last executing test programs: 9.367765743s ago: executing program 2 (id=3116): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) listen(r1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) bind$tipc(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$ENABLE_STATS(0x20, 0x0, 0x0) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 9.186521978s ago: executing program 2 (id=3118): r0 = socket$packet(0x11, 0x2, 0x300) (async) syz_emit_ethernet(0x19, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a800008100"], 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x4a, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x32, 0x0, 0x3}, 0x28) read(r0, &(0x7f0000000000)=""/149, 0xaa) (async) close(0x4) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) (async) listen(0xffffffffffffffff, 0x3) (async) syz_emit_ethernet(0x36, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x3d, 0x30, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x0, 0x150, 0xffffffff, 0x1f8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x72}, @local, @icmp_id=0x65, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @private=0xa010102, @rand_addr=0x64010101, @icmp_id=0x65, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x14, @multicast1, @loopback, @gre_key=0x40, @port=0x4e22}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff, 0xff, 'vxcan1\x00', 'ip6_vti0\x00', {0xff}, {}, 0x21, 0x5, 0x1}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @broadcast, @multicast2, @gre_key=0x8, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 8.963751918s ago: executing program 2 (id=3121): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x80000000, 0x6, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xa, 0xc}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0xc0956febbce12c1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, 0x0, 0x0) 8.849768602s ago: executing program 2 (id=3123): r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000300000000001400000045ad00280068000060069064ac1e0001ffffffff11f3305280f125e6e11a9314b296"], 0xfdef) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000300)={'veth1_to_hsr\x00', &(0x7f0000000600)=@ethtool_flash={0x33, 0x8, './file0\x00'}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000190001000068be665100000080"], 0x1c}}, 0x40000) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791fc7e5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452ab61ff383e224362b3b3bd137cd65f1a1f1bff375086b10e23512355e0e9f54ef13a9bafa2419e363cfccf36b9c7b4ba9717e26f1ad2f6b62272fbbe7136f49b9c4c9ac0c366645e798ce0abeb0ade561462d753c993e22b8989ad862ff505e11b64185a5f7e8e24dfa8d9884c52c3703b1ead6e7291157a0a15bc5cad5662fdaf75edf89310ad6083062ff70a4139192c737233ad698117dc7443d8c14542eea62c28077b38a0f45ee03af5666262da1124cb9d7", 0x18c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004004}, 0x44010) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x38}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@delchain={0x4d0, 0x64, 0xf31, 0xffffff7b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'syz_tun\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x47c, 0x2, [@TCA_BPF_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xafd, 0x0, 0x996, 0x6, 0x48, 0x68, 0x6, 0x60, 0x8, 0xd, 0x0, 0x9, 0xfff, 0x7, 0x0, 0xe, 0x2, 0xb0, 0x5, 0x24a, 0x6, 0x80, 0x3, 0xfffffe00, 0x1, 0x2c27, 0xe, 0x9, 0x9, 0xe7b, 0xfffffffc, 0xfff, 0x40, 0x2, 0x4, 0x2, 0xffffffff, 0x40, 0x1, 0x7ff, 0x6, 0x8ccf, 0x768b, 0x3, 0x9, 0x537, 0xd3c3, 0x5, 0x5, 0x9, 0x4, 0xa6c, 0x100, 0x0, 0x22d, 0xfffffff9, 0x3, 0xfffffffe, 0x1, 0x4, 0x9, 0x6, 0xa303, 0x10, 0x0, 0x6, 0x10, 0x84, 0x765b, 0x7, 0x100, 0x1, 0x48, 0x82ec, 0x7fcb, 0x40, 0x9, 0x1, 0x6, 0x4, 0x7, 0x6, 0x3c6, 0x0, 0xcf6d, 0x7b68bc3b, 0x9, 0x332, 0x8, 0x9a, 0x6, 0xdf, 0x1ff, 0x4, 0x5, 0x0, 0x10, 0xfffffffd, 0xfffffff2, 0xf3, 0xa102, 0x8000, 0x8, 0x4000, 0x8, 0x59, 0x5, 0x9b, 0x4, 0xb61, 0x2, 0x6, 0x9, 0x40, 0x4, 0x4, 0x2, 0x6, 0xb044, 0x1, 0x3, 0x1, 0x5, 0x10, 0x9, 0xcbf, 0x4, 0x8, 0x1, 0x10000, 0x1f, 0xe, 0x1, 0x4, 0x7, 0x7, 0x400, 0x3, 0x8001, 0x8, 0x9, 0x4, 0x4, 0x0, 0x0, 0x6, 0x5, 0x1, 0x6, 0x3, 0x1000, 0x6, 0x6, 0x189c, 0xc105, 0x3380, 0x2, 0xa, 0x8001, 0x4, 0x8, 0x8000, 0x1000, 0x0, 0x10, 0x9, 0x3, 0xff, 0xd4c0, 0x3, 0xfffffffc, 0x9, 0xf, 0xffff, 0x0, 0x200, 0x1, 0x1d, 0x6, 0x7, 0x101, 0x6, 0xfffffb1a, 0x27503d21, 0x6d42, 0x8, 0xfffffffc, 0x6, 0x5, 0x7, 0x4, 0x21540560, 0x2f, 0x7fff, 0x9b46, 0x80000001, 0x1, 0x3, 0x3, 0x5, 0x1e9, 0xfffffff7, 0xffffffba, 0x3, 0x8, 0x8, 0x0, 0xd1a, 0x10001, 0x67, 0xa, 0x2, 0x3, 0x7, 0x3ff, 0x0, 0x9, 0x400, 0xfff, 0x4, 0xf, 0x9, 0xb, 0xffff8001, 0x2, 0xb8d, 0x0, 0x101, 0x8, 0x5dab, 0x2, 0x9, 0x0, 0x2, 0x8, 0x200, 0x5, 0x8, 0xfffffff9, 0x10001, 0x80000001, 0x570c6794, 0xc107, 0x2, 0x2, 0x5, 0xfff, 0x58, 0xffffff66, 0x2, 0x401, 0x4, 0x3, 0x8, 0x3, 0x7]}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x6, 0x6, 0x1, 0x1}, {0xfffc, 0xd, 0x6, 0x1}, {0x200, 0x0, 0x2, 0x80}, {0x3, 0x2, 0x2, 0x2}, {0x7, 0x3, 0x5, 0x69}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x80, 0x7, 0xc, 0x3}, {0x3, 0x3, 0x81, 0x6}]}}, @TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffff07}]}]}}]}, 0x4d0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r8, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000880)={&(0x7f0000000380)="5ce5e1585b88232bb98b03998b0651b4a657a66469213f688aec1f2d7f982f1cdbeedaeea7c535bc561afb790c28184b753ac930acd592800e0a1fe3523fb106de795539c3b9c266e3de78ce84d3921c37b2f18b4d33ddf9d21736ee92e86954363101a61a4423f460a3c8a5551ba2f04a9d05f55dc9d5e7d8aad99584835f10c408d69b3739bc6839d481de8f7a16a24929ef61652f451a1cfb07a03f7293c742ac7c4fd6d1650ea34fecd85062243cbb8b919857164c3323b48781b15249917c15d3740bb162f07153956c4aac4538a107af90e8f0268cd9c1f83f47a7", &(0x7f0000000500)=""/179, &(0x7f00000007c0)="ca34cf95231a656da5307c63b6dbee3a52b28cd275af090230d77cfbc175da9153df7f4431da7b248f3f9f1034b132eef5548a2920bf5a8e6f32db5135ae26d0c393357709d938a11b72473d9014a0ed", &(0x7f0000000840)="ef6bb3ffd7104db99f126bae5185336946967a209d9a11f79ea4e9c326becf8c2655e09dc0cc072d23", 0x2}, 0x38) connect$netlink(r8, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$sock_timeval(r8, 0x1, 0x43, &(0x7f00000001c0)={0x77359400}, 0x10) write(r8, &(0x7f0000000000)='\"', 0x1) recvmmsg(r8, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 7.746561309s ago: executing program 2 (id=3133): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c1000000000", 0x53}], 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$tun(r3, &(0x7f0000000300)=ANY=[], 0x340a) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, 0x0, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r8, 0x25, 0x8, @val=@tcx={@void, @value=r7}}, 0x1c) 6.490617241s ago: executing program 2 (id=3141): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9a", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x36, 0x1}, 0x20) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x8800) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20) r8 = accept4(r4, 0x0, 0x0, 0x800) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) 5.843658294s ago: executing program 3 (id=3147): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@fallback, 0xffffffffffffffff, 0x1a, 0x20}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, r2, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) sendto(r0, &(0x7f0000000740)="120980a1", 0x57, 0x800, 0x0, 0x0) 5.251652539s ago: executing program 3 (id=3148): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900"], 0x7c}}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000001"], 0x190) 5.24120628s ago: executing program 4 (id=3149): unshare(0x22020600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) unshare(0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@cgroup, 0xffffffffffffffff, 0x22, 0x4}, 0x20) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x1) 5.011538413s ago: executing program 3 (id=3150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2000, @remote}}}, 0x108) close(0x3) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xfff2}, {0x0, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x818b}]}}]}, 0x38}}, 0x20040084) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r6 = socket(0x29, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000001c0)=[{{0x4, 0x1}, {0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1}}], 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) close(0x3) 4.381408805s ago: executing program 3 (id=3154): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f907864010100000000002480655800000000000000001000"], 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040), 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x87) r2 = socket$inet(0x2, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x7, 0xe, 0x0, 0x0}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000000080)) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r2, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) 4.054235188s ago: executing program 3 (id=3157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000004000100000a006080"], 0xb8}}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0xff24, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4040095}, 0x40010) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r9, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f000000a300)=[{&(0x7f0000007f40)="45442384fba766eb9c06221de78884f02c22fc234826d0725ac1959a92e1016664e0d5955a533e3caf2499a7acf6c62a7c43c30d0590d9e162db6fd8dac5f38add0450e492b1d32e66b51287a338bd7e8f611b6a196d106f08a648ae8316b8a5a07229028b7cbd2b75de1d1f7c57f5984ea9fe80f8c166fd17f8d555069676cda5200edfaed89d2c1bcb0d236f53d95c7b221f16f4e044a2ec0ff49743b212ea30340c725a9ec5a1e51d7c733da6e7a8faa37c066bd065aebc2e121da88267df85b4568ee6be3d22b48cdb5093ecd2814e06817cfa0d2d264632c3e66239a27b153be96b06", 0xe5}, {&(0x7f0000008100)="3df0842ddcdb35a48bf102d77741d0f170ee6c06c37a313fdf8aab3507434beddc8e4e6af5dfff1b0669b8843d92d03759013463050253884e2212a8a874f340044620c0c617f27f2506996c3e3ecfe53564782366a3c6352b51666d4ec0726c9fc8a520466b152abf72556ba8b5418372da2d7d0fe0e4c988bca751e7b0777d77229990fd75173d3e988274e7ac1dbfe9aae6226a0917c3c45fc33fedfbf0032ef1e37a15951a105f92b7843539fc4ba3f754840b8cc210bd83a0fd7e1576e3e81dedbbba7628256a16", 0xca}, {&(0x7f0000009100)="c94ef5758ccf473828d9bb258578faa9c102", 0x12}, {&(0x7f0000009180)="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", 0x237}], 0x4}}], 0x1, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) 3.588112874s ago: executing program 4 (id=3161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x0, 0x700001b, 0x148, 0x10f0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'snmp\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8) 3.411420401s ago: executing program 4 (id=3164): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}, 0xffffffff}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x800042, 0x4, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x4011) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r3) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000140)={0x6000001f}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x7b7306ca40510a6}) epoll_pwait(r6, &(0x7f0000000000)=[{}, {}], 0x2, 0x200, 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2}) r7 = socket(0x28, 0x6, 0x2) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000030301"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYRES16=r9], 0x3c}}, 0x0) r10 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r10, 0x1, 0x1c, 0x0, &(0x7f0000000300)) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x134, 0x7, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x74, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPR={0x44, 0x7, 0x0, 0x1, {{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) socket$nl_route(0x10, 0x3, 0x0) 3.392852175s ago: executing program 3 (id=3165): socket(0x10, 0x3, 0x800000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xa}}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @loopback}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x64}}, 0x2000000) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r2, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x20048840) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000480), 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x7800, 0x8, 0x9, 0xaf03, {{0x11, 0x4, 0x0, 0x3f, 0x44, 0x67, 0x0, 0x0, 0x29, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x78, 0x3, 0x6, [{@remote}]}, @generic={0x94, 0x12, "06926625dd145decb8fac1ad3aaaeb8c"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x38, 0x1, 0x5, [{@rand_addr=0x64010102, 0xa}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'ip6tnl0\x00', r6, 0x29, 0x0, 0x3, 0x800000, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x0, 0x8, 0x4, 0x4}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x4, 0x2d}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x0, 0x0, 0xffffffff, 0x0, 0x210, 0x570, 0x570, 0xffffffff, 0x570, 0x570, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x5, @ipv4=@multicast1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @icmp_id=0x64, @port=0x4e22}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x34}, @dev={0xfe, 0x80, '\x00', 0x39}, [0xff000000, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00], 'bond_slave_0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0xc65ec123d57cf83, 0x7, 0x8, 0x12}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x11, @ipv4=@multicast1, @ipv4=@private=0xa010101, @port=0x4e20, @gre_key=0xabfc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff000000, 0xffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'nicvf0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x3c, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @icmp_id=0x64, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv4=@rand_addr=0x64010101, @ipv6=@mcast1, @port=0x4e21, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x40002}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18000}, 0xfffffffffffffd77) 3.204522806s ago: executing program 0 (id=3167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x50, "04000787b600eca6aa0825471829a00700e54b93e70b65949906a13b76078a07f95f5e8bc0e7b3635240e82fa543d570618759f1f1f349"}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a010100000000000000000000000920000000080a010100000000000000000a0000020900010073797a31"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4000014) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r4, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x6c5}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40040c0}, 0x40008) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r2, 0x2000) 2.915152856s ago: executing program 0 (id=3169): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r3, 0x829, 0x4070bd2d, 0x25dfdbfe, {0x1e}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) 2.732119936s ago: executing program 4 (id=3170): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000b40)=@generic={0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[], 0x9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002880)=@migrate={0xec, 0x21, 0x1, 0x800000, 0x0, {{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0x9c, 0x11, [{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, @in=@multicast2, 0x6c, 0x2, 0x0, 0x0, 0xa, 0x2}, {@in=@remote, @in=@private=0xa010101, @in=@dev={0xac, 0x14, 0x14, 0x1c}, @in=@empty, 0xff, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}}, 0x0) 2.684230266s ago: executing program 1 (id=3171): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000020000061"], 0x0, 0x52}, 0x28) 2.567394002s ago: executing program 4 (id=3172): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x44, 0x64, 0xf31, 0xfffffffd, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xa, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r6, r7, 0x8f5, 0xb) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000080)={'ip6erspan0\x00'}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_flash={0x33, 0x5, './file0/file0/../file0\x00'}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001900010000000000fddbdf251d01000014000d"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000008a00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.496356155s ago: executing program 0 (id=3173): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900"], 0x7c}}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000001"], 0x190) 2.443296157s ago: executing program 1 (id=3174): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) splice(r3, 0x0, r3, 0x0, 0x2, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xe9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x9, 0x1}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0xf5aa, 0x8, 0x2, 0x3a00, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pi6 \x00'}, 0x20) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x1407, 0x400, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000841}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1f, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x700000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x695}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0x3, 0x6, 0x9, 0x5ea5, 0x100}, @jmp={0x5, 0x1, 0x6, 0x3, 0x2, 0x2, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x70, &(0x7f0000000200)=""/112, 0x40f00, 0x3e, '\x00', 0x0, @fallback=0x10, r3, 0x8, &(0x7f0000000280)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r4, r5, r6, r7, r8], &(0x7f0000000640)}, 0x94) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f00000003c0)=0x885, 0x4) 2.371029812s ago: executing program 0 (id=3175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x240cc040}, 0x8000066) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) socket$kcm(0x29, 0x5, 0x0) (async) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2c", 0x54}, {&(0x7f00000001c0)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07002200000000003c44", 0x15}], 0x3}, 0xc854) (async) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2c", 0x54}, {&(0x7f00000001c0)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07002200000000003c44", 0x15}], 0x3}, 0xc854) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000180)=0x10000, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000180)=0x10000, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(0xffffffffffffffff, r2, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, 0x0, 0x40000) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, 0x0, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x14, r6, 0x1, 0x70bd2d, 0x259fdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x20008004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) (async) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000002c0)="3c052a925dd4374eababdf4fdf631db0a57ca45d277148068823eca51186384a8a77dd55f25ca9d6311a28b1c4dccd014fee3f64ee09f80ed03ca38b9d85f148d682089f9539e1e6695f620c683ac77a4a229761bf5fd7ac9b7b55f408c1d585c601ddc86a5c4c2f09765212a3efb2d8405c96569d240a", 0x77}], 0x1}, 0x4000044) connect$bt_rfcomm(r8, 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r8, 0x40089416, 0x0) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r8, 0x40089416, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000005dc0)={0x1f, @any, 0xf}, 0x0) (async) connect$bt_rfcomm(r8, &(0x7f0000005dc0)={0x1f, @any, 0xf}, 0x0) shutdown(r8, 0x1) (async) shutdown(r8, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) unshare(0x6020400) socket(0x15, 0x5, 0x0) 2.120246341s ago: executing program 1 (id=3176): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x400000000000004) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000020000000000b1000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00e935a483000000000000090000000000000000000000090000000000000000000000090200000001"], 0x0, 0x96}, 0x28) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x3f, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.948597896s ago: executing program 0 (id=3177): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newnexthop={0x24, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendto(r1, 0x0, 0x0, 0x8800, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000300), 0x4) recvmmsg(r6, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1}, 0x32c1}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x2, 0x2, 0x0) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1daf", 0x2}], 0x1}}], 0x2, 0x4040081) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x18, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x806}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) 1.791022687s ago: executing program 1 (id=3178): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 1.487904357s ago: executing program 1 (id=3179): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r2, 0x2) recvmsg(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)=""/43, 0x2b}], 0x1}, 0x40000002) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000240)={0x11, 0xd, 0x0, 0x1, 0x10, 0x6, @random="9f8d51353919"}, 0x14) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[], 0xfdef) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002500)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @fd}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 230.634039ms ago: executing program 0 (id=3180): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x40, 0x7, 0x9, 0x500, 0x3, 0x20210, r1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f00000002c0)=[{0x30, 0x1, 0x0, 0xfffff024}, {0x6, 0x0, 0x2, 0xe5e1}]}) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x8000000, 0x2, 0x0, 0x0, 0x3, 0x200}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1b, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000000107000004000000186600000b00000000000000050000", @ANYRES32=0x1, @ANYBLOB="000000000000b5c963a47f00000000008500000086000000d0080000f0ffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180000000700000000000000ffffffff85100000fbffffff9500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x6, 0xbd, &(0x7f0000000500)=""/189, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xf, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000640)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x4, 0xf, 0xa}, {0x3, 0x1, 0x2, 0x6}, {0x4, 0x1, 0xb, 0xd}, {0x0, 0x1, 0xa, 0xa}, {0x1, 0x3, 0xe, 0x4}, {0x2, 0x1, 0x4, 0x5}, {0x5, 0x1, 0x10, 0x4}, {0x5, 0x3, 0x5, 0x9}, {0x0, 0x3, 0x9, 0x5}], 0x10, 0x1ff}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) close(r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x7c}}, 0x2000c450) setsockopt$sock_attach_bpf(r8, 0x1, 0x10, &(0x7f0000001280), 0x4) bind$unix(r7, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r8, 0x0, 0x2002) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex, 0x2e, 0x1, 0xba22, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="020000000800000000000000", @ANYRES32, @ANYBLOB="3d10eb1624ea4ae69a8403aff4a67eed14ccce9d0525fb003380b5cb89ee3c4d6ef4e10193bc7cea3fe1f295bed4bf9de7d208da40369e2b286c963f75230db0661095afb7aabf8a7908584e2274e6f6317147b347cd8cae389945c0a250a73c08ee26a4fca9171459f702c387898e532d92108cd10055c60b823ca5ac21f37226c97da59e3ddece0dfca23988c04b83888bffdd6b9a11401dda01099cd74661a5a4297d8bd2d25f733f3ae5d607124698d22c7c65000000000013616c15c58f83d0ea44c3538f334e90b0344c2c771f2d53cc089818d6", @ANYRES64=r9], 0x20) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000)=0xb, 0x4) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, &(0x7f0000001080)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x10, 0x9, 0x40, {{0x13, 0x4, 0x2, 0x4, 0x4c, 0x66, 0x0, 0x9, 0x0, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4}, @generic={0x88, 0x12, "409811ececffc1d450c5ae6b8cd7c8c3"}, @rr={0x7, 0x17, 0x42, [@multicast2, @dev={0xac, 0x14, 0x14, 0x17}, @loopback, @empty, @empty]}, @rr={0x7, 0xb, 0x57, [@local, @private=0xa010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000300)={'tunl0\x00', r10, 0x7800, 0x1, 0x1, 0x3, {{0x21, 0x4, 0x2, 0x14, 0x84, 0x67, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast2, {[@generic={0x89, 0x12, "2706c3559abfc715dffe9e25b0c71041"}, @ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x55, 0x0, 0xf}, @ssrr={0x89, 0x1b, 0x40, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0x13}, @local, @multicast2]}, @timestamp={0x44, 0x2c, 0xe7, 0x0, 0x8, [0x400, 0x8, 0x81, 0x6, 0x7, 0x3, 0xc, 0x8, 0x8000, 0x884]}, @timestamp_prespec={0x44, 0xc, 0x8c, 0x3, 0x9, [{@remote, 0x6}]}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000911128000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 147.687268ms ago: executing program 4 (id=3181): sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffd}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x2004c080) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x3b, 0x9, 0x70bd28, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) unshare(0x26020480) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000020000000700000010020100", @ANYRES32=0x1, @ANYBLOB="dafa00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="a4a8b7c3000000000000000000000000779762b5b2c89e000000000000000096417c6bcee53e3c505d6d9048790b63c12d436654fe1e2d2113bb24a07d1a9c12002a3e6a015deafc4ff52579f84fbf8c57bdba0156ffefd2d9cc1bc9621053329a7739e991da233d0d27eb7d0a123cec01253e0792421cc546f181877cd5929c5866f3e4", @ANYRES32=r2, @ANYBLOB], 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) ppoll(&(0x7f0000000080)=[{r4}], 0x1, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x1, 0x8001, 0x100000000, 0x8, 0xde], 0x0, 0x0}, 0x78) 0s ago: executing program 1 (id=3182): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, &(0x7f0000000040)=0x4a) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000180)={r1, &(0x7f0000000040)='\x00', 0x2101, &(0x7f0000000080)={@_ha_fsid={[0x7ff, 0x7]}, {0x1ff, 0x81, 0x7f}}, 0x10001, &(0x7f0000000100), &(0x7f0000000140)}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000280)=""/169, &(0x7f0000000340)=0xa9) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280676500001c0002800c001f0067b700fc00000000000c0060da2c000000000000"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): 297.345311][T12644] xt_hashlimit: size too large, truncated to 1048576 [ 297.411264][T12647] netlink: 'syz.4.1643': attribute type 1 has an invalid length. [ 297.620303][T12649] vlan2: entered allmulticast mode [ 297.645702][T12649] bond0: entered allmulticast mode [ 297.737609][T12664] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 297.873839][T12670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.961101][T12664] 8021q: adding VLAN 0 to HW filter on device bond8 [ 297.982961][T12569] lo speed is unknown, defaulting to 1000 [ 298.049526][T12670] macvlan2: entered promiscuous mode [ 298.090525][T12670] macvlan2: entered allmulticast mode [ 298.111981][T12670] bond8: entered allmulticast mode [ 298.139973][T12670] bond8: entered promiscuous mode [ 298.165882][T12670] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 298.180101][T12670] team0: Device macvlan2 is of different type [ 298.217449][T12670] bond8: left allmulticast mode [ 298.248840][T12670] bond8: left promiscuous mode [ 298.297938][T12664] bond8: (slave ip6gretap1): making interface the new active one [ 298.309059][T12677] __nla_validate_parse: 2 callbacks suppressed [ 298.309162][T12677] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1650'. [ 298.325288][T12664] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 298.497036][T12569] lo speed is unknown, defaulting to 1000 [ 298.724186][T12681] syzkaller0: entered promiscuous mode [ 298.744044][T12681] syzkaller0: entered allmulticast mode [ 298.815182][T12686] netlink: 'syz.4.1654': attribute type 1 has an invalid length. [ 298.871321][T12686] bond10: entered promiscuous mode [ 298.890663][T12686] bond10: entered allmulticast mode [ 298.905941][T12686] 8021q: adding VLAN 0 to HW filter on device bond10 [ 299.135832][T12690] macvlan2: entered promiscuous mode [ 299.151989][T12690] macvlan2: entered allmulticast mode [ 299.171001][T12690] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 299.254600][T12569] lo speed is unknown, defaulting to 1000 [ 299.596482][T12717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.006476][T12725] netlink: 200780 bytes leftover after parsing attributes in process `syz.2.1664'. [ 301.857662][T12736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1667'. [ 301.871296][T12739] sch_tbf: burst 0 is lower than device tunl0 mtu (32769) ! [ 302.052330][T12743] netlink: 'syz.2.1667': attribute type 5 has an invalid length. [ 302.077428][T12743] netlink: 'syz.2.1667': attribute type 6 has an invalid length. [ 302.104544][T12743] netlink: 'syz.2.1667': attribute type 5 has an invalid length. [ 302.135508][T12743] netlink: 'syz.2.1667': attribute type 6 has an invalid length. [ 302.233878][T12755] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1672'. [ 302.624006][T12760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.654278][T12760] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.681031][T12760] tipc: Resetting bearer [ 302.716233][T12760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.835848][T12760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 302.858008][T12760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.900433][T12760] veth0_vlan: left promiscuous mode [ 302.918427][T12760] veth0_vlan: entered promiscuous mode [ 302.965149][T12760] veth0_macvtap: left promiscuous mode [ 302.982532][T12760] veth0_macvtap: entered promiscuous mode [ 303.007625][T12760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 303.039766][T12760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 303.050919][T12760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 303.078705][T12760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 303.104796][T12760] batman_adv: batadv0: Interface activated: macsec1 [ 303.125387][T12760] bridge0: port 3(batadv1) entered blocking state [ 303.132051][T12760] bridge0: port 3(batadv1) entered forwarding state [ 303.161969][T12760] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 303.183632][T12760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.211955][T12760] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.232295][T12760] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 303.251404][T12760] 8021q: adding VLAN 0 to HW filter on device bond3 [ 303.273760][T12760] 8021q: adding VLAN 0 to HW filter on device bond4 [ 303.323648][T12760] 8021q: adding VLAN 0 to HW filter on device bond5 [ 303.356764][T12760] 8021q: adding VLAN 0 to HW filter on device bond7 [ 303.388856][T12760] 8021q: adding VLAN 0 to HW filter on device bond6 [ 303.436615][T12793] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1682'. [ 303.460795][T12793] IPVS: length: 35 != 24 [ 303.505830][T12768] bond9: entered allmulticast mode [ 303.511479][T12768] 8021q: adding VLAN 0 to HW filter on device bond9 [ 303.597619][T12798] netlink: 'syz.4.1683': attribute type 13 has an invalid length. [ 303.688683][ T1074] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.711640][ T1074] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 49011 - 0 [ 303.735618][ T1074] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 303.768833][ T1074] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.787036][ T1074] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 49011 - 0 [ 303.816683][ T1074] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 303.981681][ T1074] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.995710][ T1074] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 49011 - 0 [ 304.018050][ T1074] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 304.037350][ T1074] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.056837][ T1074] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 49011 - 0 [ 304.078667][ T1074] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 304.179967][ T8218] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 304.432457][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 304.442029][T12822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1691'. [ 304.451759][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 304.462590][T12822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1691'. [ 304.602395][T12826] FAULT_INJECTION: forcing a failure. [ 304.602395][T12826] name failslab, interval 1, probability 0, space 0, times 0 [ 304.628882][T12826] CPU: 1 UID: 0 PID: 12826 Comm: syz.4.1692 Not tainted syzkaller #0 PREEMPT(full) [ 304.628912][T12826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 304.628942][T12826] Call Trace: [ 304.628951][T12826] [ 304.628961][T12826] dump_stack_lvl+0xe8/0x150 [ 304.628992][T12826] should_fail_ex+0x40c/0x560 [ 304.629033][T12826] should_failslab+0xa8/0x100 [ 304.629057][T12826] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 304.629091][T12826] ? __alloc_skb+0x1d7/0x7a0 [ 304.629120][T12826] ? __local_bh_enable_ip+0xd0/0x130 [ 304.629149][T12826] __alloc_skb+0x1d7/0x7a0 [ 304.629186][T12826] nldev_get_chardev+0x451/0xad0 [ 304.629224][T12826] ? __pfx_nldev_get_chardev+0x10/0x10 [ 304.629251][T12826] ? is_bpf_text_address+0x26/0x2b0 [ 304.629392][T12826] ? rdma_nl_rcv+0x33d/0xa40 [ 304.629441][T12826] ? down_read+0x270/0x2e0 [ 304.629471][T12826] ? __pfx_nldev_get_chardev+0x10/0x10 [ 304.629501][T12826] rdma_nl_rcv+0x6ef/0xa40 [ 304.629544][T12826] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 304.629607][T12826] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.629632][T12826] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.629667][T12826] netlink_unicast+0x7bb/0x940 [ 304.629715][T12826] netlink_sendmsg+0x813/0xb40 [ 304.629751][T12826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.629779][T12826] ? aa_sock_msg_perm+0xf1/0x1b0 [ 304.629813][T12826] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.629841][T12826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.629868][T12826] ____sys_sendmsg+0x9b9/0xa20 [ 304.629891][T12826] ? __might_fault+0xaf/0x130 [ 304.629927][T12826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.629961][T12826] ? import_iovec+0x73/0xa0 [ 304.629991][T12826] ___sys_sendmsg+0x2a5/0x360 [ 304.630013][T12826] ? __lock_acquire+0x683/0x2cd0 [ 304.630042][T12826] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.630106][T12826] ? __fget_files+0x2a/0x420 [ 304.630133][T12826] ? __fget_files+0x3a2/0x420 [ 304.630172][T12826] __x64_sys_sendmsg+0x1bd/0x2a0 [ 304.630199][T12826] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.630234][T12826] ? __pfx_ksys_write+0x10/0x10 [ 304.630276][T12826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.630300][T12826] do_syscall_64+0x174/0x580 [ 304.630325][T12826] ? trace_irq_disable+0x3b/0x140 [ 304.630357][T12826] ? clear_bhb_loop+0x40/0x90 [ 304.630385][T12826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.630406][T12826] RIP: 0033:0x7fa75c99ce59 [ 304.630427][T12826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.630445][T12826] RSP: 002b:00007fa75d8eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.630469][T12826] RAX: ffffffffffffffda RBX: 00007fa75cc15fa0 RCX: 00007fa75c99ce59 [ 304.630485][T12826] RDX: 0000000000000800 RSI: 00002000000002c0 RDI: 0000000000000003 [ 304.630498][T12826] RBP: 00007fa75d8eb090 R08: 0000000000000000 R09: 0000000000000000 [ 304.630511][T12826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.630524][T12826] R13: 00007fa75cc16038 R14: 00007fa75cc15fa0 R15: 00007ffec8506f48 [ 304.630558][T12826] [ 305.112754][T12836] netlink: 'syz.2.1690': attribute type 11 has an invalid length. [ 305.200731][T12836] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 305.207820][T12836] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 305.239628][T12838] xt_hashlimit: size too large, truncated to 1048576 [ 305.611466][T12851] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1700'. [ 305.677796][T12851] siw: device registration error -23 [ 306.167782][T12869] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 306.383601][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'. [ 306.909701][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 307.106441][T12865] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 307.116069][T12865] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 307.161457][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 307.260558][T12865] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 307.280178][T12865] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 307.369252][T12865] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 307.375478][T12865] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 307.425327][T12865] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 307.432513][T12875] lo speed is unknown, defaulting to 1000 [ 307.449122][T12865] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 307.492713][T12891] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1711'. [ 308.140753][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 308.256391][T12916] FAULT_INJECTION: forcing a failure. [ 308.256391][T12916] name failslab, interval 1, probability 0, space 0, times 0 [ 308.296148][T12916] CPU: 0 UID: 0 PID: 12916 Comm: syz.1.1717 Not tainted syzkaller #0 PREEMPT(full) [ 308.296179][T12916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 308.296192][T12916] Call Trace: [ 308.296200][T12916] [ 308.296210][T12916] dump_stack_lvl+0xe8/0x150 [ 308.296241][T12916] should_fail_ex+0x40c/0x560 [ 308.296282][T12916] should_failslab+0xa8/0x100 [ 308.296308][T12916] __kmalloc_cache_noprof+0x88/0x660 [ 308.296338][T12916] ? lockdep_hardirqs_on+0x7a/0x110 [ 308.296365][T12916] ? __request_module+0x2d0/0x630 [ 308.296395][T12916] __request_module+0x2d0/0x630 [ 308.296420][T12916] ? __up_read+0x28f/0x6b0 [ 308.296450][T12916] ? __pfx___request_module+0x10/0x10 [ 308.296481][T12916] ? __ib_get_client_nl_info+0x160/0x270 [ 308.296523][T12916] ? __ib_get_client_nl_info+0x160/0x270 [ 308.296564][T12916] ib_get_client_nl_info+0x57/0x140 [ 308.296599][T12916] nldev_get_chardev+0x645/0xad0 [ 308.296637][T12916] ? __pfx_nldev_get_chardev+0x10/0x10 [ 308.296665][T12916] ? is_bpf_text_address+0x26/0x2b0 [ 308.296815][T12916] ? rdma_nl_rcv+0x33d/0xa40 [ 308.296865][T12916] ? down_read+0x270/0x2e0 [ 308.296894][T12916] ? __pfx_nldev_get_chardev+0x10/0x10 [ 308.296924][T12916] rdma_nl_rcv+0x6ef/0xa40 [ 308.296966][T12916] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 308.297021][T12916] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.297045][T12916] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.297075][T12916] netlink_unicast+0x7bb/0x940 [ 308.297123][T12916] netlink_sendmsg+0x813/0xb40 [ 308.297159][T12916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.297188][T12916] ? aa_sock_msg_perm+0xf1/0x1b0 [ 308.297222][T12916] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.297250][T12916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.297277][T12916] ____sys_sendmsg+0x9b9/0xa20 [ 308.297301][T12916] ? __might_fault+0xaf/0x130 [ 308.297337][T12916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.297371][T12916] ? import_iovec+0x73/0xa0 [ 308.297401][T12916] ___sys_sendmsg+0x2a5/0x360 [ 308.297423][T12916] ? __lock_acquire+0x683/0x2cd0 [ 308.297451][T12916] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.297516][T12916] ? __fget_files+0x2a/0x420 [ 308.297542][T12916] ? __fget_files+0x3a2/0x420 [ 308.297581][T12916] __x64_sys_sendmsg+0x1bd/0x2a0 [ 308.297612][T12916] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.297647][T12916] ? __pfx_ksys_write+0x10/0x10 [ 308.297689][T12916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.297720][T12916] do_syscall_64+0x174/0x580 [ 308.297745][T12916] ? trace_irq_disable+0x3b/0x140 [ 308.297776][T12916] ? clear_bhb_loop+0x40/0x90 [ 308.297804][T12916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.297826][T12916] RIP: 0033:0x7f3b6b79ce59 [ 308.297847][T12916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.297866][T12916] RSP: 002b:00007f3b6c6b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.297890][T12916] RAX: ffffffffffffffda RBX: 00007f3b6ba15fa0 RCX: 00007f3b6b79ce59 [ 308.297906][T12916] RDX: 0000000000000800 RSI: 00002000000002c0 RDI: 0000000000000003 [ 308.297919][T12916] RBP: 00007f3b6c6b5090 R08: 0000000000000000 R09: 0000000000000000 [ 308.297932][T12916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.297945][T12916] R13: 00007f3b6ba16038 R14: 00007f3b6ba15fa0 R15: 00007ffd90660758 [ 308.297980][T12916] [ 309.086293][T12936] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1722'. [ 309.153578][T12940] xt_hashlimit: size too large, truncated to 1048576 [ 309.222915][T12940] xt_hashlimit: max too large, truncated to 1048576 [ 309.277012][T12949] netlink: 'syz.2.1724': attribute type 13 has an invalid length. [ 309.327218][T12952] xt_TCPMSS: Only works on TCP SYN packets [ 309.349772][T12949] netlink: 'syz.2.1724': attribute type 17 has an invalid length. [ 309.583084][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1724'. [ 310.419935][T12949] sit0: left promiscuous mode [ 310.461397][T12949] ip6tnl0: left promiscuous mode [ 310.528105][T12949] 8021q: adding VLAN 0 to HW filter on device .` [ 310.657975][T12989] FAULT_INJECTION: forcing a failure. [ 310.657975][T12989] name failslab, interval 1, probability 0, space 0, times 0 [ 310.671484][T12989] CPU: 0 UID: 0 PID: 12989 Comm: syz.4.1730 Not tainted syzkaller #0 PREEMPT(full) [ 310.671514][T12989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.671528][T12989] Call Trace: [ 310.671536][T12989] [ 310.671546][T12989] dump_stack_lvl+0xe8/0x150 [ 310.671579][T12989] should_fail_ex+0x40c/0x560 [ 310.671620][T12989] should_failslab+0xa8/0x100 [ 310.671645][T12989] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 310.671675][T12989] ? __alloc_skb+0x189/0x7a0 [ 310.671705][T12989] ? __alloc_skb+0x1d7/0x7a0 [ 310.671734][T12989] ? __local_bh_enable_ip+0xd0/0x130 [ 310.671763][T12989] __alloc_skb+0x1d7/0x7a0 [ 310.671800][T12989] netlink_ack+0x136/0xb30 [ 310.671826][T12989] ? __pfx___up_read+0x10/0x10 [ 310.671866][T12989] rdma_nl_rcv+0x40a/0xa40 [ 310.671910][T12989] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 310.671964][T12989] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.671988][T12989] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.672018][T12989] netlink_unicast+0x7bb/0x940 [ 310.672063][T12989] netlink_sendmsg+0x813/0xb40 [ 310.672096][T12989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.672122][T12989] ? aa_sock_msg_perm+0xf1/0x1b0 [ 310.672164][T12989] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 310.672195][T12989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.672221][T12989] ____sys_sendmsg+0x9b9/0xa20 [ 310.672244][T12989] ? __might_fault+0xaf/0x130 [ 310.672277][T12989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.672309][T12989] ? import_iovec+0x73/0xa0 [ 310.672337][T12989] ___sys_sendmsg+0x2a5/0x360 [ 310.672359][T12989] ? __lock_acquire+0x683/0x2cd0 [ 310.672386][T12989] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.672449][T12989] ? __fget_files+0x2a/0x420 [ 310.672476][T12989] ? __fget_files+0x3a2/0x420 [ 310.672514][T12989] __x64_sys_sendmsg+0x1bd/0x2a0 [ 310.672541][T12989] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.672576][T12989] ? __pfx_ksys_write+0x10/0x10 [ 310.672616][T12989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.672641][T12989] do_syscall_64+0x174/0x580 [ 310.672667][T12989] ? trace_irq_disable+0x3b/0x140 [ 310.672698][T12989] ? clear_bhb_loop+0x40/0x90 [ 310.672725][T12989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.672747][T12989] RIP: 0033:0x7fa75c99ce59 [ 310.672768][T12989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.672786][T12989] RSP: 002b:00007fa75d8eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.672809][T12989] RAX: ffffffffffffffda RBX: 00007fa75cc15fa0 RCX: 00007fa75c99ce59 [ 310.672825][T12989] RDX: 0000000000000800 RSI: 00002000000002c0 RDI: 0000000000000003 [ 310.672839][T12989] RBP: 00007fa75d8eb090 R08: 0000000000000000 R09: 0000000000000000 [ 310.672853][T12989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.672866][T12989] R13: 00007fa75cc16038 R14: 00007fa75cc15fa0 R15: 00007ffec8506f48 [ 310.672901][T12989] [ 310.676696][T12949] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 310.711397][T12996] No such timeout policy "syz1" [ 310.930171][ T6767] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.147807][ T6767] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.213819][ T8208] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.221081][ T8208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.257746][ T8208] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.265030][ T8208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.372464][ T5363] lo speed is unknown, defaulting to 1000 [ 311.418151][ T5363] syz1: Port: 1 Link ACTIVE [ 311.498996][ T6767] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.545564][ T6767] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.642237][ T6767] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.666367][ T6497] lo speed is unknown, defaulting to 1000 [ 311.686399][ T6767] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.733239][ T6767] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.768676][ T6767] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.827114][T13028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1737'. [ 312.395911][ T5637] block nbd0: Receive control failed (result -1) [ 312.629770][T13051] netlink: 'syz.2.1742': attribute type 1 has an invalid length. [ 312.680302][T13055] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1741'. [ 312.747778][T13060] netlink: 'syz.1.1744': attribute type 11 has an invalid length. [ 312.766612][T13057] netlink: 'syz.1.1744': attribute type 11 has an invalid length. [ 314.824547][T13049] lo speed is unknown, defaulting to 1000 [ 314.970207][T13061] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 314.997729][T13058] ipip0: entered promiscuous mode [ 315.003746][T13058] ipip0: entered allmulticast mode [ 315.029195][T13049] lo speed is unknown, defaulting to 1000 [ 315.045465][T13049] lo speed is unknown, defaulting to 1000 [ 315.077433][T13049] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 315.110321][T13049] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 315.190625][T13049] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 315.244009][T13049] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 315.314396][T13049] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 315.425384][T13049] lo speed is unknown, defaulting to 1000 [ 315.456403][T13049] lo speed is unknown, defaulting to 1000 [ 315.488335][T13049] lo speed is unknown, defaulting to 1000 [ 315.563291][T13049] lo speed is unknown, defaulting to 1000 [ 315.594863][T13049] lo speed is unknown, defaulting to 1000 [ 315.775367][T13111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1751'. [ 315.976591][T13124] batadv0: left promiscuous mode [ 315.982025][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 316.028189][T13124] gretap1: left promiscuous mode [ 316.058949][T13124] ip6gre1: left promiscuous mode [ 316.117791][T13124] ip6gre1: left allmulticast mode [ 316.141449][T13124] ip6erspan0: left allmulticast mode [ 316.150122][T13131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1757'. [ 316.172025][T13124] geneve2: left promiscuous mode [ 316.185262][T13124] geneve2: left allmulticast mode [ 316.196378][T13124] xfrm1: left allmulticast mode [ 316.205508][T13124] bond9: left promiscuous mode [ 316.229087][T13124] bridge7: left promiscuous mode [ 316.252157][T13124] ip6gre2: left promiscuous mode [ 316.271120][T13124] ip6gre2: left allmulticast mode [ 316.282919][T13124] bond10: left promiscuous mode [ 316.299238][T13124] bond10: left allmulticast mode [ 316.569173][T13157] netlink: 380 bytes leftover after parsing attributes in process `syz.3.1760'. [ 317.106339][ T5292] veth0_vlan: left promiscuous mode [ 317.125552][T13167] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 317.137120][ T5292] veth0_vlan: entered promiscuous mode [ 317.164465][T13167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.272377][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.391643][T13180] netlink: 'syz.0.1765': attribute type 2 has an invalid length. [ 319.620297][T13188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1769'. [ 319.832430][T13191] openvswitch: netlink: Message has 1 unknown bytes. [ 319.876255][T13191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.889799][T13196] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1772'. [ 319.974862][T13193] bond16: entered promiscuous mode [ 320.013319][T13193] 8021q: adding VLAN 0 to HW filter on device bond16 [ 320.412475][T13227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1780'. [ 320.422337][T13227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1780'. [ 320.524674][T13234] netlink: 'syz.4.1781': attribute type 12 has an invalid length. [ 320.935907][T13252] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1786'. [ 321.708437][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1795'. [ 322.232272][T13283] syzkaller0: entered promiscuous mode [ 322.263166][T13283] syzkaller0: entered allmulticast mode [ 322.322719][T13286] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1799'. [ 322.675018][T13296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1804'. [ 322.698550][T13297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1803'. [ 322.816473][T13300] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1806'. [ 323.055351][T13316] netlink: 'syz.2.1809': attribute type 3 has an invalid length. [ 323.437322][T13331] netlink: 'syz.0.1812': attribute type 32 has an invalid length. [ 323.479412][T13340] netlink: 'syz.1.1811': attribute type 12 has an invalid length. [ 323.496534][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 323.519519][T13331] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 323.712931][T13348] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1814'. [ 323.776771][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'. [ 323.804427][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'. [ 324.974226][T13358] lo speed is unknown, defaulting to 1000 [ 325.552154][T13358] lo speed is unknown, defaulting to 1000 [ 326.443177][T13432] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 326.755322][T13446] __nla_validate_parse: 4 callbacks suppressed [ 326.755343][T13446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1833'. [ 327.136611][T13453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.149797][T13453] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.171117][T13453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.229568][T13453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.240345][T13453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.254339][T13453] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.265476][T13453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.281826][T13453] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 327.298148][T13454] ip6tnl0: Caught tx_queue_len zero misconfig [ 327.496553][ T1074] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 327.529850][ T1074] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 327.582775][ T1074] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 327.628184][ T1074] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 327.702304][ T6497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.034086][T13475] xt_hashlimit: size too large, truncated to 1048576 [ 328.204383][ T5363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.310334][ T6767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.633988][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1845'. [ 328.947844][T13494] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 329.155056][T13507] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 329.178445][T13507] bond5: (slave lo): Enslaving as an active interface with an up link [ 329.187630][T13507] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 329.340767][ T1074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.359304][ T1074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.426663][T13528] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1851'. [ 329.475165][T13528] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1851'. [ 329.514760][T13531] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1854'. [ 329.626831][T13535] netlink: 'syz.1.1855': attribute type 1 has an invalid length. [ 329.763418][T13545] gretap2: entered allmulticast mode [ 329.819278][T13545] bond11: (slave gretap2): making interface the new active one [ 329.841748][T13545] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 329.863328][T13538] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 329.880550][T13551] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1858'. [ 329.979451][ T6497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.091105][T13560] netlink: 'syz.3.1862': attribute type 4 has an invalid length. [ 330.117486][T13560] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1862'. [ 330.165086][T13562] xt_hashlimit: size too large, truncated to 1048576 [ 330.683531][T13581] netlink: 'syz.4.1868': attribute type 1 has an invalid length. [ 331.981886][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 332.901222][T13581] bond12: entered promiscuous mode [ 332.940887][T13581] 8021q: adding VLAN 0 to HW filter on device bond12 [ 332.950278][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'. [ 333.168992][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1871'. [ 333.214806][T13605] bond13: entered promiscuous mode [ 333.222367][T13605] bond13: entered allmulticast mode [ 333.260089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.373119][T13616] netlink: 'syz.4.1876': attribute type 13 has an invalid length. [ 333.444994][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.522401][T13618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1877'. [ 333.565210][T13618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1877'. [ 333.590476][T13618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1877'. [ 333.605215][T13618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1877'. [ 333.616582][T13618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1877'. [ 333.626929][T13618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1877'. [ 333.653685][T13618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1877'. [ 333.693957][T13618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1877'. [ 334.380503][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.170676][T13649] kthread_run failed with err -4 [ 336.025232][T13716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.538216][T13723] bridge0: port 3(batadv1) entered disabled state [ 336.623857][T13723] tipc: Resetting bearer [ 337.404948][T13723] batman_adv: batadv0: Interface deactivated: macsec1 [ 337.474756][T13723] veth1_vlan: left allmulticast mode [ 337.666429][ T8215] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.712449][ T8215] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.730340][ T8215] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 49011 - 0 [ 337.753430][ T8215] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 337.785859][ T8215] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.827917][ T8215] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.865490][ T8215] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 49011 - 0 [ 337.910396][ T8215] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 337.950120][ T8215] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.988032][ T8215] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.015158][ T8215] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 49011 - 0 [ 338.027536][ T8215] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 338.042606][ T8215] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.100121][ T8215] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.143679][ T8215] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 49011 - 0 [ 338.172705][ T8215] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 338.267047][T13760] xt_hashlimit: size too large, truncated to 1048576 [ 338.362821][T13765] __nla_validate_parse: 198 callbacks suppressed [ 338.362844][T13765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1908'. [ 338.897291][T13795] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1911'. [ 338.921105][T13795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.994375][T13798] dummy0: Caught tx_queue_len zero misconfig [ 339.575277][T13823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1923'. [ 339.594804][T13825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1922'. [ 339.614150][T13825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1922'. [ 339.988253][T13836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1927'. [ 340.010641][T13838] tipc: Enabled bearer , priority 0 [ 340.018533][T13838] syzkaller0: entered promiscuous mode [ 340.024942][T13838] syzkaller0: entered allmulticast mode [ 340.070541][T13838] tipc: Resetting bearer [ 340.283722][T13837] tipc: Resetting bearer [ 340.340072][T13837] tipc: Disabling bearer [ 340.447553][T13850] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1931'. [ 340.479179][T13851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1931'. [ 340.560474][T13853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1932'. [ 340.938842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.954411][T13873] tipc: Enabling of bearer rejected, failed to enable media [ 341.002564][T13879] netlink: 296 bytes leftover after parsing attributes in process `syz.4.1940'. [ 341.442033][T13892] tipc: Enabling of bearer rejected, failed to enable media [ 342.126001][T13921] netlink: 'syz.4.1947': attribute type 21 has an invalid length. [ 342.148350][T13921] netlink: 'syz.4.1947': attribute type 4 has an invalid length. [ 342.169698][T13921] netlink: 'syz.4.1947': attribute type 3 has an invalid length. [ 342.943148][T13953] netlink: 'syz.1.1955': attribute type 1 has an invalid length. [ 342.987147][T13951] gretap1: entered allmulticast mode [ 343.052723][T13953] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 343.336818][T13969] tipc: Started in network mode [ 343.370392][T13969] tipc: Node identity 0a58041091b4, cluster identity 16 [ 343.430976][T13969] tipc: Enabled bearer , priority 0 [ 343.440858][T13973] syzkaller0: entered promiscuous mode [ 343.456451][T13973] syzkaller0: entered allmulticast mode [ 343.507950][T13977] __nla_validate_parse: 9 callbacks suppressed [ 343.507973][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1961'. [ 343.525751][T13969] tipc: Resetting bearer [ 343.543508][T13967] tipc: Resetting bearer [ 343.641335][T13967] tipc: Disabling bearer [ 344.216733][T13998] dvmrp0: entered allmulticast mode [ 344.613081][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1969'. [ 344.650335][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1969'. [ 344.708354][T14011] macsec0: entered allmulticast mode [ 344.714279][T14011] dummy0: entered allmulticast mode [ 344.721297][T14011] dummy0: entered promiscuous mode [ 344.780900][T14021] syzkaller1: entered promiscuous mode [ 344.786590][T14021] syzkaller1: entered allmulticast mode [ 345.265456][T14047] ieee802154 phy0 wpan0: encryption failed: -126 [ 345.272704][T14047] ieee802154 phy0 wpan0: encryption failed: -126 [ 345.305534][T14049] tc_dump_action: action bad kind [ 345.435105][T14058] lo: Caught tx_queue_len zero misconfig [ 345.536081][T14058] xt_CT: No such helper "snmp_trap" [ 346.327455][ T30] audit: type=1804 audit(1781646324.088:3): pid=14101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1993" name="/newroot/398/cgroup.controllers" dev="tmpfs" ino=2052 res=1 errno=0 [ 346.374432][ T30] audit: type=1800 audit(1781646324.088:4): pid=14101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1993" name="cgroup.controllers" dev="tmpfs" ino=2052 res=0 errno=0 [ 346.465754][T14087] tipc: Resetting bearer [ 346.587528][T14111] netlink: 'syz.4.1994': attribute type 1 has an invalid length. [ 346.803618][T14126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'. [ 346.825869][T14111] bond14: entered promiscuous mode [ 346.839889][T14111] 8021q: adding VLAN 0 to HW filter on device bond14 [ 347.100288][T14120] bond14: (slave bridge11): making interface the new active one [ 347.123841][T14120] bridge11: entered promiscuous mode [ 347.141035][T14120] bond14: (slave bridge11): Enslaving as an active interface with an up link [ 347.168126][T14124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 347.415479][T14147] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1999'. [ 347.495776][T14147] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1999'. [ 347.521441][T14147] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1999'. [ 347.563330][T14152] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2001'. [ 347.642363][T14155] batadv_slave_1: entered promiscuous mode [ 347.683652][T14154] batadv_slave_1: left promiscuous mode [ 348.317972][T14184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2010'. [ 349.480189][T14212] netlink: 'syz.0.2016': attribute type 89 has an invalid length. [ 349.510116][T14211] netlink: 'syz.0.2016': attribute type 89 has an invalid length. [ 349.530115][T14216] C: renamed from veth1_to_team [ 349.540168][T14218] netlink: 'syz.3.2018': attribute type 13 has an invalid length. [ 349.548237][T14218] netlink: 'syz.3.2018': attribute type 17 has an invalid length. [ 349.557202][T14216] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2017'. [ 349.682053][T14218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.693421][T14218] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.702665][T14218] dummy0: left promiscuous mode [ 349.792831][T14218] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 349.803706][T14218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.823852][T14218] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 349.841981][T14216] bridge_slave_1: Caught tx_queue_len zero misconfig [ 349.893800][T14222] bond12: (slave bridge7): Releasing backup interface [ 349.924716][T14222] bond13: (slave gretap1): Releasing active interface [ 349.964141][ T6499] uyz0: Port: 1 Link ACTIVE [ 350.155554][T14243] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2026'. [ 350.771561][T14263] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2030'. [ 351.699342][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2041'. [ 351.971130][T14328] hmó3)ó€: entered promiscuous mode [ 351.998798][T14330] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2047'. [ 352.035457][T14331] bridge6: entered allmulticast mode [ 352.052745][T14332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2047'. [ 352.070977][T14331] netlink: 'syz.2.2048': attribute type 1 has an invalid length. [ 352.089003][T14331] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2048'. [ 352.111577][T14335] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2049'. [ 352.121648][T14332] syzkaller1: entered promiscuous mode [ 352.127707][T14332] syzkaller1: entered allmulticast mode [ 352.156855][T14335] netlink: 'syz.4.2049': attribute type 13 has an invalid length. [ 352.176930][T14335] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2049'. [ 352.373321][T14348] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2055'. [ 352.405557][T14348] : default FDB implementation only supports local addresses [ 352.593653][T14361] netlink: 'syz.2.2058': attribute type 1 has an invalid length. [ 352.661494][T14361] bond10: (slave veth9): Enslaving as an active interface with a down link [ 353.255129][T14383] nbd4: detected capacity change from 0 to 63 [ 353.287603][T14389] block nbd4: NBD_DISCONNECT [ 353.367147][T14398] 8021q: VLANs not supported on ip_vti0 [ 353.411264][T14389] block nbd4: Disconnected due to user request. [ 353.466277][T14389] block nbd4: shutting down sockets [ 353.507340][ C1] blk_print_req_error: 136 callbacks suppressed [ 353.507363][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.522896][ C1] buffer_io_error: 138 callbacks suppressed [ 353.522918][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 353.561048][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.570347][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 353.578246][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.587402][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 353.595335][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.604468][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 353.632931][T10183] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.681809][T10183] Buffer I/O error on dev nbd4, logical block 0, async page read [ 353.763447][T10183] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.833046][T10183] Buffer I/O error on dev nbd4, logical block 1, async page read [ 353.857934][T10183] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.897731][T10183] Buffer I/O error on dev nbd4, logical block 2, async page read [ 353.930967][T10183] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.956899][T10183] Buffer I/O error on dev nbd4, logical block 3, async page read [ 353.973858][T10183] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.983800][T10183] Buffer I/O error on dev nbd4, logical block 0, async page read [ 353.993126][T10183] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.036116][T10183] Buffer I/O error on dev nbd4, logical block 1, async page read [ 354.062687][T10183] ldm_validate_partition_table(): Disk read failed. [ 354.072163][T10183] Dev nbd4: unable to read RDB block 0 [ 354.080571][T10183] nbd4: unable to read partition table [ 354.104392][T10183] ldm_validate_partition_table(): Disk read failed. [ 354.124256][T10183] Dev nbd4: unable to read RDB block 0 [ 354.145849][T10183] nbd4: unable to read partition table [ 354.289037][T14432] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 354.289037][T14432] Please contact the netfilter-devel mailing list or update your nftables rules. [ 354.785148][T14448] netlink: 'syz.1.2075': attribute type 4 has an invalid length. [ 354.824131][T14450] __nla_validate_parse: 4 callbacks suppressed [ 354.824155][T14450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2076'. [ 354.871085][T14450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2076'. [ 354.898248][T14441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2068'. [ 355.024655][T14450] geneve3: entered promiscuous mode [ 355.061440][T14454] netlink: 'syz.4.2078': attribute type 1 has an invalid length. [ 355.146584][T14454] bond15: entered promiscuous mode [ 355.154799][T14454] 8021q: adding VLAN 0 to HW filter on device bond15 [ 355.295446][T14454] 8021q: adding VLAN 0 to HW filter on device bond15 [ 355.309883][T14454] bond15: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 355.321185][T14454] bond15: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 355.340325][T14454] bond15: (slave ip6gre4): making interface the new active one [ 355.348184][T14454] ip6gre4: entered promiscuous mode [ 355.377350][T14454] bond15: (slave ip6gre4): Enslaving as an active interface with an up link [ 355.464380][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 356.091071][T14492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2087'. [ 356.162308][T14498] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2087'. [ 356.308814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.100758][T14474] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 358.110842][T14483] tipc: Enabling of bearer rejected, failed to enable media [ 358.131580][T14488] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 358.132983][T14491] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 358.523555][T14516] netlink: 'syz.2.2093': attribute type 1 has an invalid length. [ 358.547286][T14518] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2094'. [ 358.604994][T14516] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 358.787559][T14530] batadv_slave_1: entered promiscuous mode [ 358.876599][T14530] bond11: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 358.889072][T14530] bond11 (unregistering): Released all slaves [ 358.948001][T14541] veth0: Caught tx_queue_len zero misconfig [ 358.955619][T14538] block nbd1: server does not support multiple connections per device. [ 358.977497][T14538] block nbd1: shutting down sockets [ 359.003396][T14529] batadv_slave_1: left promiscuous mode [ 359.015103][ T8208] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.031704][T14534] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2099'. [ 359.044280][ T8208] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.063264][ T8208] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.094272][ T8208] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.220157][T14551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2103'. [ 359.292802][T14557] netlink: 'syz.1.2102': attribute type 1 has an invalid length. [ 359.500569][T14565] x_tables: duplicate underflow at hook 1 [ 359.532122][T12895] udevd[12895]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 359.581408][T12895] udevd[12895]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 359.665134][T14576] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2102'. [ 359.825272][T14563] bond12: (slave gretap3): making interface the new active one [ 359.837980][T14563] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 359.878196][T14557] bond12: (slave bridge6): Enslaving as an active interface with a down link [ 360.004113][T14573] 8021q: adding VLAN 0 to HW filter on device bond11 [ 360.086668][T14587] __nla_validate_parse: 2 callbacks suppressed [ 360.086691][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2111'. [ 360.152164][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2111'. [ 360.324359][T14592] syzkaller0: entered promiscuous mode [ 360.340328][T14592] syzkaller0: entered allmulticast mode [ 360.358150][T14608] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2117'. [ 360.379521][T14608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2117'. [ 363.103235][ T6501] hsr0: entered promiscuous mode [ 363.294606][T14641] netlink: 'syz.1.2123': attribute type 21 has an invalid length. [ 363.335310][T14641] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2123'. [ 363.336137][T14650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2124'. [ 363.402859][T14650] openvswitch: netlink: Flow actions attr not present in new flow. [ 363.447327][T14653] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 363.698860][T14669] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 363.746753][T14667] xt_CT: You must specify a L4 protocol and not use inversions on it [ 364.228195][T14691] wg0: entered promiscuous mode [ 364.247309][T14691] wg0: entered allmulticast mode [ 364.304622][T14691] veth0: entered promiscuous mode [ 364.329653][T14690] veth0: left promiscuous mode [ 364.346736][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2138'. [ 364.599355][T14706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2141'. [ 364.625803][T14706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2141'. [ 365.206837][T14717] bond6: entered promiscuous mode [ 365.958159][T14773] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 366.038016][T14775] openvswitch: netlink: Unknown key attributes 2 [ 366.154427][T14765] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2153'. [ 366.192020][T14765] netlink: 87 bytes leftover after parsing attributes in process `syz.2.2153'. [ 366.215580][T14786] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2158'. [ 366.409609][T14797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2161'. [ 366.423341][T14797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2161'. [ 366.434292][T14797] netlink: 58 bytes leftover after parsing attributes in process `syz.3.2161'. [ 366.509506][T14797] team0 (unregistering): Port device netdevsim1 removed [ 366.694631][T14814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2167'. [ 366.895874][T14822] openvswitch: netlink: Missing key (keys=40, expected=80) [ 366.948338][T14823] nbd: nbd0 already in use [ 366.968816][T14823] block nbd0: NBD_DISCONNECT [ 366.991883][T14823] block nbd0: shutting down sockets [ 367.211247][T14819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.228311][T14819] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.251256][T14819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.341842][T14819] veth1_vlan: left promiscuous mode [ 367.359765][T14819] vlan0: left promiscuous mode [ 367.366400][T14819] veth1_vlan: entered promiscuous mode [ 367.396942][T14819] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 367.422143][T14799] lo speed is unknown, defaulting to 1000 [ 367.425235][ T6501] lo speed is unknown, defaulting to 1000 [ 367.444052][ T6501] syz2: Port: 1 Link ACTIVE [ 367.454500][T14826] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ůŕ^!‚Y‡°”őËí [ 367.454500][T14826] 3ěUH†5rşBnśŹć [ 367.997643][T14799] lo speed is unknown, defaulting to 1000 [ 368.310995][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2181'. [ 369.142740][T14874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2183'. [ 369.188320][T14879] batadv0: entered promiscuous mode [ 369.204366][T14879] batadv0: entered allmulticast mode [ 369.428748][T14895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2183'. [ 369.545682][T14897] netlink: 'syz.2.2188': attribute type 5 has an invalid length. [ 369.933695][T14929] netlink: 'syz.2.2196': attribute type 22 has an invalid length. [ 370.035442][ T8218] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.062106][ T8218] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.098938][ T8218] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.132164][ T8218] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.248269][T14947] netlink: 'syz.4.2201': attribute type 5 has an invalid length. [ 370.925363][T14968] bond17: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 371.059532][T14968] bond17 (unregistering): Released all slaves [ 371.167879][T14971] syzkaller0: entered promiscuous mode [ 371.182811][T14971] syzkaller0: entered allmulticast mode [ 371.276003][T14991] __nla_validate_parse: 3 callbacks suppressed [ 371.276025][T14991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2215'. [ 371.339586][T14993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2215'. [ 371.655092][T14999] netlink: 'syz.3.2217': attribute type 4 has an invalid length. [ 371.797962][T14989] lo speed is unknown, defaulting to 1000 [ 371.827318][T15013] netlink: 'syz.3.2218': attribute type 11 has an invalid length. [ 372.007979][T15017] syzkaller0: entered promiscuous mode [ 372.017963][T15017] syzkaller0: entered allmulticast mode [ 372.119612][T14989] lo speed is unknown, defaulting to 1000 [ 372.286090][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2222'. [ 372.360567][T15023] bond7 (unregistering): Released all slaves [ 372.361061][T15026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2222'. [ 372.446465][T15024] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 372.560264][T15024] team0: entered promiscuous mode [ 372.565759][T15024] team0: entered allmulticast mode [ 372.573043][T15024] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.590115][T15026] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 372.606665][ T8208] tipc: Subscription rejected, illegal request [ 372.618355][T15029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2223'. [ 372.643191][T15026] team1: entered promiscuous mode [ 372.648336][T15026] team1: entered allmulticast mode [ 372.654535][T15026] 8021q: adding VLAN 0 to HW filter on device team1 [ 372.667404][T15030] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2221'. [ 373.187195][ T6501] lo speed is unknown, defaulting to 1000 [ 373.200286][ T6501] syz2: Port: 1 Link DOWN [ 373.248530][ T1074] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.279028][ T1074] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.300519][ T1074] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.331571][ T1074] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.814571][T15058] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2230'. [ 374.027181][T15073] tipc: Enabled bearer , priority 10 [ 374.068963][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2238'. [ 374.078117][T15079] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2238'. [ 374.107236][T15074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2232'. [ 374.531409][T15099] x_tables: duplicate underflow at hook 2 [ 375.053102][T15124] netlink: 'syz.4.2254': attribute type 1 has an invalid length. [ 375.196835][T15132] bond16: (slave bridge12): making interface the new active one [ 375.212346][T15132] bond16: (slave bridge12): Enslaving as an active interface with an up link [ 375.232512][ T6498] tipc: Node number set to 2615936016 [ 375.539232][T15148] syzkaller1: entered promiscuous mode [ 375.547371][T15148] syzkaller1: entered allmulticast mode [ 376.504702][T15177] bond17: option lacp_rate: invalid value (128) [ 376.516123][T15177] bond17 (unregistering): Released all slaves [ 377.077815][T15200] __nla_validate_parse: 7 callbacks suppressed [ 377.077836][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2275'. [ 377.130993][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2275'. [ 377.263067][T15200] gretap1: entered allmulticast mode [ 377.824402][T15223] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2279'. [ 378.526195][T15256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2294'. [ 378.554174][T15258] xt_hashlimit: size too large, truncated to 1048576 [ 378.702038][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.017835][T15280] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2304'. [ 379.031583][T15281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2305'. [ 379.123679][T15281] bond13: entered allmulticast mode [ 379.145394][T15285] ip6gretap2: entered allmulticast mode [ 379.151708][T15285] bond13: (slave ip6gretap2): Enslaving as an active interface with an up link [ 379.175954][T15287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2307'. [ 380.312008][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2308'. [ 380.422898][T15341] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2322'. [ 380.433524][T15340] siw: device registration error -23 [ 380.463076][T15343] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2321'. [ 380.753028][T15346] bond17: entered promiscuous mode [ 381.399061][T15386] xt_hashlimit: size too large, truncated to 1048576 [ 381.416295][T15386] xt_hashlimit: max too large, truncated to 1048576 [ 381.765868][T15404] IPVS: stopping master sync thread 7064 ... [ 381.997373][T15411] syzkaller0: entered promiscuous mode [ 382.019543][T15411] syzkaller0: entered allmulticast mode [ 382.653185][T15431] bond17: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 382.964820][T15431] bond17 (unregistering): Released all slaves [ 383.177863][T15458] syzkaller0: entered promiscuous mode [ 383.213892][T15458] syzkaller0: entered allmulticast mode [ 383.314663][T15446] syzkaller1: entered promiscuous mode [ 383.348498][T15446] syzkaller1: entered allmulticast mode [ 383.673523][T15476] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 383.702923][ T6496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.822105][T15481] IPv6: Can't replace route, no match found [ 384.099094][T15418] __nla_validate_parse: 4 callbacks suppressed [ 384.099117][T15418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2340'. [ 384.305206][T15505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'. [ 384.344038][T15505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'. [ 384.459932][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.173370][T15531] netlink: 'syz.4.2363': attribute type 5 has an invalid length. [ 385.230395][T15532] Bluetooth: MGMT ver 1.23 [ 385.297943][T15542] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2366'. [ 385.638354][T15557] sctp: [Deprecated]: syz.0.2371 (pid 15557) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.638354][T15557] Use struct sctp_sack_info instead [ 385.712335][T15557] netlink: 'syz.0.2371': attribute type 15 has an invalid length. [ 385.732499][T15557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2371'. [ 385.762493][T15560] netlink: 'syz.2.2373': attribute type 1 has an invalid length. [ 385.772317][T15557] sctp: [Deprecated]: syz.0.2371 (pid 15557) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.772317][T15557] Use struct sctp_sack_info instead [ 385.825941][T15557] sctp: [Deprecated]: syz.0.2371 (pid 15557) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.825941][T15557] Use struct sctp_sack_info instead [ 385.856622][T15565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2373'. [ 385.904894][T15560] bond12: entered promiscuous mode [ 385.922915][T15560] 8021q: adding VLAN 0 to HW filter on device bond12 [ 385.955689][T15565] bond12: entered allmulticast mode [ 385.967277][T15510] lo speed is unknown, defaulting to 1000 [ 386.019494][T15570] veth0: entered promiscuous mode [ 386.030773][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2374'. [ 386.837780][T15510] lo speed is unknown, defaulting to 1000 [ 386.846698][ T30] audit: type=1800 audit(1781646364.598:5): pid=15607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2380" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2420 res=0 errno=0 [ 386.955920][T15608] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.990331][T15608] bridge_slave_0 (unregistering): left allmulticast mode [ 387.007453][T15608] bridge_slave_0 (unregistering): left promiscuous mode [ 387.016056][T15608] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.054456][T15610] netlink: 'syz.0.2381': attribute type 1 has an invalid length. [ 387.062814][T15610] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2381'. [ 387.072399][T15610] netlink: 658 bytes leftover after parsing attributes in process `syz.0.2381'. [ 387.082033][T15610] netlink: 'syz.0.2381': attribute type 2 has an invalid length. [ 387.135368][T15604] macvtap1: entered allmulticast mode [ 387.153584][T15604] dummy0: entered allmulticast mode [ 387.168439][T15604] dummy0: entered promiscuous mode [ 387.197271][T15604] dummy0: left allmulticast mode [ 387.324950][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'. [ 387.352491][ T6499] dummy0: left promiscuous mode [ 387.659366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.913707][T15630] nbd: must specify a size in bytes for the device [ 388.459228][T15623] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 389.209654][T15686] x_tables: duplicate underflow at hook 1 [ 389.318012][T15695] __nla_validate_parse: 16 callbacks suppressed [ 389.318061][T15695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2404'. [ 389.350457][T15697] netlink: 'syz.4.2407': attribute type 13 has an invalid length. [ 389.358548][T15697] netlink: 'syz.4.2407': attribute type 17 has an invalid length. [ 389.450694][T15700] netlink: 'syz.3.2408': attribute type 13 has an invalid length. [ 389.598409][T15697] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 389.732643][T15700] hsr0: left promiscuous mode [ 389.785728][ T8208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.800704][ T8208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.964230][T15718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2411'. [ 390.040285][T15720] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2412'. [ 390.228895][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.269744][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'. [ 390.288018][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'. [ 390.302808][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'. [ 390.315545][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'. [ 390.325640][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'. [ 390.336134][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'. [ 390.372581][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2398'. [ 390.528460][T15743] xt_hashlimit: size too large, truncated to 1048576 [ 390.558464][T15744] bond5: option mode: unable to set because the bond device has slaves [ 390.673040][T15726] lo speed is unknown, defaulting to 1000 [ 390.858995][ T6496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.110551][T15726] lo speed is unknown, defaulting to 1000 [ 391.364912][T15764] syzkaller0: entered promiscuous mode [ 391.372487][T15764] syzkaller0: entered allmulticast mode [ 393.988928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.024988][T15770] lo speed is unknown, defaulting to 1000 [ 395.032444][T15787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2429'. [ 395.478457][T15822] dvmrp0: Caught tx_queue_len zero misconfig [ 395.502835][T15825] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 395.643622][T15822] xt_hashlimit: size too large, truncated to 1048576 [ 395.699559][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2439'. [ 395.790993][T15841] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2440'. [ 395.852196][T15770] lo speed is unknown, defaulting to 1000 [ 396.807109][T15848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2442'. [ 397.086468][T15869] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 397.292286][T15880] ip6gre1: entered promiscuous mode [ 397.308949][T15880] ip6gre1: entered allmulticast mode [ 397.317624][ T8208] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.327950][T15880] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.356943][ T6496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.371462][ T8208] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.495963][T15885] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2451'. [ 397.525336][T15885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2451'. [ 397.748915][ T6496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.819316][ T5762] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 398.010020][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2448'. [ 398.187631][T15895] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 398.250001][T15899] xt_TPROXY: Can be used only with -p tcp or -p udp [ 398.280168][T15899] syzkaller1: entered promiscuous mode [ 398.293969][T15899] syzkaller1: entered allmulticast mode [ 398.521615][T15909] IPVS: set_ctl: invalid protocol: 41 172.20.20.47:20001 [ 398.965940][T15944] tipc: Invalid UDP bearer configuration [ 398.965996][T15944] tipc: Enabling of bearer rejected, failed to enable media [ 399.096585][T15944] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2464'. [ 399.409884][T15955] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2470'. [ 399.643687][T15959] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 399.691733][T15959] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2471'. [ 400.177383][T15978] netlink: 'syz.1.2472': attribute type 6 has an invalid length. [ 400.260366][T15980] __nla_validate_parse: 1 callbacks suppressed [ 400.260386][T15980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2475'. [ 400.325572][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2475'. [ 400.476683][T15980] bridge15: port 1(veth1) entered blocking state [ 400.499119][T15980] bridge15: port 1(veth1) entered disabled state [ 400.524326][T15980] veth1: entered allmulticast mode [ 400.554507][T15980] veth1: entered promiscuous mode [ 400.814952][T15986] bridge15: port 2(veth5) entered blocking state [ 400.843499][T15986] bridge15: port 2(veth5) entered disabled state [ 400.872065][T15986] veth5: entered allmulticast mode [ 400.909576][T15986] veth5: entered promiscuous mode [ 401.377418][T16023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2485'. [ 401.469082][T16030] bond5: (slave lo): Releasing backup interface [ 401.485457][T16030] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 401.531100][T16030] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 401.625652][T16032] bond13 (unregistering): Released all slaves [ 401.636113][T16040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2488'. [ 401.818957][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.926226][T16050] syzkaller1: entered promiscuous mode [ 401.933341][T16050] syzkaller1: entered allmulticast mode [ 402.380094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.605505][T16064] macsec0: entered promiscuous mode [ 402.642799][T16064] veth1_macvtap: entered promiscuous mode [ 402.955325][T16102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2502'. [ 402.972436][T16110] 8021q: VLANs not supported on wg2 [ 403.346032][T16126] IPVS: Unknown mcast interface: team_slave_1 [ 403.450353][T16130] netlink: 'syz.0.2509': attribute type 1 has an invalid length. [ 403.535072][T16130] bond18: entered promiscuous mode [ 403.550778][T16130] 8021q: adding VLAN 0 to HW filter on device bond18 [ 403.616827][T16130] bond18: (slave bridge11): making interface the new active one [ 403.625214][T16130] bridge11: entered promiscuous mode [ 403.634165][T16130] bond18: (slave bridge11): Enslaving as an active interface with an up link [ 403.696722][T16140] vlan2: entered allmulticast mode [ 403.702000][T16140] bond18: entered allmulticast mode [ 403.707259][T16140] bridge11: entered allmulticast mode [ 403.967400][T16151] syzkaller0: entered promiscuous mode [ 403.976630][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2513'. [ 403.998368][T16151] syzkaller0: entered allmulticast mode [ 404.048306][T16158] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 404.072257][T16158] gretap0: entered promiscuous mode [ 404.091396][T16158] debugfs: 'hsr1' already exists in 'hsr' [ 404.103000][T16158] Cannot create hsr debugfs directory [ 404.117600][T16151] tipc: Enabled bearer , priority 0 [ 404.164389][T16151] tipc: Resetting bearer [ 404.199765][T16150] tipc: Resetting bearer [ 404.279701][T16150] tipc: Disabling bearer [ 404.495906][T16177] syzkaller0: entered promiscuous mode [ 404.506445][T16177] syzkaller0: entered allmulticast mode [ 404.688301][T16187] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 404.701042][T16187] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 404.778482][T16192] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2525'. [ 404.822973][T16185] syzkaller1: entered promiscuous mode [ 404.829931][T16185] syzkaller1: entered allmulticast mode [ 405.146223][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2527'. [ 405.863241][T16202] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 406.090540][T16225] syzkaller0: entered promiscuous mode [ 406.112777][T16225] syzkaller0: entered allmulticast mode [ 406.569307][T16238] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2535'. [ 406.598094][T16241] netlink: 'syz.1.2537': attribute type 1 has an invalid length. [ 406.616168][T16236] siw: device registration error -23 [ 406.690404][T16245] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2538'. [ 406.713420][T16249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2540'. [ 406.732402][T16244] bond14: (slave bridge7): making interface the new active one [ 406.741731][T16244] bond14: (slave bridge7): Enslaving as an active interface with an up link [ 406.745335][T16252] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2538'. [ 406.903883][T16257] netlink: 'syz.4.2541': attribute type 1 has an invalid length. [ 406.927993][T16257] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2541'. [ 407.356917][T16285] xt_l2tp: v2 tid > 0xffff: 37482740 [ 407.384771][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2549'. [ 407.416681][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2549'. [ 407.617778][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2551'. [ 407.636209][T16296] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 407.742372][T16301] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 407.782734][T16301] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 407.822876][T16301] siw: device registration error -23 [ 407.859060][T16307] netlink: 'syz.4.2554': attribute type 1 has an invalid length. [ 407.899636][T16314] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2557'. [ 407.917109][T16316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2554'. [ 407.927526][T16309] xt_hashlimit: size too large, truncated to 1048576 [ 408.027030][T16307] 8021q: adding VLAN 0 to HW filter on device bond17 [ 410.699003][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.825963][T16328] team_slave_1: Caught tx_queue_len zero misconfig [ 410.895448][T16329] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 411.039876][T16341] lo: left allmulticast mode [ 411.112475][T16347] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 411.951269][T16371] netlink: 'syz.1.2569': attribute type 1 has an invalid length. [ 411.970868][T16369] __nla_validate_parse: 2 callbacks suppressed [ 411.970889][T16369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2569'. [ 412.008918][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2569'. [ 412.110438][T16369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2569'. [ 412.112522][ T8219] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.140857][ T8219] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.159952][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2569'. [ 412.166576][ T8219] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.207837][ T8219] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.550523][T16398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2578'. [ 412.580056][T16398] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2578'. [ 412.635082][T16412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2579'. [ 412.886197][T16416] syzkaller1: entered promiscuous mode [ 412.891879][T16416] syzkaller1: entered allmulticast mode [ 413.935330][T16439] netlink: 7076 bytes leftover after parsing attributes in process `syz.1.2585'. [ 413.985473][T16439] openvswitch: netlink: Flow key attr not present in new flow. [ 414.074180][T16446] geneve1: entered promiscuous mode [ 414.134311][T16452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2590'. [ 414.157728][T16456] netlink: 'syz.4.2589': attribute type 13 has an invalid length. [ 414.216135][ T5637] block nbd0: Receive control failed (result -1) [ 414.344166][T16463] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2591'. [ 414.471767][ T6499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.011256][ T6499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.070571][T16447] lo speed is unknown, defaulting to 1000 [ 415.502204][T16447] lo speed is unknown, defaulting to 1000 [ 417.483946][T16549] syzkaller1: entered promiscuous mode [ 417.508795][T16549] syzkaller1: entered allmulticast mode [ 417.546750][ T6487] uyz0: Port: 1 Link DOWN [ 417.645656][T16563] netlink: 'syz.4.2610': attribute type 1 has an invalid length. [ 417.678861][T16563] __nla_validate_parse: 11 callbacks suppressed [ 417.678884][T16563] netlink: 1008 bytes leftover after parsing attributes in process `syz.4.2610'. [ 417.744735][T16563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2610'. [ 417.780749][T16563] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 417.797418][T16563] erspan0: entered promiscuous mode [ 417.821830][T16563] debugfs: 'hsr1' already exists in 'hsr' [ 417.838463][T16563] Cannot create hsr debugfs directory [ 418.245034][T16595] ieee802154 phy0 wpan0: encryption failed: -126 [ 418.276679][T16595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2617'. [ 418.377374][T16598] batman_adv: batadv0: Removing interface: macsec1 [ 418.498308][T16616] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2617'. [ 418.593230][T16622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2624'. [ 418.674067][T16622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2624'. [ 418.727740][T16632] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2624'. [ 418.743407][T16632] netlink: 'syz.3.2624': attribute type 12 has an invalid length. [ 418.751999][T16632] netlink: 'syz.3.2624': attribute type 5 has an invalid length. [ 418.804392][T16626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.930492][T16636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2629'. [ 419.019187][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.073279][T16643] syzkaller1: entered promiscuous mode [ 419.086796][T16643] syzkaller1: entered allmulticast mode [ 419.087122][T16645] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2632'. [ 420.034334][T16643] lo speed is unknown, defaulting to 1000 [ 420.313281][T16688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2645'. [ 420.327105][T16686] netlink: 'syz.1.2644': attribute type 4 has an invalid length. [ 420.354253][T16686] netlink: 'syz.1.2644': attribute type 8 has an invalid length. [ 420.739816][T16707] ipvlan0: entered allmulticast mode [ 420.754915][T16707] veth0_vlan: entered allmulticast mode [ 421.062181][T16643] lo speed is unknown, defaulting to 1000 [ 421.192291][T16722] tipc: Enabled bearer , priority 0 [ 421.396315][T16733] bridge19: entered promiscuous mode [ 421.409650][T16733] bridge19: entered allmulticast mode [ 421.780120][T16751] syzkaller0: entered promiscuous mode [ 421.798066][T16751] syzkaller0: entered allmulticast mode [ 422.040650][T16759] netlink: 'syz.4.2665': attribute type 4 has an invalid length. [ 422.066777][T16759] netlink: 'syz.4.2665': attribute type 8 has an invalid length. [ 422.255879][T16770] netlink: 'syz.0.2668': attribute type 1 has an invalid length. [ 422.436678][T16770] 8021q: adding VLAN 0 to HW filter on device bond19 [ 422.445352][ T5748] tipc: Node number set to 686724388 [ 422.508326][T16774] vlan3: entered allmulticast mode [ 422.529768][T16774] bond19: entered allmulticast mode [ 422.620888][T16780] bond19: (slave geneve4): making interface the new active one [ 422.628905][T16780] geneve4: entered allmulticast mode [ 422.636936][T16780] bond19: (slave geneve4): Enslaving as an active interface with an up link [ 422.680892][T16786] bond20: entered promiscuous mode [ 422.686694][T16786] 8021q: adding VLAN 0 to HW filter on device bond20 [ 422.719545][ T6765] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.729472][ T6765] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.790007][ T6765] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.805671][ T6765] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.960221][T16795] xt_hashlimit: size too large, truncated to 1048576 [ 423.129609][T16813] __nla_validate_parse: 6 callbacks suppressed [ 423.129630][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2674'. [ 423.145693][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2674'. [ 423.395107][T16823] netlink: 'syz.1.2677': attribute type 1 has an invalid length. [ 423.441724][T16823] bond17: entered promiscuous mode [ 423.447784][T16823] 8021q: adding VLAN 0 to HW filter on device bond17 [ 423.511634][T16823] bond17: (slave bridge10): making interface the new active one [ 423.520342][T16823] bridge10: entered promiscuous mode [ 423.528144][T16823] bond17: (slave bridge10): Enslaving as an active interface with an up link [ 423.783045][T16843] netlink: 'syz.4.2680': attribute type 1 has an invalid length. [ 424.050055][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2684'. [ 424.196552][T16870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2686'. [ 424.417913][T16876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2688'. [ 424.451167][T16870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2686'. [ 424.520162][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2690'. [ 424.537041][T16876] netlink: 'syz.1.2688': attribute type 1 has an invalid length. [ 424.731790][T16890] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 425.028108][T16911] netlink: 'syz.0.2696': attribute type 1 has an invalid length. [ 425.077670][T16915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2699'. [ 425.140779][T16911] 8021q: adding VLAN 0 to HW filter on device bond21 [ 425.193005][T16915] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 425.209772][ T6496] IPVS: starting estimator thread 0... [ 425.274448][T16922] bond21: (slave veth5): Enslaving as an active interface with a down link [ 425.321897][T16928] IPVS: using max 25 ests per chain, 60000 per kthread [ 425.362278][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2702'. [ 425.654842][T16948] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 425.867519][T16961] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2712'. [ 425.910368][T16961] netlink: 'syz.3.2712': attribute type 21 has an invalid length. [ 425.938774][ T8219] tipc: Subscription rejected, illegal request [ 426.467877][T16989] netlink: 'syz.2.2724': attribute type 21 has an invalid length. [ 426.491678][T16989] IPv6: NLM_F_CREATE should be specified when creating new route [ 426.506641][T16991] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 426.533150][T16989] mac80211_hwsim hwsim35 »»»»»»: renamed from wlan0 [ 426.885845][T17000] xt_l2tp: v2 doesn't support IP mode [ 426.960947][T17007] netlink: 'syz.1.2730': attribute type 5 has an invalid length. [ 427.405391][T17036] netlink: 'syz.2.2739': attribute type 12 has an invalid length. [ 427.694822][T17046] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 427.978796][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 428.009817][T17059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.090223][T17062] nbd: socks must be embedded in a SOCK_ITEM attr [ 428.256776][T17074] __nla_validate_parse: 15 callbacks suppressed [ 428.256799][T17074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2748'. [ 428.312558][T17074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.320743][T17074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.329551][T17074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.337079][T17074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.420405][T17080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2750'. [ 428.676986][T17101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2754'. [ 428.713170][T17101] ip6tnl0: Caught tx_queue_len zero misconfig [ 428.847786][T17112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2754'. [ 429.515432][T17148] netlink: 'syz.3.2766': attribute type 1 has an invalid length. [ 429.565663][T17154] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2764'. [ 429.600944][T17149] siw: device registration error -23 [ 429.629558][T17156] netlink: 'syz.0.2767': attribute type 1 has an invalid length. [ 430.893159][T17194] netlink: 'syz.2.2777': attribute type 21 has an invalid length. [ 430.919244][T17197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2775'. [ 430.946422][T17198] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2777'. [ 430.966028][T17194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2777'. [ 430.975369][T17194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2777'. [ 431.002744][T17197] ipvlan2: entered allmulticast mode [ 431.013710][T17197] dummy0: entered allmulticast mode [ 431.046774][T17204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.152372][T17212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.283699][T17215] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2784'. [ 431.297556][T17215] sctp: [Deprecated]: syz.1.2784 (pid 17215) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.297556][T17215] Use struct sctp_sack_info instead [ 431.333535][T17215] netlink: 'syz.1.2784': attribute type 1 has an invalid length. [ 431.356573][T17215] NCSI netlink: No device for ifindex 0 [ 431.370499][T17219] netlink: 'syz.4.2785': attribute type 1 has an invalid length. [ 431.505494][T17232] bond19: (slave geneve3): making interface the new active one [ 431.518221][T17232] bond19: (slave geneve3): Enslaving as an active interface with an up link [ 431.547623][T17219] bond19 (unregistering): (slave geneve3): Releasing active interface [ 431.567844][T17219] bond19 (unregistering): Released all slaves [ 432.085950][T17259] netlink: 'syz.4.2794': attribute type 1 has an invalid length. [ 432.289743][T17267] dvmrp0: entered allmulticast mode [ 433.002696][T17260] lo speed is unknown, defaulting to 1000 [ 433.056698][T17292] tunl0: Caught tx_queue_len zero misconfig [ 433.473281][T17260] lo speed is unknown, defaulting to 1000 [ 434.038980][T17339] __nla_validate_parse: 8 callbacks suppressed [ 434.038999][T17339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2813'. [ 434.353378][T17350] policy can only be matched on NF_INET_PRE_ROUTING [ 434.353405][T17350] unable to load match [ 434.427962][T17350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2816'. [ 434.494361][T17350] hsr_slave_0: left promiscuous mode [ 434.541965][T17350] hsr_slave_1: left promiscuous mode [ 434.650399][T17359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2819'. [ 434.725510][T17363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2819'. [ 434.803477][T17368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2819'. [ 434.931511][T17376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2820'. [ 434.942123][T17359] 8021q: adding VLAN 0 to HW filter on device bond19 [ 434.985930][T17368] bond19 (unregistering): Released all slaves [ 435.309331][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2823'. [ 435.406737][T17386] netlink: 'syz.4.2824': attribute type 31 has an invalid length. [ 436.182329][T17416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2830'. [ 436.509645][T17422] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2836'. [ 437.026343][T17434] bond13: Unable to set down delay as MII monitoring is disabled [ 437.275456][T17434] bond13 (unregistering): Released all slaves [ 437.812652][T17449] veth1_macvtap: left promiscuous mode [ 437.974564][ T6773] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.000919][ T6773] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.118278][ T6773] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.152347][ T6773] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.200928][T17476] netlink: 'syz.3.2847': attribute type 58 has an invalid length. [ 438.227549][T17476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2847'. [ 439.246445][T17525] netlink: 'syz.0.2860': attribute type 1 has an invalid length. [ 439.265699][T17527] netlink: 'syz.1.2861': attribute type 1 has an invalid length. [ 439.294485][T17527] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2861'. [ 439.343094][T17525] 8021q: adding VLAN 0 to HW filter on device bond23 [ 439.388484][T17531] bond23: (slave dummy0): making interface the new active one [ 439.402126][T17531] bond23: (slave dummy0): Enslaving as an active interface with an up link [ 439.445908][T17525] netlink: 'syz.0.2860': attribute type 10 has an invalid length. [ 439.491589][T17525] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2860'. [ 439.511409][T17525] dummy0: entered promiscuous mode [ 439.526065][T17525] bond23: (slave dummy0): Releasing active interface [ 439.617814][T17538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2863'. [ 439.770466][T17545] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2866'. [ 439.805912][T17547] netlink: 'syz.1.2867': attribute type 29 has an invalid length. [ 439.815225][T17547] netlink: 'syz.1.2867': attribute type 29 has an invalid length. [ 439.817664][T17545] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2866'. [ 439.838530][T17547] netlink: 'syz.1.2867': attribute type 4 has an invalid length. [ 439.869724][T17552] netlink: 'syz.3.2869': attribute type 1 has an invalid length. [ 439.879769][T17545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2866'. [ 439.890372][T17552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.911214][T17545] netlink: 'syz.0.2866': attribute type 1 has an invalid length. [ 440.074094][T17559] tipc: Enabled bearer , priority 0 [ 440.085374][T17559] syzkaller0: entered promiscuous mode [ 440.094081][T17559] syzkaller0: entered allmulticast mode [ 440.100717][T17559] tipc: Resetting bearer [ 440.124773][T17559] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 440.144869][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.233051][T17559] tipc: Resetting bearer [ 440.572756][T17589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2881'. [ 440.682817][T17595] syzkaller0: entered promiscuous mode [ 440.689028][T17595] syzkaller0: entered allmulticast mode [ 441.054268][T17616] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 441.557784][T17639] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2896'. [ 441.725249][T17644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2900'. [ 441.745046][T17645] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2899'. [ 441.794702][T17644] 8021q: adding VLAN 0 to HW filter on device bond24 [ 441.817803][T17645] validate_nla: 1 callbacks suppressed [ 441.817824][T17645] netlink: 'syz.1.2899': attribute type 4 has an invalid length. [ 441.853827][T17644] gretap2: entered allmulticast mode [ 441.864633][T17644] bond24: (slave gretap2): Enslaving as an active interface with an up link [ 441.989782][T17654] netlink: 'syz.3.2902': attribute type 1 has an invalid length. [ 442.013649][T17654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.117008][T17656] bond25: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 442.131390][T17656] bond25 (unregistering): Released all slaves [ 442.438280][T17674] netlink: 'syz.1.2907': attribute type 9 has an invalid length. [ 443.032389][T17698] openvswitch: netlink: Duplicate or invalid key (type 0). [ 443.050426][T17698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.077115][T17698] 8021q: VLANs not supported on ip_vti0 [ 443.221149][T17685] lo speed is unknown, defaulting to 1000 [ 443.757200][T17685] lo speed is unknown, defaulting to 1000 [ 443.897736][T17723] ip6tnl3: entered allmulticast mode [ 443.922015][T17725] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 [ 443.965845][T17727] netlink: 'syz.4.2925': attribute type 1 has an invalid length. [ 443.976128][T17725] IPVS: set_ctl: invalid protocol: 22 10.1.1.1:20002 [ 444.090315][T17727] bond19: entered promiscuous mode [ 444.096045][T17727] 8021q: adding VLAN 0 to HW filter on device bond19 [ 444.124983][T17734] 8021q: adding VLAN 0 to HW filter on device bond19 [ 444.138327][T17734] bond19: (slave vti0): The slave device specified does not support setting the MAC address [ 444.158811][T17734] bond19: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 444.196918][T17734] bond19: (slave vti0): making interface the new active one [ 444.216519][T17734] vti0: entered promiscuous mode [ 444.226219][T17734] bond19: (slave vti0): Enslaving as an active interface with an up link [ 444.251620][T17736] sit0: Caught tx_queue_len zero misconfig [ 444.953021][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 444.964185][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 444.980026][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 444.989976][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 445.006037][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 445.057620][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 445.066326][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 445.075907][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 445.091446][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 445.125656][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 445.287991][T17771] ip6tnl4: entered allmulticast mode [ 445.657929][T17784] xt_CT: No such helper "snmp_trap" [ 446.107950][T17804] sch_tbf: burst 4398 is lower than device lo mtu (32783) ! [ 446.302659][T17825] syzkaller1: entered promiscuous mode [ 446.315834][T17825] syzkaller1: entered allmulticast mode [ 446.416932][T17829] sctp: [Deprecated]: syz.0.2945 (pid 17829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.416932][T17829] Use struct sctp_sack_info instead [ 446.447039][T17833] __nla_validate_parse: 14 callbacks suppressed [ 446.447055][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2946'. [ 446.560830][ T6773] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 446.633818][T17840] sctp: [Deprecated]: syz.1.2947 (pid 17840) Use of int in max_burst socket option. [ 446.633818][T17840] Use struct sctp_assoc_value instead [ 446.720670][T17843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2949'. [ 447.179314][ T5637] Bluetooth: hci5: command tx timeout [ 447.421123][ T6773] veth5: left allmulticast mode [ 447.436008][ T6773] veth5: left promiscuous mode [ 447.453607][ T6773] bridge15: port 2(veth5) entered disabled state [ 447.480352][ T6773] veth1: left allmulticast mode [ 447.485625][ T6773] veth1: left promiscuous mode [ 447.494085][ T6773] bridge15: port 1(veth1) entered disabled state [ 447.880509][ T6773] bond15 (unregistering): (slave ip6gre4): Releasing backup interface [ 447.895168][ T6773] ip6gre4 (unregistering): left promiscuous mode [ 448.045145][ T6773] bond19 (unregistering): (slave vti0): Releasing backup interface [ 448.056731][ T6773] vti0 (unregistering): left promiscuous mode [ 448.088933][ T6773] erspan0 (unregistering): left promiscuous mode [ 448.255779][ T6773] bond9 (unregistering): (slave bridge7): Releasing backup interface [ 448.300543][ T6773] bond14 (unregistering): (slave bridge11): Releasing backup interface [ 448.310303][ T6773] bridge11 (unregistering): left promiscuous mode [ 448.325384][ T6773] bond16 (unregistering): (slave bridge12): Releasing active interface [ 448.400937][ T6773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.417101][ T6773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.428211][ T6773] bond0 (unregistering): Released all slaves [ 448.442259][ T6773] bond1 (unregistering): Released all slaves [ 448.458019][ T6773] bond2 (unregistering): Released all slaves [ 448.476069][ T6773] bond3 (unregistering): Released all slaves [ 448.497297][ T6773] bond4 (unregistering): (slave bond5): Releasing backup interface [ 448.506921][ T6773] bond4 (unregistering): Released all slaves [ 448.525561][ T6773] bond5 (unregistering): Released all slaves [ 448.547327][ T6773] bond6 (unregistering): Released all slaves [ 448.564678][ T6773] bond7 (unregistering): Released all slaves [ 448.580983][ T6773] bond8 (unregistering): Released all slaves [ 448.596993][ T6773] bond9 (unregistering): Released all slaves [ 448.620472][ T6773] bond10 (unregistering): Released all slaves [ 448.640873][ T6773] bond11 (unregistering): Released all slaves [ 448.656727][ T6773] bond12 (unregistering): Released all slaves [ 448.672558][ T6773] bond13 (unregistering): Released all slaves [ 448.688259][ T6773] bond14 (unregistering): Released all slaves [ 448.705380][ T6773] bond15 (unregistering): Released all slaves [ 448.724423][ T6773] bond16 (unregistering): Released all slaves [ 448.743059][ T6773] bond17 (unregistering): Released all slaves [ 448.776366][ T6773] bond18 (unregistering): Released all slaves [ 448.793434][ T6773] bond19 (unregistering): Released all slaves [ 448.810371][T17858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'. [ 448.816974][T17764] lo speed is unknown, defaulting to 1000 [ 448.851667][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 449.102328][T17896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2957'. [ 449.118378][T17901] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2959'. [ 449.153219][T17901] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2959'. [ 449.165986][T17901] tipc: Invalid UDP bearer configuration [ 449.166045][T17901] tipc: Enabling of bearer rejected, failed to enable media [ 449.202033][T17899] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2958'. [ 449.233149][T17903] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2960'. [ 449.259078][ T5637] Bluetooth: hci5: command tx timeout [ 449.314680][ T6773] hmó3)ó: left promiscuous mode [ 449.554793][T17915] x_tables: duplicate underflow at hook 1 [ 449.612175][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2961'. [ 449.642741][T17918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2961'. [ 449.863927][T17912] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 449.927044][T17912] bond8 (unregistering): Released all slaves [ 450.068475][ T6773] hmac(sha2: left promiscuous mode [ 450.165180][T17764] lo speed is unknown, defaulting to 1000 [ 450.188011][ T6773] hmó3)ó€: left promiscuous mode [ 450.338838][ T6773] tipc: Disabling bearer [ 450.353504][ T6773] tipc: Left network mode [ 450.480276][T17953] wg0: left promiscuous mode [ 450.501307][T17958] openvswitch: netlink: Flow key attr not present in new flow. [ 450.510546][T17953] wg0: left allmulticast mode [ 450.792552][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 451.340578][ T5637] Bluetooth: hci5: command tx timeout [ 451.925507][T18001] __nla_validate_parse: 3 callbacks suppressed [ 451.925530][T18001] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2978'. [ 452.276511][T17764] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.298777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.310496][T17764] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.319086][T17764] bridge_slave_0: entered allmulticast mode [ 452.327084][T17764] bridge_slave_0: entered promiscuous mode [ 452.394636][T17764] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.411317][T17764] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.421503][T17764] bridge_slave_1: entered allmulticast mode [ 452.430014][T17764] bridge_slave_1: entered promiscuous mode [ 452.517927][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 452.623834][T18028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2982'. [ 452.633017][T17764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.643462][T17764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.759711][T17764] team0: Port device team_slave_0 added [ 452.809443][T17764] team0: Port device team_slave_1 added [ 452.916957][T17764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.934849][T17764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.001926][T17764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.045644][T17764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.064325][T17764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.097840][T17764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.430383][ T5637] Bluetooth: hci5: command tx timeout [ 453.555270][T17764] hsr_slave_0: entered promiscuous mode [ 453.594376][T17764] hsr_slave_1: entered promiscuous mode [ 453.615078][T17764] debugfs: 'hsr0' already exists in 'hsr' [ 453.641513][T17764] Cannot create hsr debugfs directory [ 454.042143][ T6773] hsr_slave_0: left promiscuous mode [ 454.110663][ T6773] hsr_slave_1: left promiscuous mode [ 454.130756][T18049] netlink: 'syz.1.2987': attribute type 10 has an invalid length. [ 454.169414][T18049] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2987'. [ 454.282707][ T6773] dummy0: left allmulticast mode [ 454.727491][T18070] xt_ecn: cannot match TCP bits for non-tcp packets [ 454.854535][ T6773] team0 (unregistering): Port device team_slave_1 removed [ 454.877440][ T6773] team0 (unregistering): Port device team_slave_0 removed [ 455.048276][T18052] vlan0: entered promiscuous mode [ 455.054080][T18052] bridge0: entered promiscuous mode [ 455.085845][ T5292] 8021q: adding VLAN 0 to HW filter on device eth4 [ 455.154165][T18079] tipc: Enabling of bearer rejected, already enabled [ 455.261538][T18090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.587306][T18103] netlink: 'syz.0.2995': attribute type 11 has an invalid length. [ 455.665793][T18103] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2995'. [ 455.949339][ T6773] IPVS: stop unused estimator thread 0... [ 456.155448][T18120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2997'. [ 456.155716][ T13] tipc: Resetting bearer [ 456.165365][T18120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2997'. [ 458.130052][T18085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.162164][T17764] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 458.223006][T17764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 458.252963][T17764] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 458.352331][T17764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 458.377909][T17764] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 458.406773][T18199] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.3004'. [ 458.442245][T17764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 458.490174][T17764] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 458.543812][T17764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 458.588226][T18198] bond0: (slave vlan4): Opening slave failed [ 458.630992][T18203] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3006'. [ 458.824706][T18219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3010'. [ 459.013116][T17764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.119554][T17764] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.166938][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.174206][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.246686][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.254067][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.515839][T18259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3017'. [ 459.765699][T18272] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 459.968172][T18278] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 459.970761][T18272] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3020'. [ 460.302749][T18297] x_tables: duplicate underflow at hook 1 [ 460.629819][T18309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3028'. [ 460.703588][T18314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 460.711467][T18314] IPv6: NLM_F_CREATE should be set when creating new route [ 460.951498][T18330] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 461.010565][T17764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.093101][T18334] netlink: 'syz.0.3035': attribute type 1 has an invalid length. [ 461.121628][T18334] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.3035'. [ 461.167235][T18334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3035'. [ 461.224086][T18339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.279959][T16709] udevd[16709]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 461.327110][T15811] udevd[15811]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 461.467366][T18350] netlink: 'syz.0.3038': attribute type 10 has an invalid length. [ 461.638265][T18356] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 461.657436][T18356] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 461.826086][T18363] macsec1: entered promiscuous mode [ 461.934205][T17764] veth0_vlan: entered promiscuous mode [ 461.935161][T18371] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3047'. [ 461.969814][T17764] veth1_vlan: entered promiscuous mode [ 462.065489][T17764] veth0_macvtap: entered promiscuous mode [ 462.100997][T17764] veth1_macvtap: entered promiscuous mode [ 462.149194][T18377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3048'. [ 462.162014][T17764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.189936][T18377] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 462.205842][T17764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.231855][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.241210][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.273792][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.293078][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.453792][T18382] netlink: 'syz.1.3050': attribute type 4 has an invalid length. [ 462.498329][ T6773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.523362][ T6773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.610219][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.625500][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.963168][T18397] netlink: 'syz.1.3054': attribute type 2 has an invalid length. [ 463.407378][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 463.422408][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 463.434849][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 463.443322][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 463.456547][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 463.888504][T18421] __nla_validate_parse: 2 callbacks suppressed [ 463.899368][T18421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3059'. [ 463.931936][T18421] ipvlan1: entered promiscuous mode [ 463.941703][T18421] ipvlan1: left promiscuous mode [ 463.987338][T18424] tipc: Enabling of bearer rejected, already enabled [ 464.085438][T18430] tipc: Resetting bearer [ 464.860194][T18426] lo speed is unknown, defaulting to 1000 [ 465.360613][T18414] lo speed is unknown, defaulting to 1000 [ 465.370288][T18426] lo speed is unknown, defaulting to 1000 [ 465.499463][ T5637] Bluetooth: hci1: command tx timeout [ 466.359076][T18472] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.366935][T18472] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.885375][T18472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.914486][T18472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.106105][T18414] lo speed is unknown, defaulting to 1000 [ 467.109546][T18482] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 467.124317][T18459] lo speed is unknown, defaulting to 1000 [ 467.151890][ T76] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.180265][ T76] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.272036][ T76] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.288743][ T76] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.538989][T18497] tipc: Enabling of bearer rejected, already enabled [ 467.580954][ T5637] Bluetooth: hci1: command tx timeout [ 467.611408][T18459] lo speed is unknown, defaulting to 1000 [ 468.368460][T18523] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 468.615773][T18414] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.624519][T18414] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.633777][T18414] bridge_slave_0: entered allmulticast mode [ 468.645875][T18414] bridge_slave_0: entered promiscuous mode [ 468.680235][T18414] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.701050][T18414] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.723359][T18414] bridge_slave_1: entered allmulticast mode [ 468.728193][T18534] netlink: 'syz.4.3079': attribute type 1 has an invalid length. [ 468.760834][T18414] bridge_slave_1: entered promiscuous mode [ 468.965725][T18414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.013278][T18414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.241362][T18414] team0: Port device team_slave_0 added [ 469.252572][T18414] team0: Port device team_slave_1 added [ 469.315805][T18414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.328269][T18414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.354776][T18414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.368309][T18414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.375497][T18414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.411184][T18414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.513254][T18414] hsr_slave_0: entered promiscuous mode [ 469.528360][T18414] hsr_slave_1: entered promiscuous mode [ 469.659917][ T5637] Bluetooth: hci1: command tx timeout [ 469.723051][T18561] netlink: 'syz.2.3084': attribute type 10 has an invalid length. [ 470.090522][T18571] tipc: Enabling of bearer rejected, already enabled [ 470.259312][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3087'. [ 470.689053][T18598] netlink: 'syz.0.3093': attribute type 7 has an invalid length. [ 470.765519][T18414] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 470.876785][T18604] veth1_vlan: left promiscuous mode [ 470.888235][T18604] veth1_vlan: entered promiscuous mode [ 470.907606][T18604] veth0_macvtap: left promiscuous mode [ 470.915082][T18604] veth0_macvtap: entered promiscuous mode [ 470.928234][T18604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.937713][T18604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 470.947339][T18604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 470.957016][T18604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 470.973060][T18604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.011964][T18604] 8021q: adding VLAN 0 to HW filter on device bond2 [ 471.040991][T18604] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 471.253682][T18601] bond13: entered allmulticast mode [ 471.276009][T18601] 8021q: adding VLAN 0 to HW filter on device bond13 [ 471.304104][ T8219] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.388844][ T8219] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.410399][ T8219] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.436645][ T8219] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.665486][T18636] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 471.688432][T18636] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 471.707522][T18636] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 471.740594][ T5637] Bluetooth: hci1: command tx timeout [ 471.831670][T18414] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 471.888244][T18414] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.911993][T18414] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 471.954808][T18414] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 471.974325][T18414] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 472.001651][T18414] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.009682][T18652] netlink: 'syz.0.3105': attribute type 1 has an invalid length. [ 472.033675][T18652] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3105'. [ 472.053082][T18652] netlink: 658 bytes leftover after parsing attributes in process `syz.0.3105'. [ 472.074834][T18414] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 472.088773][T18652] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3105'. [ 472.107314][T18414] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 475.282478][T18414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.346305][T18696] netlink: 'syz.2.3112': attribute type 2 has an invalid length. [ 475.361525][T18414] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.370945][T18697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.404837][ T6765] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.412272][ T6765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.531477][ T6765] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.538840][ T6765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.632655][T18717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3115'. [ 475.675290][T18717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3115'. [ 475.810893][T18727] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3119'. [ 475.978277][T18738] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3122'. [ 476.146664][T18746] netlink: 'syz.0.3124': attribute type 13 has an invalid length. [ 476.171814][T18746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3124'. [ 476.233231][T18743] netlink: 'syz.2.3123': attribute type 12 has an invalid length. [ 476.257591][T18743] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3123'. [ 476.422904][T18761] lo: Caught tx_queue_len zero misconfig [ 476.448240][T18762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3127'. [ 476.469076][T18762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3127'. [ 476.524916][T18769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3128'. [ 476.556329][T18769] netlink: 'syz.4.3128': attribute type 2 has an invalid length. [ 476.576907][T18762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3127'. [ 476.757501][T18414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.904225][ T6486] IPVS: starting estimator thread 0... [ 477.017172][T18414] veth0_vlan: entered promiscuous mode [ 477.021052][T18785] IPVS: using max 32 ests per chain, 76800 per kthread [ 477.032484][T18788] xt_hashlimit: size too large, truncated to 1048576 [ 477.066734][T18414] veth1_vlan: entered promiscuous mode [ 477.096651][T18791] bridge_slave_0 (unregistering): left allmulticast mode [ 477.131230][T18791] bridge_slave_0 (unregistering): left promiscuous mode [ 477.149227][T18791] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.193766][T18796] netlink: 'syz.4.3130': attribute type 1 has an invalid length. [ 477.409817][T18414] veth0_macvtap: entered promiscuous mode [ 477.459129][T18414] veth1_macvtap: entered promiscuous mode [ 477.527782][T18414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.553096][T18414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.115594][ T6765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.157380][ T6765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.173927][ T6765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.197181][ T6765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.311873][T18816] netlink: 'syz.0.3139': attribute type 1 has an invalid length. [ 478.419105][T18816] netlink: 'syz.0.3139': attribute type 2 has an invalid length. [ 479.466532][ T6773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.475829][T18824] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 479.491447][ T6773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.518777][T18824] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 479.529845][T18824] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 479.858152][ T6765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.866881][ T6765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.588352][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 480.606478][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 480.620744][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 480.649178][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 480.666303][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 480.883854][ T6773] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.924769][ T6773] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.992626][T18890] __nla_validate_parse: 7 callbacks suppressed [ 480.992646][T18890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3156'. [ 481.023333][T18890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3156'. [ 481.033337][T18891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3157'. [ 481.043001][T18891] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3157'. [ 481.053192][T18891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3157'. [ 481.064372][T18891] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3157'. [ 481.229801][ T6773] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.253826][ T6773] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.317658][T18905] x_tables: ip_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 481.549981][ T6773] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.567244][ T6773] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.728009][ T6773] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.739345][ T6773] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.916733][T18911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3164'. [ 482.145000][T18938] netlink: 'syz.0.3169': attribute type 4 has an invalid length. [ 482.387468][ T6773] bridge_slave_1: left allmulticast mode [ 482.407410][ T6773] bridge_slave_1: left promiscuous mode [ 482.425918][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.606425][ T6773] dvmrp0: left allmulticast mode [ 482.618373][T18957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3172'. [ 482.699644][ T5634] Bluetooth: hci3: command tx timeout [ 482.995833][T18978] netdevsim netdevsim4: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 483.797846][T18994] openvswitch: netlink: Message has 4 unknown bytes. [ 483.951011][ T6773] bond4 (unregistering): (slave geneve2): Releasing active interface [ 484.052755][ T6773] .` (unregistering): (slave vxlan0): Releasing backup interface [ 484.129557][ T6773] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.145107][ T6773] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.161694][ T6773] .` (unregistering): Released all slaves [ 484.173442][ T6773] bond1 (unregistering): Released all slaves [ 484.190160][ T6773] bond2 (unregistering): Released all slaves [ 484.206873][ T6773] bond3 (unregistering): Released all slaves [ 484.231165][ T6773] bond4 (unregistering): Released all slaves [ 484.247269][ T6773] bond5 (unregistering): Released all slaves [ 484.266123][ T6773] bond0 (unregistering): Released all slaves [ 484.314428][ T6773] bond6 (unregistering): Released all slaves [ 484.332550][ T6773] bond7 (unregistering): Released all slaves [ 484.348296][ T6773] bond8 (unregistering): Released all slaves [ 484.369219][ T6773] bond9 (unregistering): Released all slaves [ 484.388476][ T6773] bond10 (unregistering): (slave veth9): Releasing active interface [ 484.398944][ T6773] bond10 (unregistering): Released all slaves [ 484.421968][ T6773] bond11 (unregistering): Released all slaves [ 484.437904][ T6773] bond12 (unregistering): Released all slaves [ 484.454946][ T6773] bond13 (unregistering): Released all slaves [ 484.507947][T18978] netlink: 'syz.4.3172': attribute type 13 has an invalid length. [ 484.517644][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3172'. [ 484.538174][T18878] lo speed is unknown, defaulting to 1000 [ 484.596565][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 484.752631][ T6773] : left promiscuous mode [ 484.788855][ T5634] Bluetooth: hci3: command tx timeout [ 484.920590][T19009] netlink: 'syz.0.3180': attribute type 30 has an invalid length. [ 484.930577][ C1] ================================================================== [ 484.938716][ C1] BUG: KASAN: slab-use-after-free in fib_rules_lookup+0x15e/0xeb0 [ 484.946892][ C1] Read of size 8 at addr ffff888022e8f680 by task dhcpcd/18810 [ 484.954485][ C1] [ 484.956885][ C1] CPU: 1 UID: 101 PID: 18810 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 484.956914][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 484.956968][ C1] Call Trace: [ 484.956984][ C1] [ 484.956994][ C1] dump_stack_lvl+0xe8/0x150 [ 484.957077][ C1] print_address_description+0x55/0x1e0 [ 484.957150][ C1] ? fib_rules_lookup+0x15e/0xeb0 [ 484.957172][ C1] print_report+0x58/0x70 [ 484.957189][ C1] kasan_report+0x117/0x150 [ 484.957252][ C1] ? fib_rules_lookup+0x15e/0xeb0 [ 484.957275][ C1] ? fib_rules_lookup+0x99/0xeb0 [ 484.957295][ C1] fib_rules_lookup+0x15e/0xeb0 [ 484.957318][ C1] ? fib_rules_lookup+0x99/0xeb0 [ 484.957341][ C1] ? __pfx_fib_rules_lookup+0x10/0x10 [ 484.957362][ C1] ? l3mdev_update_flow+0x26/0x610 [ 484.957457][ C1] ? l3mdev_update_flow+0x4ad/0x610 [ 484.957482][ C1] __fib_lookup+0x106/0x210 [ 484.957573][ C1] ? __pfx___fib_lookup+0x10/0x10 [ 484.957590][ C1] ? make_kuid+0x1e5/0x670 [ 484.957642][ C1] ? __pfx_make_kuid+0x10/0x10 [ 484.957667][ C1] ? wakeup_preempt_fair+0x745/0xb10 [ 484.957718][ C1] ? fib_lookup+0x49/0x440 [ 484.957779][ C1] ip_route_input_rcu+0x19ee/0x3190 [ 484.957836][ C1] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 484.957864][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 484.957933][ C1] ? ip_route_input_noref+0xad/0x270 [ 484.957961][ C1] ip_route_input_noref+0x17c/0x270 [ 484.957990][ C1] ? __pfx_ip_route_input_noref+0x10/0x10 [ 484.958020][ C1] ? macvlan_handle_frame+0xfb4/0x1360 [ 484.958143][ C1] ? arp_process+0x59e/0x18c0 [ 484.958203][ C1] arp_process+0xaab/0x18c0 [ 484.958235][ C1] ? __pfx_arp_process+0x10/0x10 [ 484.958264][ C1] ? NF_HOOK+0xa2/0x3c0 [ 484.958291][ C1] NF_HOOK+0x33a/0x3c0 [ 484.958318][ C1] ? __pfx_arp_process+0x10/0x10 [ 484.958345][ C1] ? NF_HOOK+0xa2/0x3c0 [ 484.958370][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 484.958396][ C1] ? process_backlog+0x3c3/0x1860 [ 484.958482][ C1] ? arp_rcv+0x2f5/0x500 [ 484.958509][ C1] ? __pfx_arp_rcv+0x10/0x10 [ 484.958537][ C1] process_backlog+0xbf0/0x1860 [ 484.958567][ C1] ? process_backlog+0x3c3/0x1860 [ 484.958602][ C1] __napi_poll+0xaa/0x330 [ 484.958629][ C1] net_rx_action+0x61d/0xf50 [ 484.958663][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 484.958698][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 484.958754][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 484.958774][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 484.958794][ C1] ? sched_clock+0x3f/0x60 [ 484.958844][ C1] handle_softirqs+0x225/0x840 [ 484.958876][ C1] ? do_softirq+0x76/0xd0 [ 484.958895][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 484.958945][ C1] do_softirq+0x76/0xd0 [ 484.958964][ C1] [ 484.958970][ C1] [ 484.958977][ C1] __local_bh_enable_ip+0xf8/0x130 [ 484.958995][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 484.959016][ C1] __dev_queue_xmit+0x1ed7/0x37f0 [ 484.959044][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 484.959068][ C1] ? _copy_from_iter+0x5d4/0x1660 [ 484.959146][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 484.959172][ C1] ? __pfx__copy_from_iter+0x10/0x10 [ 484.959199][ C1] ? __pfx_packet_parse_headers+0x10/0x10 [ 484.959272][ C1] ? packet_xmit+0x68/0x330 [ 484.959295][ C1] ? skb_put+0x112/0x210 [ 484.959347][ C1] packet_sendmsg+0x3d95/0x5040 [ 484.959375][ C1] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 484.959450][ C1] ? sock_read_iter+0x246/0x320 [ 484.959515][ C1] ? vfs_read+0x595/0xa80 [ 484.959557][ C1] ? do_syscall_64+0x174/0x580 [ 484.959602][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.959643][ C1] ? __lock_acquire+0x683/0x2cd0 [ 484.959689][ C1] ? __pfx_packet_sendmsg+0x10/0x10 [ 484.959710][ C1] ? aa_sk_perm+0x6d5/0x900 [ 484.959734][ C1] ? aa_file_perm+0x18b/0x15f0 [ 484.959755][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 484.959779][ C1] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 484.959855][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 484.959906][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 484.959945][ C1] ? __pfx_packet_sendmsg+0x10/0x10 [ 484.959966][ C1] sock_write_iter+0x498/0x4e0 [ 484.959992][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 484.960021][ C1] ? aa_sock_msg_perm+0xda/0x1b0 [ 484.960053][ C1] do_iter_readv_writev+0x612/0x8c0 [ 484.960085][ C1] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 484.960117][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 484.960145][ C1] ? security_file_permission+0x75/0x260 [ 484.960247][ C1] ? rw_verify_area+0x203/0x4c0 [ 484.960275][ C1] vfs_writev+0x343/0x990 [ 484.960295][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 484.960327][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 484.960357][ C1] ? __pfx_set_user_sigmask+0x10/0x10 [ 484.960386][ C1] do_writev+0x154/0x2e0 [ 484.960408][ C1] ? __pfx_do_writev+0x10/0x10 [ 484.960431][ C1] ? __secure_computing+0xe7/0x2b0 [ 484.960452][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.960473][ C1] do_syscall_64+0x174/0x580 [ 484.960494][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.960514][ C1] ? clear_bhb_loop+0x40/0x90 [ 484.960536][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.960557][ C1] RIP: 0033:0x7fc57b7c6407 [ 484.960577][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 484.960594][ C1] RSP: 002b:00007ffeda37ace0 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 484.960616][ C1] RAX: ffffffffffffffda RBX: 00007fc57b73c780 RCX: 00007fc57b7c6407 [ 484.960631][ C1] RDX: 0000000000000002 RSI: 00007ffeda37ad40 RDI: 0000000000000003 [ 484.960644][ C1] RBP: 000000000000005c R08: 0000000000000000 R09: 0000000000000000 [ 484.960655][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffeda37ad80 [ 484.960668][ C1] R13: 000055898b76c690 R14: 00007ffeda37add0 R15: 00007ffeda38afa0 [ 484.960702][ C1] [ 484.960709][ C1] [ 485.539572][ C1] Allocated by task 5641: [ 485.543916][ C1] kasan_save_track+0x3e/0x80 [ 485.548828][ C1] __kasan_kmalloc+0x93/0xb0 [ 485.553441][ C1] __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 485.559915][ C1] kmemdup_noprof+0x2b/0x70 [ 485.564454][ C1] fib_rules_register+0x2f/0x400 [ 485.569413][ C1] fib4_rules_init+0x21/0x160 [ 485.574107][ C1] fib_net_init+0x17a/0x3e0 [ 485.578729][ C1] ops_init+0x35d/0x5d0 [ 485.582962][ C1] setup_net+0x118/0x350 [ 485.587229][ C1] copy_net_ns+0x4f9/0x720 [ 485.591668][ C1] create_new_namespaces+0x3f0/0x6b0 [ 485.596994][ C1] unshare_nsproxy_namespaces+0x149/0x190 [ 485.602725][ C1] ksys_unshare+0x57d/0xa00 [ 485.607251][ C1] __x64_sys_unshare+0x38/0x50 [ 485.612066][ C1] do_syscall_64+0x174/0x580 [ 485.616679][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.622588][ C1] [ 485.624927][ C1] Freed by task 6773: [ 485.628914][ C1] kasan_save_track+0x3e/0x80 [ 485.633618][ C1] kasan_save_free_info+0x40/0x50 [ 485.638669][ C1] __kasan_slab_free+0x5c/0x80 [ 485.643465][ C1] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 485.649028][ C1] rcu_free_sheaf+0x31/0x200 [ 485.653639][ C1] rcu_core+0x78b/0x10a0 [ 485.657919][ C1] handle_softirqs+0x225/0x840 [ 485.662694][ C1] __irq_exit_rcu+0xca/0x220 [ 485.667382][ C1] irq_exit_rcu+0x9/0x30 [ 485.671639][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 485.677290][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 485.683290][ C1] [ 485.685625][ C1] The buggy address belongs to the object at ffff888022e8f600 [ 485.685625][ C1] which belongs to the cache kmalloc-192 of size 192 [ 485.699698][ C1] The buggy address is located 128 bytes inside of [ 485.699698][ C1] freed 192-byte region [ffff888022e8f600, ffff888022e8f6c0) [ 485.713516][ C1] [ 485.715857][ C1] The buggy address belongs to the physical page: [ 485.722285][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22e8f [ 485.731070][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 485.738201][ C1] page_type: f5(slab) [ 485.742204][ C1] raw: 00fff00000000000 ffff88813fe163c0 dead000000000100 dead000000000122 [ 485.750802][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 485.759425][ C1] page dumped because: kasan: bad access detected [ 485.765871][ C1] page_owner tracks the page as allocated [ 485.771621][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4164793475, free_ts 0 [ 485.790703][ C1] post_alloc_hook+0x22d/0x280 [ 485.795525][ C1] get_page_from_freelist+0x24ae/0x2530 [ 485.801099][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 485.807117][ C1] allocate_slab+0x77/0x660 [ 485.811640][ C1] refill_objects+0x336/0x3d0 [ 485.816363][ C1] __pcs_replace_empty_main+0x320/0x720 [ 485.821939][ C1] __kmalloc_cache_noprof+0x388/0x660 [ 485.827365][ C1] shrinker_alloc+0x59/0xaf0 [ 485.831977][ C1] alloc_super+0x744/0xa60 [ 485.836419][ C1] sget_fc+0x32b/0xa40 [ 485.840513][ C1] get_tree_nodev+0x2a/0x150 [ 485.845149][ C1] vfs_get_tree+0x92/0x2a0 [ 485.849597][ C1] vfs_kern_mount+0x15b/0x220 [ 485.854370][ C1] kern_mount+0x43/0x90 [ 485.858638][ C1] secretmem_init+0x1c/0x40 [ 485.863392][ C1] do_one_initcall+0x250/0x870 [ 485.868202][ C1] page_owner free stack trace missing [ 485.873584][ C1] [ 485.875922][ C1] Memory state around the buggy address: [ 485.881566][ C1] ffff888022e8f580: 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc [ 485.889645][ C1] ffff888022e8f600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 485.897739][ C1] >ffff888022e8f680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 485.905901][ C1] ^ [ 485.909986][ C1] ffff888022e8f700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.918173][ C1] ffff888022e8f780: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 485.926261][ C1] ================================================================== [ 485.934456][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 485.941701][ C1] CPU: 1 UID: 101 PID: 18810 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 485.950935][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 485.961115][ C1] Call Trace: [ 485.964420][ C1] [ 485.967280][ C1] vpanic+0x56c/0xa60 [ 485.971294][ C1] ? __pfx_vpanic+0x10/0x10 [ 485.975829][ C1] panic+0xc5/0xd0 [ 485.979577][ C1] ? __pfx_panic+0x10/0x10 [ 485.984027][ C1] ? fib_rules_lookup+0x15e/0xeb0 [ 485.989093][ C1] ? fib_rules_lookup+0x15e/0xeb0 [ 485.994199][ C1] check_panic_on_warn+0x89/0xb0 [ 485.999185][ C1] ? fib_rules_lookup+0x15e/0xeb0 [ 486.004237][ C1] end_report+0x73/0x170 [ 486.008526][ C1] ? fib_rules_lookup+0x15e/0xeb0 [ 486.013577][ C1] kasan_report+0x128/0x150 [ 486.018109][ C1] ? fib_rules_lookup+0x15e/0xeb0 [ 486.023170][ C1] ? fib_rules_lookup+0x99/0xeb0 [ 486.028134][ C1] fib_rules_lookup+0x15e/0xeb0 [ 486.033092][ C1] ? fib_rules_lookup+0x99/0xeb0 [ 486.038221][ C1] ? __pfx_fib_rules_lookup+0x10/0x10 [ 486.043887][ C1] ? l3mdev_update_flow+0x26/0x610 [ 486.049042][ C1] ? l3mdev_update_flow+0x4ad/0x610 [ 486.054276][ C1] __fib_lookup+0x106/0x210 [ 486.058827][ C1] ? __pfx___fib_lookup+0x10/0x10 [ 486.063965][ C1] ? make_kuid+0x1e5/0x670 [ 486.068410][ C1] ? __pfx_make_kuid+0x10/0x10 [ 486.073228][ C1] ? wakeup_preempt_fair+0x745/0xb10 [ 486.078576][ C1] ? fib_lookup+0x49/0x440 [ 486.083114][ C1] ip_route_input_rcu+0x19ee/0x3190 [ 486.088350][ C1] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 486.093932][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 486.099777][ C1] ? ip_route_input_noref+0xad/0x270 [ 486.105089][ C1] ip_route_input_noref+0x17c/0x270 [ 486.110318][ C1] ? __pfx_ip_route_input_noref+0x10/0x10 [ 486.116079][ C1] ? macvlan_handle_frame+0xfb4/0x1360 [ 486.121589][ C1] ? arp_process+0x59e/0x18c0 [ 486.126395][ C1] arp_process+0xaab/0x18c0 [ 486.130937][ C1] ? __pfx_arp_process+0x10/0x10 [ 486.135912][ C1] ? NF_HOOK+0xa2/0x3c0 [ 486.140446][ C1] NF_HOOK+0x33a/0x3c0 [ 486.144544][ C1] ? __pfx_arp_process+0x10/0x10 [ 486.149511][ C1] ? NF_HOOK+0xa2/0x3c0 [ 486.153703][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 486.158317][ C1] ? process_backlog+0x3c3/0x1860 [ 486.163466][ C1] ? arp_rcv+0x2f5/0x500 [ 486.167739][ C1] ? __pfx_arp_rcv+0x10/0x10 [ 486.172390][ C1] process_backlog+0xbf0/0x1860 [ 486.177269][ C1] ? process_backlog+0x3c3/0x1860 [ 486.182334][ C1] __napi_poll+0xaa/0x330 [ 486.186695][ C1] net_rx_action+0x61d/0xf50 [ 486.191317][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 486.196461][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 486.201702][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 486.207009][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 486.212229][ C1] ? sched_clock+0x3f/0x60 [ 486.216775][ C1] handle_softirqs+0x225/0x840 [ 486.221566][ C1] ? do_softirq+0x76/0xd0 [ 486.225930][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 486.231063][ C1] do_softirq+0x76/0xd0 [ 486.235254][ C1] [ 486.238225][ C1] [ 486.241201][ C1] __local_bh_enable_ip+0xf8/0x130 [ 486.246359][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 486.251502][ C1] __dev_queue_xmit+0x1ed7/0x37f0 [ 486.256567][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 486.261811][ C1] ? _copy_from_iter+0x5d4/0x1660 [ 486.266860][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 486.272269][ C1] ? __pfx__copy_from_iter+0x10/0x10 [ 486.277591][ C1] ? __pfx_packet_parse_headers+0x10/0x10 [ 486.283362][ C1] ? packet_xmit+0x68/0x330 [ 486.287904][ C1] ? skb_put+0x112/0x210 [ 486.292187][ C1] packet_sendmsg+0x3d95/0x5040 [ 486.297072][ C1] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 486.302467][ C1] ? sock_read_iter+0x246/0x320 [ 486.307338][ C1] ? vfs_read+0x595/0xa80 [ 486.311694][ C1] ? do_syscall_64+0x174/0x580 [ 486.316482][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.322574][ C1] ? __lock_acquire+0x683/0x2cd0 [ 486.327547][ C1] ? __pfx_packet_sendmsg+0x10/0x10 [ 486.332808][ C1] ? aa_sk_perm+0x6d5/0x900 [ 486.337337][ C1] ? aa_file_perm+0x18b/0x15f0 [ 486.342126][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 486.347003][ C1] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 486.353468][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 486.358446][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.363758][ C1] ? __pfx_packet_sendmsg+0x10/0x10 [ 486.368983][ C1] sock_write_iter+0x498/0x4e0 [ 486.373776][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 486.379092][ C1] ? aa_sock_msg_perm+0xda/0x1b0 [ 486.384060][ C1] do_iter_readv_writev+0x612/0x8c0 [ 486.389313][ C1] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 486.395060][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 486.400497][ C1] ? security_file_permission+0x75/0x260 [ 486.406159][ C1] ? rw_verify_area+0x203/0x4c0 [ 486.411042][ C1] vfs_writev+0x343/0x990 [ 486.415389][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 486.420794][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 486.425678][ C1] ? __pfx_set_user_sigmask+0x10/0x10 [ 486.431257][ C1] do_writev+0x154/0x2e0 [ 486.435613][ C1] ? __pfx_do_writev+0x10/0x10 [ 486.440399][ C1] ? __secure_computing+0xe7/0x2b0 [ 486.445630][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.451724][ C1] do_syscall_64+0x174/0x580 [ 486.456338][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.462427][ C1] ? clear_bhb_loop+0x40/0x90 [ 486.467245][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.473166][ C1] RIP: 0033:0x7fc57b7c6407 [ 486.477603][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 486.497234][ C1] RSP: 002b:00007ffeda37ace0 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 486.505683][ C1] RAX: ffffffffffffffda RBX: 00007fc57b73c780 RCX: 00007fc57b7c6407 [ 486.513676][ C1] RDX: 0000000000000002 RSI: 00007ffeda37ad40 RDI: 0000000000000003 [ 486.521664][ C1] RBP: 000000000000005c R08: 0000000000000000 R09: 0000000000000000 [ 486.529661][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffeda37ad80 [ 486.537656][ C1] R13: 000055898b76c690 R14: 00007ffeda37add0 R15: 00007ffeda38afa0 [ 486.545662][ C1] [ 486.549323][ C1] Kernel Offset: disabled [ 486.553665][ C1] Rebooting in 86400 seconds..