last executing test programs: 35.632756305s ago: executing program 1 (id=3746): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x8000, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20000c14}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r7], 0x44}}, 0x2000800) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r3, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000040)={0xe, 0x9, 0xffffffff, 0x9, r9}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x4, 0x3, 0xfffffc00}, &(0x7f0000000100)=0x10) 35.387159894s ago: executing program 1 (id=3748): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300020c000000000000000000000003000600000000000200000000000000000000000000000002000100000008000000000000000000030005000000000002000000ac1414aa0000000000000000020008001000"], 0x60}, 0x1, 0x7}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300020c000000000000000000000003000600000000000200000000000000000000000000000002000100000008000000000000000000030005000000000002000000ac1414aa0000000000000000020008001000"], 0x60}, 0x1, 0x7}, 0x0) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 35.214106484s ago: executing program 1 (id=3750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}]}, 0x2c}}, 0x0) (async) r3 = socket(0x2b, 0x1, 0x0) listen(r3, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000400000000000900020073797a30000000000c00040008000640000007ff0500050002000000050001000600000011000300686173683a69702c706f727400ab7300"], 0x58}}, 0x8040) (async) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg$alg(r4, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0xffffffad}], 0x1}], 0x1, 0x40440b0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000180)={0x5, {{0xa, 0x4e24, 0x8, @remote, 0x1}}}, 0x88) 34.951484748s ago: executing program 1 (id=3753): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000003c0)=0x35, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001140)}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="980000000206010400000000000000000700000015000300686173683a69702c706f72742c6e488f0b65740000000005001c000605000500020000003c00078005000300fb00000005000700330000000500140001000000060004404e2100000506000000000000000005404e23000005000700160000000900020073797a310000000011000700686173683a69702c707f727400000000ddf95cc1e8eed926fd5f6f614818fc0c4659f3b1fe9452e54c8e7637d126f2e9033000486c87fa4bf197e537e1aa2599f80dd38bdb013fb2705f6b9fe28fad1b7aab27bc79e464c6871c409e86df6142112bb1746936c084c1e72118e3bfe84f7c90a5a47c070752f9c5c47e826c3d8516f09deff574d7434d670735b634a119076a14d663"], 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x2004005f) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5452, &(0x7f0000000080)={0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000940)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRESOCT=r6, @ANYRES32=0x0, @ANYRESDEC=r5, @ANYRESOCT=r9], 0xf8}}, 0x2400c004) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000000000000001ff01000000000000000700000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7f000001000000000000000000000000000000003200000000000000000000000000ffffac141429000000000000000000000000000000000000000000000000317e47460000000000000000000000000000100000000000ffffffffffffffff0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000a00"/176], 0xf8}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc00000021000100ffff000000000004fc020000000000000000000000000001ff0200000000000000000000001100010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100fc0000000000000000000000000000017f000001000000000000000000000000fc020000000000000000000000000001e00000010000000000000000000000003c040000000000000a000a001c000400ffff4e244e2400000a01010200"/116], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES16=r3, @ANYBLOB="aa00"/12, @ANYRES32, @ANYRESHEX=r8, @ANYRES32=0x0], 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000015000000180000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007000000000000000080001585b60000007500000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 34.262584837s ago: executing program 0 (id=3759): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0xfff}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x0, 0xa, 0x455, r1}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd88}}, 0x8001, 0x5, 0x2, 0x96, 0x65, 0xd88, 0xc}, &(0x7f0000000b80)=0x9c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @loopback}, &(0x7f0000000180)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711071000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x24}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0xfff}, &(0x7f0000000200)=0x8) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x0, 0xa, 0x455, r1}, 0x10) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd88}}, 0x8001, 0x5, 0x2, 0x96, 0x65, 0xd88, 0xc}, &(0x7f0000000b80)=0x9c) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @loopback}, &(0x7f0000000180)=0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711071000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x24}, 0x94) (async) 34.103942552s ago: executing program 0 (id=3760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4891}, 0x4080) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000080)=0x3, 0x4) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 33.980327768s ago: executing program 1 (id=3761): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70fd27, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x29, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3d75}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) write(r1, &(0x7f0000000080)="3afbb99e24bd46a7710ab78909abb816351fdfab922b5a35aedb8c8b9cf2354c6dadd1c9d81664b289e13ad29c5dbd7158e79bcb89c69b7463322a96bd406e47dd5275dedae3b4bc257bd456ef56f1338485dded41b853408a620aae99cb308cd6911e63347eb6238d3d3f5ab28ca8fc0b65f8679534bd2f4ef51506aba605fb908fbfdef6b256fa2fba6205a7683d7fdf35b3c6c5bc65ac55", 0x99) 33.866584913s ago: executing program 0 (id=3762): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/112, 0x70}], 0x1}}], 0x2, 0x142, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@getqdisc={0x24, 0x26, 0x400, 0x70bdaa, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0xc}, {0x1, 0xfff1}, {0xb, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) r6 = socket(0x10, 0x803, 0x0) recvfrom$inet(r6, &(0x7f0000000100)=""/185, 0xb9, 0x40010120, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) getsockopt$sock_int(r6, 0x1, 0x22, 0x0, &(0x7f0000000340)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r8, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d0b1352ef4b48c7a93b5b64de03caf2ae9be3a905755b93ec680e2fc86eb986fd1dfeeb4ac995649fe8b2d3a595d7c10c121c6a9456ffff3b0547c65759ded01b4862e4cc2c1b7c526da822b7fbe8dac158e", @ANYRES16=r8, @ANYBLOB="000225bd7000fedbdf2554000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 32.585697989s ago: executing program 2 (id=3765): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0xfffffffffffffe8c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)="7102b87fd4a29eb711d3d8dd9d30a576adc9f6e273aa268bf88d9b6b401a48d9897f02e252e0882cc55d14a5949d95b3fa8e0fdefbdb9d5f2b2402455bb8ea9669c041e99a804b3a84e5be4329c6ac5ccfd26d65bf13d7dc9ce767be3e7d49acf525dca7523b6bc44d49b40ce43b8cb32004f23c12750711d0858c8d0d41dc8700148a722a3cbc6abb", 0x89}], 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$inet(r1, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) 32.45228944s ago: executing program 2 (id=3766): syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r1) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x2, 0x4004361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004060}, 0x4890) (rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x6, 0x0, 0xc8) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000180)) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 30.909350503s ago: executing program 4 (id=3767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, 0xd, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x3c}}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x20000080) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}]}}}]}, 0x3c}}, 0x0) 30.897163886s ago: executing program 0 (id=3768): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, 0x4, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1e}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}]}, 0x64}}, 0x4000000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, r6, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) (async) syz_emit_ethernet(0x15, &(0x7f00000003c0)={@remote, @empty, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@x25={0x805, {0x1, 0x6, 0xf3}}}}, 0x0) (async) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="7000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004"], 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=@delqdisc={0x2c, 0x25, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0x0, 0xfff1}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x2c}}, 0x44) (async, rerun: 64) r12 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r14, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) bind$packet(r10, &(0x7f0000000040)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @remote}, 0x14) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r13) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0xd4, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r9}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40080}, 0x800) 30.793500318s ago: executing program 1 (id=3770): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b575", 0x2}], 0x1}], 0x1, 0x8001) accept4(r2, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="280000006800010000000000000000000a00000000000000060007000800000008000500", @ANYRES32=r4, @ANYBLOB="205f7725866b4c533425db458f9c5143396ae63afa628660cc33741d2ba85e744a05b675fb065424cf1e45bc967d0f3a3e9b72d5f976037a80642bf2"], 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3, 0x10}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)={r7, 0x1000, "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"}, &(0x7f00000013c0)=0x1008) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r8 = socket$inet6(0xa, 0x2, 0x1) setsockopt$inet6_udp_int(r8, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14, 0x0) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x1}, 0x4) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x8001}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100000000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="0000000400aa0000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x240400c4) 30.604610909s ago: executing program 0 (id=3772): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async) sendfile(r1, r2, 0x0, 0xffffffff004) (async) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2b, 'rlimit'}, {0x94bc84730fc882a0, 'io'}, {0x2d, 'cpuacct'}]}, 0x15) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) (async) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x0) (async) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0x8, 0x40c0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) read(r0, &(0x7f0000002400)=""/4060, 0xfdc) 30.603747835s ago: executing program 4 (id=3773): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x0, 0x100, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x48, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 30.438932498s ago: executing program 0 (id=3774): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000140)={{0x0}, 0x0, 0x3b}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet(0x2, 0x4, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000380)={0x8, 0xfbfe, @loopback}, 0x10, &(0x7f00000003c0)=[{0x0, 0x2e}, {&(0x7f0000001540)="b14fd5c9ed46fc05cb05337b620526fc93357903607902406c5d3113ad5b3117cd7ab604fe18c0a4717acb86bf141c9d67389bb77368bab92cc5ffd0cee540eb78e1ba67d3b806dfabdb7397045f6b9b274e5525f7685e2ae80f938f72c8a4bb80730d3f371777a8464d4ff0526a6d5e300099595dbee7f24a46262e74f3890bde0dba4022fb79c1d4d4c9f4c432db8abd757945bf17ae5d8fd2414637caa26ebbcdd4a00f50eb0be0abcae38a496dce098e3b9e27f3b13a20fc8f1dce38ef24fe458f326f04e84a1ab657c0b0a78aa1a3dde94aa7ad52e782c71174a62360ab7304b18180060d63b70a00"/247, 0xf7}, {&(0x7f0000001440)="0140af782ea71510ebcfd5c3880daaca30eb4ddfd1190f01dac5cc2160550208aa8f6f3c85bd65169dd45f5caa4788465ee417f77820ecf053694578f4867b3474351de79f8d6fe29167a9168e3f94eab347cffbe1e10e26f78e07aa5e55d5300d47fa5f4cd6fdebbc910784cdecd67f3dcfb16a337b249cbedf778670aced7949755b01ee9933dcbda88acabaf582364493745c5af709eb3e35f80ef0b74520bcae499942abf3409df984a6ba8bfe41ed05bfc6fe67b2e8d0a572c6d17bb59b9da76db7da7aae8f27ce8f3602a3f3c0637fb866ead3d15676c2c265ed72839d6f901fa4af56b6d778d7bb9cd9a7d1c1da8e0490d9", 0xf5}], 0x3}, 0x20008890) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x4, @empty, @mcast1, 0x7800, 0x10, 0x3, 0x8e}}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r4, &(0x7f0000000100)=""/113, 0x71) write$ppp(r4, &(0x7f0000000200)="bc72", 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000106ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010007080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) 30.414993239s ago: executing program 4 (id=3775): r0 = socket(0x25, 0x4, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x69a0a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4b0) 30.03285301s ago: executing program 4 (id=3777): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x80000) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0xffffffffffffff7b, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b, 0x3}}}}]}]}, 0x70}}, 0xc1) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000240), 0x2) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000200)={0x8, 0x30, '\x00', 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 29.986821045s ago: executing program 3 (id=3778): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001b00)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, '9J\t', 0x0, 0x32, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRES32=r0, @ANYRES8=r1, @ANYBLOB="11d00020000000000000000000080000000000"], 0x48}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) 29.563919278s ago: executing program 3 (id=3779): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)=@getsadinfo={0x30c, 0x23, 0x300, 0x70bd25, 0x25dfdbff, 0x0, [@tmpl={0xc4, 0x5, [{{@in=@multicast2, 0x4d6, 0xff}, 0xa, @in6=@remote, 0x3501, 0x2, 0x0, 0x55, 0x7, 0x8000, 0x100}, {{@in=@multicast2, 0x4d4, 0x33}, 0xa, @in=@private=0xa010100, 0x0, 0x3, 0x1, 0x80, 0x7, 0x4, 0xffffffff}, {{@in=@multicast1, 0x4d3, 0x2b}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3504, 0x2, 0x3, 0x9, 0x6, 0x8, 0x6}]}, @tmpl={0x84, 0x5, [{{@in6=@remote, 0x4d5, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2, 0x3, 0x1, 0xfb30, 0x1, 0x7f}, {{@in=@loopback, 0x4d2, 0x33}, 0x2, @in6=@remote, 0x3504, 0x3, 0x0, 0x8, 0x2, 0x9, 0x1}]}, @proto={0x5, 0x19, 0x32}, @lifetime_val={0x24, 0x9, {0x0, 0x0, 0x1}}, @algo_crypt={0x10a, 0x2, {{'lrw(twofish)\x00'}, 0x610, "cd58ac4af275cba45d8b857318947e916768d767353425fdbd089b2d496c4208f2e2fd889cd467527466517e14c8d07f00b2b0a3eac497f8d2efa06280b67953d17750c1de838ce8cb7e9b618dec3e9c5b19c85e726b320bb237eeb945c01ace98377cb08635af9ff973f21b3abd497eec99866e06b1b405c52c30eb053de2e0fc208a0a8794f8d14aa3a181528b2c18f6b69d263267c1b9f6dbe0f67385bcc431b427bc50829921503f27f8f04c357eafbdb5e2577b88e50102f2c29d589787e023"}}, @etimer_thresh={0x8, 0xc, 0x2}, @extra_flags={0x8, 0x18, 0xfffffffe}, @algo_auth={0x60, 0x1, {{'nhpoly1305\x00'}, 0xc0, "d90115f5e9a7fadc423924d4b5ab1802a816b51720c7b228"}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000440)=0x1, 0x4) syz_emit_ethernet(0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="ff152d8ec33371c82fcb1209f77fffffffffff00000000aabb88a80000b44ec849894a77bc8ae6f4ffba"], 0x0) 29.513631569s ago: executing program 4 (id=3780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0x5}, {0xf, 0x6}, {0xc, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040"], 0x50}}, 0x4080) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000013c0)=[{&(0x7f00000001c0)="adba69b8faf1fafbc15e7fee388d121381cf70f5f5cea82140b46a3b8d7234cde6eb75f3b89d275bd9ed38ec804a94c3c637ed69c4c04b7ad6ea2908ac095e0f", 0x40}], 0x1, 0xf) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7a0af8ff7525787cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c80000040000000000b1a297cfddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1ae9f2cfe401dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4800afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48bb004823ebcd8c65743f31f84b263ab9b3426692f01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6ad4c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dc938db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c98000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x4) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000580)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) sendmsg$nl_route(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@can_delroute={0x74, 0x19, 0x40b, 0x70bd29, 0x25dfdbff, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "1435b612523f9917"}}}, @CGW_SRC_IF={0x8, 0x9, r10}, @CGW_MOD_UID={0x8, 0xe, r11}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, "f537b87ed4dca8cc"}, 0x2}}, @CGW_LIM_HOPS={0x5, 0xd, 0xff}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "d5eb59d81ee2dca8"}, 0x6}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x1a) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x31}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2b}, 0x90) (rerun: 64) 29.413957832s ago: executing program 3 (id=3781): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000050000002000000008000300", @ANYRES32=r3, @ANYBLOB="24002d8008000300060000000500040001000000050001000e0000000800020005"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x620, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x41}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x7, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 29.00414426s ago: executing program 3 (id=3782): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x2}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)={0x1, 0xb08, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18f14710a44213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="010000000888173004e49b11e7cf1708", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB='\x00\x00\x00\x00A', @ANYRES64=r1, @ANYRESOCT, @ANYBLOB="3ff3d008dc3493a06e4fc39f0a952053ad9f31136fce9638e4174d8280a2e89416f2b4859c0a43863ad0add90b5a6953e6505a55ad73cb056ec473ebb7"], 0x80}}, 0x0) 28.973655195s ago: executing program 3 (id=3783): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x8, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r4, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000040)=0x1ff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0xc}}}]}, 0x38}}, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ed3679a200000000000000000000000000000000e97f3e570e7b4ec195d0dbc5983a884904edd6c5ae226b99ed06f239419469d5a934523e741fc55f67a8977e91ca4a275acb02aea8f83abccfdc344d684e4b48100e32f1c7db5b1f96833954a2c7da0a897f4b0ffff50bcd91561beb5e78d429b06fc665b053ae3ee711dae61e65dbbf890477fdea327088892fdab46e4126688f87874199ceb467eae44dc8eb55d5e627d667ba42b4c257445defc517d630c80fd48a26bdb85d1b1c87da8ef0fd464678a2ffbd65b1bdecbc1b7c4b7a1983b80b693474502e668b", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="04000000000000000500"/28], 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="090000001b000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB="9900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000008000000000000000000000000000ffe0000000000000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r14}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r14, &(0x7f0000000880)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x20, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000181100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000008d73800001000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x3ff, 0x79, &(0x7f0000000600)=""/121, 0x41000, 0x50, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000780)=[r1, r7, r9, r13, r14], &(0x7f00000007c0)=[{0x2, 0x3, 0x3, 0x8}, {0x0, 0x2, 0xf, 0xa}, {0x2, 0x2, 0x5, 0x1}, {0x5, 0x4, 0x6, 0x2}, {0x1, 0x2, 0x3, 0x9}]}, 0x94) tee(r6, r9, 0x8f5, 0x100000000000000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 28.622748508s ago: executing program 2 (id=3784): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000290050004000d00000004000600152cfa09d77e73b66054467fd5a7b7d2213fbe0bd94e3c420c1a05c9fddf961ab22b76b5190d915eca2ceab1b172f77ffb0d135dc1b1361adc58e42b9e06f5f1e8a41a89a6c03ead9454"], 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000290050004000d00000004000600152cfa09d77e73b66054467fd5a7b7d2213fbe0bd94e3c420c1a05c9fddf961ab22b76b5190d915eca2ceab1b172f77ffb0d135dc1b1361adc58e42b9e06f5f1e8a41a89a6c03ead9454"], 0x40}}, 0x0) (async) 28.500449902s ago: executing program 2 (id=3785): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc41b7c3e3f161ba2}}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x41, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdc2}, 0x94) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) 28.215003761s ago: executing program 2 (id=3786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'U'}]}], {0x14}}, 0x84}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f0000000140)=@ethtool_ringparam={0x1f, 0x0, 0x2, 0x37d7, 0x9, 0x6, 0x7, 0x1, 0x10}}) 28.069710211s ago: executing program 3 (id=3787): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) (async, rerun: 64) sendto$inet(r1, &(0x7f0000000300)="8995b3c271bab84f6e841cd28301f2e02519276836b2ab14ba300f39a71758d74d011771db342aa6df71dc54faabe6ccc2dae1fdf17d4c74618af0933c8c800ec3ce49bd4af9b8cf0b15e8ad756f12238f66ee49d20487065dad7cffef082a59ee2b21eb73656d3dc03547888735a17218c20071551f0d51963eca94a593476b25dedb707e7b8ce8b652bc423029d796b484ee048820f540c45770a40a143a1596e1fbc57e45bd84e16556ffb7990bfd000073126510", 0xb6, 0x4044880, 0x0, 0x0) (rerun: 64) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) shutdown(r4, 0x2) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000003200)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x3, 0x0, 0x0, 0x6ea2c18f0a9d0553, @rand_addr=' \x01\x00', @empty}}) (rerun: 32) 28.000153222s ago: executing program 2 (id=3788): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x239, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 17.948043201s ago: executing program 4 (id=3789): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x12) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x66) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f0000000080)=""/124, &(0x7f0000000040)=0x7c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7, @remote, 0xac5c}}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0xa0}}, 0x0) 0s ago: executing program 32 (id=3770): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b575", 0x2}], 0x1}], 0x1, 0x8001) accept4(r2, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="280000006800010000000000000000000a00000000000000060007000800000008000500", @ANYRES32=r4, @ANYBLOB="205f7725866b4c533425db458f9c5143396ae63afa628660cc33741d2ba85e744a05b675fb065424cf1e45bc967d0f3a3e9b72d5f976037a80642bf2"], 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3, 0x10}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)={r7, 0x1000, "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"}, &(0x7f00000013c0)=0x1008) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r8 = socket$inet6(0xa, 0x2, 0x1) setsockopt$inet6_udp_int(r8, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14, 0x0) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x1}, 0x4) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x8001}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100000000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="0000000400aa0000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x240400c4) kernel console output (not intermixed with test programs): 2/0x9f0 [ 425.773300][T13888] ? __might_fault+0xaf/0x130 [ 425.773345][T13888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.773379][T13888] ? import_iovec+0x73/0xa0 [ 425.773436][T13888] ___sys_sendmsg+0x2a5/0x360 [ 425.773456][T13888] ? __lock_acquire+0x6b5/0x2cf0 [ 425.773497][T13888] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.773527][T13888] ? futex_wait+0x2a2/0x390 [ 425.773601][T13888] ? __fget_files+0x2a/0x420 [ 425.773640][T13888] ? __fget_files+0x3a0/0x420 [ 425.773679][T13888] __x64_sys_sendmsg+0x1bd/0x2a0 [ 425.773705][T13888] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.773736][T13888] ? rcu_is_watching+0x15/0xb0 [ 425.773774][T13888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.773818][T13888] do_syscall_64+0x174/0x580 [ 425.773862][T13888] ? trace_irq_disable+0x3b/0x140 [ 425.773900][T13888] ? clear_bhb_loop+0x40/0x90 [ 425.773928][T13888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.773949][T13888] RIP: 0033:0x7fb99079ce59 [ 425.773994][T13888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.774036][T13888] RSP: 002b:00007fb98e9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.774067][T13888] RAX: ffffffffffffffda RBX: 00007fb990a15fa0 RCX: 00007fb99079ce59 [ 425.774083][T13888] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000006 [ 425.774097][T13888] RBP: 00007fb990832d6f R08: 0000000000000000 R09: 0000000000000000 [ 425.774110][T13888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.774122][T13888] R13: 00007fb990a16038 R14: 00007fb990a15fa0 R15: 00007ffcebc29a08 [ 425.774160][T13888] [ 426.777155][T13926] netem: change failed [ 426.816237][T13930] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 426.910566][T13935] __nla_validate_parse: 11 callbacks suppressed [ 426.910587][T13935] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.2131'. [ 427.215318][T13949] syzkaller1: entered promiscuous mode [ 427.227577][T13949] syzkaller1: entered allmulticast mode [ 427.448078][T13957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2136'. [ 427.482302][T13959] net_ratelimit: 46 callbacks suppressed [ 427.482378][T13959] openvswitch: netlink: VXLAN extension 1 has unexpected len 2 expected 4 [ 427.633655][T13964] vcan1: entered promiscuous mode [ 427.651879][T13964] vcan1: entered allmulticast mode [ 427.878017][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2141'. [ 427.991641][T13988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.168010][T14002] netlink: 'syz.4.2148': attribute type 1 has an invalid length. [ 428.267912][T14002] 8021q: adding VLAN 0 to HW filter on device bond13 [ 428.398962][T14015] hsr0: left promiscuous mode [ 428.431481][T14020] netlink: 'syz.1.2152': attribute type 1 has an invalid length. [ 428.486737][T14015] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 428.499678][T14023] netlink: 'syz.2.2153': attribute type 1 has an invalid length. [ 428.531681][T14031] netlink: 'syz.4.2155': attribute type 9 has an invalid length. [ 428.574989][T14031] netlink: 'syz.4.2155': attribute type 9 has an invalid length. [ 428.616643][T14031] xt_socket: unknown flags 0xe4 [ 428.626480][T14023] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 428.664255][T14042] netlink: 'syz.3.2156': attribute type 4 has an invalid length. [ 428.704457][T14042] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2156'. [ 428.975095][T14050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2159'. [ 429.012194][T14049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2159'. [ 429.814304][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'. [ 429.866266][T14083] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 429.892629][T14083] gretap1: entered promiscuous mode [ 429.908734][T14083] gretap1: entered allmulticast mode [ 430.196180][T14094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2172'. [ 430.236334][T14100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2173'. [ 430.318307][T14094] 8021q: adding VLAN 0 to HW filter on device bond10 [ 430.398309][T14104] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 430.467815][T14122] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2177'. [ 430.510707][T14119] can: request_module (can-proto-0) failed. [ 430.554386][T14113] dvmrp0: entered allmulticast mode [ 430.626255][T14124] syzkaller0: entered promiscuous mode [ 430.655499][T14124] syzkaller0: entered allmulticast mode [ 430.683120][T14129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.893058][T14141] unsupported nlmsg_type 40 [ 430.923254][T14141] Cannot find set identified by id 65534 to match [ 431.105241][T14155] gretap2: entered promiscuous mode [ 431.123084][T14156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.129939][T14155] gretap2: entered allmulticast mode [ 431.784718][T14190] erspan0: entered promiscuous mode [ 431.801007][T14190] vlan4: entered promiscuous mode [ 431.928688][T14201] __nla_validate_parse: 10 callbacks suppressed [ 431.928710][T14201] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2203'. [ 431.978009][T14199] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2202'. [ 432.031291][T14205] x_tables: duplicate underflow at hook 1 [ 432.057471][T14205] ’: renamed from bond_slave_0 (while UP) [ 432.114723][T14205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'. [ 432.603666][T14229] netlink: 'syz.4.2214': attribute type 1 has an invalid length. [ 432.612959][T14229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2214'. [ 432.858915][ T29] audit: type=1804 audit(1780863083.925:8): pid=14228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2213" name="/newroot/420/cgroup.controllers" dev="tmpfs" ino=2157 res=1 errno=0 [ 432.914958][ T29] audit: type=1800 audit(1780863083.925:9): pid=14228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2213" name="cgroup.controllers" dev="tmpfs" ino=2157 res=0 errno=0 [ 432.989130][T14248] tipc: Cannot configure node identity twice [ 433.034864][T14252] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2218'. [ 433.156713][T14258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2219'. [ 433.174491][T14260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2221'. [ 433.522058][T14281] netlink: 'syz.1.2224': attribute type 11 has an invalid length. [ 433.575812][T14281] netlink: 'syz.1.2224': attribute type 4 has an invalid length. [ 433.599945][T14281] netlink: 'syz.1.2224': attribute type 6 has an invalid length. [ 433.608282][T14281] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.2224'. [ 433.907184][T14305] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2232'. [ 434.062207][T14310] IPv6: addrconf: prefix option has invalid lifetime [ 434.086416][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2234'. [ 434.152347][T14315] netlink: 'syz.0.2236': attribute type 30 has an invalid length. [ 434.402794][T14328] netlink: 'syz.1.2239': attribute type 83 has an invalid length. [ 434.555155][T14332] syzkaller0: entered promiscuous mode [ 434.561959][T14332] syzkaller0: entered allmulticast mode [ 434.693416][T14345] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 435.276215][T14368] can: request_module (can-proto-0) failed. [ 436.512333][T14439] syzkaller0: entered promiscuous mode [ 436.528959][T14439] syzkaller0: entered allmulticast mode [ 436.561959][T14451] smc: adding net device syzkaller1 with user defined pnetid SYZ2 [ 436.706873][T14450] smc: removing net device syzkaller1 with user defined pnetid SYZ2 [ 436.831301][T14455] syz.4.2275: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 436.860795][T14455] CPU: 0 UID: 0 PID: 14455 Comm: syz.4.2275 Not tainted syzkaller #0 PREEMPT(full) [ 436.860830][T14455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 436.860843][T14455] Call Trace: [ 436.860853][T14455] [ 436.860863][T14455] dump_stack_lvl+0xe8/0x150 [ 436.860896][T14455] warn_alloc+0x249/0x340 [ 436.860929][T14455] ? stack_trace_save+0xa9/0x100 [ 436.860965][T14455] ? __pfx_warn_alloc+0x10/0x10 [ 436.861005][T14455] ? kasan_save_track+0x4f/0x80 [ 436.861033][T14455] ? kasan_save_track+0x3e/0x80 [ 436.861059][T14455] ? __kasan_kmalloc+0x93/0xb0 [ 436.861086][T14455] ? __kmalloc_cache_noprof+0x31c/0x660 [ 436.861114][T14455] ? xskq_create+0x56/0x170 [ 436.861210][T14455] ? xsk_setsockopt+0x54c/0x990 [ 436.861234][T14455] ? do_sock_setsockopt+0x17c/0x1b0 [ 436.861292][T14455] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 436.861321][T14455] ? do_syscall_64+0x174/0x580 [ 436.861347][T14455] __vmalloc_node_range_noprof+0x132/0x1750 [ 436.861406][T14455] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 436.861439][T14455] ? __kasan_kmalloc+0x93/0xb0 [ 436.861477][T14455] vmalloc_user_noprof+0xad/0xe0 [ 436.861506][T14455] ? xskq_create+0xbf/0x170 [ 436.861536][T14455] xskq_create+0xbf/0x170 [ 436.861569][T14455] xsk_init_queue+0x8a/0xe0 [ 436.861612][T14455] xsk_setsockopt+0x54c/0x990 [ 436.861643][T14455] ? __pfx_xsk_setsockopt+0x10/0x10 [ 436.861671][T14455] ? __pfx_aa_sk_perm+0x10/0x10 [ 436.861725][T14455] ? aa_sock_opt_perm+0xff/0x1a0 [ 436.861758][T14455] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 436.861787][T14455] ? __pfx_xsk_setsockopt+0x10/0x10 [ 436.861818][T14455] do_sock_setsockopt+0x17c/0x1b0 [ 436.861857][T14455] __x64_sys_setsockopt+0x13d/0x1b0 [ 436.861892][T14455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.861917][T14455] do_syscall_64+0x174/0x580 [ 436.861938][T14455] ? trace_irq_disable+0x3b/0x140 [ 436.861970][T14455] ? clear_bhb_loop+0x40/0x90 [ 436.861994][T14455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.862011][T14455] RIP: 0033:0x7ff4ad79ce59 [ 436.862029][T14455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.862046][T14455] RSP: 002b:00007ff4ae692028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 436.862068][T14455] RAX: ffffffffffffffda RBX: 00007ff4ada15fa0 RCX: 00007ff4ad79ce59 [ 436.862082][T14455] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 436.862094][T14455] RBP: 00007ff4ad832d6f R08: 0000000000000004 R09: 0000000000000000 [ 436.862107][T14455] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.862120][T14455] R13: 00007ff4ada16038 R14: 00007ff4ada15fa0 R15: 00007ffca7fbced8 [ 436.862149][T14455] [ 436.862531][T14455] Mem-Info: [ 436.992193][T14464] __nla_validate_parse: 5 callbacks suppressed [ 436.992212][T14464] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2276'. [ 437.030588][T14455] active_anon:5759 inactive_anon:5 isolated_anon:0 [ 437.030588][T14455] active_file:2244 inactive_file:40298 isolated_file:0 [ 437.030588][T14455] unevictable:768 dirty:79 writeback:0 [ 437.030588][T14455] slab_reclaimable:11342 slab_unreclaimable:106485 [ 437.030588][T14455] mapped:29135 shmem:1342 pagetables:3440 [ 437.030588][T14455] sec_pagetables:0 bounce:0 [ 437.030588][T14455] kernel_misc_reclaimable:0 [ 437.030588][T14455] free:1317015 free_pcp:9401 free_cma:0 [ 437.192015][T14470] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2281'. [ 437.207290][T14455] Node 0 active_anon:22936kB inactive_anon:20kB active_file:8976kB inactive_file:160992kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116540kB dirty:316kB writeback:0kB shmem:3832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14168kB pagetables:13696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 437.250298][T14455] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 437.283722][T14455] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.326683][T14455] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 437.337999][T14455] Node 0 DMA32 free:1309092kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22936kB inactive_anon:20kB active_file:8976kB inactive_file:160992kB unevictable:1536kB writepending:316kB zspages:0kB present:3129332kB managed:2552788kB mlocked:0kB bounce:0kB free_pcp:35776kB local_pcp:14784kB free_cma:0kB [ 437.372903][T14455] lowmem_reserve[]: 0 0 0 0 0 [ 437.377767][T14455] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 437.384608][T14466] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 437.409038][T14455] lowmem_reserve[]: 0 0 0 0 0 [ 437.417878][T14473] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 437.418875][T14455] Node 1 Normal free:3943908kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1760kB local_pcp:0kB free_cma:0kB [ 437.433927][T14473] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 437.469801][T14466] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 437.524329][T14466] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 437.533315][T14455] lowmem_reserve[]: 0 0 0 0 0 [ 437.539587][T14466] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 437.547431][T14455] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 437.562168][T14455] Node 0 DMA32: 5992*4kB (UME) 3637*8kB (UME) 2376*16kB (UME) 1823*32kB (UME) 560*64kB (UME) 881*128kB (UM) 534*256kB (UM) 291*512kB (UM) 131*1024kB (UM) 37*2048kB (UME) 126*4096kB (UM) = 1309736kB [ 437.589985][T14466] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 437.598613][T14466] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 437.608657][T14455] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 437.631013][T14455] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3943908kB [ 437.648925][T14455] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.660043][T14455] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 437.670245][T14455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.681230][T14455] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 437.693786][T14455] 43831 total pagecache pages [ 437.698557][T14455] 0 pages in swap cache [ 437.706433][T14455] Free swap = 124996kB [ 437.712228][T14482] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2284'. [ 437.722339][T14455] Total swap = 124996kB [ 437.725280][T14466] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 437.726626][T14455] 2097051 pages RAM [ 437.738921][T14455] 0 pages HighMem/MovableOnly [ 437.750219][T14466] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 437.751750][T14455] 427069 pages reserved [ 437.763557][T14455] 0 pages cma reserved [ 437.793123][T14466] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 437.829046][T14466] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 438.106960][T14499] smc: adding net device syzkaller1 with user defined pnetid SYZ2 [ 438.171281][T14500] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2288'. [ 438.373626][T14487] netlink: 'syz.1.2286': attribute type 3 has an invalid length. [ 438.420291][T14508] dvmrp0: left allmulticast mode [ 438.450564][T14489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2286'. [ 438.565582][T14512] netlink: 'syz.3.2292': attribute type 23 has an invalid length. [ 438.677613][T14516] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2292'. [ 438.735031][T14519] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2292'. [ 438.759654][T14514] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2293'. [ 438.769706][T14514] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2293'. [ 438.784264][T14521] netlink: 'syz.2.2294': attribute type 1 has an invalid length. [ 438.908881][T14494] smc: removing net device syzkaller1 with user defined pnetid SYZ2 [ 438.979782][T14529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2296'. [ 439.542591][T14553] netlink: 'syz.4.2304': attribute type 1 has an invalid length. [ 439.743622][T14564] ip6tnl0: Caught tx_queue_len zero misconfig [ 439.970201][T14574] netlink: 'syz.0.2310': attribute type 1 has an invalid length. [ 440.040507][T14574] 8021q: adding VLAN 0 to HW filter on device bond7 [ 440.086057][T14581] bond7: (slave veth9): Enslaving as an active interface with a down link [ 440.135211][T14574] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 440.153508][T14574] bond7: (slave batadv1): making interface the new active one [ 440.173953][T14574] batadv1: entered promiscuous mode [ 440.201238][T14574] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 440.231353][T14576] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 440.260047][T14597] netlink: 'syz.3.2318': attribute type 1 has an invalid length. [ 440.285906][T14576] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 440.287585][T14598] netlink: 'syz.1.2317': attribute type 10 has an invalid length. [ 440.665821][T14626] 0ŖX¹¦Dö»: renamed from gretap0 (while UP) [ 440.698543][T14626] 0ŖX¹¦Dö»: entered allmulticast mode [ 440.871142][T14638] netlink: 'syz.0.2330': attribute type 1 has an invalid length. [ 440.937442][T14638] 8021q: adding VLAN 0 to HW filter on device bond8 [ 441.124696][T14649] tipc: Enabled bearer , priority 11 [ 441.905955][T14699] netlink: 'syz.3.2344': attribute type 1 has an invalid length. [ 442.164831][T14714] netlink: 'syz.4.2348': attribute type 1 has an invalid length. [ 442.397605][T14725] __nla_validate_parse: 21 callbacks suppressed [ 442.397627][T14725] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2354'. [ 442.497159][T14728] 8021q: adding VLAN 0 to HW filter on device bond11 [ 442.725446][T14749] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2360'. [ 442.788097][T14749] geneve1: left promiscuous mode [ 442.832960][T14749] team0: Port device geneve1 added [ 443.052471][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2366'. [ 443.075910][T14767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2366'. [ 443.105843][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2366'. [ 443.130057][T14767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2366'. [ 443.904409][T14809] syzkaller1: entered promiscuous mode [ 443.919811][T14809] syzkaller1: entered allmulticast mode [ 444.124700][T14815] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 444.493728][T14837] validate_nla: 4 callbacks suppressed [ 444.493748][T14837] netlink: 'syz.0.2388': attribute type 32 has an invalid length. [ 444.528147][T14837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2388'. [ 444.546354][T14843] netlink: 'syz.0.2388': attribute type 32 has an invalid length. [ 444.564540][T14837] bond9: Setting coupled_control to off (0) [ 444.588819][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2388'. [ 444.755420][T14843] bond10: Setting coupled_control to off (0) [ 444.792442][T14852] macvlan0: entered promiscuous mode [ 444.947045][T14861] bond14: entered promiscuous mode [ 444.952914][T14861] bond14: entered allmulticast mode [ 444.958661][T14861] 8021q: adding VLAN 0 to HW filter on device bond14 [ 444.997431][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2396'. [ 445.007669][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2396'. [ 445.023599][T14862] bond15: entered promiscuous mode [ 445.028883][T14862] bond15: entered allmulticast mode [ 445.037801][T14862] 8021q: adding VLAN 0 to HW filter on device bond15 [ 445.333656][T14889] syzkaller0: entered promiscuous mode [ 445.339975][T14889] syzkaller0: entered allmulticast mode [ 445.553155][T14902] xt_TCPMSS: Only works on TCP SYN packets [ 445.615433][T14905] x_tables: unsorted underflow at hook 3 [ 446.546472][T14960] ipt_rpfilter: unknown options [ 446.711769][T14981] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 446.913742][T14997] netlink: 'syz.4.2428': attribute type 83 has an invalid length. [ 447.168316][T15007] smc: adding net device syzkaller1 with user defined pnetid SYZ2 [ 447.265236][T15006] smc: removing net device syzkaller1 with user defined pnetid SYZ2 [ 447.290103][T15016] sctp: [Deprecated]: syz.3.2433 (pid 15016) Use of int in max_burst socket option. [ 447.290103][T15016] Use struct sctp_assoc_value instead [ 447.306561][T15017] sctp: [Deprecated]: syz.3.2433 (pid 15017) Use of int in max_burst socket option. [ 447.306561][T15017] Use struct sctp_assoc_value instead [ 447.438912][T15026] __nla_validate_parse: 7 callbacks suppressed [ 447.438934][T15026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2437'. [ 447.601889][T15043] xt_l2tp: unknown flags: 10 [ 447.685381][T15046] netlink: 'syz.4.2441': attribute type 21 has an invalid length. [ 447.702862][T15046] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2441'. [ 447.713114][T15046] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2441'. [ 447.774845][T15048] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.783016][T15048] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.916574][T15059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2446'. [ 447.944667][T15063] bond16: option lp_interval: invalid value (0) [ 447.951040][T15063] bond16: option lp_interval: allowed values 1 - 2147483647 [ 447.961025][T15063] bond16 (unregistering): Released all slaves [ 448.038388][T15060] netlink: 'syz.1.2444': attribute type 10 has an invalid length. [ 448.064809][T15060] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2444'. [ 448.127441][T15071] openvswitch: netlink: IP tunnel dst address not specified [ 448.195002][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2448'. [ 448.448343][T15084] veth0: entered promiscuous mode [ 448.464537][T15084] veth0: left promiscuous mode [ 448.505058][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2453'. [ 448.523164][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2457'. [ 448.536505][T15093] Cannot find add_set index 46338 as target [ 448.546307][T15093] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2456'. [ 448.557534][T15084] bond12: option ad_user_port_key: invalid value (43690) [ 448.565044][T15084] bond12: option ad_user_port_key: allowed values 0 - 1023 [ 448.574579][T15084] bond12 (unregistering): Released all slaves [ 448.574838][T15097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2457'. [ 448.752948][T15103] netlink: 'syz.0.2459': attribute type 1 has an invalid length. [ 448.790317][T15103] netlink: 'syz.0.2459': attribute type 4 has an invalid length. [ 448.804719][T15107] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 449.119078][T15121] tipc: Started in network mode [ 449.130596][T15121] tipc: Node identity ac14140f, cluster identity 246 [ 449.138748][T15126] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 449.158694][T15121] tipc: New replicast peer: 255.255.255.255 [ 449.168367][T15121] tipc: Enabled bearer , priority 10 [ 449.257847][T15126] syzkaller0: entered promiscuous mode [ 449.287105][T15126] syzkaller0: entered allmulticast mode [ 449.651988][T15154] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 449.677099][T15154] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 449.823437][T15163] xt_hashlimit: size too large, truncated to 1048576 [ 450.302518][T14662] tipc: Node number set to 2886997007 [ 451.120800][ T146] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.174759][ T146] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.215406][ T146] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.302927][ T12] batadv1: left promiscuous mode [ 451.561811][T15256] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20001 [ 451.883037][T15269] bond12: Removing last ns target with arp_interval on [ 452.484332][T15301] __nla_validate_parse: 10 callbacks suppressed [ 452.484355][T15301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2502'. [ 452.676401][T15311] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 452.971892][T15327] syzkaller1: entered promiscuous mode [ 452.991420][T15327] syzkaller1: entered allmulticast mode [ 453.850301][T15380] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2526'. [ 454.065259][T15390] netlink: 'syz.1.2529': attribute type 21 has an invalid length. [ 454.298613][T15394] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 454.306686][T15398] netlink: 'syz.4.2530': attribute type 2 has an invalid length. [ 454.318150][T15398] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2530'. [ 454.324163][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2533'. [ 454.335722][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2533'. [ 454.720695][T15428] openvswitch: netlink: IP tunnel dst address not specified [ 455.028508][T15442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2542'. [ 455.084192][T15448] block nbd0: not configured, cannot reconfigure [ 455.085037][T15451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2546'. [ 455.625226][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2553'. [ 455.658656][T15485] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2554'. [ 455.854699][T15496] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2558'. [ 455.993492][T15510] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 456.287172][T15530] syzkaller0: entered promiscuous mode [ 456.297144][T15530] syzkaller0: entered allmulticast mode [ 456.315268][T15526] veth0: entered promiscuous mode [ 456.461265][T15544] netlink: 'syz.3.2573': attribute type 58 has an invalid length. [ 456.496499][T15541] tipc: Invalid UDP bearer configuration [ 456.496533][T15541] tipc: Enabling of bearer rejected, failed to enable media [ 456.737072][T15548] bridge6: entered promiscuous mode [ 456.761845][T15548] bridge6: entered allmulticast mode [ 456.825041][T15561] netlink: 'syz.4.2575': attribute type 4 has an invalid length. [ 457.116330][T15572] syzkaller0: entered promiscuous mode [ 457.138877][T15572] syzkaller0: entered allmulticast mode [ 457.640179][T15605] __nla_validate_parse: 6 callbacks suppressed [ 457.640201][T15605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2584'. [ 457.697095][T15609] veth0: entered promiscuous mode [ 457.706345][T15608] netlink: 'syz.0.2590': attribute type 1 has an invalid length. [ 457.964647][T15614] bond13: (slave geneve4): making interface the new active one [ 457.994392][T15614] bond13: (slave geneve4): Enslaving as an active interface with an up link [ 458.073033][ T7452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 458.104088][ T7452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 458.159115][ T7452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 458.397360][ T7452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 458.428366][T15606] veth0: left promiscuous mode [ 458.637665][T15656] netlink: 'syz.2.2599': attribute type 15 has an invalid length. [ 458.657453][T15656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2599'. [ 458.981883][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2607'. [ 459.042289][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2606'. [ 459.066160][T15681] openvswitch: netlink: Flow key attribute not present in set flow. [ 459.332914][T15704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.373733][T15702] bond13: option lp_interval: invalid value (0) [ 459.380600][T15702] bond13: option lp_interval: allowed values 1 - 2147483647 [ 459.389457][T15702] bond13 (unregistering): Released all slaves [ 459.488061][T15713] Cannot find del_set index 4 as target [ 459.723568][T15725] syzkaller0: entered promiscuous mode [ 459.733620][T15725] syzkaller0: entered allmulticast mode [ 459.741215][T15725] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 459.758304][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2619'. [ 460.251774][T15747] syzkaller0: entered promiscuous mode [ 460.262196][T15747] syzkaller0: entered allmulticast mode [ 460.627506][T15781] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2631'. [ 460.892808][T15788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2635'. [ 462.676731][T15806] batadv_slave_0: Caught tx_queue_len zero misconfig [ 463.026261][T15826] netlink: 'syz.3.2643': attribute type 5 has an invalid length. [ 463.154212][T15832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2645'. [ 463.419132][T15853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2651'. [ 463.473475][T15850] netlink: 'syz.1.2649': attribute type 4 has an invalid length. [ 463.510298][T15850] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2649'. [ 463.821861][T15870] openvswitch: netlink: Key type 8198 is out of range max 32 [ 464.196761][T15899] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20002 [ 464.294792][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2661'. [ 464.322898][T15906] netlink: 'syz.3.2663': attribute type 21 has an invalid length. [ 464.636600][T15921] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 464.800692][T15924] netlink: 'syz.3.2669': attribute type 49 has an invalid length. [ 464.992073][T15924] ip6gretap0: entered promiscuous mode [ 465.015288][T15924] ip6gretap0: entered allmulticast mode [ 465.254808][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2675'. [ 465.641790][T15973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2680'. [ 466.075570][T15994] tipc: Enabling of bearer rejected, failed to enable media [ 466.167698][T15999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2686'. [ 466.223826][T16005] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2688'. [ 466.274647][T16005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2688'. [ 466.329095][T16005] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2688'. [ 466.395890][T16005] netlink: 'syz.2.2688': attribute type 3 has an invalid length. [ 466.429968][T16005] netlink: 'syz.2.2688': attribute type 2 has an invalid length. [ 467.291973][T16068] syzkaller0: entered promiscuous mode [ 467.320111][T16068] syzkaller0: entered allmulticast mode [ 468.238295][T16111] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 468.548670][T16120] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 468.673156][T16129] __nla_validate_parse: 6 callbacks suppressed [ 468.673178][T16129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2710'. [ 468.815892][T16140] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2714'. [ 468.884683][T16140] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2714'. [ 469.078111][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2717'. [ 469.104302][T16153] vlan0: entered promiscuous mode [ 469.110598][T16152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2717'. [ 469.213722][T16153] bond13: option min_links: invalid value (18446744073709551614) [ 469.236147][T16153] bond13: option min_links: allowed values 0 - 2147483647 [ 469.246945][T16153] bond13 (unregistering): Released all slaves [ 469.467721][T16173] x_tables: duplicate underflow at hook 1 [ 470.141224][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2731'. [ 470.169020][T16199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2731'. [ 470.641976][T16213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.769673][T16217] netlink: 'syz.4.2738': attribute type 23 has an invalid length. [ 471.798001][T16241] netlink: 'syz.1.2746': attribute type 1 has an invalid length. [ 472.033916][T16247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2749'. [ 472.157952][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2750'. [ 472.174366][T16254] netlink: 'syz.0.2751': attribute type 39 has an invalid length. [ 472.244480][T16258] netlink: 'syz.2.2752': attribute type 3 has an invalid length. [ 472.408909][T16261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2754'. [ 472.532035][T16265] smc: adding net device syzkaller1 with user defined pnetid SYZ2 [ 472.791403][T16277] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 473.263724][T16296] netlink: 'syz.4.2764': attribute type 1 has an invalid length. [ 473.358123][T16296] 8021q: adding VLAN 0 to HW filter on device bond16 [ 473.410012][T16296] netlink: 'syz.4.2764': attribute type 1 has an invalid length. [ 473.423631][T16296] netlink: 'syz.4.2764': attribute type 2 has an invalid length. [ 473.521395][T16301] bond11: (slave veth0_to_bond): Releasing backup interface [ 473.564918][T16301] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 473.691643][T16264] smc: removing net device syzkaller1 with user defined pnetid SYZ2 [ 474.000995][T16329] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2769'. [ 474.395333][T16340] bond13: invalid ARP target 0.0.0.0 specified for addition [ 474.425863][T16340] bond13: option arp_ip_target: invalid value (0) [ 474.455299][T16340] bond13 (unregistering): Released all slaves [ 474.722361][T16354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2777'. [ 474.768747][T16359] netlink: 'syz.0.2780': attribute type 33 has an invalid length. [ 474.807444][T16359] bond14: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 474.823189][T16359] bond14 (unregistering): Released all slaves [ 474.840171][T16167] Set syz1 is full, maxelem 65536 reached [ 475.207115][T16383] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2786'. [ 475.476792][T16404] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 475.511623][T16397] syzkaller1: entered promiscuous mode [ 475.522891][T16397] syzkaller1: entered allmulticast mode [ 476.204457][T16448] xt_hashlimit: size too large, truncated to 1048576 [ 476.294930][T16449] syzkaller0: entered promiscuous mode [ 476.320749][T16449] syzkaller0: entered allmulticast mode [ 476.371139][T16458] netlink: 'syz.2.2809': attribute type 4 has an invalid length. [ 476.388550][T16458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2809'. [ 476.414892][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2809'. [ 476.916217][T16473] netlink: 'syz.0.2814': attribute type 1 has an invalid length. [ 477.024200][ T5643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 477.028640][T16482] netlink: 4432 bytes leftover after parsing attributes in process `syz.1.2812'. [ 477.040808][T16470] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.054933][T16482] openvswitch: netlink: IP tunnel dst address not specified [ 477.063612][ T5643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 477.073204][ T5643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 477.090162][ T5643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 477.101693][ T5643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 477.146490][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 477.163407][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 477.172011][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 477.196960][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 477.214099][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 477.347179][T16470] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.661204][T16470] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.800034][T16510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2821'. [ 478.181666][T16507] veth0: entered promiscuous mode [ 478.191772][T16532] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2824'. [ 478.227239][T16521] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 478.275258][T16532] vlan4: entered allmulticast mode [ 478.285189][T16532] erspan0: entered allmulticast mode [ 478.297881][T16504] veth0: left promiscuous mode [ 478.437513][ T1119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.467800][ T1119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.678134][ T7452] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.731446][ T1119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.742195][ T1119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.984509][T16561] syzkaller0: entered promiscuous mode [ 478.991080][T16561] syzkaller0: entered allmulticast mode [ 478.998185][ T7456] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.023882][ T7450] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.073715][ T1119] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.086610][ T1119] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.309638][ T5643] Bluetooth: hci5: command tx timeout [ 480.945239][T16576] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 481.103581][ T7451] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.383031][ T5643] Bluetooth: hci5: command tx timeout [ 481.488225][T16596] bond0: entered promiscuous mode [ 481.513202][T16596] batadv0: entered promiscuous mode [ 481.540584][T16596] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 481.573166][T16596] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 481.602453][T16596] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 481.628925][T16596] bond0: left promiscuous mode [ 481.642185][T16596] batadv0: left promiscuous mode [ 481.706378][T16600] bond0: entered promiscuous mode [ 481.724890][T16600] batadv0: entered promiscuous mode [ 481.746319][T16600] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 481.771267][T16600] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 481.788198][T16600] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 481.811525][T16600] bond0: left promiscuous mode [ 481.831579][T16600] batadv0: left promiscuous mode [ 481.943679][T16483] wg1 speed is unknown, defaulting to 1000 [ 482.014569][T16483] lo speed is unknown, defaulting to 1000 [ 482.065247][T16620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2839'. [ 482.298964][ T1119] tipc: Resetting bearer [ 482.714908][ T1119] tipc: Disabling bearer [ 482.772277][ T1119] gretap0 (unregistering): left promiscuous mode [ 483.013756][ T1119] bond12 (unregistering): (slave bridge4): Releasing backup interface [ 483.022923][ T1119] bridge4 (unregistering): left promiscuous mode [ 483.181521][ T1119] bond0 (unregistering): Released all slaves [ 483.192413][ T1119] bond1 (unregistering): Released all slaves [ 483.207345][ T1119] bond2 (unregistering): Released all slaves [ 483.223665][ T1119] bond3 (unregistering): Released all slaves [ 483.240437][ T1119] bond4 (unregistering): Released all slaves [ 483.261913][ T1119] bond5 (unregistering): Released all slaves [ 483.279634][ T1119] bond6 (unregistering): Released all slaves [ 483.298297][ T1119] bond7 (unregistering): Released all slaves [ 483.323057][ T1119] bond8 (unregistering): Released all slaves [ 483.337128][ T1119] bond9 (unregistering): Released all slaves [ 483.352313][ T1119] bond10 (unregistering): Released all slaves [ 483.366677][ T1119] bond11 (unregistering): Released all slaves [ 483.387344][ T1119] bond12 (unregistering): Released all slaves [ 483.459555][ T5643] Bluetooth: hci5: command tx timeout [ 483.466188][ T7842] wg1 speed is unknown, defaulting to 1000 [ 483.491766][ T7842] syz2: Port: 1 Link DOWN [ 483.662598][ T1119] tipc: Disabling bearer [ 483.678155][ T1119] tipc: Disabling bearer [ 483.692198][ T1119] tipc: Left network mode [ 484.157537][T16663] bond10 (unregistering): Released all slaves [ 484.457892][T16687] netlink: 'syz.1.2851': attribute type 10 has an invalid length. [ 484.493149][T16689] netlink: 'syz.4.2850': attribute type 1 has an invalid length. [ 484.590935][T16684] syzkaller0: entered promiscuous mode [ 484.607040][T16684] syzkaller0: entered allmulticast mode [ 484.794721][T16698] geneve3: entered promiscuous mode [ 484.967760][ T141] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 40123 - 0 [ 485.128028][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 485.143783][ T141] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 40123 - 0 [ 485.163165][T16716] IPVS: Error connecting to the multicast addr [ 485.243885][ T141] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 40123 - 0 [ 485.268519][ T141] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 40123 - 0 [ 485.278822][T16483] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.289050][T16719] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2856'. [ 485.294880][T16728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2854'. [ 485.301152][T16483] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.315746][T16483] bridge_slave_0: entered allmulticast mode [ 485.324415][T16483] bridge_slave_0: entered promiscuous mode [ 485.333871][T16483] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.350762][T16483] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.365664][T16483] bridge_slave_1: entered allmulticast mode [ 485.384998][T16483] bridge_slave_1: entered promiscuous mode [ 485.472548][T16722] GUP no longer grows the stack in syz.3.2858 (16722): 200000003000-20000000a000 (200000001000) [ 485.506823][T16722] CPU: 0 UID: 0 PID: 16722 Comm: syz.3.2858 Not tainted syzkaller #0 PREEMPT(full) [ 485.506853][T16722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 485.506865][T16722] Call Trace: [ 485.506875][T16722] [ 485.506885][T16722] dump_stack_lvl+0xe8/0x150 [ 485.506924][T16722] __get_user_pages+0x2378/0x2730 [ 485.506982][T16722] ? __gup_longterm_locked+0xc4e/0x1630 [ 485.507011][T16722] ? down_read_killable+0x1bb/0x340 [ 485.507054][T16722] __gup_longterm_locked+0xdcf/0x1630 [ 485.507088][T16722] ? lock_acquire+0x106/0x350 [ 485.507133][T16722] gup_fast_fallback+0x1d84/0x20d0 [ 485.507200][T16722] ? __pfx_gup_fast_fallback+0x10/0x10 [ 485.507231][T16722] ? is_valid_gup_args+0x11f/0x200 [ 485.507260][T16722] ? get_user_pages_fast+0x4d/0xb0 [ 485.507289][T16722] __iov_iter_get_pages_alloc+0x370/0xa10 [ 485.507330][T16722] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 485.507407][T16722] iov_iter_get_pages2+0x5e/0xa0 [ 485.507440][T16722] __se_sys_vmsplice+0x7c7/0x1620 [ 485.507493][T16722] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 485.507526][T16722] ? __pfx_futex_wait+0x10/0x10 [ 485.507653][T16722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.507681][T16722] do_syscall_64+0x174/0x580 [ 485.507705][T16722] ? trace_irq_disable+0x3b/0x140 [ 485.507738][T16722] ? clear_bhb_loop+0x40/0x90 [ 485.507768][T16722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.507790][T16722] RIP: 0033:0x7f8dba39ce59 [ 485.507814][T16722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.507833][T16722] RSP: 002b:00007f8dbb192028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 485.507858][T16722] RAX: ffffffffffffffda RBX: 00007f8dba615fa0 RCX: 00007f8dba39ce59 [ 485.507875][T16722] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 485.507889][T16722] RBP: 00007f8dba432d6f R08: 0000000000000000 R09: 0000000000000000 [ 485.507904][T16722] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 485.507918][T16722] R13: 00007f8dba616038 R14: 00007f8dba615fa0 R15: 00007ffef931e3c8 [ 485.507955][T16722] [ 485.768208][T16483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.781431][T16483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.798454][ T5643] Bluetooth: hci5: command tx timeout [ 485.865968][T16483] team0: Port device team_slave_0 added [ 485.875437][T16483] team0: Port device team_slave_1 added [ 486.092564][T16752] netlink: 'syz.0.2866': attribute type 1 has an invalid length. [ 486.131565][T16755] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2865'. [ 486.156883][T16755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2865'. [ 486.202482][T16752] bond14: entered promiscuous mode [ 486.220813][T16752] 8021q: adding VLAN 0 to HW filter on device bond14 [ 486.254959][T16483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.262230][T16483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.302904][T16483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.337518][T16759] bond14: (slave bridge6): making interface the new active one [ 486.347119][T16759] bridge6: entered promiscuous mode [ 486.356289][T16759] bond14: (slave bridge6): Enslaving as an active interface with an up link [ 486.409019][T16755] bond10: Invalid ad_actor_system MAC address. [ 486.416128][T16755] bond10: option ad_actor_system: invalid value (1) [ 486.428911][T16755] bond10 (unregistering): Released all slaves [ 486.474969][T16483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.507648][T16483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.542245][T16767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2867'. [ 486.585031][T16483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.632006][T16769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2867'. [ 487.202312][T16483] hsr_slave_0: entered promiscuous mode [ 487.225110][T16483] hsr_slave_1: entered promiscuous mode [ 487.266697][T16483] debugfs: 'hsr0' already exists in 'hsr' [ 487.279116][T16483] Cannot create hsr debugfs directory [ 487.317484][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 487.427962][ T1119] veth1_to_team: left promiscuous mode [ 487.466517][ T1119] veth0_macvtap: left promiscuous mode [ 487.474499][ T1119] veth1_vlan: left promiscuous mode [ 487.730988][ T141] smc: removing ib device syz0 [ 487.897742][T16813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2873'. [ 487.971037][ T7456] smbdirect: ib_dev[syz2] removed [ 488.013282][ T1119] vcan0 (unregistering): left allmulticast mode [ 488.127426][ T5881] syz0: Port: 1 Link DOWN [ 488.153947][ T141] smbdirect: ib_dev[syz0] removed [ 488.411936][T16821] netlink: 'syz.0.2875': attribute type 1 has an invalid length. [ 488.442391][T16821] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2875'. [ 488.522245][T16828] netlink: 'syz.4.2877': attribute type 1 has an invalid length. [ 488.565168][T16828] netlink: 'syz.4.2877': attribute type 2 has an invalid length. [ 488.754091][T16830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2874'. [ 489.625351][T16871] netlink: 'syz.0.2886': attribute type 2 has an invalid length. [ 489.661324][T16871] netlink: 'syz.0.2886': attribute type 8 has an invalid length. [ 489.694055][T16873] tipc: Enabling of bearer rejected, already enabled [ 489.698480][T16871] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2886'. [ 489.738211][T16873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2887'. [ 490.056999][T16851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2880'. [ 490.089869][T16851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2880'. [ 490.136686][T16886] pimreg: entered allmulticast mode [ 490.253538][T16892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2890'. [ 490.612724][T16895] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 491.174620][T16923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2897'. [ 491.435296][T16483] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 491.493818][T16483] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 491.531990][T16483] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 491.591596][T16483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 491.605006][T16483] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 491.644709][T16483] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 491.714224][T16936] vlan5: entered allmulticast mode [ 491.723250][T16483] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 491.774570][T16483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 492.032003][T16924] netlink: 'syz.0.2895': attribute type 4 has an invalid length. [ 492.053655][T16924] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2895'. [ 492.181792][T16924] .`: renamed from bond0 (while UP) [ 492.376056][ T1119] IPVS: stop unused estimator thread 0... [ 492.500682][T16483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.608442][T16483] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.703080][ T7452] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.710384][ T7452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.807798][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.815021][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.852296][T16993] netlink: 'syz.1.2910': attribute type 4 has an invalid length. [ 493.061264][T17003] netlink: 'syz.4.2912': attribute type 1 has an invalid length. [ 493.087728][T17003] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2912'. [ 493.123655][T17004] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 493.394424][T17022] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2915'. [ 494.128947][T17059] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2921'. [ 494.409084][T16483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.502698][T17076] syzkaller0: entered promiscuous mode [ 494.529763][T17076] syzkaller0: entered allmulticast mode [ 494.741607][T17084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2926'. [ 494.773729][T17084] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2926'. [ 494.889074][T16483] veth0_vlan: entered promiscuous mode [ 494.948922][T16483] veth1_vlan: entered promiscuous mode [ 495.132594][T17093] syzkaller0: entered promiscuous mode [ 495.166901][T17093] syzkaller0: entered allmulticast mode [ 495.201894][T16483] veth0_macvtap: entered promiscuous mode [ 495.237754][T16483] veth1_macvtap: entered promiscuous mode [ 495.453305][T17116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2932'. [ 495.505298][T16483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.535701][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2933'. [ 495.551344][T16483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.613634][ T7452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.644298][ T7452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.673137][ T7452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.693099][ T7452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.851374][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2936'. [ 495.907570][T17131] netlink: 'syz.3.2936': attribute type 18 has an invalid length. [ 495.970993][T17131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2936'. [ 496.047774][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.076590][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.198151][ T7452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.233442][ T7452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.555846][T17166] openvswitch: netlink: IP tunnel dst address not specified [ 496.612055][T17167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2944'. [ 496.666088][T17169] gre2: entered promiscuous mode [ 496.690436][T17169] gre2: entered allmulticast mode [ 496.850419][T17155] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 496.885349][T17174] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 496.944296][T17153] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 497.027293][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 497.036955][T17178] netlink: 'syz.4.2949': attribute type 2 has an invalid length. [ 497.063050][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 497.074127][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 497.084265][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 497.098292][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 497.707206][T17208] netlink: 'syz.3.2955': attribute type 1 has an invalid length. [ 497.745435][T17208] netlink: 'syz.3.2955': attribute type 1 has an invalid length. [ 498.057305][T17179] lo speed is unknown, defaulting to 1000 [ 498.304187][T17247] netlink: 'syz.4.2964': attribute type 10 has an invalid length. [ 498.343435][T17247] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 498.346812][T17251] __nla_validate_parse: 4 callbacks suppressed [ 498.346830][T17251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2965'. [ 498.470159][T17248] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 498.493996][T17251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2965'. [ 498.682825][T17263] team0: Device gtp0 is up. Set it down before adding it as a team port [ 498.746534][T17267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.020142][T17179] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.027525][T17179] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.035361][T17179] bridge_slave_0: entered allmulticast mode [ 499.044204][T17179] bridge_slave_0: entered promiscuous mode [ 499.053482][T17179] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.062032][T17179] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.072908][T17179] bridge_slave_1: entered allmulticast mode [ 499.081217][T17179] bridge_slave_1: entered promiscuous mode [ 499.140393][ T5639] Bluetooth: hci0: command tx timeout [ 499.174611][T17179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.235187][T17179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.375586][T17179] team0: Port device team_slave_0 added [ 499.418969][T17179] team0: Port device team_slave_1 added [ 499.531752][T17304] netlink: 'syz.3.2979': attribute type 4 has an invalid length. [ 499.583777][T17307] netlink: 'syz.3.2979': attribute type 4 has an invalid length. [ 499.672536][T17312] netlink: 'syz.4.2981': attribute type 2 has an invalid length. [ 499.750198][T17179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.785624][T17179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.834387][T17179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.864913][T17179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.884017][T17179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.912693][T17179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.930150][T17326] netlink: 'syz.1.2984': attribute type 9 has an invalid length. [ 499.952589][T17327] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2985'. [ 499.962175][T17327] netlink: 'syz.2.2985': attribute type 9 has an invalid length. [ 500.058463][ T7454] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 500.071351][ T7454] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 500.290882][T17179] hsr_slave_0: entered promiscuous mode [ 500.313042][T17179] hsr_slave_1: entered promiscuous mode [ 500.405216][ T7454] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 500.427222][ T7454] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 500.557866][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2989'. [ 500.601231][ T7454] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 500.615477][T17353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2989'. [ 500.638592][ T7454] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 500.862130][ T7454] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 500.890138][ T7454] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 500.968228][T17364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.028667][T17364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.146813][T17372] ip_vti0: entered promiscuous mode [ 501.181289][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2994'. [ 501.215812][T17376] ±’ŖØśrBŗ“: renamed from lo (while UP) [ 501.232581][ T5639] Bluetooth: hci0: command tx timeout [ 501.253001][T17379] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 501.572361][ T7454] bridge_slave_1: left allmulticast mode [ 501.598579][ T7454] bridge_slave_1: left promiscuous mode [ 501.625259][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.629024][T17393] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3003'. [ 501.662556][ T7454] bridge_slave_0: left allmulticast mode [ 501.668254][ T7454] bridge_slave_0: left promiscuous mode [ 501.685133][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.821608][ T7454] pimreg: left allmulticast mode [ 501.903741][T17403] xt_addrtype: ipv6 does not support BROADCAST matching [ 501.928455][T17403] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3005'. [ 501.956554][T17403] netlink: 1344 bytes leftover after parsing attributes in process `syz.4.3005'. [ 502.566818][T17426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3011'. [ 502.619009][ T7454] bond13 (unregistering): (slave geneve4): Releasing active interface [ 502.666037][ T7454] bond4 (unregistering): (slave geneve3): Releasing active interface [ 502.709020][ T7454] bond3 (unregistering): (slave geneve2): Releasing active interface [ 502.724372][ T7454] geneve2 (unregistering): left allmulticast mode [ 502.925923][ T7454] bond5 (unregistering): (slave bridge3): Releasing active interface [ 503.148446][ T7454] bond14 (unregistering): (slave bridge6): Releasing backup interface [ 503.160529][ T7454] bridge6 (unregistering): left promiscuous mode [ 503.231309][ T7454] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.243857][ T7454] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.257062][ T7454] .` (unregistering): Released all slaves [ 503.269092][ T7454] bond1 (unregistering): (slave bond2): Releasing backup interface [ 503.278208][ T7454] bond1 (unregistering): Released all slaves [ 503.295468][ T7454] bond2 (unregistering): Released all slaves [ 503.310283][ T5639] Bluetooth: hci0: command tx timeout [ 503.322156][ T7454] bond3 (unregistering): Released all slaves [ 503.345807][ T7454] bond4 (unregistering): Released all slaves [ 503.361322][ T7454] bond5 (unregistering): Released all slaves [ 503.376309][ T7454] bond6 (unregistering): Released all slaves [ 503.392952][ T7454] bond7 (unregistering): (slave veth9): Releasing active interface [ 503.405751][ T7454] batadv1: entered promiscuous mode [ 503.417468][ T7454] bond7 (unregistering): (slave batadv1): Releasing active interface [ 503.427490][ T7454] bond7 (unregistering): Released all slaves [ 503.443425][ T7454] bond8 (unregistering): Released all slaves [ 503.457808][ T7454] bond9 (unregistering): Released all slaves [ 503.478750][ T7454] bond10 (unregistering): Released all slaves [ 503.493699][ T7454] bond11 (unregistering): Released all slaves [ 503.508609][ T7454] bond12 (unregistering): Released all slaves [ 503.531906][ T7454] bond13 (unregistering): Released all slaves [ 503.548294][ T7454] bond14 (unregistering): Released all slaves [ 503.827702][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 503.877142][ T7454] tipc: Disabling bearer [ 503.883769][ T7454] tipc: Disabling bearer [ 503.902581][ T7454] tipc: Left network mode [ 504.123735][T17467] geneve1: entered promiscuous mode [ 504.189798][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3020'. [ 504.416749][T17474] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3021'. [ 504.584537][T17484] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3024'. [ 504.943569][T17505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3026'. [ 505.081611][T17515] validate_nla: 1 callbacks suppressed [ 505.081631][T17515] netlink: 'syz.4.3030': attribute type 1 has an invalid length. [ 505.262469][T17516] bond17: (slave bridge8): making interface the new active one [ 505.297723][T17516] bond17: (slave bridge8): Enslaving as an active interface with an up link [ 505.379841][ T5639] Bluetooth: hci0: command tx timeout [ 505.561218][T17542] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1940505411/1940505413 [ 505.605143][T17540] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3033'. [ 505.632251][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3031'. [ 505.674411][T17179] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 505.694999][T17179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.717662][T17179] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 505.752955][T17179] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 505.812666][T17179] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 505.833704][T17554] netlink: 'syz.3.3037': attribute type 2 has an invalid length. [ 505.852829][T17179] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.891761][T17179] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 505.961315][T17179] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 506.006735][ T7454] hsr_slave_0: left promiscuous mode [ 506.030422][ T7454] hsr_slave_1: left promiscuous mode [ 506.041597][ T7454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.064332][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.087319][ T7454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.105715][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.140114][T17571] netlink: 'syz.1.3042': attribute type 10 has an invalid length. [ 506.225923][T17574] netlink: 'syz.2.3043': attribute type 1 has an invalid length. [ 506.252743][ T7454] pim6reg527 (unregistering): left allmulticast mode [ 506.392587][ T7454] team0 (unregistering): Port device team_slave_1 removed [ 506.408613][ T7454] team0 (unregistering): Port device team_slave_0 removed [ 506.585993][T17574] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 506.588787][T17575] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 506.898883][T17179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.002915][T17599] pimreg3: entered allmulticast mode [ 507.142793][T17614] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3050'. [ 507.348482][T17608] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.356295][T17608] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.485424][T17608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.714924][T17179] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.785766][ T141] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.811983][ T141] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.846789][ T141] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.857206][ T7454] IPVS: stop unused estimator thread 0... [ 507.877140][ T141] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.937428][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.944690][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.025867][ T7450] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.033098][ T7450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.405293][T17659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3059'. [ 508.664446][T17674] ±’ŖØśrBŗ“: entered promiscuous mode [ 508.723148][T17674] A link change request failed with some changes committed already. Interface 26±’ŖØśrBŗ“ may have been left with an inconsistent configuration, please check. [ 508.762602][T17681] netlink: 'syz.1.3062': attribute type 1 has an invalid length. [ 508.897258][T17681] 8021q: adding VLAN 0 to HW filter on device bond10 [ 509.013291][T17689] bond10: (slave ip6gretap3): making interface the new active one [ 509.050642][T17689] bond10: (slave ip6gretap3): Enslaving as an active interface with an up link [ 509.257302][T17702] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3065'. [ 509.326389][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3065'. [ 509.352190][T17711] veth0: entered promiscuous mode [ 509.375244][T17712] block nbd0: Unsupported socket: should be TCP or UNIX. [ 509.583063][T17722] netlink: 'syz.4.3071': attribute type 1 has an invalid length. [ 509.743618][T17722] 8021q: adding VLAN 0 to HW filter on device bond18 [ 509.783160][T17709] veth0: left promiscuous mode [ 509.821290][T17179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.994401][T17179] veth0_vlan: entered promiscuous mode [ 509.997126][T17741] netlink: 'syz.2.3076': attribute type 1 has an invalid length. [ 510.113378][T17741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 510.124391][T17179] veth1_vlan: entered promiscuous mode [ 510.157932][T17750] vlan2: entered allmulticast mode [ 510.163614][T17750] bond1: entered allmulticast mode [ 510.266058][T17741] bond1: (slave geneve2): making interface the new active one [ 510.289368][T17741] geneve2: entered allmulticast mode [ 510.308671][T17741] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 510.340461][ T7450] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.375197][ T7450] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.421746][ T7450] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.454615][ T7450] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.573810][T17179] veth0_macvtap: entered promiscuous mode [ 510.602657][T17179] veth1_macvtap: entered promiscuous mode [ 510.617288][T17773] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3084'. [ 510.656343][T17179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.696885][T17179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.748264][ T99] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.763300][ T99] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.777770][ T99] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.798506][ T99] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.867718][T17780] syzkaller0: entered promiscuous mode [ 510.879390][T17780] syzkaller0: entered allmulticast mode [ 511.055829][ T7455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.074964][ T7455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.128478][T17786] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.3090'. [ 511.143358][T17786] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 511.159087][ T7455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.172535][ T7455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.503897][T17801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3096'. [ 511.895911][T17815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 511.911506][T17815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 511.922547][T17815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 511.933824][T17815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 511.953779][T17815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 512.715068][T17848] IPv6: Can't replace route, no match found [ 512.741818][T17848] IPv6: Can't replace route, no match found [ 512.753366][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3105'. [ 512.889822][T17814] lo speed is unknown, defaulting to 1000 [ 512.927299][T17854] netlink: 'syz.1.3107': attribute type 1 has an invalid length. [ 513.004050][T17854] 8021q: adding VLAN 0 to HW filter on device bond11 [ 513.113507][T17860] netlink: 'syz.1.3109': attribute type 13 has an invalid length. [ 513.189639][ T5749] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 513.442258][T17876] syzkaller1: left promiscuous mode [ 513.449695][T17876] syzkaller1: left allmulticast mode [ 513.746663][T17814] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.760550][T17814] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.772937][T17814] bridge_slave_0: entered allmulticast mode [ 513.788755][T17814] bridge_slave_0: entered promiscuous mode [ 513.802375][T17891] syzkaller0: entered promiscuous mode [ 513.810939][T17891] syzkaller0: entered allmulticast mode [ 513.828684][T17814] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.848131][T17814] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.866361][T17814] bridge_slave_1: entered allmulticast mode [ 513.886872][T17814] bridge_slave_1: entered promiscuous mode [ 513.919392][T17900] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 513.992866][T17814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.007725][T17814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.020326][ T5749] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 514.023602][T17815] Bluetooth: hci3: command tx timeout [ 514.094798][T17814] team0: Port device team_slave_0 added [ 514.105890][T17814] team0: Port device team_slave_1 added [ 514.160483][T17814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.167679][T17814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.195189][T17814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.224470][T17814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.231949][T17814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.262435][T17814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.322432][T17814] hsr_slave_0: entered promiscuous mode [ 514.328819][T17814] hsr_slave_1: entered promiscuous mode [ 514.335471][T17814] debugfs: 'hsr0' already exists in 'hsr' [ 514.341648][T17814] Cannot create hsr debugfs directory [ 514.404566][T17916] veth1_macvtap: left promiscuous mode [ 514.410747][T17916] macsec0: entered promiscuous mode [ 514.416188][T17916] macsec0: entered allmulticast mode [ 514.441601][T17916] veth1_macvtap: entered promiscuous mode [ 514.448293][T17916] veth1_macvtap: entered allmulticast mode [ 514.455148][T17916] macsec0: left promiscuous mode [ 514.461481][T17916] macsec0: left allmulticast mode [ 514.467031][T17916] veth1_macvtap: left allmulticast mode [ 514.790191][T17928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3127'. [ 514.795748][T17913] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3123'. [ 514.988891][T17814] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.041759][T17814] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.076811][T17814] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 515.141668][T17925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.315867][T17814] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.344419][T17814] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.366613][T17814] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 515.370841][T17955] SET target dimension over the limit! [ 515.386162][T17957] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20000 [ 515.577101][T17814] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.589631][T17814] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.601231][T17814] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 515.659680][T17965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3136'. [ 515.745393][T17814] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.766950][T17814] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.788169][T17814] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 515.967911][T17982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3139'. [ 516.100119][T17815] Bluetooth: hci3: command tx timeout [ 516.162225][T17982] IPVS: Unknown mcast interface: netpci0 [ 516.171176][T17990] netlink: 'syz.2.3142': attribute type 83 has an invalid length. [ 516.273500][T17994] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3143'. [ 516.274176][T17814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 516.310640][T17814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 516.325460][T17814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 516.353260][T17814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 516.372665][T17814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 516.404110][T17814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 516.428325][T17814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 516.457680][T17814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 516.599016][T18010] netlink: 'syz.2.3147': attribute type 1 has an invalid length. [ 516.619913][T18010] netlink: 'syz.2.3147': attribute type 2 has an invalid length. [ 516.648072][T18006] netlink: 'syz.2.3147': attribute type 1 has an invalid length. [ 516.674523][T17814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.682571][T18006] netlink: 'syz.2.3147': attribute type 2 has an invalid length. [ 516.703270][T18006] netlink: 'syz.2.3147': attribute type 1 has an invalid length. [ 516.727355][T18006] netlink: 'syz.2.3147': attribute type 2 has an invalid length. [ 516.741121][T17814] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.753962][T18006] netlink: 'syz.2.3147': attribute type 1 has an invalid length. [ 516.771006][T18011] IPv6: NLM_F_CREATE should be specified when creating new route [ 516.785603][ T7454] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.792869][ T7454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.819462][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.841965][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.849235][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.053347][T18026] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3152'. [ 517.102162][T18026] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3152'. [ 517.265974][T18032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.581055][T18052] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20004 [ 517.666070][T18059] tipc: Enabling of bearer rejected, failed to enable media [ 517.952587][T18076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.059121][T18083] validate_nla: 23 callbacks suppressed [ 518.072854][T18083] netlink: 'syz.4.3166': attribute type 1 has an invalid length. [ 518.182643][T17815] Bluetooth: hci3: command tx timeout [ 518.248426][T18091] veth3: entered promiscuous mode [ 518.254023][T18091] veth3: entered allmulticast mode [ 518.392186][T17814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.515428][T17814] veth0_vlan: entered promiscuous mode [ 518.648695][T17814] veth1_vlan: entered promiscuous mode [ 518.772040][T17814] veth0_macvtap: entered promiscuous mode [ 518.805692][T17814] veth1_macvtap: entered promiscuous mode [ 518.850184][T17814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.886020][T17814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.931827][ T99] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.948715][ T99] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.948807][T18133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3183'. [ 518.958602][ T99] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.978774][T18136] netlink: 'syz.4.3181': attribute type 30 has an invalid length. [ 518.984479][ T99] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.022529][T18136] bond19: option arp_missed_max: invalid value (0) [ 519.030842][T18136] bond19: option arp_missed_max: allowed values 1 - 255 [ 519.041363][T18136] bond19 (unregistering): Released all slaves [ 519.197943][T18142] netlink: 'syz.2.3185': attribute type 1 has an invalid length. [ 519.246855][T18142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.278280][T18148] bond2: (slave gretap1): making interface the new active one [ 519.287169][T18148] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 519.304910][T18145] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3186'. [ 519.326707][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.337976][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.408358][ T7454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.449543][ T7454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.589818][T18162] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.3190'. [ 519.807882][T18167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3192'. [ 519.932099][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 519.945455][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 519.955539][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 519.967070][ T5639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 519.977977][ T5639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 520.259499][T17815] Bluetooth: hci3: command tx timeout [ 520.469954][T18173] lo speed is unknown, defaulting to 1000 [ 520.806738][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3194'. [ 522.019694][T17815] Bluetooth: hci2: command tx timeout [ 522.582339][T18187] macvlan0: left promiscuous mode [ 522.636927][T18187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3194'. [ 522.854709][ T1119] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.867890][T18207] netlink: 'syz.0.3198': attribute type 1 has an invalid length. [ 522.888332][ T1119] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 40123 - 0 [ 522.928295][T18208] netlink: 'syz.2.3199': attribute type 3 has an invalid length. [ 523.140538][ T1119] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.162555][ T1119] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 40123 - 0 [ 523.406904][T18239] netlink: 'syz.3.3205': attribute type 23 has an invalid length. [ 523.466505][ T1119] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.496595][ T1119] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 40123 - 0 [ 523.715087][T18173] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.733023][T18173] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.753596][T18173] bridge_slave_0: entered allmulticast mode [ 523.792727][T18173] bridge_slave_0: entered promiscuous mode [ 524.013167][ T1119] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.036922][ T1119] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 40123 - 0 [ 524.053572][T18173] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.062076][T18173] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.078554][T18173] bridge_slave_1: entered allmulticast mode [ 524.090683][T18173] bridge_slave_1: entered promiscuous mode [ 524.102876][T17815] Bluetooth: hci2: command tx timeout [ 524.157993][T18173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.221756][T18173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.237852][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3212'. [ 524.251791][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3212'. [ 524.254465][T18278] netlink: 'syz.3.3213': attribute type 21 has an invalid length. [ 524.270968][T18278] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3213'. [ 524.271266][T18274] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 524.281111][T18277] netlink: 'syz.2.3212': attribute type 14 has an invalid length. [ 524.303971][T18277] netlink: 'syz.2.3212': attribute type 13 has an invalid length. [ 524.311076][T18280] netlink: 'syz.3.3213': attribute type 21 has an invalid length. [ 524.320127][T18280] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3213'. [ 524.350700][T18278] netlink: 'syz.3.3213': attribute type 4 has an invalid length. [ 524.358563][T18278] netlink: 'syz.3.3213': attribute type 5 has an invalid length. [ 524.368872][T18278] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3213'. [ 524.388615][T18280] netlink: 'syz.3.3213': attribute type 4 has an invalid length. [ 524.440315][T18280] netlink: 'syz.3.3213': attribute type 5 has an invalid length. [ 524.471743][T18280] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3213'. [ 524.492250][T18173] team0: Port device team_slave_0 added [ 524.540287][T18173] team0: Port device team_slave_1 added [ 524.664388][T18287] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3217'. [ 524.762352][T18173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.769732][T18173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.806700][T18173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.870858][T18173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.877983][T18173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.907241][T18173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.006569][T18325] __nla_validate_parse: 2 callbacks suppressed [ 525.006589][T18325] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3222'. [ 525.069753][T18325] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3222'. [ 525.087207][T18325] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3222'. [ 525.121417][T18328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3225'. [ 525.189928][T18335] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3223'. [ 525.432034][T18347] netlink: 'syz.3.3227': attribute type 21 has an invalid length. [ 526.179338][T17815] Bluetooth: hci2: command tx timeout [ 526.223989][ T1119] bond17 (unregistering): (slave bridge8): Releasing active interface [ 526.283456][ T1119] bond0 (unregistering): Released all slaves [ 526.294125][ T1119] bond1 (unregistering): Released all slaves [ 526.308594][ T1119] bond2 (unregistering): Released all slaves [ 526.322527][ T1119] bond3 (unregistering): Released all slaves [ 526.336918][ T1119] bond4 (unregistering): Released all slaves [ 526.353874][ T1119] bond5 (unregistering): Released all slaves [ 526.382159][ T1119] bond6 (unregistering): Released all slaves [ 526.396388][ T1119] bond7 (unregistering): Released all slaves [ 526.410843][ T1119] bond8 (unregistering): Released all slaves [ 526.425115][ T1119] bond9 (unregistering): Released all slaves [ 526.438810][ T1119] bond10 (unregistering): Released all slaves [ 526.456997][ T1119] bond11 (unregistering): Released all slaves [ 526.474378][ T1119] bond12 (unregistering): Released all slaves [ 526.491560][ T1119] bond13 (unregistering): Released all slaves [ 526.521029][ T1119] bond14 (unregistering): Released all slaves [ 526.536165][ T1119] bond15 (unregistering): Released all slaves [ 526.553199][ T1119] bond16 (unregistering): (slave veth0_to_bond): Releasing active interface [ 526.563746][ T1119] bond16 (unregistering): Released all slaves [ 526.578899][ T1119] bond17 (unregistering): Released all slaves [ 526.597356][ T1119] bond18 (unregistering): Released all slaves [ 526.630034][T18173] hsr_slave_0: entered promiscuous mode [ 526.636450][T18173] hsr_slave_1: entered promiscuous mode [ 526.642795][T18173] debugfs: 'hsr0' already exists in 'hsr' [ 526.648979][T18173] Cannot create hsr debugfs directory [ 526.657212][T18340] batadv_slave_1: entered promiscuous mode [ 526.665244][T18346] batadv_slave_1: left promiscuous mode [ 526.872727][ T1119] tipc: Left network mode [ 527.107265][T18321] IPVS: starting estimator thread 0... [ 527.209431][T18370] IPVS: using max 35 ests per chain, 84000 per kthread [ 527.295359][T18364] syzkaller1: entered promiscuous mode [ 527.315889][T18364] syzkaller1: entered allmulticast mode [ 527.728107][T18403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3238'. [ 527.928497][ T7452] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.956139][ T7452] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.984247][ T7452] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.101994][ T7452] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.175241][T18423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3241'. [ 528.259349][T17815] Bluetooth: hci2: command tx timeout [ 528.365915][T18383] syzkaller0: entered promiscuous mode [ 528.377999][T18383] syzkaller0: entered allmulticast mode [ 528.380148][T18434] xt_l2tp: v2 doesn't support IP mode [ 528.398025][T18427] tipc: Started in network mode [ 528.406023][T18427] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 528.417154][T18427] tipc: Enabled bearer , priority 24 [ 528.513667][T18438] Cannot find set identified by id 0 to match [ 528.516126][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 528.601248][ T1119] hsr_slave_0: left promiscuous mode [ 528.606903][T18441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3246'. [ 528.629088][ T1119] veth1_vlan: left promiscuous mode [ 528.916493][T18455] validate_nla: 2 callbacks suppressed [ 528.916515][T18455] netlink: 'syz.1.3250': attribute type 3 has an invalid length. [ 528.964446][ T1119] team0 (unregistering): Port device vlan0 removed [ 529.212525][ T7450] smbdirect: ib_dev[syś2] removed [ 529.610034][T18321] tipc: Node number set to 10005162 [ 529.636250][T18469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3254'. [ 529.645487][T18469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3254'. [ 529.895180][ T1119] IPVS: stop unused estimator thread 0... [ 530.655518][T18517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3266'. [ 530.786258][T18173] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 530.814087][T18173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.840238][T18173] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 530.890560][T18173] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.917303][T18173] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 530.942025][T18531] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3268'. [ 530.972015][T18173] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.988160][T18531] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 531.003336][T18173] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 531.040165][T18173] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.048214][T18531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3268'. [ 531.148190][T18541] tipc: Resetting bearer [ 531.322933][T18546] : entered promiscuous mode [ 531.350416][T18550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3273'. [ 531.365336][T18552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3273'. [ 531.444033][T18550] netlink: 'syz.3.3273': attribute type 83 has an invalid length. [ 531.478588][T18556] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3274'. [ 531.514764][T18173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.523353][T18558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3275'. [ 531.575041][T18173] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.625076][ T7452] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.632332][ T7452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.714888][ T7452] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.722128][ T7452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.737051][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3277'. [ 531.882328][T18576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.914651][T18576] batadv_slave_1: entered promiscuous mode [ 532.092526][T18585] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3281'. [ 532.141205][T18585] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 532.201568][T18593] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3282'. [ 532.930770][T18602] x_tables: duplicate underflow at hook 1 [ 532.952762][T18603] x_tables: duplicate underflow at hook 1 [ 534.195912][T18173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.525193][T18672] lo: entered allmulticast mode [ 535.014499][T18173] veth0_vlan: entered promiscuous mode [ 535.066241][T18173] veth1_vlan: entered promiscuous mode [ 535.078400][T18697] netlink: zone id is out of range [ 535.093114][T18697] netlink: del zone limit has 4 unknown bytes [ 535.144850][T18173] veth0_macvtap: entered promiscuous mode [ 535.173769][T18173] veth1_macvtap: entered promiscuous mode [ 535.262812][T18173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.341418][T18173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.378981][ T7455] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.410175][ T7456] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.451123][ T7456] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.475316][ T7456] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.756191][ T7454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.784990][ T7454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.868174][ T7450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.869307][T18729] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 535.886625][T18730] netlink: 'syz.1.3318': attribute type 1 has an invalid length. [ 535.897755][ T7450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.576432][T18769] __nla_validate_parse: 4 callbacks suppressed [ 536.576454][T18769] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3325'. [ 536.974714][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 536.996059][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 537.010812][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 537.023996][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 537.033469][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 537.325736][T18807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3336'. [ 537.363083][T18805] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3335'. [ 537.688016][T18814] syzkaller0: entered promiscuous mode [ 537.700711][T18814] syzkaller0: entered allmulticast mode [ 537.869733][T18814] bond1: entered promiscuous mode [ 537.949790][T18837] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 538.217902][T18855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3349'. [ 538.417255][T18866] gtp0: entered promiscuous mode [ 538.425704][T18866] gtp0: entered allmulticast mode [ 538.593772][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3356'. [ 538.603016][T18875] netlink: 'syz.3.3356': attribute type 1 has an invalid length. [ 538.615053][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3356'. [ 538.624664][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3356'. [ 538.635058][T18875] netlink: 'syz.3.3356': attribute type 1 has an invalid length. [ 538.643147][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3356'. [ 538.654041][T18875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3356'. [ 538.697739][T18875] bond1: Invalid ad_actor_system MAC address. [ 538.704074][T18875] bond1: option ad_actor_system: invalid value (1) [ 538.716778][T18875] bond1 (unregistering): Released all slaves [ 538.750065][T18878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3357'. [ 538.920284][T18887] Bluetooth: MGMT ver 1.23 [ 539.109086][T18790] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.117958][T18790] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.125523][T18790] bridge_slave_0: entered allmulticast mode [ 539.133786][T18790] bridge_slave_0: entered promiscuous mode [ 539.146438][T17815] Bluetooth: hci1: command tx timeout [ 539.149623][T18790] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.160624][T18790] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.174321][T18790] bridge_slave_1: entered allmulticast mode [ 539.186602][T18790] bridge_slave_1: entered promiscuous mode [ 539.288675][T18790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.316455][T18790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.416931][T18790] team0: Port device team_slave_0 added [ 539.435004][T18790] team0: Port device team_slave_1 added [ 539.497323][T18790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.505078][T18790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.531728][T18790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.557520][T18790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.570394][T18790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.612757][T18924] openvswitch: netlink: IP tunnel dst address not specified [ 539.636862][T18790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.662830][T18931] ip6erspan0: renamed from lo (while UP) [ 539.863565][T18790] hsr_slave_0: entered promiscuous mode [ 539.878898][T18790] hsr_slave_1: entered promiscuous mode [ 539.891717][T18790] debugfs: 'hsr0' already exists in 'hsr' [ 539.907762][T18790] Cannot create hsr debugfs directory [ 540.422799][T18790] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.549022][T18790] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.654056][T18790] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.817136][T18790] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.219470][T17815] Bluetooth: hci1: command tx timeout [ 541.279705][T18790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 541.356048][T18790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.375424][T18987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.430352][T18790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 541.474946][T18790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.502528][T18790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 541.527709][T18790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 541.545716][T18790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 541.568448][T18790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 541.652456][T19011] __nla_validate_parse: 7 callbacks suppressed [ 541.652479][T19011] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3397'. [ 541.747058][T19013] tipc: Enabled bearer , priority 0 [ 541.838079][T19013] syzkaller0: entered promiscuous mode [ 541.845396][T19013] syzkaller0: entered allmulticast mode [ 541.855917][T19013] tipc: Resetting bearer [ 541.885030][T18994] tipc: Resetting bearer [ 542.536969][T19048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3405'. [ 543.048008][T19059] netlink: 'syz.0.3408': attribute type 30 has an invalid length. [ 543.302658][T17815] Bluetooth: hci1: command tx timeout [ 544.105095][T18994] tipc: Disabling bearer [ 544.222808][T18790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.287543][T18790] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.331972][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.337157][T19066] openvswitch: netlink: IP tunnel dst address not specified [ 544.339208][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.390894][T19074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3413'. [ 544.413816][ T7454] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.421065][ T7454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.477666][T19072] bridge2: entered allmulticast mode [ 544.524611][T19082] netlink: 'syz.4.3414': attribute type 1 has an invalid length. [ 544.542431][T19082] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3414'. [ 544.565562][T19082] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3414'. [ 544.591450][T19082] netlink: 'syz.4.3414': attribute type 1 has an invalid length. [ 544.606758][T19082] netlink: 'syz.4.3414': attribute type 8 has an invalid length. [ 544.617507][T19082] netlink: 606 bytes leftover after parsing attributes in process `syz.4.3414'. [ 544.817475][T19094] netlink: 'syz.0.3419': attribute type 10 has an invalid length. [ 544.864444][T19094] team0: Port device dummy0 added [ 544.877594][T19095] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3419'. [ 544.902134][T19095] team0: Port device dummy0 removed [ 545.379489][T17815] Bluetooth: hci1: command tx timeout [ 545.838825][T19144] netlink: 'syz.3.3428': attribute type 21 has an invalid length. [ 545.847798][T19144] netlink: 'syz.3.3428': attribute type 1 has an invalid length. [ 546.115075][T19157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3430'. [ 546.160128][T19156] veth0: entered promiscuous mode [ 546.213482][T19156] veth0: left promiscuous mode [ 546.355850][T18790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.430518][T19173] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3435'. [ 546.472051][T19173] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.3435'. [ 546.496993][T18790] veth0_vlan: entered promiscuous mode [ 546.525389][T18790] veth1_vlan: entered promiscuous mode [ 546.634389][T18790] veth0_macvtap: entered promiscuous mode [ 546.692020][T18790] veth1_macvtap: entered promiscuous mode [ 546.753986][T18790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.813711][T18790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.862510][ T141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.893783][ T141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.923283][ T141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.958110][ T141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.145755][ T7451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.171053][ T7451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.257476][T19174] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 547.328458][ T7454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.358113][ T7454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.447853][T19216] netlink: 'syz.3.3444': attribute type 20 has an invalid length. [ 547.472436][T19218] block nbd0: not configured, cannot reconfigure [ 547.490947][T19216] IPv6: NLM_F_CREATE should be specified when creating new route [ 547.714430][ T7451] dvmrp0: left allmulticast mode [ 547.736271][ T7451] pimreg3: left allmulticast mode [ 547.783217][T19231] __nla_validate_parse: 3 callbacks suppressed [ 547.783238][T19231] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3450'. [ 547.945011][T19237] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3452'. [ 548.001063][ T7451] bond10 (unregistering): (slave ip6gretap3): Releasing active interface [ 548.056969][T19244] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 548.122104][T19245] xt_hashlimit: size too large, truncated to 1048576 [ 548.225346][ T7451] bond6 (unregistering): (slave gretap1): Releasing active interface [ 548.384179][ T7451] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 548.857891][ T7451] bond1 (unregistering): Released all slaves [ 548.873309][ T7451] bond2 (unregistering): Released all slaves [ 548.896475][ T7451] bond3 (unregistering): Released all slaves [ 548.913792][ T7451] bond4 (unregistering): Released all slaves [ 548.928065][ T7451] bond5 (unregistering): Released all slaves [ 548.948724][ T7451] bond6 (unregistering): Released all slaves [ 548.963483][ T7451] bond7 (unregistering): Released all slaves [ 548.984916][ T7451] bond8 (unregistering): Released all slaves [ 549.000325][ T7451] bond0 (unregistering): Released all slaves [ 549.014293][ T7451] bond9 (unregistering): Released all slaves [ 549.032995][ T7451] bond10 (unregistering): Released all slaves [ 549.055308][ T7451] bond11 (unregistering): Released all slaves [ 549.070972][ T7451] bond12 (unregistering): Released all slaves [ 549.352833][ T7451] : left promiscuous mode [ 549.446033][T19258] netlink: 'syz.2.3458': attribute type 11 has an invalid length. [ 549.460525][T19258] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3458'. [ 549.639679][ T7451] tipc: Disabling bearer [ 549.666915][ T7451] tipc: Left network mode [ 549.792376][T19283] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.3464'. [ 550.075972][T19299] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3468'. [ 550.117050][T19298] syzkaller1: entered promiscuous mode [ 550.134109][T19298] syzkaller1: entered allmulticast mode [ 550.331683][ T7451] hsr_slave_0: left promiscuous mode [ 550.347140][ T7451] hsr_slave_1: left promiscuous mode [ 550.443624][ T7451] pim6reg (unregistering): left allmulticast mode [ 550.493579][ T29] audit: type=1800 audit(1780863201.565:10): pid=19322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3476" name="memory.events" dev="tmpfs" ino=322 res=0 errno=0 [ 550.519605][T19324] netlink: 'syz.0.3474': attribute type 1 has an invalid length. [ 550.991826][T19331] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.3477'. [ 551.214872][T19357] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3480'. [ 551.563590][ T7451] IPVS: stop unused estimator thread 0... [ 551.674022][T19371] syzkaller0: entered promiscuous mode [ 551.700889][T19371] syzkaller0: entered allmulticast mode [ 551.780584][T19384] vlan2: entered allmulticast mode [ 551.791072][T19384] bond0: entered allmulticast mode [ 551.803170][T19384] bond_slave_0: entered allmulticast mode [ 551.821691][T19384] bond_slave_1: entered allmulticast mode [ 552.078524][T19395] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20002 [ 552.099631][T19397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3494'. [ 552.120883][T19400] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3495'. [ 552.141055][T19397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3494'. [ 552.273413][T19408] netlink: 'syz.2.3497': attribute type 1 has an invalid length. [ 552.302922][T19408] netlink: 'syz.2.3497': attribute type 1 has an invalid length. [ 552.323641][T19408] netlink: 'syz.2.3497': attribute type 8 has an invalid length. [ 552.422476][T19417] openvswitch: netlink: Flow actions attr not present in new flow. [ 552.596246][T19425] Cannot find add_set index 65532 as target [ 552.613820][T19423] bridge1: entered promiscuous mode [ 552.650757][T19423] bridge1: entered allmulticast mode [ 553.101143][T19446] netlink: 'syz.1.3507': attribute type 23 has an invalid length. [ 553.113047][T19443] sch_fq: defrate 10734 ignored. [ 553.371138][T19450] __nla_validate_parse: 4 callbacks suppressed [ 553.371159][T19450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'. [ 553.458137][T19450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3508'. [ 553.858221][T19466] netlink: 'syz.0.3513': attribute type 1 has an invalid length. [ 553.899785][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3513'. [ 553.953934][T19466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3513'. [ 554.198399][T19470] xfrm1: entered allmulticast mode [ 554.217198][T19466] tipc: Enabling of bearer rejected, failed to enable media [ 554.249234][T19463] netlink: 'syz.0.3513': attribute type 1 has an invalid length. [ 554.278909][T19463] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3513'. [ 554.651575][T19486] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3519'. [ 556.294431][T19529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'. [ 556.315894][T19529] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 556.348371][T19530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'. [ 556.374583][T19530] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 556.599069][T19540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3535'. [ 557.778698][T19563] syzkaller0: entered promiscuous mode [ 557.822637][T19563] syzkaller0: entered allmulticast mode [ 558.129169][ C0] sched: DL replenish lagged too much [ 559.075900][T19596] netlink: 'syz.2.3547': attribute type 3 has an invalid length. [ 559.108813][ T29] audit: type=1804 audit(1780863210.175:11): pid=19596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3547" name="/newroot/151/cgroup.controllers" dev="tmpfs" ino=783 res=1 errno=0 [ 559.188616][ T29] audit: type=1800 audit(1780863210.205:12): pid=19596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3547" name="cgroup.controllers" dev="tmpfs" ino=783 res=0 errno=0 [ 563.597655][T19622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3551'. [ 563.695925][T19625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3552'. [ 563.733312][T19625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3552'. [ 570.836171][T19662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3562'. [ 570.870386][T19662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3562'. [ 571.417634][T19722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.315776][T19761] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3582'. [ 574.490618][T19765] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3584'. [ 575.751456][T19791] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 575.774201][T19792] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 575.975870][T19799] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3592'. [ 576.435418][T19811] netlink: 'syz.0.3597': attribute type 18 has an invalid length. [ 576.507599][T19813] Bluetooth: MGMT ver 1.23 [ 576.557252][T19814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3598'. [ 576.627583][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806fa22000: rx timeout, send abort [ 577.137789][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806fa22000: abort rx timeout. Force session deactivation [ 577.500743][T19821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3601'. [ 577.518718][T19821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3601'. [ 577.745989][T19829] Dead loop on virtual device ip6_vti0 (net 234), fix it urgently! [ 577.767354][T19825] syzkaller0: entered promiscuous mode [ 577.783980][T19825] syzkaller0: entered allmulticast mode [ 578.523620][ T7450] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.542191][ T7450] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.564089][ T7450] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.590081][ T7450] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.670915][T19854] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3609'. [ 578.779038][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3610'. [ 579.145523][T19864] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 579.568788][T19871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3615'. [ 579.594260][T19871] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 579.607367][T19871] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3615'. [ 579.618569][T19811] netlink: 'syz.0.3597': attribute type 18 has an invalid length. [ 580.082488][T19883] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3618'. [ 580.166191][T19886] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3619'. [ 580.523975][T19892] xt_cgroup: path and classid specified [ 583.225987][T19901] syzkaller0: entered promiscuous mode [ 583.266327][T19901] syzkaller0: entered allmulticast mode [ 583.328913][T19913] __nla_validate_parse: 1 callbacks suppressed [ 583.328933][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3630'. [ 584.860903][T19927] sctp: [Deprecated]: syz.3.3634 (pid 19927) Use of int in maxseg socket option. [ 584.860903][T19927] Use struct sctp_assoc_value instead [ 584.930507][T19928] sctp: [Deprecated]: syz.3.3634 (pid 19928) Use of int in maxseg socket option. [ 584.930507][T19928] Use struct sctp_assoc_value instead [ 585.248553][T19936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3636'. [ 587.565109][T19936] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 587.875334][T19950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3637'. [ 587.942108][T19948] netlink: 'syz.1.3640': attribute type 1 has an invalid length. [ 587.983878][T19948] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.3640'. [ 588.337806][T19959] veth3: entered allmulticast mode [ 588.545877][T19964] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3643'. [ 588.567912][T19965] syzkaller1: entered promiscuous mode [ 588.588701][T19965] syzkaller1: entered allmulticast mode [ 589.247247][T19976] --map-set only usable from mangle table [ 590.961091][T20018] netlink: 'syz.1.3659': attribute type 12 has an invalid length. [ 590.970517][T20018] netlink: 'syz.1.3659': attribute type 29 has an invalid length. [ 590.978516][T20018] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3659'. [ 590.990142][T20018] netlink: 'syz.1.3659': attribute type 1 has an invalid length. [ 590.998233][T20018] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3659'. [ 591.138113][T20022] netlink: 'syz.1.3660': attribute type 14 has an invalid length. [ 591.146235][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3660'. [ 591.174379][T20022] netlink: 'syz.1.3660': attribute type 14 has an invalid length. [ 591.182538][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3660'. [ 591.850966][T20040] netlink: 1116 bytes leftover after parsing attributes in process `syz.0.3666'. [ 592.323405][T20051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3669'. [ 592.345810][T20051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3669'. [ 592.377171][T20051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3669'. [ 592.407447][T20051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3669'. [ 593.401582][T20078] vcan0: tx address claim with dest, not broadcast [ 593.482183][T20083] openvswitch: netlink: Flow key attr not present in new flow. [ 593.517897][T20083] vcan0: tx address claim with dest, not broadcast [ 593.639435][T20089] __nla_validate_parse: 64 callbacks suppressed [ 593.639457][T20089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3679'. [ 593.743512][T20093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3681'. [ 594.004337][T20099] openvswitch: netlink: Missing key (keys=40, expected=80) [ 594.025942][T20100] openvswitch: netlink: Missing key (keys=40, expected=80) [ 594.038076][T20102] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3684'. [ 594.774920][T20114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3689'. [ 594.798252][T20113] x_tables: duplicate entry at hook 1 [ 594.814297][T20123] SET target dimension over the limit! [ 594.827154][T20114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3689'. [ 594.885358][T20123] SET target dimension over the limit! [ 595.285636][T20134] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3693'. [ 595.403132][T20144] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3695'. [ 595.707559][T20151] netlink: 'syz.1.3697': attribute type 1 has an invalid length. [ 595.862406][T20151] 8021q: adding VLAN 0 to HW filter on device bond1 [ 595.877305][T20151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3697'. [ 595.896397][T20156] bond1: (slave gretap1): making interface the new active one [ 595.905412][T20156] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 595.933183][T20154] tipc: Enabling of bearer rejected, failed to enable media [ 596.025238][T20154] netlink: 'syz.4.3698': attribute type 1 has an invalid length. [ 598.657896][T20220] erspan0: entered promiscuous mode [ 598.695706][T20220] erspan0: entered allmulticast mode [ 598.848936][T20226] IPv6: sit1: Disabled Multicast RS [ 598.988867][T20229] netlink: 'syz.3.3719': attribute type 21 has an invalid length. [ 598.997184][T20229] IPv6: NLM_F_CREATE should be specified when creating new route [ 599.015046][T20229] netlink: 'syz.3.3719': attribute type 1 has an invalid length. [ 599.153909][T20234] netlink: 'syz.2.3721': attribute type 1 has an invalid length. [ 599.314931][T20232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3721'. [ 599.888633][T20248] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3724'. [ 599.937663][T20248] netlink: 'syz.2.3724': attribute type 9 has an invalid length. [ 600.152270][T20254] tipc: Started in network mode [ 600.163137][T20254] tipc: Node identity 5e3b3002deca, cluster identity 4711 [ 600.177649][T20254] tipc: Enabled bearer , priority 0 [ 600.192270][T20254] syzkaller0: entered promiscuous mode [ 600.205878][T20254] syzkaller0: entered allmulticast mode [ 600.258938][T20254] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3726'. [ 600.308756][T20254] tipc: Resetting bearer [ 600.333237][T20254] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3726'. [ 600.375268][T20253] tipc: Resetting bearer [ 600.425329][T20262] netlink: 'syz.4.3729': attribute type 1 has an invalid length. [ 600.433455][T20262] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3729'. [ 600.446870][T20262] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3729'. [ 600.516902][T20253] tipc: Disabling bearer [ 600.565202][T20263] veth0: entered promiscuous mode [ 600.572846][T20263] veth0: left promiscuous mode [ 600.705180][T20268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3732'. [ 600.722458][T20268] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3732'. [ 600.830790][ T5639] Bluetooth: hci5: command 0x0406 tx timeout [ 601.010228][T20281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3736'. [ 601.150851][T20286] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3738'. [ 601.953035][T20304] netlink: 'syz.1.3744': attribute type 7 has an invalid length. [ 601.969549][T20304] netlink: 'syz.1.3744': attribute type 7 has an invalid length. [ 602.488440][T20314] netem: incorrect gi model size [ 602.698532][T20322] netlink: 'syz.1.3750': attribute type 4 has an invalid length. [ 602.922669][T20337] netlink: 'syz.4.3751': attribute type 6 has an invalid length. [ 603.017113][T20339] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 603.396600][T20352] netlink: 'syz.4.3756': attribute type 25 has an invalid length. [ 603.531626][T20352] bond0: (slave bond_slave_0): Releasing backup interface [ 603.584108][T20352] bond_slave_0 (unregistering): left allmulticast mode [ 603.885593][T20359] ip6tnl1: entered allmulticast mode [ 604.207562][T20366] bond2 (unregistering): Released all slaves [ 605.273454][T20386] __nla_validate_parse: 9 callbacks suppressed [ 605.273475][T20386] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3765'. [ 605.289738][T20386] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3765'. [ 605.403935][T20388] syzkaller0: entered promiscuous mode [ 605.415917][T20388] syzkaller0: entered allmulticast mode [ 605.501327][T20388] erspan0: left promiscuous mode [ 605.506358][T20388] erspan0: left allmulticast mode [ 605.512179][T20388] ip_vti0: left promiscuous mode [ 605.522448][T20388] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 607.315792][T20408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3771'. [ 608.074796][T20429] ip6_vti0: entered promiscuous mode [ 608.525127][T20440] netlink: 'syz.3.3781': attribute type 1 has an invalid length. [ 608.718916][T20440] bond2: (slave bridge2): making interface the new active one [ 608.727566][T20440] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 637.032809][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 676.342078][T20472] Bluetooth: hci2: command tx timeout [ 731.230970][T20473] Bluetooth: hci1: command 0x0406 tx timeout [ 751.199057][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 751.206055][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18173/1:b..l [ 751.214545][ C1] rcu: (detected by 1, t=10503 jiffies, g=100293, q=805594 ncpus=2) [ 751.222633][ C1] task:syz-executor state:R running task stack:22536 pid:18173 tgid:18173 ppid:18165 task_flags:0x400140 flags:0x00080000 [ 751.237135][ C1] Call Trace: [ 751.240440][ C1] [ 751.243404][ C1] __schedule+0x1821/0x5740 [ 751.248011][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 751.252999][ C1] ? mas_update_gap+0x1b4/0xd40 [ 751.257937][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 751.262904][ C1] ? __pfx___schedule+0x10/0x10 [ 751.267789][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 751.272765][ C1] preempt_schedule_irq+0x4d/0xa0 [ 751.277818][ C1] irqentry_exit+0x14f/0x8b0 [ 751.282430][ C1] ? trace_irq_disable+0x3b/0x140 [ 751.287505][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 751.293511][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 751.298823][ C1] Code: ff ff ff e8 31 bf 05 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 0b 5a 96 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 18 ed 91 [ 751.318455][ C1] RSP: 0018:ffffc90005367298 EFLAGS: 00000282 [ 751.324557][ C1] RAX: e975c66c7fea7f00 RBX: 0000000000000000 RCX: 0000000000000046 [ 751.332556][ C1] RDX: 000000002c966350 RSI: ffffffff8e2172e6 RDI: ffffffff8c28b8e0 [ 751.340547][ C1] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cc20 [ 751.348541][ C1] R10: ffffc900053673f8 R11: ffffffff81b0e0e0 R12: 0000000000000002 [ 751.356533][ C1] R13: ffffffff8e95cc20 R14: 0000000000000000 R15: 0000000000000246 [ 751.364534][ C1] ? unwind_next_frame+0xa6/0x2550 [ 751.369708][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 751.375897][ C1] ? unwind_next_frame+0xa6/0x2550 [ 751.381061][ C1] ? tomoyo_path_perm+0x283/0x560 [ 751.386181][ C1] ? unwind_next_frame+0xa6/0x2550 [ 751.391320][ C1] unwind_next_frame+0xc3/0x2550 [ 751.396282][ C1] ? unwind_next_frame+0xa6/0x2550 [ 751.401434][ C1] ? unwind_next_frame+0xa6/0x2550 [ 751.406575][ C1] ? tomoyo_realpath_from_path+0x58d/0x5d0 [ 751.412464][ C1] ? tomoyo_path_perm+0x283/0x560 [ 751.417524][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 751.423716][ C1] arch_stack_walk+0x11b/0x150 [ 751.428537][ C1] ? tomoyo_path_perm+0x283/0x560 [ 751.433596][ C1] stack_trace_save+0xa9/0x100 [ 751.438394][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 751.443806][ C1] save_stack+0x122/0x230 [ 751.448179][ C1] ? __pfx_save_stack+0x10/0x10 [ 751.453059][ C1] ? __free_frozen_pages+0xc1c/0xd30 [ 751.458373][ C1] ? __slab_free+0x274/0x2c0 [ 751.462990][ C1] ? qlist_free_all+0x99/0x100 [ 751.467780][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 751.473438][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 751.478490][ C1] ? __kmalloc_noprof+0x316/0x760 [ 751.483541][ C1] ? tomoyo_encode+0x28b/0x550 [ 751.488333][ C1] ? tomoyo_realpath_from_path+0x58d/0x5d0 [ 751.494167][ C1] ? tomoyo_path_perm+0x283/0x560 [ 751.499240][ C1] __reset_page_owner+0x71/0x1f0 [ 751.504217][ C1] __free_frozen_pages+0xc1c/0xd30 [ 751.509376][ C1] __slab_free+0x274/0x2c0 [ 751.513839][ C1] qlist_free_all+0x99/0x100 [ 751.518465][ C1] kasan_quarantine_reduce+0x148/0x160 [ 751.523966][ C1] __kasan_slab_alloc+0x22/0x80 [ 751.528862][ C1] __kmalloc_noprof+0x316/0x760 [ 751.533822][ C1] ? tomoyo_encode+0x28b/0x550 [ 751.538635][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 751.543705][ C1] tomoyo_encode+0x28b/0x550 [ 751.548337][ C1] tomoyo_realpath_from_path+0x58d/0x5d0 [ 751.554032][ C1] tomoyo_path_perm+0x283/0x560 [ 751.558915][ C1] ? tomoyo_path_perm+0x251/0x560 [ 751.563969][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 751.569433][ C1] security_inode_getattr+0x12b/0x310 [ 751.574901][ C1] vfs_getattr+0x23/0x70 [ 751.579193][ C1] vfs_statx_path+0x2b/0x230 [ 751.583822][ C1] ? vfs_statx+0x107/0x200 [ 751.588296][ C1] vfs_statx+0x12e/0x200 [ 751.592573][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 751.597368][ C1] ? strncpy_from_user+0x150/0x2b0 [ 751.602559][ C1] ? do_getname+0x151/0x250 [ 751.607097][ C1] vfs_fstatat+0x11b/0x170 [ 751.611547][ C1] __x64_sys_newfstatat+0x151/0x200 [ 751.616775][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 751.622544][ C1] ? __pfx___x64_sys_umount+0x10/0x10 [ 751.627952][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.634063][ C1] do_syscall_64+0x174/0x580 [ 751.638680][ C1] ? trace_irq_disable+0x3b/0x140 [ 751.643738][ C1] ? clear_bhb_loop+0x40/0x90 [ 751.648447][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.654364][ C1] RIP: 0033:0x7f53b239b49a [ 751.658802][ C1] RSP: 002b:00007ffdc5de4b58 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 751.667243][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f53b239b49a [ 751.675243][ C1] RDX: 00007ffdc5de4b80 RSI: 00007ffdc5de4c10 RDI: 00000000ffffff9c [ 751.683235][ C1] RBP: 00007ffdc5de4c10 R08: 00007ffdc5de5c10 R09: 00000000ffffffff [ 751.691238][ C1] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffdc5de5ca0 [ 751.699250][ C1] R13: 00007f53b24321ca R14: 00000000000948ff R15: 00007ffdc5de5ce0 [ 751.707273][ C1] [ 751.710320][ C1] rcu: rcu_preempt kthread starved for 678 jiffies! g100293 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 751.721449][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 751.731435][ C1] rcu: RCU grace-period kthread stack dump: [ 751.737346][ C1] task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 751.750875][ C1] Call Trace: [ 751.754176][ C1] [ 751.757133][ C1] __schedule+0x1821/0x5740 [ 751.761683][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 751.766682][ C1] ? __pfx___schedule+0x10/0x10 [ 751.771581][ C1] ? schedule+0x90/0x360 [ 751.775868][ C1] schedule+0x164/0x360 [ 751.780092][ C1] schedule_timeout+0x158/0x2c0 [ 751.784983][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 751.790390][ C1] ? __pfx_process_timeout+0x10/0x10 [ 751.795721][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 751.801558][ C1] ? prepare_to_swait_event+0x340/0x370 [ 751.807146][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 751.812038][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 751.818228][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 751.823550][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 751.828797][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 751.833422][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 751.838646][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 751.844488][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 751.849478][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 751.854535][ C1] kthread+0x389/0x470 [ 751.858633][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 751.863853][ C1] ? __pfx_kthread+0x10/0x10 [ 751.868477][ C1] ret_from_fork+0x514/0xb70 [ 751.873103][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 751.878243][ C1] ? __switch_to+0xc79/0x1410 [ 751.882960][ C1] ? __pfx_kthread+0x10/0x10 [ 751.887586][ C1] ret_from_fork_asm+0x1a/0x30 [ 751.892398][ C1] [ 751.895435][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 751.901775][ C1] Sending NMI from CPU 1 to CPUs 0: [ 751.907003][ C0] NMI backtrace for cpu 0 [ 751.907018][ C0] CPU: 0 UID: 0 PID: 3235 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 751.907038][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 751.907049][ C0] Workqueue: bat_events batadv_dat_purge [ 751.907148][ C0] RIP: 0010:__lock_acquire+0xd4e/0x2cf0 [ 751.907168][ C0] Code: ae 80 0b 00 00 41 8b 86 88 0b 00 00 ff c0 41 89 86 88 0b 00 00 83 f8 30 0f 83 51 18 00 00 3b 05 e0 22 9e 12 0f 87 a4 18 00 00 01 00 00 00 e9 d4 06 00 00 41 83 fe 03 ba 02 00 00 00 41 0f 43 [ 751.907182][ C0] RSP: 0018:ffffc900000068d0 EFLAGS: 00000093 [ 751.907196][ C0] RAX: 0000000000000006 RBX: 0000000002fcf7df RCX: 0000000000000000 [ 751.907207][ C0] RDX: 000000007f45ee1d RSI: 000000005970cd9e RDI: ffff888032500000 [ 751.907219][ C0] RBP: 03813abc02fcf7df R08: ffffffff8176e256 R09: ffffffff8e95cc20 [ 751.907230][ C0] R10: ffffc90000006bd8 R11: ffffffff81b0e0e0 R12: ffff888032500c58 [ 751.907242][ C0] R13: ffff888032500c58 R14: ffff888032500000 R15: 0000000000000005 [ 751.907254][ C0] FS: 0000000000000000(0000) GS:ffff8881252a0000(0000) knlGS:0000000000000000 [ 751.907267][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 751.907278][ C0] CR2: 000055558ca454e8 CR3: 0000000081760000 CR4: 00000000003526f0 [ 751.907294][ C0] Call Trace: [ 751.907300][ C0] [ 751.907311][ C0] ? stack_trace_save+0xa9/0x100 [ 751.907337][ C0] ? unwind_next_frame+0xa6/0x2550 [ 751.907355][ C0] ? lock_acquire+0x106/0x350 [ 751.907373][ C0] ? unwind_next_frame+0xa6/0x2550 [ 751.907391][ C0] lock_acquire+0x106/0x350 [ 751.907406][ C0] ? unwind_next_frame+0xa6/0x2550 [ 751.907428][ C0] ? unwind_next_frame+0xa6/0x2550 [ 751.907445][ C0] ? ip_route_output_flow+0x2a/0x150 [ 751.907506][ C0] ? unwind_next_frame+0xa6/0x2550 [ 751.907524][ C0] unwind_next_frame+0xc3/0x2550 [ 751.907541][ C0] ? unwind_next_frame+0xa6/0x2550 [ 751.907561][ C0] ? unwind_next_frame+0xa6/0x2550 [ 751.907580][ C0] ? ip_route_output_key_hash+0x18d/0x2a0 [ 751.907597][ C0] ? ip_route_output_flow+0x2a/0x150 [ 751.907613][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 751.907635][ C0] arch_stack_walk+0x11b/0x150 [ 751.907657][ C0] ? ip_route_output_flow+0x2a/0x150 [ 751.907673][ C0] stack_trace_save+0xa9/0x100 [ 751.907695][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 751.907725][ C0] ? ret_from_fork+0x514/0xb70 [ 751.907744][ C0] ref_tracker_alloc+0x1af/0x4c0 [ 751.907764][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 751.907781][ C0] ? dst_init+0xd9/0x480 [ 751.907821][ C0] ? dst_alloc+0x12a/0x170 [ 751.907838][ C0] ? ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 751.907857][ C0] ? ip_route_output_key_hash+0x18d/0x2a0 [ 751.907874][ C0] ? ip_route_output_flow+0x2a/0x150 [ 751.907894][ C0] ? rcu_is_watching+0x15/0xb0 [ 751.907914][ C0] ? trace_kmem_cache_alloc+0x29/0xe0 [ 751.907936][ C0] ? dst_alloc+0x105/0x170 [ 751.907955][ C0] dst_init+0xd9/0x480 [ 751.907975][ C0] dst_alloc+0x12a/0x170 [ 751.907994][ C0] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 751.908018][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 751.908037][ C0] ip_route_output_key_hash+0x18d/0x2a0 [ 751.908057][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 751.908078][ C0] ? lock_acquire+0x106/0x350 [ 751.908099][ C0] ip_route_output_flow+0x2a/0x150 [ 751.908114][ C0] ? ip_route_me_harder+0x730/0xf90 [ 751.908161][ C0] ip_route_me_harder+0x742/0xf90 [ 751.908182][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 751.908206][ C0] ? __cookie_v4_init_sequence+0x25d/0x500 [ 751.908250][ C0] synproxy_send_tcp+0x34c/0x670 [ 751.908298][ C0] synproxy_send_client_synack+0x8c1/0xe30 [ 751.908322][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 751.908340][ C0] ? nft_tproxy_eval+0x1c38/0x1c40 [ 751.908375][ C0] ? synproxy_pernet+0x45/0x270 [ 751.908412][ C0] nft_synproxy_eval_v4+0x34a/0x4e0 [ 751.908433][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 751.908452][ C0] ? nf_ip_checksum+0x13c/0x510 [ 751.908498][ C0] nft_synproxy_do_eval+0x305/0x580 [ 751.908519][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 751.908536][ C0] ? nft_trace_init+0x283/0x4c0 [ 751.908581][ C0] nft_do_chain+0x48d/0x1ae0 [ 751.908603][ C0] ? __pfx_nft_osf_eval+0x10/0x10 [ 751.908620][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 751.908639][ C0] ? trace_packet+0x32b/0x4a0 [ 751.908661][ C0] ? ipt_do_table+0x2b2/0x1630 [ 751.908686][ C0] ? nf_nat_inet_fn+0x95b/0xbf0 [ 751.908734][ C0] nft_do_chain_inet+0x360/0x4b0 [ 751.908754][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 751.908772][ C0] ? ipt_do_table+0x2b2/0x1630 [ 751.908793][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 751.908819][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 751.908839][ C0] nf_hook_slow+0xc5/0x220 [ 751.908857][ C0] NF_HOOK+0x21f/0x3c0 [ 751.908879][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 751.908901][ C0] ? NF_HOOK+0x9e/0x3c0 [ 751.908922][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 751.908942][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 751.908965][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 751.908989][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 751.909013][ C0] NF_HOOK+0x336/0x3c0 [ 751.909034][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 751.909060][ C0] ? NF_HOOK+0x9e/0x3c0 [ 751.909080][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 751.909102][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 751.909126][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 751.909147][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 751.909168][ C0] ? process_backlog+0x3eb/0x1950 [ 751.909189][ C0] process_backlog+0xaa3/0x1950 [ 751.909218][ C0] __napi_poll+0xae/0x340 [ 751.909237][ C0] ? skb_defer_free_flush+0x233/0x260 [ 751.909258][ C0] net_rx_action+0x627/0xf70 [ 751.909278][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 751.909307][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 751.909331][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 751.909355][ C0] ? try_to_wake_up+0x7f2/0x1380 [ 751.909389][ C0] handle_softirqs+0x22a/0x840 [ 751.909413][ C0] ? do_softirq+0x76/0xd0 [ 751.909431][ C0] ? batadv_dat_purge+0x2da/0x3c0 [ 751.909451][ C0] do_softirq+0x76/0xd0 [ 751.909466][ C0] [ 751.909472][ C0] [ 751.909477][ C0] __local_bh_enable_ip+0xf8/0x130 [ 751.909493][ C0] batadv_dat_purge+0x2da/0x3c0 [ 751.909514][ C0] ? process_scheduled_works+0xa70/0x1860 [ 751.909532][ C0] process_scheduled_works+0xb5d/0x1860 [ 751.909560][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 751.909575][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 751.909603][ C0] rescuer_thread+0x827/0x1130 [ 751.909626][ C0] ? rescuer_thread+0xbb/0x1130 [ 751.909651][ C0] kthread+0x389/0x470 [ 751.909671][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 751.909689][ C0] ? __pfx_kthread+0x10/0x10 [ 751.909715][ C0] ret_from_fork+0x514/0xb70 [ 751.909733][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 751.909750][ C0] ? __switch_to+0xc79/0x1410 [ 751.909773][ C0] ? __pfx_kthread+0x10/0x10 [ 751.909793][ C0] ret_from_fork_asm+0x1a/0x30 [ 751.909819][ C0]