last executing test programs: 31.324810251s ago: executing program 0 (id=3676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x2000e8, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000095c0)=[{0x0, 0xdd12}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x24, 0x3e, 0x107, 0x70bd27, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x117}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x440) 31.13809318s ago: executing program 0 (id=3678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0xffffffffffffff7c}]}]}, 0x50}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) 30.388406645s ago: executing program 3 (id=3683): pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x81, 0x0) close(0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@delsa={0x3c, 0x11, 0x421, 0x0, 0x0, {}, [@srcaddr={0x14, 0xd, @in=@multicast2}]}, 0x3c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000002c0)=[{{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x8) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000040)) (async) tee(r0, r1, 0x81, 0x0) (async) close(0x4) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@delsa={0x3c, 0x11, 0x421, 0x0, 0x0, {}, [@srcaddr={0x14, 0xd, @in=@multicast2}]}, 0x3c}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000002c0)=[{{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x8) (async) 29.537715723s ago: executing program 3 (id=3686): socket(0x11, 0x800, 0x0) (async) r0 = socket(0x11, 0x800, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b2c, &(0x7f0000000000)="c26ee3f2582a4e19e9c76499589d89165f44") 29.144792245s ago: executing program 3 (id=3687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000040)={{0x2, 0x4e22, @multicast2}, {0x306, @remote}, 0x0, {0x2, 0x4e22, @local}}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 28.898468736s ago: executing program 2 (id=3688): r0 = socket$tipc(0x1e, 0xe0e9314239a98112, 0x0) listen(r0, 0x0) (async) close(r0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r2 = socket(0x1d, 0x3, 0x1) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x40000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) (async) recvmsg$unix(r2, &(0x7f00000022c0)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000002240)=[{&(0x7f0000000500)=""/126, 0x7e}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x2, &(0x7f0000002280)=[@cred={{0x1c}}], 0x20}, 0x40002102) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c000c8014000100a463ede3"], 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x24040800) recvfrom(r1, 0x0, 0x0, 0x40002042, 0x0, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async, rerun: 32) r5 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0x12, "00000000000000963d096612e35232da"}, {0x0, 0x4, "4eb8"}, {0x0, 0x2}]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x46, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}}, 0x44001) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, &(0x7f0000000100)) 28.184458662s ago: executing program 0 (id=3689): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000140)={0x2, 0x0, 0x3}, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003340), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000000180)={0x7c, r2, 0x52b9ada956aca011, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x5c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6fb0}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "00bbfb8608180ce4d3c9a4d3f77c6a6b"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 28.181881605s ago: executing program 3 (id=3691): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0x90}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r3) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x24, r5, 0x4, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x24}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r11}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @loopback}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x60}}, 0x0) 27.833558844s ago: executing program 2 (id=3693): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="491afa4c00000000000000000600000061100400ffffffff95000000ae83da0296c4f7a5ae49b8e7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001700)=0x0) sendmmsg$sock(r1, &(0x7f0000001c40)=[{{&(0x7f00000002c0)=@in={0x2, 0x4e22, @rand_addr=0x64010102}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="c365807e2139e1e4056505bc1e76b18afe1fff974b4d82c2fb94847a5cf69fef17eb1f23a9f1bf79b1a85920668ef634fd9f856650cc5b2d2b84f13a26464629d255b9435554eab9823930ded04603b87332b9cdd51309fdbdf39782430c35d6fe60f0ea651a463960054e75816587", 0x6f}, {&(0x7f0000001500)="c5589ee1bacc5092c964394bda6ba19ee34ee07d775fcad1e1680d75ebc424c9019141fed23f971efcad22be5063ccd42af61e83980a504d3d2e6a55c701", 0x3e}, {&(0x7f0000001540)="3268fda334eaf4a4c52811457f22c8cac9a01feb3f8522c8f849f12a7b9ed3259164e1300de93c763f4dd2081b0b77d468f6a034fee90875b0c6711e4eff156f9d367a0baccdab3309c979318f3ba45868439010576ec822a63fc1e91d4213a81774440fff5c8ceb0305a25704409b67fe88b527265df8227ed4079291ea28e9b618b5d2982c57eb84b205901ccaef1d25ead5e1dfb7fca9325159c59d161efe4d5c41f6973f767bf5a15d958a2fdc9ed8b30ccdf878ae543f84b2212f32b439d3d118bb0228139a3865c8c6e7d6de0f5558ec4229074303bf45cc56fbfcf8bc3e2008f009", 0xe5}], 0x4, &(0x7f0000001680)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xc926}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x48}}, {{&(0x7f0000001740)=@nfc_llcp={0x27, r2, 0x0, 0x5, 0x77, 0x11, "ce0077e6c1732b9cf16ca1fa723ec014ad3bdf06f9d26a740ddce1c266341f9b5985d0d73c0c7e6d4fad971d175710d994876cfe1f288c2ab2ad8e4a6ed319", 0x1e}, 0x80, &(0x7f0000001b80)=[{&(0x7f00000017c0)="9f0d9d8817fc47ee6a89128e6cd4565df07b5d8f7fece90492c66c435857843b1ece5a81a7bb8ebd00108c7b804a53cbbf8733431ea79cee58c98902969d1f873d25fbfd4432996b52e794aa2f74e92536cec98cfd29b03524a1381a51d7e3c590916cab823300c65bfdc4865c456022b41a6eaef97d2a058cf52951b53b12930ac272431e1ec3a4e35b3b808643ac7185f658ec68a08eb77a86cc351ee4cc2f400e3007ca2fe98cfa62ec5a50e7473103e5c570a681dcbca702", 0xba}, {&(0x7f0000001880)="f00b2e8a5774dea1c55e44ec3b0b8b75bddef03fe192903b6e376b8c42d2cefc60929174eb12b4714d05ae4dd10b95f2b0d64d51cc080cfcd502a5cdeb21e7f255cbd199cecf919b116a1ec1ad21b775eb058febacf6daff564a1af685948963d4caf792ee6566052fb25b23e1c682b2f58dff46cb9b06b5b18407ee904c31d3e98de4db16f6fb66c5e75ed7760b9daaae1264973c8188e848383cc3562730112dfc9e4d5c2bc1ae7bfdb8c8b68c610407f0989828bec49706e5065777c7b3a4822f360494d16a582cce84cb290c484f02975389a201e8be13bf203a6e8b171e5ff6b83e7d6f0740a72441d9a9b8806ef1b6e5ea433643", 0xf7}, {&(0x7f0000001980)="b253e139ca69a64033742dec087465c6a912a3fe56563610141e9345b4d1ffa6020c39098162d239d78a38b1b0dbe6b3e739616fcd36115b67617668cd1b99c00676685c9b3e42f9efc12fa825af6da39963c9ffc313a368c37ca78e2ce26a12e10483204c546657a7895debb7eeac912920f057fffe71b0abb9f82384015eb4833360ee44f002a3251d5e22acdf4a39f0050eb8d8", 0x95}, {&(0x7f0000001a40)="1c2e4ae90f1d925c18e1bac6653e5868b17134c499843036a2c5d5e59305688aed1aabecaaae9880907f35fae4b889420e67f3aa657f25c4e616e3f248fef84eefbe37d7f012f41a274e542ca3e56f8ad47985a0461b587f1108cf18bb8c08842c87070a6d30f1dd49e312c4095851b7477657efb877a2c9f0af17679610c9c8f54ee2dbe6859f6b539f3cf5b49268ca1bd691d663d294", 0x97}, {&(0x7f0000001b00)="47b990c50f43bfcee3241a516a9e2e6e06968db203419b75917d32fd0426ba6863c2ad838573fcd586a04fa78c294b9cc263f7b41fd2f21bf0862ff140aefe1d100e9609325797881cee262626181d6bf2be545f91032597ccac95d2070c", 0x5e}], 0x5, &(0x7f0000001c00)=[@timestamping={{0x14, 0x1, 0x25, 0xc46}}], 0x18}}], 0x2, 0x4004000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000080)='\x00', 0x1, &(0x7f00000000c0)={@_ha_fsid={[0x5, 0x2]}, {0x8, 0x3, 0x7fffffff, 0x3}}, 0xffff04b4, &(0x7f0000000100), &(0x7f0000000140)=0x8}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x2c, 0x2c, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0x9, 0x2}, {0x1, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 27.437437058s ago: executing program 0 (id=3694): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000580), 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r2, 0x400454cd, 0x337) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x3ff, 0x89, 0x10, 0x89, 0xee1}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r1}, 0x94) vmsplice(r4, &(0x7f0000001780)=[{&(0x7f0000000100)="72c34a1e11688dc3c6abbf0b0a4db0d7ddcc0be0e72089b83b386d9c77f07d1201e572d37d6276a8465a60b2edb4acee88518c5f487be3f35f186a672accab77eb410a895e28d6a9c3690573fbec6b5128bef4790ad2b270cb4ba4995501d1dc7df9b3dc", 0x64}, {&(0x7f0000000180)="5756a6ba429318be59f5a5ee705d745eae2ad64f3f89ef0e55815d2de59e3d62c569210e0e9101a9fc05ee23363a", 0x2e}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="0e0af38dd5fb8e6581453df11c74cfc27611f39effe10ade99f71c8db0973402b2e3521f69d7e85c31eabd6a0f804aa39ebd758cfc667efc163f97361a8ec0194349d6930a667c0ceeb84b4ac4d3b4a95c7f8b5a60c92b2fa64a1131b7ecce14a2b0457f8aaa9b3a96c40bb2ea94a4e0e45220af24ebf76f3f00437a3f7d4660b927b9e6c6479bc127fb", 0x8a}], 0x4, 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc}, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0xffffffffffffffff, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000580), 0x0}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x337) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x3ff, 0x89, 0x10, 0x89, 0xee1}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r1}, 0x94) (async) vmsplice(r4, &(0x7f0000001780)=[{&(0x7f0000000100)="72c34a1e11688dc3c6abbf0b0a4db0d7ddcc0be0e72089b83b386d9c77f07d1201e572d37d6276a8465a60b2edb4acee88518c5f487be3f35f186a672accab77eb410a895e28d6a9c3690573fbec6b5128bef4790ad2b270cb4ba4995501d1dc7df9b3dc", 0x64}, {&(0x7f0000000180)="5756a6ba429318be59f5a5ee705d745eae2ad64f3f89ef0e55815d2de59e3d62c569210e0e9101a9fc05ee23363a", 0x2e}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="0e0af38dd5fb8e6581453df11c74cfc27611f39effe10ade99f71c8db0973402b2e3521f69d7e85c31eabd6a0f804aa39ebd758cfc667efc163f97361a8ec0194349d6930a667c0ceeb84b4ac4d3b4a95c7f8b5a60c92b2fa64a1131b7ecce14a2b0457f8aaa9b3a96c40bb2ea94a4e0e45220af24ebf76f3f00437a3f7d4660b927b9e6c6479bc127fb", 0x8a}], 0x4, 0xf) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc}, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0xffffffffffffffff, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94) (async) 26.909667975s ago: executing program 2 (id=3696): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000480)={{r0, &(0x7f0000000180)='{%^}^*(:]\x8c\'^-}%(+&^&\'$-}[{\xb7{*^\\\x00', 0xe4202, &(0x7f00000001c0)={@align=0x5, {0x6, 0xf, 0x3, 0xfffffffffffffff6}}, 0x8, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0xcd6}, {[0x200, 0x6, 0xe, 0x4ac9]}, 0x2, 0xc4, &(0x7f0000000380)=""/196}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000500), &(0x7f0000000540)=0x8) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000140)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0xc, {0x5, 0xe3}}, 0x5) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x98}, @nested={0x4, 0x127}]}, 0x1c}}, 0xc000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) 26.420675971s ago: executing program 2 (id=3697): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206030000000000000000000700000705000100070000000900020073797a0e050005000200000005000400010000001100030068617368d1f5c4f5706f727400000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 25.917121025s ago: executing program 2 (id=3698): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000004000000020000000400001304"], 0x0, 0x6c, 0x0, 0x1}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f00000000c0)=0x9bb, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000002540)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002580)=0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050003000000585e6ad18c13202b08000300", @ANYRES32=r3], 0x28}}, 0x0) 25.583120593s ago: executing program 3 (id=3699): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@initdev}, &(0x7f0000000080)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@initdev, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x50081, 0x1b000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x4}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 25.127717412s ago: executing program 4 (id=3701): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000010100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 24.684960826s ago: executing program 4 (id=3703): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) poll(&(0x7f0000000040), 0x55, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) (async, rerun: 32) r4 = socket$kcm(0x11, 0x3, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) (async) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42304822a5347abc11fb5664dc79199a73e7d", 0x49}, {&(0x7f0000000480)="2c64e36df11764f28e87161c1c", 0xd}], 0x2}, 0x2400800c) (async) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0) (async, rerun: 64) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xade, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @empty}}}}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}]}}]}, 0x3c}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) (rerun: 64) 24.144075874s ago: executing program 1 (id=3704): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (rerun: 32) mmap(&(0x7f00005a0000/0x3000)=nil, 0x3000, 0xb635773f07ebbeef, 0x50, 0xffffffffffffffff, 0x215eb000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$rds(0x15, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f7, &(0x7f0000003200)={'ip6_vti0\x00', 0x0}) (async, rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="66696c74657200000000000000000000f9000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e51a899aa3"], 0x68) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r2 = openat$cgroup_pressure(r1, &(0x7f0000000300)='cpu.pressure\x00', 0x2, 0x0) (async) socketpair(0x9, 0x80400, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000600)={&(0x7f0000000480)=@name={0x1e, 0x2, 0x2, {{0x0, 0x3}, 0x1}}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000500)="fbb9b6d3e8270f826235b6f8ed36447b296068e1880686a78e70f72e88f1ce8afb691ac1b5dc4bb67926ec6bccc327eec8607d0ec1a392f190885ce3cef0b4cd315f538c8c605dae070b3c7d42a873d15f9eb758414971f7373d3ade80775b1fa04276e5ca75b448e052d38461e381abe0b43e6cbde3660d6a40986f83bed250235a808430625c368bda9f552386c61bea20accdcea4e5e5986d9b3d087a0415e50384cb8731e942f6891d1b9a961b8992ad1c7ecd256d44c773e0c836c237955fc727e45cb0bbae7a40c9c8cac02805cff54e04112e0be187589a4736cf3ef49b6439318d1b3b1fbc11db29d13b41", 0xef, 0x8000}, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) (async, rerun: 32) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x8}, 0xd) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000001900010000000000000002001c140000fe00000101"], 0x28}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e006b0f9aa94d0f661610e047c70100636f6e6e6c696d69740000000c00028008000140fffff27414000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900110073797a31000000001400038010000080080003400000000204000a80"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_team\x00'}) (async) write$cgroup_pressure(r2, &(0x7f0000000100)={'full', 0x20, 0x1, 0x20, 0x28}, 0x2f) 23.793090919s ago: executing program 1 (id=3705): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f00000000c0)=@default_ap_ssid, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a81000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c000380140001"], 0x104}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@can_newroute={0x154, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "dd5f392602cc3057"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x8}}, @CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "bd3d13746078e05fb6a2112ea9e93b498f4bdefc"}}]}, 0x154}}, 0x0) 23.002176152s ago: executing program 2 (id=3706): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x24000010) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) 22.857610815s ago: executing program 0 (id=3707): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x50, &(0x7f0000000000)={0x10, 0x0}, 0x3c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x1, 0x0, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x5f}}]}, 0xffffffffffffffac}}, 0x0) sendmmsg$unix(r1, &(0x7f00000084c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}}], 0x1, 0x10000040) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(r9) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000300)=0x1e) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x40b, 0x9, 0xfffffffe}) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000440)={{0xa580, 0xffff}, 0x100, './file0\x00'}) write$bt_hci(r7, &(0x7f0000000080)=ANY=[], 0x6) r10 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r10, 0x29, 0x1, 0x0, &(0x7f0000000140)) sendmsg$inet(r4, &(0x7f0000000880)={&(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x6d, 0x0, 0x9, [0x7, 0x6, 0x0]}, @cipso={0x86, 0x20, 0x3, [{0x2, 0x4, "0b16"}, {0x0, 0x6, "0379038b"}, {0x7, 0x8, "0fad686ec6c2"}, {0x7, 0x6, "1daee482"}, {0x7, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0xdf, 0x3, 0xa, [{@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}]}, @cipso={0x86, 0x1d, 0x3, [{0x7, 0xf, "5d7c8080f0708dbc297c6aa2b9"}, {0x1, 0x6, "b225ed48"}, {0x6, 0x2}]}, @noop, @ssrr={0x89, 0x7, 0xf2, [@private=0xa010100]}, @timestamp={0x44, 0x8, 0x91, 0x0, 0x4, [0x3]}, @end]}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x1c, 0x3, 0x3, [{@rand_addr=0x64010102, 0x800}, {@remote, 0x4e083698}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0xe4}, {@multicast2}, {@private=0xa010100, 0x7}]}, @end, @generic={0x94, 0x9, "ef79b658288f6c"}, @timestamp_prespec={0x44, 0x2c, 0xc5, 0x3, 0x2, [{@multicast2, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x1b}}, {@local, 0x5}, {@empty, 0x3}, {@multicast2, 0xfffffff9}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x180}, 0x40800) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) write(r6, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x1, 0x0, 0x83, 0xc4, &(0x7f00000009c0)="7d501aeba2af543c563612524f8d07b094e611a92f832da1b46bb30510a846f436233a3c61bd8b10620d2acffbbbd8fbcdf0dc0ba9df970f5233820ffd3bd2447636c8c04319310fe6204340b6eb0edf4c383b4b6536027a500c406921c35a0debd9badb4105a6c2bee3b0c2c2fdae2b8e1b0766865107f82f329e2a4e3c83a7db6e36", &(0x7f0000000a80)="467b2a790f5ade8128315589b22293ef2685c7e25f67e07a7aa33f1f2e21b46871044c5d32fd1d2db651842a805190bd721b1a6300910482b2473afc12fb232da728d8281f55c42ce661bafa2cc76d53b21912bc7534e8899211371521fce47147bef35c8b60cb3d8ef8dc4883158c3e8e36624bff6234feebc54af9bcafe38f3cf7dccb33abb83ee0863cb95ae5b27a4245de5dd78ccd74e61065ca1e59e0043df6095ca8c8a7d557e169ab3e4b737a23494fe80e03d6bbb61a26e584bc328e618ada3e", 0x6}, 0x50) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000580)={0x2, {{0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa1ba}}, {{0xa, 0x4e24, 0xfffffffa, @private2, 0x9}}}, 0x108) 22.690907788s ago: executing program 3 (id=3708): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20072, r0}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63c2406d0787cf6be3e98285812e", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000701feffffff00000000037c0000040042801000018004000000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 22.482702567s ago: executing program 1 (id=3709): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="288a0efd6dc4f915260f30", 0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x150, 0x111, 0x4b4, 0x150, 0x700, 0x260, 0x278, 0x278, 0x260, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0x0, 0x0, 0xff000000], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0xff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x31, 0xb, 0x2}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1, [0xff000000], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="5bdbd57a0e656889", 0x8}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x485c) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000540)=""/100, 0x64}], 0x1}, 0x400}], 0x1, 0x2103, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r3, &(0x7f0000000d40)={&(0x7f0000000180), 0xc, &(0x7f0000000d00)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="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"/1655], 0x684}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'veth0_vlan\x00', {}, 0x1ff}) 21.920279866s ago: executing program 4 (id=3710): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000080)={&(0x7f0000000000)=[{0x0, 0x0, 0x36b2, 0x2, 0x2, 0x5, 0x401}, {0x1, 0x0, 0x4, 0x0, 0x0, 0x4, 0xfffffffffffffffa, 0x47ee}], 0x2, 0x38, 0x1, 0x7}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x401, 0x70bd29, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0xe}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xf}}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) 20.998949772s ago: executing program 1 (id=3711): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x291c9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x20000000000080}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x30041042}, 0x4004000) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0), 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "345f8cf949a01b515682f44cecac91ba"}, @md5sig={0x1d, 0x12, "d243471da14ff23d079da4ca814b7d7b"}]}}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x291c9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x20000000000080}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x30041042}, 0x4004000) (async) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0), 0x38) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "345f8cf949a01b515682f44cecac91ba"}, @md5sig={0x1d, 0x12, "d243471da14ff23d079da4ca814b7d7b"}]}}}}}}}}, 0x0) (async) 20.622465s ago: executing program 4 (id=3712): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@private0, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=@updsa={0xfc, 0x1a, 0x400, 0x70bd26, 0x25dfdbfc, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@mcast1, 0xff, 0x0, 0x4e24, 0x7, 0x0, 0xa0, 0x20, 0x29, r2, r3}, {@in=@loopback, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x12}, {0x3f9, 0xfffffffffffffffd, 0x8, 0x1, 0x4, 0x5, 0x54b, 0xb}, {0x8, 0xea3b, 0x7, 0xffffffffffffffff}, {0x3ff, 0x4, 0x4}, 0x70bd2d, 0x0, 0xa, 0x3, 0xf9, 0x44}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x404c050}, 0x4040041) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80300, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000000c0)={'vlan0\x00', @random="cf178e602240"}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0xf0ffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x1}}, 0x1c}}, 0x0) 20.216490841s ago: executing program 1 (id=3713): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000020100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 20.151840178s ago: executing program 4 (id=3714): r0 = socket(0x39, 0x5, 0xf1c9) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@deltaction={0x40, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 19.733137864s ago: executing program 1 (id=3715): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="b4060000000000007111240000000000851000000200000000009500d10c02b1a3e140e40000000000000000000000800000bfb4cab4971ec1851ac9f355d6a552b6b32278a90d429efeefac2563e4377210a942af1da3091846ac52318cfaf888f6e4f0f68c6c3166c3d2daa2a9de27705526219bc958c3955ae0747284b8628b8d422796ff31b2ec3ddcf52bfff89ea2363efb4675"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, 0x0}, 0x20000080) setsockopt$sock_attach_bpf(r2, 0x6, 0x19, &(0x7f0000000200)=r2, 0x21) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r3}, 0xffffffffffffff7a) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500f90700004085000000a50000009500000500000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x0, 0x28, 0x0, &(0x7f0000000380)="40f0538ef047ddaf5e1c260155117f8e6eb67f2562c6a474efe6c3c46cf3b7fd4c95461868305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1bfffffe}, 0x50) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51, 0x1, [{0x3, 0x8f2e}]}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000100)=0x3, 0xfffffffffffffff3) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "00008000e89700", "950000cffd914d4f51b57b3f80df847f", '\x00', "00000200"}, 0x28) socket$inet(0x2, 0x4000000000000001, 0x4) gettid() socket(0x10, 0x803, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 19.56673414s ago: executing program 4 (id=3716): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a3699720db50d4498060f7a820ef54eafd0000000003000000186500000000000000000000070000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000980)={r1, 0x9}, &(0x7f00000009c0)=0x8) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pwritev(r2, &(0x7f0000000d40)=[{&(0x7f0000000380)="08bd82b809655abc25b695a1f4e80a91ce3583f099d2c506046a2dd84622a95cd55eebbe61f4b752c9a7d0472305c300f996a2958f119fcc0ad02db1261780dfba712a7824e98b59f9c6686267a2064bd11e", 0x52}, {&(0x7f0000000400)="5d2a7ce8a4585e9bf6e246c9541660548c1089bd4733b597", 0x18}, {&(0x7f0000000440)="355472efc54e43ff0e6548f64584e5a19d85fef3114109c8506e79bd7ca1aaa86b070e62d20ab08685d701a8fb36c72ee42f318b40b18c4801eca38b22217fc6bcc80cf0214ba5e9273c75c7a0fe78aefb89e10b5dd922e90dc171299a35f7e97a0d064956ffbb0ab98620df0e039dc064ec58ba19f7035d8871f211ed69fc8752b7cfde7c543444d8b999418a8490271533a44ff3d1f3c1700878901b0a5f1e0a9db59c8ebd107e266b11b1f8dd99b57d97de80bac0de1fce70ec40c420b110980957a5b48803bdc48945708184a9", 0xcf}, {&(0x7f00000007c0)="19fe1f497de9572cafd3e407dd843be493cffe25aacef04439dd9dd3139fea4f124b9d89265837cf97590ea2dce9202a1d5434798c20c9073d906ae9a2e6cffe3673effd3984e53120b98036078088b5f233c14e52da96b5f26fc5222544d9e54366bb26ed0f529f5b6054112e8f4f0b639ba0024e928e3db48776c38030f5861ba1d198425c52bcfa5ef1980f2e7ceb0a416d19cfd8e1b3eea4c5f646b17b5f1a03c2d56b442d39abae61bfcce9481ec6733ed0e46144f85b5f1a2c34774bce61087146ccd49ebbad4ad2fdc3e4a155a910d01b9ed970fbc1d6cbc2790dd8ad", 0xe0}, {&(0x7f0000000a00)="b962987300b7d5a6b8fd99092ce4ef6f1ce5d6e0019479bb5fb95a71d73120ce2618c23f094ac28951c4b731f2284f57c0fc1fad3f408f438159e641bd9d9d3558e2cf8485e52dc5a865e1d56e40ab1d638f2bc364a8de7bb7feb2480be87f48ebcc56c89a4e61962dea9b7d7193c5848fc9445512e246d10015c2f2b22e161d4da84ca0fe185a12cb6ef76202515bc3e6a3d5b4abfdf7563758f7e4666bb728b08b0cd9c1f34c9eeb92b6846876e1ef159751c29ab33fe2d63aadb37bde1b8377e220475b716b46709e", 0xca}, {&(0x7f0000000b00)="c2ec0d735cf11c2fe2a6e429eeb01879aa0725cb18e54ee7847d819af2f03f58bf8354162ff41013834e494aabbf6d826106e9f304ab9be2255c0cc3acf41bdef7086b86c31c1e93e0c5d94379618562e6fde6727a6e48d21381e2b8e60b1141b6ae74036bf17cd84bd5471979daead6411b204b816c2825d05b99a29f6484f6592b5a46d6083a9537", 0x89}, {&(0x7f0000000bc0)="5de378b4eefb6cfb835e9cafa56dfe2dc897bb9fb09d074ba890df0d0ad0e63f11967b9770b30f0278217105e6c74eaf8450a786822c3cc71b9890dadbb62e256b5847744defe5ea3fdaa54b040b993321782201baa031b5d1551316525d", 0x5e}, {&(0x7f0000000c40)="62b5badb65de29997c82e2543376ea57c263a5aea06ad55178d63aca368d6bb47797fbef7e13fa82af90788f37b813b83dbc7c154a09745da623036ffa4002cae8775bf9911b977382b10a7274e7587828aa77c4ce20b8cce65f8987eb525374275435e1b9ded7cbf156ca424185a52dc2804bd525cecad4be67a3322ead163032da734a27f441d709ac29231dd30bfe1a2f94e61237bf24f268e9fc9b1d13b07811366324e4bdde4a09f26bdd9609f8670f5da35e1752d26360302961ccb787396fedc07ec3200de89a2ad09322abf64388", 0xd2}], 0x8, 0x5, 0x4) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e21, 0x4, @private0, 0x2}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000300)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000100)={0x2}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x7d4165c9) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) 14.744360644s ago: executing program 0 (id=3717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5d475b683df418af}, 0xc004) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 0s ago: executing program 32 (id=3706): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x24000010) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): 63052][T14112] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.163085][T14112] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.163106][T14112] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.163133][T14112] netlink_unicast+0x75c/0x8e0 [ 292.163164][T14112] netlink_sendmsg+0x813/0xb40 [ 292.163195][T14112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.163221][T14112] ? aa_sock_msg_perm+0xf1/0x1b0 [ 292.163246][T14112] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.163272][T14112] ____sys_sendmsg+0x972/0x9f0 [ 292.163295][T14112] ? __might_fault+0xaf/0x130 [ 292.163327][T14112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.163359][T14112] ? import_iovec+0x73/0xa0 [ 292.163387][T14112] ___sys_sendmsg+0x2a5/0x360 [ 292.163409][T14112] ? __lock_acquire+0x6b5/0x2cf0 [ 292.163432][T14112] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.163495][T14112] ? __fget_files+0x2a/0x420 [ 292.163515][T14112] ? __fget_files+0x3a0/0x420 [ 292.163546][T14112] __x64_sys_sendmsg+0x1bd/0x2a0 [ 292.163571][T14112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.163604][T14112] ? __pfx_ksys_write+0x10/0x10 [ 292.163636][T14112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.163654][T14112] do_syscall_64+0x15f/0xf80 [ 292.163676][T14112] ? trace_irq_disable+0x3b/0x140 [ 292.163702][T14112] ? clear_bhb_loop+0x40/0x90 [ 292.163724][T14112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.163742][T14112] RIP: 0033:0x7fe2a259cdd9 [ 292.163759][T14112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.163774][T14112] RSP: 002b:00007fe2a34d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.163793][T14112] RAX: ffffffffffffffda RBX: 00007fe2a2815fa0 RCX: 00007fe2a259cdd9 [ 292.163806][T14112] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 292.163817][T14112] RBP: 00007fe2a34d6090 R08: 0000000000000000 R09: 0000000000000000 [ 292.163828][T14112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.163837][T14112] R13: 00007fe2a2816038 R14: 00007fe2a2815fa0 R15: 00007ffd6b4c3908 [ 292.163867][T14112] [ 292.301167][T14114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2239'. [ 292.877175][T14141] sctp: [Deprecated]: syz.3.2245 (pid 14141) Use of int in max_burst socket option deprecated. [ 292.877175][T14141] Use struct sctp_assoc_value instead [ 293.081627][T14148] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 293.351482][T14158] FAULT_INJECTION: forcing a failure. [ 293.351482][T14158] name failslab, interval 1, probability 0, space 0, times 0 [ 293.366353][T14155] xt_NFQUEUE: number of total queues is 0 [ 293.380898][T14158] CPU: 1 UID: 0 PID: 14158 Comm: syz.0.2253 Not tainted syzkaller #0 PREEMPT(full) [ 293.380923][T14158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.380934][T14158] Call Trace: [ 293.380942][T14158] [ 293.380950][T14158] dump_stack_lvl+0xe8/0x150 [ 293.380976][T14158] should_fail_ex+0x412/0x560 [ 293.381005][T14158] should_failslab+0xa8/0x100 [ 293.381034][T14158] __kmalloc_cache_noprof+0x88/0x660 [ 293.381059][T14158] ? nfnetlink_rcv+0xfdf/0x27b0 [ 293.381084][T14158] nfnetlink_rcv+0xfdf/0x27b0 [ 293.381140][T14158] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 293.381177][T14158] ? ref_tracker_free+0x693/0x840 [ 293.381228][T14158] ? __netlink_deliver_tap+0x807/0x850 [ 293.381260][T14158] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.381280][T14158] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.381308][T14158] netlink_unicast+0x75c/0x8e0 [ 293.381338][T14158] netlink_sendmsg+0x813/0xb40 [ 293.381369][T14158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.381395][T14158] ? aa_sock_msg_perm+0xf1/0x1b0 [ 293.381419][T14158] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 293.381445][T14158] ____sys_sendmsg+0x972/0x9f0 [ 293.381468][T14158] ? __might_fault+0xaf/0x130 [ 293.381497][T14158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.381529][T14158] ? import_iovec+0x73/0xa0 [ 293.381557][T14158] ___sys_sendmsg+0x2a5/0x360 [ 293.381578][T14158] ? __lock_acquire+0x6b5/0x2cf0 [ 293.381602][T14158] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.381666][T14158] ? __fget_files+0x2a/0x420 [ 293.381686][T14158] ? __fget_files+0x3a0/0x420 [ 293.381715][T14158] __x64_sys_sendmsg+0x1bd/0x2a0 [ 293.381741][T14158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 293.381776][T14158] ? __pfx_ksys_write+0x10/0x10 [ 293.381809][T14158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.381829][T14158] do_syscall_64+0x15f/0xf80 [ 293.381850][T14158] ? trace_irq_disable+0x3b/0x140 [ 293.381875][T14158] ? clear_bhb_loop+0x40/0x90 [ 293.381897][T14158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.381915][T14158] RIP: 0033:0x7fa2a8f9cdd9 [ 293.381932][T14158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.381948][T14158] RSP: 002b:00007fa2a9e8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.381966][T14158] RAX: ffffffffffffffda RBX: 00007fa2a9215fa0 RCX: 00007fa2a8f9cdd9 [ 293.381979][T14158] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 293.381990][T14158] RBP: 00007fa2a9e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 293.382000][T14158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.382011][T14158] R13: 00007fa2a9216038 R14: 00007fa2a9215fa0 R15: 00007ffc422fda88 [ 293.382041][T14158] [ 293.651472][T14159] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 293.918098][T14179] xt_CONNSECMARK: invalid mode: 0 [ 293.924506][T14180] xt_CONNSECMARK: invalid mode: 0 [ 294.200415][T14187] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 294.240715][T14188] netlink: 'syz.0.2258': attribute type 1 has an invalid length. [ 294.284661][T14188] nbd: couldn't find a device at index 1048588 [ 294.310134][T14190] smc: net device team0 applied user defined pnetid SYZ2 [ 294.450965][T14193] xt_hashlimit: size too large, truncated to 1048576 [ 294.482072][T14194] xt_hashlimit: size too large, truncated to 1048576 [ 294.605061][T14202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2263'. [ 295.059542][T14213] syzkaller0: entered promiscuous mode [ 295.090523][T14213] syzkaller0: entered allmulticast mode [ 295.361510][T14236] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2271'. [ 295.403870][T14238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2271'. [ 295.531279][T14244] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2268'. [ 295.656673][T14247] netlink: 'syz.0.2273': attribute type 11 has an invalid length. [ 297.423871][T14232] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 298.323267][T14282] sctp: [Deprecated]: syz.1.2284 (pid 14282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.323267][T14282] Use struct sctp_sack_info instead [ 298.388567][T14290] syzkaller0: entered promiscuous mode [ 298.407150][T14290] syzkaller0: entered allmulticast mode [ 298.483502][T14294] set match dimension is over the limit! [ 298.588600][T14298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2288'. [ 298.638212][T14298] netlink: 'syz.4.2288': attribute type 7 has an invalid length. [ 298.669686][T14298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2288'. [ 298.699061][T14302] block nbd4: not configured, cannot reconfigure [ 299.271582][T14327] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 299.271582][T14327] Please contact the netfilter-devel mailing list or update your nftables rules. [ 299.595994][T14337] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2298'. [ 299.715097][ T7541] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.730937][ T7541] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.827623][T14345] geneve3: entered promiscuous mode [ 299.848702][T14345] geneve3: entered allmulticast mode [ 299.891068][ T7541] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.941107][ T7541] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.970546][T14351] FAULT_INJECTION: forcing a failure. [ 299.970546][T14351] name failslab, interval 1, probability 0, space 0, times 0 [ 299.989423][ T7541] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.022391][ T7541] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.047050][T14351] CPU: 1 UID: 0 PID: 14351 Comm: syz.4.2303 Not tainted syzkaller #0 PREEMPT(full) [ 300.047075][T14351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 300.047097][T14351] Call Trace: [ 300.047104][T14351] [ 300.047111][T14351] dump_stack_lvl+0xe8/0x150 [ 300.047139][T14351] should_fail_ex+0x412/0x560 [ 300.047167][T14351] should_failslab+0xa8/0x100 [ 300.047195][T14351] __kvmalloc_node_noprof+0x178/0x8a0 [ 300.047221][T14351] ? nla_strdup+0xb8/0x140 [ 300.047244][T14351] ? nf_tables_newchain+0x1c7a/0x2890 [ 300.047277][T14351] nf_tables_newchain+0x1c7a/0x2890 [ 300.047319][T14351] ? __pfx_nf_tables_newchain+0x10/0x10 [ 300.047366][T14351] ? nft_trans_table_add+0x230/0x430 [ 300.047387][T14351] ? nfnl_pernet+0x23/0x240 [ 300.047406][T14351] ? nfnl_pernet+0x23/0x240 [ 300.047433][T14351] ? __nla_parse+0x40/0x60 [ 300.047459][T14351] nfnetlink_rcv+0x123e/0x27b0 [ 300.047507][T14351] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 300.047539][T14351] ? ref_tracker_free+0x693/0x840 [ 300.047586][T14351] ? __netlink_deliver_tap+0x807/0x850 [ 300.047613][T14351] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.047629][T14351] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.047653][T14351] netlink_unicast+0x75c/0x8e0 [ 300.047681][T14351] netlink_sendmsg+0x813/0xb40 [ 300.047711][T14351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.047736][T14351] ? aa_sock_msg_perm+0xf1/0x1b0 [ 300.047759][T14351] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.047784][T14351] ____sys_sendmsg+0x972/0x9f0 [ 300.047806][T14351] ? __might_fault+0xaf/0x130 [ 300.047835][T14351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.047870][T14351] ? import_iovec+0x73/0xa0 [ 300.047898][T14351] ___sys_sendmsg+0x2a5/0x360 [ 300.047918][T14351] ? __lock_acquire+0x6b5/0x2cf0 [ 300.047942][T14351] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.048006][T14351] ? __fget_files+0x2a/0x420 [ 300.048026][T14351] ? __fget_files+0x3a0/0x420 [ 300.048057][T14351] __x64_sys_sendmsg+0x1bd/0x2a0 [ 300.048083][T14351] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.048115][T14351] ? __pfx_ksys_write+0x10/0x10 [ 300.048148][T14351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.048168][T14351] do_syscall_64+0x15f/0xf80 [ 300.048190][T14351] ? trace_irq_disable+0x3b/0x140 [ 300.048215][T14351] ? clear_bhb_loop+0x40/0x90 [ 300.048238][T14351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.048256][T14351] RIP: 0033:0x7fb22519cdd9 [ 300.048274][T14351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.048290][T14351] RSP: 002b:00007fb22611c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.048309][T14351] RAX: ffffffffffffffda RBX: 00007fb225415fa0 RCX: 00007fb22519cdd9 [ 300.048322][T14351] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 300.048333][T14351] RBP: 00007fb22611c090 R08: 0000000000000000 R09: 0000000000000000 [ 300.048344][T14351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 300.048354][T14351] R13: 00007fb225416038 R14: 00007fb225415fa0 R15: 00007fff849bc5b8 [ 300.048385][T14351] [ 300.144716][T14354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2304'. [ 300.155299][T14355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2302'. [ 300.323080][ T7541] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.367787][T14355] netlink: 'syz.1.2302': attribute type 7 has an invalid length. [ 300.367809][T14355] netlink: 'syz.1.2302': attribute type 8 has an invalid length. [ 300.367919][T14355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2302'. [ 300.438332][T14356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2304'. [ 300.450494][T14358] netlink: 'syz.0.2307': attribute type 4 has an invalid length. [ 300.553175][T14371] xt_hashlimit: invalid interval [ 300.574685][T14371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2308'. [ 300.576428][ T7541] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.592853][T14373] xt_hashlimit: invalid interval [ 300.610096][T14370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2309'. [ 301.191691][T14396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2315'. [ 301.880259][T14431] syzkaller0: entered promiscuous mode [ 301.901810][T14431] syzkaller0: entered allmulticast mode [ 302.226842][T14448] x_tables: duplicate underflow at hook 1 [ 302.849503][T14475] bridge0: entered allmulticast mode [ 303.117133][T14487] netlink: 'syz.2.2337': attribute type 8 has an invalid length. [ 303.257140][T14492] bridge6: entered promiscuous mode [ 303.277442][T14492] bridge6: entered allmulticast mode [ 303.303013][T14487] netlink: 'syz.2.2337': attribute type 2 has an invalid length. [ 303.317995][T14492] team0: Port device bridge6 added [ 303.551192][ T5632] Bluetooth: hci4: link tx timeout [ 303.559275][ T5632] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.573367][ T5629] Bluetooth: hci4: link tx timeout [ 303.579745][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.596696][ T5629] Bluetooth: hci4: link tx timeout [ 303.602544][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.613468][ T5629] Bluetooth: hci4: link tx timeout [ 303.619277][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.631749][ T5629] Bluetooth: hci4: link tx timeout [ 303.637237][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.646304][ T5629] Bluetooth: hci4: link tx timeout [ 303.652819][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.661031][ T5629] Bluetooth: hci4: link tx timeout [ 303.666689][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.674709][ T5629] Bluetooth: hci4: link tx timeout [ 303.679854][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.688164][ T5629] Bluetooth: hci4: link tx timeout [ 303.691647][T14510] __nla_validate_parse: 4 callbacks suppressed [ 303.691677][T14510] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2347'. [ 303.693311][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.693464][ T5629] Bluetooth: hci4: link tx timeout [ 303.693483][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.693568][ T5629] Bluetooth: hci4: link tx timeout [ 303.736430][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.747654][ T5629] Bluetooth: hci4: link tx timeout [ 303.752825][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.761898][ T5629] Bluetooth: hci4: link tx timeout [ 303.767236][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.781823][ T5629] Bluetooth: hci4: link tx timeout [ 303.787042][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.799458][ T5629] Bluetooth: hci4: link tx timeout [ 303.805361][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.813049][ T5629] Bluetooth: hci4: link tx timeout [ 303.818652][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.837067][ T5629] Bluetooth: hci4: link tx timeout [ 303.842254][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.850506][ T5629] Bluetooth: hci4: link tx timeout [ 303.855812][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.863639][ T5629] Bluetooth: hci4: link tx timeout [ 303.869315][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.878337][ T5629] Bluetooth: hci4: link tx timeout [ 303.883486][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.891613][ T5629] Bluetooth: hci4: link tx timeout [ 303.897503][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.905857][ T5629] Bluetooth: hci4: link tx timeout [ 303.911003][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.918805][ T5629] Bluetooth: hci4: link tx timeout [ 303.923976][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.931626][ T5629] Bluetooth: hci4: link tx timeout [ 303.936881][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.944604][ T5629] Bluetooth: hci4: link tx timeout [ 303.949719][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.957610][ T5629] Bluetooth: hci4: link tx timeout [ 303.962756][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.970497][ T5629] Bluetooth: hci4: link tx timeout [ 303.976253][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.986028][ T5629] Bluetooth: hci4: link tx timeout [ 303.992130][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.999955][ T5629] Bluetooth: hci4: link tx timeout [ 304.005123][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 304.272425][T14527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2352'. [ 304.273726][T14530] FAULT_INJECTION: forcing a failure. [ 304.273726][T14530] name failslab, interval 1, probability 0, space 0, times 0 [ 304.341141][T14530] CPU: 1 UID: 0 PID: 14530 Comm: syz.1.2353 Not tainted syzkaller #0 PREEMPT(full) [ 304.341166][T14530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 304.341177][T14530] Call Trace: [ 304.341185][T14530] [ 304.341193][T14530] dump_stack_lvl+0xe8/0x150 [ 304.341220][T14530] should_fail_ex+0x412/0x560 [ 304.341250][T14530] should_failslab+0xa8/0x100 [ 304.341286][T14530] __kvmalloc_node_noprof+0x178/0x8a0 [ 304.341313][T14530] ? nf_hook_entries_grow+0x288/0x720 [ 304.341340][T14530] ? __pfx___mutex_lock+0x10/0x10 [ 304.341368][T14530] nf_hook_entries_grow+0x288/0x720 [ 304.341407][T14530] __nf_register_net_hook+0x2c9/0x930 [ 304.341444][T14530] nf_register_net_hook+0xb2/0x190 [ 304.341470][T14530] nf_register_net_hooks+0x44/0x1b0 [ 304.341498][T14530] nf_defrag_ipv4_enable+0x87/0x120 [ 304.341528][T14530] nf_ct_netns_do_get+0x18c/0x5c0 [ 304.341557][T14530] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 304.341580][T14530] ? synproxy_pernet+0x45/0x270 [ 304.341612][T14530] ? synproxy_pernet+0x45/0x270 [ 304.341641][T14530] nf_ct_netns_get+0x41/0x320 [ 304.341669][T14530] nft_synproxy_do_init+0x1d1/0x4c0 [ 304.341700][T14530] nf_tables_newrule+0x17ac/0x28b0 [ 304.341745][T14530] ? __pfx_nf_tables_newrule+0x10/0x10 [ 304.341770][T14530] ? nfnl_pernet+0x23/0x240 [ 304.341791][T14530] ? nfnl_pernet+0x23/0x240 [ 304.341821][T14530] ? __nla_parse+0x40/0x60 [ 304.341851][T14530] nfnetlink_rcv+0x123e/0x27b0 [ 304.341909][T14530] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 304.341948][T14530] ? ref_tracker_free+0x693/0x840 [ 304.342003][T14530] ? __netlink_deliver_tap+0x807/0x850 [ 304.342036][T14530] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.342057][T14530] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.342085][T14530] netlink_unicast+0x75c/0x8e0 [ 304.342116][T14530] netlink_sendmsg+0x813/0xb40 [ 304.342147][T14530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.342172][T14530] ? aa_sock_msg_perm+0xf1/0x1b0 [ 304.342200][T14530] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.342227][T14530] ____sys_sendmsg+0x972/0x9f0 [ 304.342251][T14530] ? __might_fault+0xaf/0x130 [ 304.342287][T14530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.342320][T14530] ? import_iovec+0x73/0xa0 [ 304.342349][T14530] ___sys_sendmsg+0x2a5/0x360 [ 304.342371][T14530] ? __lock_acquire+0x6b5/0x2cf0 [ 304.342396][T14530] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.342459][T14530] ? __fget_files+0x2a/0x420 [ 304.342480][T14530] ? __fget_files+0x3a0/0x420 [ 304.342513][T14530] __x64_sys_sendmsg+0x1bd/0x2a0 [ 304.342539][T14530] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.342573][T14530] ? __pfx_ksys_write+0x10/0x10 [ 304.342607][T14530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.342628][T14530] do_syscall_64+0x15f/0xf80 [ 304.342649][T14530] ? trace_irq_disable+0x3b/0x140 [ 304.342674][T14530] ? clear_bhb_loop+0x40/0x90 [ 304.342698][T14530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.342715][T14530] RIP: 0033:0x7f807859cdd9 [ 304.342733][T14530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.342748][T14530] RSP: 002b:00007f80794b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.342768][T14530] RAX: ffffffffffffffda RBX: 00007f8078815fa0 RCX: 00007f807859cdd9 [ 304.342781][T14530] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 304.342792][T14530] RBP: 00007f80794b1090 R08: 0000000000000000 R09: 0000000000000000 [ 304.342803][T14530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 304.342813][T14530] R13: 00007f8078816038 R14: 00007f8078815fa0 R15: 00007ffef9897f38 [ 304.342846][T14530] [ 304.733412][T14535] tipc: Enabled bearer , priority 0 [ 304.800233][T14535] syzkaller0: entered promiscuous mode [ 304.806692][T14535] syzkaller0: entered allmulticast mode [ 304.813003][T14535] tipc: Resetting bearer [ 304.921387][T14534] tipc: Resetting bearer [ 304.947858][T14544] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2356'. [ 304.957897][T14544] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2356'. [ 304.967698][T14544] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2356'. [ 305.162990][T14552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2358'. [ 305.203296][T14552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2358'. [ 305.574116][ T5629] Bluetooth: hci4: command 0x0405 tx timeout [ 307.713073][T14534] tipc: Disabling bearer [ 307.725044][T14536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2354'. [ 307.847844][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2364'. [ 307.959626][T14579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.199589][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2367'. [ 308.569484][T14610] tipc: Enabling of bearer rejected, media not registered [ 309.036411][T14632] openvswitch: netlink: IPv4 tun info is not correct [ 309.092902][T14632] openvswitch: netlink: IPv4 tun info is not correct [ 309.350381][T14652] __nla_validate_parse: 5 callbacks suppressed [ 309.350417][T14652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2387'. [ 309.529957][T14659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2389'. [ 309.561369][T14664] netlink: 'syz.1.2391': attribute type 1 has an invalid length. [ 309.644642][T14665] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2391'. [ 309.678415][T14664] bond9: entered promiscuous mode [ 309.684132][T14664] 8021q: adding VLAN 0 to HW filter on device bond9 [ 309.719910][T14665] bond9: entered allmulticast mode [ 309.790551][T14664] bond9: (slave bridge7): making interface the new active one [ 309.808916][T14664] bridge7: entered promiscuous mode [ 309.825182][T14664] bridge7: entered allmulticast mode [ 309.842771][T14664] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 309.868321][T14674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2393'. [ 309.937767][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2394'. [ 309.994449][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2394'. [ 310.019723][T14674] 8021q: adding VLAN 0 to HW filter on device bond7 [ 310.242209][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2398'. [ 310.272891][T14695] netlink: 'syz.4.2398': attribute type 29 has an invalid length. [ 310.314463][T14695] netlink: 'syz.4.2398': attribute type 29 has an invalid length. [ 310.928297][T14725] netlink: 'syz.4.2408': attribute type 2 has an invalid length. [ 310.997200][T14727] bond0: left allmulticast mode [ 311.049439][T14727] syz_tun: left allmulticast mode [ 311.076206][T14727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.365395][T14746] netlink: 'syz.3.2415': attribute type 49 has an invalid length. [ 311.470432][T14756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.640318][T14762] netlink: 'syz.2.2420': attribute type 1 has an invalid length. [ 311.679312][T14765] openvswitch: netlink: Invalid VLAN frame [ 312.254014][T14791] netlink: 'syz.2.2426': attribute type 1 has an invalid length. [ 312.276238][T14795] netlink: 'syz.2.2426': attribute type 1 has an invalid length. [ 312.729269][T14822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2437'. [ 312.899688][T14822] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2437'. [ 312.932693][T14822] netlink: 'syz.2.2437': attribute type 5 has an invalid length. [ 313.172516][T14841] netlink: 'syz.2.2443': attribute type 1 has an invalid length. [ 313.311466][T14841] bond7: entered promiscuous mode [ 313.331016][T14841] 8021q: adding VLAN 0 to HW filter on device bond7 [ 313.535867][T14855] A link change request failed with some changes committed already. Interface bridge1 may have been left with an inconsistent configuration, please check. [ 313.694781][T14864] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2447'. [ 313.801260][T14844] scsi_nl_rcv_msg: discarding partial skb [ 314.051835][T14879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.277441][T14890] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.284827][T14890] bridge0: port 1(0¾x9ÿ) entered disabled state [ 314.330229][T14888] unsupported nlmsg_type 40 [ 314.759536][T14910] validate_nla: 1 callbacks suppressed [ 314.759581][T14910] netlink: 'syz.3.2461': attribute type 1 has an invalid length. [ 314.779247][T14910] Cannot find set identified by id 65534 to match [ 314.798102][T14915] __nla_validate_parse: 8 callbacks suppressed [ 314.798120][T14915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2463'. [ 315.227725][T14932] lo: entered promiscuous mode [ 315.247026][T14932] lo: left allmulticast mode [ 315.266719][T14932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.290813][T14937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2469'. [ 315.300766][T14934] tipc: Enabling of bearer rejected, failed to enable media [ 315.325518][T14937] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2469'. [ 315.344222][T14936] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2469'. [ 315.931291][T14962] netlink: 'syz.0.2474': attribute type 21 has an invalid length. [ 315.954476][T14962] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2474'. [ 315.975072][T14961] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2473'. [ 316.258874][T14980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2478'. [ 317.037290][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.336019][T15035] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2493'. [ 317.718912][T15053] netlink: 'syz.2.2497': attribute type 4 has an invalid length. [ 318.056964][T15072] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.2501'. [ 318.304704][T15078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2503'. [ 318.311531][T15038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 318.329166][T15061] netlink: 'syz.3.2498': attribute type 1 has an invalid length. [ 318.354214][T15061] netlink: 'syz.3.2498': attribute type 1 has an invalid length. [ 320.855176][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 342.624200][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.932847][T15089] __nla_validate_parse: 3 callbacks suppressed [ 368.932867][T15089] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2508'. [ 368.962118][T15090] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2508'. [ 369.029490][T15096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2506'. [ 369.067427][T15096] gretap0: left promiscuous mode [ 369.090016][T15096] bridge0: port 1(gretap0) entered disabled state [ 369.167209][T15105] netlink: 'syz.1.2509': attribute type 1 has an invalid length. [ 369.370247][T15105] 8021q: adding VLAN 0 to HW filter on device bond10 [ 369.441049][T15105] netlink: 'syz.1.2509': attribute type 39 has an invalid length. [ 370.140807][T15115] syzkaller0: entered promiscuous mode [ 370.210603][T15115] syzkaller0: entered allmulticast mode [ 370.523602][T15176] syzkaller1: entered allmulticast mode [ 372.400721][T15117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.417002][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2520'. [ 373.045508][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2526'. [ 373.053658][T15201] Cannot find set identified by id 65534 to match [ 373.148679][T15197] macsec2: entered promiscuous mode [ 373.172992][T15197] bridge0: entered promiscuous mode [ 373.194138][T15197] macsec2: entered allmulticast mode [ 373.201437][T15197] bridge0: entered allmulticast mode [ 373.218222][T15197] bridge0: port 3(macsec2) entered blocking state [ 373.234203][T15197] bridge0: port 3(macsec2) entered disabled state [ 373.281608][T15197] bridge0: left allmulticast mode [ 373.302992][T15197] bridge0: left promiscuous mode [ 373.562899][T15209] ip6gretap0 speed is unknown, defaulting to 1000 [ 373.696178][T15237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2535'. [ 373.732753][T15236] xfrm1: entered allmulticast mode [ 374.977209][T15295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.664342][T15350] netlink: 'syz.0.2565': attribute type 1 has an invalid length. [ 376.684578][T15350] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2565'. [ 376.707912][T15355] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2568'. [ 376.720811][T15355] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2568'. [ 376.731360][T15355] netlink: 'syz.4.2568': attribute type 5 has an invalid length. [ 376.742577][T15355] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2568'. [ 376.819911][T15357] Bluetooth: MGMT ver 1.23 [ 376.964781][T15364] tipc: Enabling of bearer rejected, failed to enable media [ 377.001263][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2570'. [ 377.270541][T15376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.718974][T15400] syzkaller0: entered promiscuous mode [ 377.747748][T15400] syzkaller0: entered allmulticast mode [ 378.460321][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.583219][T15432] openvswitch: netlink: VLAN attribute unexpected. [ 378.742835][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2590'. [ 378.844251][T15446] netlink: 'syz.2.2593': attribute type 10 has an invalid length. [ 378.852274][T15446] team0: left allmulticast mode [ 378.859500][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 378.864886][ T5632] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 378.868671][T15446] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.898249][T15446] bond0: (slave team0): Enslaving as an active interface with an up link [ 379.702562][T15481] netlink: 'syz.4.2603': attribute type 15 has an invalid length. [ 380.598727][T15521] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 380.800905][T15521] ¾x9ÿ: renamed from bridge_slave_0 [ 380.861180][ T10] IPVS: starting estimator thread 0... [ 380.967288][T15537] IPVS: using max 28 ests per chain, 67200 per kthread [ 381.213353][T15552] netlink: 'syz.2.2620': attribute type 4 has an invalid length. [ 381.226317][T15554] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2620'. [ 381.240186][T15552] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2620'. [ 381.642170][T15573] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.2623'. [ 381.762477][T15582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2628'. [ 381.863742][T15585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2629'. [ 381.920570][T15585] bond8: entered promiscuous mode [ 382.296173][T15603] xt_hashlimit: size too large, truncated to 1048576 [ 382.781374][T15617] netlink: 'syz.3.2638': attribute type 7 has an invalid length. [ 382.826668][T15620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2639'. [ 382.887188][T15624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2639'. [ 382.929343][T15620] xfrm1: entered promiscuous mode [ 382.953143][T15620] xfrm1: entered allmulticast mode [ 383.006771][T15628] xt_socket: unknown flags 0x8 [ 383.253245][T15637] : entered promiscuous mode [ 383.293322][T15645] xt_l2tp: missing protocol rule (udp|l2tpip) [ 383.432627][T15649] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2648'. [ 383.681372][T15659] netlink: 'syz.1.2651': attribute type 1 has an invalid length. [ 383.812437][T15663] bond11: (slave bridge9): making interface the new active one [ 383.837242][T15663] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 383.890541][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2655'. [ 384.056312][T15676] netlink: 'syz.1.2658': attribute type 1 has an invalid length. [ 384.184744][T15676] 8021q: adding VLAN 0 to HW filter on device bond12 [ 384.196724][T15676] netlink: 'syz.1.2658': attribute type 1 has an invalid length. [ 384.227704][T15683] : entered promiscuous mode [ 384.335216][T15676] 8021q: adding VLAN 0 to HW filter on device bond13 [ 384.355563][T15676] netlink: 'syz.1.2658': attribute type 1 has an invalid length. [ 384.437946][T15676] 8021q: adding VLAN 0 to HW filter on device bond14 [ 384.448996][T15676] netlink: 'syz.1.2658': attribute type 1 has an invalid length. [ 384.660806][T15676] 8021q: adding VLAN 0 to HW filter on device bond15 [ 384.708561][T15676] netlink: 'syz.1.2658': attribute type 1 has an invalid length. [ 384.718836][T15689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2660'. [ 384.817009][T15676] 8021q: adding VLAN 0 to HW filter on device bond16 [ 384.827179][T15676] netlink: 'syz.1.2658': attribute type 1 has an invalid length. [ 384.972082][T15676] 8021q: adding VLAN 0 to HW filter on device bond17 [ 385.062524][T15723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2668'. [ 385.195639][T15727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2669'. [ 385.225676][T15727] netlink: 'syz.2.2669': attribute type 2 has an invalid length. [ 385.252288][T15731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2671'. [ 385.283597][T15731] netlink: 'syz.1.2671': attribute type 7 has an invalid length. [ 385.813066][T15749] bond18: entered promiscuous mode [ 385.827900][T15749] 8021q: adding VLAN 0 to HW filter on device bond18 [ 385.960601][T15763] team0: Port device dummy0 added [ 386.138526][ T5632] block nbd0: Receive control failed (result -32) [ 386.517776][T15788] tunl0: entered promiscuous mode [ 387.130117][T15828] __nla_validate_parse: 8 callbacks suppressed [ 387.130136][T15828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2695'. [ 387.178662][T15828] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2695'. [ 387.216367][T15828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2695'. [ 387.329682][T15837] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2698'. [ 387.345827][T15839] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2698'. [ 387.540389][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2702'. [ 387.732032][T15861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2704'. [ 387.761505][T15863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'. [ 388.203525][T15882] vlan4: entered promiscuous mode [ 388.215128][T15882] bridge0: entered promiscuous mode [ 388.303339][T15879] validate_nla: 6 callbacks suppressed [ 388.303371][T15879] netlink: 'syz.0.2710': attribute type 5 has an invalid length. [ 388.410792][T15895] xt_hashlimit: size too large, truncated to 1048576 [ 388.456278][T15893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2714'. [ 388.498315][T15893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2714'. [ 388.542583][T15901] netlink: 'syz.0.2716': attribute type 9 has an invalid length. [ 388.608272][T15897] netlink: zone id is out of range [ 388.627684][T15897] netlink: zone id is out of range [ 388.654039][T15897] netlink: zone id is out of range [ 388.670448][T15897] netlink: zone id is out of range [ 388.677376][T15897] netlink: zone id is out of range [ 388.683236][T15897] netlink: zone id is out of range [ 388.690508][T15897] netlink: zone id is out of range [ 388.696772][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 388.716980][T15897] netlink: zone id is out of range [ 388.722889][T15897] netlink: zone id is out of range [ 388.730911][T15897] netlink: zone id is out of range [ 390.013070][T15973] netlink: 'syz.3.2734': attribute type 1 has an invalid length. [ 390.640461][T16003] netlink: 'syz.1.2742': attribute type 10 has an invalid length. [ 390.949481][T16014] x_tables: duplicate underflow at hook 1 [ 391.927469][ T7557] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.089005][ T7557] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.176247][ T7557] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.228800][ T7557] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.353053][T16083] netlink: 'syz.4.2771': attribute type 2 has an invalid length. [ 392.451128][ T7557] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.499032][ T7557] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.544432][ T7557] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20002 - 0 [ 392.592630][T16092] __nla_validate_parse: 12 callbacks suppressed [ 392.592656][T16092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2775'. [ 392.615059][T16092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2775'. [ 393.039394][T16115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2783'. [ 393.319087][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2786'. [ 393.331951][T16126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2786'. [ 393.540875][T16140] syzkaller0: entered promiscuous mode [ 393.556136][T16140] syzkaller0: entered allmulticast mode [ 395.774873][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2790'. [ 395.776869][T16139] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 395.824238][T16139] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 395.853115][T16139] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 396.366171][T16168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2794'. [ 396.501133][T16168] IPVS: Error connecting to the multicast addr [ 396.576815][T16178] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2799'. [ 396.660129][T16178] tipc: Enabled bearer , priority 11 [ 396.696108][T16186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2801'. [ 396.767780][T16188] bond0: (slave syz_tun): Releasing backup interface [ 396.781733][T16178] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.787163][T16188] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 396.912256][T16188] bond0: (slave team0): Releasing backup interface [ 396.960698][T16188] net_ratelimit: 205 callbacks suppressed [ 396.960717][T16188] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 397.621930][T16231] netlink: 'syz.1.2812': attribute type 1 has an invalid length. [ 398.030436][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2817'. [ 398.083251][T16248] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 398.212288][T16200] infiniband syz1: set down [ 398.241926][T16200] infiniband syz1: added bond_slave_1 [ 398.408836][T16200] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 398.461894][T16200] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 398.516112][T16200] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 398.641998][T16271] vlan0: entered promiscuous mode [ 398.685084][T16200] RDS/IB: syz1: added [ 398.695915][T16200] smc: adding ib device syz1 with port count 1 [ 398.715263][T16200] smc: ib device syz1 port 1 has no pnetid [ 399.182369][T16287] bond1: (slave lo): Releasing backup interface [ 399.208670][T16287] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 399.235867][T16287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.372448][T16290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2830'. [ 399.409191][T16296] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2831'. [ 399.740078][T16304] tc_dump_action: action bad kind [ 399.775691][T16304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2833'. [ 399.860388][T16304] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2833'. [ 399.883809][T16309] bridge11: entered allmulticast mode [ 400.540637][T16328] wg2: entered allmulticast mode [ 400.752231][T16336] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2844'. [ 401.329847][T16369] syzkaller0: entered promiscuous mode [ 401.375221][T16369] syzkaller0: entered allmulticast mode [ 401.697700][T16350] nbd1: detected capacity change from 0 to 63 [ 401.889531][ T5629] block nbd1: Receive control failed (result -104) [ 401.897224][ T5632] block nbd1: Receive control failed (result -32) [ 401.977251][T16388] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 402.019155][T16392] netlink: 'syz.0.2856': attribute type 18 has an invalid length. [ 402.356585][T16412] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2860'. [ 402.813653][T16428] h: entered promiscuous mode [ 402.841502][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2866'. [ 402.855588][T16431] IPVS: set_ctl: invalid protocol: 31091 97.108.108.101:29184 [ 403.080091][T16435] syzkaller0: entered promiscuous mode [ 403.105519][T16435] syzkaller0: entered allmulticast mode [ 403.700566][T16464] netlink: 'syz.0.2876': attribute type 1 has an invalid length. [ 403.933500][T16467] bond7: (slave gretap2): making interface the new active one [ 403.961142][T16467] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 403.983162][T16476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2879'. [ 404.161562][T16478] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2879'. [ 404.319216][T16478] bridge12: port 1(bond19) entered blocking state [ 404.395743][T16478] bridge12: port 1(bond19) entered disabled state [ 404.428590][T16478] bond19: entered allmulticast mode [ 404.435613][T16486] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 404.520938][T16478] bond19: entered promiscuous mode [ 404.816362][ T5619] bond0: (slave syz_tun): Releasing backup interface [ 404.866842][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 404.880950][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 404.889915][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 404.907165][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 404.916400][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 405.178639][T16522] ip6erspan0: entered allmulticast mode [ 405.341935][T16529] bridge0: port 1(vlan0) entered blocking state [ 405.378802][T16529] bridge0: port 1(vlan0) entered disabled state [ 405.423598][T16529] vlan0: entered allmulticast mode [ 405.443986][T16529] geneve0: entered allmulticast mode [ 405.567268][T16536] netlink: 'syz.1.2895': attribute type 1 has an invalid length. [ 406.088412][T16558] IPVS: sed: FWM 3 0x00000003 - no destination available [ 406.097755][T16505] ip6gretap0 speed is unknown, defaulting to 1000 [ 406.396302][ T5632] block nbd2: Receive control failed (result -32) [ 406.404507][ T5629] block nbd3: Receive control failed (result -32) [ 406.666217][T16568] macvtap0: entered promiscuous mode [ 406.681226][T16568] macvtap0: entered allmulticast mode [ 406.759095][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2904'. [ 406.761201][T16571] macvtap1: entered promiscuous mode [ 406.811227][T16571] macvtap1: entered allmulticast mode [ 406.873213][T16577] macvtap4: entered promiscuous mode [ 406.905515][T16577] macvtap4: entered allmulticast mode [ 406.910939][T16577] veth1_vlan: entered allmulticast mode [ 407.014402][ T5629] Bluetooth: hci0: command tx timeout [ 407.015835][T16579] macvtap5: entered promiscuous mode [ 407.040983][T16579] macvtap5: entered allmulticast mode [ 407.173296][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'. [ 407.413553][T16597] netlink: 'syz.1.2912': attribute type 12 has an invalid length. [ 407.848476][T16616] netlink: 'syz.4.2919': attribute type 1 has an invalid length. [ 407.960669][T16616] bond12: entered promiscuous mode [ 407.968794][T16616] 8021q: adding VLAN 0 to HW filter on device bond12 [ 408.000006][T16622] IPVS: sed: FWM 3 0x00000003 - no destination available [ 408.048952][T16625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2919'. [ 408.059433][T16626] netlink: 'syz.3.2922': attribute type 4 has an invalid length. [ 408.132055][T16625] bond12: entered allmulticast mode [ 408.210427][T16634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2923'. [ 408.239021][T16616] bond12: (slave bridge7): making interface the new active one [ 408.248584][T16616] bridge7: entered promiscuous mode [ 408.263033][T16616] bridge7: entered allmulticast mode [ 408.275181][T16616] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 408.672476][T16645] syz_tun: entered allmulticast mode [ 408.811118][T16654] Cannot find add_set index 65532 as target [ 408.969862][T16663] IPVS: sed: FWM 3 0x00000003 - no destination available [ 409.042105][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 409.095814][ T5629] Bluetooth: hci0: command tx timeout [ 409.207469][T16676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2934'. [ 409.343927][T16687] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2934'. [ 409.436126][T16687] veth1_to_bond: left allmulticast mode [ 409.540362][T16505] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.570578][T16505] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.590529][T16505] bridge_slave_0: entered allmulticast mode [ 409.620260][T16505] bridge_slave_0: entered promiscuous mode [ 409.636041][T16505] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.653388][T16505] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.673241][T16505] bridge_slave_1: entered allmulticast mode [ 409.686784][T16505] bridge_slave_1: entered promiscuous mode [ 410.029794][T16505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.081547][T16505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.246324][T16505] team0: Port device team_slave_0 added [ 410.277575][T16505] team0: Port device team_slave_1 added [ 410.469206][T16505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.477020][T16505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.508228][T16505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.510543][T16737] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2953'. [ 410.561848][T16737] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2953'. [ 410.605069][T16505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.628554][T16505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.716906][T16505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.950510][T16759] netlink: 'syz.1.2957': attribute type 1 has an invalid length. [ 410.969980][T16505] hsr_slave_0: entered promiscuous mode [ 410.982093][T16505] hsr_slave_1: entered promiscuous mode [ 410.997234][T16505] debugfs: 'hsr0' already exists in 'hsr' [ 411.009874][T16505] Cannot create hsr debugfs directory [ 411.175328][ T5629] Bluetooth: hci0: command tx timeout [ 411.377296][T16505] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.393476][T16505] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.806958][T16505] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.840490][T16505] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.880172][T16783] lo: entered allmulticast mode [ 411.886453][T16783] lo: left allmulticast mode [ 411.909940][T16790] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 412.070944][T16505] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.084303][T16505] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.207411][T16786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2965'. [ 412.219377][T16786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2965'. [ 412.258310][T16786] bridge9: entered promiscuous mode [ 412.266417][T16786] bridge9: entered allmulticast mode [ 412.415252][T16505] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.428433][T16505] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.487020][T16799] ip6erspan1: entered allmulticast mode [ 412.804106][T16820] netlink: 'syz.1.2973': attribute type 21 has an invalid length. [ 412.921782][T16827] xt_l2tp: missing protocol rule (udp|l2tpip) [ 413.126773][T16835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2979'. [ 413.139897][T16838] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 413.203540][T16832] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2978'. [ 413.254001][ T5629] Bluetooth: hci0: command tx timeout [ 413.303011][T16505] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 413.386558][T16505] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.402719][T16505] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 413.442789][T16505] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.477825][T16505] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 413.517150][T16851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2983'. [ 413.534377][T16505] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.551782][T16505] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 413.595463][T16505] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.888705][T16873] pimreg: entered allmulticast mode [ 413.995025][T16505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.074690][T16505] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.113347][ T7546] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.120572][ T7546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.157132][ T7546] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.164350][ T7546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.190900][T16884] netlink: 816 bytes leftover after parsing attributes in process `syz.4.2989'. [ 414.752148][T16505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.817717][T16505] veth0_vlan: entered promiscuous mode [ 414.831100][T16505] veth1_vlan: entered promiscuous mode [ 414.873763][T16505] veth0_macvtap: entered promiscuous mode [ 414.884985][T16505] veth1_macvtap: entered promiscuous mode [ 414.909889][T16505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.929390][T16505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.951416][ T7540] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.964625][ T7540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.975253][ T7540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.984211][ T7540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.127374][ T7540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.135871][ T7540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.178037][ T7539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.187670][ T7539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.273300][T16903] netlink: 'syz.0.2881': attribute type 1 has an invalid length. [ 426.614714][ T5629] Bluetooth: hci4: command 0x0405 tx timeout [ 432.214895][ T1696] block nbd1: Connection timed out, retrying (0/2 alive) [ 432.226336][ T1696] block nbd1: Connection timed out, retrying (0/2 alive) [ 432.233913][ T1696] block nbd1: Connection timed out, retrying (0/2 alive) [ 432.241540][ T1696] block nbd1: Connection timed out, retrying (0/2 alive) [ 432.250224][ T11] block nbd1: Dead connection, failed to find a fallback [ 432.260567][ T11] block nbd1: shutting down sockets [ 432.270263][ T11] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.282210][ T11] Buffer I/O error on dev nbd1, logical block 2, async page read [ 432.291249][ T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.301606][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 432.310487][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.321265][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 432.330115][ T11] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.340178][ T11] Buffer I/O error on dev nbd1, logical block 3, async page read [ 432.350332][T15110] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.361406][T15110] Buffer I/O error on dev nbd1, logical block 0, async page read [ 432.371625][T15110] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.381227][T15110] Buffer I/O error on dev nbd1, logical block 1, async page read [ 432.390771][T15110] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.400415][T15110] Buffer I/O error on dev nbd1, logical block 2, async page read [ 432.408528][T15110] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.418812][T15110] Buffer I/O error on dev nbd1, logical block 3, async page read [ 432.427021][T15110] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.436168][T15110] Buffer I/O error on dev nbd1, logical block 0, async page read [ 432.445155][T15110] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.454329][T15110] Buffer I/O error on dev nbd1, logical block 1, async page read [ 432.467786][T15110] ldm_validate_partition_table(): Disk read failed. [ 432.477807][T15110] Dev nbd1: unable to read RDB block 0 [ 432.486509][T15110] nbd1: unable to read partition table [ 432.503712][T15110] ldm_validate_partition_table(): Disk read failed. [ 432.513697][T15110] Dev nbd1: unable to read RDB block 0 [ 432.523096][T15110] nbd1: unable to read partition table [ 439.906252][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 468.869999][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2991'. [ 468.870078][T16921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2995'. [ 468.960621][T16921] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 469.075359][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 469.091469][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 469.102016][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 469.116414][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 469.128141][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 469.501661][T16947] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 470.460822][ T7560] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.517722][ T7560] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.562278][ T7560] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 470.868123][ T7560] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.917909][ T7560] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.983582][ T7560] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 471.043743][T17007] af_packet: tpacket_rcv: packet too big, clamped from 4408 to 3952. macoff=96 [ 471.071255][T16928] ip6gretap0 speed is unknown, defaulting to 1000 [ 471.098015][T17006] team0: Device gtp0 is of different type [ 471.175490][ T5629] Bluetooth: hci5: command tx timeout [ 471.272666][ T7560] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.303397][ T7560] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.325321][ T7560] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 472.039895][T17035] veth0_to_team: entered promiscuous mode [ 472.061580][T17035] macvtap1: entered promiscuous mode [ 472.074451][T17041] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3021'. [ 472.094954][T17035] macvtap1: entered allmulticast mode [ 472.096713][T17043] netlink: 'syz.0.3022': attribute type 8 has an invalid length. [ 472.114801][T17035] veth0_to_team: entered allmulticast mode [ 472.189852][T17035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3021'. [ 472.211978][T17037] macvtap2: entered promiscuous mode [ 472.226462][T17037] macvtap2: entered allmulticast mode [ 472.627610][T17057] netlink: 'syz.4.3027': attribute type 4 has an invalid length. [ 472.942352][ T7560] bond19: left allmulticast mode [ 472.969595][ T7560] bond19: left promiscuous mode [ 472.991833][ T7560] bridge12: port 1(bond19) entered disabled state [ 473.023510][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3030'. [ 473.073531][T17076] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3030'. [ 473.097993][ T7560] pimreg: left allmulticast mode [ 473.255131][ T5629] Bluetooth: hci5: command tx timeout [ 473.357249][T17087] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 473.448995][T17090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3034'. [ 474.072957][ T7560] bond1 (unregistering): (slave gretap1): Releasing active interface [ 474.161724][ T7560] bond7 (unregistering): (slave geneve2): Releasing active interface [ 474.471922][ T7560] team0: Port device bridge6 removed [ 474.530988][ T7560] bond9 (unregistering): (slave bridge7): Releasing backup interface [ 474.540255][ T7560] bridge7 (unregistering): left promiscuous mode [ 474.549592][ T7560] bridge7 (unregistering): left allmulticast mode [ 474.633383][ T7560] bond11 (unregistering): (slave bridge9): Releasing active interface [ 474.848169][ T7560] bond0 (unregistering): Released all slaves [ 474.861474][ T7560] bond1 (unregistering): Released all slaves [ 474.885023][ T7560] bond2 (unregistering): Released all slaves [ 474.904409][ T7560] bond3 (unregistering): Released all slaves [ 474.928712][ T7560] bond4 (unregistering): Released all slaves [ 474.949778][ T7560] bond5 (unregistering): Released all slaves [ 474.970859][ T7560] bond6 (unregistering): Released all slaves [ 474.993130][ T7560] bond7 (unregistering): Released all slaves [ 475.013383][ T7560] bond8 (unregistering): Released all slaves [ 475.040359][ T7560] bond9 (unregistering): Released all slaves [ 475.062454][ T7560] bond10 (unregistering): Released all slaves [ 475.082694][ T7560] bond11 (unregistering): Released all slaves [ 475.111192][ T7560] bond12 (unregistering): Released all slaves [ 475.137561][ T7560] bond13 (unregistering): Released all slaves [ 475.160425][ T7560] bond14 (unregistering): Released all slaves [ 475.184853][ T7560] bond15 (unregistering): Released all slaves [ 475.204352][ T7560] bond16 (unregistering): Released all slaves [ 475.230020][ T7560] bond17 (unregistering): Released all slaves [ 475.251990][ T7560] bond18 (unregistering): Released all slaves [ 475.274493][ T7560] bond19 (unregistering): Released all slaves [ 475.345207][ T5629] Bluetooth: hci5: command tx timeout [ 475.481357][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 475.558032][T17109] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 475.673645][T17115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3039'. [ 475.830738][ T7560] tipc: Disabling bearer [ 475.843045][ T7560] tipc: Disabling bearer [ 475.920855][ T7560] tipc: Left network mode [ 475.924594][T17117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3040'. [ 475.996965][T17117] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3040'. [ 476.143521][T17141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3043'. [ 476.224907][T17147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3043'. [ 476.336995][T17151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.381652][T17140] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 476.395234][T17140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.428161][ T5629] Bluetooth: hci5: command tx timeout [ 477.643163][T17164] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 477.662044][T17192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3053'. [ 477.720052][T17164] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 477.925658][T17164] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 477.943327][T17164] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 478.047873][T17164] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 478.097474][T17164] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 478.367240][T16928] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.379850][T17221] netlink: 'syz.3.3057': attribute type 1 has an invalid length. [ 478.387859][T16928] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.397059][T16928] bridge_slave_0: entered allmulticast mode [ 478.405762][T16928] bridge_slave_0: entered promiscuous mode [ 478.428401][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 478.444616][T17215] tun0: tun_chr_ioctl cmd 1074025675 [ 478.450020][T17215] tun0: persist disabled [ 478.559427][T16928] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.568363][T16928] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.576138][T16928] bridge_slave_1: entered allmulticast mode [ 478.586186][T16928] bridge_slave_1: entered promiscuous mode [ 478.621580][T17222] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 478.634166][T17222] bond9: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 478.650636][T17222] bond9: (slave vxcan5): making interface the new active one [ 478.661284][T17222] bond9: (slave vxcan5): Enslaving as an active interface with an up link [ 478.688662][T17211] bond9: (slave vxcan7): The slave device specified does not support setting the MAC address [ 478.703789][T17211] bond9: (slave vxcan7): Enslaving as a backup interface with an up link [ 478.871413][T16928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.194476][T16928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.852492][T17267] team0: Device gtp0 is up. Set it down before adding it as a team port [ 480.041561][T16928] team0: Port device team_slave_0 added [ 480.083438][T16928] team0: Port device team_slave_1 added [ 480.111540][T17281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3063'. [ 480.312874][T17286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.551036][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'. [ 480.563157][T17164] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 480.572489][T16928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.597393][T17164] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 480.611433][T16928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.647004][T16928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.745698][T17296] bond1: Unable to set down delay as MII monitoring is disabled [ 480.771875][T17296] bond1 (unregistering): Released all slaves [ 480.829963][T16928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.848552][T16928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.915152][T16928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.935578][T17301] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3068'. [ 480.947469][T17302] syzkaller1: entered promiscuous mode [ 480.953730][T17302] syzkaller1: entered allmulticast mode [ 481.291462][T16928] hsr_slave_0: entered promiscuous mode [ 481.306031][T16928] hsr_slave_1: entered promiscuous mode [ 481.328105][T16928] debugfs: 'hsr0' already exists in 'hsr' [ 481.369087][T16928] Cannot create hsr debugfs directory [ 481.617275][T17334] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.3074'. [ 482.143758][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 482.591182][T17360] bridge_slave_1: left allmulticast mode [ 482.611036][T17364] netlink: 'syz.4.3081': attribute type 1 has an invalid length. [ 482.614882][T17360] bridge_slave_1: left promiscuous mode [ 482.626078][T17364] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3081'. [ 482.656047][T17360] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.671390][T17360] ¾x9ÿ: left allmulticast mode [ 482.677296][T17360] ¾x9ÿ: left promiscuous mode [ 482.682496][T17360] bridge0: port 1(0¾x9ÿ) entered disabled state [ 482.858741][ T7560] veth1_vlan: left allmulticast mode [ 483.051290][T17375] netlink: 'syz.0.3084': attribute type 4 has an invalid length. [ 484.037024][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3091'. [ 484.068030][T17389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3089'. [ 484.609679][ T7560] IPVS: stop unused estimator thread 0... [ 485.103030][T17440] netlink: 'syz.4.3098': attribute type 1 has an invalid length. [ 485.493635][T17445] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 485.656437][T17451] syzkaller0: entered promiscuous mode [ 485.688882][T17451] syzkaller0: entered allmulticast mode [ 485.732189][T17474] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3107'. [ 485.783007][T17445] pim6reg1: entered promiscuous mode [ 485.792776][T17445] pim6reg1: entered allmulticast mode [ 485.818228][T16928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 485.872822][T16928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.040282][T16928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 486.109676][T16928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 486.217627][T16928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 486.253570][T16928] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 486.271486][T17492] pim6reg: left allmulticast mode [ 486.319062][T16928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 486.387212][T16928] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 486.596799][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3118'. [ 486.633746][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3118'. [ 486.797475][T16928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.832438][T17520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3119'. [ 486.860524][T17523] sctp: [Deprecated]: syz.2.3120 (pid 17523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.860524][T17523] Use struct sctp_sack_info instead [ 486.915827][T16928] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.926213][T17523] x_tables: duplicate underflow at hook 1 [ 486.940257][ T7540] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.947472][ T7540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.001826][ T7540] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.009035][ T7540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.098029][T17526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 487.106119][T17526] IPv6: NLM_F_CREATE should be set when creating new route [ 487.223763][T17526] netlink: 324 bytes leftover after parsing attributes in process `syz.3.3121'. [ 487.751494][T17559] IPVS: sed: FWM 3 0x00000003 - no destination available [ 487.767167][T17561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3130'. [ 488.180809][T17575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3132'. [ 488.314454][T17582] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 489.033790][T16928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.199062][T17627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3145'. [ 489.300375][T16928] veth0_vlan: entered promiscuous mode [ 489.416905][T16928] veth1_vlan: entered promiscuous mode [ 489.589329][T17635] ipvlan4: entered promiscuous mode [ 489.734792][T17647] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 489.903451][T17650] tun0: tun_chr_ioctl cmd 1074025675 [ 489.909738][T17653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3150'. [ 489.933455][T17650] tun0: persist disabled [ 489.990598][T17653] IPv6: sit5: Disabled Multicast RS [ 490.015396][T17653] sit5: entered allmulticast mode [ 490.088605][T16928] veth0_macvtap: entered promiscuous mode [ 490.193276][T16928] veth1_macvtap: entered promiscuous mode [ 490.361335][T16928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.364019][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3153'. [ 490.384632][T17667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3153'. [ 490.434894][T16928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.528059][ T7546] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.549382][ T7546] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.600242][ T7546] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.645951][ T7546] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.778455][T17670] veth5: entered allmulticast mode [ 490.793714][T17675] netlink: 'syz.2.3156': attribute type 11 has an invalid length. [ 490.839724][T17675] netlink: 'syz.2.3156': attribute type 11 has an invalid length. [ 490.893257][T17675] netlink: 'syz.2.3156': attribute type 11 has an invalid length. [ 490.939706][T17675] netlink: 'syz.2.3156': attribute type 11 has an invalid length. [ 491.127292][T17675] netlink: 'syz.2.3156': attribute type 11 has an invalid length. [ 491.145451][T17675] netlink: 'syz.2.3156': attribute type 11 has an invalid length. [ 491.157120][ T7557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.171419][ T7557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.186822][T17675] netlink: 'syz.2.3156': attribute type 11 has an invalid length. [ 491.352830][T17675] netlink: 'syz.2.3156': attribute type 11 has an invalid length. [ 491.393280][ T7547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.397376][T17675] netlink: 'syz.2.3156': attribute type 11 has an invalid length. [ 491.445417][ T7547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.461711][T17675] netlink: 'syz.2.3156': attribute type 11 has an invalid length. [ 491.603268][T17704] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 492.547892][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 492.560869][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 492.572601][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 492.587697][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 492.597502][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 492.828662][T17747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.058934][T17758] __nla_validate_parse: 66 callbacks suppressed [ 493.058955][T17758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3173'. [ 493.147190][T17758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3173'. [ 493.185514][T17758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3173'. [ 493.233948][T17758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3173'. [ 493.312760][T17763] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3174'. [ 493.969081][T17787] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 494.402491][T17731] ip6gretap0 speed is unknown, defaulting to 1000 [ 494.698990][ T5629] Bluetooth: hci3: command tx timeout [ 494.770573][T17820] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 494.825504][T17820] bond1 (unregistering): Released all slaves [ 494.883445][T17834] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3187'. [ 495.196079][T17845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3189'. [ 495.611447][T17859] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3193'. [ 495.740949][T17858] can: request_module (can-proto-5) failed. [ 495.921854][T17872] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3196'. [ 496.059954][T17874] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3197'. [ 496.516052][T17887] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 496.581073][T17887] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 496.619047][T17887] gretap1: entered promiscuous mode [ 496.635053][T17887] gretap1: entered allmulticast mode [ 496.789321][ T5629] Bluetooth: hci3: command tx timeout [ 496.981967][T17909] netlink: 'syz.3.3205': attribute type 2 has an invalid length. [ 497.087465][T17914] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.095724][T17914] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.213610][T17909] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 497.487575][T17915] syzkaller1: entered promiscuous mode [ 497.510878][T17915] syzkaller1: entered allmulticast mode [ 497.859423][T17731] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.874548][T17731] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.889704][T17731] bridge_slave_0: entered allmulticast mode [ 497.901738][T17731] bridge_slave_0: entered promiscuous mode [ 497.915723][T17731] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.933127][T17731] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.945156][T17952] netlink: 'syz.0.3212': attribute type 24 has an invalid length. [ 497.965825][T17731] bridge_slave_1: entered allmulticast mode [ 497.982113][T17731] bridge_slave_1: entered promiscuous mode [ 498.081721][T17731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.139664][T17731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.258756][T17731] team0: Port device team_slave_0 added [ 498.281749][T17731] team0: Port device team_slave_1 added [ 498.282847][T17959] __nla_validate_parse: 2 callbacks suppressed [ 498.282874][T17959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3213'. [ 498.398260][T17731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.425643][T17731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.470256][T17731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.483743][T17731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.495556][T17731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.525009][T17731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.682009][T17731] hsr_slave_0: entered promiscuous mode [ 498.689269][T17731] hsr_slave_1: entered promiscuous mode [ 498.697413][T17731] debugfs: 'hsr0' already exists in 'hsr' [ 498.703343][T17731] Cannot create hsr debugfs directory [ 498.860386][ T5629] Bluetooth: hci3: command tx timeout [ 499.088421][T17984] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3217'. [ 499.151089][T17731] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.165864][T17731] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.298175][T17731] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.316427][T17731] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.434965][T17731] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.454947][T17731] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.610313][T17731] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.623020][T17731] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.473313][T17934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.535992][T17731] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 500.672798][T17731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.719484][T17731] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 500.773612][T17731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.814478][T17731] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 500.880600][T17731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.918222][T17731] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 500.935192][ T5629] Bluetooth: hci3: command tx timeout [ 500.940184][T18040] netlink: 'syz.2.3221': attribute type 61 has an invalid length. [ 500.978473][T17731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.002850][T18034] wlan1 speed is unknown, defaulting to 1000 [ 501.056362][T18034] wlan1 speed is unknown, defaulting to 1000 [ 501.108495][T18034] wlan1 speed is unknown, defaulting to 1000 [ 501.132919][T18054] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3223'. [ 501.140490][T18034] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 501.220816][T18034] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 501.319207][T18034] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 501.347538][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.377333][T17731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.423278][T18034] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 501.456374][T17731] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.537555][ T7540] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.545669][ T7540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.584599][T18034] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 501.640423][ T7540] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.647631][ T7540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.682745][T18073] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3225'. [ 501.868047][T18034] wlan1 speed is unknown, defaulting to 1000 [ 501.929704][T18034] wlan1 speed is unknown, defaulting to 1000 [ 501.981426][T18034] wlan1 speed is unknown, defaulting to 1000 [ 502.005815][T18034] wlan1 speed is unknown, defaulting to 1000 [ 502.043116][T18034] wlan1 speed is unknown, defaulting to 1000 [ 502.092257][T18034] wlan1 speed is unknown, defaulting to 1000 [ 502.111242][T18034] wlan1 speed is unknown, defaulting to 1000 [ 502.328149][T18107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3231'. [ 503.690416][T17731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.253132][T17731] veth0_vlan: entered promiscuous mode [ 504.270645][T17731] veth1_vlan: entered promiscuous mode [ 504.337922][T17731] veth0_macvtap: entered promiscuous mode [ 504.363620][T17731] veth1_macvtap: entered promiscuous mode [ 504.411509][T17731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.466118][T17731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.483045][ T7560] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.502407][ T7560] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.528316][ T7560] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.545411][ T7560] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.132498][T18094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.462682][ T7541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.511407][ T7541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.769202][ T7541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.811872][ T7541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.970850][T18229] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 505.995118][T18229] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 506.220190][T18234] xt_NFQUEUE: number of total queues is 0 [ 506.302483][T18246] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3249'. [ 506.805456][T18259] syzkaller0: entered promiscuous mode [ 506.814926][T18266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 506.830388][T18259] syzkaller0: entered allmulticast mode [ 506.830435][T18266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 506.846711][T18266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 506.871572][T18266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 506.890607][T18266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 506.970526][T18259] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3253'. [ 507.065459][T18259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3253'. [ 507.133115][T18259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3253'. [ 507.172472][T18269] netlink: 'syz.1.3253': attribute type 7 has an invalid length. [ 507.219179][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3255'. [ 507.229889][T18281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3254'. [ 507.269741][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3255'. [ 507.296453][T18269] netlink: 'syz.1.3253': attribute type 7 has an invalid length. [ 507.411708][ T5776] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.465262][ T5776] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.526729][ T5776] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.613538][T18295] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3257'. [ 507.753726][T18300] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 507.868155][ T5776] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.922114][T18306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3259'. [ 507.960415][T18306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3259'. [ 508.030409][T18309] netlink: 'syz.2.3259': attribute type 7 has an invalid length. [ 508.639685][T18344] Bluetooth: MGMT ver 1.23 [ 508.732416][T18343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.016539][ T5629] Bluetooth: hci1: command tx timeout [ 509.047981][T18265] ip6gretap0 speed is unknown, defaulting to 1000 [ 509.505209][T18374] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 510.627558][T18265] wlan1 speed is unknown, defaulting to 1000 [ 511.095775][ T5629] Bluetooth: hci1: command tx timeout [ 511.227405][T18265] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.234788][T18265] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.242118][T18265] bridge_slave_0: entered allmulticast mode [ 511.250005][T18265] bridge_slave_0: entered promiscuous mode [ 511.259096][T18265] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.269098][T18265] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.276851][T18265] bridge_slave_1: entered allmulticast mode [ 511.285732][T18265] bridge_slave_1: entered promiscuous mode [ 511.324375][T18265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.337721][T18265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.378902][T18265] team0: Port device team_slave_0 added [ 511.387906][T18265] team0: Port device team_slave_1 added [ 511.422109][T18265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.429234][T18265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.455484][T18265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.470892][T18265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.478191][T18265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.504713][T18265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.562167][T18265] hsr_slave_0: entered promiscuous mode [ 511.569913][T18265] hsr_slave_1: entered promiscuous mode [ 511.578010][T18265] debugfs: 'hsr0' already exists in 'hsr' [ 511.583931][T18265] Cannot create hsr debugfs directory [ 511.788115][T18265] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.798802][T18265] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.908062][T18265] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.918550][T18265] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.021813][T18265] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.032703][T18265] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.108744][T18265] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.119247][T18265] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.784023][T18391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 512.816942][T18419] netlink: 'syz.4.3278': attribute type 1 has an invalid length. [ 512.840513][T18419] netlink: 'syz.4.3278': attribute type 3 has an invalid length. [ 512.874337][T18419] netlink: 'syz.4.3278': attribute type 7 has an invalid length. [ 512.918776][T18419] netlink: 'syz.4.3278': attribute type 8 has an invalid length. [ 512.976341][T18419] __nla_validate_parse: 7 callbacks suppressed [ 512.976358][T18419] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3278'. [ 512.995685][T18419] NCSI netlink: No device for ifindex 131092 [ 513.015382][T18265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 513.053739][T18265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.076302][T18449] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3280'. [ 513.097858][T18265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 513.118362][T18265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 513.139041][T18447] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3280'. [ 513.151023][T18265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 513.174296][ T5629] Bluetooth: hci1: command tx timeout [ 513.181102][T18265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.193511][T18265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 513.268944][T18265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 513.307634][T18451] syzkaller0: entered promiscuous mode [ 513.314961][T18451] syzkaller0: entered allmulticast mode [ 513.323404][T18451] TC_ACT_REPEAT abuse ? [ 513.427878][T18469] openvswitch: netlink: IPv4 tun info is not correct [ 513.562443][T18471] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3287'. [ 513.608399][T18474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3288'. [ 513.696493][T18479] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 513.792393][T18265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.908889][T18265] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.925303][T18485] Cannot find map_set index 135 as target [ 513.970306][T18483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3290'. [ 514.007747][ T7541] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.015754][ T7541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.058047][T18490] netlink: 'syz.1.3293': attribute type 1 has an invalid length. [ 514.080097][ T7541] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.083410][T18485] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3291'. [ 514.087316][ T7541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.171971][T18490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3293'. [ 514.215601][T18490] ip_vti0: entered promiscuous mode [ 514.460888][T18508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3296'. [ 514.671036][T18516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3297'. [ 515.049223][T18265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.118130][T18265] veth0_vlan: entered promiscuous mode [ 515.132471][T18265] veth1_vlan: entered promiscuous mode [ 515.168096][T18265] veth0_macvtap: entered promiscuous mode [ 515.186353][T18265] veth1_macvtap: entered promiscuous mode [ 515.210678][T18265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.230815][T18265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.251210][ T7546] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.254236][ T5629] Bluetooth: hci1: command tx timeout [ 515.286885][ T7546] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.295999][ T7546] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.312902][ T7546] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.892039][T18483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.279071][T18543] gtp0: entered promiscuous mode [ 517.300805][T18543] gtp0: entered allmulticast mode [ 517.320370][ T7547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.353555][T18545] gtp1: entered promiscuous mode [ 517.360607][ T7547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.372141][T18545] gtp1: entered allmulticast mode [ 517.490007][ T7546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.520004][ T7546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.854348][T18562] vlan0: entered promiscuous mode [ 517.874366][T18566] openvswitch: netlink: Missing key (keys=40, expected=100) [ 518.074943][T18570] __nla_validate_parse: 2 callbacks suppressed [ 518.074978][T18570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3308'. [ 518.112689][T18571] netdevsim netdevsim0 : renamed from netdevsim0 [ 518.426066][T18266] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 518.440391][T18266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 518.452372][T18266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 518.466537][T18266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 518.476815][T18266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 518.947169][T18604] bridge0: port 3(gretap0) entered blocking state [ 518.957574][T18604] bridge0: port 3(gretap0) entered disabled state [ 519.026280][T18604] gretap0: entered allmulticast mode [ 519.045596][T18604] gretap0: entered promiscuous mode [ 519.053109][T18604] bridge0: port 3(gretap0) entered blocking state [ 519.059735][T18604] bridge0: port 3(gretap0) entered forwarding state [ 519.090523][ T5635] syz_tun (unregistering): left allmulticast mode [ 519.252539][T18615] syzkaller1: entered promiscuous mode [ 519.296320][T18615] syzkaller1: entered allmulticast mode [ 519.603553][T18630] bond1: entered allmulticast mode [ 519.616593][T18630] netlink: 'syz.0.3321': attribute type 21 has an invalid length. [ 519.624782][T18630] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3321'. [ 519.651875][T18630] veth7: entered allmulticast mode [ 519.668134][T18589] ip6gretap0 speed is unknown, defaulting to 1000 [ 520.086883][T18589] wlan1 speed is unknown, defaulting to 1000 [ 520.412011][T18589] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.419996][T18589] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.428694][T18589] bridge_slave_0: entered allmulticast mode [ 520.436986][T18589] bridge_slave_0: entered promiscuous mode [ 520.447518][T18589] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.455912][T18589] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.463460][T18589] bridge_slave_1: entered allmulticast mode [ 520.472121][T18589] bridge_slave_1: entered promiscuous mode [ 520.512321][T18589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.525538][T18589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.533957][ T5629] Bluetooth: hci2: command tx timeout [ 520.572126][T18589] team0: Port device team_slave_0 added [ 520.581466][T18589] team0: Port device team_slave_1 added [ 520.619146][T18589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.626511][T18589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.652619][T18589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.665721][T18589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.672674][T18589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.699981][T18589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.763389][T18589] hsr_slave_0: entered promiscuous mode [ 520.770216][T18589] hsr_slave_1: entered promiscuous mode [ 520.777890][T18589] debugfs: 'hsr0' already exists in 'hsr' [ 520.783658][T18589] Cannot create hsr debugfs directory [ 520.939605][T18570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.939639][T18589] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.252768][T18589] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.558598][T18589] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.687922][T18589] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.810797][T18667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3330'. [ 521.835935][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 521.856459][T18671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3332'. [ 521.890552][T18667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3330'. [ 522.615147][ T5629] Bluetooth: hci2: command tx timeout [ 524.694890][ T5629] Bluetooth: hci2: command tx timeout [ 524.803391][T18671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 524.835822][T18589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 524.901196][T18589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 524.927583][T18589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 524.979221][T18589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 525.040171][T18589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 525.057595][T18697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3338'. [ 525.097430][T18702] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3339'. [ 525.115378][T18589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 525.147070][T18589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 525.195384][T18589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 525.336976][T18697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3338'. [ 525.382254][T18697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3338'. [ 525.439512][T18697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3338'. [ 525.441425][T18718] openvswitch: netlink: Flow key attribute not present in set flow. [ 525.450113][T18697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3338'. [ 525.476920][T18697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3338'. [ 525.488452][T18697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3338'. [ 525.504680][T18697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3338'. [ 525.551287][T18697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3338'. [ 525.667177][T18724] netlink: 'syz.4.3343': attribute type 2 has an invalid length. [ 525.703473][T18589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.730460][T18724] syzkaller1: entered allmulticast mode [ 525.761494][T18724] vlan2: entered allmulticast mode [ 525.881396][T18589] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.948017][ T7541] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.955209][ T7541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.029875][ T7547] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.037162][ T7547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.065855][T18734] netlink: 'syz.1.3346': attribute type 3 has an invalid length. [ 526.478198][ T7547] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.510201][ T7547] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.779478][T18755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.779494][ T5629] Bluetooth: hci2: command tx timeout [ 526.812954][T18755] batadv_slave_0: entered promiscuous mode [ 527.038218][T18780] netlink: 'syz.4.3355': attribute type 10 has an invalid length. [ 527.245535][T18780] team0: Device veth1_virt_wifi failed to register rx_handler [ 527.903637][T18814] tipc: Started in network mode [ 527.925384][T18814] tipc: Node identity 9a50cbc724c6, cluster identity 4711 [ 527.961540][T18814] tipc: Enabled bearer , priority 0 [ 528.081013][T18815] syzkaller0: entered promiscuous mode [ 528.086767][T18815] syzkaller0: entered allmulticast mode [ 528.094272][T18815] tipc: Resetting bearer [ 528.200924][T18815] tipc: Resetting bearer [ 530.551644][T18815] tipc: Disabling bearer [ 530.590498][T15602] tipc: Node number set to 3197553607 [ 530.635704][T18589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.825392][T18589] veth0_vlan: entered promiscuous mode [ 530.899708][T18851] __nla_validate_parse: 52 callbacks suppressed [ 530.899740][T18851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3374'. [ 530.942539][T18851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3374'. [ 531.004818][T18589] veth1_vlan: entered promiscuous mode [ 531.021659][T18849] syzkaller0: entered promiscuous mode [ 531.037966][T18849] syzkaller0: entered allmulticast mode [ 531.211001][T18864] pim6reg: entered allmulticast mode [ 531.269834][T18589] veth0_macvtap: entered promiscuous mode [ 531.330929][T18589] veth1_macvtap: entered promiscuous mode [ 531.430571][T18589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.495334][T18589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.541107][T18874] netlink: 'syz.1.3380': attribute type 1 has an invalid length. [ 531.595720][T18877] netlink: 'syz.3.3383': attribute type 1 has an invalid length. [ 531.626942][T18877] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3383'. [ 531.671092][T18881] Bluetooth: MGMT ver 1.23 [ 531.852191][T18874] bond1: entered promiscuous mode [ 531.858027][T18874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 531.901004][T18882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 531.918949][T18882] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 531.956245][T18882] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 531.978325][T18882] bond1: (slave vti0): making interface the new active one [ 531.987759][T18882] vti0: entered promiscuous mode [ 532.008018][T18882] bond1: (slave vti0): Enslaving as an active interface with an up link [ 532.213396][ T7547] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.352555][ T7547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.368012][ T7547] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.398057][ T7547] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.487392][T18914] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3394'. [ 532.718455][T18923] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.3396'. [ 532.734202][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3397'. [ 532.860269][ T7557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.911312][ T7557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.033225][ T7543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.049280][ T7543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.070004][T18935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3398'. [ 533.163027][T18943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3400'. [ 533.239533][T18943] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 533.411940][T18943] ip_vti0: left promiscuous mode [ 533.503258][T18943] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.510604][T18943] bridge0: port 2(bridge_slave_1) entered listening state [ 533.518056][T18943] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.525247][T18943] bridge0: port 1(bridge_slave_0) entered listening state [ 533.559724][T18946] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3401'. [ 533.570792][T18946] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3401'. [ 533.592814][T18946] netlink: 'syz.3.3401': attribute type 5 has an invalid length. [ 533.682995][T18943] gretap1: left promiscuous mode [ 533.688307][T18943] gretap1: left allmulticast mode [ 533.699403][T18943] gtp0: left promiscuous mode [ 533.706763][T18943] gtp0: left allmulticast mode [ 533.712397][T18943] gtp1: left promiscuous mode [ 533.718512][T18943] gtp1: left allmulticast mode [ 533.727964][T18943] bond1: left promiscuous mode [ 533.732747][T18943] vti0: left promiscuous mode [ 533.746707][T18943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 533.847555][ T24] wlan1 speed is unknown, defaulting to 1000 [ 534.889878][T18966] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 535.448602][T19024] syzkaller0: entered promiscuous mode [ 535.460834][T19024] syzkaller0: entered allmulticast mode [ 535.630691][T19042] netlink: 'syz.3.3427': attribute type 1 has an invalid length. [ 535.643579][T19042] netlink: 'syz.3.3427': attribute type 1 has an invalid length. [ 535.954203][T19053] __nla_validate_parse: 7 callbacks suppressed [ 535.954221][T19053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3428'. [ 538.013468][T19043] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3428'. [ 538.332658][T19064] IPv6: sit1: Disabled Multicast RS [ 538.568528][T19070] team0: No ports can be present during mode change [ 538.612001][T19073] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3438'. [ 538.750505][T19077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3439'. [ 538.878087][T19087] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3440'. [ 539.078694][ T7557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.125539][ T7557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.151406][T19091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.189340][T19093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.228587][T19096] syzkaller0: entered promiscuous mode [ 539.242472][T19096] syzkaller0: entered allmulticast mode [ 539.330177][T19100] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3446'. [ 539.361235][T19100] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 539.671171][T19110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3450'. [ 539.702781][T19110] bond0: entered promiscuous mode [ 539.722337][T19110] bond_slave_0: entered promiscuous mode [ 539.752982][T19110] bond_slave_1: entered promiscuous mode [ 539.782789][T19110] gretap0: entered promiscuous mode [ 539.836920][T19110] debugfs: 'hsr1' already exists in 'hsr' [ 539.871499][T19110] Cannot create hsr debugfs directory [ 539.900169][T19118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3454'. [ 539.901436][T19110] hsr1: entered promiscuous mode [ 539.945853][T19118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3454'. [ 539.991464][T19118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3454'. [ 540.582085][T19142] veth1_macvtap: left promiscuous mode [ 540.941303][T19168] ip6tnl0: Caught tx_queue_len zero misconfig [ 541.105931][T19173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.109245][T19177] __nla_validate_parse: 2 callbacks suppressed [ 541.109278][T19177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3469'. [ 541.411041][T19184] batadv_slave_0: Caught tx_queue_len zero misconfig [ 541.444589][T19188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.511649][T19191] vlan2: entered allmulticast mode [ 541.537622][T19191] bond0: entered allmulticast mode [ 541.560044][T19191] bond_slave_0: entered allmulticast mode [ 541.587163][T19191] bond_slave_1: entered allmulticast mode [ 541.817596][T19203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3479'. [ 542.160473][T19221] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3483'. [ 542.204730][T19225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3485'. [ 542.236191][T19231] xt_ecn: cannot match TCP bits for non-tcp packets [ 542.262967][T19232] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 542.682328][T19249] openvswitch: netlink: IPv4 tun info is not correct [ 542.713118][T19251] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3492'. [ 542.725486][T19249] netlink: 'syz.1.3491': attribute type 10 has an invalid length. [ 542.788351][T19254] netlink: 'syz.2.3493': attribute type 3 has an invalid length. [ 542.796297][T19249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 542.807808][T19249] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 542.846948][T19254] netlink: 'syz.2.3493': attribute type 1 has an invalid length. [ 542.867828][T19254] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3493'. [ 542.887127][T19254] netlink: 'syz.2.3493': attribute type 20 has an invalid length. [ 542.939471][T19254] IPv6: NLM_F_CREATE should be specified when creating new route [ 543.058562][T19259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3493'. [ 543.157983][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3495'. [ 543.364083][T19275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3496'. [ 543.851974][T19298] x_tables: unsorted underflow at hook 2 [ 543.999618][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3505'. [ 544.077636][T19307] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 544.231839][T19313] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 545.975300][T19360] netlink: 'syz.1.3522': attribute type 33 has an invalid length. [ 546.166014][T19369] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 546.173454][T19369] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 546.310849][T19376] __nla_validate_parse: 13 callbacks suppressed [ 546.310867][T19376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3527'. [ 546.404596][T19377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3526'. [ 546.497602][T19376] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 546.517854][ T5718] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 546.609030][T19377] bond0: entered promiscuous mode [ 546.617225][T19377] bond_slave_0: entered promiscuous mode [ 546.626304][T19377] bond_slave_1: entered promiscuous mode [ 546.660544][T19377] batadv0: entered promiscuous mode [ 546.686775][T19377] debugfs: 'hsr1' already exists in 'hsr' [ 546.741505][T19377] Cannot create hsr debugfs directory [ 546.764459][T19390] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3533'. [ 546.795278][T19377] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 546.836408][T19395] netlink: 'syz.2.3532': attribute type 1 has an invalid length. [ 546.851008][T19396] netlink: 'syz.2.3532': attribute type 1 has an invalid length. [ 546.852738][T19377] bond0: left promiscuous mode [ 546.867113][T19377] bond_slave_0: left promiscuous mode [ 546.873668][T19377] bond_slave_1: left promiscuous mode [ 546.888802][T19377] batadv0: left promiscuous mode [ 546.979482][T19387] vlan2: entered allmulticast mode [ 546.989930][T19403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3535'. [ 546.990631][T19387] bond0: entered allmulticast mode [ 547.039475][T19387] bond_slave_0: entered allmulticast mode [ 547.053491][T19387] bond_slave_1: entered allmulticast mode [ 547.081064][T19395] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 547.172523][T19396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 547.552668][T19414] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.563491][T19414] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.582786][T19421] netlink: 'syz.4.3538': attribute type 1 has an invalid length. [ 547.776097][T19416] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.041432][T19435] xt_hashlimit: size too large, truncated to 1048576 [ 548.103548][T19436] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3545'. [ 548.767789][T19459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3551'. [ 548.851276][T19459] erspan0: entered promiscuous mode [ 548.926161][T19464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.942017][T19466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.072949][T19470] IPVS: length: 124 != 24 [ 549.309739][T19477] xt_SECMARK: invalid mode: 9 [ 549.443696][T19482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3561'. [ 550.520991][T19525] netlink: 'syz.0.3573': attribute type 33 has an invalid length. [ 550.820233][T19530] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3576'. [ 550.832684][T19530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3576'. [ 551.018539][T19537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3580'. [ 551.106824][T19541] netlink: 'syz.4.3581': attribute type 1 has an invalid length. [ 551.148421][T19537] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.156114][T19537] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.482822][T19541] bond1: entered promiscuous mode [ 551.506118][T19541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 551.939248][T19571] xt_hashlimit: invalid rate [ 551.946599][T19573] veth0: entered promiscuous mode [ 551.984422][T19573] __nla_validate_parse: 7 callbacks suppressed [ 551.984454][T19573] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3591'. [ 552.061975][T19577] xt_TPROXY: Can be used only with -p tcp or -p udp [ 552.078672][T19576] openvswitch: netlink: Multiple metadata blocks provided [ 552.312944][T19576] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3592'. [ 552.668771][T19596] netlink: 'syz.1.3597': attribute type 1 has an invalid length. [ 552.698594][T19596] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3597'. [ 552.725531][T19596] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3597'. [ 552.752238][T19596] netlink: 'syz.1.3597': attribute type 1 has an invalid length. [ 552.776978][T19596] netlink: 'syz.1.3597': attribute type 8 has an invalid length. [ 552.780473][T19599] netlink: 'syz.2.3598': attribute type 1 has an invalid length. [ 552.804557][T19596] netlink: 606 bytes leftover after parsing attributes in process `syz.1.3597'. [ 553.150130][T19614] netlink: 'syz.0.3603': attribute type 2 has an invalid length. [ 553.197347][T19614] netlink: 'syz.0.3603': attribute type 2 has an invalid length. [ 553.363470][T19610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3600'. [ 553.442733][T19610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3600'. [ 553.604108][T19629] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.611333][T19629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.619830][T19629] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.627047][T19629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.677102][T19635] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3608'. [ 553.758527][T19632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3609'. [ 553.777410][T19639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3607'. [ 554.257448][T19668] netlink: 'syz.4.3615': attribute type 4 has an invalid length. [ 554.356496][T19671] netlink: 'syz.4.3615': attribute type 4 has an invalid length. [ 554.540162][T19678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 554.547460][T19678] IPv6: NLM_F_CREATE should be set when creating new route [ 554.599757][T19678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 554.871598][T19686] sctp: [Deprecated]: syz.4.3621 (pid 19686) Use of struct sctp_assoc_value in delayed_ack socket option. [ 554.871598][T19686] Use struct sctp_sack_info instead [ 555.262818][T19701] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20003 [ 555.345877][ T5631] IPVS: starting estimator thread 0... [ 555.455767][T19707] IPVS: using max 32 ests per chain, 76800 per kthread [ 555.689284][T19723] ieee802154 phy1 wpan1: encryption failed: -22 [ 556.359413][T19744] tcf_pedit_act: 22 callbacks suppressed [ 556.359431][T19744] tc action pedit 'at' offset -2147483648 out of bounds [ 556.884321][T19761] team0 (unregistering): Port device team_slave_0 removed [ 556.913549][T19761] team0 (unregistering): Port device team_slave_1 removed [ 556.984967][T19773] netlink: 'syz.4.3648': attribute type 1 has an invalid length. [ 556.999154][T19760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.011520][T19773] netlink: 'syz.4.3648': attribute type 4 has an invalid length. [ 557.547179][T19793] __nla_validate_parse: 6 callbacks suppressed [ 557.547214][T19793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3655'. [ 557.783179][T19797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3656'. [ 558.149712][T19815] ipvlan2: entered promiscuous mode [ 558.557474][T19834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3667'. [ 558.572940][T19834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3667'. [ 558.591879][T19833] bridge0: port 3(veth0_to_bridge) entered blocking state [ 558.624193][T19833] bridge0: port 3(veth0_to_bridge) entered disabled state [ 558.654451][T19833] veth0_to_bridge: entered allmulticast mode [ 558.678900][T19833] veth0_to_bridge: entered promiscuous mode [ 558.932849][T19851] netlink: 'syz.2.3673': attribute type 1 has an invalid length. [ 558.990710][T19851] 8021q: adding VLAN 0 to HW filter on device bond2 [ 559.059285][T19851] ipvlan2: entered allmulticast mode [ 559.067741][T19851] bond2: entered allmulticast mode [ 559.088485][T19853] bond2: (slave bridge2): making interface the new active one [ 559.097222][T19853] bridge2: entered allmulticast mode [ 559.103567][T19853] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 559.162938][T19858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3675'. [ 559.368427][T19859] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3675'. [ 559.407711][T19866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3678'. [ 559.522848][T19868] vlan3: entered promiscuous mode [ 559.528058][T19870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3679'. [ 559.550568][T19868] hsr0: entered promiscuous mode [ 559.557418][T19868] vlan3: entered allmulticast mode [ 559.563041][T19868] hsr0: entered allmulticast mode [ 559.568264][T19868] hsr_slave_0: entered allmulticast mode [ 559.669270][T19868] hsr_slave_1: entered allmulticast mode [ 560.535781][ T5629] Bluetooth: hci2: command tx timeout [ 560.658762][T19882] netlink: 'syz.2.3682': attribute type 1 has an invalid length. [ 560.781906][T19886] netlink: 'syz.2.3682': attribute type 1 has an invalid length. [ 560.885973][T19886] netlink: 'syz.2.3682': attribute type 2 has an invalid length. [ 561.308004][T19882] 8021q: adding VLAN 0 to HW filter on device bond3 [ 561.687571][T19898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3687'. [ 562.824819][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.152351][T19919] netlink: 'syz.3.3691': attribute type 24 has an invalid length. [ 563.700733][ C1] sched: DL replenish lagged too much [ 564.056976][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 564.066226][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 564.328295][T19914] bond1: entered allmulticast mode [ 564.440722][T19908] bridge2: entered promiscuous mode [ 564.474938][T19908] bridge2: entered allmulticast mode [ 564.539230][T19908] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 564.909360][T19931] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 565.181900][T19942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3698'. [ 567.030589][T19974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3705'. [ 567.478122][T19945] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 568.869785][T19994] vlan5: entered promiscuous mode [ 568.902809][T19994] bridge0: entered promiscuous mode [ 569.950102][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3711'. [ 570.010733][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3711'. [ 570.692133][T20011] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3714'. [ 570.910071][T19976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.025150][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 594.134835][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.142106][ C1] bridge0: topology change detected, propagating [ 594.149352][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.156631][ C1] bridge0: topology change detected, propagating [ 617.620907][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 626.255026][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 727.063702][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 727.070682][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4989/1:b..l P5283/1:b..l P16505/1:b..l P5284/1:b..l P5607/1:b..l [ 727.083745][ C1] rcu: (detected by 1, t=10502 jiffies, g=106613, q=1261 ncpus=2) [ 727.091652][ C1] task:syz-executor state:R running task stack:21056 pid:5607 tgid:5607 ppid:5606 task_flags:0x400100 flags:0x00080800 [ 727.106244][ C1] Call Trace: [ 727.109542][ C1] [ 727.112487][ C1] __schedule+0x17b4/0x5680 [ 727.117031][ C1] ? arch_scale_cpu_capacity+0x18/0xb0 [ 727.122508][ C1] ? __pfx___schedule+0x10/0x10 [ 727.127391][ C1] preempt_schedule_irq+0x4d/0xa0 [ 727.132430][ C1] irqentry_exit+0x14f/0x730 [ 727.137034][ C1] ? trace_irq_disable+0x3b/0x140 [ 727.142085][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 727.148082][ C1] RIP: 0010:lock_acquire+0x58/0x350 [ 727.153290][ C1] Code: 8b 05 ac 61 97 11 48 89 44 24 58 0f 1f 44 00 00 65 8b 05 af 61 97 11 83 f8 08 0f 83 83 01 00 00 89 c0 48 0f a3 05 58 05 8f 0e <73> 0d e8 11 28 09 00 84 c0 0f 84 ca 01 00 00 83 3d 12 38 8f 0e 00 [ 727.172904][ C1] RSP: 0018:ffffc900035e7598 EFLAGS: 00000297 [ 727.178984][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 727.186968][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e95cd60 [ 727.194947][ C1] RBP: ffffffff8176e256 R08: 0000000000000000 R09: 0000000000000000 [ 727.202925][ C1] R10: ffffc900035e7758 R11: ffffffff81b0d880 R12: 0000000000000002 [ 727.211030][ C1] R13: ffffffff8e95cd60 R14: 0000000000000000 R15: 0000000000000000 [ 727.219017][ C1] ? unwind_next_frame+0xa6/0x2550 [ 727.224148][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 727.230351][ C1] ? unwind_next_frame+0xa6/0x2550 [ 727.235476][ C1] ? alloc_empty_file+0x74/0x1d0 [ 727.240433][ C1] ? unwind_next_frame+0xa6/0x2550 [ 727.245562][ C1] unwind_next_frame+0xc3/0x2550 [ 727.250512][ C1] ? unwind_next_frame+0xa6/0x2550 [ 727.255645][ C1] ? unwind_next_frame+0xa6/0x2550 [ 727.260770][ C1] ? init_file+0x90/0x2b0 [ 727.265119][ C1] ? alloc_empty_file+0x74/0x1d0 [ 727.270075][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 727.276505][ C1] arch_stack_walk+0x11b/0x150 [ 727.281303][ C1] ? alloc_empty_file+0x74/0x1d0 [ 727.286257][ C1] stack_trace_save+0xa9/0x100 [ 727.291041][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 727.296445][ C1] save_stack+0x122/0x230 [ 727.300798][ C1] ? __pfx_save_stack+0x10/0x10 [ 727.305662][ C1] ? __free_frozen_pages+0xbc7/0xd30 [ 727.310964][ C1] ? __slab_free+0x274/0x2c0 [ 727.315569][ C1] ? qlist_free_all+0x99/0x100 [ 727.320350][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 727.325998][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 727.331038][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 727.336683][ C1] ? security_file_alloc+0x34/0x310 [ 727.341890][ C1] ? init_file+0x90/0x2b0 [ 727.346232][ C1] ? alloc_empty_file+0x74/0x1d0 [ 727.351187][ C1] ? page_ext_put+0x97/0xc0 [ 727.355707][ C1] __reset_page_owner+0x71/0x1f0 [ 727.360662][ C1] __free_frozen_pages+0xbc7/0xd30 [ 727.365795][ C1] __slab_free+0x274/0x2c0 [ 727.370236][ C1] ? qlist_free_all+0x8e/0x100 [ 727.375018][ C1] qlist_free_all+0x99/0x100 [ 727.379620][ C1] ? security_file_alloc+0x34/0x310 [ 727.384832][ C1] kasan_quarantine_reduce+0x148/0x160 [ 727.390327][ C1] __kasan_slab_alloc+0x22/0x80 [ 727.395199][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 727.400670][ C1] ? security_file_alloc+0x34/0x310 [ 727.405871][ C1] ? rcu_is_watching+0x15/0xb0 [ 727.410654][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 727.416307][ C1] security_file_alloc+0x34/0x310 [ 727.421347][ C1] init_file+0x90/0x2b0 [ 727.425526][ C1] alloc_empty_file+0x74/0x1d0 [ 727.430312][ C1] alloc_file_pseudo+0x155/0x240 [ 727.435283][ C1] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 727.440752][ C1] ? register_lock_class+0x31/0x2e0 [ 727.445980][ C1] create_pipe_files+0x32a/0x7e0 [ 727.450947][ C1] __do_pipe_flags+0x46/0x1f0 [ 727.455645][ C1] do_pipe2+0xaa/0x190 [ 727.459725][ C1] ? __pfx_do_pipe2+0x10/0x10 [ 727.464414][ C1] ? rcu_is_watching+0x15/0xb0 [ 727.469195][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.475284][ C1] __x64_sys_pipe2+0x5a/0x70 [ 727.479897][ C1] do_syscall_64+0x15f/0xf80 [ 727.484514][ C1] ? trace_irq_disable+0x3b/0x140 [ 727.489564][ C1] ? clear_bhb_loop+0x40/0x90 [ 727.494257][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.500160][ C1] RIP: 0033:0x7f4cb519be09 [ 727.504588][ C1] RSP: 002b:00007ffed69efae8 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 727.513105][ C1] RAX: ffffffffffffffda RBX: 0000555582ebec50 RCX: 00007f4cb519be09 [ 727.521095][ C1] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00007ffed69efb00 [ 727.529077][ C1] RBP: 00007ffed69f00c0 R08: 00000000000002e0 R09: 0000000000000000 [ 727.537058][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed69efc20 [ 727.545034][ C1] R13: 0000555582ebdb90 R14: 0000555582ebfa30 R15: 00007ffed69efc40 [ 727.553132][ C1] [ 727.556166][ C1] task:dhcpcd state:R running task stack:20376 pid:5284 tgid:5284 ppid:5283 task_flags:0x400140 flags:0x00080800 [ 727.569666][ C1] Call Trace: [ 727.572959][ C1] [ 727.575910][ C1] __schedule+0x17b4/0x5680 [ 727.580435][ C1] ? unwind_next_frame+0xa6/0x2550 [ 727.585568][ C1] ? unwind_next_frame+0xa6/0x2550 [ 727.590688][ C1] ? unwind_next_frame+0x1bbf/0x2550 [ 727.595996][ C1] ? unwind_next_frame+0xa6/0x2550 [ 727.601130][ C1] ? __pfx___schedule+0x10/0x10 [ 727.605990][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 727.610958][ C1] preempt_schedule_irq+0x4d/0xa0 [ 727.615994][ C1] irqentry_exit+0x14f/0x730 [ 727.620604][ C1] ? trace_irq_disable+0x3b/0x140 [ 727.625646][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 727.631633][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x70 [ 727.637802][ C1] Code: de 5b e9 43 ea 5f 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d c8 53 73 11 <65> 8b 15 e9 53 73 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 [ 727.657414][ C1] RSP: 0018:ffffc900032c79b8 EFLAGS: 00000246 [ 727.663485][ C1] RAX: ffffffff823c69df RBX: 0000000000064159 RCX: ffff88802e495c40 [ 727.671460][ C1] RDX: 0000000000000000 RSI: ffffffff8c28abc0 RDI: 0000000000064159 [ 727.679436][ C1] RBP: dffffc0000000000 R08: ffffffff823c733a R09: ffffffff8e95cd60 [ 727.687413][ C1] R10: dffffc0000000000 R11: ffffed100691e7ee R12: 0000000000064159 [ 727.695390][ C1] R13: 0000000000064159 R14: 0000000000000000 R15: 0000000000000000 [ 727.703375][ C1] ? __page_table_check_zero+0x6a/0x3e0 [ 727.708938][ C1] ? page_ext_lookup+0x15f/0x180 [ 727.713905][ C1] page_ext_lookup+0x15f/0x180 [ 727.718679][ C1] ? __page_table_check_zero+0x6a/0x3e0 [ 727.724240][ C1] __page_table_check_zero+0x135/0x3e0 [ 727.729715][ C1] ? __reset_page_owner+0x148/0x1f0 [ 727.734930][ C1] __free_frozen_pages+0xbd7/0xd30 [ 727.740065][ C1] __slab_free+0x274/0x2c0 [ 727.744499][ C1] ? qlist_free_all+0x8e/0x100 [ 727.749279][ C1] qlist_free_all+0x99/0x100 [ 727.753892][ C1] kasan_quarantine_reduce+0x148/0x160 [ 727.759366][ C1] __kasan_slab_alloc+0x22/0x80 [ 727.764230][ C1] __kmalloc_noprof+0x316/0x760 [ 727.769093][ C1] ? security_sk_alloc+0x52/0x360 [ 727.774127][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 727.779167][ C1] security_sk_alloc+0x52/0x360 [ 727.784033][ C1] sk_prot_alloc+0x101/0x210 [ 727.788641][ C1] sk_alloc+0x3a/0x390 [ 727.792723][ C1] unix_create1+0xb0/0x7d0 [ 727.797168][ C1] unix_create+0x16b/0x210 [ 727.801598][ C1] __sock_create+0x4b2/0x9d0 [ 727.806204][ C1] __sys_socketpair+0x1c4/0x560 [ 727.811069][ C1] __x64_sys_socketpair+0x9b/0xb0 [ 727.816100][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.822176][ C1] do_syscall_64+0x15f/0xf80 [ 727.826774][ C1] ? trace_irq_disable+0x3b/0x140 [ 727.831811][ C1] ? clear_bhb_loop+0x40/0x90 [ 727.836499][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.842400][ C1] RIP: 0033:0x7f3983f6773a [ 727.846819][ C1] RSP: 002b:00007ffcb3de6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 727.855416][ C1] RAX: ffffffffffffffda RBX: 000055f63cb97710 RCX: 00007f3983f6773a [ 727.863388][ C1] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000001 [ 727.871365][ C1] RBP: 00007ffcb3e07090 R08: 0000000000000000 R09: 0000000000000001 [ 727.879340][ C1] R10: 00007ffcb3de6c80 R11: 0000000000000246 R12: 00007ffcb3de6c80 [ 727.887314][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 000055f62cad9ac0 [ 727.895310][ C1] [ 727.898332][ C1] task:syz-executor state:R running task stack:22280 pid:16505 tgid:16505 ppid:16482 task_flags:0x400140 flags:0x00080000 [ 727.911822][ C1] Call Trace: [ 727.915107][ C1] [ 727.918046][ C1] __schedule+0x17b4/0x5680 [ 727.922557][ C1] ? __x64_sys_getsockopt+0x1a4/0x240 [ 727.927948][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 727.933345][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 727.938306][ C1] ? __pfx___schedule+0x10/0x10 [ 727.943189][ C1] preempt_schedule_irq+0x4d/0xa0 [ 727.948225][ C1] irqentry_exit+0x14f/0x730 [ 727.952826][ C1] ? trace_irq_disable+0x3b/0x140 [ 727.957877][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 727.963873][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 727.969164][ C1] Code: ff ff ff e8 e1 94 06 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 cb 5f 97 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 58 61 92 [ 727.988775][ C1] RSP: 0018:ffffc9000d28ef78 EFLAGS: 00000286 [ 727.994858][ C1] RAX: 04a1a649f2581300 RBX: 0000000000000000 RCX: 0000000000000046 [ 728.002837][ C1] RDX: 00000000227b56dc RSI: ffffffff8e21bc35 RDI: ffffffff8c28abe0 [ 728.010818][ C1] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cd60 [ 728.018797][ C1] R10: ffffc9000d28f0d8 R11: ffffffff81b0d880 R12: 0000000000000002 [ 728.026775][ C1] R13: ffffffff8e95cd60 R14: 0000000000000000 R15: 0000000000000246 [ 728.034754][ C1] ? unwind_next_frame+0xa6/0x2550 [ 728.039887][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 728.046057][ C1] ? unwind_next_frame+0xa6/0x2550 [ 728.051187][ C1] ? __free_frozen_pages+0xbc7/0xd30 [ 728.056487][ C1] ? unwind_next_frame+0xa6/0x2550 [ 728.061609][ C1] unwind_next_frame+0xc3/0x2550 [ 728.066561][ C1] ? unwind_next_frame+0xa6/0x2550 [ 728.071686][ C1] ? unwind_next_frame+0xa6/0x2550 [ 728.076810][ C1] ? __reset_page_owner+0x71/0x1f0 [ 728.081943][ C1] ? __free_frozen_pages+0xbc7/0xd30 [ 728.087245][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 728.093415][ C1] arch_stack_walk+0x11b/0x150 [ 728.098198][ C1] ? __free_frozen_pages+0xbc7/0xd30 [ 728.103499][ C1] stack_trace_save+0xa9/0x100 [ 728.108280][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 728.113676][ C1] save_stack+0x122/0x230 [ 728.118023][ C1] ? __pfx_save_stack+0x10/0x10 [ 728.122883][ C1] ? __free_frozen_pages+0xbc7/0xd30 [ 728.128203][ C1] __reset_page_owner+0x71/0x1f0 [ 728.133160][ C1] __free_frozen_pages+0xbc7/0xd30 [ 728.138289][ C1] __slab_free+0x274/0x2c0 [ 728.142723][ C1] ? qlist_free_all+0x8e/0x100 [ 728.147505][ C1] qlist_free_all+0x99/0x100 [ 728.152108][ C1] kasan_quarantine_reduce+0x148/0x160 [ 728.157578][ C1] __kasan_kmalloc+0x22/0xb0 [ 728.162183][ C1] __kmalloc_node_noprof+0x4e0/0x7c0 [ 728.167484][ C1] ? __vmalloc_node_range_noprof+0x5ef/0x1750 [ 728.173559][ C1] ? __kmalloc_node_noprof+0x34f/0x7c0 [ 728.179033][ C1] __vmalloc_node_range_noprof+0x5ef/0x1750 [ 728.184957][ C1] ? __mutex_lock+0x319/0x1550 [ 728.189745][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 728.196085][ C1] ? xt_find_table_lock+0x51/0x3f0 [ 728.201215][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 728.206252][ C1] ? net_generic+0x1e/0x240 [ 728.210767][ C1] ? alloc_counters+0x64/0x5d0 [ 728.215534][ C1] vzalloc_noprof+0xb2/0xe0 [ 728.220051][ C1] ? alloc_counters+0x64/0x5d0 [ 728.224839][ C1] alloc_counters+0x64/0x5d0 [ 728.229446][ C1] ? xt_find_table_lock+0x365/0x3f0 [ 728.234663][ C1] do_ipt_get_ctl+0xada/0x1240 [ 728.239443][ C1] ? preempt_schedule_common+0x82/0xd0 [ 728.244913][ C1] ? do_ip_getsockopt+0x131d/0x1d40 [ 728.250119][ C1] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 728.255330][ C1] ? __mutex_trylock_common+0x158/0x260 [ 728.260893][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 728.266798][ C1] ? rcu_is_watching+0x15/0xb0 [ 728.271579][ C1] ? trace_contention_end+0x3d/0x140 [ 728.276884][ C1] ? nf_getsockopt+0x224/0x290 [ 728.281657][ C1] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 728.287297][ C1] ? nf_getsockopt+0x34/0x290 [ 728.291984][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 728.297025][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 728.303022][ C1] ? __might_fault+0xaf/0x130 [ 728.307724][ C1] nf_getsockopt+0x26e/0x290 [ 728.312327][ C1] ip_getsockopt+0x19e/0x230 [ 728.316934][ C1] ? __pfx_ip_getsockopt+0x10/0x10 [ 728.322058][ C1] ? sock_common_getsockopt+0x2d/0xb0 [ 728.327439][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 728.333338][ C1] do_sock_getsockopt+0x51d/0x7e0 [ 728.338378][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 728.343417][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 728.348983][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 728.353857][ C1] ? nf_setsockopt+0x288/0x290 [ 728.358632][ C1] __x64_sys_getsockopt+0x1a4/0x240 [ 728.363850][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.369924][ C1] do_syscall_64+0x15f/0xf80 [ 728.374637][ C1] ? trace_irq_disable+0x3b/0x140 [ 728.379680][ C1] ? clear_bhb_loop+0x40/0x90 [ 728.384375][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.390276][ C1] RIP: 0033:0x7fa872d9e5aa [ 728.394699][ C1] RSP: 002b:00007fff264e3d88 EFLAGS: 00000202 ORIG_RAX: 0000000000000037 [ 728.403121][ C1] RAX: ffffffffffffffda RBX: 00007fff264e3e10 RCX: 00007fa872d9e5aa [ 728.411096][ C1] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 728.419070][ C1] RBP: 0000000000000003 R08: 00007fff264e3dac R09: 0000000000000000 [ 728.427043][ C1] R10: 00007fff264e3e10 R11: 0000000000000202 R12: 00007fa872feb680 [ 728.435024][ C1] R13: 00007fff264e3dac R14: 0000000000000000 R15: 00007fa872fed180 [ 728.443024][ C1] [ 728.446050][ C1] task:dhcpcd state:R running task stack:24472 pid:5283 tgid:5283 ppid:1 task_flags:0x400140 flags:0x00080000 [ 728.459545][ C1] Call Trace: [ 728.462829][ C1] [ 728.465773][ C1] __schedule+0x17b4/0x5680 [ 728.470308][ C1] ? rcu_is_watching+0x15/0xb0 [ 728.475094][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 728.480052][ C1] ? __pfx___schedule+0x10/0x10 [ 728.484928][ C1] preempt_schedule_irq+0x4d/0xa0 [ 728.489964][ C1] irqentry_exit+0x14f/0x730 [ 728.494568][ C1] ? trace_irq_disable+0x3b/0x140 [ 728.499613][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 728.505599][ C1] RIP: 0010:lock_release+0x94/0x3c0 [ 728.510807][ C1] Code: 85 0d 02 00 00 65 4c 8b 3d 71 30 97 11 41 83 bf 8c 0b 00 00 00 0f 85 f7 01 00 00 49 81 3e 80 d3 fc 93 0f 84 ea 01 00 00 9c 5b 48 c7 c7 0f 27 fc 8d e8 9f 81 06 0a 65 ff 05 e8 75 97 11 c7 44 [ 728.530424][ C1] RSP: 0018:ffffc900032b6f90 EFLAGS: 00000202 [ 728.536502][ C1] RAX: 0000000000000000 RBX: 0000000000000202 RCX: 0000000080000001 [ 728.544480][ C1] RDX: ffffc900032b7101 RSI: ffffffff8c28abc0 RDI: ffffffff8c28ab80 [ 728.552458][ C1] RBP: dffffc0000000000 R08: ffffc900032b73d0 R09: 0000000000000000 [ 728.560432][ C1] R10: ffffc900032b7118 R11: fffff52000656e25 R12: ffffc900032b73e0 [ 728.568410][ C1] R13: ffffffff8176e256 R14: ffffffff8e95cd60 R15: ffff88802e283d80 [ 728.576392][ C1] ? unwind_next_frame+0xa6/0x2550 [ 728.581540][ C1] ? deref_stack_reg+0x19f/0x230 [ 728.586496][ C1] ? unwind_next_frame+0xa6/0x2550 [ 728.591619][ C1] unwind_next_frame+0x1bba/0x2550 [ 728.596745][ C1] ? unwind_next_frame+0xa6/0x2550 [ 728.601868][ C1] ? __free_frozen_pages+0xbc7/0xd30 [ 728.607170][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 728.613338][ C1] arch_stack_walk+0x11b/0x150 [ 728.618117][ C1] ? __slab_free+0x274/0x2c0 [ 728.622722][ C1] stack_trace_save+0xa9/0x100 [ 728.627498][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 728.632898][ C1] save_stack+0x122/0x230 [ 728.637242][ C1] ? __pfx_save_stack+0x10/0x10 [ 728.642105][ C1] ? __free_frozen_pages+0xbc7/0xd30 [ 728.647423][ C1] __reset_page_owner+0x71/0x1f0 [ 728.652374][ C1] __free_frozen_pages+0xbc7/0xd30 [ 728.657508][ C1] __slab_free+0x274/0x2c0 [ 728.661942][ C1] ? qlist_free_all+0x8e/0x100 [ 728.666721][ C1] qlist_free_all+0x99/0x100 [ 728.671326][ C1] kasan_quarantine_reduce+0x148/0x160 [ 728.676800][ C1] __kasan_kmalloc+0x22/0xb0 [ 728.681408][ C1] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 728.687839][ C1] ? alloc_skb_with_frags+0xc8/0x760 [ 728.693140][ C1] ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0 [ 728.699751][ C1] __alloc_skb+0x2c1/0x7d0 [ 728.704186][ C1] alloc_skb_with_frags+0xc8/0x760 [ 728.709320][ C1] sock_alloc_send_pskb+0x878/0x990 [ 728.714553][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 728.720294][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 728.725247][ C1] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 728.731333][ C1] unix_dgram_sendmsg+0x460/0x18d0 [ 728.736467][ C1] ? aa_file_perm+0x192/0x15e0 [ 728.741252][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 728.746836][ C1] ? aa_sock_msg_perm+0xda/0x1b0 [ 728.751792][ C1] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 728.757347][ C1] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 728.763248][ C1] sock_write_iter+0x49b/0x4f0 [ 728.768025][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 728.773318][ C1] ? __might_fault+0xaf/0x130 [ 728.778030][ C1] do_iter_readv_writev+0x619/0x8c0 [ 728.783248][ C1] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 728.788984][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 728.794368][ C1] ? security_file_permission+0x75/0x260 [ 728.800013][ C1] ? rw_verify_area+0x255/0x4d0 [ 728.804882][ C1] vfs_writev+0x33c/0x990 [ 728.809227][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 728.814110][ C1] ? import_ubuf+0xfb/0x1d0 [ 728.818635][ C1] do_writev+0x154/0x2e0 [ 728.822890][ C1] ? __pfx_do_writev+0x10/0x10 [ 728.827663][ C1] ? __secure_computing+0xe1/0x2a0 [ 728.832784][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.838858][ C1] do_syscall_64+0x15f/0xf80 [ 728.843458][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.849531][ C1] ? clear_bhb_loop+0x40/0x90 [ 728.854217][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.860113][ C1] RIP: 0033:0x7f3983eec407 [ 728.864537][ C1] RSP: 002b:00007ffcb3e06d30 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 728.872956][ C1] RAX: ffffffffffffffda RBX: 00007f3983e62780 RCX: 00007f3983eec407 [ 728.880931][ C1] RDX: 0000000000000005 RSI: 00007ffcb3e06d90 RDI: 000000000000000a [ 728.888902][ C1] RBP: 000055f62cabf870 R08: 0000000000000000 R09: 0000000000000000 [ 728.896875][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055f63cb773c0 [ 728.904852][ C1] R13: 000000000000012c R14: 0000000000004801 R15: 000055f63cb724d4 [ 728.912844][ C1] [ 728.915869][ C1] task:udevd state:R running task stack:22664 pid:4989 tgid:4989 ppid:1 task_flags:0x400140 flags:0x00080800 [ 728.929358][ C1] Call Trace: [ 728.932642][ C1] [ 728.935581][ C1] __schedule+0x17b4/0x5680 [ 728.940129][ C1] ? __pfx___schedule+0x10/0x10 [ 728.944990][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 728.949943][ C1] preempt_schedule_irq+0x4d/0xa0 [ 728.954980][ C1] irqentry_exit+0x14f/0x730 [ 728.959581][ C1] ? trace_irq_disable+0x3b/0x140 [ 728.964626][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 728.970612][ C1] RIP: 0010:lock_release+0x2d7/0x3c0 [ 728.975903][ C1] Code: 73 97 11 00 00 00 00 eb b5 e8 45 63 06 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 35 2e 97 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 9a 55 09 0a cc 48 8d 3d 32 33 92 [ 728.995512][ C1] RSP: 0018:ffffc90002f76f80 EFLAGS: 00000282 [ 729.001586][ C1] RAX: 640859a4e0dabe00 RBX: 0000000000000202 RCX: 0000000000000046 [ 729.009565][ C1] RDX: 0000000000000002 RSI: ffffffff8e21bc35 RDI: ffffffff8c28abe0 [ 729.017543][ C1] RBP: ffff88807ea7aaa0 R08: ffffc90002f770d8 R09: 0000000000000000 [ 729.025523][ C1] R10: ffffc90002f77138 R11: fffff520005eee29 R12: 0000000000000002 [ 729.033502][ C1] R13: 0000000000000002 R14: ffffffff8e95cd60 R15: ffff88807ea79ec0 [ 729.041503][ C1] ? unwind_next_frame+0xa6/0x2550 [ 729.046631][ C1] unwind_next_frame+0x1bba/0x2550 [ 729.051763][ C1] ? unwind_next_frame+0xa6/0x2550 [ 729.056885][ C1] ? __unwind_start+0xf7/0x760 [ 729.061666][ C1] __unwind_start+0x5b8/0x760 [ 729.066360][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 729.072527][ C1] arch_stack_walk+0xe3/0x150 [ 729.077223][ C1] ? arch_stack_walk+0xe3/0x150 [ 729.082089][ C1] stack_trace_save+0xa9/0x100 [ 729.086866][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 729.092266][ C1] save_stack+0x122/0x230 [ 729.096610][ C1] ? __pfx_save_stack+0x10/0x10 [ 729.101494][ C1] __reset_page_owner+0x71/0x1f0 [ 729.106452][ C1] __free_frozen_pages+0xbc7/0xd30 [ 729.111583][ C1] __slab_free+0x274/0x2c0 [ 729.116025][ C1] ? qlist_free_all+0x8e/0x100 [ 729.120803][ C1] qlist_free_all+0x99/0x100 [ 729.125406][ C1] kasan_quarantine_reduce+0x148/0x160 [ 729.130879][ C1] __kasan_slab_alloc+0x22/0x80 [ 729.135753][ C1] __kmalloc_noprof+0x316/0x760 [ 729.140616][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 729.146343][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 729.151384][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 729.156956][ C1] tomoyo_check_open_permission+0x229/0x470 [ 729.162858][ C1] ? tomoyo_check_open_permission+0x1d3/0x470 [ 729.168930][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 729.175355][ C1] ? __asan_memset+0x22/0x50 [ 729.179964][ C1] ? __up_read+0x291/0x6b0 [ 729.184418][ C1] security_file_open+0xa9/0x240 [ 729.189366][ C1] do_dentry_open+0x384/0x14e0 [ 729.194147][ C1] ? vfs_open+0x31/0x340 [ 729.198401][ C1] vfs_open+0x3b/0x340 [ 729.202474][ C1] ? path_openat+0x2df0/0x3860 [ 729.207253][ C1] path_openat+0x2e08/0x3860 [ 729.211868][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 729.217258][ C1] ? stack_depot_save_flags+0x33/0x810 [ 729.222742][ C1] ? __pfx_path_openat+0x10/0x10 [ 729.227689][ C1] ? __x64_sys_openat+0x138/0x170 [ 729.232741][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 729.237700][ C1] do_file_open+0x23e/0x4a0 [ 729.242229][ C1] ? __pfx_do_file_open+0x10/0x10 [ 729.247295][ C1] ? _raw_spin_unlock+0x28/0x50 [ 729.252157][ C1] ? alloc_fd+0x64b/0x6c0 [ 729.256510][ C1] do_sys_openat2+0x113/0x200 [ 729.261197][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 729.266412][ C1] ? rcu_is_watching+0x15/0xb0 [ 729.271195][ C1] __x64_sys_openat+0x138/0x170 [ 729.276059][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.282132][ C1] do_syscall_64+0x15f/0xf80 [ 729.286733][ C1] ? clear_bhb_loop+0x40/0x90 [ 729.291423][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.297322][ C1] RIP: 0033:0x7f4a9fea7407 [ 729.301743][ C1] RSP: 002b:00007ffc43a0a810 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 729.310161][ C1] RAX: ffffffffffffffda RBX: 00007f4aa0561880 RCX: 00007f4a9fea7407 [ 729.318136][ C1] RDX: 0000000000080000 RSI: 00007ffc43a0a990 RDI: ffffffffffffff9c [ 729.326201][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 729.334179][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ce409a67f5 [ 729.342162][ C1] R13: 000055ce409a67f5 R14: 0000000000000001 R15: 00007ffc43a0efe0 [ 729.350160][ C1] [ 729.353186][ C1] rcu: rcu_preempt kthread starved for 9162 jiffies! g106613 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 729.364381][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 729.374352][ C1] rcu: RCU grace-period kthread stack dump: [ 729.380244][ C1] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 729.393749][ C1] Call Trace: [ 729.397035][ C1] [ 729.399976][ C1] __schedule+0x17b4/0x5680 [ 729.404499][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 729.409485][ C1] ? __pfx___schedule+0x10/0x10 [ 729.414364][ C1] ? schedule+0x90/0x360 [ 729.418625][ C1] schedule+0x164/0x360 [ 729.422799][ C1] schedule_timeout+0x158/0x2c0 [ 729.427672][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 729.433062][ C1] ? __pfx_process_timeout+0x10/0x10 [ 729.438369][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 729.444186][ C1] ? prepare_to_swait_event+0x340/0x370 [ 729.449758][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 729.454623][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 729.459837][ C1] ? rcu_gp_init+0x1315/0x15b0 [ 729.464616][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 729.470778][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 729.476072][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 729.481292][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 729.485896][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 729.491101][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 729.496925][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 729.501875][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 729.506919][ C1] kthread+0x388/0x470 [ 729.511003][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 729.516207][ C1] ? __pfx_kthread+0x10/0x10 [ 729.520810][ C1] ret_from_fork+0x514/0xb70 [ 729.525417][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 729.530545][ C1] ? __switch_to+0xc79/0x1410 [ 729.535249][ C1] ? __pfx_kthread+0x10/0x10 [ 729.539856][ C1] ret_from_fork_asm+0x1a/0x30 [ 729.544655][ C1] [ 729.547707][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 729.554048][ C1] CPU: 1 UID: 0 PID: 3226 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 729.563769][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 729.573830][ C1] Workqueue: bat_events batadv_tt_purge [ 729.579393][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 729.584704][ C1] Code: ff ff ff e8 e1 94 06 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 cb 5f 97 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 58 61 92 [ 729.604320][ C1] RSP: 0018:ffffc90000a07198 EFLAGS: 00000282 [ 729.610403][ C1] RAX: 5385eff7bafd9400 RBX: 0000000000000000 RCX: 0000000080000301 [ 729.618386][ C1] RDX: 00000000ecf7569c RSI: ffffffff8e21bc35 RDI: ffffffff8c28abe0 [ 729.626368][ C1] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cd60 [ 729.634348][ C1] R10: ffffc90000a072f8 R11: ffffffff81b0d880 R12: 0000000000000002 [ 729.642332][ C1] R13: ffffffff8e95cd60 R14: 0000000000000000 R15: 0000000000000246 [ 729.650309][ C1] FS: 0000000000000000(0000) GS:ffff888125390000(0000) knlGS:0000000000000000 [ 729.659241][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 729.665828][ C1] CR2: 0000200000089000 CR3: 00000000779e4000 CR4: 00000000003526f0 [ 729.673810][ C1] Call Trace: [ 729.677096][ C1] [ 729.679942][ C1] ? ret_from_fork+0x514/0xb70 [ 729.684722][ C1] ? unwind_next_frame+0xa6/0x2550 [ 729.689845][ C1] unwind_next_frame+0xc3/0x2550 [ 729.694797][ C1] ? unwind_next_frame+0xa6/0x2550 [ 729.699933][ C1] ? unwind_next_frame+0xa6/0x2550 [ 729.705054][ C1] ? kthread+0x388/0x470 [ 729.709320][ C1] ? ret_from_fork+0x514/0xb70 [ 729.714095][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 729.720266][ C1] arch_stack_walk+0x11b/0x150 [ 729.725049][ C1] ? ret_from_fork+0x514/0xb70 [ 729.729827][ C1] stack_trace_save+0xa9/0x100 [ 729.734606][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 729.739992][ C1] ? dev_hard_start_xmit+0x2cd/0x830 [ 729.745297][ C1] ? br_nf_post_routing+0xb66/0xfe0 [ 729.750514][ C1] ? nf_hook_slow+0xc5/0x220 [ 729.755125][ C1] kasan_save_track+0x3e/0x80 [ 729.759820][ C1] ? kasan_save_track+0x3e/0x80 [ 729.764692][ C1] ? kasan_save_free_info+0x46/0x50 [ 729.769900][ C1] ? __kasan_slab_free+0x5c/0x80 [ 729.774853][ C1] ? kmem_cache_free+0x182/0x650 [ 729.779816][ C1] ? skb_scrub_packet+0x2c8/0x3d0 [ 729.784850][ C1] ? __dev_forward_skb2+0x28f/0x740 [ 729.790064][ C1] ? veth_xmit+0x469/0xdb0 [ 729.794490][ C1] ? dev_hard_start_xmit+0x2cd/0x830 [ 729.799794][ C1] ? __dev_queue_xmit+0x14d9/0x3950 [ 729.805018][ C1] ? br_dev_queue_push_xmit+0x370/0x4b0 [ 729.810577][ C1] ? NF_HOOK+0x64e/0x6e0 [ 729.814833][ C1] ? br_nf_post_routing+0xb66/0xfe0 [ 729.820047][ C1] ? nf_hook_slow+0xc5/0x220 [ 729.824663][ C1] ? NF_HOOK+0x23e/0x3f0 [ 729.828918][ C1] ? br_forward_finish+0xd3/0x130 [ 729.833958][ C1] ? br_nf_forward_finish+0xa5e/0xe90 [ 729.839345][ C1] ? NF_HOOK+0x64e/0x6e0 [ 729.843600][ C1] ? br_nf_forward_ip+0x7ef/0xa30 [ 729.848638][ C1] ? nf_hook_slow+0xc5/0x220 [ 729.853249][ C1] ? NF_HOOK+0x23e/0x3f0 [ 729.857501][ C1] ? __br_forward+0x397/0x540 [ 729.862188][ C1] ? br_handle_frame_finish+0x1521/0x1c80 [ 729.867924][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 729.873050][ C1] ? br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 729.879215][ C1] ? br_nf_pre_routing_ipv6+0x374/0x6f0 [ 729.884777][ C1] ? br_handle_frame+0x1277/0x1510 [ 729.889897][ C1] ? __netif_receive_skb_core+0x98f/0x3170 [ 729.895719][ C1] ? process_backlog+0x76d/0x1950 [ 729.900750][ C1] ? __napi_poll+0xae/0x340 [ 729.905258][ C1] ? net_rx_action+0x627/0xf70 [ 729.910028][ C1] ? handle_softirqs+0x22a/0x840 [ 729.914984][ C1] ? do_softirq+0x76/0xd0 [ 729.919322][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 729.924702][ C1] ? batadv_tt_local_purge+0x2a7/0x340 [ 729.930174][ C1] ? batadv_tt_purge+0x35/0x9e0 [ 729.935030][ C1] ? process_scheduled_works+0xb5d/0x1860 [ 729.940754][ C1] ? rescuer_thread+0x827/0x1130 [ 729.945698][ C1] ? kthread+0x388/0x470 [ 729.949954][ C1] ? ret_from_fork+0x514/0xb70 [ 729.954757][ C1] ? skb_scrub_packet+0x2c8/0x3d0 [ 729.959792][ C1] kasan_save_free_info+0x46/0x50 [ 729.964830][ C1] __kasan_slab_free+0x5c/0x80 [ 729.969610][ C1] kmem_cache_free+0x182/0x650 [ 729.974388][ C1] ? __skb_ext_put+0x221/0x2f0 [ 729.979162][ C1] ? veth_xmit+0x60/0xdb0 [ 729.983503][ C1] skb_scrub_packet+0x2c8/0x3d0 [ 729.988368][ C1] __dev_forward_skb2+0x28f/0x740 [ 729.993405][ C1] veth_xmit+0x469/0xdb0 [ 729.997657][ C1] ? lock_acquire+0x106/0x350 [ 730.002342][ C1] ? veth_xmit+0x60/0xdb0 [ 730.006686][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 730.011832][ C1] __dev_queue_xmit+0x14d9/0x3950 [ 730.016886][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 730.022032][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 730.027155][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 730.032109][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 730.037504][ C1] ? ip6table_mangle_hook+0x2b3/0x740 [ 730.042886][ C1] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 730.047683][ C1] ? br_nf_dev_queue_xmit+0x4ee/0x25f0 [ 730.053250][ C1] br_dev_queue_push_xmit+0x370/0x4b0 [ 730.058635][ C1] ? NF_HOOK+0xa2/0x6e0 [ 730.062804][ C1] NF_HOOK+0x64e/0x6e0 [ 730.066893][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 730.071505][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 730.077239][ C1] ? net_generic+0x1e/0x240 [ 730.081752][ C1] ? net_generic+0x1e/0x240 [ 730.086262][ C1] ? net_generic+0x1e/0x240 [ 730.090778][ C1] ? skb_pull+0xc1/0x1d0 [ 730.095054][ C1] br_nf_post_routing+0xb66/0xfe0 [ 730.100094][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 730.105868][ C1] ? __pfx_br_nf_post_routing+0x10/0x10 [ 730.111434][ C1] nf_hook_slow+0xc5/0x220 [ 730.115865][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 730.121775][ C1] NF_HOOK+0x23e/0x3f0 [ 730.125864][ C1] ? NF_HOOK+0xa2/0x3f0 [ 730.130044][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 730.134647][ C1] ? net_generic+0x1e/0x240 [ 730.139162][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 730.145073][ C1] ? net_generic+0x1e/0x240 [ 730.149599][ C1] br_forward_finish+0xd3/0x130 [ 730.154458][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 730.160368][ C1] br_nf_forward_finish+0xa5e/0xe90 [ 730.165592][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 730.171387][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 730.176867][ C1] ? NF_HOOK+0xa2/0x6e0 [ 730.181044][ C1] ? NF_HOOK+0xa2/0x6e0 [ 730.185212][ C1] NF_HOOK+0x64e/0x6e0 [ 730.189305][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 730.193983][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 730.199723][ C1] ? net_generic+0x1e/0x240 [ 730.204250][ C1] br_nf_forward_ip+0x7ef/0xa30 [ 730.209113][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 730.214849][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 730.219976][ C1] nf_hook_slow+0xc5/0x220 [ 730.224410][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 730.229972][ C1] NF_HOOK+0x23e/0x3f0 [ 730.234056][ C1] ? NF_HOOK+0xa2/0x3f0 [ 730.238225][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 730.242828][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 730.248303][ C1] ? br_flood+0x8e0/0xb80 [ 730.252656][ C1] ? br_handle_vlan+0x61/0x530 [ 730.257437][ C1] __br_forward+0x397/0x540 [ 730.261953][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 730.267431][ C1] br_handle_frame_finish+0x1521/0x1c80 [ 730.272991][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 730.278300][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 730.284219][ C1] ? ip6t_do_table+0x1d3/0x1560 [ 730.289089][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 730.294206][ C1] ? nf_hook_slow+0x176/0x220 [ 730.298896][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 730.304806][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 730.309851][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 730.315325][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 730.321235][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 730.326099][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 730.331315][ C1] br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 730.337315][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 730.343238][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 730.348626][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 730.354193][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 730.360105][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 730.366619][ C1] ? br_nf_pre_routing+0x75f/0x14c0 [ 730.371842][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 730.377314][ C1] br_handle_frame+0x1277/0x1510 [ 730.382278][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 730.387581][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 730.393506][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 730.398804][ C1] __netif_receive_skb_core+0x98f/0x3170 [ 730.404451][ C1] ? NF_HOOK+0x33f/0x3c0 [ 730.408703][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 730.414694][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 730.419738][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 730.425815][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 730.430856][ C1] ? NF_HOOK+0x336/0x3c0 [ 730.435117][ C1] ? process_backlog+0x3eb/0x1950 [ 730.440156][ C1] ? process_backlog+0x3eb/0x1950 [ 730.445186][ C1] ? process_backlog+0x3eb/0x1950 [ 730.450220][ C1] ? process_backlog+0x3eb/0x1950 [ 730.455250][ C1] process_backlog+0x76d/0x1950 [ 730.460214][ C1] __napi_poll+0xae/0x340 [ 730.464549][ C1] ? skb_defer_free_flush+0x233/0x260 [ 730.469994][ C1] net_rx_action+0x627/0xf70 [ 730.474693][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 730.479910][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 730.485049][ C1] ? try_to_wake_up+0x7f2/0x1380 [ 730.490010][ C1] handle_softirqs+0x22a/0x840 [ 730.494786][ C1] ? do_softirq+0x76/0xd0 [ 730.499129][ C1] ? batadv_tt_local_purge+0x2a7/0x340 [ 730.504620][ C1] do_softirq+0x76/0xd0 [ 730.508794][ C1] [ 730.511735][ C1] [ 730.514674][ C1] __local_bh_enable_ip+0xf8/0x130 [ 730.519800][ C1] batadv_tt_local_purge+0x2a7/0x340 [ 730.525116][ C1] batadv_tt_purge+0x35/0x9e0 [ 730.529809][ C1] ? process_scheduled_works+0xa70/0x1860 [ 730.535539][ C1] ? process_scheduled_works+0xa70/0x1860 [ 730.541275][ C1] process_scheduled_works+0xb5d/0x1860 [ 730.546858][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 730.552844][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 730.557902][ C1] rescuer_thread+0x827/0x1130 [ 730.562691][ C1] ? rescuer_thread+0xbb/0x1130 [ 730.567575][ C1] kthread+0x388/0x470 [ 730.571668][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 730.576879][ C1] ? __pfx_kthread+0x10/0x10 [ 730.581483][ C1] ret_from_fork+0x514/0xb70 [ 730.586089][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 730.591212][ C1] ? __switch_to+0xc79/0x1410 [ 730.595905][ C1] ? __pfx_kthread+0x10/0x10 [ 730.600596][ C1] ret_from_fork_asm+0x1a/0x30 [ 730.605390][ C1]