last executing test programs: 3.279466932s ago: executing program 4 (id=8952): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000003480)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYRES64=r3, @ANYRES32=r3, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000e", @ANYRES32=r3, @ANYBLOB="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", @ANYRES16=r1], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="6d6ff16901dc11fffe880000000000000000000000000001fc0100000000000000000000000000004e254e2101dc9078ee373935ef0f8da10b47000507b0025a9001e6cc070855848340507e8bd26f3ca1d633ec36"], 0x204) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4010, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x12, 0x60d, 0xf0, 0x202, 0x1b8, 0x2e8, 0x2e8, 0x1b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0x0, 0xfe], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xd0, 0xf0}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xae328689605bc686) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000800)={0x40, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000140), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r0}, 0x4) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r7, &(0x7f0000000040)={0x2, @none={0x0, 0x3}}, 0x14) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) r9 = socket$kcm(0x11, 0x2, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000000)=r10, 0x4) r11 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000011000000e000000100000000000000000000000000004e22000b000300000a00208000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000600000000000000800000000000000000000000000000000000000400000000000000000000000084000500fc000000000000000000000000000000000000003c0000000a000000ac1414bb000000000000000000000000ff3400000001000000000000040000806e000000ac1414aa000000000000000000000000000004d43200000000000000200100000000000000000000000000010400000007010700000000000000000000040000"], 0x13c}}, 0x8044) ioctl$FICLONERANGE(r12, 0x4020940d, &(0x7f0000000280)={{r8}, 0x401, 0x3, 0xfffffffffffffffa}) ioctl$BTRFS_IOC_SNAP_DESTROY(r11, 0x5000940f, &(0x7f0000002480)={{r8}, "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"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688474c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.206218178s ago: executing program 4 (id=8954): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x8, &(0x7f0000019580)=""/102400, &(0x7f0000000400)=0x19000) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003c}, 0x60) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x34008098) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r9, &(0x7f00000000c0)="7eaf9d668116879c47349548e696c4f047b21e974af5ae0221bfdd649a73ba538d5ada928c315be4935b585715b92e74f2541365538fd58c169fcaae8b0294082d47e8783b2fb3f20ebae357e2946872ab0cc940b086a62345de6a7ae88d986d33cb629f2c9f59c4d4661eb5ddc971c4581eaaebbb3f14e06d95334d5513b5a281ae557c077caffbd10d1ee4fe270e4d978156db973b42080a0f1788c925500fbc49f4fd4f9cf4eb76f51c5c18f84f96f52ba1891582c0eb73731cb206d595379e9c2a8ef08253a6c53927dff5fca097a50256a9bed03bd7b5b20c05f617625331ef785d1fbe8ef50f46e3", 0xfffffffffffffded, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000806000108"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r8, 0x27, 0x4a, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$can_bcm(r4, &(0x7f0000000000)={0x1d, r7}, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060102000000000100000000000000140045800800124000060000880008400000003714000300686173683a69702c706f72742c697000050005000a000000050004000000050001000700"/96], 0x60}}, 0x0) 2.746061444s ago: executing program 4 (id=8959): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r0, 0xff, 0x7f, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x77, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea4400000000000000000000000000000000000000000000000001000000000000000900000000000000020080ffffffffffffff000000000000010000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 2.617510485s ago: executing program 4 (id=8961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r0, 0x1, 0x6, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0xa, &(0x7f00000001c0)=@raw=[@map_fd={0x18, 0xa}, @alu={0x4, 0x1, 0xb, 0x0, 0x8, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x71}, @cb_func={0x18, 0x7}], &(0x7f0000000240)='GPL\x00', 0x58735e42, 0xf7, &(0x7f0000000340)=""/247, 0x41000, 0x5, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3001b, 0xffffffffffffffff, 0x1, &(0x7f0000000440)=[0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x3, 0x1, 0x9}], 0x10, 0x76}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x3, [{0x10, 0x5}]}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r4, &(0x7f00000002c0)="4cf7", 0x2) splice(r4, &(0x7f0000000040), r3, 0x0, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000140)=r3, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r5, 0x4) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$unix(0x1, 0x5, 0x0) 2.25532994s ago: executing program 0 (id=8966): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newsa={0x13c, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in6=@private1, 0x0, 0x0, 0x4e28, 0x0, 0x0, 0x0, 0x20, 0x3b}, {@in=@private=0xa010102, 0x0, 0x32}, @in=@multicast1, {0x3ff, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x80000, 0x81}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x0, 0x0, 0xa, 0x1, 0x81, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000380)={0xa, 0x4e1a, 0x80000, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400a43af5fe000000000000"], 0x7}, 0x4894) 2.152372911s ago: executing program 0 (id=8967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x44800) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x140, r1, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xeb, 0xac, "51c6499c1e29d5479d6785bb402bde31f2c1ac380adac2c2924ab832339efad40a015556c89a1bec675a69afefef2743380af8fcb4c23e3e125a56053975c4c2b96e51ab2c7e65368eb1541b908ddc1f3f6bfef76c23bb74bc79b04d903e4a08d5b1af56f670ad8fa011efb4188b8f2be4ca4a408f9530682a875e72a776a207e7953aeb763a34c22e50df9d8e8a0303053f9a2ca516a840b63871971cf31757f4cc6330242f3447965012d8dedff6ef94344b76b4e9e3a0620bcbdc7b429786a0ab7b3882e6a3f11b1b9a30b8c89d35b6192c37e36f20af350860c242527614293c070f431e69"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x353}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6d9}]}, 0x140}, 0x1, 0x0, 0x0, 0x8008000}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESDEC=r6], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800ffd018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) 2.023425653s ago: executing program 0 (id=8969): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_vlan\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000580)='#', 0x1}, {&(0x7f0000002000)="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", 0x1000}], 0x2, 0x0, 0x0, 0x24000040}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(r0, 0x0) 1.922722223s ago: executing program 2 (id=8970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'sit0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x6}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0xfd, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x170, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x427, 0x6e, 0xef, 0x3}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x4}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r4 = socket(0x2b, 0x0, 0x4) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000000480)=0x2) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0xfe62, &(0x7f0000000280)=[{&(0x7f0000004d00)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@empty}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x8011}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004054}, 0x0) 1.877421976s ago: executing program 1 (id=8971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe0}}, 0x0) socketpair(0x1a, 0x80000, 0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4811}, 0x8800) 1.827661374s ago: executing program 0 (id=8972): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000002, 0x28011, r0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d2", 0x4a, 0x12, 0x0, 0x0) shutdown(r4, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) close(0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000100), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x40000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8, r0}, 0x18) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) socket$packet(0x11, 0x3, 0x300) 1.703043075s ago: executing program 1 (id=8973): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x85, 0x85, 0x2, [@datasec={0x7, 0xa, 0x0, 0xf, 0x1, [{0x2, 0x7f, 0x7}, {0x4, 0x5, 0x4}, {0x4, 0x3, 0xb}, {0x1, 0x9, 0x7}, {0x4, 0x1}, {0x3, 0x5, 0xbb4}, {0x5, 0xfffffffc, 0x4}, {0x2, 0x6}, {0x3, 0x13, 0x8}, {0x1, 0xfa42, 0x34}], "ea"}]}}, 0x0, 0xa2, 0x0, 0x1, 0x70c8}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="0000990b14000300070000000000000200000000fdff0700140001000002"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0xd0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001800000125bd7000fcdbdf2584201005fe020000002b000006001c004e240000080005000a0101020c00168008000400be000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20008816) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @multicast}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f00000020c0)={&(0x7f0000000640)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x46, 0x0, 0x0, &(0x7f0000001e40)=[@mask_cswp={0x58, 0x118, 0x9, {{0x7f, 0x4}, 0x0, 0x0, 0x7, 0x4, 0xef, 0x3, 0xc, 0x7}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xf}], 0x70, 0x20008011}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xdd}}], 0x38}, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @multicast}, 0x10) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x20, r10, 0x1, 0x0, 0x0, {0x1e}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0xf0, r10, 0x108, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4014}, 0x8001) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) unshare(0x22020600) r11 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, 0x0, &(0x7f0000000240)) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10) 1.701227724s ago: executing program 3 (id=8974): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x8000) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x11, 0x0, 0x0) shutdown(r0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="280100001700010028bd7000fddbdf25fc020000000000000000000000000001000004d43c000000fe80000000000000000000000000002be0000001000000000000000000000000ff0200000000000000000000000000014e2100004e2100070e0030202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000000000000000000e00000020000000000000000000000004e2200034e2400000a00a0000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03000000000000000300000000000000050000000000000006c6000000000000f30b000000000000000000000000603d050000000000000004000000000000000000000000000080090000000000000000000100000000002c600000ffffffff0c000000b96b6e0002010100000000000600000006020000d60a00002dbd7000"], 0x128}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0xb, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_COMPAT_NAME={0x11, 0x1, '@:(\',&(--:@!\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000000c0)={r1}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000080)) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x20008004) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 1.699822112s ago: executing program 2 (id=8975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x64, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x20004014) 1.520762047s ago: executing program 3 (id=8976): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f77000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d60800000000000000c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f995a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bec62bcb2bc91ddcdfac2e6d442105ee6c0742b5e9584543b72f762d21c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) bind$tipc(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bind$packet(r3, &(0x7f0000000700)={0x11, 0x15, r5, 0x1, 0xaf, 0x6, @multicast}, 0x14) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0xfffffdb9, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r2], 0xe8}}, 0x0) close(r9) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) 1.497827177s ago: executing program 1 (id=8977): syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0)=@random='9H', 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x4, 0x8000446, {}, {0x7, 0x0, 0x0, 0x0, 0x3}, 0x1}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x405}, {}, 0x0, 0x0, 0x8000000}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x44830) r1 = socket(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) recvmmsg$unix(r5, &(0x7f0000003d80)=[{{&(0x7f0000000480), 0x6e, &(0x7f00000018c0)}}], 0x1, 0x2001, &(0x7f0000003e40)={0x0, 0x989680}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newqdisc={0x34, 0x24, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40080b0) 1.403585943s ago: executing program 2 (id=8978): splice(0xffffffffffffffff, &(0x7f0000000000)=0x80000000, 0xffffffffffffffff, 0x0, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {0x60}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {0x2}, {0x0, 0x7}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x16, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0xffff, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0xffffffff}, {}, {}, {0xffff}, {}, {}, {0x2, 0xb8}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x7, 0x10000}, {0x0, 0x0, 0x0, 0x200000}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}, {0x3, 0x0, 0x0, 0x1}, {}, {0x2000}]}}, @common=@mh={{0x28}, {"e4bd"}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x58}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r3, 0x1}, 0xc) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000003c0)={r4, 0xffffffff, 0x9, 0x2}) sendto$rxrpc(r6, &(0x7f00000006c0)="dfeb409ab85ca5974a99440f69481afe8ebaecf2f7f320ff06a1dfd0874d2ac89c5982bfb16d19b3cd93852eddbc6e339481e40a68ac4c6de932a3cb290d3e9200be3252dd1b5b81f35f9b6cfd4ae6f590181e39e5bd76782af874c959f4d4ba115a9461595cb9a45fa8704cdd222e6871b17f328f746e1e406c982762c4f0f0717b7b3ddf4e5f14dd04451a5d93321c5170474758f809b6b976ea5c472f71bdd1bf9b879e45396229173b7af4b9d894bd7eb336dd9a606a9cd50e7bd5026e6fb5df977fd73e2c2043fd6195989922361f1ade65384eeb07dbee9f04b1e79fc1641932f4b3c7985adb384bd14d47e417d52669109f80f2ecc8a402af82cac1ecf1e337c373d32850fed7ce347553d95f6b773b64669803543dfaef4163a996ccdd5f7362977de669c8e6dcc2d8e893949c1df18ee646dc3e299ced64f1b689466ca9aea702de5214e2c54f304a0c5246d0140a08f32e45f3b3cfab116b38401540351e3031bd84d4e6787c60589d59b00a69e50b88c0434221b30594d746a551b178226c9eb33afb2e48c0c1249bf144228502193b67d8d1ae46d05622286dd5e536a376bd7b0c38aa251bca9001e4568b6e19cb4a101b4019c54a25cf6f32952d4291eb5d61543c5fd9510e3394bedda0078645420acc330a36fd4dd551299022be18d531db1410117a9024fd580ef8de42dc5433b7c04aa48b65ead8bc0c33eea7f0dc2a5f17f9b0bb631e5ca6d229f30b0c958c6c70b5ed7c371976cf6992a3f73b521f41d45f74fce4e7bd428d98f5808d0674f7c165193dbc7b6e885c5347ea3d44feccbe84e17eec4db245ef343b2eebf2b7ccf9cd06c965f1babd44313210afc36499c58f8df8df15598537cecf2d28162351bd8b76c54803ae8265f60a8c299778a17310d5a6e1e251467a3ad395828a18eb20232dd214eacf632df20355d8df3597e8cb304ab3cea0091efeee036f893433f437311fee75bf64bbf6b01fd0722804b57ae98a122847fdd7a447ac742060cb7f95a8f801b3d323852f591b456594a11ea93850515be1086e7b016a0670ce3a92ce86fcd6d8536f15dfb779c97a9a6d19e962e0065aa4b051c9b1a1ddce768ac9b4cfbe373921cb1688098a8ae4d3b98db4b34f12cfb3980689ad825c73a10b49af4d140096cf5c04f2b2287440ce0d519c9e640e0ac253a0317ab0fbddc4f0b88729e32d6e187432e01773f25fc5df1df7a4d5fdda44931cb0a86e74155b68ed028a7d3a42bef051142e438fbf930abb8571528821ec42170213fb1b10de55e09dacc30bd299db8ce6e3813d84696b0003e97c035ff621a9fd060e5ecb0d7a8b9c9bdc5b1e06e11e5e330d33a146b908dbafad8047121815c55f962a58326b46d62eee1fea6eed4f891c691813d49bc7aedd69b9254ec468a8b45b3581cc6c73cdf009a674844edd53b1a4e1c4ecda723cf3a2c667d938c5a04dd045148bb5ad32afac06d5c9d7467e0c428d3b2fcbc7298d20cd6acedfa9b6908fd0ccee9fed97ebb19de721dc282848c5578d4fb61b5b29de39feeedd54e2348e7ca8f78f57f628044fe7c7cf868fd96a8d253cdcea69428c018a15eb9d25eb24087fcb36950b73dcef73aaae26c0a7e3c093572fc762fe6f65f7854c894795bb4a03b6556fd4c32ecef6aa48965fec513f19dc9ddac11b9810bd18880fc815cf74f451623906cc4e6ebd1c3b52db0eb5d1c264d20a19957af1b4a43db0ee8b5b2357f204447fa1f8b12ec9780e1f52892ea3faa67c1c7d0fd17030e927221e9ef431fef5bff481f15388887cb76cfe8c3b6a18b538a317a3d7477da24dcc57212d15f7e111a35ce21785cb952e76bf1e436d18403096bcc2d44ed3a17b8d2b8063ed06ae616f228ed4a08e530e02d2d6f4656e0c4925e83c0c7ef0905729924f3625c7e184a15700b78c6d04bc0c5bfe0917151178b9d62f5ef39718993830b63904b00690b9277ac622552b73a6b07608dc3858ea485a86aca20cb038d3420456629ea0df1577ff053454893e3b6f0afb181008f20d39d139914a4b7a1110e72e040a952403a5480728314a69273b072e3ad46e59dedcca29b35138ebfa4982cb2d2b52d49496cfbcb0a5f552df311b1bb761ae8ab6d129199e71e17a221a6d990cf9db4328df89e26a4bbdcf0aa45c235d9dfef8a871845049a9327abd7b5c5748e5a452d38072c1de299b0080d98ac274cf00bcc151dc29299ee05a8e0dea7675d95f175e85dbac433b232a98f743943888ce5c3ed8dbb42265f7fbc35e0857c1d2e1da392f8eb091cdcee409ce731322003a1e77441e6790c533a50adca01394ccc3442866dd0427cadd97a57bbef168cf772f1dd9f5e59402fee204358042f67c26f0d5f9f86ece7f34d881999a91a518bafc09f3b0fdf412a86b73caecb2f2a868fe1a1188b90160d1da537c9d0d6ae0f4fe6790a6d31c14cf70554c4487f9716a7acdbacb3ed36177f993dd0a16235df3b5d304fbc641fd2e3de89a7b1ed10cd0834de5a020c3e6074067735a8776a9d39d5ec1f047fbf35b85e5da185174bfd605c5f7df426d84fc0e88734c1fbc1befbde74d7127651cda898cdcfde2b579147f5eb9030af3a2adffac183b8e711b557c946e574cdd2c62454936eb75932d48c2de302c643d9f1c64fa50997270770a85f1dc06d62d331a9a3b2afc890b0312de7a5a5ba33325f4a96529200e2bd4fd5a00eb3b2bd8c9466bc226dfabf81731e652acad9573e81001b5da2ae6b002c54bd81206775e5ed75e6bd0cfbf59869c5c530aab3d6bf9cfb5c672d304c8042122d549707c5019fa090a0ab5a1bd7170ae26e157c92847877520cb5420bf525bb2d453676e4a839a4b3b97346db5c43c082cd20a301bcb3b6aadf296942fd9fedebc1f1f316a0e6118504fa15f910bced742a7c91979465d83c1ed085226e318b4e28f209293a670f6570a3e7a4a0ef08353b70921cc5b6eb9baa8f7b4436303ca5188d2a17cd41ccf1a1ab248874c5f7e5b1d50c2979afc6de9a55a48129125f0346281750d7019dadf56a7e25715cadd05649ee500c8349b74c6ec71580bc0d32f56838542148083b7509f95e78beb5be0dc977e66fbf3de6206ba1734c6736fbf2d61d0fb6be4d460bd32ecb892ddff7b67c297442c43e12ddfe4f2c093a414a071723b029e9eda92678567d18c484988b24e98472eb19f85c8fc1d7134a18e881bc6ebcb272a8caba10e4a9de54331accdc135ee7f5c1be4d529d9856fc046fcddd0fe42c436af349aa5893d97d819f044d820923be8b494ee5c0c3f860a3568e97ae52d48b6b3cf057402c3905de66faecdf3f40b9f03d4622161d73dc3c3884f7e4b1efb99575436c7c9c114e651b0f2a896888415834275a128f25beabe404c654cb5f31fe14801f6ce08e997eae814a4eefa097ea14d2b7564fe47d2b22b778b0401da51c17871a8a1ea6c8b1f8c33617627ef142c9bf3de11b13c0780c9372974abc9413c154e7b4e447c8952a0eb919e6f18cfde24f930a364c217cedc813eefca5fc67e0b2a68eff5d2711f6ffc15a561f7480403b275b13ccee74934c3dd27618d9a73c66574f434a21bf33a36b03ad3dc29df66d687bf4d62311b44b2441f94c6dec7ecb495836022cb1350a71a3cf81179fd22089e6e8d5ebaad6361c1293a8c45f3be498f1a7db0353016bfb2a32db5bed77f232634551f433239d61c18768f56db9b08cfd6261445f096927f99165a654649eacbf6a2c0f3a271cf2413a5e99c66d2e4d43334c0322c650965de921376e0ce50541cb1219e797a08a738946b00d5ac8ba5bf72eecb26693599586070930c696f26eb05ee37dda75fd5dd4b43bf2f464d3b665d10bb629e1af9c00ea7372ae16f978edf6a6dbeb421619f0e89f2af34ccdc88b82ea01d327a663eb8fffb3a44f89bc1fbb6a6a175f28158bae27aff54a2485c3d282ac725cc424423556cfd79817ca9bba812da219b07aca6b8b1899c99c23f512a61ac82064a894cd7a70ba6d0a6561605376c85c2e31dda96eb0b64a8706ffad5a74260b1f90858eb2ccbbcba67014e1e3ebd4bddaa7eca574169798d6dc31a9851effffb0c0b97d2aa3bb1c5e25546e65a42cd6790c25d4d0a99e0ee73088e7adae3e749efb64f8d9e31542ff014b93ef59a15e0ee932649c745e6435318ad0f070e2848fc9b43346fd438cded7dfd36b25375e780b853f9c7e7433038e800ec40e8cf50f55d6161c702a4e8762dc148cefbaf0367afb32e897f2cd83e9f78775555d259105ca98c2a3fdba930dacf8be0cb95be7f68180ac073acec9a862e86d533d5d669a948ce0e16f232b4f99944a8f4ff4f41ed0d6491824bf4cfc12645fab2c6b33a77c47696d583cc3d260269f83e2ec1f615e91356b2350fc09c288824a6689b684514239beebed95aac3de21edc063dd95b96f25ef33031af9ba3691279f4fc187e5bf336a840004cbb264bb395a2431ba1d1759a97ef4648427712faaae9e7a389d4d64a2ca27e5c006648283d44a973294395815d7be4496ec4ef6f0c5ac8841b48e42146690d77a838f04141e44560722b990f0add07a31391432649e5f5809712b83f10d20f26dba8f38fb1b7f3639a46fec79ae6791baaeef474340414e1fac32a0f57d081f5f0c116f1cf5e7a91a5c7aa62d6cb8069a2c99ab149002e16dfd8ac1629e3d3d89f7466637d93aab4b5ec07fd55632e99120a54a7470ff90f5094458e73f2e283af2b9304afd428524900b625caa15f54f555a2862bb995ffae14e44e9babd1d1bb53cf2a9a99e9f322278f23ef91063697d467a944a94882fcb002efd774acda6b44b6443315fba8be360c7dd34102409ee588f8369ceccd677978814167969d5f47ae7e806dcc057e1fbfe2afd512ed57d60e8b88ef3eb1cb1470603e17e3e5988d03adbae905464e738a4e9ad4d7d191408adf413cf150f745d5d5c0cfbf5ceafaeb85f3b176b7dde51d521fff4517b55682d776faa7aab228e5301cc9d78ed5e9e38f8a15f3a808448a70f59a2399a2ffc82419185a16d4d9367e9aa3b8fe67d87ced263181e66ad99f945a591bbbd98cb44e32cd88071616b40aa23dd95c5a5ad950564a76a9c37e1dc4bb4b3182fb2681e9d608e585fcd62af60074d23a2380366e1bea38fd18b8d458fa88455700412802ff7003933bf136a5162245ffd0db7d5ba993eb358f6141853acc446e01b13e680be650726c34cde1009f7e294307dec627f79202b67acf2bb7512832c6e86c55e61bd5121aa1bbaea0892fbe2b39f4eb91c6c89947be7363906fc77f89019f7ca1b60183a242a9328e9a2192f7ddf42081855893226de06dc4071801d4fcf4966fdb54ff8bb4304af49e5c467efd7fbf1b206ed1ee47aa42ac00134552c458efe952990ff0ec65d1d90312ccd292410a095e78cd416ee8415ca247cc8faaffc5d21bb119f92218af666980f763cc1b65062630234e15de4ef11c59844a4ece0e556b2c706cee8e75943c4121431217514751998a4da63900c181de7404be31806f4a0118d6c4cffd3bcd60e5cc66a5a695a925b87f43ef8b0944bb57092483c46aa2a33bcad4f0b5781d4ff39995b5ed3d343899722359978360f4747fe68e0a7fbcf740169ac86ad78823e385951206eed00ff839aac4ab40a6bfc69392e33895da48c5494aad4ad83d4a33c33f46d2929d5fc0baaec07c7491dbbf7880d52bbc6e52bf0c9bee22d45aa47749837b74033ce1d21f4b97df1f078bb31c8d8807af5ad139e65ea8e95a8f", 0x1000, 0x10, &(0x7f00000016c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, 0x24) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r9, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100000000000000000000000444616650833da4f411020339d90f89bc16673aeba24c0fd6f62307dcd5e0b87ba630900eb8645dcc04962e2e59e9e400c3e4ed5b1223ff12e4fdb6f3cbe1aa9f84188e6f8a7acff85e6f36be209fc961206c2973e5b64b7942c7fd2fc927e251f7d8a22a41046846a7a65c4c50486cf1303b83012524acdc41d7f459e016bda1304fd3ba5f0bcafc0f1db9649859da096ceee147"], 0xa) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000011000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000000000000000024001a802000"], 0x44}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000fc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x15c, 0x12, 0x800, 0x70bd2d, 0x25dfdbfe, {0x1f, 0x4, 0x8, 0x4, {0x4e20, 0x4e24, [0x3, 0x1ff, 0x6, 0x200], [0x7, 0xd, 0x2, 0x5], r13, [0x6, 0x12]}, 0x7, 0xc2}, [@INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "47c9fa372849f2ab737bcefcd473e99c01ef7e301be4423198679618067f2b77d31de6a9fdbd09c8db670094babca508dc290b8db063bcd201f5402f37b0bc034fbb5cbe1381a5c38fea"}, @INET_DIAG_REQ_BYTECODE={0x33, 0x1, "319fd9e33bdd0e61d14f4f2117627d7e732c97353c0c81df0e7535ea30b8ebff484f2ec3257a774579992abe0aa8af"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "e3900adcc77ee527"}, @INET_DIAG_REQ_BYTECODE={0x3c, 0x1, "8063dde893de1e4e47e198e8dda0fb4c1fdf5f18a6651a99844d6d5cc3afc3196fec11229bb92820053a3e1c5a1022ac5ae43bc7ea0b68ad"}, @INET_DIAG_REQ_BYTECODE={0x44, 0x1, "b6085c60ccdd3592e4e62307ffe8a8766bdf5a228a8378e8b216ef727365cf2ebdcf13f709c5db5965ab3520e8aec477fe2a6a47919f471a9edf3894064613a9"}]}, 0x15c}}, 0x2404c014) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) 1.299655034s ago: executing program 4 (id=8979): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13de", 0x12}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200ea0000000800010003000000140003"], 0x58}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) getsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000300), &(0x7f0000000500)=0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000340)={0x0, 0x1}, 0x8) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 823.317209ms ago: executing program 2 (id=8980): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket(0x2, 0x3, 0x101) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f00000000c0)={{[0x7, 0x4, 0x5, 0x9f1]}, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000000)=[{{@_ha_fsid={[0x80000000, 0x7f]}, {0x8000, 0x2, 0xffffffff, 0x100}}, 0x9f, 0x0, '\xc6.&\x00'}, {{@_ha_fsid={[0x6, 0x1]}, {0x2, 0x100, 0x5, 0xc}}, 0x1, 0x0, '\x00'}, {{@align=0x10, {0xef5, 0xd, 0xffff0d5a, 0x80}}, 0x80000, 0x0, '{--a\x00'}, {{@align=0x2, {0x2, 0x400, 0x10001, 0x2}}, 0x1, 0x0, '\\@-@&]\x00'}]}) sendto$packet(r1, 0x0, 0x0, 0x44010, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000004d00)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "e7bdd191486e8e3bf0795161b2"}]}, 0x28}}, 0x0) 820.94006ms ago: executing program 3 (id=8981): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000200000000000000008001e8040000000", 0x24) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x59, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) (async) socket(0x10, 0x3, 0x0) (async) write(r2, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000200000000000000008001e8040000000", 0x24) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x59, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0) (async) 779.811119ms ago: executing program 4 (id=8982): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000010000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$l2tp6(0xa, 0x2, 0x73) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r2}, 0x18) r4 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@local, @empty, @dev={0xfe, 0x80, '\x00', 0x29}, 0x2, 0x9, 0x4e2, 0x500, 0xa4c0, 0x41030003, r5}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f7ffffffb703000018000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 731.718428ms ago: executing program 1 (id=8983): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000400007012dbd7000fedbdf25037c10000400c280"], 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r0, 0x9) socket$unix(0x1, 0x5, 0x0) (async, rerun: 32) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, 0x0, 0x0) (async) r4 = accept(r0, 0x0, 0x0) (async, rerun: 32) r5 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000980)=ANY=[@ANYBLOB="07001f00000000000000000086dd6000000000102c03cb697a653e336f000000500000000000ff02000000000000000000000000000100000001"], 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x4}, 0x10) (async) sendto$inet6(r6, &(0x7f0000000400)="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", 0x14d, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) (async) syz_emit_ethernet(0x4a6, &(0x7f00000018c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6099e90704702c03cb697a653e336f000000500000000000ff020000000000000000000000000001890e000e"], 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002940)={'team_slave_1\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x0, 0x6d, "0fd649dab519b07a94d6326be02b07fed2fc2701cbdf6b09a73b4a0f3f8f6ef4d5c17c3b2fa090978cb7c3db89b3e928517a67020eab45c29e4f0b46511b8c4c8bb04d8dfbb8721b3bd71fb9431b71642f600a7411b67da78474f5b80db363bbf7aa1e591940bdd33d72d4ff8b"}}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffdef}}, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) (async) getsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0), &(0x7f0000000140)=0x4) socket$nl_route(0x10, 0x3, 0x0) 653.815056ms ago: executing program 2 (id=8984): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f00000000c0)={&(0x7f0000000040)=[{0xffff, 0x5, 0x8001, 0x10001, 0x7}, {0x8, 0x8, 0xea, 0x5, 0xfff}], 0x2, 0x28, 0x1, 0x4}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1003, 0x2}, 0xffffffffffffffb9) r1 = socket$netlink(0x10, 0x3, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x19}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x1c}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@float={0x7, 0x0, 0x0, 0x10, 0x6}, @const={0x6, 0x0, 0x0, 0xa, 0x3}, @float={0xf, 0x0, 0x0, 0x10, 0x4}, @struct={0xc, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x10, 0x0, 0x3}]}]}, {0x0, [0x61, 0x2e, 0x30, 0x30]}}, &(0x7f0000000240)=""/90, 0x5a, 0x5a, 0x0, 0x4, 0x10000}, 0x28) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x400200}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf1}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffffffffffe}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newtclass={0x24, 0x28, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xd, 0x5}, {0xf, 0x1}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40008) 602.853094ms ago: executing program 0 (id=8985): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xc3, 0x8}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0x2, 0xfff, {{0x9, 0x4, 0x0, 0x38, 0x24, 0x66, 0x0, 0x1, 0x2f, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, {[@timestamp_addr={0x44, 0xc, 0x2a, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0xe}, 0x7}]}, @noop]}}}}}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000400000006000000060000000080000000a6a0d000000000a030000001000000000000012010000000f00000000120009000000000e00000003000005800000000d00000003000000000800000e000000000000000900000005000000020000002b0800000c0000000000001205000000002e6130305f5f00"], &(0x7f0000000240)=""/124, 0x80, 0x7c, 0x1, 0x9}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf3, 0xf3, 0x5, [@union={0x0, 0x6, 0x0, 0x5, 0x0, 0x92, [{0xb, 0x0, 0x7fffffff}, {0xff, 0x4, 0x6}, {0x9, 0x3, 0xbf}, {0xe, 0x2, 0x9}, {0x10, 0x5, 0x964}, {0x0, 0x0, 0x3}]}, @datasec={0x9, 0x2, 0x0, 0xf, 0x2, [{0x3, 0x7, 0x10000}, {0x3, 0x7, 0x6}], "29fa"}, @typedef={0x6, 0x0, 0x0, 0x8, 0x5}, @datasec={0xd, 0x3, 0x0, 0xf, 0x1, [{0x5, 0x5, 0x8}, {0x3, 0x1, 0x4}, {0x5, 0x4, 0x3}], '\v'}, @enum={0xc, 0x6, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0xe, 0x6}, {0xa, 0x800}, {0xd, 0x7}, {0xb, 0x85e}, {0xb, 0x7}]}]}, {0x0, [0x41, 0x0, 0x5f]}}, &(0x7f0000000740)=""/152, 0x111, 0x98, 0x1, 0x7}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000840), 0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', r0, r1, 0x3, 0x0, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x3b6, 0x2008, 0x2, 0x6a000, r3, 0x1e, '\x00', r0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x0, @value=r2}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000062070000000000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000208500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x5, 0xab3, 0x6, 0x9}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000880)={r8, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x6}}, 0x9, 0x7, 0xae9e, 0x1a4f, 0x30, 0x4, 0x28}, &(0x7f0000000940)=0x9c) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/66, 0x42}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r5}, 0xc) 551.700317ms ago: executing program 3 (id=8986): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4004800, &(0x7f0000000180)={0xa, 0x4e22, 0x10003, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010102}, 0x10) 528.322459ms ago: executing program 1 (id=8987): r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000005240)={0xe0, 0x12, 0x1, 0x70bd2d, 0x25dfdbfc, {0x9, 0xa, 0x4, 0x7, {0x4e22, 0x4e22, [0x38d54834, 0x101, 0x1, 0xfb6], [0x9, 0x4, 0x0, 0x7f], 0x0, [0xd7f, 0x3e3842e3]}, 0x6, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x91, 0x1, "df6914ffe2e58a52e828f71b167e07369f33cc92a10d9e41cec78f7e57398e548a4bab1754f5f2cf5abb18b68f3f442d0218616f2070bb241ca30a444cad614818066331da70214b4210ac98a0dd9672680e83a3aad7057ff09b0f8a53ce0ecf2ec287e344cc43671b036698d8667f848463f1869790cc5c611fdf2a47adf6ddf6f780341625c3bd7fb112f31d"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d380009111bb000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40) 437.969225ms ago: executing program 0 (id=8988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x68, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x84, 0x5}, {0x0, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x20004014) 384.523912ms ago: executing program 3 (id=8989): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xa}], 0x40000f6, 0x102, 0x0) shutdown(r0, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8, 0xc0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r2, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000200), 0x1}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000004c0)=""/4080, 0x1000}, {&(0x7f0000003ec0)=""/128, 0x80}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f00000002c0)=""/145, 0x87}, {&(0x7f00000014c0)=""/200, 0xc8}], 0x38}, 0x7fff}], 0x4000000000001da, 0x12, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000080)={0x0, 0x1}) 203.644526ms ago: executing program 2 (id=8990): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="4c0000001200ff095cab150099a283ff04b8008000f0ffff000000060040150024001d001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab14e39ba9bf6c4387ea1b", 0x4c}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x23, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_create1(0x80000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0x6}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 125.552864ms ago: executing program 1 (id=8991): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x10, 0x7f}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000000c0)={@none, 0xfe72}) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "4ab27a5bbf34f8bb", "801f5316346f6be5e67ad1b39021558717e2a4267e0661c1025ae933d34a275f", "1e4fba9a", "c6bbc09f5c48fece"}, 0x38) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x2}, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(0xffffffffffffffff, 0x3) sendmsg$inet6(r5, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, 0x0}, 0x40085) sendfile(r1, r4, 0x0, 0x20000000002) r7 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r7, &(0x7f0000000000)={&(0x7f0000000300)=@in6={0xa, 0x4e20, 0x20000f07, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, 0x80, 0x0, 0x0, &(0x7f0000000040)}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x124}}, 0x0) 0s ago: executing program 3 (id=8992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pimreg1\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000001c0)={0xbd5a, {{0xa, 0x4e24, 0x6, @local}}, 0x0, 0x1, [{{0xa, 0x4e22, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2053}}]}, 0x110) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4", 0x8}, {&(0x7f0000000340)="448b7c", 0x3}, {&(0x7f0000000500)="ce03", 0x2}, {&(0x7f0000000100)="f244f837", 0x4}], 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x1000}) kernel console output (not intermixed with test programs): 24.905576][ T3400] netlink: 298 bytes leftover after parsing attributes in process `syz.3.7602'. [ 724.920528][ T3400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.932066][ T3402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7602'. [ 724.942758][ T3400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7602'. [ 725.117967][ T3412] netlink: 'syz.2.7605': attribute type 10 has an invalid length. [ 725.160724][ T3418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7606'. [ 725.266396][ T3425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7608'. [ 725.278049][ T3423] syzkaller0: left promiscuous mode [ 725.283633][ T3423] syzkaller0: left allmulticast mode [ 725.322770][ T3425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7608'. [ 725.697708][ T3438] 8021q: adding VLAN 0 to HW filter on device bond8 [ 725.724502][T18627] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 725.748677][T18627] bond0: (slave geneve1): link status definitely down, disabling slave [ 725.836853][ T3457] 8021q: adding VLAN 0 to HW filter on device bond8 [ 725.885334][ T3457] bond8: (slave ipip0): The slave device specified does not support setting the MAC address [ 725.903456][ T3462] netlink: 'syz.3.7621': attribute type 1 has an invalid length. [ 725.936268][ T3457] bond8: (slave ipip0): Error -95 calling set_mac_address [ 726.025598][ T3462] bond7: entered promiscuous mode [ 726.031138][ T3462] 8021q: adding VLAN 0 to HW filter on device bond7 [ 726.192420][ T3476] netlink: 'syz.0.7625': attribute type 3 has an invalid length. [ 726.232488][ T3478] IPVS: set_ctl: invalid protocol: 92 172.20.20.49:20001 [ 726.256978][ T3478] xt_CONNSECMARK: invalid mode: 0 [ 726.309735][ T3481] netlink: 'syz.0.7625': attribute type 10 has an invalid length. [ 726.602865][ T3502] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 726.776050][ T3508] xt_TCPMSS: Only works on TCP SYN packets [ 726.991397][ T3521] netlink: 'syz.3.7637': attribute type 1 has an invalid length. [ 727.020240][ T3521] 8021q: adding VLAN 0 to HW filter on device bond8 [ 727.060923][ T3521] bond8: (slave veth7): Enslaving as an active interface with an up link [ 727.100806][ T3521] bond8 (unregistering): (slave veth7): Releasing backup interface [ 727.117727][ T3521] bond8 (unregistering): Released all slaves [ 727.171213][ T3531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 727.344462][ T3547] syzkaller0: entered promiscuous mode [ 727.361018][ T3547] syzkaller0: entered allmulticast mode [ 727.444330][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 727.693420][ T3567] syzkaller0: entered promiscuous mode [ 727.700586][ T3567] syzkaller0: entered allmulticast mode [ 727.893533][ T3584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.802457][ T3624] __nla_validate_parse: 12 callbacks suppressed [ 728.802496][ T3624] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7659'. [ 728.858879][ T3624] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 728.885413][T26349] Bluetooth: hci4: command 0x0406 tx timeout [ 728.903215][ T3591] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 729.478150][ T3656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 729.716971][ T3646] netlink: 732 bytes leftover after parsing attributes in process `syz.4.7665'. [ 729.748741][ T3677] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 729.768018][ T3646] netlink: 732 bytes leftover after parsing attributes in process `syz.4.7665'. [ 729.792023][ T3679] netlink: 288 bytes leftover after parsing attributes in process `syz.0.7676'. [ 729.837935][ T3677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7674'. [ 729.962857][ T3682] xfrm0 speed is unknown, defaulting to 1000 [ 730.042001][ T3682] lo speed is unknown, defaulting to 1000 [ 730.284316][ T3689] netlink: 880 bytes leftover after parsing attributes in process `syz.0.7680'. [ 730.323027][ T3691] netlink: 748 bytes leftover after parsing attributes in process `syz.0.7680'. [ 730.902832][ T3715] xfrm0 speed is unknown, defaulting to 1000 [ 730.952316][ T3715] lo speed is unknown, defaulting to 1000 [ 730.964990][ T4940] Bluetooth: hci4: command 0x0406 tx timeout [ 731.127325][ T3683] netlink: 'syz.2.7677': attribute type 24 has an invalid length. [ 731.625449][ T3753] netlink: 'syz.1.7692': attribute type 1 has an invalid length. [ 731.675479][ T3740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.749149][ T3753] bond6: entered promiscuous mode [ 731.758230][ T3753] 8021q: adding VLAN 0 to HW filter on device bond6 [ 731.941360][ T3763] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7695'. [ 732.063486][ T3766] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 732.332077][ T3782] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7703'. [ 732.447426][ T3786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7704'. [ 732.498399][ T3792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.553662][ T3792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.592537][ T3788] can: request_module (can-proto-4) failed. [ 732.712407][ T3803] xfrm0 speed is unknown, defaulting to 1000 [ 732.723702][ T3803] lo speed is unknown, defaulting to 1000 [ 733.650289][ T3833] veth0_to_bond: entered allmulticast mode [ 733.810000][ T3837] __nla_validate_parse: 8 callbacks suppressed [ 733.810034][ T3837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7721'. [ 733.861278][ T3837] bond0: invalid ARP target 0.0.0.0 specified for addition [ 733.888083][ T3837] bond0: option arp_ip_target: invalid value (0) [ 733.906418][ T4956] block nbd3: Possible stuck request ffff88809fb41f80: control (read@0,1024B). Runtime 120 seconds [ 733.930102][ T3845] sctp: [Deprecated]: syz.4.7720 (pid 3845) Use of int in max_burst socket option. [ 733.930102][ T3845] Use struct sctp_assoc_value instead [ 734.276541][ T3854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7725'. [ 734.297771][ T3859] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7727'. [ 734.452411][ T3871] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 734.730109][ T3886] netlink: 'syz.4.7735': attribute type 12 has an invalid length. [ 734.820020][ T3890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7736'. [ 734.831282][ T3890] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7736'. [ 735.177385][ T3902] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 735.372949][ T3913] : entered promiscuous mode [ 735.699513][ T3928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7745'. [ 735.963266][ T3947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7749'. [ 736.371296][ T3971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7757'. [ 736.666141][ T3982] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7759'. [ 736.880682][ T3989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7760'. [ 736.900010][ T3985] syzkaller0: entered promiscuous mode [ 736.907704][ T3985] syzkaller0: entered allmulticast mode [ 738.390934][ T4063] xfrm0 speed is unknown, defaulting to 1000 [ 738.405096][ T4063] lo speed is unknown, defaulting to 1000 [ 738.682803][ T4077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.901946][ T4088] sctp: [Deprecated]: syz.3.7786 (pid 4088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 738.901946][ T4088] Use struct sctp_sack_info instead [ 738.920078][ T4088] sctp: [Deprecated]: syz.3.7786 (pid 4088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 738.920078][ T4088] Use struct sctp_sack_info instead [ 739.061971][ T4095] __nla_validate_parse: 9 callbacks suppressed [ 739.061992][ T4095] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7790'. [ 739.080926][ T4092] xfrm0 speed is unknown, defaulting to 1000 [ 739.097131][ T4092] lo speed is unknown, defaulting to 1000 [ 739.125467][T26349] Bluetooth: hci1: command 0x0406 tx timeout [ 739.134973][ T4096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7789'. [ 739.352446][ T4103] macvlan1: entered allmulticast mode [ 739.541478][ T4109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7794'. [ 739.572694][ T4105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.598910][ T4105] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.615348][ T4110] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.7794'. [ 739.643348][ T4110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7794'. [ 739.747604][ T4105] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 739.776144][T18631] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.783847][T18631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.808964][T18631] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.816683][T18631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.126061][ T4118] netlink: 'syz.2.7796': attribute type 4 has an invalid length. [ 740.134766][ T4118] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7796'. [ 740.162727][ T4118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.559359][ T4131] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7803'. [ 740.712760][ T4139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7805'. [ 740.770130][ T4145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7805'. [ 741.016987][ T4158] tipc: Enabling of bearer rejected, failed to enable media [ 741.104799][ T4163] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7809'. [ 741.887922][ T4199] bond0: (slave dummy0): Releasing backup interface [ 741.965917][ T4213] netlink: 'syz.2.7819': attribute type 4 has an invalid length. [ 742.073600][ T4199] bridge4: port 1(dummy0) entered blocking state [ 742.085859][ T4199] bridge4: port 1(dummy0) entered disabled state [ 742.121355][ T4199] dummy0: entered allmulticast mode [ 742.130088][ T4199] dummy0: entered promiscuous mode [ 742.285605][ T4224] netlink: 'syz.2.7819': attribute type 10 has an invalid length. [ 742.355844][ T4214] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.363311][ T4214] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.495988][ T4224] bridge4: port 1(dummy0) entered blocking state [ 742.502996][ T4224] bridge4: port 1(dummy0) entered forwarding state [ 742.512782][ T4224] dummy0: left allmulticast mode [ 742.519236][ T4224] bridge4: port 1(dummy0) entered disabled state [ 742.739558][ T4234] netlink: 'syz.0.7825': attribute type 1 has an invalid length. [ 742.888284][ T4242] netlink: 'syz.2.7831': attribute type 49 has an invalid length. [ 743.142671][ T4261] syzkaller0: entered promiscuous mode [ 743.149358][ T4261] syzkaller0: entered allmulticast mode [ 743.162876][ T4261] tipc: Enabled bearer , priority 0 [ 743.203728][ T4261] tipc: Resetting bearer [ 743.231382][ T4261] tipc: Disabling bearer [ 743.651273][ T4294] netlink: 'syz.0.7846': attribute type 1 has an invalid length. [ 743.709670][ T4294] 8021q: adding VLAN 0 to HW filter on device bond9 [ 743.884794][ T4298] bond9: (slave erspan0): making interface the new active one [ 743.902199][ T4298] bond9: (slave erspan0): Enslaving as an active interface with an up link [ 744.049377][T18621] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.060919][T18621] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.093343][T18621] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.123037][T18621] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.296020][ T4319] __nla_validate_parse: 12 callbacks suppressed [ 744.296070][ T4319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7851'. [ 744.321250][ T4319] mac80211_hwsim hwsim97 wlan1: Caught tx_queue_len zero misconfig [ 744.595613][ T4330] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 744.777619][ T4339] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7858'. [ 744.803996][ T4339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7858'. [ 744.829606][ T4341] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7858'. [ 745.013678][ T4349] xt_hashlimit: invalid rate [ 745.111277][ T4352] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7862'. [ 745.251290][ T4356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7864'. [ 745.346930][ T4363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7865'. [ 745.365324][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 745.531583][ T4368] syzkaller0: entered promiscuous mode [ 745.537878][ T4368] syzkaller0: entered allmulticast mode [ 745.859824][ T4391] netlink: 'syz.1.7876': attribute type 11 has an invalid length. [ 745.893329][ T4393] netlink: 'syz.1.7876': attribute type 11 has an invalid length. [ 745.918472][ T4391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7876'. [ 745.990269][ T4395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.007881][ T4395] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.101564][ T4395] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 746.137723][ T4395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 746.167342][ T4395] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 746.211388][T18631] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.219066][T18631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.266141][T18631] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.273808][T18631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.349158][ T4403] vlan3: entered allmulticast mode [ 746.356075][ T4403] bond0: entered allmulticast mode [ 746.361495][ T4403] bond_slave_0: entered allmulticast mode [ 746.368267][ T4403] bond_slave_1: entered allmulticast mode [ 746.712767][ T4418] syzkaller1: entered promiscuous mode [ 746.731037][ T4418] syzkaller1: entered allmulticast mode [ 746.916382][ T4424] netlink: 'syz.0.7883': attribute type 1 has an invalid length. [ 746.960175][ T4424] netlink: 'syz.0.7883': attribute type 4 has an invalid length. [ 747.009118][ T4424] netlink: 'syz.0.7883': attribute type 4 has an invalid length. [ 747.053145][ T4426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7885'. [ 747.087528][ T4426] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7885'. [ 747.287206][ T1330] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 747.297663][ T4447] netlink: 'syz.3.7887': attribute type 11 has an invalid length. [ 747.961587][ T4481] netlink: 'syz.0.7897': attribute type 2 has an invalid length. [ 748.022777][ T4484] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 748.159346][ T4484] bond8 (unregistering): Released all slaves [ 748.181874][ T4486] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 748.726736][ T8486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.752392][ T4519] xfrm0 speed is unknown, defaulting to 1000 [ 748.786353][ T4519] lo speed is unknown, defaulting to 1000 [ 748.936129][ T4526] FAULT_INJECTION: forcing a failure. [ 748.936129][ T4526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.998283][ T4526] CPU: 0 UID: 0 PID: 4526 Comm: syz.0.7913 Not tainted syzkaller #0 PREEMPT(full) [ 748.998314][ T4526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 748.998327][ T4526] Call Trace: [ 748.998337][ T4526] [ 748.998346][ T4526] dump_stack_lvl+0xe8/0x150 [ 748.998378][ T4526] should_fail_ex+0x40c/0x560 [ 748.998515][ T4526] _copy_from_iter+0x1d3/0x1660 [ 748.998578][ T4526] ? rcu_is_watching+0x15/0xb0 [ 748.998612][ T4526] ? trace_kmem_cache_alloc+0x29/0xe0 [ 748.998642][ T4526] ? __pfx__copy_from_iter+0x10/0x10 [ 748.998675][ T4526] skb_copy_datagram_from_iter+0xe6/0x720 [ 748.998731][ T4526] ? rcu_is_watching+0x15/0xb0 [ 748.998752][ T4526] ? tun_get_user+0xad6/0x4350 [ 748.998832][ T4526] ? trace_irq_enable+0x3b/0x140 [ 748.998860][ T4526] ? iov_iter_single_seg_count+0xc9/0x2f0 [ 748.998913][ T4526] tun_get_user+0xc71/0x4350 [ 748.998939][ T4526] ? is_bpf_text_address+0x292/0x2b0 [ 748.998986][ T4526] ? lock_release+0x4b/0x3c0 [ 748.999025][ T4526] ? aa_file_perm+0x4ed/0x15f0 [ 748.999049][ T4526] ? __pfx_tun_get_user+0x10/0x10 [ 748.999079][ T4526] ? kstrtoull+0x12f/0x1d0 [ 748.999130][ T4526] ? ref_tracker_alloc+0x341/0x4b0 [ 748.999194][ T4526] ? get_pid_task+0x20/0x1f0 [ 748.999231][ T4526] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 748.999254][ T4526] ? rcu_is_watching+0x15/0xb0 [ 748.999277][ T4526] ? tun_get+0x1c/0x2f0 [ 748.999301][ T4526] ? tun_get+0x1c/0x2f0 [ 748.999326][ T4526] ? rcu_is_watching+0x15/0xb0 [ 748.999345][ T4526] ? tun_get+0x1c/0x2f0 [ 748.999369][ T4526] ? lock_release+0x4b/0x3c0 [ 748.999399][ T4526] ? apparmor_file_permission+0x1f4/0x300 [ 748.999457][ T4526] ? tun_get+0x1c/0x2f0 [ 748.999484][ T4526] tun_chr_write_iter+0x113/0x200 [ 748.999513][ T4526] vfs_write+0x612/0xba0 [ 748.999563][ T4526] ? __pfx_vfs_write+0x10/0x10 [ 748.999596][ T4526] ? __fget_files+0x2a/0x420 [ 748.999635][ T4526] ksys_write+0x150/0x270 [ 748.999665][ T4526] ? __pfx_ksys_write+0x10/0x10 [ 748.999695][ T4526] ? rcu_is_watching+0x15/0xb0 [ 748.999718][ T4526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.999741][ T4526] do_syscall_64+0x174/0x580 [ 748.999772][ T4526] ? trace_irq_disable+0x3b/0x140 [ 748.999799][ T4526] ? clear_bhb_loop+0x40/0x90 [ 748.999824][ T4526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.999845][ T4526] RIP: 0033:0x7f1e9bf9ce59 [ 748.999865][ T4526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.999884][ T4526] RSP: 002b:00007f1e9cef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 748.999908][ T4526] RAX: ffffffffffffffda RBX: 00007f1e9c215fa0 RCX: 00007f1e9bf9ce59 [ 748.999924][ T4526] RDX: 000000000000004a RSI: 00002000000003c0 RDI: 0000000000000003 [ 748.999938][ T4526] RBP: 00007f1e9cef3090 R08: 0000000000000000 R09: 0000000000000000 [ 748.999952][ T4526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.999965][ T4526] R13: 00007f1e9c216038 R14: 00007f1e9c215fa0 R15: 00007ffcc5d51ca8 [ 748.999991][ T4526] [ 749.669900][ T4540] netlink: 'syz.2.7917': attribute type 11 has an invalid length. [ 750.032980][ T4551] __nla_validate_parse: 6 callbacks suppressed [ 750.033001][ T4551] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7921'. [ 750.158229][ T4564] syzkaller0: entered promiscuous mode [ 750.171821][ T4564] syzkaller0: entered allmulticast mode [ 750.266228][ T4570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7925'. [ 750.288302][ T4568] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7924'. [ 750.341686][ T4571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7924'. [ 750.368837][ T4571] openvswitch: netlink: Flow key attr not present in new flow. [ 750.397734][ T4568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7924'. [ 750.728187][ T4597] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7933'. [ 750.804481][ T4597] nbd14: detected capacity change from 0 to 1 [ 750.822153][T25800] buffer_io_error: 139 callbacks suppressed [ 750.822171][T25800] Buffer I/O error on dev nbd14, logical block 0, async page read [ 750.864768][T25800] Buffer I/O error on dev nbd14, logical block 0, async page read [ 750.875670][T25800] Buffer I/O error on dev nbd14, logical block 0, async page read [ 750.889993][T25800] Buffer I/O error on dev nbd14, logical block 0, async page read [ 750.900399][T25800] Buffer I/O error on dev nbd14, logical block 0, async page read [ 750.909260][T25800] ldm_validate_partition_table(): Disk read failed. [ 750.912115][ T4599] syzkaller0: entered promiscuous mode [ 750.923871][T25800] Buffer I/O error on dev nbd14, logical block 0, async page read [ 750.933040][T25800] Buffer I/O error on dev nbd14, logical block 0, async page read [ 750.942866][T25800] Buffer I/O error on dev nbd14, logical block 0, async page read [ 750.952304][T25800] Buffer I/O error on dev nbd14, logical block 0, async page read [ 750.962282][T25800] Dev nbd14: unable to read RDB block 0 [ 750.969557][T25800] Buffer I/O error on dev nbd14, logical block 0, async page read [ 750.980104][ T4940] block nbd14: Receive control failed (result -32) [ 750.993274][T25800] nbd14: unable to read partition table [ 751.015103][T25800] nbd14: partition table beyond EOD, truncated [ 751.297516][ T4616] syzkaller1: entered promiscuous mode [ 751.303190][ T4616] syzkaller1: entered allmulticast mode [ 751.806339][ T4616] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.813744][ T4616] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.001988][ T4616] geneve1: left promiscuous mode [ 752.008165][ T4616] vlan2: left allmulticast mode [ 752.013128][ T4616] netdevsim netdevsim1 netdevsim3: left allmulticast mode [ 752.021670][ T4616] bond1: left promiscuous mode [ 752.031894][ T4616] ip6tnl1: left allmulticast mode [ 752.039859][ T4616] bridge2: left promiscuous mode [ 752.045196][ T4616] bridge2: left allmulticast mode [ 752.050677][ T4616] geneve2: left promiscuous mode [ 752.057019][ T4616] geneve2: left allmulticast mode [ 752.062586][ T4616] bond5: left promiscuous mode [ 752.069293][ T4616] bond6: left promiscuous mode [ 752.077817][ T4616] syzkaller1: left promiscuous mode [ 752.091611][ T4616] syzkaller1: left allmulticast mode [ 753.137912][ T4709] bond6: ARP target 9.0.0.0 is already present [ 753.144570][ T4709] bond6: option arp_ip_target: invalid value (9) [ 753.157876][ T4709] bond6 (unregistering): Released all slaves [ 753.366120][ T4722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7963'. [ 753.772324][ T4744] bridge_slave_0: left allmulticast mode [ 753.791413][ T4744] bridge_slave_0: left promiscuous mode [ 753.810414][ T4744] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.832285][ T4745] netlink: 'syz.0.7972': attribute type 1 has an invalid length. [ 753.841132][ T4745] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.7972'. [ 753.856281][ T4744] bridge_slave_1: left allmulticast mode [ 753.863233][ T4744] bridge_slave_1: left promiscuous mode [ 753.870015][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.880548][ T4744] vlan2: left promiscuous mode [ 753.905962][ T4744] geneve0: left promiscuous mode [ 753.932586][ T4744] bond0: (slave bond_slave_0): Releasing backup interface [ 753.952331][ T4744] bond_slave_0: left allmulticast mode [ 753.975746][ T4744] bond0: (slave bond_slave_1): Releasing backup interface [ 753.984936][ T4744] bond_slave_1: left allmulticast mode [ 753.999276][ T4744] team0: Port device team_slave_0 removed [ 754.007924][ T4744] team0: Port device team_slave_1 removed [ 754.015539][ T4744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.025403][ T4744] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 754.149842][ T4761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7976'. [ 754.171644][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7978'. [ 754.209685][ T4763] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 754.222029][ T4763] bond4 (unregistering): Released all slaves [ 754.367500][ T4776] bond7: entered promiscuous mode [ 754.714822][ T4796] netlink: 'syz.2.7986': attribute type 16 has an invalid length. [ 754.734794][ T4796] netlink: 'syz.2.7986': attribute type 17 has an invalid length. [ 754.913294][ T4782] batman_adv: batadv0: Interface deactivated: dummy0 [ 755.145708][ T4782] bridge_slave_1: left allmulticast mode [ 755.175862][ T4782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.184484][ T4807] __nla_validate_parse: 1 callbacks suppressed [ 755.184503][ T4807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7990'. [ 755.208935][ T4782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.273684][ T4782] macvlan1: left allmulticast mode [ 755.300960][ T4782] geneve1: left promiscuous mode [ 755.314032][ T4782] xfrm1: left allmulticast mode [ 755.336112][ T4782] bond2: left promiscuous mode [ 755.341550][ T4782] bond2: left allmulticast mode [ 755.351212][ T4782] veth3: left allmulticast mode [ 755.383489][ T4782] hsr1: left promiscuous mode [ 755.402545][ T4782] ip6gre2: left promiscuous mode [ 755.418862][ T4782] ip6gre2: left allmulticast mode [ 755.470397][ T4782] bond7: left promiscuous mode [ 755.669799][ T4796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.701389][ T4796] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.717482][ T4796] tipc: Resetting bearer [ 755.754963][ T4796] tipc: Resetting bearer [ 755.778470][ T4796] dummy0: left promiscuous mode [ 755.818664][ T4796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.930921][ T4796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 755.950792][ T4796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 755.991416][ T4796] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 756.057265][T18639] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.075912][T18639] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.108457][T18639] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.129614][ T4827] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 756.154230][ T4827] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 756.176772][ T4835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7996'. [ 756.186130][ T4827] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 756.221392][T18639] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.602273][ T4856] bond10: ARP target 9.0.0.0 is already present [ 756.610072][ T4856] bond10: option arp_ip_target: invalid value (9) [ 756.621544][ T4856] bond10 (unregistering): Released all slaves [ 756.685483][ T4851] xfrm0 speed is unknown, defaulting to 1000 [ 756.717916][ T4851] lo speed is unknown, defaulting to 1000 [ 757.021388][ T4872] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 757.068113][ T4872] bond8 (unregistering): Released all slaves [ 757.328985][ T4905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8013'. [ 757.519539][ T4914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8016'. [ 757.887866][ T4925] netlink: 'syz.3.8018': attribute type 12 has an invalid length. [ 757.888938][ T4923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8019'. [ 757.962047][ T4925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8018'. [ 758.029758][ T4931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.109912][ T4934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8022'. [ 758.152844][ T4929] bond4: option downdelay: invalid value (18446744073709551487) [ 758.161157][ T4929] bond4: option downdelay: allowed values 0 - 2147483647 [ 758.175647][ T4929] bond4 (unregistering): Released all slaves [ 758.196542][ T4944] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8023'. [ 758.492939][ T4963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8026'. [ 758.514831][ T4963] bond0: option updelay: invalid value (18446744072967730723) [ 758.544714][ T4963] bond0: option updelay: allowed values 0 - 2147483647 [ 758.617003][ T4966] : option downdelay: invalid value (18446744073709547007) [ 758.642114][ T4966] : option downdelay: allowed values 0 - 2147483647 [ 758.681697][ T4966]  (unregistering): Released all slaves [ 758.706994][ T4970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8027'. [ 758.991336][ T4994] netlink: 'syz.3.8031': attribute type 1 has an invalid length. [ 759.886267][ T30] audit: type=1804 audit(1782383419.250:22): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8047" name="/newroot/371/memory.events" dev="tmpfs" ino=1909 res=1 errno=0 [ 759.916169][ T30] audit: type=1800 audit(1782383419.270:23): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8047" name="memory.events" dev="tmpfs" ino=1909 res=0 errno=0 [ 759.941628][ T30] audit: type=1804 audit(1782383419.270:24): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.8047" name="/newroot/371/memory.events" dev="tmpfs" ino=1909 res=1 errno=0 [ 760.075031][ T5058] ip6tnl2: entered allmulticast mode [ 760.094463][T18619] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 760.112651][T18619] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 760.121302][ T7869] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 760.146455][ T7869] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 760.325321][ T7869] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 760.490125][ T5076] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 760.519636][ T5085] __nla_validate_parse: 5 callbacks suppressed [ 760.519671][ T5085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8055'. [ 760.558878][ T5090] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8056'. [ 760.787593][ T5098] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 760.798599][ T5098] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 760.812308][ T5098] veth0_virt_wifi: entered allmulticast mode [ 760.821479][ T5098] veth0_virt_wifi: entered promiscuous mode [ 760.829563][ T5098] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 760.837343][ T5098] bridge0: port 1(veth0_virt_wifi) entered forwarding state [ 760.872523][ T5107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8061'. [ 761.213033][T28971] block nbd11: Receive control failed (result -32) [ 761.213030][T26349] block nbd11: Receive control failed (result -32) [ 761.267029][ T5132] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 761.332220][ T5139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8068'. [ 761.430916][ T5139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8068'. [ 761.453750][ T5139] netlink: 'syz.2.8068': attribute type 13 has an invalid length. [ 761.668357][ T5158] netlink: 'syz.3.8074': attribute type 1 has an invalid length. [ 762.247172][ T5197] sctp: [Deprecated]: syz.0.8088 (pid 5197) Use of int in max_burst socket option. [ 762.247172][ T5197] Use struct sctp_assoc_value instead [ 762.268721][ T5200] syzkaller0: entered promiscuous mode [ 762.284652][ T5200] syzkaller0: entered allmulticast mode [ 762.297102][ T5205] netlink: 292 bytes leftover after parsing attributes in process `syz.1.8089'. [ 762.361160][ T5211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8091'. [ 762.781227][ T5225] netlink: 'syz.1.8092': attribute type 4 has an invalid length. [ 762.795252][ T5224] netlink: 'syz.0.8094': attribute type 39 has an invalid length. [ 763.039826][ T5244] Unknown options in mask 6 [ 763.279501][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8106'. [ 763.465479][ T5271] tc_dump_action: action bad kind [ 763.496718][ T5275] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8106'. [ 763.643510][ T5278] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8109'. [ 763.929389][ T4956] block nbd3: Possible stuck request ffff88809fb41f80: control (read@0,1024B). Runtime 150 seconds [ 764.244600][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 764.411024][ T5320] netlink: 'syz.4.8119': attribute type 1 has an invalid length. [ 764.453458][ T5320] 8021q: adding VLAN 0 to HW filter on device bond4 [ 764.479290][ T5325] netlink: 'syz.0.8121': attribute type 5 has an invalid length. [ 765.025080][ T5362] netlink: 'syz.3.8127': attribute type 4 has an invalid length. [ 765.084268][ T5365] netlink: 'syz.3.8127': attribute type 4 has an invalid length. [ 765.240730][ T8489] lo speed is unknown, defaulting to 1000 [ 765.248926][ T8489] syz2: Port: 1 Link ACTIVE [ 765.703506][ T5378] bond0: (slave dummy0): Releasing backup interface [ 765.760225][ T5388] __nla_validate_parse: 6 callbacks suppressed [ 765.760260][ T5388] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8135'. [ 765.911113][ T5393] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8137'. [ 765.995579][ T5396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8139'. [ 766.029937][ T5396] netlink: 'syz.0.8139': attribute type 3 has an invalid length. [ 766.152177][ T5402] netlink: 'syz.3.8140': attribute type 2 has an invalid length. [ 766.285183][ T5396] netlink: 'syz.0.8139': attribute type 1 has an invalid length. [ 766.293132][ T5396] netlink: 'syz.0.8139': attribute type 2 has an invalid length. [ 766.301381][ T5396] netlink: 'syz.0.8139': attribute type 2 has an invalid length. [ 766.310539][ T5396] netlink: 'syz.0.8139': attribute type 1 has an invalid length. [ 767.093853][ T5426] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8144'. [ 767.183192][ T5432] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 767.292147][ T5444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 767.321115][ T5445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8146'. [ 767.346147][ T5445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8146'. [ 767.392133][ T5445] IPVS: Error connecting to the multicast addr [ 767.491301][ T5451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8150'. [ 767.970776][ T5483] bond8 (unregistering): Released all slaves [ 768.000944][ T5487] syzkaller0: entered promiscuous mode [ 768.007884][ T5487] syzkaller0: entered allmulticast mode [ 768.150045][ T5500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8162'. [ 768.207258][ T5502] xfrm0 speed is unknown, defaulting to 1000 [ 768.227390][ T5502] lo speed is unknown, defaulting to 1000 [ 768.366274][ T5511] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8167'. [ 768.463595][ T5515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8169'. [ 768.494238][ T5515] block nbd13: Unsupported socket: should be TCP or UNIX. [ 769.011077][ T5526] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 769.336961][ T5537] xt_hashlimit: size too large, truncated to 1048576 [ 769.429648][ T5534] syzkaller0: left promiscuous mode [ 769.442059][ T5534] syzkaller0: left allmulticast mode [ 769.503742][ T5549] syz_tun: entered allmulticast mode [ 769.556938][ T5552] syzkaller0: entered promiscuous mode [ 769.576738][ T5552] syzkaller0: entered allmulticast mode [ 769.600500][ T5553] pimreg: entered allmulticast mode [ 769.615810][ T5549] xfrm0 speed is unknown, defaulting to 1000 [ 769.640387][ T5549] lo speed is unknown, defaulting to 1000 [ 769.795333][ T5559] syzkaller0: entered allmulticast mode [ 769.970675][ T5561] validate_nla: 1 callbacks suppressed [ 769.970710][ T5561] netlink: 'syz.3.8183': attribute type 2 has an invalid length. [ 769.999026][ T5561] netlink: 'syz.3.8183': attribute type 1 has an invalid length. [ 770.023299][T18625] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.052526][T18625] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.063041][ T5567] netlink: 'syz.0.8184': attribute type 4 has an invalid length. [ 770.078557][ T5570] netlink: 'syz.2.8186': attribute type 1 has an invalid length. [ 770.119743][T18625] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.138478][T18625] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.188221][ T5576] netlink: 'syz.2.8186': attribute type 10 has an invalid length. [ 770.233107][ T5570] 8021q: adding VLAN 0 to HW filter on device bond7 [ 770.288996][ T5576] dummy0: entered promiscuous mode [ 770.387283][ T5548] syz_tun: left allmulticast mode [ 770.437486][ T5593] netlink: 'syz.2.8193': attribute type 25 has an invalid length. [ 771.101847][ T5603] xfrm0 speed is unknown, defaulting to 1000 [ 771.242175][ T5603] lo speed is unknown, defaulting to 1000 [ 771.342193][ T5622] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 771.411666][ T5626] __nla_validate_parse: 8 callbacks suppressed [ 771.411700][ T5626] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8201'. [ 771.586684][ T5639] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8203'. [ 771.617417][ T5636] can: request_module (can-proto-0) failed. [ 771.673389][ T5636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8205'. [ 771.729849][ T5644] xfrm0 speed is unknown, defaulting to 1000 [ 771.755641][ T5647] pimreg: entered allmulticast mode [ 771.771531][ T5644] lo speed is unknown, defaulting to 1000 [ 771.788899][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8204'. [ 771.837366][ T5649] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 772.004687][ T5652] xt_TPROXY: Can be used only with -p tcp or -p udp [ 772.199660][ T5658] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8210'. [ 772.212080][ T5658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8210'. [ 772.493320][ T5672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8213'. [ 772.884630][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 773.039783][ T5694] netlink: 165 bytes leftover after parsing attributes in process `syz.2.8218'. [ 775.350430][ T5665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 775.502901][ T5746] syzkaller0: entered promiscuous mode [ 775.525451][ T5746] syzkaller0: entered allmulticast mode [ 775.532218][ T5750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8230'. [ 775.545391][ T5744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8226'. [ 775.565321][ T5754] netlink: 'syz.2.8227': attribute type 12 has an invalid length. [ 775.777038][ T5768] syzkaller0: entered promiscuous mode [ 775.791307][ T5768] syzkaller0: entered allmulticast mode [ 775.812301][ T5769] nbd: must specify at least one socket [ 775.961770][ T5779] SET target dimension over the limit! [ 776.627886][ T5817] __nla_validate_parse: 3 callbacks suppressed [ 776.627915][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8243'. [ 778.840458][ T5773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 779.006834][ T5830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8249'. [ 779.116210][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8251'. [ 779.217285][ T5840] netlink: 'syz.2.8252': attribute type 1 has an invalid length. [ 779.269031][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8256'. [ 779.312625][ T5849] netlink: 'syz.1.8253': attribute type 12 has an invalid length. [ 779.378540][ T5854] sctp: [Deprecated]: syz.2.8257 (pid 5854) Use of struct sctp_assoc_value in delayed_ack socket option. [ 779.378540][ T5854] Use struct sctp_sack_info instead [ 779.411819][ T5855] dvmrp0: entered allmulticast mode [ 779.865331][ T5872] syzkaller0: entered promiscuous mode [ 779.871076][ T5872] syzkaller0: entered allmulticast mode [ 780.224818][ T5881] netlink: 'syz.3.8264': attribute type 7 has an invalid length. [ 780.349290][ T5886] xt_bpf: check failed: parse error [ 780.458969][ T5893] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8268'. [ 780.472118][ T5893] netlink: 'syz.2.8268': attribute type 89 has an invalid length. [ 780.917470][ T5927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.931006][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8277'. [ 780.952919][ T5927] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8277'. [ 780.972994][ T5933] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8277'. [ 781.279527][ T5954] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8282'. [ 781.344965][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8282'. [ 781.478207][ T5962] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 783.836094][ T5924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 784.463518][ T4991] udevd[4991]: worker [25574] /devices/virtual/block/nbd3 is taking a long time [ 784.760028][ T5978] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 784.905461][ T5977] syzkaller0: entered promiscuous mode [ 784.924476][ T5977] syzkaller0: entered allmulticast mode [ 784.943425][ T5986] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8292'. [ 785.116005][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8295'. [ 785.168180][ T6000] netlink: 'syz.2.8295': attribute type 11 has an invalid length. [ 785.325107][ T6007] xfrm0 speed is unknown, defaulting to 1000 [ 785.351981][ T6007] lo speed is unknown, defaulting to 1000 [ 785.375566][ T6011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 785.823240][ T6031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8303'. [ 786.238446][ T6051] netlink: 'syz.1.8308': attribute type 1 has an invalid length. [ 786.262001][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8307'. [ 786.279614][ T6048] syzkaller0: entered promiscuous mode [ 786.285300][ T6048] syzkaller0: entered allmulticast mode [ 786.355364][ T6051] 8021q: adding VLAN 0 to HW filter on device bond8 [ 786.389149][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8308'. [ 786.409557][ T6051] block nbd13: Unsupported socket: should be TCP or UNIX. [ 786.461353][ T6061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8310'. [ 786.478276][ T6061] netlink: 'syz.0.8310': attribute type 7 has an invalid length. [ 786.497284][ T6061] netlink: 'syz.0.8310': attribute type 8 has an invalid length. [ 786.532169][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8310'. [ 786.547977][ T6062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8307'. [ 786.681359][ T6066] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 786.749892][ T6071] xt_hashlimit: size too large, truncated to 1048576 [ 786.803814][ T6055] bond8: (slave veth9): Enslaving as an active interface with a down link [ 786.913036][ T6060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8310'. [ 786.945988][ T6060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8310'. [ 786.960863][ T6078] netlink: 'syz.4.8311': attribute type 1 has an invalid length. [ 787.195292][ T6067] syzkaller0: entered promiscuous mode [ 787.207620][ T6067] syzkaller0: entered allmulticast mode [ 787.282859][ T6077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.295868][ T6077] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.304925][ T6077] batman_adv: batadv0: Interface activated: dummy0 [ 787.312031][ T6077] batadv0: mtu less than device minimum [ 787.322874][ T6077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 787.335123][ T6077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 787.347257][ T6077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 787.359444][ T6077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 787.371217][ T6077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 787.383388][ T6077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 787.395528][ T6077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 787.407669][ T6077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 787.419506][ T6077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 787.464890][ T6077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.625163][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.663367][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.729756][ T6077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 787.744423][ T6077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 788.097997][ T6106] syzkaller0: entered promiscuous mode [ 788.131078][ T6106] syzkaller0: entered allmulticast mode [ 788.244379][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 788.265171][T18624] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 789.138027][ T6166] netlink: 'syz.2.8332': attribute type 13 has an invalid length. [ 789.200928][ T6166] gretap0: refused to change device tx_queue_len [ 789.268624][ T6171] netlink: 'syz.2.8332': attribute type 1 has an invalid length. [ 789.285341][ T6171] netlink: 'syz.2.8332': attribute type 2 has an invalid length. [ 789.329630][ T6172] sit0: entered promiscuous mode [ 789.347804][ T6172] netlink: 'syz.4.8333': attribute type 1 has an invalid length. [ 789.586999][ T6184] 8021q: adding VLAN 0 to HW filter on device bond8 [ 790.136435][ T6212] block nbd0: reconnected socket [ 790.136651][T28971] block nbd0: Receive control failed (result -107) [ 790.164412][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 790.179201][T18621] bridge_slave_1: left allmulticast mode [ 790.198253][T18621] bridge_slave_1: left promiscuous mode [ 790.209268][T18621] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.248543][T18621] bridge_slave_0: left allmulticast mode [ 790.261694][T18621] bridge_slave_0: left promiscuous mode [ 790.277257][T18621] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.350839][T18621] pim6reg99999999: left allmulticast mode [ 790.384906][T18621] pimreg: left allmulticast mode [ 790.572107][T18622] smbdirect: ib_dev[syz0] removed [ 790.618981][T18621] batman_adv: batadv0: Removing interface: gretap1 [ 790.670374][T18621] bond10 (unregistering): (slave gretap2): Releasing active interface [ 790.691144][ T6243] __nla_validate_parse: 11 callbacks suppressed [ 790.691167][ T6243] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8353'. [ 790.809561][T18621] bond3 (unregistering): (slave geneve3): Releasing active interface [ 790.837893][T18621] geneve3 (unregistering): left allmulticast mode [ 790.878009][T18621] bond2 (unregistering): (slave geneve2): Releasing active interface [ 790.940372][T18621] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 791.048280][T18621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.088058][T18621] bond_slave_0: left promiscuous mode [ 791.122203][T18621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.154753][T18621] bond_slave_1: left promiscuous mode [ 791.161794][T18621] bond0 (unregistering): Released all slaves [ 791.179681][T18621] bond1 (unregistering): (slave lo): Releasing backup interface [ 791.189906][T18621] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 791.202700][T18621] bond1 (unregistering): Released all slaves [ 791.222248][T18621] bond2 (unregistering): Released all slaves [ 791.250001][T18621] bond3 (unregistering): Released all slaves [ 791.281199][T18621] bond4 (unregistering): Released all slaves [ 791.301133][T18621] bond5 (unregistering): Released all slaves [ 791.324294][T18621] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 791.334000][T18621] veth0_to_bond: left promiscuous mode [ 791.351712][T18621] veth0_to_bond: left allmulticast mode [ 791.360696][T18621] bond6 (unregistering): Released all slaves [ 791.385971][T18621] bond7 (unregistering): Released all slaves [ 791.406902][T18621] bond8 (unregistering): Released all slaves [ 791.422705][T18621] bond9 (unregistering): Released all slaves [ 791.437047][T18621] bond10 (unregistering): Released all slaves [ 791.451866][T18621] bond11 (unregistering): Released all slaves [ 791.473746][T18621] bond12 (unregistering): Released all slaves [ 791.500104][T18621] bond13 (unregistering): Released all slaves [ 791.531666][T18621] team0: Port device bond14 removed [ 791.548437][T18621] bond14 (unregistering): (slave team_slave_1): Releasing backup interface [ 791.558835][T18621] team_slave_1: left allmulticast mode [ 791.568531][T18621] bond14 (unregistering): Released all slaves [ 791.587352][T18621] bond15 (unregistering): (slave batadv2): Releasing active interface [ 791.597983][T18621] bond15 (unregistering): Released all slaves [ 791.631408][T18621] bond16 (unregistering): Released all slaves [ 791.652715][ T6236] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 791.753190][ T6233] 8021q: adding VLAN 0 to HW filter on device bond8 [ 791.829824][ T6262] netlink: 'syz.0.8355': attribute type 142 has an invalid length. [ 791.859042][T18621] hmac(sha2: left promiscuous mode [ 791.947191][ T6258] : renamed from veth0_to_bond [ 791.958329][ T6269] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 792.019558][ T6254] syzkaller0: entered promiscuous mode [ 792.026395][ T6254] syzkaller0: entered allmulticast mode [ 792.069381][ T6267] bond9: (slave erspan0): Releasing active interface [ 792.115423][ T6267] bond0: (slave dummy0): Releasing backup interface [ 792.150339][ T6267] bond4: (slave veth0_to_bond): Releasing backup interface [ 792.176667][ T6267] veth0_virt_wifi: left allmulticast mode [ 792.182624][ T6267] veth0_virt_wifi: left promiscuous mode [ 792.195408][ T6267] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 792.208565][ T6267] bond0: (slave wlan0): Releasing backup interface [ 792.217258][ T6267] bond1: (slave batadv1): Releasing active interface [ 792.228159][ T6267] team0: Port device bridge2 removed [ 792.234853][ T6267] bond5: (slave gretap1): Releasing active interface [ 792.253844][ T6267] team0: Port device batadv0 removed [ 792.298575][T18621] tipc: Disabling bearer [ 792.317090][T18621] tipc: Left network mode [ 792.505556][T18624] net_ratelimit: 71 callbacks suppressed [ 792.505579][T18624] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 792.527158][T18624] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 792.911092][ T6305] syzkaller0: entered promiscuous mode [ 792.929886][ T6305] syzkaller0: entered allmulticast mode [ 793.073795][ T6309] bond5 (unregistering): Released all slaves [ 793.160558][T18606] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 793.175502][T18606] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 793.520570][ T6324] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8369'. [ 793.600933][ T6326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.724530][T18639] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 793.740933][T18639] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 794.022134][ T4956] block nbd3: Possible stuck request ffff88809fb41f80: control (read@0,1024B). Runtime 180 seconds [ 794.061756][T18621] team0 (unregistering): Port device team_slave_0 removed [ 794.227495][ T6331] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 794.235827][ T6331] syzkaller1: linktype set to 825 [ 794.307670][T18639] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 794.322633][T18639] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 794.501462][ T6355] lo speed is unknown, defaulting to 1000 [ 794.752671][ T6373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8380'. [ 794.777063][T18621] IPVS: stop unused estimator thread 0... [ 794.945397][T18621] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 794.960394][T18621] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 795.516439][ T6396] xt_hashlimit: size too large, truncated to 1048576 [ 795.755481][ T6404] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8386'. [ 796.374906][ T6432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8388'. [ 796.698463][ T6455] netlink: 'syz.1.8395': attribute type 3 has an invalid length. [ 796.821457][ T6462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8396'. [ 797.276361][ T6486] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8404'. [ 797.345565][ T6497] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 797.602042][T18621] net_ratelimit: 8 callbacks suppressed [ 797.602065][T18621] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 797.623201][T18621] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 797.882912][ T6526] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8409'. [ 798.236037][T18603] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 798.251239][T18603] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 798.974548][T18622] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 798.990867][T18622] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 799.052230][ T6580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8418'. [ 799.544929][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 799.559450][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 799.948664][ T6604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8424'. [ 799.984418][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8424'. [ 800.066048][ T6610] syzkaller1: entered promiscuous mode [ 800.092277][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8424'. [ 800.107350][ T6610] syzkaller1: entered allmulticast mode [ 800.118068][ T6616] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 800.135034][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 800.150328][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 800.263681][ T6610] bond9: option arp_all_targets: invalid value (16777219) [ 800.280258][ T6610] bond9 (unregistering): Released all slaves [ 800.313466][ T6632] Cannot find del_set index 3 as target [ 800.460963][ T6627] 8021q: adding VLAN 0 to HW filter on device bond10 [ 800.482305][ T6627] bond10 (unregistering): Released all slaves [ 800.573991][ T6641] tipc: Enabled bearer , priority 0 [ 800.603345][ T6647] tipc: Enabled bearer , priority 0 [ 800.613416][ T6647] syzkaller0: entered promiscuous mode [ 800.657677][ T6647] syzkaller0: entered allmulticast mode [ 800.684798][ T6626] tipc: Disabling bearer [ 800.729936][ T6650] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 800.800167][ T6657] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8434'. [ 801.023731][ T6646] tipc: Resetting bearer [ 801.049293][ T6646] tipc: Disabling bearer [ 801.090053][ T6667] dummy0: entered promiscuous mode [ 801.107268][ T6665] dummy0: left promiscuous mode [ 801.279121][ T6682] syzkaller0: entered promiscuous mode [ 801.305010][ T6682] syzkaller0: entered allmulticast mode [ 801.396060][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8441'. [ 801.449349][ T6691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8441'. [ 801.632004][ T6705] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 801.643637][ T6702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8443'. [ 802.805143][T18631] net_ratelimit: 9 callbacks suppressed [ 802.805166][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 802.826140][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 803.345133][T18606] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 803.360677][T18606] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 803.894281][T18603] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 803.909879][T18603] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 804.141774][ T6674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 804.152668][ T6713] netlink: 'syz.0.8447': attribute type 1 has an invalid length. [ 804.179039][ T6713] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8447'. [ 804.202408][ T6713] netlink: 'syz.0.8447': attribute type 1 has an invalid length. [ 804.220048][ T6713] netlink: 'syz.0.8447': attribute type 8 has an invalid length. [ 804.228723][ T6713] netlink: 582 bytes leftover after parsing attributes in process `syz.0.8447'. [ 804.238374][ T6713] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8447'. [ 804.380817][ T6736] lo speed is unknown, defaulting to 1000 [ 804.436633][T18622] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 804.452062][T18622] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 804.469361][ T6741] bridge0: entered allmulticast mode [ 804.489421][ T6741] bridge_slave_1: left allmulticast mode [ 804.503703][ T6741] bridge_slave_1: left promiscuous mode [ 804.522667][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.543300][ T6741] bridge_slave_0: left allmulticast mode [ 804.571515][ T6741] bridge_slave_0: left promiscuous mode [ 804.578253][ T6745] netlink: 'syz.4.8454': attribute type 1 has an invalid length. [ 804.604457][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.627119][ T6745] netlink: 'syz.4.8454': attribute type 3 has an invalid length. [ 804.697027][ T6745] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8454'. [ 805.047412][T18624] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 805.062374][T18624] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 805.242782][ T6768] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.8459'. [ 805.418753][ T6771] netlink: 'syz.4.8460': attribute type 13 has an invalid length. [ 805.462169][ T6771] netlink: 'syz.4.8460': attribute type 17 has an invalid length. [ 805.593739][ T6771] sit0: left promiscuous mode [ 805.639643][ T6771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.692194][ T6771] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.752058][ T6771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.859629][ T6771] veth1_vlan: left promiscuous mode [ 805.879435][ T6771] veth0_vlan: left promiscuous mode [ 805.887440][ T6771] veth0_vlan: entered promiscuous mode [ 805.938560][ T6771] veth1_vlan: entered promiscuous mode [ 806.010271][ T6771] veth1_macvtap: left promiscuous mode [ 806.075556][ T6771] veth0_macvtap: left promiscuous mode [ 806.082682][ T6771] veth0_macvtap: entered promiscuous mode [ 806.156794][ T6771] veth1_macvtap: entered promiscuous mode [ 806.368858][T18614] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.385634][T18614] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.400359][T18614] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.416837][T18614] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.588555][ T6791] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8464'. [ 807.601667][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8464'. [ 807.820988][ T6799] net_ratelimit: 12 callbacks suppressed [ 807.821017][ T6799] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 807.886078][ T6799] team0: Device xfrm0 is of different type [ 808.003186][ T6764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 808.012882][ T6778] netlink: 'syz.2.8462': attribute type 10 has an invalid length. [ 808.023926][ T6778] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8462'. [ 808.192360][ T6803] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8467'. [ 808.228008][ T6808] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8467'. [ 808.255284][T18614] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 808.271639][T18614] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 808.616867][ T6826] netlink: 'syz.4.8476': attribute type 10 has an invalid length. [ 808.642577][ T6826] syz_tun: entered promiscuous mode [ 808.688885][ T6826] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 808.727961][ T1330] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 808.756997][ T6837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8477'. [ 808.882082][T18614] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 808.897620][T18614] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 808.993664][ T6844] xfrm1: entered allmulticast mode [ 809.399919][ T6864] netlink: 'syz.4.8488': attribute type 8 has an invalid length. [ 809.434701][T18614] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 809.451206][T18614] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 809.530988][ T6870] netlink: 'syz.2.8489': attribute type 30 has an invalid length. [ 809.585767][ T6871] netlink: 'syz.2.8489': attribute type 1 has an invalid length. [ 809.660243][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8491'. [ 809.681384][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8491'. [ 809.693211][ T6877] netlink: 188 bytes leftover after parsing attributes in process `syz.4.8491'. [ 809.709001][ T6877] netlink: 'syz.4.8491': attribute type 61 has an invalid length. [ 809.734441][ T6881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8492'. [ 809.759500][ T6877] netlink: 'syz.4.8491': attribute type 195 has an invalid length. [ 809.772779][ T6877] netlink: 'syz.4.8491': attribute type 62 has an invalid length. [ 809.866820][ T6883] lo speed is unknown, defaulting to 1000 [ 809.995213][ T6889] veth1_to_bond: entered promiscuous mode [ 810.015335][ T6889] veth1_to_bond: entered allmulticast mode [ 810.035915][T18614] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 810.051298][T18614] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 810.115038][ T6889] veth1_to_bond (unregistering): left promiscuous mode [ 810.143940][ T6889] veth1_to_bond (unregistering): left allmulticast mode [ 810.347398][ T6903] lo speed is unknown, defaulting to 1000 [ 810.936689][ T6927] netlink: 'syz.0.8505': attribute type 1 has an invalid length. [ 811.014413][ T6927] 8021q: adding VLAN 0 to HW filter on device bond10 [ 811.145474][ T6927] bond10 (unregistering): Released all slaves [ 811.552196][ T6941] tipc: Resetting bearer [ 812.072572][ T6969] netlink: 'syz.0.8516': attribute type 11 has an invalid length. [ 812.077700][ T6972] tipc: Enabled bearer , priority 0 [ 812.252995][ T6982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 812.260354][ T6982] IPv6: NLM_F_CREATE should be set when creating new route [ 812.267666][ T6982] IPv6: NLM_F_CREATE should be set when creating new route [ 812.729469][ T7005] __nla_validate_parse: 16 callbacks suppressed [ 812.729491][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8527'. [ 812.749994][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8527'. [ 812.761210][ T7005] smc: net device lo applied user defined pnetid SYZ2 [ 812.768495][ T7002] x_tables: duplicate underflow at hook 1 [ 812.769225][ T7005] smc: net device lo erased user defined pnetid SYZ2 [ 812.827750][ T7008] xt_nfacct: accounting object `\$9ZM#E|^c\F9YⳈ' does not exist [ 813.102723][ T7024] tipc: Enabled bearer , priority 0 [ 813.112616][ T7024] syzkaller0: entered promiscuous mode [ 813.120596][ T7024] syzkaller0: entered allmulticast mode [ 813.146811][ T7024] tipc: Resetting bearer [ 813.167305][ T7023] tipc: Resetting bearer [ 813.176328][T18631] net_ratelimit: 11 callbacks suppressed [ 813.176347][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 813.197440][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 813.241310][ T7023] tipc: Disabling bearer [ 813.345142][ T7038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 813.355806][ T7033] netlink: 'syz.0.8538': attribute type 13 has an invalid length. [ 813.366574][ T7038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8539'. [ 813.381431][ T7039] netlink: 200 bytes leftover after parsing attributes in process `syz.3.8537'. [ 813.744604][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 813.759897][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 814.149710][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8552'. [ 814.302826][T18621] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 814.318398][T18621] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 814.440519][ T30] audit: type=1804 audit(1782383473.800:25): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8555" name="/newroot/465/memory.events" dev="tmpfs" ino=2405 res=1 errno=0 [ 814.466224][ T7097] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8558'. [ 814.519199][ T30] audit: type=1800 audit(1782383473.840:26): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8555" name="memory.events" dev="tmpfs" ino=2405 res=0 errno=0 [ 814.640869][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8560'. [ 814.704632][ T7104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8560'. [ 814.714899][ T7101] syzkaller1: entered promiscuous mode [ 814.714926][ T7101] syzkaller1: entered allmulticast mode [ 814.787446][ T7117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.864616][ T7121] macsec0: entered promiscuous mode [ 814.871325][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8563'. [ 814.888085][ T7121] macsec0 (unregistering): left promiscuous mode [ 814.904827][T18624] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 814.921793][T18624] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 814.999474][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8566'. [ 816.056837][ T7182] syzkaller0: entered promiscuous mode [ 816.073284][ T7182] syzkaller0: entered allmulticast mode [ 816.473308][ T7200] syzkaller0: entered promiscuous mode [ 816.504145][ T7200] syzkaller0: entered allmulticast mode [ 816.668912][ T7216] bond9: entered allmulticast mode [ 817.573796][ T7276] mac80211_hwsim hwsim87 syzkaller0: Caught tx_queue_len zero misconfig [ 817.585748][ T7276] mac80211_hwsim hwsim87 syzkaller0: entered promiscuous mode [ 817.593323][ T7276] mac80211_hwsim hwsim87 syzkaller0: entered allmulticast mode [ 817.929115][ T7298] syzkaller1: entered promiscuous mode [ 817.935650][ T7298] syzkaller1: entered allmulticast mode [ 818.565378][T18631] net_ratelimit: 13 callbacks suppressed [ 818.565414][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 818.587992][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 818.748119][ T7328] syzkaller0: entered promiscuous mode [ 818.753658][ T7328] syzkaller0: entered allmulticast mode [ 818.871724][ T7330] netlink: 'syz.4.8624': attribute type 1 has an invalid length. [ 819.115187][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 819.129647][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 819.654722][ T1182] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 819.670314][ T1182] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 819.925008][T26349] Bluetooth: hci1: command 0x0406 tx timeout [ 820.204782][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 820.220543][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 820.744839][ T1182] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 820.760380][ T1182] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 820.842006][ T7293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 820.857406][ T7315] debugfs: '1^!Y [ 820.857406][ T7315] 3UH5rBn\' already exists in 'ieee80211' [ 821.166020][ T7352] __nla_validate_parse: 105 callbacks suppressed [ 821.166044][ T7352] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8631'. [ 821.276789][ T7358] bridge0: port 1(batadv2) entered blocking state [ 821.288924][ T7358] bridge0: port 1(batadv2) entered disabled state [ 821.297180][ T7358] batadv2: entered allmulticast mode [ 821.303791][ T7358] batadv2: entered promiscuous mode [ 821.433054][ T7358] IPVS: Scheduler module ip_vs_ not found [ 821.561594][ T7369] xfrm0 speed is unknown, defaulting to 1000 [ 821.593692][ T7369] xfrm0 speed is unknown, defaulting to 1000 [ 821.610006][ T7369] xfrm0 speed is unknown, defaulting to 1000 [ 821.617037][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8638'. [ 821.633563][ T7369] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 821.655216][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8638'. [ 821.676807][ T7376] netlink: 'syz.3.8638': attribute type 11 has an invalid length. [ 821.712773][ T7369] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 821.749922][ T7545] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.753256][ T7369] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 821.777779][T18631] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 821.787695][T18631] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 821.813022][ T7545] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.837287][ T7385] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 821.872766][ T7385] syzkaller1: linktype set to 1 [ 821.894986][ T7545] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.911248][ T7545] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.926402][ T7369] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 821.961495][ T7393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8642'. [ 822.039914][ T7369] xfrm0 speed is unknown, defaulting to 1000 [ 822.086702][ T7369] xfrm0 speed is unknown, defaulting to 1000 [ 822.105939][ T7369] xfrm0 speed is unknown, defaulting to 1000 [ 822.128088][ T7369] xfrm0 speed is unknown, defaulting to 1000 [ 822.152986][ T7369] xfrm0 speed is unknown, defaulting to 1000 [ 822.181242][ T7369] xfrm0 speed is unknown, defaulting to 1000 [ 822.199377][ T7404] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8645'. [ 822.212120][ T7369] xfrm0 speed is unknown, defaulting to 1000 [ 822.220559][ T7369] xfrm0 speed is unknown, defaulting to 1000 [ 822.228668][ T7369] xfrm0 speed is unknown, defaulting to 1000 [ 822.236256][ T7369] xfrm0 speed is unknown, defaulting to 1000 [ 822.792969][ T7414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8647'. [ 823.187735][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8650'. [ 823.199609][ T7427] tipc: Enabled bearer , priority 0 [ 823.210972][ T7427] tipc: Resetting bearer [ 823.221650][ T7426] netlink: 'syz.1.8651': attribute type 1 has an invalid length. [ 823.339296][ T7431] netlink: 'syz.0.8653': attribute type 24 has an invalid length. [ 823.403904][ T7433] netlink: 'syz.2.8654': attribute type 1 has an invalid length. [ 823.444496][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 823.497071][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8654'. [ 823.508610][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8654'. [ 823.558021][ T7433] bond11: entered promiscuous mode [ 823.563694][ T7433] 8021q: adding VLAN 0 to HW filter on device bond11 [ 823.678192][ T7454] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8658'. [ 823.725513][ T7448] bond11: (slave bridge7): making interface the new active one [ 823.747572][ T7448] bridge7: entered promiscuous mode [ 823.772827][ T7448] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 823.798676][ T7459] netlink: 'syz.0.8660': attribute type 1 has an invalid length. [ 823.822182][ T7433] tipc: Enabling of bearer rejected, already enabled [ 823.883903][ T7454] bond6: invalid ARP target 0.0.0.0 specified for addition [ 823.900563][ T7454] bond6: option arp_ip_target: invalid value (0) [ 823.910243][T18631] net_ratelimit: 11 callbacks suppressed [ 823.910263][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 823.931599][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 823.975757][ T7454] bond6 (unregistering): Released all slaves [ 824.041173][ T7459] 8021q: adding VLAN 0 to HW filter on device bond10 [ 824.082811][ T7468] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 824.116452][ T4956] block nbd3: Possible stuck request ffff88809fb41f80: control (read@0,1024B). Runtime 210 seconds [ 824.143217][ T7468] bond10: (slave batadv3): making interface the new active one [ 824.171068][ T7468] bond10: (slave batadv3): Enslaving as an active interface with an up link [ 824.220801][ T7478] netlink: 'syz.3.8663': attribute type 2 has an invalid length. [ 824.240320][ T7478] tipc: Started in network mode [ 824.246616][ T7478] tipc: Node identity 340008, cluster identity 4711 [ 824.253789][ T7478] tipc: Node number set to 3407880 [ 824.474869][T16737] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 824.491163][T16737] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 825.014656][ T7550] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 825.030971][ T7550] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 825.150968][ T7532] unsupported nlmsg_type 40 [ 825.339776][ T7544] netlink: 'syz.0.8680': attribute type 13 has an invalid length. [ 825.343344][ T7539] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 825.594212][ T1089] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 825.609946][ T1089] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 825.730123][ T7574] rose0: renamed from vlan0 (while UP) [ 825.793911][ T7578] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 825.862070][ T7581] netlink: 'syz.1.8687': attribute type 1 has an invalid length. [ 825.883016][ T7581] netlink: 'syz.1.8687': attribute type 7 has an invalid length. [ 825.892219][ T7581] netlink: 'syz.1.8687': attribute type 8 has an invalid length. [ 826.121115][ T7589] syzkaller0: entered promiscuous mode [ 826.127422][ T7589] syzkaller0: entered allmulticast mode [ 826.134751][ T1182] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 826.150112][ T1182] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 826.170657][ T7594] bridge_slave_0: default FDB implementation only supports local addresses [ 826.615533][ T7618] : renamed from bond_slave_0 (while UP) [ 826.671043][ T7618] bridge_slave_1: Caught tx_queue_len zero misconfig [ 826.815155][ T7627] __nla_validate_parse: 7 callbacks suppressed [ 826.815184][ T7627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8700'. [ 826.947351][ T7627] : entered promiscuous mode [ 826.959540][ T7627] : entered allmulticast mode [ 826.992356][ T7631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8701'. [ 827.343435][ T7648] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8703'. [ 827.417144][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8703'. [ 827.510697][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8703'. [ 827.579308][ T7658] syzkaller0: entered promiscuous mode [ 827.591523][ T7658] tipc: Resetting bearer [ 827.827906][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8709'. [ 828.027365][ T7671] 8021q: adding VLAN 0 to HW filter on device bond12 [ 828.080493][ T7678] bond12: (slave veth17): Enslaving as an active interface with an up link [ 828.153273][ T7678] netlink: 200 bytes leftover after parsing attributes in process `syz.2.8709'. [ 828.237185][ T7678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8709'. [ 828.334452][ T7709] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8714'. [ 828.399143][ T7709] netlink: 'syz.3.8714': attribute type 4 has an invalid length. [ 828.510174][ T7709] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8714'. [ 828.753027][ T7720] syzkaller0: entered promiscuous mode [ 828.766837][ T7720] syzkaller0: entered allmulticast mode [ 828.906033][ T7728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.931658][ T7727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 829.254895][T18631] net_ratelimit: 10 callbacks suppressed [ 829.254916][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 829.276379][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 829.398612][ T7741] netlink: zone id is out of range [ 829.426562][ T7741] netlink: zone id is out of range [ 829.576931][ T7741] netlink: set zone limit has 4 unknown bytes [ 829.818332][ T7754] hsr_slave_1 (unregistering): left promiscuous mode [ 829.895084][ T7537] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 829.909901][ T7537] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 830.131296][ T7771] netlink: 'syz.0.8729': attribute type 1 has an invalid length. [ 830.242873][ T7771] 8021q: adding VLAN 0 to HW filter on device bond11 [ 830.391029][ T7787] syzkaller0: entered promiscuous mode [ 830.420241][ T7787] syzkaller0: entered allmulticast mode [ 830.514630][ T1089] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 830.529679][ T1089] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 830.718631][ T7795] FAULT_INJECTION: forcing a failure. [ 830.718631][ T7795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.763504][ T7795] CPU: 0 UID: 0 PID: 7795 Comm: syz.0.8734 Not tainted syzkaller #0 PREEMPT(full) [ 830.763535][ T7795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 830.763549][ T7795] Call Trace: [ 830.763557][ T7795] [ 830.763567][ T7795] dump_stack_lvl+0xe8/0x150 [ 830.763600][ T7795] should_fail_ex+0x40c/0x560 [ 830.763628][ T7795] _copy_from_iter+0x1d3/0x1660 [ 830.763656][ T7795] ? rcu_is_watching+0x15/0xb0 [ 830.763684][ T7795] ? __pfx__copy_from_iter+0x10/0x10 [ 830.763707][ T7795] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 830.763750][ T7795] ? netlink_sendmsg+0x650/0xb40 [ 830.763867][ T7795] ? skb_put+0x112/0x210 [ 830.763931][ T7795] netlink_sendmsg+0x6c0/0xb40 [ 830.763970][ T7795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.764004][ T7795] ? aa_sock_msg_perm+0xf1/0x1b0 [ 830.764026][ T7795] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 830.764053][ T7795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.764086][ T7795] ____sys_sendmsg+0x9b9/0xa20 [ 830.764121][ T7795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 830.764153][ T7795] ? lock_release+0x4b/0x3c0 [ 830.764186][ T7795] ? import_iovec+0x73/0xa0 [ 830.764215][ T7795] ___sys_sendmsg+0x2a5/0x360 [ 830.764245][ T7795] ? rcu_is_watching+0x15/0xb0 [ 830.764265][ T7795] ? get_pid_task+0x20/0x1f0 [ 830.764287][ T7795] ? __pfx____sys_sendmsg+0x10/0x10 [ 830.764321][ T7795] ? rcu_is_watching+0x15/0xb0 [ 830.764357][ T7795] ? __fget_files+0x2a/0x420 [ 830.764381][ T7795] ? __fget_files+0x3a2/0x420 [ 830.764410][ T7795] __x64_sys_sendmsg+0x1b1/0x290 [ 830.764442][ T7795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 830.764481][ T7795] ? rcu_is_watching+0x15/0xb0 [ 830.764503][ T7795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.764526][ T7795] do_syscall_64+0x174/0x580 [ 830.764557][ T7795] ? trace_irq_disable+0x3b/0x140 [ 830.764586][ T7795] ? clear_bhb_loop+0x40/0x90 [ 830.764610][ T7795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.764631][ T7795] RIP: 0033:0x7f1e9bf9ce59 [ 830.764651][ T7795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.764669][ T7795] RSP: 002b:00007f1e9ced2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.764693][ T7795] RAX: ffffffffffffffda RBX: 00007f1e9c216090 RCX: 00007f1e9bf9ce59 [ 830.764717][ T7795] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 830.764731][ T7795] RBP: 00007f1e9ced2090 R08: 0000000000000000 R09: 0000000000000000 [ 830.764745][ T7795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.764758][ T7795] R13: 00007f1e9c216128 R14: 00007f1e9c216090 R15: 00007ffcc5d51ca8 [ 830.764784][ T7795] [ 831.074318][ T1089] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 831.185183][ T7797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.213649][ T7797] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.221469][ T7797] tipc: Resetting bearer [ 831.227980][ T7797] tipc: Resetting bearer [ 831.233658][ T7797] dummy0: left promiscuous mode [ 831.243173][ T7797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.945224][ T7807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 831.995846][ T7797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 832.007120][ T7797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 832.163835][ T11] xfrm0 speed is unknown, defaulting to 1000 [ 832.179029][ T11] syz0: Port: 1 Link ACTIVE [ 832.278014][ T7837] __nla_validate_parse: 4 callbacks suppressed [ 832.278050][ T7837] netlink: 34 bytes leftover after parsing attributes in process `syz.4.8743'. [ 834.676870][T18631] net_ratelimit: 14 callbacks suppressed [ 834.676912][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 834.698967][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 834.939456][ T7850] syzkaller0: entered promiscuous mode [ 834.953248][ T7850] syzkaller0: entered allmulticast mode [ 835.053142][ T7876] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8747'. [ 835.184342][ T7887] FAULT_INJECTION: forcing a failure. [ 835.184342][ T7887] name failslab, interval 1, probability 0, space 0, times 0 [ 835.198659][ T7887] CPU: 0 UID: 0 PID: 7887 Comm: syz.3.8749 Not tainted syzkaller #0 PREEMPT(full) [ 835.198689][ T7887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 835.198702][ T7887] Call Trace: [ 835.198710][ T7887] [ 835.198720][ T7887] dump_stack_lvl+0xe8/0x150 [ 835.198749][ T7887] should_fail_ex+0x40c/0x560 [ 835.198775][ T7887] should_failslab+0xa8/0x100 [ 835.198823][ T7887] __kmalloc_noprof+0xe8/0x750 [ 835.198851][ T7887] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 835.198882][ T7887] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 835.198913][ T7887] genl_family_rcv_msg_doit+0xda/0x340 [ 835.198942][ T7887] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 835.198972][ T7887] ? apparmor_capable+0x126/0x170 [ 835.198998][ T7887] ? bpf_lsm_capable+0x9/0x20 [ 835.199018][ T7887] ? security_capable+0x7e/0x2c0 [ 835.199173][ T7887] genl_rcv_msg+0x614/0x7a0 [ 835.199201][ T7887] ? __pfx_genl_rcv_msg+0x10/0x10 [ 835.199224][ T7887] ? ref_tracker_free+0x689/0x830 [ 835.199248][ T7887] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 835.199317][ T7887] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 835.199378][ T7887] ? __pfx_nl80211_post_doit+0x10/0x10 [ 835.199400][ T7887] ? __pfx_ref_tracker_free+0x10/0x10 [ 835.199430][ T7887] netlink_rcv_skb+0x226/0x4a0 [ 835.199461][ T7887] ? __pfx_genl_rcv_msg+0x10/0x10 [ 835.199486][ T7887] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 835.199524][ T7887] ? down_read+0x2be/0x330 [ 835.199606][ T7887] genl_rcv+0x28/0x40 [ 835.199628][ T7887] netlink_unicast+0x7bb/0x940 [ 835.199662][ T7887] netlink_sendmsg+0x813/0xb40 [ 835.199699][ T7887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.199732][ T7887] ? aa_sock_msg_perm+0xf1/0x1b0 [ 835.199753][ T7887] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 835.199779][ T7887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.199819][ T7887] ____sys_sendmsg+0x9b9/0xa20 [ 835.199855][ T7887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 835.199886][ T7887] ? lock_release+0x4b/0x3c0 [ 835.199919][ T7887] ? import_iovec+0x73/0xa0 [ 835.199948][ T7887] ___sys_sendmsg+0x2a5/0x360 [ 835.199978][ T7887] ? rcu_is_watching+0x15/0xb0 [ 835.199998][ T7887] ? get_pid_task+0x20/0x1f0 [ 835.200019][ T7887] ? __pfx____sys_sendmsg+0x10/0x10 [ 835.200052][ T7887] ? rcu_is_watching+0x15/0xb0 [ 835.200089][ T7887] ? __fget_files+0x2a/0x420 [ 835.200112][ T7887] ? __fget_files+0x3a2/0x420 [ 835.200141][ T7887] __x64_sys_sendmsg+0x1b1/0x290 [ 835.200172][ T7887] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 835.200211][ T7887] ? rcu_is_watching+0x15/0xb0 [ 835.200233][ T7887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.200255][ T7887] do_syscall_64+0x174/0x580 [ 835.200284][ T7887] ? clear_bhb_loop+0x40/0x90 [ 835.200308][ T7887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.200329][ T7887] RIP: 0033:0x7f589c79ce59 [ 835.200349][ T7887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.200368][ T7887] RSP: 002b:00007f589d672028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.200391][ T7887] RAX: ffffffffffffffda RBX: 00007f589ca16090 RCX: 00007f589c79ce59 [ 835.200409][ T7887] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 835.200423][ T7887] RBP: 00007f589d672090 R08: 0000000000000000 R09: 0000000000000000 [ 835.200437][ T7887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.200450][ T7887] R13: 00007f589ca16128 R14: 00007f589ca16090 R15: 00007ffe941da5c8 [ 835.200476][ T7887] [ 835.267787][ T1089] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 835.565870][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8750'. [ 835.573411][ T7889] xt_hashlimit: size too large, truncated to 1048576 [ 835.584967][ T1089] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 835.682166][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8750'. [ 835.946585][ T7906] xt_ipcomp: unknown flags 1D [ 836.071231][ T7906] syzkaller0: entered promiscuous mode [ 836.112684][ T7906] syzkaller0: entered allmulticast mode [ 836.138999][ T1182] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 836.153449][ T1182] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 836.382709][ T7921] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8759'. [ 836.402383][T26349] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 836.420963][T26349] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 836.429613][T26349] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 836.448832][ T7926] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8759'. [ 836.458122][T26349] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 836.471249][T26349] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 836.520436][ T7914] syzkaller0: entered promiscuous mode [ 836.526923][ T7914] syzkaller0: entered allmulticast mode [ 836.689435][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8761'. [ 836.784667][ T7537] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 836.799605][ T7537] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 836.866575][ T7946] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8764'. [ 836.977311][ T7949] batadv_slave_0: entered promiscuous mode [ 837.006082][ T7948] batadv_slave_0: left promiscuous mode [ 837.217505][ T7963] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8768'. [ 837.228391][ T7964] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8769'. [ 837.252723][ T7963] ip6gre1: entered promiscuous mode [ 837.267571][ T7963] ip6gre1: entered allmulticast mode [ 837.355186][ T7537] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 837.370294][ T7537] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 837.633415][ T7919] lo speed is unknown, defaulting to 1000 [ 837.710320][ T7979] xt_NFQUEUE: number of total queues is 0 [ 837.763436][ T7979] bond13: option arp_all_targets: invalid value (3) [ 837.777381][ T7979] bond13 (unregistering): Released all slaves [ 837.865828][ T7919] xfrm0 speed is unknown, defaulting to 1000 [ 838.229040][ T7919] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.236699][ T7919] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.244941][ T7919] bridge_slave_0: entered allmulticast mode [ 838.252158][ T7919] bridge_slave_0: entered promiscuous mode [ 838.260299][ T7919] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.268416][ T7919] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.278328][ T7919] bridge_slave_1: entered allmulticast mode [ 838.286164][ T7919] bridge_slave_1: entered promiscuous mode [ 838.312916][ T7919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.326271][ T7919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.355793][ T7919] team0: Port device team_slave_0 added [ 838.363682][ T7919] team0: Port device team_slave_1 added [ 838.388230][ T7919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.395279][ T7919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.423226][ T7919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.437186][ T7919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.445765][ T7919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.472786][ T7919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.519985][ T7919] hsr_slave_0: entered promiscuous mode [ 838.526962][ T7919] hsr_slave_1: entered promiscuous mode [ 838.564947][T26349] Bluetooth: hci2: command tx timeout [ 838.629302][ T7919] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.679699][ T7919] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.732570][ T7919] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.788675][ T7919] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.444255][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 840.024758][T16737] net_ratelimit: 8 callbacks suppressed [ 840.024779][T16737] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 840.045706][T16737] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 840.566497][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 840.581052][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 840.595341][ T7973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 840.615424][ T7919] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 840.646078][T26349] Bluetooth: hci2: command tx timeout [ 840.666654][ T7919] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 840.675983][ T7919] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 840.707683][ T7919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 840.729780][ T7919] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 840.766206][ T7919] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 840.799345][ T7919] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 840.837866][ T7919] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 840.862773][ T8021] netlink: 136 bytes leftover after parsing attributes in process `syz.1.8783'. [ 840.873842][ T8021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8783'. [ 840.901508][ T8021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8783'. [ 840.942995][ T1089] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.980901][ T1089] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.006047][ T1089] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.025938][ T1089] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.115377][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 841.129820][T18631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 841.176282][ T8013] lo speed is unknown, defaulting to 1000 [ 841.176300][ T8037] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 841.176804][ T8037] pim6reg0: linktype set to 805 [ 841.230128][ T8037] netlink: 'syz.4.8784': attribute type 11 has an invalid length. [ 841.327954][ T7919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.384656][ T7919] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.419957][T16737] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.427167][T16737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.466605][ T8013] xfrm0 speed is unknown, defaulting to 1000 [ 841.501442][T16737] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.508670][T16737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.537477][ T8042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 841.553899][ T8042] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8786'. [ 841.650948][ T8042] tipc: Resetting bearer [ 841.675916][ T8042] tipc: Resetting bearer [ 841.692656][T16737] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 841.708407][T16737] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 841.751732][ T7919] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 841.762972][ T7919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 842.050034][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8787'. [ 842.118620][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8787'. [ 842.153371][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8787'. [ 842.209321][ T8069] netlink: 196 bytes leftover after parsing attributes in process `syz.1.8787'. [ 842.279974][ T8064] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8790'. [ 842.296489][ T7545] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 842.730425][T26349] Bluetooth: hci2: command tx timeout [ 843.077853][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8792'. [ 843.430351][ T7919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.600637][ T7919] veth0_vlan: entered promiscuous mode [ 843.646892][ T7919] veth1_vlan: entered promiscuous mode [ 843.772620][ T7919] veth0_macvtap: entered promiscuous mode [ 843.858054][ T7919] veth1_macvtap: entered promiscuous mode [ 843.941785][ T8146] netlink: 'syz.1.8803': attribute type 10 has an invalid length. [ 843.965958][ T7919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.032259][ T7919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.072995][T16737] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.121655][ T1182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.153512][ T1182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.201794][ T1182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.804137][T26349] Bluetooth: hci2: command tx timeout [ 845.414578][ T7538] net_ratelimit: 11 callbacks suppressed [ 845.414601][ T7538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 845.435636][ T7538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 845.964641][ T7538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 845.979881][ T7538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 846.504258][ T7538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 846.519538][ T7538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 846.908433][ T8142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 846.959708][ T8180] __nla_validate_parse: 2 callbacks suppressed [ 846.959730][ T8180] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8811'. [ 847.000543][ T8180] IPv6: sit1: Disabled Multicast RS [ 847.022705][ T8180] sit1: entered allmulticast mode [ 847.049556][ T7537] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 847.065115][ T7537] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 847.088325][ T7550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.109212][ T7550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.222486][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8813'. [ 847.251454][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8813'. [ 847.268657][ T8187] netlink: 58 bytes leftover after parsing attributes in process `syz.3.8813'. [ 847.272452][T16737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.288361][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8814'. [ 847.298856][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8814'. [ 847.321045][T16737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.348361][ T8187] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8813'. [ 847.614355][ T7538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 847.629513][ T7538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 847.651241][ T8213] netlink: 'syz.2.8817': attribute type 1 has an invalid length. [ 847.823833][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8819'. [ 847.920983][ T8223] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 848.003226][ T8208] lo speed is unknown, defaulting to 1000 [ 848.067698][ T8229] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8822'. [ 848.113160][ T8233] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967209 > 32) [ 848.161419][ T8237] IPv6: NLM_F_REPLACE set, but no existing node found! [ 848.223601][ T8237] lo speed is unknown, defaulting to 1000 [ 848.264728][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8825'. [ 848.361731][ T8243] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 848.525607][ T8208] xfrm0 speed is unknown, defaulting to 1000 [ 848.999152][ T8237] xfrm0 speed is unknown, defaulting to 1000 [ 849.174850][ T8264] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 849.246369][ T8264] tipc: Enabling of bearer rejected, failed to enable media [ 849.297681][ T8267] netlink: 'syz.4.8833': attribute type 1 has an invalid length. [ 849.449923][ T8278] netlink: 'syz.2.8834': attribute type 4 has an invalid length. [ 849.522496][ T8288] netlink: 'syz.2.8834': attribute type 4 has an invalid length. [ 849.885359][ T8298] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 849.902663][ T8298] bond6 (unregistering): Released all slaves [ 850.043294][ T8301] ip6tnl3: entered allmulticast mode [ 850.102446][ T8307] syzkaller0: entered promiscuous mode [ 850.108079][ T8307] syzkaller0: entered allmulticast mode [ 850.144665][ T8272] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 850.152852][ T8272] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 850.171727][ T8307] sch_tbf: burst 88 is lower than device veth15 mtu (1514) ! [ 850.713013][ T8342] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 850.796117][T18614] net_ratelimit: 12 callbacks suppressed [ 850.796138][T18614] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 850.816991][T18614] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 850.863745][ T8352] hm3): entered promiscuous mode [ 851.026529][ T8357] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 851.043466][ T8357] bond9: (slave lo): Enslaving as an active interface with an up link [ 851.055145][ T8357] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 851.384620][T18614] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 851.399550][T18614] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 851.568879][ T8387] x_tables: duplicate underflow at hook 1 [ 851.732744][ T8397] lo speed is unknown, defaulting to 1000 [ 851.839800][ T8397] xfrm0 speed is unknown, defaulting to 1000 [ 851.926433][ T7570] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 851.942092][ T7570] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 852.464606][T18625] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 852.480366][T18625] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 853.004921][ T7570] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 853.958511][ T8360] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 854.151916][ T8419] __nla_validate_parse: 5 callbacks suppressed [ 854.151937][ T8419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8867'. [ 854.185012][ T4956] block nbd3: Possible stuck request ffff88809fb41f80: control (read@0,1024B). Runtime 240 seconds [ 854.216874][ T8423] syzkaller1: entered promiscuous mode [ 854.238714][ T8423] syzkaller1: entered allmulticast mode [ 854.396407][ T8427] team0: No ports can be present during mode change [ 854.498148][ T8431] netlink: 'syz.0.8870': attribute type 13 has an invalid length. [ 854.517643][ T8431] netlink: 'syz.0.8870': attribute type 17 has an invalid length. [ 854.549559][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8870'. [ 854.612800][ T8447] netlink: 'syz.4.8874': attribute type 1 has an invalid length. [ 855.049088][ T8447] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 855.197079][ T8468] syzkaller0: left promiscuous mode [ 855.217267][ T8468] syzkaller0: left allmulticast mode [ 855.223019][ T8468] tipc: Resetting bearer [ 855.282665][ T8472] syzkaller0: entered promiscuous mode [ 855.313416][ T8472] syzkaller0: entered allmulticast mode [ 855.757779][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8886'. [ 855.933689][ T8516] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.8890'. [ 856.075043][ T7570] net_ratelimit: 12 callbacks suppressed [ 856.075063][ T7570] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 856.097680][ T7570] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 856.654444][ T7550] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 856.670302][ T7550] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 857.194665][ T1089] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 857.209753][ T1089] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 857.744835][ T7550] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 857.759362][ T7550] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 858.284611][T18614] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 858.299517][T18614] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 858.628751][ T8514] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 859.088325][ T8558] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8896'. [ 859.141144][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8896'. [ 859.195685][ T8558] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8896'. [ 859.258301][ T8561] netlink: 'syz.0.8900': attribute type 1 has an invalid length. [ 859.428211][ T8570] netlink: 'syz.0.8900': attribute type 10 has an invalid length. [ 859.468346][ T8570] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8900'. [ 859.906557][ T8570] dummy0: entered promiscuous mode [ 859.915702][ T7869] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 860.360531][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8910'. [ 860.471962][ T8616] netlink: 'syz.4.8911': attribute type 4 has an invalid length. [ 860.509464][ T8611] syzkaller0: entered promiscuous mode [ 860.525937][ T8618] netlink: 'syz.4.8911': attribute type 4 has an invalid length. [ 860.529848][ T8611] syzkaller0: entered allmulticast mode [ 860.592291][ T8611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8909'. [ 860.610722][ T8611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8909'. [ 860.620997][ T8611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8909'. [ 860.633286][ T8616] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8911'. [ 860.726544][ T5745] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 861.355908][ T8672] net_ratelimit: 12 callbacks suppressed [ 861.355928][ T8672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 861.391194][ T7565] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 861.407027][ T7565] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 861.482846][ T8679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8925'. [ 861.651988][ T8694] syzkaller0: entered promiscuous mode [ 861.665037][ T8694] syzkaller0: entered allmulticast mode [ 861.677539][ T8694] tipc: Resetting bearer [ 861.688891][ T8694] netlink: 'syz.2.8927': attribute type 1 has an invalid length. [ 861.697163][ T8694] netlink: 'syz.2.8927': attribute type 2 has an invalid length. [ 861.783031][ T8696] tipc: Started in network mode [ 861.788256][ T8696] tipc: Node identity 6a79f7726d71, cluster identity 4711 [ 861.796299][ T8696] tipc: Enabled bearer , priority 0 [ 861.804938][ T8696] syzkaller0: entered promiscuous mode [ 861.810627][ T8696] syzkaller0: entered allmulticast mode [ 861.819481][ T8696] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 861.911047][ T8696] tipc: Resetting bearer [ 861.967831][ T8695] tipc: Resetting bearer [ 861.992414][ T8695] tipc: Disabling bearer [ 862.012222][ T1089] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 862.027076][ T1089] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 862.073530][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8930'. [ 862.118307][ T8702] pimreg: left allmulticast mode [ 862.230091][ T8714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 862.525934][ T8728] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 862.536200][ T8728] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 862.550658][ T8728] veth0_virt_wifi: entered allmulticast mode [ 862.566009][ T8728] veth0_virt_wifi: entered promiscuous mode [ 862.594241][ T7538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 862.609503][ T7538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 862.631782][ T8728] xt_hashlimit: size too large, truncated to 1048576 [ 862.762510][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8938'. [ 863.185194][T18625] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 863.199634][T18625] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 863.249229][ T8742] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 863.526944][ T8766] netlink: 'syz.1.8949': attribute type 11 has an invalid length. [ 863.665850][ T8767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.687365][ T8767] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.839267][ T8767] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 863.883018][ T8767] veth1_vlan: left promiscuous mode [ 863.892397][ T8788] netlink: 'syz.0.8956': attribute type 1 has an invalid length. [ 863.902062][ T8767] veth0_vlan: left promiscuous mode [ 863.908840][ T8767] veth0_vlan: entered promiscuous mode [ 863.917401][ T8767] veth1_vlan: entered promiscuous mode [ 863.931839][ T8767] veth1_macvtap: left promiscuous mode [ 863.942495][ T8767] veth0_macvtap: left promiscuous mode [ 863.953311][ T8767] veth0_macvtap: entered promiscuous mode [ 863.963194][ T8767] veth1_macvtap: entered promiscuous mode [ 864.008906][ T8767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 864.018493][ T8767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 864.057058][ T8767] 8021q: adding VLAN 0 to HW filter on device bond3 [ 864.192390][ T8788] bond1: entered promiscuous mode [ 864.206688][ T8788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 864.215920][ T1089] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.230712][ T8802] __nla_validate_parse: 3 callbacks suppressed [ 864.230733][ T8802] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8959'. [ 864.257874][ T1089] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.301682][ T8792] bond1: (slave bridge1): making interface the new active one [ 864.320461][ T8792] bridge1: entered promiscuous mode [ 864.329004][ T8792] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 864.358113][ T1089] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.381676][ T7538] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 864.401283][ T7538] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 864.410709][ T5723] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 864.436383][ T5723] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 864.498226][ T1089] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.545777][T18614] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 864.580703][T18614] bond2: (slave veth3): making interface the new active one [ 864.604506][ T5723] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 864.623185][T18614] bond2: active interface up! [ 864.826834][ T7565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 865.046443][ T5723] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 865.075956][ T8834] xt_CT: You must specify a L4 protocol and not use inversions on it [ 865.078706][ T8834] netlink: 'syz.2.8970': attribute type 21 has an invalid length. [ 865.284623][ T5745] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 865.296091][ T8841] lo speed is unknown, defaulting to 1000 [ 865.310566][ T8844] batadv_slave_1: entered promiscuous mode [ 865.420639][ T8844] batadv_slave_1: left promiscuous mode [ 865.537593][ T7545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.557133][ T7545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.609393][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8976'. [ 865.811586][ T8841] xfrm0 speed is unknown, defaulting to 1000 [ 865.830104][ T8855] bridge0: port 1(vlan6) entered blocking state [ 865.839124][ T8859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8976'. [ 865.858936][ T8855] bridge0: port 1(vlan6) entered disabled state [ 865.872931][ T8855] vlan6: entered allmulticast mode [ 865.889099][ T8855] vlan6: entered promiscuous mode [ 865.901174][ T8855] geneve0: entered promiscuous mode [ 865.916178][ T8855] vlan2: entered promiscuous mode [ 865.947154][ T7545] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 865.961462][ T7545] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 866.126074][ T5745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 866.208725][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8981'. [ 866.560900][ T8891] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 866.629203][ T8896] syzkaller0: entered promiscuous mode [ 866.648255][ T8896] syzkaller0: entered allmulticast mode [ 866.824759][ T8902] netlink: 'syz.2.8990': attribute type 29 has an invalid length. [ 866.860967][T18625] net_ratelimit: 14 callbacks suppressed [ 866.860990][T18625] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 866.881767][T18625] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 866.891576][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8990'. [ 867.019732][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8991'. [ 867.074631][ T8910] ------------[ cut here ]------------ [ 867.080158][ T8910] !sock_allow_reclassification(sk) [ 867.080190][ T8910] WARNING: drivers/block/nbd.c:1249 at nbd_add_socket+0xf35/0x12c0, CPU#0: syz.1.8991/8910 [ 867.096258][ T8910] Modules linked in: [ 867.100226][ T8910] CPU: 0 UID: 0 PID: 8910 Comm: syz.1.8991 Not tainted syzkaller #0 PREEMPT(full) [ 867.109775][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 867.120521][ T8910] RIP: 0010:nbd_add_socket+0xf35/0x12c0 [ 867.126456][ T8910] Code: f7 e8 6f b5 20 fc bf e0 01 00 00 49 03 3e 48 c7 c6 40 02 55 8c e8 2b a8 1b fb b8 f0 ff ff ff e9 b2 fd ff ff e8 ac 60 b5 fb 90 <0f> 0b 90 e9 16 f8 ff ff e8 5e 2e 97 05 44 89 e9 80 e1 07 fe c1 38 [ 867.147692][ T8910] RSP: 0018:ffffc90006a57160 EFLAGS: 00010283 [ 867.153837][ T8910] RAX: ffffffff86109574 RBX: 1ffff11015c0a039 RCX: 0000000000080000 [ 867.162109][ T8910] RDX: ffffc9001b0d6000 RSI: 0000000000001d9d RDI: 0000000000001d9e [ 867.170648][ T8910] RBP: ffffc90006a57250 R08: ffff88807ab8565f R09: 1ffff1100f570acb [ 867.179033][ T8910] R10: dffffc0000000000 R11: ffffed100f570acc R12: ffff8880ae050000 [ 867.187431][ T8910] R13: 1ffff92000d4ae38 R14: dffffc0000000000 R15: 0000000000000001 [ 867.195553][ T8910] FS: 00007f7ed64e16c0(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 867.205431][ T8910] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 867.212192][ T8910] CR2: 00007f7ed64c0d58 CR3: 00000000476ea000 CR4: 00000000003526f0 [ 867.220328][ T8910] Call Trace: [ 867.223643][ T8910] [ 867.227035][ T8910] ? __pfx_nbd_add_socket+0x10/0x10 [ 867.232311][ T8910] ? __nla_parse+0x40/0x60 [ 867.237131][ T8910] nbd_genl_connect+0x133d/0x1c10 [ 867.242206][ T8910] ? __pfx_nbd_genl_connect+0x10/0x10 [ 867.247965][ T8910] ? rcu_is_watching+0x15/0xb0 [ 867.252777][ T8910] ? trace_kmalloc+0x2a/0xf0 [ 867.257641][ T8910] ? __nla_parse+0x40/0x60 [ 867.262107][ T8910] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 867.269259][ T8910] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 867.275714][ T8910] genl_family_rcv_msg_doit+0x233/0x340 [ 867.281305][ T8910] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 867.287841][ T8910] ? __pfx_stack_trace_save+0x10/0x10 [ 867.293310][ T8910] genl_rcv_msg+0x614/0x7a0 [ 867.298216][ T8910] ? __pfx_genl_rcv_msg+0x10/0x10 [ 867.303300][ T8910] ? __pfx_nbd_genl_connect+0x10/0x10 [ 867.309043][ T8910] ? __netlink_lookup+0xc6/0x8b0 [ 867.314126][ T8910] ? rcu_is_watching+0x15/0xb0 [ 867.318953][ T8910] netlink_rcv_skb+0x226/0x4a0 [ 867.323767][ T8910] ? __pfx_genl_rcv_msg+0x10/0x10 [ 867.329503][ T8910] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 867.334923][ T8910] ? down_read+0x2be/0x330 [ 867.339393][ T8910] genl_rcv+0x28/0x40 [ 867.343416][ T8910] netlink_unicast+0x7bb/0x940 [ 867.348612][ T8910] netlink_sendmsg+0x813/0xb40 [ 867.353434][ T8910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.359085][ T8910] ? aa_sock_msg_perm+0xf1/0x1b0 [ 867.364633][ T8910] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 867.369967][ T8910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.375535][ T8910] ____sys_sendmsg+0x9b9/0xa20 [ 867.380384][ T8910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 867.386295][ T8910] ? lock_release+0x4b/0x3c0 [ 867.390948][ T8910] ? import_iovec+0x73/0xa0 [ 867.395592][ T8910] ___sys_sendmsg+0x2a5/0x360 [ 867.400418][ T8910] ? __pfx____sys_sendmsg+0x10/0x10 [ 867.406050][ T8910] ? futex_wake+0x51b/0x5f0 [ 867.410682][ T8910] ? __fget_files+0x2a/0x420 [ 867.415647][ T8910] ? __fget_files+0x3a2/0x420 [ 867.420462][ T8910] __x64_sys_sendmsg+0x1b1/0x290 [ 867.427973][ T8910] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 867.433680][ T8910] ? rcu_is_watching+0x15/0xb0 [ 867.438695][ T8910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.445733][ T8910] do_syscall_64+0x174/0x580 [ 867.450407][ T8910] ? trace_irq_disable+0x3b/0x140 [ 867.455716][ T8910] ? clear_bhb_loop+0x40/0x90 [ 867.460452][ T8910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.466869][ T8910] RIP: 0033:0x7f7ed559ce59 [ 867.471334][ T8910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.491836][ T8910] RSP: 002b:00007f7ed64e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.500449][ T8910] RAX: ffffffffffffffda RBX: 00007f7ed5816090 RCX: 00007f7ed559ce59 [ 867.508853][ T8910] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000006 [ 867.517275][ T8910] RBP: 00007f7ed5632e6f R08: 0000000000000000 R09: 0000000000000000 [ 867.526765][ T8910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.535079][ T8910] R13: 00007f7ed5816128 R14: 00007f7ed5816090 R15: 00007ffd5f440138 [ 867.543125][ T8910] [ 867.546853][ T8910] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 867.554179][ T8910] CPU: 0 UID: 0 PID: 8910 Comm: syz.1.8991 Not tainted syzkaller #0 PREEMPT(full) [ 867.563531][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 867.573625][ T8910] Call Trace: [ 867.576936][ T8910] [ 867.579898][ T8910] vpanic+0x56c/0xa60 [ 867.583959][ T8910] ? __pfx__printk+0x10/0x10 [ 867.588593][ T8910] ? __pfx_vpanic+0x10/0x10 [ 867.593172][ T8910] ? is_bpf_text_address+0x292/0x2b0 [ 867.598630][ T8910] ? is_bpf_text_address+0x26/0x2b0 [ 867.603879][ T8910] panic+0xc5/0xd0 [ 867.607641][ T8910] ? __pfx_panic+0x10/0x10 [ 867.612108][ T8910] __warn+0x315/0x4c0 [ 867.616130][ T8910] ? nbd_add_socket+0xf35/0x12c0 [ 867.621117][ T8910] ? nbd_add_socket+0xf35/0x12c0 [ 867.626087][ T8910] __report_bug+0x331/0x530 [ 867.630734][ T8910] ? nbd_add_socket+0xf35/0x12c0 [ 867.635714][ T8910] ? __pfx___report_bug+0x10/0x10 [ 867.640784][ T8910] ? rcu_is_watching+0x15/0xb0 [ 867.645590][ T8910] ? do_trace_netlink_extack+0x80/0x1d0 [ 867.651193][ T8910] ? __nla_validate_parse+0x2534/0x2d50 [ 867.656798][ T8910] ? __fget_files+0x2a/0x420 [ 867.661433][ T8910] ? nbd_add_socket+0xf35/0x12c0 [ 867.666410][ T8910] report_bug+0x16a/0x220 [ 867.670793][ T8910] ? nbd_add_socket+0xf35/0x12c0 [ 867.675763][ T8910] ? nbd_add_socket+0xf37/0x12c0 [ 867.680733][ T8910] handle_bug+0x9c/0x200 [ 867.685026][ T8910] exc_invalid_op+0x1a/0x50 [ 867.689584][ T8910] asm_exc_invalid_op+0x1a/0x20 [ 867.694471][ T8910] RIP: 0010:nbd_add_socket+0xf35/0x12c0 [ 867.700040][ T8910] Code: f7 e8 6f b5 20 fc bf e0 01 00 00 49 03 3e 48 c7 c6 40 02 55 8c e8 2b a8 1b fb b8 f0 ff ff ff e9 b2 fd ff ff e8 ac 60 b5 fb 90 <0f> 0b 90 e9 16 f8 ff ff e8 5e 2e 97 05 44 89 e9 80 e1 07 fe c1 38 [ 867.719677][ T8910] RSP: 0018:ffffc90006a57160 EFLAGS: 00010283 [ 867.725780][ T8910] RAX: ffffffff86109574 RBX: 1ffff11015c0a039 RCX: 0000000000080000 [ 867.733776][ T8910] RDX: ffffc9001b0d6000 RSI: 0000000000001d9d RDI: 0000000000001d9e [ 867.741775][ T8910] RBP: ffffc90006a57250 R08: ffff88807ab8565f R09: 1ffff1100f570acb [ 867.749862][ T8910] R10: dffffc0000000000 R11: ffffed100f570acc R12: ffff8880ae050000 [ 867.757879][ T8910] R13: 1ffff92000d4ae38 R14: dffffc0000000000 R15: 0000000000000001 [ 867.765883][ T8910] ? nbd_add_socket+0xf34/0x12c0 [ 867.770862][ T8910] ? __pfx_nbd_add_socket+0x10/0x10 [ 867.776090][ T8910] ? __nla_parse+0x40/0x60 [ 867.780644][ T8910] nbd_genl_connect+0x133d/0x1c10 [ 867.785703][ T8910] ? __pfx_nbd_genl_connect+0x10/0x10 [ 867.791117][ T8910] ? rcu_is_watching+0x15/0xb0 [ 867.795908][ T8910] ? trace_kmalloc+0x2a/0xf0 [ 867.800541][ T8910] ? __nla_parse+0x40/0x60 [ 867.804998][ T8910] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 867.811362][ T8910] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 867.817728][ T8910] genl_family_rcv_msg_doit+0x233/0x340 [ 867.823314][ T8910] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 867.829416][ T8910] ? __pfx_stack_trace_save+0x10/0x10 [ 867.834830][ T8910] genl_rcv_msg+0x614/0x7a0 [ 867.839366][ T8910] ? __pfx_genl_rcv_msg+0x10/0x10 [ 867.844418][ T8910] ? __pfx_nbd_genl_connect+0x10/0x10 [ 867.849829][ T8910] ? __netlink_lookup+0xc6/0x8b0 [ 867.854794][ T8910] ? rcu_is_watching+0x15/0xb0 [ 867.859597][ T8910] netlink_rcv_skb+0x226/0x4a0 [ 867.864402][ T8910] ? __pfx_genl_rcv_msg+0x10/0x10 [ 867.869639][ T8910] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 867.874970][ T8910] ? down_read+0x2be/0x330 [ 867.879429][ T8910] genl_rcv+0x28/0x40 [ 867.883449][ T8910] netlink_unicast+0x7bb/0x940 [ 867.888255][ T8910] netlink_sendmsg+0x813/0xb40 [ 867.893062][ T8910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.898389][ T8910] ? aa_sock_msg_perm+0xf1/0x1b0 [ 867.903354][ T8910] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 867.908695][ T8910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.914022][ T8910] ____sys_sendmsg+0x9b9/0xa20 [ 867.918834][ T8910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 867.924156][ T8910] ? lock_release+0x4b/0x3c0 [ 867.928786][ T8910] ? import_iovec+0x73/0xa0 [ 867.933427][ T8910] ___sys_sendmsg+0x2a5/0x360 [ 867.938143][ T8910] ? __pfx____sys_sendmsg+0x10/0x10 [ 867.943381][ T8910] ? futex_wake+0x51b/0x5f0 [ 867.947957][ T8910] ? __fget_files+0x2a/0x420 [ 867.952598][ T8910] ? __fget_files+0x3a2/0x420 [ 867.957307][ T8910] __x64_sys_sendmsg+0x1b1/0x290 [ 867.962283][ T8910] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 867.967779][ T8910] ? rcu_is_watching+0x15/0xb0 [ 867.972574][ T8910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.978663][ T8910] do_syscall_64+0x174/0x580 [ 867.983283][ T8910] ? trace_irq_disable+0x3b/0x140 [ 867.988370][ T8910] ? clear_bhb_loop+0x40/0x90 [ 867.993092][ T8910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.999021][ T8910] RIP: 0033:0x7f7ed559ce59 [ 868.003464][ T8910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.023098][ T8910] RSP: 002b:00007f7ed64e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 868.031542][ T8910] RAX: ffffffffffffffda RBX: 00007f7ed5816090 RCX: 00007f7ed559ce59 [ 868.039558][ T8910] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000006 [ 868.047650][ T8910] RBP: 00007f7ed5632e6f R08: 0000000000000000 R09: 0000000000000000 [ 868.055654][ T8910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.063647][ T8910] R13: 00007f7ed5816128 R14: 00007f7ed5816090 R15: 00007ffd5f440138 [ 868.071686][ T8910] [ 868.075362][ T8910] Kernel Offset: disabled [ 868.079703][ T8910] Rebooting in 86400 seconds..