T12481] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1689'. [ 233.385538][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1693'. [ 233.413198][T12471] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 233.928536][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1696'. [ 233.993645][T12517] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1698'. [ 234.246980][T12525] netlink: 'syz.3.1701': attribute type 2 has an invalid length. [ 234.302352][T12525] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1701'. [ 234.778271][T12571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.998630][T12582] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1710'. [ 235.080272][T12564] nbd1: detected capacity change from 0 to 63 [ 235.089932][ T50] block nbd1: Receive control failed (result -32) [ 235.089957][ T5644] block nbd1: Receive control failed (result -32) [ 235.116674][T10905] block nbd1: Dead connection, failed to find a fallback [ 235.176405][T10905] block nbd1: shutting down sockets [ 235.204891][T10905] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.270655][T10905] Buffer I/O error on dev nbd1, logical block 0, async page read [ 235.297959][T12585] netlink: 'syz.1.1711': attribute type 1 has an invalid length. [ 235.317899][T10905] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.346726][T10905] Buffer I/O error on dev nbd1, logical block 1, async page read [ 235.353442][T12592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.357959][T10905] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.374453][T10905] Buffer I/O error on dev nbd1, logical block 2, async page read [ 235.382408][T10905] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.392036][T10905] Buffer I/O error on dev nbd1, logical block 3, async page read [ 235.402925][T10905] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.412344][T10905] Buffer I/O error on dev nbd1, logical block 0, async page read [ 235.421059][T10905] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.430412][T10905] Buffer I/O error on dev nbd1, logical block 1, async page read [ 235.438925][T10905] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.448086][T10905] Buffer I/O error on dev nbd1, logical block 2, async page read [ 235.457378][T10905] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.466532][T10905] Buffer I/O error on dev nbd1, logical block 3, async page read [ 235.476197][T10905] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.482667][T12592] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1711'. [ 235.485441][T10905] Buffer I/O error on dev nbd1, logical block 0, async page read [ 235.485604][T10905] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.485624][T10905] Buffer I/O error on dev nbd1, logical block 1, async page read [ 235.489434][T10905] ldm_validate_partition_table(): Disk read failed. [ 235.511311][T12585] 8021q: adding VLAN 0 to HW filter on device bond7 [ 235.517468][T10905] Dev nbd1: unable to read RDB block 0 [ 235.544030][T10905] nbd1: unable to read partition table [ 235.562999][T10905] ldm_validate_partition_table(): Disk read failed. [ 235.583257][T10905] Dev nbd1: unable to read RDB block 0 [ 235.601825][T10905] nbd1: unable to read partition table [ 235.686760][T12595] Cannot find add_set index 4 as target [ 235.697170][T12595] Cannot find add_set index 4 as target [ 236.000862][T12615] netlink: 'syz.4.1718': attribute type 6 has an invalid length. [ 236.165902][T12618] block nbd2: Unsupported socket: should be TCP or UNIX. [ 236.252106][T12624] netlink: 'syz.4.1720': attribute type 13 has an invalid length. [ 237.562697][T12677] FAULT_INJECTION: forcing a failure. [ 237.562697][T12677] name failslab, interval 1, probability 0, space 0, times 1 [ 237.577426][T12677] CPU: 1 UID: 0 PID: 12677 Comm: syz.1.1734 Not tainted syzkaller #0 PREEMPT(full) [ 237.577457][T12677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.577474][T12677] Call Trace: [ 237.577485][T12677] [ 237.577492][T12677] dump_stack_lvl+0xe8/0x150 [ 237.577516][T12677] should_fail_ex+0x412/0x560 [ 237.577541][T12677] should_failslab+0xa8/0x100 [ 237.577566][T12677] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 237.577587][T12677] ? __alloc_skb+0x186/0x7d0 [ 237.577609][T12677] ? __alloc_skb+0x1d0/0x7d0 [ 237.577627][T12677] ? __local_bh_enable_ip+0xd0/0x130 [ 237.577649][T12677] __alloc_skb+0x1d0/0x7d0 [ 237.577681][T12677] netlink_sendmsg+0x5d4/0xb40 [ 237.577708][T12677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.577730][T12677] ? aa_sock_msg_perm+0xf1/0x1b0 [ 237.577752][T12677] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.577777][T12677] ____sys_sendmsg+0x972/0x9f0 [ 237.577792][T12677] ? __might_fault+0xaf/0x130 [ 237.577818][T12677] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.577843][T12677] ? import_iovec+0x73/0xa0 [ 237.577869][T12677] ___sys_sendmsg+0x2a5/0x360 [ 237.577884][T12677] ? get_pid_task+0x20/0x1f0 [ 237.577907][T12677] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.577943][T12677] ? sb_end_write+0xe9/0x1c0 [ 237.577972][T12677] ? __pfx_vfs_write+0x10/0x10 [ 237.578003][T12677] __x64_sys_sendmsg+0x1bd/0x2a0 [ 237.578021][T12677] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.578046][T12677] ? __pfx_ksys_write+0x10/0x10 [ 237.578075][T12677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.578092][T12677] do_syscall_64+0x15f/0xf80 [ 237.578113][T12677] ? trace_irq_disable+0x3b/0x140 [ 237.578135][T12677] ? clear_bhb_loop+0x40/0x90 [ 237.578155][T12677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.578170][T12677] RIP: 0033:0x7fd9e3f9ce59 [ 237.578193][T12677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.578206][T12677] RSP: 002b:00007fd9e4e0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.578227][T12677] RAX: ffffffffffffffda RBX: 00007fd9e4215fa0 RCX: 00007fd9e3f9ce59 [ 237.578238][T12677] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000005 [ 237.578248][T12677] RBP: 00007fd9e4e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 237.578257][T12677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.578266][T12677] R13: 00007fd9e4216038 R14: 00007fd9e4215fa0 R15: 00007ffd47c38d18 [ 237.578294][T12677] [ 238.127892][T12680] __nla_validate_parse: 6 callbacks suppressed [ 238.127908][T12680] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1735'. [ 238.164335][T12680] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1735'. [ 238.359054][T12695] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1738'. [ 238.365506][T12697] Bluetooth: MGMT ver 1.23 [ 238.513242][T12697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1739'. [ 240.269357][T12707] netlink: 'syz.0.1741': attribute type 29 has an invalid length. [ 240.366579][T12707] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1741'. [ 240.367146][T12709] netlink: 'syz.4.1742': attribute type 1 has an invalid length. [ 240.375983][T12707] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1741'. [ 240.765572][T12729] netlink: 'syz.2.1747': attribute type 13 has an invalid length. [ 240.811150][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'. [ 240.893436][T12731] tipc: Failed to remove unknown binding: 66,0,0/0:2003460188/2003460190 [ 240.937880][T12731] tipc: Failed to remove unknown binding: 66,0,0/0:2003460188/2003460189 [ 240.971877][T12731] tipc: Failed to remove unknown binding: 66,0,0/0:2003460188/2003460190 [ 240.987425][T12731] tipc: Failed to remove unknown binding: 66,0,0/0:2003460188/2003460189 [ 241.009530][T12741] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20004 [ 241.031214][T12744] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.1752'. [ 241.229992][T12751] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1754'. [ 241.325857][T12757] FAULT_INJECTION: forcing a failure. [ 241.325857][T12757] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 241.396604][T12757] CPU: 0 UID: 0 PID: 12757 Comm: syz.4.1757 Not tainted syzkaller #0 PREEMPT(full) [ 241.396629][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.396639][T12757] Call Trace: [ 241.396645][T12757] [ 241.396652][T12757] dump_stack_lvl+0xe8/0x150 [ 241.396676][T12757] should_fail_ex+0x412/0x560 [ 241.396701][T12757] _copy_from_iter+0x1d3/0x1670 [ 241.396725][T12757] ? rcu_is_watching+0x15/0xb0 [ 241.396748][T12757] ? __pfx__copy_from_iter+0x10/0x10 [ 241.396782][T12757] ? netlink_sendmsg+0x650/0xb40 [ 241.396797][T12757] ? skb_put+0x11b/0x210 [ 241.396820][T12757] netlink_sendmsg+0x6c0/0xb40 [ 241.396842][T12757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.396859][T12757] ? aa_sock_msg_perm+0xf1/0x1b0 [ 241.396879][T12757] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.396903][T12757] ____sys_sendmsg+0x972/0x9f0 [ 241.396918][T12757] ? __might_fault+0xaf/0x130 [ 241.396942][T12757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.396965][T12757] ? import_iovec+0x73/0xa0 [ 241.396988][T12757] ___sys_sendmsg+0x2a5/0x360 [ 241.397003][T12757] ? get_pid_task+0x20/0x1f0 [ 241.397025][T12757] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.397058][T12757] ? sb_end_write+0xe9/0x1c0 [ 241.397087][T12757] ? __pfx_vfs_write+0x10/0x10 [ 241.397116][T12757] __x64_sys_sendmsg+0x1bd/0x2a0 [ 241.397134][T12757] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.397159][T12757] ? __pfx_ksys_write+0x10/0x10 [ 241.397188][T12757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.397205][T12757] do_syscall_64+0x15f/0xf80 [ 241.397226][T12757] ? trace_irq_disable+0x3b/0x140 [ 241.397248][T12757] ? clear_bhb_loop+0x40/0x90 [ 241.397267][T12757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.397282][T12757] RIP: 0033:0x7f854999ce59 [ 241.397297][T12757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.397310][T12757] RSP: 002b:00007f854a7de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.397327][T12757] RAX: ffffffffffffffda RBX: 00007f8549c15fa0 RCX: 00007f854999ce59 [ 241.397338][T12757] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000005 [ 241.397348][T12757] RBP: 00007f854a7de090 R08: 0000000000000000 R09: 0000000000000000 [ 241.397357][T12757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.397366][T12757] R13: 00007f8549c16038 R14: 00007f8549c15fa0 R15: 00007ffc731600f8 [ 241.397393][T12757] [ 242.045036][T12778] netlink: 'syz.4.1762': attribute type 1 has an invalid length. [ 242.208909][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1764'. [ 242.220278][T12783] netlink: 'syz.1.1764': attribute type 2 has an invalid length. [ 242.404307][T12793] netlink: 'syz.4.1766': attribute type 8 has an invalid length. [ 242.408459][T12795] netlink: 'syz.4.1766': attribute type 8 has an invalid length. [ 242.453553][T12797] netlink: 'syz.1.1768': attribute type 1 has an invalid length. [ 242.570095][T12793] veth1_to_team: entered promiscuous mode [ 242.594670][T12793] gretap0: entered promiscuous mode [ 242.615762][T12793] veth1_to_team: left promiscuous mode [ 242.636529][T12793] gretap0: left promiscuous mode [ 242.659649][T12795] veth1_to_team: entered promiscuous mode [ 242.669596][T12795] gretap0: entered promiscuous mode [ 242.677346][T12795] veth1_to_team: left promiscuous mode [ 242.683374][T12795] gretap0: left promiscuous mode [ 242.707173][T12797] bond8: entered promiscuous mode [ 242.712764][T12797] 8021q: adding VLAN 0 to HW filter on device bond8 [ 242.845979][T12804] bond8: (slave bridge4): making interface the new active one [ 242.883592][T12804] bridge4: entered promiscuous mode [ 242.890330][T12804] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 242.978596][T12816] FAULT_INJECTION: forcing a failure. [ 242.978596][T12816] name failslab, interval 1, probability 0, space 0, times 0 [ 242.993192][T12816] CPU: 0 UID: 0 PID: 12816 Comm: syz.2.1770 Not tainted syzkaller #0 PREEMPT(full) [ 242.993215][T12816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.993225][T12816] Call Trace: [ 242.993231][T12816] [ 242.993239][T12816] dump_stack_lvl+0xe8/0x150 [ 242.993264][T12816] should_fail_ex+0x412/0x560 [ 242.993290][T12816] should_failslab+0xa8/0x100 [ 242.993314][T12816] __kmalloc_node_noprof+0xf0/0x7c0 [ 242.993334][T12816] ? lock_acquire+0x106/0x350 [ 242.993351][T12816] ? qdisc_alloc+0x92/0x9e0 [ 242.993378][T12816] qdisc_alloc+0x92/0x9e0 [ 242.993407][T12816] qdisc_create+0x12c/0xf20 [ 242.993429][T12816] ? lockdep_rtnl_is_held+0x26/0x40 [ 242.993446][T12816] ? qdisc_lookup+0x36d/0x6d0 [ 242.993465][T12816] tc_modify_qdisc+0x16f0/0x2290 [ 242.993485][T12816] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 242.993522][T12816] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 242.993569][T12816] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 242.993588][T12816] rtnetlink_rcv_msg+0x77e/0xbe0 [ 242.993613][T12816] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 242.993633][T12816] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 242.993651][T12816] ? ref_tracker_free+0x693/0x840 [ 242.993682][T12816] ? __pfx_ref_tracker_free+0x10/0x10 [ 242.993711][T12816] netlink_rcv_skb+0x232/0x4b0 [ 242.993726][T12816] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 242.993748][T12816] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 242.993774][T12816] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.993788][T12816] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.993808][T12816] netlink_unicast+0x75c/0x8e0 [ 242.993840][T12816] netlink_sendmsg+0x813/0xb40 [ 242.993863][T12816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.993883][T12816] ? aa_sock_msg_perm+0xf1/0x1b0 [ 242.993904][T12816] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 242.993928][T12816] ____sys_sendmsg+0x972/0x9f0 [ 242.993944][T12816] ? __might_fault+0xaf/0x130 [ 242.993970][T12816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.993995][T12816] ? import_iovec+0x73/0xa0 [ 242.994019][T12816] ___sys_sendmsg+0x2a5/0x360 [ 242.994034][T12816] ? get_pid_task+0x20/0x1f0 [ 242.994057][T12816] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.994095][T12816] ? sb_end_write+0xe9/0x1c0 [ 242.994126][T12816] ? __pfx_vfs_write+0x10/0x10 [ 242.994157][T12816] __x64_sys_sendmsg+0x1bd/0x2a0 [ 242.994175][T12816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 242.994199][T12816] ? __pfx_ksys_write+0x10/0x10 [ 242.994228][T12816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.994245][T12816] do_syscall_64+0x15f/0xf80 [ 242.994267][T12816] ? clear_bhb_loop+0x40/0x90 [ 242.994286][T12816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.994301][T12816] RIP: 0033:0x7f6ed0f9ce59 [ 242.994317][T12816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.994330][T12816] RSP: 002b:00007f6ecf1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.994348][T12816] RAX: ffffffffffffffda RBX: 00007f6ed1216090 RCX: 00007f6ed0f9ce59 [ 242.994359][T12816] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000005 [ 242.994369][T12816] RBP: 00007f6ecf1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 242.994377][T12816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.994386][T12816] R13: 00007f6ed1216128 R14: 00007f6ed1216090 R15: 00007ffcbb737158 [ 242.994412][T12816] [ 243.590321][T12823] __nla_validate_parse: 2 callbacks suppressed [ 243.590337][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1773'. [ 243.632741][T12829] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1775'. [ 243.641914][T12832] sctp: [Deprecated]: syz.4.1774 (pid 12832) Use of int in max_burst socket option. [ 243.641914][T12832] Use struct sctp_assoc_value instead [ 243.666833][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1774'. [ 243.676039][T12832] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1774'. [ 243.685920][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1774'. [ 243.695270][T12832] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1774'. [ 243.704575][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1774'. [ 243.879819][T12839] syzkaller0: entered promiscuous mode [ 243.885784][T12839] syzkaller0: entered allmulticast mode [ 243.905265][T12839] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 243.915696][T12839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1776'. [ 244.229847][T12858] FAULT_INJECTION: forcing a failure. [ 244.229847][T12858] name failslab, interval 1, probability 0, space 0, times 0 [ 244.255987][T12858] CPU: 0 UID: 0 PID: 12858 Comm: syz.4.1781 Not tainted syzkaller #0 PREEMPT(full) [ 244.256010][T12858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.256019][T12858] Call Trace: [ 244.256025][T12858] [ 244.256033][T12858] dump_stack_lvl+0xe8/0x150 [ 244.256056][T12858] should_fail_ex+0x412/0x560 [ 244.256080][T12858] should_failslab+0xa8/0x100 [ 244.256103][T12858] __kmalloc_node_noprof+0xf0/0x7c0 [ 244.256123][T12858] ? lock_acquire+0x106/0x350 [ 244.256139][T12858] ? qdisc_alloc+0x92/0x9e0 [ 244.256165][T12858] qdisc_alloc+0x92/0x9e0 [ 244.256194][T12858] qdisc_create+0x12c/0xf20 [ 244.256215][T12858] ? lockdep_rtnl_is_held+0x26/0x40 [ 244.256232][T12858] ? qdisc_lookup+0x36d/0x6d0 [ 244.256250][T12858] tc_modify_qdisc+0x16f0/0x2290 [ 244.256270][T12858] ? rcu_is_watching+0x15/0xb0 [ 244.256300][T12858] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 244.256321][T12858] ? __dev_queue_xmit+0x2b6/0x3950 [ 244.256363][T12858] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 244.256382][T12858] rtnetlink_rcv_msg+0x77e/0xbe0 [ 244.256407][T12858] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 244.256428][T12858] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.256455][T12858] ? ref_tracker_free+0x693/0x840 [ 244.256479][T12858] ? __pfx_ref_tracker_free+0x10/0x10 [ 244.256510][T12858] netlink_rcv_skb+0x232/0x4b0 [ 244.256527][T12858] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.256551][T12858] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.256580][T12858] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.256595][T12858] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.256616][T12858] netlink_unicast+0x75c/0x8e0 [ 244.256648][T12858] netlink_sendmsg+0x813/0xb40 [ 244.256673][T12858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.256693][T12858] ? aa_sock_msg_perm+0xf1/0x1b0 [ 244.256715][T12858] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.256738][T12858] ____sys_sendmsg+0x972/0x9f0 [ 244.256752][T12858] ? __might_fault+0xaf/0x130 [ 244.256776][T12858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.256801][T12858] ? import_iovec+0x73/0xa0 [ 244.256826][T12858] ___sys_sendmsg+0x2a5/0x360 [ 244.256841][T12858] ? get_pid_task+0x20/0x1f0 [ 244.256864][T12858] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.256898][T12858] ? sb_end_write+0xe9/0x1c0 [ 244.256929][T12858] ? __pfx_vfs_write+0x10/0x10 [ 244.256959][T12858] __x64_sys_sendmsg+0x1bd/0x2a0 [ 244.256978][T12858] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.257001][T12858] ? __pfx_ksys_write+0x10/0x10 [ 244.257029][T12858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.257045][T12858] do_syscall_64+0x15f/0xf80 [ 244.257066][T12858] ? trace_irq_disable+0x3b/0x140 [ 244.257087][T12858] ? clear_bhb_loop+0x40/0x90 [ 244.257106][T12858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.257121][T12858] RIP: 0033:0x7f854999ce59 [ 244.257136][T12858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.257148][T12858] RSP: 002b:00007f854a7de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.257164][T12858] RAX: ffffffffffffffda RBX: 00007f8549c15fa0 RCX: 00007f854999ce59 [ 244.257175][T12858] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000005 [ 244.257184][T12858] RBP: 00007f854a7de090 R08: 0000000000000000 R09: 0000000000000000 [ 244.257193][T12858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.257202][T12858] R13: 00007f8549c16038 R14: 00007f8549c15fa0 R15: 00007ffc731600f8 [ 244.257227][T12858] [ 245.121324][T12890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1790'. [ 245.366121][T12890] bond65: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 245.483505][T12890] bond65 (unregistering): Released all slaves [ 245.535623][T12902] xfrm1: entered allmulticast mode [ 245.578026][T12913] FAULT_INJECTION: forcing a failure. [ 245.578026][T12913] name failslab, interval 1, probability 0, space 0, times 0 [ 245.591835][T12913] CPU: 0 UID: 0 PID: 12913 Comm: syz.1.1796 Not tainted syzkaller #0 PREEMPT(full) [ 245.591857][T12913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.591867][T12913] Call Trace: [ 245.591873][T12913] [ 245.591880][T12913] dump_stack_lvl+0xe8/0x150 [ 245.591913][T12913] should_fail_ex+0x412/0x560 [ 245.591940][T12913] should_failslab+0xa8/0x100 [ 245.591965][T12913] __kmalloc_node_noprof+0xf0/0x7c0 [ 245.591986][T12913] ? qdisc_alloc+0x92/0x9e0 [ 245.592013][T12913] qdisc_alloc+0x92/0x9e0 [ 245.592043][T12913] qdisc_create_dflt+0x8e/0x4e0 [ 245.592068][T12913] taprio_init+0x3e5/0xbe0 [ 245.592097][T12913] ? __pfx_taprio_init+0x10/0x10 [ 245.592112][T12913] ? qdisc_alloc+0x6ec/0x9e0 [ 245.592137][T12913] ? __pfx_taprio_init+0x10/0x10 [ 245.592153][T12913] qdisc_create+0x7c4/0xf20 [ 245.592175][T12913] ? lockdep_rtnl_is_held+0x26/0x40 [ 245.592200][T12913] tc_modify_qdisc+0x16f0/0x2290 [ 245.592219][T12913] ? rcu_is_watching+0x15/0xb0 [ 245.592251][T12913] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 245.592271][T12913] ? __dev_queue_xmit+0x2b6/0x3950 [ 245.592315][T12913] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 245.592334][T12913] rtnetlink_rcv_msg+0x77e/0xbe0 [ 245.592359][T12913] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 245.592379][T12913] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 245.592397][T12913] ? ref_tracker_free+0x693/0x840 [ 245.592421][T12913] ? __pfx_ref_tracker_free+0x10/0x10 [ 245.592451][T12913] netlink_rcv_skb+0x232/0x4b0 [ 245.592468][T12913] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 245.592490][T12913] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.592518][T12913] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.592534][T12913] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.592555][T12913] netlink_unicast+0x75c/0x8e0 [ 245.592587][T12913] netlink_sendmsg+0x813/0xb40 [ 245.592612][T12913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.592632][T12913] ? aa_sock_msg_perm+0xf1/0x1b0 [ 245.592653][T12913] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.592677][T12913] ____sys_sendmsg+0x972/0x9f0 [ 245.592693][T12913] ? __might_fault+0xaf/0x130 [ 245.592724][T12913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.592748][T12913] ? import_iovec+0x73/0xa0 [ 245.592773][T12913] ___sys_sendmsg+0x2a5/0x360 [ 245.592788][T12913] ? get_pid_task+0x20/0x1f0 [ 245.592812][T12913] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.592849][T12913] ? sb_end_write+0xe9/0x1c0 [ 245.592879][T12913] ? __pfx_vfs_write+0x10/0x10 [ 245.592915][T12913] __x64_sys_sendmsg+0x1bd/0x2a0 [ 245.592934][T12913] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.592960][T12913] ? __pfx_ksys_write+0x10/0x10 [ 245.592989][T12913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.593006][T12913] do_syscall_64+0x15f/0xf80 [ 245.593028][T12913] ? trace_irq_disable+0x3b/0x140 [ 245.593050][T12913] ? clear_bhb_loop+0x40/0x90 [ 245.593070][T12913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.593085][T12913] RIP: 0033:0x7fd9e3f9ce59 [ 245.593101][T12913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.593115][T12913] RSP: 002b:00007fd9e4e0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.593132][T12913] RAX: ffffffffffffffda RBX: 00007fd9e4215fa0 RCX: 00007fd9e3f9ce59 [ 245.593143][T12913] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000005 [ 245.593153][T12913] RBP: 00007fd9e4e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 245.593163][T12913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.593171][T12913] R13: 00007fd9e4216038 R14: 00007fd9e4215fa0 R15: 00007ffd47c38d18 [ 245.593200][T12913] [ 246.062653][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1800'. [ 246.206924][T12925] bridge0: port 1(batadv0) entered blocking state [ 246.213647][T12925] bridge0: port 1(batadv0) entered disabled state [ 246.220924][T12925] batadv0: entered allmulticast mode [ 246.228337][T12925] batadv0: entered promiscuous mode [ 246.326044][T12932] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 246.399535][T12939] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 246.682751][T12949] x_tables: duplicate underflow at hook 2 [ 246.704321][ T1131] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 246.714626][ T1131] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 246.894679][T12961] veth0_macvtap: Caught tx_queue_len zero misconfig [ 246.918370][T12962] tipc: Failed to remove unknown binding: 66,1,1/564661960:2009258387/2009258389 [ 246.932503][T12961] FAULT_INJECTION: forcing a failure. [ 246.932503][T12961] name failslab, interval 1, probability 0, space 0, times 0 [ 246.962915][T12961] CPU: 0 UID: 0 PID: 12961 Comm: syz.2.1808 Not tainted syzkaller #0 PREEMPT(full) [ 246.962935][T12961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.962945][T12961] Call Trace: [ 246.962951][T12961] [ 246.962958][T12961] dump_stack_lvl+0xe8/0x150 [ 246.962981][T12961] should_fail_ex+0x412/0x560 [ 246.963002][T12961] should_failslab+0xa8/0x100 [ 246.963023][T12961] __kmalloc_node_noprof+0xf0/0x7c0 [ 246.963045][T12961] ? qdisc_alloc+0x92/0x9e0 [ 246.963068][T12961] qdisc_alloc+0x92/0x9e0 [ 246.963095][T12961] qdisc_create_dflt+0x8e/0x4e0 [ 246.963120][T12961] taprio_init+0x3e5/0xbe0 [ 246.963145][T12961] ? __pfx_taprio_init+0x10/0x10 [ 246.963160][T12961] ? qdisc_alloc+0x6ec/0x9e0 [ 246.963182][T12961] ? __pfx_taprio_init+0x10/0x10 [ 246.963197][T12961] qdisc_create+0x7c4/0xf20 [ 246.963219][T12961] ? lockdep_rtnl_is_held+0x26/0x40 [ 246.963240][T12961] tc_modify_qdisc+0x16f0/0x2290 [ 246.963259][T12961] ? rcu_is_watching+0x15/0xb0 [ 246.963289][T12961] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 246.963308][T12961] ? __dev_queue_xmit+0x2b6/0x3950 [ 246.963345][T12961] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 246.963361][T12961] rtnetlink_rcv_msg+0x77e/0xbe0 [ 246.963386][T12961] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 246.963408][T12961] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.963427][T12961] ? ref_tracker_free+0x693/0x840 [ 246.963448][T12961] ? __pfx_ref_tracker_free+0x10/0x10 [ 246.963477][T12961] netlink_rcv_skb+0x232/0x4b0 [ 246.963494][T12961] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.963517][T12961] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 246.963545][T12961] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.963559][T12961] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.963579][T12961] netlink_unicast+0x75c/0x8e0 [ 246.963611][T12961] netlink_sendmsg+0x813/0xb40 [ 246.963636][T12961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.963654][T12961] ? aa_sock_msg_perm+0xf1/0x1b0 [ 246.963675][T12961] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 246.963705][T12961] ____sys_sendmsg+0x972/0x9f0 [ 246.963721][T12961] ? __might_fault+0xaf/0x130 [ 246.963744][T12961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.963769][T12961] ? import_iovec+0x73/0xa0 [ 246.963794][T12961] ___sys_sendmsg+0x2a5/0x360 [ 246.963809][T12961] ? get_pid_task+0x20/0x1f0 [ 246.963833][T12961] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.963871][T12961] ? sb_end_write+0xe9/0x1c0 [ 246.963901][T12961] ? __pfx_vfs_write+0x10/0x10 [ 246.963931][T12961] __x64_sys_sendmsg+0x1bd/0x2a0 [ 246.963950][T12961] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 246.963976][T12961] ? __pfx_ksys_write+0x10/0x10 [ 246.964003][T12961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.964019][T12961] do_syscall_64+0x15f/0xf80 [ 246.964039][T12961] ? trace_irq_disable+0x3b/0x140 [ 246.964060][T12961] ? clear_bhb_loop+0x40/0x90 [ 246.964080][T12961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.964096][T12961] RIP: 0033:0x7f6ed0f9ce59 [ 246.964112][T12961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.964125][T12961] RSP: 002b:00007f6ed1d89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.964141][T12961] RAX: ffffffffffffffda RBX: 00007f6ed1215fa0 RCX: 00007f6ed0f9ce59 [ 246.964151][T12961] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000005 [ 246.964161][T12961] RBP: 00007f6ed1d89090 R08: 0000000000000000 R09: 0000000000000000 [ 246.964170][T12961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.964180][T12961] R13: 00007f6ed1216038 R14: 00007f6ed1215fa0 R15: 00007ffcbb737158 [ 246.964208][T12961] [ 247.451090][T12962] syzkaller0: entered promiscuous mode [ 247.457038][T12962] syzkaller0: entered allmulticast mode [ 247.571633][ T5644] Bluetooth: hci4: command 0x0405 tx timeout [ 247.857458][T12991] netlink: 'syz.4.1812': attribute type 1 has an invalid length. [ 248.518438][T13012] tipc: Can't bind to reserved service type 0 [ 248.976379][T13038] wg0: Caught tx_queue_len zero misconfig [ 248.992302][T13039] __nla_validate_parse: 12 callbacks suppressed [ 248.992318][T13039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1825'. [ 249.016702][T13031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.034326][ T1131] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x30 [ 249.360424][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1827'. [ 249.536541][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1832'. [ 249.815292][T13082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1835'. [ 250.163592][T13102] netlink: 'syz.1.1839': attribute type 7 has an invalid length. [ 250.397898][T13115] ip6erspan0: entered allmulticast mode [ 250.739207][T13124] syzkaller0: entered promiscuous mode [ 250.750252][T13124] syzkaller0: entered allmulticast mode [ 250.762773][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 250.892301][T13138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1851'. [ 251.005565][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1851'. [ 251.051023][T13138] 8021q: adding VLAN 0 to HW filter on device bond65 [ 251.086514][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 251.107383][T13149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1853'. [ 251.134052][T13149] netlink: 'syz.1.1853': attribute type 18 has an invalid length. [ 252.613232][T13142] bond65: (slave veth3): Enslaving as an active interface with an up link [ 252.631508][T13144] vxlan1: entered promiscuous mode [ 252.643980][T13144] vxlan1: entered allmulticast mode [ 252.680718][T13151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1854'. [ 252.776399][T13152] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 252.822241][T13152] bond65: (slave batadv2): Enslaving as an active interface with an up link [ 253.136909][T13173] ip6tnl0: Caught tx_queue_len zero misconfig [ 253.528582][T13207] x_tables: duplicate entry at hook 2 [ 253.617440][T13208] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 253.693481][T13208] syzkaller1: entered promiscuous mode [ 253.711158][T13208] syzkaller1: entered allmulticast mode [ 254.158776][T13234] __nla_validate_parse: 6 callbacks suppressed [ 254.158791][T13234] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1878'. [ 254.253444][T13239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1879'. [ 254.475196][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1881'. [ 254.504277][T13244] veth1_macvtap: left promiscuous mode [ 254.879463][T13258] syzkaller0: entered promiscuous mode [ 254.899019][T13258] syzkaller0: entered allmulticast mode [ 254.925563][T13267] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1886'. [ 254.941511][T13269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1887'. [ 255.558887][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.801078][T13274] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1888'. [ 256.822932][ T5289] veth1_macvtap: entered promiscuous mode [ 257.152286][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1896'. [ 257.269889][T13319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1895'. [ 257.288418][T13305] bridge_slave_1: left allmulticast mode [ 257.308043][T13305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.318838][T13305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.376655][T13305] geneve2: left promiscuous mode [ 257.381619][T13305] geneve2: left allmulticast mode [ 257.402927][T13322] netlink: 'syz.4.1895': attribute type 1 has an invalid length. [ 257.438171][T13305] vlan2: left promiscuous mode [ 257.442989][T13305] geneve1: left promiscuous mode [ 257.448388][T13305] vlan2: left allmulticast mode [ 257.453269][T13305] geneve1: left allmulticast mode [ 257.569356][ T8843] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.588479][ T8843] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.600353][ T8843] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 257.620420][ T8843] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.640970][ T8843] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.650656][ T8843] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 257.669710][T13328] xt_hashlimit: size too large, truncated to 1048576 [ 257.728624][ T8843] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.753496][ T8843] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.780823][T13332] netlink: 'syz.1.1899': attribute type 1 has an invalid length. [ 257.791886][ T8843] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 257.828875][ T8843] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.871284][ T8843] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.885736][T13332] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1899'. [ 257.915159][ T8843] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 258.004816][T13329] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.124440][T13329] bridge_slave_0 (unregistering): left allmulticast mode [ 258.134020][T13329] bridge_slave_0 (unregistering): left promiscuous mode [ 258.185645][T13329] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.130485][T13400] sctp: [Deprecated]: syz.0.1908 (pid 13400) Use of int in maxseg socket option. [ 259.130485][T13400] Use struct sctp_assoc_value instead [ 259.227163][T13408] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1908'. [ 259.276876][T13411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1909'. [ 259.449979][T13418] netlink: 'syz.4.1907': attribute type 1 has an invalid length. [ 259.709283][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 259.731368][T13418] bond11: entered promiscuous mode [ 259.753687][T13418] bond11: entered allmulticast mode [ 259.766900][T13418] 8021q: adding VLAN 0 to HW filter on device bond11 [ 259.871401][T13431] A link change request failed with some changes committed already. Interface bond5 may have been left with an inconsistent configuration, please check. [ 259.930458][T13440] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 259.949078][T13443] xt_hashlimit: size too large, truncated to 1048576 [ 260.205011][T13457] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.276626][ C1] ------------[ cut here ]------------ [ 260.283410][ C1] 1 [ 260.283438][ C1] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2d/0x140, CPU#1: syz.4.1916/13444 [ 260.295192][ C1] Modules linked in: [ 260.299731][ C1] CPU: 1 UID: 0 PID: 13444 Comm: syz.4.1916 Not tainted syzkaller #0 PREEMPT(full) [ 260.309167][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 260.319288][ C1] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 260.324299][ C1] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 5a 7f b8 f7 66 90 e8 53 7f b8 f7 31 ff 48 89 de ba 02 00 00 00 e8 b4 39 68 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 260.343987][ C1] RSP: 0018:ffffc90000a08720 EFLAGS: 00010286 [ 260.350077][ C1] RAX: eb1ba251dd2ab800 RBX: ffff8880a3316140 RCX: 0000000080000302 [ 260.358105][ C1] RDX: 0000000000000002 RSI: ffffffff8dfafc66 RDI: ffffffff8c28afe0 [ 260.366140][ C1] RBP: ffffc90000a08a10 R08: ffffffff90311bf7 R09: 1ffffffff206237e [ 260.374174][ C1] R10: dffffc0000000000 R11: fffffbfff206237f R12: dffffc0000000000 [ 260.382166][ C1] R13: 0000000000000000 R14: ffff8880a3316140 R15: dffffc0000000000 [ 260.390197][ C1] FS: 000055556f990500(0000) GS:ffff88812537a000(0000) knlGS:0000000000000000 [ 260.399179][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.405813][ C1] CR2: 00007f85473f2d58 CR3: 0000000094824000 CR4: 00000000003526f0 [ 260.413833][ C1] Call Trace: [ 260.417121][ C1] [ 260.419986][ C1] ip_push_pending_frames+0x8b/0x110 [ 260.425335][ C1] __icmp_send+0x11e4/0x1690 [ 260.429954][ C1] ? __icmp_send+0x22b/0x1690 [ 260.434711][ C1] ? __pfx___icmp_send+0x10/0x10 [ 260.439698][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 260.444698][ C1] ? notifier_call_chain+0x1ad/0x3d0 [ 260.449998][ C1] ? lock_acquire+0x106/0x350 [ 260.454741][ C1] ipv4_link_failure+0x66c/0xa70 [ 260.459706][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 260.465233][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 260.470715][ C1] arp_error_report+0x118/0x160 [ 260.475635][ C1] neigh_invalidate+0x235/0x460 [ 260.480523][ C1] neigh_timer_handler+0xb99/0x11b0 [ 260.485796][ C1] call_timer_fn+0x192/0x5e0 [ 260.490402][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 260.496098][ C1] ? call_timer_fn+0xd4/0x5e0 [ 260.500797][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 260.505975][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 260.511188][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 260.516882][ C1] __run_timer_base+0x652/0x8b0 [ 260.521750][ C1] ? ktime_get+0x45/0x220 [ 260.526158][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 260.531565][ C1] run_timer_softirq+0xb7/0x170 [ 260.536492][ C1] handle_softirqs+0x22a/0x840 [ 260.541294][ C1] ? __irq_exit_rcu+0xca/0x220 [ 260.546149][ C1] __irq_exit_rcu+0xca/0x220 [ 260.550756][ C1] irq_exit_rcu+0x9/0x30 [ 260.555055][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 260.560716][ C1] [ 260.563657][ C1] [ 260.566646][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 260.572655][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 260.579135][ C1] Code: f7 e8 2d 6b f5 f5 f7 c3 00 02 00 00 74 05 e8 f0 ff 20 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e4 e9 e6 f5 65 8b 05 0d 70 8d 07 85 c0 74 18 5b 41 5e c3 cc cc [ 260.598823][ C1] RSP: 0018:ffffc9000574f8f8 EFLAGS: 00000206 [ 260.604963][ C1] RAX: 0000000000000002 RBX: 0000000000000282 RCX: 0000000080000001 [ 260.612955][ C1] RDX: 0000000000000007 RSI: ffffffff8dfafc66 RDI: 0000000000000001 [ 260.620991][ C1] RBP: dffffc0000000000 R08: ffffffff90311bf7 R09: 1ffffffff206237e [ 260.629026][ C1] R10: dffffc0000000000 R11: fffffbfff206237f R12: ffff88807b8c0128 [ 260.637059][ C1] R13: ffff8880222d5148 R14: ffff8880295c8a70 R15: ffff8880295c8000 [ 260.645116][ C1] sched_cgroup_fork+0x32d/0x3d0 [ 260.650110][ C1] copy_process+0x2a6b/0x4440 [ 260.654867][ C1] ? copy_process+0xd87/0x4440 [ 260.659666][ C1] ? __pfx_copy_process+0x10/0x10 [ 260.664762][ C1] kernel_clone+0x284/0x8f0 [ 260.669293][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 260.674390][ C1] __se_sys_clone3+0x33c/0x360 [ 260.679181][ C1] ? __might_fault+0xaf/0x130 [ 260.683908][ C1] ? __pfx___se_sys_clone3+0x10/0x10 [ 260.689230][ C1] ? _copy_to_user+0x8a/0xb0 [ 260.693878][ C1] ? do_user_addr_fault+0xc6f/0x1340 [ 260.699173][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.705296][ C1] do_syscall_64+0x15f/0xf80 [ 260.709940][ C1] ? trace_irq_disable+0x3b/0x140 [ 260.715093][ C1] ? clear_bhb_loop+0x40/0x90 [ 260.719792][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.725739][ C1] RIP: 0033:0x7f854999dc49 [ 260.730175][ C1] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 260.749838][ C1] RSP: 002b:00007ffc7315ffb8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 260.758320][ C1] RAX: ffffffffffffffda RBX: 00007f85499591e0 RCX: 00007f854999dc49 [ 260.766362][ C1] RDX: 00007f85499591e0 RSI: 0000000000000058 RDI: 00007ffc73160010 [ 260.774381][ C1] RBP: 00007f85473f26c0 R08: 00007f85473f26c0 R09: 00007ffc731600f7 [ 260.782368][ C1] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 260.790418][ C1] R13: 000000000000006e R14: 00007ffc73160010 R15: 00007ffc731600f8 [ 260.798470][ C1] [ 260.801521][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 260.808810][ C1] CPU: 1 UID: 0 PID: 13444 Comm: syz.4.1916 Not tainted syzkaller #0 PREEMPT(full) [ 260.818179][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 260.828240][ C1] Call Trace: [ 260.831522][ C1] [ 260.834361][ C1] vpanic+0x56c/0xa60 [ 260.838360][ C1] ? __pfx__printk+0x10/0x10 [ 260.842976][ C1] ? __pfx_vpanic+0x10/0x10 [ 260.847487][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 260.852772][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 260.857980][ C1] panic+0xc5/0xd0 [ 260.861711][ C1] ? __pfx_panic+0x10/0x10 [ 260.866145][ C1] __warn+0x315/0x4c0 [ 260.870131][ C1] ? ip_rt_bug+0x2d/0x140 [ 260.874472][ C1] ? ip_rt_bug+0x2d/0x140 [ 260.878823][ C1] __report_bug+0x29a/0x540 [ 260.883346][ C1] ? neigh_timer_handler+0xb99/0x11b0 [ 260.888737][ C1] ? call_timer_fn+0x192/0x5e0 [ 260.893498][ C1] ? __run_timer_base+0x652/0x8b0 [ 260.898522][ C1] ? ip_rt_bug+0x2d/0x140 [ 260.902866][ C1] ? __pfx___report_bug+0x10/0x10 [ 260.907886][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.913957][ C1] ? ip_rt_bug+0x2d/0x140 [ 260.918282][ C1] report_bug+0x16a/0x220 [ 260.922606][ C1] ? ip_rt_bug+0x2d/0x140 [ 260.926928][ C1] ? ip_rt_bug+0x2f/0x140 [ 260.931248][ C1] handle_bug+0x9c/0x200 [ 260.935479][ C1] exc_invalid_op+0x1a/0x50 [ 260.939967][ C1] asm_exc_invalid_op+0x1a/0x20 [ 260.944807][ C1] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 260.949744][ C1] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 5a 7f b8 f7 66 90 e8 53 7f b8 f7 31 ff 48 89 de ba 02 00 00 00 e8 b4 39 68 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 260.969345][ C1] RSP: 0018:ffffc90000a08720 EFLAGS: 00010286 [ 260.975416][ C1] RAX: eb1ba251dd2ab800 RBX: ffff8880a3316140 RCX: 0000000080000302 [ 260.983375][ C1] RDX: 0000000000000002 RSI: ffffffff8dfafc66 RDI: ffffffff8c28afe0 [ 260.991333][ C1] RBP: ffffc90000a08a10 R08: ffffffff90311bf7 R09: 1ffffffff206237e [ 260.999295][ C1] R10: dffffc0000000000 R11: fffffbfff206237f R12: dffffc0000000000 [ 261.007255][ C1] R13: 0000000000000000 R14: ffff8880a3316140 R15: dffffc0000000000 [ 261.015234][ C1] ip_push_pending_frames+0x8b/0x110 [ 261.020519][ C1] __icmp_send+0x11e4/0x1690 [ 261.025103][ C1] ? __icmp_send+0x22b/0x1690 [ 261.029781][ C1] ? __pfx___icmp_send+0x10/0x10 [ 261.034731][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 261.039664][ C1] ? notifier_call_chain+0x1ad/0x3d0 [ 261.044942][ C1] ? lock_acquire+0x106/0x350 [ 261.049622][ C1] ipv4_link_failure+0x66c/0xa70 [ 261.054564][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 261.060029][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 261.065476][ C1] arp_error_report+0x118/0x160 [ 261.070321][ C1] neigh_invalidate+0x235/0x460 [ 261.075179][ C1] neigh_timer_handler+0xb99/0x11b0 [ 261.080382][ C1] call_timer_fn+0x192/0x5e0 [ 261.084963][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 261.090586][ C1] ? call_timer_fn+0xd4/0x5e0 [ 261.095250][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 261.100363][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.105552][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 261.111179][ C1] __run_timer_base+0x652/0x8b0 [ 261.116019][ C1] ? ktime_get+0x45/0x220 [ 261.120350][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 261.125722][ C1] run_timer_softirq+0xb7/0x170 [ 261.130566][ C1] handle_softirqs+0x22a/0x840 [ 261.135319][ C1] ? __irq_exit_rcu+0xca/0x220 [ 261.140080][ C1] __irq_exit_rcu+0xca/0x220 [ 261.144661][ C1] irq_exit_rcu+0x9/0x30 [ 261.148893][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 261.154518][ C1] [ 261.157436][ C1] [ 261.160356][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 261.166323][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 261.172736][ C1] Code: f7 e8 2d 6b f5 f5 f7 c3 00 02 00 00 74 05 e8 f0 ff 20 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e4 e9 e6 f5 65 8b 05 0d 70 8d 07 85 c0 74 18 5b 41 5e c3 cc cc [ 261.192331][ C1] RSP: 0018:ffffc9000574f8f8 EFLAGS: 00000206 [ 261.198396][ C1] RAX: 0000000000000002 RBX: 0000000000000282 RCX: 0000000080000001 [ 261.206356][ C1] RDX: 0000000000000007 RSI: ffffffff8dfafc66 RDI: 0000000000000001 [ 261.214318][ C1] RBP: dffffc0000000000 R08: ffffffff90311bf7 R09: 1ffffffff206237e [ 261.222281][ C1] R10: dffffc0000000000 R11: fffffbfff206237f R12: ffff88807b8c0128 [ 261.230239][ C1] R13: ffff8880222d5148 R14: ffff8880295c8a70 R15: ffff8880295c8000 [ 261.238216][ C1] sched_cgroup_fork+0x32d/0x3d0 [ 261.243160][ C1] copy_process+0x2a6b/0x4440 [ 261.247838][ C1] ? copy_process+0xd87/0x4440 [ 261.252598][ C1] ? __pfx_copy_process+0x10/0x10 [ 261.257621][ C1] kernel_clone+0x284/0x8f0 [ 261.262120][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 261.267146][ C1] __se_sys_clone3+0x33c/0x360 [ 261.271908][ C1] ? __might_fault+0xaf/0x130 [ 261.276575][ C1] ? __pfx___se_sys_clone3+0x10/0x10 [ 261.281860][ C1] ? _copy_to_user+0x8a/0xb0 [ 261.286455][ C1] ? do_user_addr_fault+0xc6f/0x1340 [ 261.291732][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.297797][ C1] do_syscall_64+0x15f/0xf80 [ 261.302383][ C1] ? trace_irq_disable+0x3b/0x140 [ 261.307407][ C1] ? clear_bhb_loop+0x40/0x90 [ 261.312077][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.317956][ C1] RIP: 0033:0x7f854999dc49 [ 261.322360][ C1] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 261.341951][ C1] RSP: 002b:00007ffc7315ffb8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 261.350353][ C1] RAX: ffffffffffffffda RBX: 00007f85499591e0 RCX: 00007f854999dc49 [ 261.358313][ C1] RDX: 00007f85499591e0 RSI: 0000000000000058 RDI: 00007ffc73160010 [ 261.366281][ C1] RBP: 00007f85473f26c0 R08: 00007f85473f26c0 R09: 00007ffc731600f7 [ 261.374237][ C1] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 261.382193][ C1] R13: 000000000000006e R14: 00007ffc73160010 R15: 00007ffc731600f8 [ 261.390166][ C1] [ 261.393556][ C1] Kernel Offset: disabled [ 261.397867][ C1] Rebooting in 86400 seconds..