last executing test programs: 49.659019997s ago: executing program 2 (id=1297): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x33) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000180)={r1, &(0x7f0000000080)='-$][^&\x00', 0x582, &(0x7f00000000c0)={@align=0xfffffffffffffffb, {0xc, 0x490a, 0x5, 0x1}}, 0x4b, &(0x7f0000000100), &(0x7f0000000140)=0x9}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x422, 0x9, {r4, r5/1000+60000}, {0x77359400}, {0x3, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1}, 0x30, 0x1, 0x0, 0x0, "9b4836533744c4abfa5f81c3de584c7e1d0e9c8b55c8ff95129a3fd75c4d3a46c89e0621b758a168bec423d2646bfd5c948845327e5dd39c2ebbdebb89bdfce1"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20008040) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x2}, @window={0x3, 0xfffb, 0x7}, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @timestamp, @window={0x3, 0xe40, 0x100}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r6, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0x20010, r3, 0x3bdf8000) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000004c0)={'caif0\x00', {0x2, 0x4e23, @remote}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 49.439054691s ago: executing program 4 (id=1301): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000700)={0x2, 0x4e22, @remote}, 0x10) getpeername(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1f, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 48.87283466s ago: executing program 0 (id=1304): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0x0, 0x9}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}}, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 48.690896074s ago: executing program 0 (id=1305): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r1, 0x100, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc811}, 0x4000) 48.616864119s ago: executing program 0 (id=1306): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a0000000000006111880000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000000280)={0x800000000, 0x2, 0x9, 0x8}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x8000}, 0x4) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x190) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r4, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b04, &(0x7f00000000c0)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r9, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000180)=0x22d7, r2, &(0x7f0000000240)=0x8000000000000001, 0x800000000000fffd, 0x0) syz_genetlink_get_family_id$smc(0x0, r8) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r10, 0x891c, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) 48.51192081s ago: executing program 2 (id=1307): r0 = socket$inet(0xa, 0x800, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) r1 = accept4(r0, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x2}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 48.228834071s ago: executing program 4 (id=1310): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) (async) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x2b, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001006175746f"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 48.013431369s ago: executing program 3 (id=1311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000009db3bcbbd5000500000000000000b64f7110b500"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x100000002, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, 0xa, @in=@empty, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a09040004000000000000020000000900010073797a30000000000900020073797a3200000000200004801c0001800b00010072656a65637400000c0002800800014000000001140000001100017ccb2fea8ecd58a02e856c0c9a"], 0x74}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 47.924283517s ago: executing program 1 (id=1312): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0100000000000000dd000000020000000000000f0400000000005f00"], 0x0, 0x28}, 0x20) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0x15, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'wlan0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x7, 0x7}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYRESDEC=r0, @ANYRES8=0x0, @ANYRESOCT=r4, @ANYRESOCT], 0x48) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) 47.633882267s ago: executing program 2 (id=1313): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000540), &(0x7f0000000740)=r0}, 0x20) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x4, 0x8, 0x4, 0x4, 0x2, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x80000000, 0x401}, {0xfffffff9, 0x9, 0x2, 0x8}, {0x7, 0x7, 0x101, 0x2}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 47.394386408s ago: executing program 3 (id=1314): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xb, 0x8}, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000002840)={0x2, 0x4e23, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000002900)={0x2, 0x4e20, @remote}, 0x10) (async, rerun: 64) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000440)={&(0x7f00000000c0)=0x7, 0xa1, &(0x7f0000000180)=[{}], &(0x7f0000000240)}) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x0, 0x43) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000480)={'mangle\x00', 0xaa, "6c4ca861eb1d7fe0b77a8cfb97c4aa637f3170eb990b9a7052088c1da3ae00333ca09d41a1c36b7bff356d50671012e462459d42c1bd9a7d225f0f03e95585ce8631177e65c922be9a06bb47c5c4a6803af31070c35a2b9bb1fd46e48940559504a296f5c48356ad7ae060189a309a2cbb22892587f81798a28f8dbeae918ad71c68cd2d7e38417f45a8996dab0589c52bd531d9bea8695994559db0d0c8c18d0ed94dfa1d055c0469ea"}, &(0x7f0000000580)=0xce) (async) r4 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000003c0)={0x2, [0x0, 0x0]}, &(0x7f0000000400)=0xc) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r5, r6, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r7, r8, 0x4, r5}, 0x10) (async) r9 = socket(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)={0x0, @aes128, 0x0, @desc4}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @local}]}}}]}, 0x48}}, 0x0) shutdown(r1, 0x1) 47.393023486s ago: executing program 1 (id=1315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000420040008002900787d040008001b00"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f00000000c0)=@ethtool_flash={0x33, 0x6, './file0\x00'}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000800)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ed}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r3, 0xc50, 0x9, &(0x7f0000000580)=""/4096, &(0x7f0000001580)=0x1000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000420040008002900787d040008001b00"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) (async) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f00000000c0)=@ethtool_flash={0x33, 0x6, './file0\x00'}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000800)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ed}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt(r3, 0xc50, 0x9, &(0x7f0000000580)=""/4096, &(0x7f0000001580)=0x1000) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) (async) 47.39139602s ago: executing program 4 (id=1316): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000080)={'vlan0\x00', 0x2000}) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) 46.981389372s ago: executing program 0 (id=1317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2a00}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c0001800600060008060000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 46.980370125s ago: executing program 3 (id=1318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400001f1000010000000000000000000000000a5c000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080003400000000008000240000000000900010073797a30000000000900020073797a32000000000500074055000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'rlimit'}, {0x2b, 'cpuacct'}, {0x2d, 'memory'}]}, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400001f1000010000000000000000000000000a5c000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080003400000000008000240000000000900010073797a30000000000900020073797a32000000000500074055000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'rlimit'}, {0x2b, 'cpuacct'}, {0x2d, 'memory'}]}, 0x19) (async) 46.633922654s ago: executing program 1 (id=1319): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x206ea, @dev={0xfe, 0x80, '\x00', 0x33}}}}, &(0x7f0000000200)=0x98) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000005280)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000005240)={&(0x7f0000005200)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008004}, 0xc000) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x74a849580afd22a, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdc9}, 0x48) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'gre0\x00'}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r7], 0x44}}, 0x0) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) (async) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @mcast2, 0x2}, 0x1c) (async) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000640)={'vcan0\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r11}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}}, 0x8004) (async) r12 = socket$netlink(0x10, 0x3, 0x0) (async) r13 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r13, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="000000af1b2a011e2ad40800525cc660cb8801b2d82b466df60cf2259701a242d809562e3b4443afba9b4472afea0ebc65f335aabf62d2b37cca0f611ef6a9b557364a042ecab3f2565bc564bb11deadd8b77e72920d7f33e889233c9dda12f307bd7a0f881c0a2cf34a9edb20163a9e2776b3da71d997545e6171cf7db4532e51439163d235381ff245e3cf40b7", @ANYRES32=r14, @ANYBLOB="240012800b00010062726964676500001400028005000700060000000600270000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 46.549657869s ago: executing program 4 (id=1320): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002"], 0x48}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) writev(r4, &(0x7f0000000700)=[{&(0x7f0000000100)="64e1d08cb6dcb4ee8eb750edc5c5f8fc2dd8396e10da03104c8c2150489079a705be1126fa13aaef2d7c66766e161c32e532b4321327965b625b37f00ea27b184fe08043f9562f415c10910e6753f0192174de70c4fd50c3aa9650db8b5d0a713e6dff31dcd7986ce6feae16", 0x6c}, {&(0x7f0000000600)="7b90cdd729954ff2d5fa2543146c024f106aee7593ea20cf81261241aefe94352af0815361c6be7162309948bc529130b4e944b9d34600c029833440e1432c38c8d56f5f615277c74ed6563d3887d71fb10556c877f3cff03824178ad8a3b28726ec10bbff812c7924143df40cf85263f369d411851c8b0a7c057fa0ae6bc6ee75573daad4e47fcb028636d27ac7f4338a0670dac76ad799da013efde31ae501f9b272c2c7de41c69160ee", 0xab}, {&(0x7f00000006c0)="3835262e052b477cc354e1926383163f3b5bca8f705846ce7540d2704c993d40b48a4e2c3004f23193", 0x29}], 0x3) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@expire={0x2d8, 0x18, 0x20, 0x70bd2b, 0x25dfdbff, {{{@in6=@mcast2, @in6=@private2, 0x4e23, 0x6, 0x4e22, 0xfffb, 0x8, 0x20, 0x20, 0x89, r2, r3}, {@in=@dev={0xac, 0x14, 0x14, 0x20}, 0x4d5, 0x4c}, @in=@broadcast, {0x2, 0xa256, 0x3, 0x8, 0x9, 0xdd, 0x2, 0xffffffff}, {0x8, 0x5, 0x1b, 0x580}, {0xb, 0x8, 0xff}, 0x70bd2d, 0x3501, 0x2, 0x2, 0x0, 0xb1}, 0x1}, [@policy={0xac, 0x7, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e24, 0x4, 0x4e21, 0x80b3, 0x2, 0xa0, 0x0, 0x2c, 0x0, r6}, {0x40, 0x6, 0x2, 0x2858, 0x8, 0x5, 0x2, 0x200}, {0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x1, 0x6e6bb1, 0x1, 0x1, 0x3}}, @srcaddr={0x14, 0xd, @in6=@local}, @algo_aead={0x11f, 0x12, {{'morus640-sse2\x00'}, 0x698, 0x0, "d26a277ae1c6b14d5dc392eb9c56233e7c2a8780ce30d3665db65b6e8afa7918687902ed57c398f1eca18042b644eb1a5faf98deef66baa448bbda58bc6effad3e16f027472c9ca5f8ee6e4cf22133c65c5ae62967456e4a1035fb42826731d1e54bf5394da91285d39e6e08272dbbf75401dccbab6e66f26221a6173d10721b505be564ccc1317bd4c0df5d75c25e1dda4cf58503b342141665505a2bc5f1a632413cad1abfb3e29eaf4d56cf53a8d82a67174e3d767c660c8dee3423766c10af4cd14dc8f73be5f0731e739635168493f743"}}]}, 0x2d8}}, 0x10) 46.397113665s ago: executing program 3 (id=1321): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x1, 0x0, 0x0, "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", 0x1, "2353a2ad8f792337b3610a014feea22617c1ecea"}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "e292ac39b9d3382f"}, 0xb}}]}, 0x154}}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200c00002000600080003"], 0x40}}, 0x0) 46.382105342s ago: executing program 1 (id=1322): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)=0x3) write$ppp(r0, &(0x7f00000001c0)="38d5", 0x2) 46.381397234s ago: executing program 2 (id=1323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 46.303039636s ago: executing program 0 (id=1324): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x27dfdbfa, {0x9}}, 0x61}, 0x1, 0x0, 0x0, 0x80}, 0xc048) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x80) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000004b40)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8000, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001bc0)={0xa, 0x4e21, 0x29, @local, 0x3}, 0x1c, &(0x7f00000041c0)}}], 0x2, 0x800) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)=@newtaction={0x48, 0x76, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0x34, 0x1, [@m_vlan={0x30, 0x4, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (rerun: 32) 46.076378505s ago: executing program 4 (id=1325): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400303a00fe8a0000000000000000000000000001ff82000000000000000000000000000102009078000005006050835900006c00fc010000000000000000000000000000fc0200"/106], 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b27, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r4}, &(0x7f0000000cc0), &(0x7f0000000d00)='%pS \x00'}, 0x20) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="61202a3a2a20726d17"], 0x9) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000000c0)=@newsa={0x234, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d3}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x139, 0x3, {{'deflate\x00'}, 0x788, "e8c0c68479b527bf41a7b1d34cf9592ee3836d8fd90ec6d9840d40cefeda9c09315f0a918b7ddbb0412ab8d06fbc0fb18804c8e7e7b23d100000006cd30b6902f64bfd83c059071ce505c3c52b0d5852c5bf54a5dfa1a30181ae2cbd04f654f82a99ae061da9da0db1fbc47f7b49dacaba21c027ea197c0ceb2bbe3fda47155b719c2004a9cac711644e1d5aca8b0acec785f80a1436d5758b4bc32d40173aae47879a5cb54db9bdfabff9c828c5d0f32427bfdb65137a902512463cd7ae32fbdb41ccee12bc325944fcd512ab83cc7000fc9e3ab57b37c743c4beff9cb2e31a79f0d0cca2f3690131fa68f5b05d18968b"}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x234}}, 0x48055) 45.990178625s ago: executing program 2 (id=1326): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x54, 0x30, 0x12f, 0x0, 0x0, {}, [{0x40, 0x1, [@m_police={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x5}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f00000003c0)=0x5, 0x4) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20000010) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x8, &(0x7f0000004bc0)=0x6, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f51010054d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d7000/0x4000)=nil, 0x4000, 0x3, 0x28011, r10, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x10010, r10, 0xc9d5000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r12 = socket$inet(0xa, 0x801, 0x84) (rerun: 32) connect$inet(r12, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r12, 0x8) (async) r13 = accept4(r12, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xfffd}, 0x90) (async, rerun: 64) mmap(&(0x7f00005d6000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r11, 0x0) (rerun: 64) 45.799348088s ago: executing program 3 (id=1327): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket(0x2d, 0x3, 0x5) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x41, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x44, 0x68, 0x400, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x1c, 0x2, [{0x1, 0xc}, {0x1, 0x7}, {0x2, 0x2}]}]}, 0x44}}, 0x200c0000) 45.76372452s ago: executing program 0 (id=1328): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(r1, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x6559, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x5}}}}, 0x36) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5000000010000305000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0001000000000000000000050009000000000008000500", @ANYRES32=r3], 0x50}}, 0x0) 45.743826824s ago: executing program 1 (id=1329): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [0xff], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_to_batadv\x00', 'tunl0\x00', {0xff}, {0xff}, 0x8, 0xa, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xfe1, 0x80, 0xfffffffe, 'snmp_trap\x00', {0x80}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0x0, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0xffffff00], '\x00', 'rose0\x00', {0xff}, {0xff}, 0x6, 0x40, 0x5, 0x47}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x4}, {0x9, 0x7}, {0x8, 0x5000000000000}, 0x800}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 45.51433214s ago: executing program 4 (id=1330): syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x20, 0x0, @opaque="a12980a40c33e39478f61445f00831b83330ea8e60ee8d96"}}}}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1d0, 0xa0, 0xb, 0x148, 0xa0, 0x148, 0x138, 0x230, 0x242, 0x138, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x70, 0xa0, 0x0, {0xff0f000000000000}}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x3}, 0x0, 0x1}}}, {{@uncond, 0xec010000, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c00048005000300020000000500030000000000050003000000000005000300050000000500030001"], 0x50}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x20, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x24, 0x0, @void}}}}}}}, 0x0) 45.513804865s ago: executing program 2 (id=1331): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "d7e35481fed54e5f", "7827f0ecf93903f0e994a76e2c8a27492c8792451fc06e94e4f894765555efa2", "14b23f34", 'N+x\"s~jE'}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000001000000000000000000000097000100ffff05ff95"], &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) 45.382621693s ago: executing program 3 (id=1332): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x2000010, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) syz_emit_ethernet(0xa7, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100100086dd6000a8bc006d0600fc000000000000000000000000000001fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYBLOB="7402000090"], 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0xfffffe00, 0x0, 0x7, 0x9}, 0x10) 45.223576654s ago: executing program 1 (id=1333): r0 = socket(0x10, 0x803, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x8}]}) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000080)=0x9) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x5b7e2000) write$ppp(r2, &(0x7f0000000540)='|Z', 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRES32=r0, @ANYRES16=r2, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESOCT], 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x440b0) socket(0x10, 0x803, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000)) (async) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x8}]}) (async) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000080)=0x9) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x5b7e2000) (async) write$ppp(r2, &(0x7f0000000540)='|Z', 0x2) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="810074700024bc09557d78905cc5402818f0c0176068540b93d57ba98543fae17948b29f7b276b95c032e01624285692032e3883dc3ab15b17ed5772e5a065348dc7b71b373b1fa7dadf5a5f193460fe19f32b30ba9f23b572ce37fed7180c794e6d01b1686ccf79af5f6773b26a7e2394b1131e5984211d7a53c1925f2f12d295e9c9ed459dfc0486e2741cad45823d26e4e96f28e2312d6302ca46098bfc295e2dec590c4bcf8027a102be6e274560e9d617dd583f167fd723fddc9559a79db83d4a835e492c14ce461465573f51b3cd51c9b5171641aa365b38cd80b38bb4e6e9ff5c3ec4cc95b68030a80b6a526aa3eba9f2ddc2aa599c8ed730bc7b954d950275a1fc559e0c31b7f5ae77bc574d4d92b9c6efe09d3ec995f71286dbdc49ada461bb1a71a23e055aee4a4f84407cbd34c3a8077adc8cec1b741c79d4112d4b2ab4453be24e680b09347aaa113f046dc603d4c3a8e8745871a6818b431bafdffce758387a5f624fb2ee94c7607ae16078e96c29a941fa435ca5728db292f2da3f0ec22d5f0cbe6d877e664391dd4810a5531c2d470499dd0f9d881bd1d3c20d841ffea8233f074ea737aca129a246126799e2ba03fa11f2f315d896b7987719cac44e681b598cb4178db8de0403367b6d9cbf9a5b3de32afe3a2da016ccd16d1306a30bab589e5ad938877ca546ccaa9dc30315d2c9228b3489f6988aa4e7aee2fed55d0544a02cf589affc8d821535dc09eb73284d132c5c7099511b7f432ff5ca782d32bb05673f641bfef38772ffa15b0d0bcb81a7d7908decdd3a8753e50d38599bfa8e5b82aca8914135de66abc4bb100b7c0a6759cc2195e3fe1dd3dae96f8918bd8961bc0a1021a8f7d9dbe2c013f6640150c108063f6585d52bdea41fc59e93c9e107678c0fffad36debe8adc850ea15a5ad3dd7c6088f3a77f957e5c56fb2019b508633122d479e88e1b82dfe6e86c627201ffa3e94a5f45b98b837c9cf1fa80bd1236ba5f2e1fd60b17111a35638ce5df64ee460931bad85f3a9a9d48c9aec7f980eccc4149fe2b8942ba3d0813cc4e5a6ac8d5a3ce4d94f8aae18f6edcf261a00c93b39c75ba87872299d1d7603727083899572fa52b3e8fff151c46542ae95adc640dd68374682065b765aa883b1e4f7b99513a4c6a6694b05f6ab5fc53f6b31c97fd85408680447b2e7e23cd11bc7fd28598df6fcb8dd87068f4beec6504e14522bfe03ecd44a262c85b90877868ec", @ANYRES32=r0, @ANYRES16=r2, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESOCT], 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x440b0) (async) 0s ago: executing program 32 (id=1328): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(r1, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x6559, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x5}}}}, 0x36) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5000000010000305000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0001000000000000000000050009000000000008000500", @ANYRES32=r3], 0x50}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts. [ 83.172088][ T5613] cgroup: Unknown subsys name 'net' [ 83.285914][ T5613] cgroup: Unknown subsys name 'cpuset' [ 83.295492][ T5613] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.920276][ T5613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.617189][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.628769][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.637905][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.648062][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.659438][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.702257][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.711952][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.719775][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.735741][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.747422][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.861464][ T4941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.873030][ T4941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.881159][ T4941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.892100][ T4941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.899736][ T4941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.937474][ T4941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.947612][ T4941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.958017][ T4941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.967232][ T4941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.976201][ T4941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.012561][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.024207][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.033360][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.041896][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.055584][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.693356][ T4941] Bluetooth: hci0: command tx timeout [ 90.704381][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.712340][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.719612][ T5635] bridge_slave_0: entered allmulticast mode [ 90.728401][ T5635] bridge_slave_0: entered promiscuous mode [ 90.767287][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.774993][ T4941] Bluetooth: hci1: command tx timeout [ 90.777020][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.787896][ T5635] bridge_slave_1: entered allmulticast mode [ 90.795411][ T5635] bridge_slave_1: entered promiscuous mode [ 90.819119][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.826336][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.833712][ T5645] bridge_slave_0: entered allmulticast mode [ 90.841148][ T5645] bridge_slave_0: entered promiscuous mode [ 90.877398][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.884664][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.892390][ T5645] bridge_slave_1: entered allmulticast mode [ 90.899627][ T5645] bridge_slave_1: entered promiscuous mode [ 90.941894][ T4941] Bluetooth: hci2: command tx timeout [ 90.973637][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.011939][ T4941] Bluetooth: hci3: command tx timeout [ 91.025077][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.034578][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.041865][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.049000][ T5631] bridge_slave_0: entered allmulticast mode [ 91.056323][ T5631] bridge_slave_0: entered promiscuous mode [ 91.077493][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.091995][ T4941] Bluetooth: hci4: command tx timeout [ 91.108902][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.116356][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.123762][ T5631] bridge_slave_1: entered allmulticast mode [ 91.130985][ T5631] bridge_slave_1: entered promiscuous mode [ 91.151247][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.188549][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.195863][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.203806][ T5641] bridge_slave_0: entered allmulticast mode [ 91.211125][ T5641] bridge_slave_0: entered promiscuous mode [ 91.240572][ T5635] team0: Port device team_slave_0 added [ 91.256822][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.264205][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.271372][ T5641] bridge_slave_1: entered allmulticast mode [ 91.278832][ T5641] bridge_slave_1: entered promiscuous mode [ 91.309350][ T5635] team0: Port device team_slave_1 added [ 91.321559][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.333483][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.354822][ T5645] team0: Port device team_slave_0 added [ 91.360584][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.367832][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.375131][ T5648] bridge_slave_0: entered allmulticast mode [ 91.382892][ T5648] bridge_slave_0: entered promiscuous mode [ 91.422542][ T5645] team0: Port device team_slave_1 added [ 91.439289][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.446560][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.454113][ T5648] bridge_slave_1: entered allmulticast mode [ 91.461421][ T5648] bridge_slave_1: entered promiscuous mode [ 91.491503][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.524064][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.531127][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.557138][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.571616][ T5631] team0: Port device team_slave_0 added [ 91.583004][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.593185][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.600218][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.626497][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.648887][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.655901][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.682125][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.695401][ T5631] team0: Port device team_slave_1 added [ 91.712024][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.719103][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.745392][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.758795][ T5648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.807108][ T5648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.823903][ T188] cfg80211: failed to load regulatory.db [ 91.862674][ T5641] team0: Port device team_slave_0 added [ 91.884973][ T5648] team0: Port device team_slave_0 added [ 91.891274][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.898372][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.924563][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.938337][ T5641] team0: Port device team_slave_1 added [ 91.973154][ T5645] hsr_slave_0: entered promiscuous mode [ 91.980316][ T5645] hsr_slave_1: entered promiscuous mode [ 91.999966][ T5648] team0: Port device team_slave_1 added [ 92.006076][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.013234][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.039359][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.078198][ T5635] hsr_slave_0: entered promiscuous mode [ 92.084620][ T5635] hsr_slave_1: entered promiscuous mode [ 92.091105][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 92.097010][ T5635] Cannot create hsr debugfs directory [ 92.132907][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.140336][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.166853][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.179344][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.186433][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.212541][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.242910][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.249891][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.275839][ T5648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.288218][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.295366][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.321490][ T5648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.488615][ T5631] hsr_slave_0: entered promiscuous mode [ 92.495343][ T5631] hsr_slave_1: entered promiscuous mode [ 92.502484][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 92.508344][ T5631] Cannot create hsr debugfs directory [ 92.542256][ T5641] hsr_slave_0: entered promiscuous mode [ 92.548643][ T5641] hsr_slave_1: entered promiscuous mode [ 92.555163][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 92.560902][ T5641] Cannot create hsr debugfs directory [ 92.632622][ T5648] hsr_slave_0: entered promiscuous mode [ 92.639997][ T5648] hsr_slave_1: entered promiscuous mode [ 92.646437][ T5648] debugfs: 'hsr0' already exists in 'hsr' [ 92.652262][ T5648] Cannot create hsr debugfs directory [ 92.773434][ T4941] Bluetooth: hci0: command tx timeout [ 92.852197][ T4941] Bluetooth: hci1: command tx timeout [ 93.012455][ T4941] Bluetooth: hci2: command tx timeout [ 93.056562][ T5645] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.069267][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.094913][ T5645] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.102003][ T4941] Bluetooth: hci3: command tx timeout [ 93.111684][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.119629][ T5645] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.130440][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.138542][ T5645] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.149000][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.171898][ T4941] Bluetooth: hci4: command tx timeout [ 93.249149][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.261492][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.269715][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.279850][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.287999][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.299470][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.307918][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.317300][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.418344][ T5635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.428580][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.436838][ T5635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.447432][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.468055][ T5635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.478364][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.486589][ T5635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.497278][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.626172][ T5648] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.638366][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.648626][ T5648] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.663811][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.672841][ T5648] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.684286][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.692822][ T5648] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.702864][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.718228][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.824421][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.856894][ T5641] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.868193][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.879989][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.887645][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.905164][ T5641] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.915578][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.925958][ T5641] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.936239][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.945481][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.952680][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.966285][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.979809][ T5641] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.990932][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.070845][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.106555][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.117039][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.124200][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.140869][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.148063][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.265210][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.304292][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.311476][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.359022][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.366237][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.397322][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.478576][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.511560][ T5648] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.566797][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.574039][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.595507][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.611516][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.618762][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.637166][ T5635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.673612][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.680834][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.748375][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.755616][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.865744][ T4941] Bluetooth: hci0: command tx timeout [ 94.933637][ T4941] Bluetooth: hci1: command tx timeout [ 95.092787][ T4941] Bluetooth: hci2: command tx timeout [ 95.182188][ T4941] Bluetooth: hci3: command tx timeout [ 95.252393][ T4941] Bluetooth: hci4: command tx timeout [ 95.341525][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.576304][ T5645] veth0_vlan: entered promiscuous mode [ 95.642714][ T5645] veth1_vlan: entered promiscuous mode [ 95.694374][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.799332][ T5645] veth0_macvtap: entered promiscuous mode [ 95.845267][ T5645] veth1_macvtap: entered promiscuous mode [ 95.940219][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.968314][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.001762][ T5631] veth0_vlan: entered promiscuous mode [ 96.059363][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.075781][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.096301][ T5631] veth1_vlan: entered promiscuous mode [ 96.103732][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.115265][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.140093][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.181428][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.228191][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.362442][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.377234][ T5631] veth0_macvtap: entered promiscuous mode [ 96.386870][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.434469][ T5635] veth0_vlan: entered promiscuous mode [ 96.444691][ T5631] veth1_macvtap: entered promiscuous mode [ 96.500549][ T5635] veth1_vlan: entered promiscuous mode [ 96.538146][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.556972][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.565111][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.598740][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.634281][ T5648] veth0_vlan: entered promiscuous mode [ 96.659415][ T84] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.669455][ T84] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.692533][ T84] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.697031][ T5645] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.707244][ T84] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.735932][ T5635] veth0_macvtap: entered promiscuous mode [ 96.745746][ T5648] veth1_vlan: entered promiscuous mode [ 96.795272][ T5635] veth1_macvtap: entered promiscuous mode [ 96.933090][ T4941] Bluetooth: hci0: command tx timeout [ 96.974312][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.984154][ T5641] veth0_vlan: entered promiscuous mode [ 96.998240][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.012108][ T4941] Bluetooth: hci1: command tx timeout [ 97.022555][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.047708][ T5816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.058456][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.101414][ T5641] veth1_vlan: entered promiscuous mode [ 97.110424][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.121149][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.174602][ T5819] netlink: 112 bytes leftover after parsing attributes in process `syz.3.7'. [ 97.182687][ T4941] Bluetooth: hci2: command tx timeout [ 97.196161][ T5648] veth0_macvtap: entered promiscuous mode [ 97.206458][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.215647][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.234483][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.243015][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.250683][ T5648] veth1_macvtap: entered promiscuous mode [ 97.262589][ T4941] Bluetooth: hci3: command tx timeout [ 97.327742][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.342646][ T4941] Bluetooth: hci4: command tx timeout [ 97.397179][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.461394][ T5641] veth0_macvtap: entered promiscuous mode [ 97.493799][ T5641] veth1_macvtap: entered promiscuous mode [ 97.503710][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.513658][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.531971][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.541663][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.545538][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.561319][ T5822] netlink: 'syz.0.1': attribute type 8 has an invalid length. [ 97.574496][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.576183][ T5822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.593291][ T5822] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 97.604753][ T5822] netlink: 'syz.0.1': attribute type 32 has an invalid length. [ 97.612549][ T5822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.666420][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.713555][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.764284][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.779342][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.906000][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.932447][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.964773][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.985570][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.001486][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.013718][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.189356][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.223144][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.256833][ T5831] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10'. [ 98.326568][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.357363][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.474591][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.510096][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.560206][ T5836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 98.599210][ T5836] block nbd0: Unsupported socket: should be TCP or UNIX. [ 99.031688][ T5857] netlink: 'syz.0.18': attribute type 1 has an invalid length. [ 99.060475][ T5862] Zero length message leads to an empty skb [ 99.098234][ T5857] netlink: 'syz.0.18': attribute type 4 has an invalid length. [ 99.144018][ T5857] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.18'. [ 99.189264][ T5861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 99.544745][ T5886] syz.0.23 uses obsolete (PF_INET,SOCK_PACKET) [ 99.787283][ T5889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24'. [ 99.846998][ T5889] warning: `syz.1.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.895979][ T5889] netlink: 'syz.1.24': attribute type 4 has an invalid length. [ 99.948348][ T5898] netlink: 'syz.1.24': attribute type 4 has an invalid length. [ 100.256716][ T5906] tipc: Started in network mode [ 100.288753][ T5906] tipc: Node identity ac14140f, cluster identity 4711 [ 100.304208][ T5906] tipc: Enabled bearer , priority 10 [ 100.336921][ T5925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.31'. [ 100.656962][ T5934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.34'. [ 100.883835][ T5931] syzkaller0: entered promiscuous mode [ 100.899564][ T5931] syzkaller0: entered allmulticast mode [ 101.459746][ T5748] tipc: Node number set to 2886997007 [ 101.598277][ T5980] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 101.654687][ T5982] netlink: 'syz.0.44': attribute type 1 has an invalid length. [ 101.699611][ T5982] netlink: 'syz.0.44': attribute type 4 has an invalid length. [ 101.781191][ T5988] netlink: 'syz.4.46': attribute type 1 has an invalid length. [ 102.768808][ T6045] nbd: must specify at least one socket [ 102.796991][ T6044] __nla_validate_parse: 8 callbacks suppressed [ 102.797010][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 102.947097][ T6052] validate_nla: 1 callbacks suppressed [ 102.947116][ T6052] netlink: 'syz.2.62': attribute type 2 has an invalid length. [ 102.997790][ T6052] netlink: 'syz.2.62': attribute type 9 has an invalid length. [ 103.224532][ T6067] netlink: 'syz.4.67': attribute type 178 has an invalid length. [ 103.272043][ T6067] netlink: 'syz.4.67': attribute type 178 has an invalid length. [ 103.289464][ T6065] x_tables: duplicate underflow at hook 2 [ 103.586465][ T6082] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 103.633148][ T6082] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 103.670800][ T6082] netlink: 240 bytes leftover after parsing attributes in process `syz.0.71'. [ 103.709885][ T6082] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 103.739035][ T6091] netlink: 56 bytes leftover after parsing attributes in process `syz.1.73'. [ 103.862356][ T6095] netlink: 'syz.4.75': attribute type 25 has an invalid length. [ 104.347536][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 104.473037][ T6118] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 104.536571][ T6125] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 104.605246][ T6118] netlink: 'syz.1.81': attribute type 13 has an invalid length. [ 104.663618][ T6118] netlink: 'syz.1.81': attribute type 58 has an invalid length. [ 104.697107][ T6118] netlink: 152 bytes leftover after parsing attributes in process `syz.1.81'. [ 104.749703][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.81'. [ 104.841475][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'. [ 104.857098][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.936448][ T6131] bridge_slave_0 (unregistering): left allmulticast mode [ 104.973214][ T6131] bridge_slave_0 (unregistering): left promiscuous mode [ 105.009130][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.110386][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 105.470850][ T6167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.92'. [ 105.532145][ T6169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.93'. [ 105.548487][ T6164] syzkaller0: entered promiscuous mode [ 105.567050][ T6164] syzkaller0: entered allmulticast mode [ 105.984315][ T6189] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 107.132844][ T6243] ip6t_srh: unknown srh match flags 4000 [ 107.783224][ T30] audit: type=1804 audit(1785030135.483:2): pid=6269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.120" name="/newroot/27/cgroup.controllers" dev="tmpfs" ino=155 res=1 errno=0 [ 107.879042][ T30] audit: type=1800 audit(1785030135.483:3): pid=6269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.120" name="cgroup.controllers" dev="tmpfs" ino=155 res=0 errno=0 [ 107.986866][ T6271] xfrm0 speed is unknown, defaulting to 1000 [ 108.004399][ T6275] __nla_validate_parse: 40 callbacks suppressed [ 108.004417][ T6275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.122'. [ 108.041419][ T6271] xfrm0 speed is unknown, defaulting to 1000 [ 108.317919][ T6279] team0: Device gtp0 is of different type [ 108.327522][ T6291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.388620][ T6271] xfrm0 speed is unknown, defaulting to 1000 [ 108.440907][ T6271] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 108.524348][ T6271] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 108.599447][ T6271] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 108.627710][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 108.638001][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.128'. [ 108.668322][ T6300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.128'. [ 108.679428][ T6271] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.697526][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 108.744142][ T6271] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 108.752317][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 108.788882][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 108.884693][ T6314] netlink: 224 bytes leftover after parsing attributes in process `syz.2.129'. [ 108.915467][ T6271] xfrm0 speed is unknown, defaulting to 1000 [ 108.935478][ T6315] netlink: 224 bytes leftover after parsing attributes in process `syz.2.129'. [ 108.949428][ T6271] xfrm0 speed is unknown, defaulting to 1000 [ 108.976016][ T6271] xfrm0 speed is unknown, defaulting to 1000 [ 109.000016][ T6271] xfrm0 speed is unknown, defaulting to 1000 [ 109.020447][ T6271] xfrm0 speed is unknown, defaulting to 1000 [ 109.357706][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 109.440333][ T6337] bond1: invalid ARP target 0.0.0.0 specified for addition [ 109.448102][ T6337] bond1: option arp_ip_target: invalid value (0) [ 109.463417][ T6337] bond1 (unregistering): Released all slaves [ 109.619125][ T6353] tipc: Started in network mode [ 109.647131][ T6353] tipc: Node identity 4e085775502d, cluster identity 4711 [ 109.682357][ T6353] tipc: Enabled bearer , priority 0 [ 109.876422][ T6344] tipc: Disabling bearer [ 110.137321][ T6377] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.203188][ T6376] netlink: 'syz.2.147': attribute type 11 has an invalid length. [ 110.225193][ T6378] validate_nla: 2 callbacks suppressed [ 110.225210][ T6378] netlink: 'syz.1.146': attribute type 2 has an invalid length. [ 110.411389][ T6387] syzkaller1: entered promiscuous mode [ 110.431921][ T6387] syzkaller1: entered allmulticast mode [ 110.448087][ T6392] netlink: 'syz.3.153': attribute type 3 has an invalid length. [ 110.925712][ T6423] trusted_key: syz.3.160 sent an empty control message without MSG_MORE. [ 111.157210][ T6428] pimreg: entered allmulticast mode [ 111.200601][ T6441] netlink: 'syz.0.166': attribute type 12 has an invalid length. [ 111.270267][ T6434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.330890][ T6429] syzkaller0: entered promiscuous mode [ 111.347233][ T6451] netlink: 'syz.0.166': attribute type 12 has an invalid length. [ 111.382991][ T6429] syzkaller0: entered allmulticast mode [ 111.529579][ T6450] bridge_slave_1: left allmulticast mode [ 111.554833][ T6450] bridge_slave_1: left promiscuous mode [ 111.580615][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.645333][ T6450] bridge_slave_0: left allmulticast mode [ 111.679020][ T6450] bridge_slave_0: left promiscuous mode [ 111.694755][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.966035][ T5287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.202776][ T6488] vxcan0: tx address claim with dlc 0 [ 112.446208][ T6506] syz_tun: entered allmulticast mode [ 112.463901][ T6506] dvmrp8: entered allmulticast mode [ 113.221079][ T6504] syz_tun: left allmulticast mode [ 114.743815][ T6468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.047211][ T6519] Bluetooth: MGMT ver 1.23 [ 115.334571][ T6537] __nla_validate_parse: 11 callbacks suppressed [ 115.334589][ T6537] netlink: 244 bytes leftover after parsing attributes in process `syz.2.189'. [ 115.398192][ T6542] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 115.428663][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'. [ 115.723535][ T6553] netlink: 14 bytes leftover after parsing attributes in process `syz.3.195'. [ 115.745341][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 116.043491][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 116.082914][ T6565] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 116.110263][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 116.111731][ T5726] IPVS: starting estimator thread 0... [ 116.253182][ T6571] IPVS: using max 27 ests per chain, 64800 per kthread [ 116.265960][ T6578] netlink: 'syz.1.202': attribute type 12 has an invalid length. [ 116.321426][ T6581] xt_TPROXY: Can be used only with -p tcp or -p udp [ 116.601678][ T6598] netlink: 59 bytes leftover after parsing attributes in process `syz.3.209'. [ 132.773969][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.781253][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 176.250537][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 176.271903][ T6622] vlan2: entered promiscuous mode [ 176.282777][ T6622] veth0_virt_wifi: entered promiscuous mode [ 176.900350][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'. [ 177.164664][ T6672] netlink: 'syz.3.227': attribute type 2 has an invalid length. [ 177.210298][ T6674] tipc: Started in network mode [ 177.238387][ T6674] tipc: Node identity ac14142f, cluster identity 4711 [ 177.276755][ T6674] tipc: Enabling of bearer rejected, failed to enable media [ 177.468334][ T6672] xfrm0 speed is unknown, defaulting to 1000 [ 177.647610][ T6693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.234'. [ 177.921462][ T6697] bond1 (unregistering): Released all slaves [ 178.412366][ T6728] tipc: Enabled bearer , priority 10 [ 178.477227][ T6736] xt_bpf: check failed: parse error [ 178.684401][ T6746] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 179.100993][ T6764] x_tables: duplicate entry at hook 1 [ 179.160630][ T6766] Driver unsupported XDP return value 0 on prog (id 67) dev N/A, expect packet loss! [ 179.364098][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.259'. [ 179.376227][ T6750] netlink: 'syz.1.251': attribute type 4 has an invalid length. [ 179.557350][ T9] tipc: Node number set to 2886997039 [ 179.672577][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 179.701673][ T6790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.855667][ T6793] syzkaller1: entered promiscuous mode [ 179.889898][ T6793] syzkaller1: entered allmulticast mode [ 179.914255][ T6800] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 179.928937][ T6800] netlink: 128 bytes leftover after parsing attributes in process `syz.4.268'. [ 180.099404][ T6811] netlink: 'syz.1.271': attribute type 10 has an invalid length. [ 180.127913][ T6811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.271'. [ 180.240813][ T6811] team0: Port device geneve1 added [ 180.533225][ T6840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.278'. [ 180.916095][ T5755] IPVS: starting estimator thread 0... [ 180.928972][ T6860] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 181.026096][ T6863] IPVS: using max 29 ests per chain, 69600 per kthread [ 181.119398][ T6867] netlink: 'syz.1.287': attribute type 1 has an invalid length. [ 181.187197][ T6876] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 181.370167][ T6886] netlink: 388 bytes leftover after parsing attributes in process `syz.3.291'. [ 181.406586][ T6890] netlink: 'syz.1.293': attribute type 11 has an invalid length. [ 181.448724][ T6890] netlink: 'syz.1.293': attribute type 12 has an invalid length. [ 181.624795][ T6901] netlink: 256 bytes leftover after parsing attributes in process `syz.3.297'. [ 181.680735][ T6901] netlink: 256 bytes leftover after parsing attributes in process `syz.3.297'. [ 181.820580][ T6912] netlink: 40 bytes leftover after parsing attributes in process `syz.2.302'. [ 181.845432][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 181.851388][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 181.886749][ T6914] netlink: 224 bytes leftover after parsing attributes in process `syz.1.301'. [ 181.909943][ T6916] syz_tun: entered allmulticast mode [ 181.917216][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 181.939327][ T6913] syz_tun: left allmulticast mode [ 181.948593][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.303'. [ 181.970069][ T6920] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 182.550153][ T6954] netlink: 36 bytes leftover after parsing attributes in process `syz.1.313'. [ 182.586937][ T6957] Bluetooth: MGMT ver 1.23 [ 182.748889][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.757654][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.189174][ T6986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.222808][ T7046] netlink: 'syz.0.333': attribute type 1 has an invalid length. [ 186.340515][ T7055] netlink: 'syz.3.337': attribute type 4 has an invalid length. [ 186.351609][ T7055] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 186.407465][ T7058] __nla_validate_parse: 8 callbacks suppressed [ 186.407484][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'. [ 186.424430][ T7058] netlink: 'syz.1.336': attribute type 5 has an invalid length. [ 186.432632][ T7058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.336'. [ 186.462817][ T7060] netlink: 'syz.4.339': attribute type 11 has an invalid length. [ 186.480722][ T7058] geneve3: entered promiscuous mode [ 186.489383][ T7058] geneve3: entered allmulticast mode [ 186.498261][ T7065] netlink: 'syz.4.339': attribute type 11 has an invalid length. [ 186.514101][ T48] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 186.527419][ T7060] netlink: 132 bytes leftover after parsing attributes in process `syz.4.339'. [ 186.530576][ T10] IPVS: starting estimator thread 0... [ 186.548478][ T48] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 186.579260][ T7065] netlink: 132 bytes leftover after parsing attributes in process `syz.4.339'. [ 186.595405][ T48] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 186.611502][ T7063] erspan0: entered promiscuous mode [ 186.655859][ T7066] IPVS: using max 31 ests per chain, 74400 per kthread [ 186.662788][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 186.678421][ T48] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 186.798193][ T7070] netlink: 1240 bytes leftover after parsing attributes in process `syz.0.341'. [ 187.009217][ T7083] syzkaller1: entered promiscuous mode [ 187.018558][ T7083] syzkaller1: entered allmulticast mode [ 187.300837][ T7087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.347'. [ 187.314899][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 187.344729][ T7087] netlink: 32 bytes leftover after parsing attributes in process `syz.1.347'. [ 187.350794][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 187.591189][ T7115] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 187.730931][ T7120] tipc: Failed to remove unknown binding: 66,0,0/0:547843725/547843726 [ 187.744487][ T7120] tipc: Failed to remove unknown binding: 66,0,0/0:547843725/547843726 [ 188.102841][ T7138] openvswitch: netlink: IP tunnel dst address not specified [ 188.129882][ T7141] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 188.814888][ T7183] netlink: 'syz.0.372': attribute type 4 has an invalid length. [ 188.873718][ T7183] .`: renamed from bond0 (while UP) [ 189.168830][ T7204] netlink: 'syz.2.377': attribute type 83 has an invalid length. [ 189.240595][ T7209] syz_tun: refused to change device tx_queue_len [ 189.433609][ T7220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.166985][ T7245] bond1: invalid ARP target 0.0.0.0 specified for addition [ 190.176967][ T7245] bond1: option arp_ip_target: invalid value (0) [ 190.193611][ T7245] bond1 (unregistering): Released all slaves [ 190.278583][ T7261] tun0: tun_chr_ioctl cmd 1074025675 [ 190.285911][ T7261] tun0: persist enabled [ 190.744427][ T7289] netlink: 'syz.0.396': attribute type 12 has an invalid length. [ 191.015498][ T7301] x_tables: duplicate underflow at hook 3 [ 191.073599][ T7301] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.081682][ T7301] IPv6: NLM_F_CREATE should be set when creating new route [ 191.089057][ T7301] IPv6: NLM_F_CREATE should be set when creating new route [ 191.096452][ T7301] IPv6: NLM_F_CREATE should be set when creating new route [ 191.524997][ T7323] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 191.589251][ T7323] netlink: 'syz.3.407': attribute type 2 has an invalid length. [ 191.781374][ T7334] __nla_validate_parse: 74 callbacks suppressed [ 191.781394][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.409'. [ 192.314679][ T7351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.416'. [ 192.381784][ T7360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.417'. [ 192.604545][ T5755] IPVS: starting estimator thread 0... [ 192.633851][ T7377] xt_l2tp: v2 doesn't support IP mode [ 192.696064][ T7378] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 192.722704][ T7379] IPVS: using max 27 ests per chain, 64800 per kthread [ 192.757398][ T7377] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 192.971158][ T7396] ipt_REJECT: TCP_RESET invalid for non-tcp [ 193.024128][ T7399] netlink: 68 bytes leftover after parsing attributes in process `syz.4.426'. [ 193.065880][ T7402] netlink: 16 bytes leftover after parsing attributes in process `syz.0.429'. [ 193.088364][ T7404] sctp: [Deprecated]: syz.1.430 (pid 7404) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.088364][ T7404] Use struct sctp_sack_info instead [ 193.190266][ T7400] syzkaller0: entered promiscuous mode [ 193.202304][ T7400] syzkaller0: entered allmulticast mode [ 193.316526][ T7411] netlink: 248 bytes leftover after parsing attributes in process `syz.1.433'. [ 193.326768][ T7411] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.433'. [ 193.547107][ T7422] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 194.214845][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.222218][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.523855][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.524483][ T7415] syzkaller0: entered promiscuous mode [ 194.542045][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.554173][ T7415] syzkaller0: entered allmulticast mode [ 194.698447][ T7427] netlink: 'syz.0.437': attribute type 2 has an invalid length. [ 194.725067][ T7427] netlink: 156 bytes leftover after parsing attributes in process `syz.0.437'. [ 195.689968][ T7427] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.148905][ T7427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.200771][ T7427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.728013][ T57] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.766102][ T7497] netlink: 'syz.0.447': attribute type 1 has an invalid length. [ 196.801689][ T7497] netlink: 'syz.0.447': attribute type 2 has an invalid length. [ 196.825634][ T57] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.838305][ T7500] netlink: 'syz.0.447': attribute type 1 has an invalid length. [ 196.857079][ T57] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.874045][ T7500] netlink: 'syz.0.447': attribute type 2 has an invalid length. [ 197.190663][ T7514] syzkaller0: entered promiscuous mode [ 197.209514][ T7514] syzkaller0: entered allmulticast mode [ 197.239115][ T7519] netlink: 84 bytes leftover after parsing attributes in process `syz.1.454'. [ 197.518514][ T7525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.456'. [ 197.588722][ T7533] netlink: 'syz.3.457': attribute type 3 has an invalid length. [ 197.778809][ T7544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.786148][ T7544] IPv6: NLM_F_CREATE should be set when creating new route [ 197.793453][ T7544] IPv6: NLM_F_CREATE should be set when creating new route [ 197.800692][ T7544] IPv6: NLM_F_CREATE should be set when creating new route [ 197.808121][ T7545] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.835723][ T7545] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.855106][ T7544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.867546][ T7544] netlink: 20 bytes leftover after parsing attributes in process `syz.0.460'. [ 197.878202][ T7544] openvswitch: netlink: Flow actions attr not present in new flow. [ 197.905224][ T7540] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 197.921391][ T7540] bond2 (unregistering): Released all slaves [ 197.939950][ T7552] netlink: 'syz.2.461': attribute type 13 has an invalid length. [ 198.479104][ T7578] netlink: 'syz.3.469': attribute type 30 has an invalid length. [ 198.530837][ T7579] netlink: 'syz.3.469': attribute type 30 has an invalid length. [ 198.686069][ T7596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.470'. [ 198.739244][ T7596] bond0: entered promiscuous mode [ 198.757434][ T7596] bond_slave_0: entered promiscuous mode [ 198.778210][ T7596] bond_slave_1: entered promiscuous mode [ 198.818793][ T7596] gretap0: entered promiscuous mode [ 198.844692][ T7596] hsr1: entered promiscuous mode [ 198.912405][ T7575] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 198.928535][ T7607] netlink: 'syz.3.477': attribute type 11 has an invalid length. [ 198.952539][ T7575] bond1 (unregistering): Released all slaves [ 199.119029][ T7609] bridge_slave_1: left allmulticast mode [ 199.126602][ T7609] bridge_slave_1: left promiscuous mode [ 199.137033][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.159249][ T7609] bridge_slave_0: left allmulticast mode [ 199.173587][ T7609] bridge_slave_0: left promiscuous mode [ 199.189353][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.380729][ T7634] netlink: 4172 bytes leftover after parsing attributes in process `syz.1.480'. [ 199.391999][ T7630] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 199.396483][ T5748] IPVS: starting estimator thread 0... [ 199.514177][ T7635] IPVS: using max 24 ests per chain, 57600 per kthread [ 199.642393][ T7642] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 199.747404][ T7647] erspan0: entered promiscuous mode [ 199.761316][ T7647] erspan0: entered allmulticast mode [ 199.932301][ T7659] netlink: 84 bytes leftover after parsing attributes in process `syz.3.488'. [ 199.974321][ T7647] bond1: entered promiscuous mode [ 199.984043][ T7660] lo: Caught tx_queue_len zero misconfig [ 200.249724][ T7677] netlink: 'syz.1.492': attribute type 12 has an invalid length. [ 200.400461][ T7677] bond2: option primary_reselect: invalid value (255) [ 200.447503][ T7677] bond2 (unregistering): Released all slaves [ 200.577453][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 200.747466][ T7701] netlink: 64 bytes leftover after parsing attributes in process `syz.1.499'. [ 200.771355][ T7694] team0 (unregistering): Port device team_slave_0 removed [ 200.819611][ T7694] team0 (unregistering): Port device team_slave_1 removed [ 200.886705][ T7700] netlink: 48 bytes leftover after parsing attributes in process `syz.3.495'. [ 201.162488][ T7729] veth1_to_team: Caught tx_queue_len zero misconfig [ 201.271077][ T7683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.366461][ T7744] netlink: 60 bytes leftover after parsing attributes in process `syz.1.511'. [ 202.080794][ T7784] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 202.120420][ T7761] bond2: Unable to set up delay as MII monitoring is disabled [ 202.169228][ T7761] bond2 (unregistering): Released all slaves [ 203.518040][ T7837] lo: entered promiscuous mode [ 203.566367][ T7837] tunl0: entered promiscuous mode [ 203.662665][ T7837] gre0: entered promiscuous mode [ 203.756555][ T7837] gretap0: entered promiscuous mode [ 203.993285][ T7854] netlink: 'syz.0.541': attribute type 21 has an invalid length. [ 204.041343][ T7837] ip_vti0: entered promiscuous mode [ 204.196777][ T7854] netlink: 'syz.0.541': attribute type 1 has an invalid length. [ 204.245763][ T7860] veth0_to_bond: entered promiscuous mode [ 204.272613][ T7860] veth0_to_bond: entered allmulticast mode [ 204.410331][ T7865] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 204.467349][ T7867] netlink: 'syz.0.546': attribute type 4 has an invalid length. [ 204.599197][ T7867] xt_hashlimit: size too large, truncated to 1048576 [ 204.630287][ T7865] bond1: entered promiscuous mode [ 204.675784][ T7865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.814748][ T7879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.874907][ T7879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.965449][ T7879] bond0 (unregistering): Released all slaves [ 205.021538][ T7886] netlink: 540 bytes leftover after parsing attributes in process `syz.4.550'. [ 205.025191][ T7885] netlink: 540 bytes leftover after parsing attributes in process `syz.4.550'. [ 205.040735][ T7886] openvswitch: netlink: Flow key attr not present in new flow. [ 205.049337][ T7885] openvswitch: netlink: Flow key attr not present in new flow. [ 205.265702][ T7870] syzkaller0: entered promiscuous mode [ 205.296576][ T7870] syzkaller0: entered allmulticast mode [ 205.408720][ T7883] ipvlan2: entered allmulticast mode [ 205.445763][ T7883] bond1: entered allmulticast mode [ 205.458815][ T7897] openvswitch: netlink: IP tunnel dst address not specified [ 205.532209][ T7899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.555'. [ 207.488048][ T7914] netlink: 'syz.1.558': attribute type 10 has an invalid length. [ 207.578876][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 207.602542][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 207.669860][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 207.683541][ T7914] veth0_to_bond: entered promiscuous mode [ 207.691241][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 207.749344][ T7923] netlink: 'syz.3.562': attribute type 12 has an invalid length. [ 207.756981][ T7921] netlink: 'syz.3.562': attribute type 12 has an invalid length. [ 207.793805][ T7921] netlink: 'syz.3.562': attribute type 11 has an invalid length. [ 207.809929][ T7923] netlink: 'syz.3.562': attribute type 11 has an invalid length. [ 207.993599][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 208.031471][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 208.074400][ T7923] netlink: 'syz.3.562': attribute type 12 has an invalid length. [ 208.141295][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 208.658609][ T7955] macsec1: entered promiscuous mode [ 208.679550][ T7955] bridge0: entered promiscuous mode [ 208.698852][ T7955] macsec1: entered allmulticast mode [ 208.715004][ T7955] bridge0: entered allmulticast mode [ 208.749039][ T7955] bridge0: port 3(macsec1) entered blocking state [ 208.800903][ T7955] bridge0: port 3(macsec1) entered disabled state [ 208.891522][ T7955] bridge0: left allmulticast mode [ 208.998769][ T7490] bridge0: left promiscuous mode [ 209.515741][ T7974] syzkaller0: entered promiscuous mode [ 209.568834][ T7974] syzkaller0: entered allmulticast mode [ 210.230162][ T8018] __nla_validate_parse: 44 callbacks suppressed [ 210.230182][ T8018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.588'. [ 210.256194][ T8018] netlink: 13 bytes leftover after parsing attributes in process `syz.0.588'. [ 210.957637][ T8021] raw_sendmsg: syz.3.589 forgot to set AF_INET. Fix it! [ 211.659024][ T7999] Bluetooth: hci0: command 0x0406 tx timeout [ 211.666006][ T7999] Bluetooth: hci1: command 0x0406 tx timeout [ 211.673951][ T7999] Bluetooth: hci2: command 0x0406 tx timeout [ 211.674306][ T7998] Bluetooth: hci4: command 0x0406 tx timeout [ 211.681350][ T7999] Bluetooth: hci3: command 0x0406 tx timeout [ 212.442591][ T8006] bond0: ARP target 8.4.0.0 is already present [ 212.448848][ T8006] bond0: option arp_ip_target: invalid value (1032) [ 212.458764][ T8010] bond0: Caught tx_queue_len zero misconfig [ 212.526487][ T8018] veth3: entered promiscuous mode [ 212.574948][ T8019] pimreg3: entered allmulticast mode [ 213.264161][ T8056] netlink: 388 bytes leftover after parsing attributes in process `syz.1.599'. [ 213.473687][ T8063] syzkaller0: entered promiscuous mode [ 213.492046][ T8063] syzkaller0: entered allmulticast mode [ 213.540100][ T8068] syzkaller0: entered promiscuous mode [ 213.552690][ T8068] syzkaller0: entered allmulticast mode [ 213.580159][ T8068] tipc: Enabled bearer , priority 0 [ 213.796928][ T8072] netlink: 60 bytes leftover after parsing attributes in process `syz.2.603'. [ 214.214090][ T8053] tipc: Resetting bearer [ 214.720054][ T8053] tipc: Disabling bearer [ 216.475461][ T8098] netlink: 516 bytes leftover after parsing attributes in process `syz.1.609'. [ 216.635396][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.609'. [ 216.806493][ T8098] hsr_slave_1 (unregistering): left promiscuous mode [ 216.938328][ T8117] erspan0: entered promiscuous mode [ 216.954010][ T8117] erspan0: entered allmulticast mode [ 217.488338][ T8132] validate_nla: 41 callbacks suppressed [ 217.488368][ T8132] netlink: 'syz.3.620': attribute type 3 has an invalid length. [ 217.758250][ T8147] veth0_macvtap: Caught tx_queue_len zero misconfig [ 217.951208][ T8158] netlink: 224 bytes leftover after parsing attributes in process `syz.1.629'. [ 218.004913][ T8155] gretap0: entered promiscuous mode [ 218.013283][ T8155] vlan2: entered promiscuous mode [ 218.646099][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.747874][ T8187] bridge_slave_0 (unregistering): left allmulticast mode [ 218.781955][ T8187] bridge_slave_0 (unregistering): left promiscuous mode [ 218.823034][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.441705][ T8205] netlink: 80 bytes leftover after parsing attributes in process `syz.2.642'. [ 219.749697][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 220.046221][ T8228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.649'. [ 220.330782][ T8245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.655'. [ 220.442740][ T8246] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.729927][ T8258] netlink: 64 bytes leftover after parsing attributes in process `syz.3.658'. [ 221.026280][ T8263] : renamed from bond0 (while UP) [ 221.112583][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.665'. [ 221.458559][ T8282] lo: left promiscuous mode [ 221.473928][ T8282] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 221.513547][ T8282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.680162][ T8290] netlink: 5 bytes leftover after parsing attributes in process `syz.0.669'. [ 221.704886][ T8290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'. [ 221.995462][ T8296] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.624346][ T8316] syzkaller0: entered promiscuous mode [ 222.664816][ T8316] syzkaller0: entered allmulticast mode [ 222.723832][ T8320] tipc: Enabled bearer , priority 0 [ 222.772212][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'. [ 222.821554][ T8316] tipc: Resetting bearer [ 222.851684][ T8311] tipc: Resetting bearer [ 222.905598][ T8311] tipc: Disabling bearer [ 222.950121][ T8325] bridge_slave_1: left promiscuous mode [ 222.970372][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.510513][ T8339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.640000][ T8343] erspan0: left allmulticast mode [ 223.758678][ T8347] netlink: 104 bytes leftover after parsing attributes in process `syz.0.685'. [ 224.055177][ T8351] tipc: Enabled bearer , priority 10 [ 224.111272][ T8359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.688'. [ 224.158587][ T8359] netlink: 120 bytes leftover after parsing attributes in process `syz.0.688'. [ 224.197977][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 224.345338][ T8365] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20004 [ 224.372342][ T8366] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20004 [ 224.404567][ T8369] netlink: 72 bytes leftover after parsing attributes in process `syz.3.690'. [ 224.444181][ T8369] netlink: 72 bytes leftover after parsing attributes in process `syz.3.690'. [ 224.855059][ T8393] netlink: 'syz.2.693': attribute type 1 has an invalid length. [ 224.884859][ T8393] netlink: 'syz.2.693': attribute type 3 has an invalid length. [ 224.901439][ T8393] netlink: 224 bytes leftover after parsing attributes in process `syz.2.693'. [ 225.033367][ T5744] tipc: Node number set to 505763701 [ 225.112371][ T8399] bridge1: entered promiscuous mode [ 225.144968][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bbf1000: rx timeout, send abort [ 225.158025][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807bbf1000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 225.182592][ T8399] bridge1: entered allmulticast mode [ 225.547214][ T8414] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 226.532011][ T7996] Bluetooth: hci4: command 0x0406 tx timeout [ 226.834698][ T8455] bond0: Removing last arp target with arp_interval on [ 227.545509][ T8497] __nla_validate_parse: 2 callbacks suppressed [ 227.545556][ T8497] netlink: 64 bytes leftover after parsing attributes in process `syz.1.721'. [ 227.847854][ T8510] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 227.938177][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.727'. [ 228.057898][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'. [ 228.651485][ T8551] team0: entered promiscuous mode [ 228.664258][ T8551] team_slave_0: entered promiscuous mode [ 228.675476][ T8551] team_slave_1: entered promiscuous mode [ 228.818581][ T8555] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 228.905983][ T8555] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 228.960818][ T8555] gretap1: entered promiscuous mode [ 228.979798][ T8555] gretap1: entered allmulticast mode [ 229.116568][ T8562] syzkaller0: entered promiscuous mode [ 229.139799][ T8562] syzkaller0: entered allmulticast mode [ 229.365602][ T8578] netlink: 'syz.4.743': attribute type 10 has an invalid length. [ 229.631346][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 229.688377][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.697510][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.732246][ T8593] netlink: 'syz.4.747': attribute type 1 has an invalid length. [ 229.817067][ T8593] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 230.041354][ T8604] netlink: 256 bytes leftover after parsing attributes in process `syz.0.751'. [ 230.228708][ T8608] netlink: 'syz.1.749': attribute type 3 has an invalid length. [ 230.252882][ T8608] netlink: 666 bytes leftover after parsing attributes in process `syz.1.749'. [ 230.288988][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 230.303896][ T8615] openvswitch: netlink: Flow key attribute not present in set flow. [ 230.396257][ T8619] gre1: entered promiscuous mode [ 230.922733][ T8607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.250556][ T8651] veth0: entered promiscuous mode [ 231.297316][ T8651] veth0: left promiscuous mode [ 231.336842][ T8651] netlink: 68 bytes leftover after parsing attributes in process `syz.1.759'. [ 231.583271][ T8660] netlink: 20 bytes leftover after parsing attributes in process `syz.4.763'. [ 232.059264][ T8670] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 232.130634][ T8673] netlink: 512 bytes leftover after parsing attributes in process `syz.0.769'. [ 232.162388][ T8670] netlink: 'syz.4.766': attribute type 1 has an invalid length. [ 233.194114][ T8702] x_tables: unsorted entry at hook 3 [ 233.965441][ T8717] __nla_validate_parse: 3 callbacks suppressed [ 233.965461][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 234.003242][ T8717] netlink: 14 bytes leftover after parsing attributes in process `syz.2.777'. [ 234.068725][ T8718] netlink: 'syz.1.778': attribute type 11 has an invalid length. [ 234.334606][ T8729] netlink: 'syz.0.781': attribute type 1 has an invalid length. [ 234.387304][ T8726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.472313][ T8729] bond0: entered promiscuous mode [ 234.478001][ T8729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.488304][ T8735] netlink: 'syz.4.783': attribute type 1 has an invalid length. [ 234.574015][ T8735] bond3: entered promiscuous mode [ 234.585247][ T8735] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.628514][ T8735] netlink: 120 bytes leftover after parsing attributes in process `syz.4.783'. [ 234.650276][ T8729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.682777][ T8729] bond0: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 234.699459][ T8729] bond0: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 234.719553][ T8729] bond0: (slave ip6gre2): making interface the new active one [ 234.728398][ T8729] ip6gre2: entered promiscuous mode [ 234.755925][ T8729] bond0: (slave ip6gre2): Enslaving as an active interface with an up link [ 235.075345][ T8743] bond4: option all_slaves_active: invalid value (222) [ 235.133772][ T8743] bond4 (unregistering): Released all slaves [ 235.404822][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.791'. [ 235.414454][ T8771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.791'. [ 235.788910][ T8785] netlink: 'syz.4.796': attribute type 1 has an invalid length. [ 235.967329][ T8785] bond4: entered promiscuous mode [ 235.973659][ T8785] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.079398][ T8795] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 236.435822][ T8813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.801'. [ 236.633000][ T8813] netlink: 'syz.2.801': attribute type 3 has an invalid length. [ 236.685680][ T8813] netlink: 9 bytes leftover after parsing attributes in process `syz.2.801'. [ 236.860514][ T8821] netlink: 128 bytes leftover after parsing attributes in process `syz.1.804'. [ 236.884647][ T8821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.804'. [ 237.449502][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.811'. [ 237.468461][ T8841] block nbd0: Unsupported socket: should be TCP or UNIX. [ 237.498953][ T8843] netlink: 'syz.3.810': attribute type 1 has an invalid length. [ 237.563900][ T8836] macvlan0: entered promiscuous mode [ 237.583524][ T8836] macvlan0: entered allmulticast mode [ 237.752703][ T8843] bond3: entered promiscuous mode [ 237.769001][ T8843] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.818376][ T8844] bond3: (slave bridge0): making interface the new active one [ 237.827330][ T8844] bridge0: entered promiscuous mode [ 237.840268][ T8844] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 237.885561][ T8851] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 237.905883][ T8851] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 238.017080][ T8851] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 238.053263][ T8851] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 238.172944][ T8851] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 238.201340][ T8851] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 238.218579][ T8861] sctp: [Deprecated]: syz.4.817 (pid 8861) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.218579][ T8861] Use struct sctp_sack_info instead [ 238.291213][ T8861] veth0_to_bond: default FDB implementation only supports local addresses [ 238.318420][ T8851] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 238.342166][ T8851] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 238.428294][ T8851] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 238.445125][ T8851] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 238.726578][ T8879] netlink: 'syz.0.821': attribute type 1 has an invalid length. [ 239.052860][ T8879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.424111][ T8897] tc action pedit unable to extract header offset for header type (0x4) [ 239.433877][ T8897] tc action pedit unable to extract header offset for header type (0x4) [ 239.442316][ T8897] tc action pedit unable to extract header offset for header type (0x4) [ 239.450690][ T8897] tc action pedit unable to extract header offset for header type (0x4) [ 239.459087][ T8897] tc action pedit unable to extract header offset for header type (0x4) [ 239.467500][ T8897] tc action pedit unable to extract header offset for header type (0x4) [ 239.475884][ T8897] tc action pedit unable to extract header offset for header type (0x4) [ 239.484270][ T8897] tc action pedit unable to extract header offset for header type (0x4) [ 239.492657][ T8897] tc action pedit unable to extract header offset for header type (0x4) [ 239.501027][ T8897] tc action pedit unable to extract header offset for header type (0x4) [ 239.509455][ T8897] 0: reclassify loop, rule prio 0, protocol 800 [ 239.947350][ T8908] __nla_validate_parse: 3 callbacks suppressed [ 239.947369][ T8908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.831'. [ 240.018365][ T8908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.831'. [ 240.076103][ T8911] netlink: 84 bytes leftover after parsing attributes in process `syz.1.832'. [ 240.118336][ T8911] netlink: 84 bytes leftover after parsing attributes in process `syz.1.832'. [ 240.159595][ T8911] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 240.715466][ T8932] netlink: 104 bytes leftover after parsing attributes in process `syz.2.837'. [ 240.859376][ T7996] block nbd0: Receive control failed (result -32) [ 240.903119][ T8941] netlink: 300 bytes leftover after parsing attributes in process `syz.0.839'. [ 241.627843][ T8967] netlink: 'syz.3.845': attribute type 49 has an invalid length. [ 241.764449][ T8977] netlink: 'syz.2.848': attribute type 1 has an invalid length. [ 241.787655][ T8977] netlink: 228 bytes leftover after parsing attributes in process `syz.2.848'. [ 241.931527][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 242.130815][ T8967] ip6gretap0: entered promiscuous mode [ 242.150671][ T8967] ip6gretap0: entered allmulticast mode [ 242.183246][ T8994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.851'. [ 242.194882][ T8978] netlink: 'syz.2.848': attribute type 1 has an invalid length. [ 242.208832][ T8978] netlink: 228 bytes leftover after parsing attributes in process `syz.2.848'. [ 242.469606][ T9000] netlink: 'syz.2.854': attribute type 8 has an invalid length. [ 242.506797][ T9002] netlink: 'syz.0.855': attribute type 1 has an invalid length. [ 242.576402][ T9002] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 242.628932][ T9001] tipc: Trying to set illegal importance in message [ 242.841211][ T9016] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 242.881692][ T9016] syzkaller0: entered promiscuous mode [ 242.902720][ T9016] syzkaller0: entered allmulticast mode [ 242.934843][ T9015] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 243.295663][ T9033] tipc: Enabling of bearer rejected, already enabled [ 243.604806][ T9053] bridge_slave_1: left allmulticast mode [ 243.622225][ T9053] bridge_slave_1: left promiscuous mode [ 243.695826][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.815753][ T9053] bridge_slave_0: left allmulticast mode [ 243.856216][ T9053] bridge_slave_0: left promiscuous mode [ 243.914691][ T9053] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.511457][ T9094] netlink: 'syz.1.871': attribute type 39 has an invalid length. [ 244.651525][ T9086] veth1_macvtap: left promiscuous mode [ 244.824517][ T9073] kthread_run failed with err -4 [ 245.044846][ T9088] syzkaller0: entered promiscuous mode [ 245.067826][ T9088] syzkaller0: entered allmulticast mode [ 245.157405][ T9112] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20003 [ 245.567571][ T9117] __nla_validate_parse: 2 callbacks suppressed [ 245.567590][ T9117] netlink: 92 bytes leftover after parsing attributes in process `syz.2.877'. [ 245.586544][ T9120] netlink: 92 bytes leftover after parsing attributes in process `syz.2.877'. [ 247.275682][ T9126] ip6tnl1: entered allmulticast mode [ 247.678813][ T9140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.749574][ T9140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.567766][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.890'. [ 248.596042][ T9191] netlink: 'syz.0.892': attribute type 12 has an invalid length. [ 248.628138][ T9191] netlink: 132 bytes leftover after parsing attributes in process `syz.0.892'. [ 248.749192][ T9191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.892'. [ 248.996574][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 249.081824][ T9203] netlink: 2 bytes leftover after parsing attributes in process `syz.2.895'. [ 249.116343][ T9209] netlink: 84 bytes leftover after parsing attributes in process `syz.0.896'. [ 249.162223][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 249.172681][ T9203] netlink: 2 bytes leftover after parsing attributes in process `syz.2.895'. [ 250.047176][ T9232] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 250.658428][ T9244] Cannot find del_set index 3 as target [ 251.229366][ T9254] bond2: entered promiscuous mode [ 251.301840][ T9269] __nla_validate_parse: 129 callbacks suppressed [ 251.301861][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.914'. [ 251.358288][ T9254] syzkaller0: entered promiscuous mode [ 251.389543][ T9254] syzkaller0: entered allmulticast mode [ 251.421509][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 251.464995][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 251.766782][ T9280] syzkaller0: entered promiscuous mode [ 251.801571][ T9280] syzkaller0: entered allmulticast mode [ 252.236673][ T9295] syzkaller0: entered promiscuous mode [ 252.260695][ T9295] syzkaller0: entered allmulticast mode [ 252.311037][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.922'. [ 252.831689][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 253.097553][ T9343] IPVS: set_ctl: invalid protocol: 2 10.1.1.0:20001 [ 253.167418][ T9340] xfrm0 speed is unknown, defaulting to 1000 [ 253.659241][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 254.175138][ T9375] ipvlan1: entered promiscuous mode [ 254.188544][ T9375] ipvlan1: entered allmulticast mode [ 254.195460][ T9375] veth0_vlan: entered allmulticast mode [ 254.245783][ T9379] geneve2: entered promiscuous mode [ 254.265262][ T9379] geneve2: entered allmulticast mode [ 254.285849][ T290] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 254.307756][ T290] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 254.429631][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'. [ 254.462231][ T1162] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 254.524109][ T1162] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 254.853211][ T9400] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 254.878074][ T9400] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 254.911040][ T9404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.951'. [ 254.950037][ T9404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.951'. [ 255.049955][ T9409] dvmrp0: entered allmulticast mode [ 255.280142][ T9418] netlink: 44 bytes leftover after parsing attributes in process `syz.0.954'. [ 255.308767][ T9418] netlink: 'syz.0.954': attribute type 3 has an invalid length. [ 255.433125][ T9416] macvtap1: entered promiscuous mode [ 255.440335][ T9416] macvtap1: entered allmulticast mode [ 255.447832][ T9416] veth1_vlan: entered allmulticast mode [ 255.550950][ T9423] netlink: 'syz.0.956': attribute type 12 has an invalid length. [ 255.593823][ T9423] bridge_slave_1: left allmulticast mode [ 255.631936][ T9423] bridge_slave_1: left promiscuous mode [ 255.645559][ T9423] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.669410][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.677186][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.771131][ T9424] bond0: (slave gre0): refused to change device type [ 255.781485][ T9426] netlink: 'syz.4.957': attribute type 9 has an invalid length. [ 256.005068][ T9431] xt_hashlimit: size too large, truncated to 1048576 [ 256.142702][ T9438] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 256.209293][ T9436] netlink: 'syz.2.959': attribute type 5 has an invalid length. [ 256.327816][ T9445] __nla_validate_parse: 1 callbacks suppressed [ 256.327853][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 256.506995][ T9451] netlink: 80 bytes leftover after parsing attributes in process `syz.3.963'. [ 256.766398][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.964'. [ 256.816379][ T9456] netlink: 180 bytes leftover after parsing attributes in process `syz.4.964'. [ 256.930304][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.964'. [ 257.302206][ T9460] syzkaller0: entered promiscuous mode [ 257.313636][ T9460] syzkaller0: entered allmulticast mode [ 257.430596][ T9468] bond2 (unregistering): Released all slaves [ 257.827969][ T9492] netlink: 'syz.3.976': attribute type 2 has an invalid length. [ 257.848387][ T9492] netlink: 244 bytes leftover after parsing attributes in process `syz.3.976'. [ 260.329830][ T9528] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 260.438323][ T9536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.985'. [ 260.493759][ T9528] bond0: (slave lo): Enslaving as an active interface with an up link [ 260.516145][ T9528] tunl0: left promiscuous mode [ 260.525165][ T9528] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 260.902476][ T9553] openvswitch: netlink: IP tunnel TTL not specified. [ 261.151617][ T9564] netlink: 96 bytes leftover after parsing attributes in process `syz.3.992'. [ 261.478489][ T9571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.994'. [ 261.501053][ T9569] netlink: 36 bytes leftover after parsing attributes in process `syz.1.993'. [ 261.836626][ T9582] xt_ecn: cannot match TCP bits for non-tcp packets [ 262.098761][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'. [ 262.121348][ T9594] ipt_ECN: cannot use operation on non-tcp rule [ 262.139351][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 262.164199][ T9594] ipt_ECN: cannot use operation on non-tcp rule [ 262.801431][ T9618] ipvlan2: entered promiscuous mode [ 262.821252][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1008'. [ 262.969975][ T9620] team0 (unregistering): Port device team_slave_0 removed [ 263.049239][ T9620] team0 (unregistering): Port device team_slave_1 removed [ 263.213701][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1013'. [ 263.269582][ T9620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.439989][ T9644] netlink: 'syz.1.1014': attribute type 13 has an invalid length. [ 263.620593][ T9654] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 263.681129][ T9654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1017'. [ 263.700121][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 264.226490][ T9686] --map-set only usable from mangle table [ 264.282477][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1022'. [ 264.388464][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1022'. [ 265.059898][ T9712] bridge0: entered promiscuous mode [ 265.119731][ T9712] bridge0: entered allmulticast mode [ 265.269048][ T9723] netlink: 'syz.2.1033': attribute type 8 has an invalid length. [ 265.568225][ T9735] xt_TPROXY: Can be used only with -p tcp or -p udp [ 266.077145][ T9758] set match dimension is over the limit! [ 266.548147][ T9772] __nla_validate_parse: 2 callbacks suppressed [ 266.548166][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 266.710598][ T9781] netlink: 'syz.0.1046': attribute type 34 has an invalid length. [ 266.765734][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 266.840109][ T9783] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1044'. [ 267.016456][ T9781] bond3: option lacp_strict: invalid value (115) [ 267.034831][ T9787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1048'. [ 267.081093][ T9781] bond3 (unregistering): Released all slaves [ 267.156257][ T9797] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1049'. [ 268.796078][ T9815] syzkaller1: entered promiscuous mode [ 268.822077][ T9815] syzkaller1: entered allmulticast mode [ 269.058947][ T9836] netlink: 592 bytes leftover after parsing attributes in process `syz.3.1058'. [ 269.146255][ T9838] netlink: 'syz.1.1059': attribute type 1 has an invalid length. [ 269.737992][ T9846] veth1_macvtap: entered promiscuous mode [ 269.783649][ T9846] macsec1: entered promiscuous mode [ 269.823478][ T9846] veth1_macvtap: left promiscuous mode [ 269.876208][ T9858] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1065'. [ 270.082793][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'. [ 270.471744][ C1] sched: DL replenish lagged too much [ 271.543908][ T9887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.577418][ T9892] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 271.591329][ T9889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.613925][ T9892] netlink: 'syz.4.1076': attribute type 3 has an invalid length. [ 271.645962][ T9890] syzkaller0: entered promiscuous mode [ 271.660075][ T9896] x_tables: duplicate underflow at hook 2 [ 271.679075][ T9892] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1076'. [ 271.699752][ T9890] syzkaller0: entered allmulticast mode [ 271.737122][ T9892] NCSI netlink: No device for ifindex 813332851 [ 272.181047][ T9910] nbd0: detected capacity change from 0 to 87 [ 272.210327][ T4953] block nbd0: Dead connection, failed to find a fallback [ 272.389620][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 273.253581][ T4953] block nbd0: shutting down sockets [ 273.259912][ T4953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.273704][ T4953] Buffer I/O error on dev nbd0, logical block 0, async page read [ 273.284302][ T4953] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 273.294171][ T4953] Buffer I/O error on dev nbd0, logical block 1, async page read [ 273.302144][ T4953] Buffer I/O error on dev nbd0, logical block 2, async page read [ 273.312398][ T4953] Buffer I/O error on dev nbd0, logical block 3, async page read [ 273.324453][ T4953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 273.336889][ T4953] Buffer I/O error on dev nbd0, logical block 0, async page read [ 273.345282][ T4953] Buffer I/O error on dev nbd0, logical block 1, async page read [ 273.354175][ T4953] Buffer I/O error on dev nbd0, logical block 2, async page read [ 273.362304][ T4953] Buffer I/O error on dev nbd0, logical block 3, async page read [ 273.370435][ T4953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 273.381465][ T4953] Buffer I/O error on dev nbd0, logical block 0, async page read [ 273.389522][ T4953] Buffer I/O error on dev nbd0, logical block 1, async page read [ 273.398783][ T4953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 273.410134][ T4953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 273.422688][ T4953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 273.437161][ T4953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 273.448326][ T4953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 273.458398][ T7067] ldm_validate_partition_table(): Disk read failed. [ 273.472863][ T4953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.484502][ T7067] Dev nbd0: unable to read RDB block 0 [ 273.496541][ T7067] nbd0: unable to read partition table [ 273.829084][ T9917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.081144][ T9917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.530770][ T7067] ldm_validate_partition_table(): Disk read failed. [ 274.601681][ T7067] Dev nbd0: unable to read RDB block 0 [ 274.668143][ T7067] nbd0: unable to read partition table [ 274.817805][ T7067] block nbd0: NBD_DISCONNECT [ 274.872237][ T7067] block nbd0: Send disconnect failed -32 [ 274.940882][ T9946] macvlan2: entered promiscuous mode [ 275.006177][ T9946] macvlan2: entered allmulticast mode [ 275.066113][ T9946] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 275.119541][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1088'. [ 275.161398][ T9946] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 275.215310][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1088'. [ 275.284737][ T9946] team0: Port device macvlan2 added [ 275.643733][ T9961] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 276.862117][ T9993] bridge0: port 1(batadv1) entered blocking state [ 276.926484][ T9993] bridge0: port 1(batadv1) entered disabled state [ 276.985167][ T9993] batadv1: entered allmulticast mode [ 277.041955][ T9993] batadv1: entered promiscuous mode [ 277.163261][T10004] netlink: 'syz.2.1103': attribute type 22 has an invalid length. [ 277.209183][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1103'. [ 277.274438][T10004] netlink: 'syz.2.1103': attribute type 22 has an invalid length. [ 277.292909][ T60] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 277.302779][ T60] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 277.335707][T10008] netlink: 'syz.3.1104': attribute type 1 has an invalid length. [ 277.348454][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1103'. [ 277.556914][T10008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1104'. [ 277.697573][T10012] 8021q: adding VLAN 0 to HW filter on device bond5 [ 277.756540][T10012] bond4: (slave bond5): making interface the new active one [ 277.828580][T10012] bond4: (slave bond5): Enslaving as an active interface with an up link [ 278.009792][T10015] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 278.251995][T10039] tipc: Enabling of bearer rejected, failed to enable media [ 279.485078][T10067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1115'. [ 279.646873][T10071] xt_TCPMSS: Only works on TCP SYN packets [ 279.818603][T10071] syzkaller0: entered promiscuous mode [ 279.865964][T10071] syzkaller0: entered allmulticast mode [ 279.891149][T10077] IPv6: Can't replace route, no match found [ 279.945518][T10077] IPv6: Can't replace route, no match found [ 279.996337][T10081] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1121'. [ 280.318705][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1123'. [ 280.440061][T10093] IPv6: sit1: Disabled Multicast RS [ 280.483933][T10093] sit1: entered allmulticast mode [ 284.729122][T10106] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 285.074466][T10120] SET target dimension over the limit! [ 285.299195][ T7464] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 285.875090][T10120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 285.942488][T10146] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1135'. [ 286.483115][T10166] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1136'. [ 287.401376][T10182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1144'. [ 287.755539][T10196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.784793][T10196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.505373][T10207] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1150'. [ 293.630866][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 294.150106][T10229] --map-set only usable from mangle table [ 294.428756][T10236] openvswitch: netlink: IP tunnel TTL not specified. [ 294.436224][T10236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.516939][T10239] netlink: 'syz.2.1160': attribute type 10 has an invalid length. [ 297.669052][T10248] netlink: 'syz.3.1162': attribute type 4 has an invalid length. [ 297.728217][T10249] netlink: 'syz.3.1162': attribute type 4 has an invalid length. [ 300.897193][T10244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.382269][T10269] netlink: 'syz.2.1167': attribute type 2 has an invalid length. [ 301.432925][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1165'. [ 301.607028][T10275] tipc: Can't bind to reserved service type 0 [ 302.069088][T10269] : entered promiscuous mode [ 302.109393][T10281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1170'. [ 302.200131][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1170'. [ 302.327965][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 302.394148][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 302.540901][T10294] openvswitch: netlink: Multiple metadata blocks provided [ 302.618126][T10297] bridge_slave_1: entered promiscuous mode [ 302.680411][T10297] netlink: 'syz.1.1175': attribute type 32 has an invalid length. [ 302.734186][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'. [ 302.877602][T10297] bond2: Setting coupled_control to off (0) [ 303.124888][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'. [ 303.182285][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1178'. [ 303.519817][T10325] FAULT_INJECTION: forcing a failure. [ 303.519817][T10325] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 303.634312][T10325] CPU: 0 UID: 0 PID: 10325 Comm: syz.1.1182 Not tainted syzkaller #0 PREEMPT(full) [ 303.634343][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 303.634371][T10325] Call Trace: [ 303.634380][T10325] [ 303.634389][T10325] dump_stack_lvl+0xe8/0x150 [ 303.634440][T10325] should_fail_ex+0x40c/0x560 [ 303.634474][T10325] _copy_from_iter+0x1d3/0x1660 [ 303.634512][T10325] ? __lock_acquire+0x683/0x2cf0 [ 303.634551][T10325] ? __pfx__copy_from_iter+0x10/0x10 [ 303.634584][T10325] ? aa_file_perm+0x18b/0x15f0 [ 303.634610][T10325] ? aa_label_sk_perm+0x532/0x6e0 [ 303.634643][T10325] ping_common_sendmsg+0xb9/0x2c0 [ 303.634678][T10325] ping_v6_sendmsg+0x21f/0x12a0 [ 303.634723][T10325] ? __lock_acquire+0x683/0x2cf0 [ 303.634755][T10325] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 303.634815][T10325] ? aa_sk_perm+0x6d5/0x900 [ 303.634859][T10325] ? __pfx_aa_sk_perm+0x10/0x10 [ 303.634909][T10325] ? sock_rps_record_flow+0x19/0x350 [ 303.634971][T10325] ? inet_sendmsg+0x298/0x320 [ 303.635027][T10325] ? __pfx_inet_sendmsg+0x10/0x10 [ 303.635065][T10325] sock_sendmsg_nosec+0x10e/0x180 [ 303.635098][T10325] __sys_sendto+0x408/0x5a0 [ 303.635125][T10325] ? ksys_write+0x1e6/0x270 [ 303.635151][T10325] ? __pfx___sys_sendto+0x10/0x10 [ 303.635170][T10325] ? __mutex_unlock_slowpath+0x731/0x900 [ 303.635227][T10325] ? __pfx_ksys_write+0x10/0x10 [ 303.635265][T10325] __x64_sys_sendto+0xde/0x100 [ 303.635295][T10325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.635353][T10325] do_syscall_64+0x174/0x580 [ 303.635404][T10325] ? trace_irq_disable+0x3b/0x140 [ 303.635455][T10325] ? clear_bhb_loop+0x40/0x90 [ 303.635500][T10325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.635529][T10325] RIP: 0033:0x7fddbb79de99 [ 303.635558][T10325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.635581][T10325] RSP: 002b:00007fddbc67d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 303.635610][T10325] RAX: ffffffffffffffda RBX: 00007fddbba25fa0 RCX: 00007fddbb79de99 [ 303.635627][T10325] RDX: 000000000000ffe9 RSI: 0000200000000040 RDI: 0000000000000003 [ 303.635642][T10325] RBP: 00007fddbc67d090 R08: 0000000000000000 R09: 0000000000000000 [ 303.635656][T10325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.635669][T10325] R13: 00007fddbba26038 R14: 00007fddbba25fa0 R15: 00007fff74ae1548 [ 303.635706][T10325] [ 303.967033][T10332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1183'. [ 304.083392][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1186'. [ 304.092725][T10335] nbd: couldn't find a device at index 0 [ 304.597096][T10344] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 305.295893][T10354] syzkaller0: entered promiscuous mode [ 305.377548][T10354] syzkaller0: entered allmulticast mode [ 307.978128][T10420] __nla_validate_parse: 3 callbacks suppressed [ 307.978149][T10420] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1202'. [ 308.917897][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1206'. [ 313.128982][T10433] gretap5: entered promiscuous mode [ 313.161277][T10433] batman_adv: batadv0: Adding interface: gretap5 [ 313.215861][T10433] batman_adv: batadv0: The MTU of interface gretap5 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.387777][T10445] sctp: [Deprecated]: syz.0.1208 (pid 10445) Use of int in max_burst socket option. [ 313.387777][T10445] Use struct sctp_assoc_value instead [ 313.420917][T10433] batman_adv: batadv0: Not using interface gretap5 (retrying later): interface not active [ 313.709813][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1211'. [ 315.099384][T10493] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 315.159086][T10496] hsr0: entered allmulticast mode [ 315.198558][T10496] hsr_slave_0: entered allmulticast mode [ 315.226427][T10496] hsr_slave_1: entered allmulticast mode [ 315.478730][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1223'. [ 315.511209][T10501] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1224'. [ 316.846893][T10541] netlink: 'syz.1.1234': attribute type 1 has an invalid length. [ 316.986070][T10545] netlink: 'syz.0.1235': attribute type 3 has an invalid length. [ 317.089488][T10545] netlink: 'syz.0.1235': attribute type 1 has an invalid length. [ 317.122950][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.141242][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.186638][T10545] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1235'. [ 317.340784][T10556] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 317.406162][T10556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1237'. [ 317.619247][T10562] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.643327][T10566] netlink: 'syz.1.1240': attribute type 21 has an invalid length. [ 317.681814][T10569] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1239'. [ 317.803473][T10562] tipc: Started in network mode [ 317.848552][T10562] tipc: Node identity ac14142f, cluster identity 4711 [ 317.937493][T10562] tipc: New replicast peer: 0.0.0.0 [ 317.992548][T10562] tipc: Enabled bearer , priority 10 [ 318.027277][T10566] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1240'. [ 318.070156][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1238'. [ 318.223448][T10577] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 318.507683][T10588] bond0: option miimon: invalid value (18446744071829782528) [ 318.551003][T10588] bond0: option miimon: allowed values 0 - 2147483647 [ 318.620817][T10593] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 318.851510][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'. [ 319.178731][ T7493] tipc: Node number set to 2886997039 [ 319.684630][T10617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1253'. [ 319.716608][T10617] netlink: 'syz.0.1253': attribute type 3 has an invalid length. [ 319.745113][T10617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1253'. [ 319.792521][T10617] netlink: 'syz.0.1253': attribute type 3 has an invalid length. [ 319.838232][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1252'. [ 319.879018][T10620] gretap0: entered promiscuous mode [ 320.563934][T10644] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1258'. [ 320.586653][T10642] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1259'. [ 320.641251][T10642] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1259'. [ 320.759687][T10653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1262'. [ 321.466075][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'. [ 321.905772][T10670] hsr_slave_1 (unregistering): left promiscuous mode [ 322.055551][T10692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1271'. [ 322.179654][T10692] vlan0: entered promiscuous mode [ 322.756149][T10699] .`: (slave bond_slave_1): Releasing backup interface [ 322.869796][T10713] Bluetooth: MGMT ver 1.23 [ 323.111592][T10719] netlink: 'syz.2.1278': attribute type 35 has an invalid length. [ 323.423129][T10721] netlink: 'syz.4.1279': attribute type 1 has an invalid length. [ 323.903866][T10734] __nla_validate_parse: 3 callbacks suppressed [ 323.903886][T10734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1283'. [ 324.046710][T10721] bond5: entered promiscuous mode [ 324.063721][T10721] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.074765][T10739] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1283'. [ 324.152927][T10727] bond5: (slave bridge3): making interface the new active one [ 324.169316][T10727] bridge3: entered promiscuous mode [ 324.192546][T10727] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 324.730099][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 324.783943][T10752] dvmrp0: entered allmulticast mode [ 324.798375][T10748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1285'. [ 325.579624][T10778] netlink: 'syz.2.1293': attribute type 11 has an invalid length. [ 325.617559][T10777] netlink: 'syz.2.1293': attribute type 11 has an invalid length. [ 325.734738][T10780] : renamed from vlan1 (while UP) [ 325.853742][T10785] tipc: Enabled bearer , priority 10 [ 325.896133][T10785] tipc: Enabling of bearer rejected, already enabled [ 326.247326][T10795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1298'. [ 326.520249][T10804] xfrm0 speed is unknown, defaulting to 1000 [ 326.527777][T10804] netlink: 'syz.0.1302': attribute type 10 has an invalid length. [ 326.544120][T10804] .`: (slave macsec0): Enslaving as an active interface with an up link [ 328.078393][T10841] syzkaller0: entered promiscuous mode [ 328.127067][T10841] syzkaller0: entered allmulticast mode [ 328.333180][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'. [ 328.425439][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'. [ 328.844833][T10862] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 329.238599][T10872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1320'. [ 329.472910][T10875] IPv6: sit1: Disabled Multicast RS [ 330.075279][T10899] x_tables: duplicate underflow at hook 3 [ 330.117800][T10898] syzkaller1: entered allmulticast mode [ 330.282886][T10902] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 330.555422][T10908] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1332'. [ 382.429103][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.772129][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.391669][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 435.398687][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10903/1:b..l [ 435.407121][ C0] rcu: (detected by 0, t=10502 jiffies, g=43813, q=467857 ncpus=2) [ 435.415132][ C0] task:syz.2.1331 state:R running task stack:25808 pid:10903 tgid:10901 ppid:5635 task_flags:0x400140 flags:0x00080002 [ 435.429506][ C0] Call Trace: [ 435.432824][ C0] [ 435.435793][ C0] __schedule+0x17d9/0x56c0 [ 435.440347][ C0] ? skb_ensure_writable+0x19/0x450 [ 435.445592][ C0] ? __pfx___schedule+0x10/0x10 [ 435.450476][ C0] ? bpf_test_run+0x1d1/0x830 [ 435.455192][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 435.460602][ C0] preempt_schedule_common+0x82/0xd0 [ 435.465918][ C0] ? bpf_test_run+0x1d1/0x830 [ 435.470623][ C0] preempt_schedule_thunk+0x16/0x40 [ 435.475871][ C0] __local_bh_enable_ip+0xe1/0x130 [ 435.481022][ C0] ? bpf_test_run+0x1d1/0x830 [ 435.485735][ C0] bpf_test_run+0x3a8/0x830 [ 435.490297][ C0] ? __pfx_bpf_test_run+0x10/0x10 [ 435.495370][ C0] ? __kasan_krealloc+0xec/0x110 [ 435.500359][ C0] ? skb_dst_set+0x72/0x140 [ 435.504906][ C0] bpf_prog_test_run_skb+0xe35/0x2230 [ 435.510340][ C0] ? __fget_files+0x3a2/0x420 [ 435.515059][ C0] ? __fget_files+0x2a/0x420 [ 435.519693][ C0] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 435.525580][ C0] bpf_prog_test_run+0x2c5/0x340 [ 435.530578][ C0] __sys_bpf+0xa22/0xd90 [ 435.534873][ C0] ? do_raw_spin_lock+0xa0/0x2f0 [ 435.539848][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 435.544687][ C0] ? do_futex+0x3e7/0x4e0 [ 435.549083][ C0] ? rcu_is_watching+0x15/0xb0 [ 435.553889][ C0] __x64_sys_bpf+0xba/0xd0 [ 435.558335][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.564430][ C0] do_syscall_64+0x174/0x580 [ 435.569078][ C0] ? trace_irq_disable+0x3b/0x140 [ 435.574143][ C0] ? clear_bhb_loop+0x40/0x90 [ 435.578860][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.584780][ C0] RIP: 0033:0x7f226179de99 [ 435.589232][ C0] RSP: 002b:00007f2262717028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 435.597679][ C0] RAX: ffffffffffffffda RBX: 00007f2261a25fa0 RCX: 00007f226179de99 [ 435.605685][ C0] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 435.613689][ C0] RBP: 00007f2261833eaf R08: 0000000000000000 R09: 0000000000000000 [ 435.621691][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.629703][ C0] R13: 00007f2261a26038 R14: 00007f2261a25fa0 R15: 00007fffee158a48 [ 435.637731][ C0] [ 435.640792][ C0] rcu: rcu_preempt kthread starved for 284 jiffies! g43813 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 435.651841][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 435.661833][ C0] rcu: RCU grace-period kthread stack dump: [ 435.667781][ C0] task:rcu_preempt state:R running task stack:27296 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 435.681428][ C0] Call Trace: [ 435.684738][ C0] [ 435.687719][ C0] __schedule+0x17d9/0x56c0 [ 435.692258][ C0] ? __lock_acquire+0x683/0x2cf0 [ 435.697271][ C0] ? __pfx___schedule+0x10/0x10 [ 435.702198][ C0] ? schedule+0x90/0x2b0 [ 435.706497][ C0] schedule+0x164/0x2b0 [ 435.710707][ C0] schedule_timeout+0x152/0x2c0 [ 435.715604][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 435.721019][ C0] ? __pfx_process_timeout+0x10/0x10 [ 435.726354][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 435.732233][ C0] ? prepare_to_swait_event+0x322/0x350 [ 435.737825][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 435.742737][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 435.748937][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 435.754267][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 435.759529][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 435.764176][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 435.769432][ C0] ? __kthread_parkme+0x71/0x1f0 [ 435.774413][ C0] ? __kthread_parkme+0x196/0x1f0 [ 435.779481][ C0] kthread+0x388/0x470 [ 435.783594][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 435.788829][ C0] ? __pfx_kthread+0x10/0x10 [ 435.793505][ C0] ret_from_fork+0x514/0xb70 [ 435.798143][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 435.803307][ C0] ? __switch_to+0xc89/0x1420 [ 435.808025][ C0] ? __pfx_kthread+0x10/0x10 [ 435.812709][ C0] ret_from_fork_asm+0x1a/0x30 [ 435.817522][ C0] [ 435.820567][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 435.826925][ C0] Sending NMI from CPU 0 to CPUs 1: [ 435.832170][ C1] NMI backtrace for cpu 1 [ 435.832192][ C1] CPU: 1 UID: 0 PID: 48 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 435.832220][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 435.832236][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 435.832269][ C1] RIP: 0010:lock_is_held_type+0x89/0x150 [ 435.832292][ C1] Code: 9c 07 41 83 bd 98 0b 00 00 00 7e 48 4c 89 eb 48 81 c3 a0 0b 00 00 45 31 ff 49 83 ff 31 73 24 48 89 df 4c 89 f6 e8 f7 01 00 00 <85> c0 75 2a 49 ff c7 49 63 85 98 0b 00 00 48 83 c3 28 49 39 c7 7c [ 435.832307][ C1] RSP: 0018:ffffc90000a07d70 EFLAGS: 00000046 [ 435.832322][ C1] RAX: 0000000000000000 RBX: ffff888020aa2ac8 RCX: 0000000080010102 [ 435.832335][ C1] RDX: ffff888020aa1f00 RSI: ffff88802bff22c0 RDI: ffff888020aa2ac8 [ 435.832349][ C1] RBP: 00000000ffffffff R08: 0000000000000003 R09: 0000000000000004 [ 435.832360][ C1] R10: dffffc0000000000 R11: fffff52000140fa4 R12: 0000000000000046 [ 435.832373][ C1] R13: ffff888020aa1f00 R14: ffff88802bff22c0 R15: 0000000000000001 [ 435.832386][ C1] FS: 0000000000000000(0000) GS:ffff888125050000(0000) knlGS:0000000000000000 [ 435.832401][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 435.832413][ C1] CR2: 000055555a5954e8 CR3: 000000007d7e4000 CR4: 00000000003526f0 [ 435.832429][ C1] Call Trace: [ 435.832436][ C1] [ 435.832445][ C1] advance_sched+0x1d9/0xc80 [ 435.832471][ C1] ? __pfx_advance_sched+0x10/0x10 [ 435.832492][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 435.832514][ C1] ? __pfx_advance_sched+0x10/0x10 [ 435.832535][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 435.832563][ C1] hrtimer_interrupt+0x448/0x910 [ 435.832583][ C1] ? sched_clock+0x3f/0x60 [ 435.832616][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 435.832637][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 435.832655][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 435.832680][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x70 [ 435.832702][ C1] Code: cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 78 fe a5 11 65 8b 15 99 fe a5 11 <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 24 17 00 00 [ 435.832716][ C1] RSP: 0018:ffffc90000a08158 EFLAGS: 00000297 [ 435.832730][ C1] RAX: ffffffff8a3640e4 RBX: 00000000575ed980 RCX: ffff888020aa1f00 [ 435.832743][ C1] RDX: 0000000080000101 RSI: 000000000000001b RDI: 0000000000000020 [ 435.832754][ C1] RBP: ffffc90000a08210 R08: ffff888020aa1f00 R09: 0000000000000002 [ 435.832767][ C1] R10: 000000000000000a R11: 0000000000000100 R12: 000000000000001b [ 435.832777][ C1] R13: dffffc0000000000 R14: ffff88803261c000 R15: ffff88801fb86980 [ 435.832795][ C1] ? ip_neigh_gw4+0x174/0x3a0 [ 435.832816][ C1] ip_neigh_gw4+0x174/0x3a0 [ 435.832835][ C1] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 435.832857][ C1] ip_finish_output2+0xe21/0x10b0 [ 435.832874][ C1] ? ip_skb_dst_mtu+0x811/0xa50 [ 435.832888][ C1] ? ip_finish_output2+0x3de/0x10b0 [ 435.832907][ C1] ? ip_finish_output+0x40b/0x530 [ 435.832935][ C1] ip_output+0x29f/0x450 [ 435.832961][ C1] ? ip_output+0x5a/0x450 [ 435.832987][ C1] synproxy_send_client_synack+0x89b/0xde0 [ 435.833018][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 435.833042][ C1] ? nft_log_init+0x6a8/0x990 [ 435.833062][ C1] ? synproxy_pernet+0x45/0x270 [ 435.833090][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 435.833119][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 435.833146][ C1] ? nf_ip_checksum+0x13c/0x510 [ 435.833176][ C1] nft_synproxy_do_eval+0x335/0x550 [ 435.833204][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 435.833230][ C1] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 435.833260][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 435.833291][ C1] nft_do_chain+0x48d/0x1b10 [ 435.833325][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 435.833355][ C1] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 435.833391][ C1] nft_do_chain_inet+0x360/0x4b0 [ 435.833419][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 435.833451][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 435.833473][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 435.833500][ C1] nf_hook_slow+0xc5/0x220 [ 435.833525][ C1] NF_HOOK+0x21f/0x3c0 [ 435.833558][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 435.833578][ C1] ? NF_HOOK+0x9e/0x3c0 [ 435.833597][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 435.833618][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 435.833660][ C1] ? ip_local_deliver+0x113/0x190 [ 435.833695][ C1] NF_HOOK+0x336/0x3c0 [ 435.833717][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 435.833738][ C1] ? NF_HOOK+0x9e/0x3c0 [ 435.833758][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 435.833779][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 435.833800][ C1] ? ip_rcv_core+0x88d/0xd50 [ 435.833823][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 435.833844][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 435.833865][ C1] process_backlog+0xa34/0x1860 [ 435.833893][ C1] ? process_backlog+0x3c3/0x1860 [ 435.833925][ C1] __napi_poll+0xaa/0x330 [ 435.833950][ C1] net_rx_action+0x61d/0xf50 [ 435.833981][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 435.834006][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 435.834043][ C1] handle_softirqs+0x225/0x840 [ 435.834066][ C1] ? do_softirq+0x76/0xd0 [ 435.834088][ C1] ? kernel_fpu_end+0x62/0x80 [ 435.834107][ C1] do_softirq+0x76/0xd0 [ 435.834127][ C1] [ 435.834132][ C1] [ 435.834138][ C1] __local_bh_enable_ip+0xf8/0x130 [ 435.834158][ C1] blake2s_compress+0xfa/0x1c00 [ 435.834177][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 435.834201][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 435.834222][ C1] ? sit_tunnel_xmit+0xc29/0x1c60 [ 435.834250][ C1] ? __asan_memset+0x22/0x50 [ 435.834272][ C1] ? kernel_fpu_begin_mask+0x2b8/0x380 [ 435.834293][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 435.834311][ C1] ? kernel_fpu_end+0x62/0x80 [ 435.834333][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 435.834354][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 435.834372][ C1] ? kernel_fpu_end+0x62/0x80 [ 435.834402][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 435.834421][ C1] ? blake2s_compress+0x1b4d/0x1c00 [ 435.834441][ C1] blake2s_update+0x140/0x450 [ 435.834458][ C1] hmac+0x1f4/0x3b0 [ 435.834480][ C1] ? __pfx_hmac+0x10/0x10 [ 435.834505][ C1] ? curve25519_generate_public+0x2fed/0x3050 [ 435.834532][ C1] ? __asan_memset+0x22/0x50 [ 435.834554][ C1] message_ephemeral+0x233/0x310 [ 435.834577][ C1] ? __pfx_message_ephemeral+0x10/0x10 [ 435.834631][ C1] ? down_read+0x2be/0x330 [ 435.834655][ C1] wg_noise_handshake_create_initiation+0x24f/0x810 [ 435.834688][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 435.834714][ C1] ? __lock_acquire+0x683/0x2cf0 [ 435.834740][ C1] ? __lock_acquire+0x683/0x2cf0 [ 435.834766][ C1] ? ret_from_fork+0x514/0xb70 [ 435.834790][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 435.834809][ C1] ? __lock_acquire+0x683/0x2cf0 [ 435.834836][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 435.834864][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 435.834891][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 435.834909][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 435.834934][ C1] ? ktime_get_coarse_with_offset+0x102/0x150 [ 435.834959][ C1] wg_packet_handshake_send_worker+0x18c/0x370 [ 435.834990][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 435.835018][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 435.835048][ C1] ? rcu_is_watching+0x15/0xb0 [ 435.835066][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 435.835087][ C1] process_scheduled_works+0xa8e/0x14e0 [ 435.835120][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 435.835144][ C1] ? assign_work+0x3cf/0x5d0 [ 435.835166][ C1] worker_thread+0xa47/0xfb0 [ 435.835201][ C1] kthread+0x388/0x470 [ 435.835226][ C1] ? __pfx_worker_thread+0x10/0x10 [ 435.835246][ C1] ? __pfx_kthread+0x10/0x10 [ 435.835272][ C1] ret_from_fork+0x514/0xb70 [ 435.835299][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 435.835325][ C1] ? __switch_to+0xc89/0x1420 [ 435.835349][ C1] ? __pfx_kthread+0x10/0x10 [ 435.835375][ C1] ret_from_fork_asm+0x1a/0x30 [ 435.835399][ C1]