last executing test programs: 13.230236913s ago: executing program 1 (id=2369): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206010800000000000000000700000114000780080011400000008b05001500050000000500010006000000050005000200000005000400020000000900020073797a300000fd000d000300686173683a6e6574000000009fcd4d9a692417787d602c04cc91cce746afee7315b90fc17a"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@getrule={0x14, 0x22, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8010) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000300)) (async) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000018000380140000800800034000000003"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0xc30, 0x2, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000100)={r6, 0x34}, 0x8) (async) close(0x3) 12.542795633s ago: executing program 1 (id=2373): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000500)=0xd79d, 0x4) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x7fff}, &(0x7f0000000200)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) r1 = socket(0x11, 0x3, 0x300) (rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async, rerun: 64) sendmmsg$inet(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab", 0xde}], 0x1}}], 0x1, 0x2090) (async, rerun: 64) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x4, 0x5, 0x3, @vifc_lcl_addr=@empty, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) (async) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000040)) (async) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f00000000c0)=0x8) (async) write(r2, &(0x7f0000001e00)="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", 0x124) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r7, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8004) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 11.653830267s ago: executing program 0 (id=2376): r0 = socket(0xa, 0x3, 0xff) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a1d080206000000040000a118000200ff05000000000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x9, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="b7eb290aca"], 0x20000600}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @remote, 0x1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000002c0)=0x1000000, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000180)="e0b9547ed387dbe9abc89b6f5b69", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.645735541s ago: executing program 4 (id=2377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000300)={0x6, 0x3, {0x7fff, @usage=0x6, 0x0, 0x8, 0x2, 0x3, 0x7, 0x6, 0x1, @usage=0x40, 0x56a5ec0d, 0x3, [0x5, 0x800, 0xb9e6, 0x7ff, 0xffffffff, 0x4]}, {0x8000, @struct={0xa, 0x6}, 0x0, 0x6, 0x9224, 0xffffffffffffffff, 0x4, 0x5, 0x80, @usage=0x1, 0x3f9c, 0x9, [0x6, 0x0, 0x8000000000000001, 0x7, 0x9, 0x10000]}, {0x88, @struct={0x3, 0x4}, 0x0, 0x10001, 0x1, 0x8, 0x4, 0x2, 0x4, @struct={0x6, 0xfffffeff}, 0xc5c, 0x7, [0x81, 0x3, 0x2, 0x0, 0x80, 0x6]}, {0xf4, 0xe2, 0x8}}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYRES16=r1]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="1bf8f92d4fea00", @ANYRES16=r4, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x15c}}, 0x44) 11.544881509s ago: executing program 2 (id=2378): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r1, r2, 0x4, r0}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x80}, @in6=@mcast2, 0x0, 0x10, 0xffff, 0x4, 0x2, 0x0, 0x0, 0x88, 0x0, 0xee01}, {0x7, 0xfffffffffffffffe, 0x5, 0x9, 0x400000004271, 0x3, 0x0, 0x3}, {0x0, 0x0, 0x6, 0x1}, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x4d3, 0x33}, 0x2, @in=@multicast1, 0x0, 0x4, 0x0, 0xb7, 0x0, 0x7fbfffd}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) 11.440709078s ago: executing program 0 (id=2379): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001e0001"], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x6, 0x4, 0x0, 0x2, 0x5775d27c, 0x158, 0x20100}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040007"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 10.560955154s ago: executing program 0 (id=2381): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0100001000050000000001000000007f0000010000000000000000000000007f00000400000000000000000000000000000000fffd0000029f8b321c61aa73e031000800000020000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14141700000000000000000000000000001234330000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000a00000020000000000000004c001400736861332d323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000000"], 0x13c}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)="89000000120081ae08061cdc030ec080000000080000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff0000000000000000009da6", 0x8b}, {&(0x7f0000000040)="53dbc9de32eac0559323d3b70eb7bc1d760c04bf0b2e0ecfba47269c8ee6b202a20d20af8de309b72b90d4fcfde5deb4be997dbd0401727b9350032935f5b5050334e192dd0c06156e7fc60072ba6ca6c12e9f946a9d82f8542749b6035ba090172d361a4dda65b57c490fcc4e30e279037490d67f8d09770cbb34db3b6f66e5818f9b0143653bc2cba2dab764eec1cc67d5ca146b4bf09f21128b1ac3ef1aba11269e126a71bcc46e13", 0xaa}, {&(0x7f0000000100)="3b40c72c70ebb77eda8efc9693d1c9", 0xf}, {&(0x7f0000000180)="64d0f775c7a6551c55eb80e65112d5b2c9f8532db1ebb5e97983c44ef77742b5ba4903bbd04bdff98b97b6df289f85dc276d66d721ca3df84294b821e8a05e9ae18fd77cd6fe5c8aa4ec3fe62db5a52b15e0803b871bc2412f55d5078127c7687ec6c26d10c87c795905c9fc6a1858e8dda35ce3e97e4949fc359ea28ae924885c5b52fd3b10d472a20e9c7edb1d", 0x8e}, {&(0x7f0000000280)="32bd289d43ca6248ed92e02b94403568833cd2523cf7bc4d8e24875178754e160771fda00f53ac709d1bfef287f70a2b5c0ea05845ad07e74d78ac643596cda77d6ae79f974110cc86dd4e3eb2", 0x4d}], 0x5}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000240), r0) 10.468633602s ago: executing program 2 (id=2382): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) close(r0) r2 = socket(0x10, 0x803, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000200)={{r2, &(0x7f0000000040)='+[\x00', 0x210000, &(0x7f00000000c0)={@_ha_fsid={[0x3, 0x3e3]}, {0x3, 0x364, 0xa3, 0xffffffffffffff7f}}, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0xfc13}, {[0x6, 0x3, 0x6, 0x2]}, 0x5, 0x4b, &(0x7f0000000180)=""/75}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000040000000000000000000005110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETLINK(r3, 0x400454cd, 0x205) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000390425bd7000fbdbdf25000000004339d051731ff2e729febb524ebfeb7d6b821acd70f441517200c1d1fa183233e352933649e7567825ba6c46b0dc0012cd54c3eafd056fcbaf6475ba9823d30c40333f4fb30564edce89e0f14467ae5629ffbd97cece8b4edc6aab2ab87e53", @ANYRES32=0x0, @ANYBLOB="01990000419a0400280012800b00010065727370616e00001800028005001600020000000400120006001800c3070000"], 0x48}}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000)=0x3, 0x4) 10.220439281s ago: executing program 4 (id=2383): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xae}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_newrule={0x28, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x10000}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040884}, 0x4008000) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@remote, @in=@loopback, 0x4e21, 0x0, 0x4e22, 0x0, 0xa, 0x20, 0x80, 0x1, 0x0, r3}, {0x7, 0x3, 0xffffffff, 0x10, 0x3, 0x4, 0x80000000, 0x2}, {0xffffffffffffffff, 0x0, 0x3, 0x6}, 0x5, 0x0, 0x0, 0x0, 0xef6503099ac67908}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0xff}, 0x2, @in=@rand_addr=0x64010100, 0x3503, 0x2, 0x0, 0x0, 0x2915, 0x2, 0x4}}, 0xe8) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x4}, 0xffffffffffffff94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095", @ANYRES64], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0}, 0x48) 9.948860724s ago: executing program 1 (id=2384): preadv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/9, 0x9}, {&(0x7f0000001480)=""/169, 0xa9}], 0x3, 0x80, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x1a, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000ffffff7f000000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bb090000000000005509010000000000950000000000000018000000030000000000000001000000183200000100000000000000000000001811000019b7c53b3d4735ad7d13b5b5ca67a6c3ff1cad818a26db364b7429e3c433b52ee3b7b169317a5887ab081693de1874cac6b5cb3ccb8fc379b98776f06b0d5564726a4eb72156cbe32d22157ee8e8275300ced411abc921d09ad78b2b5ee3ec2cc033069e347406b1c60db3d6ad5ac668792b900a5ca0661b74f53c2753034e15b83e", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000008500000019000000185100000c0000000000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @flow_dissector}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000000040)="90fe0365c16bf8fd01aef284be79746bf2609ec6fe8e43c41f973c5cc16521d7217664959d875465efd7c06fe161cb2d32f505e734a25b2e8292e142dcbe37a4a66132e06903f7d03246a59a07e23fe35e51c25ca99ad02b08339b0b95aba6ffe24c8b0ba7c044756426bd6b74558d7c5d46eccffae58c1fb4079d9b15a9b1828dc39d0ede46f64628914c569510684576fe63de9c927ad131c8d31611", &(0x7f0000000240)=""/96}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r1, r0}, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) preadv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/9, 0x9}, {&(0x7f0000001480)=""/169, 0xa9}], 0x3, 0x80, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x1a, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000ffffff7f000000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bb090000000000005509010000000000950000000000000018000000030000000000000001000000183200000100000000000000000000001811000019b7c53b3d4735ad7d13b5b5ca67a6c3ff1cad818a26db364b7429e3c433b52ee3b7b169317a5887ab081693de1874cac6b5cb3ccb8fc379b98776f06b0d5564726a4eb72156cbe32d22157ee8e8275300ced411abc921d09ad78b2b5ee3ec2cc033069e347406b1c60db3d6ad5ac668792b900a5ca0661b74f53c2753034e15b83e", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000008500000019000000185100000c0000000000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @flow_dissector}, 0x94) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, 0x0, 0x0) (async) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) (async) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000000040)="90fe0365c16bf8fd01aef284be79746bf2609ec6fe8e43c41f973c5cc16521d7217664959d875465efd7c06fe161cb2d32f505e734a25b2e8292e142dcbe37a4a66132e06903f7d03246a59a07e23fe35e51c25ca99ad02b08339b0b95aba6ffe24c8b0ba7c044756426bd6b74558d7c5d46eccffae58c1fb4079d9b15a9b1828dc39d0ede46f64628914c569510684576fe63de9c927ad131c8d31611", &(0x7f0000000240)=""/96}, 0x20) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r1, r0}, 0xc) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r3, 0x107, 0xc, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) (async) 9.864779249s ago: executing program 0 (id=2385): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r2, 0x607, 0x4, 0xfffffffd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004005}, 0xc000) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) unshare(0x10000000) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000580)=@nfc={0x27, r4, 0x0, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0400a72b40ecf35ed9e80100000008002c0008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000200)={&(0x7f0000000140)=""/174, 0xae}) 9.792236365s ago: executing program 2 (id=2386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e06, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1b, 0x0}}], 0x40000000000024e, 0x20002040) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468800, 0x40, 0x1, 0x3, 0x80000000}, 0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000040) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000004400010029bd7000060000000100000004000880100001800c00758008000a00f7ffffff614414d622897a15b7995033ad963c6764a4a615b9c6621ef0e4c097a396d56941929cb47381eebd839e469d5e779989a8fa6268b4fee9f837bdfd443592cb1b838b240db69e00"/125], 0x28}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r3, 0x37}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x4, 0x4, 0x60, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x700, 0x4, 0x400}}) r6 = accept$unix(r3, &(0x7f00000016c0)=@abs, &(0x7f0000001740)=0x6e) setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000001780)=0x8, 0x4) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r7, &(0x7f0000000080)="b9dd23eb86bcb1dda8f6967cf441105a0cd3bb650fd1e94fbb85fcc2b7f9", 0x1e) sendmsg$xdp(r3, &(0x7f0000001680)={&(0x7f0000000240)={0x2c, 0x1, r5, 0x2a}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000280)="5edecb25c2cea63732cadcd8989ee534d324e506c1e3c6e29f4f882d18a9048f0e81db2be3f4c1c9c7f944a36883e755e2370d22c2a6cc4610cfbdc1b6e98b4a3877cc35e320a08b940465ed9d342a764511dbf792004c74d2f3c99dcb67b41963cd784b8640e65d1ef3108094c896e12f35eeaeea4a01d1377fe3bc02c96f12ba3a764b72761e6b0aad78c70cb769e76c", 0x91}, {&(0x7f0000000340)="4cbdc6d7d046b46c216f0f1926cc203a45d9b2158dfc68c98494cb0e35d9c1def9b83b8476998428fc04ba80f9be39dacd58a1671bef5690803b8ad136bb3ac6ccbf84f30371c72566524ace118cc7af260473e272ded7e5664969d4329b49c8491d274dc02e61ff1a9c6885766abe3f79c19f65c32ed3b95e84cfb4dbb87500e64509eb047595fb8d01a2c9e6272097c53e17796d3de6cc851b61b25650ba84a926c7f96f7416690e8418b1dde7e1dc4ddd409872d1c46dd937f0aaea1d", 0xbe}, {&(0x7f0000000400)="867138f3e562fd71a854867ad84bfe8e80fc063d356f23b61934da6c91bf7787693af450f19fe3fb51229b9f823a24bbf53f2fb4383a2975a303dc5725b8789a7c7849b4dfbad3568fe2a0abea88b7775dcf4e184ac4930b25129cda972c69dc3d31070b3dac484bfc9366b5c0addb7ef01c173478b8e6538e10a338a85d65e831fb474f9e9913ccefb9885edcef5a7b8c224d8d8aa1b2f4faefb9dc641a331dd707c97092f12edfbfb2a4b391d98233818fda0921affde3b4f6b748ecbd1bbfbdc364a730b6bcfc26e5e50788ce40cc2515ba5d2c9516cc5221b0ebe3eeefba70e0bdc81cb7b4068e612526f087d7ccf7a10acdea913bbf56c1fc2714866fc6b29b6d8a51a127a579c84f89b643a30515bda302cfbefa9b56dd28ab60df0de254639c56c56387ccbaa9425c47bda36c483201ed95950767e2a705d3ada5fdcb883c4ffe71f9f01300ed3c54245a9b993a070d4e19cc5707810528b187e21bb7c3d2a141e2e790fbbf3e766953e2b3a9c39b50fa1bbe4010e2ddc39ba36e97257fc254961734bbb0c3a0caddaff4cfdb069c06f5c765a5ca35d625ed889b3b174163f39442f6c32104141685fd9f5f0ccfed95c5d95c76c3abcde87d7570d33b6e0505748d49ac019d34ef7582c68b736124de53fec036f787f81ba0414e9bff5118182c2451fb691620333db39315f42e53539b9f011efd6f6294c06fb8d1f5f44461382eeaabd827db3866e554ff3066185e9b5e0b00ac742da408feb62ae80e01c21997cb4bfb3d20c44fcbf7a44bf9ced0d93c91e9a22e6cff9316cc67c93341a17504fea38b7f9384ecb58af3da0c21af20c3dfd32704abd859355ac9220b73faf3b0173d005c088000fd85709bb4ca0fd7b0059da92f9aab0828cb691ce3b7eb429affb992337e7d46d5c82a8d64ae768cd041aa5fb39ff8f095278e4b545050e5af9abc34add58210763f1299e7907c3d59d501e834a0efadb2667b9c3ed7f8d27121a872571183a92b50eec458853a7d2c749d3a12406d97d2e7aebc6fa9747dec118c26b01057f8909bca27229ea6a2cdd746f659d0fd9757e6b1edfbf7c4e68ccee1deb01416259af2ec5284ce4e83e82ccd5fcedf2425240014bdf4cabf8f511a0727915a352cd73e834ffdc95feeaeae979e1dee0ca83ebbb2152cb696ec91f19777045392f01bee995e6a3d0f8c0640befa4d7cbb99722450a57679ac01c2eb844cf053348e9dd860dfe0af76cab1abb294dd84b3e0df0b67c4fe5020d43b38d2575371f6f3c5cc37b24fe4a580d7a1669c3938512aebd394b3cab3ade886c155aa4ceff31c4a31c1c953619e6ab107a23e3ad68709f291f7d66b89d25e24e9d0c127aa0a4390650f3e378ed11490b2328b501aad2717c3756e86ac1c51b2e82460dbdd1e1c8ca2c2b558759f3ce392dcc1fcd6fddf93ccb30c8b1532e89990f84a0b6f55fa36b7f380da90bd9d4203928cab99928b956d2e5b588942dbcc952d6b94be54a6ebaf7476e2d21ebe4f88118f1fadfa777b723ed56716f68340aa18aebf512bbf3b54afe0687f5236eeb0ee07da981402a9ece38da3cc763d76b118e5d586e2a0ee7255b6bdd5140a0cc297f87a945c3345c7c16fe1a2c80e96fda7efb5a2d47fd884576192ce2a5d6524db00c452050cbf2c956af4f15aa97f7b2ce52fbe2407b5deaea0d479d470c75ae95a56254928771454cc3d4e544e81ef07fe46bad6858e622caca07b618264c193ff5bd3b2330ef981f2f623d06c134a446509ce6083ef4251da1dfd39ec935c47d8ffd3cdb4441bee1705a95a4ed79fc78a977ee6731fa6669b9c08528bbd9a792cebfa1d0760b1543158d2632fbfea75e99e2f42bddb843186e192076f506acf40ac0256278e9a6ce32057500bd0dbaec29f77a58b13459a60730eb8c35a86a1717ebce883a6ed41aad82d65df05cf8e9f1cf0beaef5953e675bf14f5f694411e7c4faab06a0023049817d64662414ea2853afc13372c916be39409176bd2d9bc4dec14a133a8a99831729bbbc4efd9bdf54574220fa588b00a7037d61e93d757a61ea58972b05832419807a965c4ba6d9ad8bb4e601d7f4347bb31805fa3483e583fa9bb690f6272bfcc14f9cbb3619e67151c677ff45acd0d79ca4a80d79e67e9e5bf84c5684f51b8ecbe5bfaee80794c8f3ef18e506e44178a3130b5579de01601e87d805167cd2256e6776758e5ca1d7f53dad6c6ff08bc02ae6f4e2f176c6044b565a8151f3b733fde4b95875caaa1dca1fe2c9514fc558bf93339dac9dab989c563957c6522676a6f6515453d1ace1d4b71f3a996d1b3b95caa8e2975c3a38ae7b541b23f197f19ecd1cf497b0a5a519a197b61579131c9f3bb3ef36a309d54d263da5b09e7ed52fc3d121d6dc5a1609808667ea6b02026a60aa6c3c057578685aeb0cdee62fcc1e41f41202234b00448b460a81bc40f92e8b8659f344216e0abef9aec347d5d743c2ae02a12439875879733be757bafa271eb4c09637dd38765e85a395b0a0c1324624233a5f163dc262ad2a0424ca94623bac1998425db9121c662d3ad2218fccf295fa5d7824bc37a3163b31c21c4d86f1cb38088eb77489294ca7ee62e7af9196f93e27577f9465ce469cd22c10b46cea7715a04dca7eea7e63fdb768556eb30d6bd2653734297f1076dfbe62ee2ec932b4ecce80bca7fedb18d18ecbc6ed9ec589935881fa697a6b57d84caad229f80e1e86c4d75ca7fc402f3123f8996a6cab0b8f9df942807bd839834011128c8ef31e58c2475a17fe8d2773a894432f6849657afadc216637174f814a4542201c7dab3824eae845ab4b2b493acb3dbe5d95b09a431c97d0303d30c3c582801568ba7fdc9e6602fad16bb4fdd46a6fe3b5e36cb25c768c357b9759de2f9558a33f93306299b4c101955a8eb3ae283e4a0ef997f8c071f0e96ef91e3e216f4ed5a8d2ecc97e42fc1f58ee340c625dbfde9c22ac0151ef00093a01289153bf3a835439a37325a5f5da8db124ca92edbadc9a2b99601c3516bd6d036469e2f9e1f882be63e5b0679753b158158c5c90875c9540a743486f57b2e5ac4888c11a8bf0d492a77b091e8545bfd4eca9cb04ddd00eb26793506ff526c6de0a8181e85158fe9f49b82c4892dfd7b53000d56787b882df4871296f292ece1dc8c0e1c4d0d9fa102bfdd63414cfe28b327272e237e0ee387242e9c98f02e6420240c24ee8ddf91184e73d4df2e5f76de3e1624357afd839dc55b8f87c0c7a58d39e69d66dd943604fa9b7d1eef58f66a337c45e6276e433a63286e5b4058cdb641070ef226dd695538b3de1e0faa767a7e185f646929757d58dedb7ca5599cb291b641d57e6fc51e242392f287768c0a5be42f3816cc9785dddd23be3b83c3bdb29ee5c821d18464531a37aef28dad4309f3c0489adea18b9c15ed523cff7c894474f78dd0d4e6178b0d100e4e1dc315337eaa9ca1c86ced1ced388b3ea130571bfd5dcb849ba85c707e11aeddfa52adcc1e9d65704666972aef0617211f04d95ee63c49551ea37cc16f2e616280ae6ef578ba7b16f9f84a3847ed09d8f3b39647f1c440b30ef0cbe361a45718c42167425395cb8558905a022e080ce6dbe30f123f274d0e5a2f7919e9d13107b99a2cb7b33ad06d523a9da4a86d838250cdee8ee7d067f7ef48f6cca1c6e2a6050b8259fdcadad8003862f96a7d5b11137d82b6c63060baf4c173373f4efb29bc04dc9fd86d3000dca69033eb9c564a30ec29fd4539a96c000f9dbf792933d7812cbef8a512da79117af3f05a393635d21f813510e8ada3180d7e138035af57bbd2bd5f6a40f57792ffa63ca9fd20a1ee205c3a6f6252d1e552941f774c963409b38cf04ad90b9527553e6e43cf7d85be30a94bfbbcacfdac3ca4e231587b5246a06daf17eea202b91927a15864a99fbd4536fb172179786024600aca203165d6328e32f83fa151ae256a00fa50f6c386a4c97f50d8bb4b7f5d2becd6a7260a623ef31c68b7a2c53c5ea69bb0dc641df996162ad40038600e54ea6b07e9aa81ab13f515ad0b5e76db666d25594ac7111a352f9e7edc48ba791876d6de499bba87f1bb98db0bab5e4e9286dec6c70fb2cf493ec32d4f3ac446d1a13bb10a7baf30ab1fa6332b6107af3a62c61dc4799ca5477db5f79749b7e266a3b7de7838e0ac5c9d99947551c72895565cff0cdb08e47e6463913fcf654cb123d9cfac84973df87c305997791f697b30714335781a07c7761be612faed199bb84895e2b1fb22f13a9d0c34478b9f27d8badf93956acecfe4d2a6a5cf86f8d09424b166a2b752d278a595a3c331e54d315d33555ee2a62d5e7b80c3c44cfa0aa5d812a93ef1263470e81cc648f1b206780ae2fdd8451f4b8de948a20cb178a91015ba124ef4cc588b9ee55f272258589d224811c29e35415be6e9fdce5d67a759dec9b0638b32817773344a61a14ac31aa4deeb20779d9703fac0180a058dc7bc70aff7ceb95cec00f1fdfdbc9cfee4864999349cdc7d1f3a0776ab134050a607148d006a7e9827916b70d26f49e045501e2529895c6e3f0363d9f53046989bdc959bfa26970dc10e4cd0c1409c0bdcf51f6625e6c57357e5c17a02f3891f072aa99a870d0946b6b01b3eb09c0c581d9c0271dc28841aa4365b75b9d76f991d4b58f08eeb514d8c1f5f239c1d62869f0d4e21d20890d7af1cd817f875b894796ca899c9896896331d99449c58fb923868f9a7802eed21cf706ca4c9b3e53e66f8b9636e401ee57ceaa5d7eab4c5da904a787a53a20c39f35392b05ec78746c8535752898798d0b37454168b4f6c82d1b8543fc073ea300bf0d85bef85d0fe76bff15c04e582a680a37ca272ed365434536d5d1415b84f7316d4f2366dbaf1e94f8e3343b637f06224d702d511feb6cdcb605f541184a3c7c61047c98ce852672c3e57c0d4114e19c7ee6f85538ee92f6aa35c9bbcf5e04c843b9c0b95977dad18a629e1c5277092fe28ecdb1aa2b381dd386e0413a240b46ca7b288687e630bc56a7ababcd4d0a84dcad0d770f004ef6a4a55db87dfcfa1ffa09ee2f15a13ba78cceaa679369953df767f9107ef23c4fabfee11e381201c5f03bc3f7962875a80feec698b51ee6c5c7ca0ec55531d0711c84cf8d91edeca5f814b9771ad967eb50bdf2d0b04dea2a8e9368390acc4881586acb16c2db63f2f0527eac8496728a9cafd6eb19a1ea0f41d9ea4d147e77671a2ef244a04ce3479fc2ebf3465df744a0d8f9c08d210db020c241968c6138f1b97a005e1fb794c490ed4d12289a6109c8510b2df54061b4afa5ab96ad7ab7d0c0b19883871b852049806698ae14695a01a9b2b5519e1e14e823948a8947bf3f6b1eab6ce4236aa9a74c4002b6b48ca966a38d882bbd9e22fed7a21c258c3c319fa9404072b03e40c27c0012e199bd184f6347c728590ddfec071df8efd3708c9def2d17bec9e7f155979631a26f64e7e9536eb1b2a47e0378dc4484bd170235d02cb04ed960614b7d236785bee6058601247384a169afe29832d68f9f84ca3bce6ede7cde2a3fb8ac0d1bc3c25263130bf50262a0260d3d8639170d66a71c022514b2c4be3599f1d98d7429a1faed03fe5013f333f71b8da41e6e3750ef629fcc461319842d5646dc25afba0bf9e66d67e11379ec2aeed906f9a143da55b5e64cc4584ad1f5006e396d9e08a595e6b6e58000f0aef026bcea70ae3afef1599f2fd2ea0e3a48cf8c640b897039a7dbb8239f5a0febea46b81ad49e60ed", 0x1000}, {&(0x7f0000001400)="af5be5a5d2683900267a7070a14bfeff161bb68255534dbc26bad13800748f674e191f16252d215099adc0776fcaa4fbef3c0c7f8ec8f8c9802248415dda8c386dca", 0x42}, {&(0x7f0000001480)="bdea487ea063cb6bedd458dd7bd87d9ce3e43ef88a9b77850ddca92b5eddf0819c88aaeb8661eb31da2b570a79d572e57468361fa61e99b6ffa20e11ec133b74a2ebfe784a30ae36db4f2cf0ebac67e2a4fb61bbe852c95a716c0a87cddea5e11f9d14a25d958811b7dbb35cbf17c3676f58e5da445fba87547a3fd832f8d5554f1cdf2b84a526da4de0529623b072ecbc05414823bbb3861dfc00e5d7c4a03d9137c57fd663f598f536fa782893783047f9ef4ea6a216d17199953223fd79c77fafd7a567e6c6fa4f2c5a93bb89dae6341ce9a5d110", 0xd6}, {&(0x7f0000001580)="1bbeb1ae9e3e9dda74963c8d53804c69ce901100ce70b4434109732e3749be2e0a10199ba8f0a3f9719f16c024fff6ea84f2dbfb52c16675dfe82021bd8857a81e73011ebc4a2ddb24a7baf99c7c1043252c0d732606498e7c", 0x59}], 0x6, 0x0, 0x0, 0x40000}, 0x48010) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x2, 0x0) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e06, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) (async) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1b, 0x0}}], 0x40000000000024e, 0x20002040) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468800, 0x40, 0x1, 0x3, 0x80000000}, 0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000040) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000004400010029bd7000060000000100000004000880100001800c00758008000a00f7ffffff614414d622897a15b7995033ad963c6764a4a615b9c6621ef0e4c097a396d56941929cb47381eebd839e469d5e779989a8fa6268b4fee9f837bdfd443592cb1b838b240db69e00"/125], 0x28}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r3, 0x37}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x4, 0x4, 0x60, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x700, 0x4, 0x400}}) (async) accept$unix(r3, &(0x7f00000016c0)=@abs, &(0x7f0000001740)=0x6e) (async) setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000001780)=0x8, 0x4) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) write(r7, &(0x7f0000000080)="b9dd23eb86bcb1dda8f6967cf441105a0cd3bb650fd1e94fbb85fcc2b7f9", 0x1e) (async) sendmsg$xdp(r3, &(0x7f0000001680)={&(0x7f0000000240)={0x2c, 0x1, r5, 0x2a}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000280)="5edecb25c2cea63732cadcd8989ee534d324e506c1e3c6e29f4f882d18a9048f0e81db2be3f4c1c9c7f944a36883e755e2370d22c2a6cc4610cfbdc1b6e98b4a3877cc35e320a08b940465ed9d342a764511dbf792004c74d2f3c99dcb67b41963cd784b8640e65d1ef3108094c896e12f35eeaeea4a01d1377fe3bc02c96f12ba3a764b72761e6b0aad78c70cb769e76c", 0x91}, {&(0x7f0000000340)="4cbdc6d7d046b46c216f0f1926cc203a45d9b2158dfc68c98494cb0e35d9c1def9b83b8476998428fc04ba80f9be39dacd58a1671bef5690803b8ad136bb3ac6ccbf84f30371c72566524ace118cc7af260473e272ded7e5664969d4329b49c8491d274dc02e61ff1a9c6885766abe3f79c19f65c32ed3b95e84cfb4dbb87500e64509eb047595fb8d01a2c9e6272097c53e17796d3de6cc851b61b25650ba84a926c7f96f7416690e8418b1dde7e1dc4ddd409872d1c46dd937f0aaea1d", 0xbe}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="af5be5a5d2683900267a7070a14bfeff161bb68255534dbc26bad13800748f674e191f16252d215099adc0776fcaa4fbef3c0c7f8ec8f8c9802248415dda8c386dca", 0x42}, {&(0x7f0000001480)="bdea487ea063cb6bedd458dd7bd87d9ce3e43ef88a9b77850ddca92b5eddf0819c88aaeb8661eb31da2b570a79d572e57468361fa61e99b6ffa20e11ec133b74a2ebfe784a30ae36db4f2cf0ebac67e2a4fb61bbe852c95a716c0a87cddea5e11f9d14a25d958811b7dbb35cbf17c3676f58e5da445fba87547a3fd832f8d5554f1cdf2b84a526da4de0529623b072ecbc05414823bbb3861dfc00e5d7c4a03d9137c57fd663f598f536fa782893783047f9ef4ea6a216d17199953223fd79c77fafd7a567e6c6fa4f2c5a93bb89dae6341ce9a5d110", 0xd6}, {&(0x7f0000001580)="1bbeb1ae9e3e9dda74963c8d53804c69ce901100ce70b4434109732e3749be2e0a10199ba8f0a3f9719f16c024fff6ea84f2dbfb52c16675dfe82021bd8857a81e73011ebc4a2ddb24a7baf99c7c1043252c0d732606498e7c", 0x59}], 0x6, 0x0, 0x0, 0x40000}, 0x48010) (async) 9.568721592s ago: executing program 4 (id=2387): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB='W \x00\x00! \x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8008006) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000640)=0x3, 0x8) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000edc4000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000c4ed0000ffffffff00000000"]}, 0x108) (async) close(r1) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x402, 0x12) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000380)="86ae7ae3f53aca5aeb6857b9d7b9168397711407f5f2f321ac655cebc266df84a71e8fae0b882d1774158b2387b42d774f626a032b9d5f5cb82baa3e87bfb7ffe66beef9013c745a7d7a83e2a691930d76b0b6c1f1fafe93df29", 0x5a}, {&(0x7f0000000700)="74adf3039f01162cdc1a938f34b0b90309078b4ee0e55382d9129e0af8b38412ac8b4f94557c7ecb0f48c1a8ab58f94cb6bc87", 0x33}, {&(0x7f0000000880)="5f7e2deeac0f820d8bfa26c88de87bdc8af5b1d77e72558e67590db0cdbffeaa8715a413495407edc4643bec20d2742f92154f68a088c444dea64d7d0e6684fff07d2db5b6867d263bda1fb1b81b1c36de1f2d2496bd42f3879bdba96c301a58a7c040afa35ebcc46e497787d8f2535e23672611b9c9ad3cfac2c663130aecb703e4f3a2b3a840f92a53b090453fadd72f313c2bd14ba2ffbbbbea0b9d2fa2982f5fa7ce6d5220fb3840b562744b51f25bf49ce298a13d828abcd1444eecbec18b5c166bf462b9239fa120ecdd47d4e1aa87da2b741301337b152d8e832325dbf74846e84e2c9cf0", 0xe8}, {&(0x7f0000000c00)="a569c7a3b986842901051774d47b89ba6490be1a2c6cc4cbd2182db962514511d48fa12066975e945e0b5a1e173fbddfacef8efff0d5009507074c112295c65a8a9c", 0x42}, {&(0x7f0000000c80)="a2ccb700b3ee60ee299be92dc3572c1f496dc8145bf2b794628516a7e5d88f744b612b6df6c79650e16ac65ababa735cb3247924902f1aaafe4ee18a9b9b0bb6769c2760fb1e4a065b53165a48bd1e25a7ff61a14b0a329a9ac38c110b16c8336480df8028e0a7aab102cd9098e4fdf6e0867b72e9f1081d9b996cd3024ce7d602a2c9d3c2d9240213e456f32fc2c28a469854f70fce4ed86babb848bd8afaf721c4c822496365f69cee18fff4cfe9d78c88453ce347c15dc2d240ecdff14573896c746a9d3b4ecc4fd5adb8e29fc8e1f54c3f187866b5", 0xd7}], 0x5}, 0xc851) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0x5, @local, 0x7ad}}, 0x1000, 0xffff}, 0x90) (async) sendfile(0xffffffffffffffff, r2, 0x0, 0x2) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x4, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x85, &(0x7f0000000180)=""/133, 0x40f00, 0xe, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000004c0)={0x2, 0x4e20, @broadcast}, 0x10) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x54) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @any, 0x1}, 0xa) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 9.568390298s ago: executing program 3 (id=2388): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x407f, 0x4) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x4800, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x4800, 0x4) socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 9.399405684s ago: executing program 2 (id=2389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES8=r0], 0x54}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0101"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) 9.342726596s ago: executing program 0 (id=2390): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x1, 0x3, 0xfffffffd, 0x8}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1000, 0x8}}, @TCA_NETEM_RATE={0x14, 0x6, {0x3, 0x3, 0x7, 0x2}}]}}}]}, 0x6c}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 9.270042373s ago: executing program 2 (id=2391): r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3ec}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)={0x34, r2, 0x1, 0x1, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4af}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x34}}, 0x0) 9.023680633s ago: executing program 3 (id=2392): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x8, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x8040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000240)={'netpci0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000580)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000080)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0xa0, r4, 0x10, 0x70bd2a, 0x25dfdbbe}, 0xa0}, 0x1, 0x0, 0x0, 0x2404409f}, 0x4004800) 8.887169438s ago: executing program 1 (id=2393): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfeff}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001000010000000000fdffdf2508000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0c002b80080003"], 0x2c}], 0x1}, 0x20000000) 8.743542058s ago: executing program 2 (id=2394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xf8, 0x0, 0xf0, 0x0, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xff, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x50, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000dca2f301836224ebf6100000181f212ccbee48bf2fed296a144d98238f707424a55d942b9c6f7fbbe138f24b839b9bd2ea953c8c8aaf8f7e6c3803168d87b66be5b4b56a88c244f5bc3acee166b6751979763d2e11cf8dff843972482285a77a7658b5a9079f1bbd34051a784cd38673a85b12bf909a87390d3ff5eb831bef153fe12124d8b9f137decf13553a06a7bd32358a55171da1263da78cb317df09daae940e0186c353e9fa327b01e223bd7c2dc431f55a87a7904624b6e28c05525c328d824b", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080001000002007b8af8ff00000000bfa20000000000fc06020000f8ffffffa80300000000000025d2e54dc88e0009000000000000c506000001000000850000000700951ca0e207e4e8320000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4, 0xffffffffffffffff}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r4, &(0x7f0000000100)="d0af02", &(0x7f0000000180)=""/238}, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000002300)=0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f0000000a00)=ANY=[@ANYRES8, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRESOCT=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095", @ANYRESHEX=r6], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket(0x400000000010, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000fc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000fd7702260a00010008000300", @ANYRES32=r12, @ANYBLOB="04002800"], 0x20}, 0x1, 0x0, 0x0, 0x20008041}, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r13, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r13, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) connect$inet6(r13, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e00001004d0640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 8.581968128s ago: executing program 4 (id=2395): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=@delqdisc={0x58, 0x25, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xc, 0xc}, {0x4, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x0, 0x6, 0x1, 0xd865}, {0xdd, 0x2, 0xf, 0x8000, 0x1, 0x3}, 0x7ff, 0xff800000, 0x3a2}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000001}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r2, 0x205, 0xfffffffc, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x13fea3995e811172}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 8.405549129s ago: executing program 1 (id=2396): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'gre0\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x4, 0x70bd26, 0x25dfdbfc, {0xf, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4001) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x70}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000280)={r1, &(0x7f0000000180)='gre0\x00', 0x800, &(0x7f00000001c0)={@_ha_fsid={[0x1e8e, 0x8]}, {0xb21c, 0x9, 0x3}}, 0x5, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x9}) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000012}, 0x2000c014) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x5c, 0x86, &(0x7f0000000580)="c2afae6dcc6de52bfa6f709d90b87e78c4aeaf0f79300447a7f97df774ae6d11157b388b81835b53f358c94da558fd4712de5c3d9f36899172933c9522c4a32750f22b0f98a4e2c39a25d88c8a0250c7e808497e2ac88589669da929", &(0x7f00000006c0)=""/134, 0x9, 0x0, 0x2b, 0xce, &(0x7f0000000780)="be9c41a486a9304b842c3128ea05a9b5f33cdbbaf4a881374214df1d5e78918827df122aad2510ced5518e", &(0x7f00000007c0)="0b02b7daa0a4c5cac7f7bbf96ec037f7e81e3995feb7be55a55d28621338f71a205b302af96a3ff4c8d1a70fa719c05819f68941ec1282b99a0e7c247bbefa39bfd1e49ddcd18e8e9edc7dfc588e5fa2819df61c5d81ed927c688289e6c6e5ff259eab8c90b4125aff8e309f5ff5d96536dbbdb828949fc0b490408d48ba7394cdb27a4ff9ef4a448f343a4723f87bc63a3512d7f7d46e81d13984ad173aa31e18718a5bd96335b868910c39740b352f155a360e08b316285c6e98b1d5aee3f3a43386f843e7316e0e4bdd0d9543", 0x2, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x8f}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4}, 0x94) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r5, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10e2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) 8.023543751s ago: executing program 0 (id=2397): socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x44, r1, 0x3, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_TX_RATES={0x0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x0, 0x3, {[0x91, 0x72, 0xc, 0xfffa, 0x5, 0x8, 0x1, 0x4]}}, @NL80211_TXRATE_GI={0x0, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x1b, 0x30, 0x6, 0x9, 0x1, 0xb, 0xc, 0x1b, 0x60, 0x3, 0x60, 0x12, 0x24, 0x24, 0x9, 0x9, 0x35, 0xc]}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x4, 0x1ff, 0x9, 0x8, 0xf675, 0x9, 0x3]}}, @NL80211_TXRATE_VHT={0x0, 0x3, {[0xfffb, 0x6, 0x4, 0x0, 0x5, 0x6, 0x3, 0x1]}}]}, @NL80211_BAND_6GHZ={0x0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x0, 0x5, {[0xff61, 0x493e, 0xe, 0x1, 0xcb9, 0x61f4, 0x8, 0x400]}}, @NL80211_TXRATE_VHT={0x0, 0x3, {[0xd, 0xcd1d, 0x5, 0x3ff, 0x6, 0xf, 0xf, 0x5]}}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x4, 0x6c, 0x12]}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x9, 0x180, 0x3, 0x3, 0x9, 0x5, 0x4, 0x3]}}]}, @NL80211_BAND_2GHZ={0x0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x0, 0x1, [0x1b, 0x1b, 0xb]}, @NL80211_TXRATE_HE_GI]}, @NL80211_BAND_5GHZ, @NL80211_BAND_2GHZ={0x0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x0, 0x1, [0x3]}, @NL80211_TXRATE_HE_LTF={0x0, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI, @NL80211_TXRATE_HE={0x0, 0x5, {[0x8000, 0x2, 0x100, 0x40, 0xa8, 0x3, 0x9, 0x84d]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x3ff, 0x1, 0x3ff, 0x9, 0x1, 0xff, 0x3, 0x6]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x8890) sendmsg$can_bcm(r5, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x1, {0x1, 0xff, 0x4}}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f00000001c0)={0x1f, 0xfffe, 0x3}, 0x6) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r8, &(0x7f0000000000)=ANY=[@ANYRES32=r8], 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r10, {0xb, 0xfff2}, {0xe, 0xffff}, {0xb, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000040) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 8.020799563s ago: executing program 1 (id=2398): r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c3"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b9"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) unshare(0x22020600) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001708000140000000090900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x14008091}, 0x24000004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r6 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xaf, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x5, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 7.953430071s ago: executing program 4 (id=2399): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x87) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.788047229s ago: executing program 3 (id=2400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_LINENO={0x8}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200480c1}, 0x2c800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000fa0000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 7.680362533s ago: executing program 3 (id=2401): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000bc0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getnetconf={0x14, 0x52, 0x800, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x4) 7.66380729s ago: executing program 3 (id=2402): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000001d80)=[{0x0}, {&(0x7f0000001c80)=""/66, 0x1c}], 0x2}}], 0x1, 0x40000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a8064100094f90224fc05", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 7.590809261s ago: executing program 3 (id=2403): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xffffffffffffff8b, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x29, r4}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x46, 0x0, 0x1}, 0x28) pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000040)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003f60000000001010101", 0x2e}], 0x1, 0x6, 0x0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f00000003c0)="00214500001400000000400600000a0000010a000002005000500000ffff00000002603003e80000000201010101", 0x2e}], 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=2404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x189001, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88caffff40", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x420, 0x3f4, 0x10, 0x70bd2b, 0x25dfdbfd, {0x5, 0x0, 0x28, [0xffff, 0x8, 0x0, 0xe, 0x5, 0x401, 0xf7fc, 0xc7, 0xac, 0x3, 0xd, 0x1, 0x39, 0x2, 0x9, 0x7fffffff, 0x55ea, 0x7, 0x401, 0xf2, 0x4, 0x3, 0x7, 0xd, 0x0, 0x1, 0x3, 0x3, 0x9, 0x2, 0x5, 0x1, 0x0, 0x4, 0x7f, 0x0, 0x400, 0x1, 0x1, 0x7fff, 0x7, 0x3, 0x1, 0x1, 0xb, 0x0, 0x8, 0x5, 0x8, 0x401, 0xd, 0x800, 0x1, 0x3, 0x101, 0x0, 0x3, 0x7, 0x0, 0x8, 0xca5, 0x6d0, 0x0, 0x2], [0x9, 0x5, 0x8, 0x9, 0x8000, 0x6, 0xc6, 0x8, 0x2, 0xe, 0x7fff, 0xb6d5, 0x23af, 0x20, 0x7, 0x58, 0x5, 0xffffffff, 0x4, 0x100, 0x7f, 0x6, 0x8, 0x3, 0xc17, 0x0, 0x2, 0x3, 0x5, 0x7ff, 0x8, 0x9, 0x85b4, 0x8, 0xffff, 0x6, 0x2, 0x1000, 0x6, 0x0, 0x3, 0x6a3, 0x2, 0x8000, 0x6, 0x5, 0xbb, 0x1, 0x2, 0x1, 0x10000, 0x2008000, 0x1, 0x6, 0x1000, 0x5, 0x7, 0x2, 0xf, 0x4, 0x4, 0x8, 0x7f, 0x80], [0x1, 0x2, 0x1, 0x7, 0x2, 0x1, 0xfffffffd, 0xfffffffe, 0x3, 0x101, 0x1, 0xfffffffa, 0x3, 0x3, 0xfffffffd, 0x800, 0x2, 0xc, 0x8, 0x0, 0x2244fb8d, 0xaba00000, 0x8, 0x9, 0x401, 0x4, 0x8, 0x0, 0x0, 0x80000001, 0x5, 0x80000000, 0x100, 0x5, 0x7ff, 0x0, 0x827, 0x3, 0xc7, 0x4, 0xa8bc00, 0x81, 0x8001, 0x674, 0x1, 0x1, 0x8001, 0x6, 0x5, 0xfff, 0x0, 0xae9f, 0x6f, 0x0, 0x80, 0x1ff, 0x9, 0x2, 0xfffffffc, 0x7fff, 0x7, 0x0, 0xf, 0x9], [0x5, 0x4, 0x802, 0xfffff800, 0x7f, 0xedb, 0x0, 0x1, 0xfffffffa, 0x40000, 0x7, 0x9, 0x14d98, 0x0, 0x4, 0x4, 0xffffff01, 0x8000, 0x2, 0x7, 0xfffffc01, 0x400, 0x1, 0x1, 0x9, 0x9, 0xed62, 0xa8, 0x6, 0x2, 0x6b2, 0x0, 0x8001, 0x6, 0x6, 0x81, 0xb6e, 0x6e506360, 0x5, 0x2, 0xed, 0x1b, 0xfffffe01, 0x401, 0x3, 0xa61, 0x7fffffff, 0x4, 0x5, 0x5, 0x80, 0x2, 0x4, 0xffff0000, 0x2, 0x1e2, 0x0, 0x30d, 0xfff, 0xfffffffb, 0x7ff, 0x9, 0x6, 0x3]}}, 0x420}}, 0x4000) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060086dd0000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (rerun: 64) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x13) kernel console output (not intermixed with test programs): 3][T10726] netlink: 'syz.2.1167': attribute type 1 has an invalid length. [ 267.438953][T10726] bond6: entered promiscuous mode [ 267.444676][T10726] 8021q: adding VLAN 0 to HW filter on device bond6 [ 267.799155][T10750] __nla_validate_parse: 7 callbacks suppressed [ 267.799181][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1173'. [ 267.843820][T10755] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1175'. [ 267.874844][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 267.997152][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 268.060955][ T6526] net_ratelimit: 29 callbacks suppressed [ 268.060978][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 268.070819][T10760] netlink: 'syz.0.1176': attribute type 1 has an invalid length. [ 268.070872][T10760] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1176'. [ 268.070938][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1176'. [ 268.170165][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 268.280905][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 268.380414][T10779] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1181'. [ 268.380609][T10779] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1181'. [ 268.380794][T10779] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1181'. [ 268.380968][T10779] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1181'. [ 268.386800][T10779] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1181'. [ 268.392498][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 268.511341][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 268.587383][T10789] x_tables: duplicate entry at hook 3 [ 268.612042][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 268.718553][T10791] geneve1: entered promiscuous mode [ 268.726106][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 268.835280][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 268.973027][T10795] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.973173][T10795] bridge0: port 2(bridge_slave_1) entered listening state [ 268.973495][T10795] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.973628][T10795] bridge0: port 1(bridge_slave_0) entered listening state [ 269.027782][T10811] netlink: 'syz.4.1186': attribute type 1 has an invalid length. [ 269.048454][T10795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.117658][T10795] macvlan0: left promiscuous mode [ 269.158074][T10795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 269.182814][T10795] bond1: left promiscuous mode [ 269.182840][T10795] gre1: left promiscuous mode [ 269.186643][T10795] gtp0: left promiscuous mode [ 269.213458][T10795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.215870][T10795] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.226802][T10795] batman_adv: batadv0: Interface activated: macvtap1 [ 269.246149][T10795] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.258680][T10795] 8021q: adding VLAN 0 to HW filter on device bond5 [ 269.298845][T10795] bond6: left promiscuous mode [ 269.551200][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 269.661559][ T6524] bond9: (slave bridge3): failed to get link speed/duplex [ 269.755753][T10839] openvswitch: netlink: Key type 288 is out of range max 32 [ 270.241439][T10861] tipc: Enabled bearer , priority 0 [ 270.286775][T10859] netlink: 'syz.1.1199': attribute type 11 has an invalid length. [ 271.924653][T10925] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 272.485111][T10963] netlink: 'syz.1.1224': attribute type 1 has an invalid length. [ 272.485137][T10963] netlink: 'syz.1.1224': attribute type 4 has an invalid length. [ 272.953891][T10977] ±ÿ: renamed from lo [ 273.122113][T10991] __nla_validate_parse: 40 callbacks suppressed [ 273.122136][T10991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1230'. [ 273.143946][T10990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1232'. [ 273.162131][T10985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1232'. [ 273.181903][ T6526] net_ratelimit: 89 callbacks suppressed [ 273.181925][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 273.267386][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1232'. [ 273.290635][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 273.294414][T11000] netlink: 'syz.0.1233': attribute type 10 has an invalid length. [ 273.323981][T11000] bond0: (slave team0): Releasing backup interface [ 273.414953][T11000] team0 (unregistering): Port device team_slave_0 removed [ 273.442235][T11000] team0 (unregistering): Port device team_slave_1 removed [ 273.515686][T11004] dvmrp4: entered allmulticast mode [ 273.517119][T11006] netlink: 'syz.4.1236': attribute type 29 has an invalid length. [ 273.522718][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 273.533749][T11003] dvmrp4: left allmulticast mode [ 273.644598][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 273.750301][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 273.883344][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 273.995102][ T6524] bond9: (slave bridge3): failed to get link speed/duplex [ 274.102014][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 274.215071][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 274.246800][T11032] netlink: 'syz.4.1242': attribute type 15 has an invalid length. [ 274.246823][T11032] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1242'. [ 274.325289][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 274.488345][T11043] Bluetooth: ISO socket layer initialized [ 275.081041][T11079] netlink: 'syz.2.1250': attribute type 12 has an invalid length. [ 275.081067][T11079] netlink: 'syz.2.1250': attribute type 29 has an invalid length. [ 275.081083][T11079] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1250'. [ 275.447287][T11096] x_tables: duplicate underflow at hook 1 [ 275.462848][T11093] x_tables: duplicate underflow at hook 1 [ 275.770532][T11109] netlink: 'syz.4.1255': attribute type 2 has an invalid length. [ 275.872381][T11114] netlink: 'syz.3.1258': attribute type 8 has an invalid length. [ 276.257888][T11121] x_tables: unsorted underflow at hook 2 [ 276.258065][T11120] x_tables: unsorted underflow at hook 2 [ 276.459223][T11126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 276.512360][T11129] netlink: 'syz.0.1261': attribute type 8 has an invalid length. [ 276.512384][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 276.691546][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1262'. [ 276.691807][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1262'. [ 276.966068][T11144] netlink: 'syz.1.1265': attribute type 11 has an invalid length. [ 276.983799][T11134] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.177533][T11177] syzkaller1: entered promiscuous mode [ 278.177556][T11177] syzkaller1: entered allmulticast mode [ 278.293226][ T6524] net_ratelimit: 30 callbacks suppressed [ 278.293249][ T6524] bond9: (slave bridge3): failed to get link speed/duplex [ 278.442433][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 278.506277][T11201] __nla_validate_parse: 31 callbacks suppressed [ 278.506299][T11201] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1275'. [ 278.610801][ T6524] bond9: (slave bridge3): failed to get link speed/duplex [ 278.719724][ T6524] bond9: (slave bridge3): failed to get link speed/duplex [ 278.930204][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 278.946837][T11212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1277'. [ 278.948960][T11212] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1277'. [ 279.050419][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 279.160142][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 279.433086][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 279.550179][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'. [ 279.573185][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 279.604761][T11221] validate_nla: 1 callbacks suppressed [ 279.604811][T11221] netlink: 'syz.3.1281': attribute type 2 has an invalid length. [ 279.604827][T11221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1281'. [ 279.680977][ T6524] bond9: (slave bridge3): failed to get link speed/duplex [ 279.989061][T11231] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 279.989088][T11231] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 280.343319][T11232] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1283'. [ 281.063969][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1292'. [ 281.339012][T11274] syz.3.1293: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 281.339268][T11274] CPU: 0 UID: 0 PID: 11274 Comm: syz.3.1293 Not tainted syzkaller #0 PREEMPT(full) [ 281.339314][T11274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.339327][T11274] Call Trace: [ 281.339334][T11274] [ 281.339343][T11274] dump_stack_lvl+0xe8/0x150 [ 281.339379][T11274] warn_alloc+0x24d/0x270 [ 281.339399][T11274] ? kasan_save_track+0x4f/0x80 [ 281.339421][T11274] ? kasan_save_track+0x3e/0x80 [ 281.339444][T11274] ? __pfx_warn_alloc+0x10/0x10 [ 281.339462][T11274] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 281.339489][T11274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.339531][T11274] __vmalloc_node_range_noprof+0x127/0x1540 [ 281.339585][T11274] ? rcu_is_watching+0x16/0xb0 [ 281.339616][T11274] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 281.339647][T11274] ? __kmalloc_cache_noprof+0x321/0x600 [ 281.339678][T11274] ? __kmalloc_cache_noprof+0x14d/0x600 [ 281.339698][T11274] ? xskq_create+0x56/0x220 [ 281.339724][T11274] xskq_create+0x148/0x220 [ 281.339745][T11274] ? xsk_init_queue+0x8a/0xe0 [ 281.339779][T11274] xsk_init_queue+0x8a/0xe0 [ 281.339832][T11274] xsk_setsockopt+0x52a/0x960 [ 281.339869][T11274] ? __pfx_xsk_setsockopt+0x10/0x10 [ 281.339902][T11274] ? __pfx_aa_sk_perm+0x10/0x10 [ 281.339941][T11274] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 281.339970][T11274] ? __pfx_xsk_setsockopt+0x10/0x10 [ 281.340006][T11274] do_sock_setsockopt+0x17c/0x1b0 [ 281.340039][T11274] __x64_sys_setsockopt+0x13d/0x1b0 [ 281.340073][T11274] do_syscall_64+0x166/0x520 [ 281.340097][T11274] ? trace_irq_disable+0x3b/0x140 [ 281.340119][T11274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.340142][T11274] ? clear_bhb_loop+0x70/0xc0 [ 281.340171][T11274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.340193][T11274] RIP: 0033:0x7f782199e159 [ 281.340224][T11274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.340243][T11274] RSP: 002b:00007f78227d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 281.340265][T11274] RAX: ffffffffffffffda RBX: 00007f7821c25fa0 RCX: 00007f782199e159 [ 281.340281][T11274] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 281.340294][T11274] RBP: 00007f7821a3503b R08: 0000000000000004 R09: 0000000000000000 [ 281.340308][T11274] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.340321][T11274] R13: 00007f7821c26038 R14: 00007f7821c25fa0 R15: 00007ffda70d8a58 [ 281.340374][T11274] [ 281.389173][T11274] Mem-Info: [ 281.389219][T11274] active_anon:5843 inactive_anon:0 isolated_anon:0 [ 281.389219][T11274] active_file:0 inactive_file:43299 isolated_file:0 [ 281.389219][T11274] unevictable:0 dirty:177 writeback:0 [ 281.389219][T11274] slab_reclaimable:10876 slab_unreclaimable:102650 [ 281.389219][T11274] mapped:29436 shmem:555 pagetables:1224 [ 281.389219][T11274] sec_pagetables:0 bounce:0 [ 281.389219][T11274] kernel_misc_reclaimable:0 [ 281.389219][T11274] free:1264930 free_pcp:10653 free_cma:0 [ 281.389926][T11274] Node 0 active_anon:23372kB inactive_anon:0kB active_file:0kB inactive_file:172992kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117744kB dirty:708kB writeback:0kB shmem:2220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13736kB pagetables:4768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 281.390038][T11274] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 281.390102][T11274] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.390439][T11274] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 281.390555][T11274] Node 0 DMA32 free:1100556kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23372kB inactive_anon:0kB active_file:0kB inactive_file:172992kB unevictable:0kB writepending:708kB zspages:0kB present:3129332kB managed:2546620kB mlocked:0kB bounce:0kB free_pcp:42612kB local_pcp:20744kB free_cma:0kB [ 281.390743][T11274] lowmem_reserve[]: 0 0 0 0 0 [ 281.390850][T11274] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.391010][T11274] lowmem_reserve[]: 0 0 0 0 0 [ 281.391113][T11274] Node 1 Normal free:3943804kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.397602][T11274] lowmem_reserve[]: 0 0 0 0 0 [ 281.397735][T11274] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 281.398133][T11274] Node 0 DMA32: 175*4kB (ME) 213*8kB (ME) 263*16kB (UME) 565*32kB (UM) 157*64kB (UME) 72*128kB (UME) 25*256kB (UM) 3*512kB (UME) 10*1024kB (UM) 7*2048kB (UM) 250*4096kB (UM) = 1100468kB [ 281.408355][T11274] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 281.526265][T11274] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 8*16kB (UM) 9*32kB (UM) 5*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943804kB [ 281.526856][T11274] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.527486][T11274] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 281.527537][T11274] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.527587][T11274] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 281.527661][T11274] 43850 total pagecache pages [ 281.527690][T11274] 0 pages in swap cache [ 281.527710][T11274] Free swap = 124996kB [ 281.527732][T11274] Total swap = 124996kB [ 281.527763][T11274] 2097051 pages RAM [ 281.527784][T11274] 0 pages HighMem/MovableOnly [ 281.527804][T11274] 428780 pages reserved [ 281.527824][T11274] 0 pages cma reserved [ 282.007596][T11274] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 282.366233][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1298'. [ 282.548458][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1301'. [ 282.782390][T11313] netlink: 'syz.0.1302': attribute type 1 has an invalid length. [ 282.888808][T11313] bond7: entered promiscuous mode [ 282.895892][T11313] 8021q: adding VLAN 0 to HW filter on device bond7 [ 282.949871][T11312] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1303'. [ 283.018524][T11313] 8021q: adding VLAN 0 to HW filter on device bond7 [ 283.027791][T11313] bond7: (slave ipip0): The slave device specified does not support setting the MAC address [ 283.027814][T11313] bond7: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 283.060154][T11313] bond7: (slave ipip0): making interface the new active one [ 283.060177][T11313] ipip0: entered promiscuous mode [ 283.091112][T11313] bond7: (slave ipip0): Enslaving as an active interface with an up link [ 283.230358][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.230384][ C1] bridge0: topology change detected, propagating [ 283.371506][ T1315] net_ratelimit: 28 callbacks suppressed [ 283.371530][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 283.480136][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 283.590641][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 283.733683][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 283.784071][T11351] IPv6: NLM_F_CREATE should be specified when creating new route [ 283.842612][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 283.869650][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.869677][ C1] bridge0: topology change detected, propagating [ 283.960348][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 283.970729][T11358] netlink: 'syz.0.1311': attribute type 10 has an invalid length. [ 284.006309][T11358] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1311'. [ 284.070169][ T6524] bond9: (slave bridge3): failed to get link speed/duplex [ 284.072374][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1311'. [ 284.181586][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 284.290249][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 284.403669][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 284.509541][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 284.510816][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 284.740726][T11393] geneve3: entered promiscuous mode [ 284.740751][T11393] geneve3: entered allmulticast mode [ 285.244296][T11420] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1325'. [ 285.244327][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 285.244355][T11420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1325'. [ 285.244372][T11420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1325'. [ 285.303466][T11422] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1325'. [ 285.305650][T11421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1326'. [ 285.605646][T11434] netlink: 'syz.0.1330': attribute type 8 has an invalid length. [ 285.810925][T11447] netlink: 'syz.0.1331': attribute type 10 has an invalid length. [ 285.932184][T11442] syzkaller0: entered promiscuous mode [ 285.932211][T11442] syzkaller0: entered allmulticast mode [ 285.980744][T11438] netlink: 'syz.2.1327': attribute type 1 has an invalid length. [ 286.360992][T11426] vti0: entered promiscuous mode [ 286.361020][T11426] vti0: entered allmulticast mode [ 288.698622][T11494] netlink: 'syz.1.1335': attribute type 2 has an invalid length. [ 288.703118][ T1315] net_ratelimit: 5 callbacks suppressed [ 288.703171][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 288.810212][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 288.846817][T11498] netlink: 'syz.3.1336': attribute type 11 has an invalid length. [ 288.926215][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 289.033155][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 289.141632][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 289.211732][T11524] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1338'. [ 289.330607][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 289.440613][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 289.459808][T11531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1343'. [ 289.460059][T11531] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.460361][T11531] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.498492][T11526] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 289.498524][T11526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.581914][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 289.716228][T11543] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1347'. [ 290.676007][T11592] netlink: 'syz.4.1358': attribute type 10 has an invalid length. [ 290.678052][T11591] netlink: 'syz.2.1357': attribute type 10 has an invalid length. [ 290.866028][T11595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1359'. [ 290.881984][T11596] netlink: 'syz.1.1359': attribute type 4 has an invalid length. [ 291.192499][T11602] netlink: 'syz.1.1361': attribute type 4 has an invalid length. [ 291.586071][T11609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1364'. [ 291.960111][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1366'. [ 292.224580][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1372'. [ 292.247584][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1372'. [ 292.376092][T11649] IPVS: set_ctl: invalid protocol: 108 100.1.1.2:20004 [ 292.633241][T11660] netlink: 'syz.4.1375': attribute type 10 has an invalid length. [ 292.685275][T11662] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 292.725001][T11662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1376'. [ 292.727037][T11662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1376'. [ 295.402384][T11676] __nla_validate_parse: 3 callbacks suppressed [ 295.402408][T11676] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1380'. [ 295.430255][ T6526] net_ratelimit: 29 callbacks suppressed [ 295.430276][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 295.545836][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 295.660336][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 295.782815][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 295.891082][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 296.001989][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 296.178976][T11710] netlink: 'syz.3.1390': attribute type 10 has an invalid length. [ 296.310883][T11710] team0 (unregistering): Port device team_slave_0 removed [ 296.316083][T11710] team0 (unregistering): Port device team_slave_1 removed [ 296.381486][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'. [ 296.402361][T11716] netlink: 'syz.4.1394': attribute type 210 has an invalid length. [ 296.470488][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 296.498088][T11720] Bluetooth: MGMT ver 1.23 [ 296.499034][T11720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1396'. [ 296.499055][T11720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1396'. [ 296.524602][T11721] netlink: 'syz.0.1396': attribute type 30 has an invalid length. [ 296.779535][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 296.900402][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 297.011864][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 297.029816][T11739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1401'. [ 297.253895][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1404'. [ 297.331142][T11740] tipc: Resetting bearer [ 297.434103][T11757] bridge0: port 1(vlan2) entered blocking state [ 297.434281][T11757] bridge0: port 1(vlan2) entered disabled state [ 297.434422][T11757] vlan2: entered allmulticast mode [ 297.434506][T11757] geneve0: entered allmulticast mode [ 297.628682][T11766] bond14: entered allmulticast mode [ 297.660345][T11766] macvlan2: entered promiscuous mode [ 297.660370][T11766] macvlan2: entered allmulticast mode [ 297.662579][T11766] bond14: (slave macvlan2): Opening slave failed [ 297.914293][T11775] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 297.914343][T11775] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 297.917226][T11776] netlink: 'syz.2.1408': attribute type 10 has an invalid length. [ 298.151489][T11789] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1410'. [ 298.958854][T11827] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1421'. [ 298.973575][T11827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1421'. [ 299.169834][T11836] syzkaller1: entered promiscuous mode [ 299.169858][T11836] syzkaller1: entered allmulticast mode [ 299.195443][T11836] netlink: 'syz.3.1420': attribute type 5 has an invalid length. [ 299.228295][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'. [ 299.405499][T11845] netlink: 'syz.1.1424': attribute type 16 has an invalid length. [ 299.405524][T11845] netlink: 'syz.1.1424': attribute type 17 has an invalid length. [ 299.507171][T11845] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.507311][T11845] bridge0: port 2(bridge_slave_1) entered listening state [ 299.507626][T11845] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.507757][T11845] bridge0: port 1(bridge_slave_0) entered listening state [ 299.869460][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.869484][ C0] bridge0: topology change detected, propagating [ 299.869765][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.869783][ C0] bridge0: topology change detected, propagating [ 299.956536][T11861] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 300.002043][T11864] ±ÿ: renamed from lo (while UP) [ 300.481310][ T1315] net_ratelimit: 30 callbacks suppressed [ 300.481334][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 300.592045][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 300.701290][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 300.725605][T11901] __nla_validate_parse: 2 callbacks suppressed [ 300.725625][T11901] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1437'. [ 300.822976][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 300.931197][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 300.970390][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1439'. [ 301.050455][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 301.210518][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 301.285830][T11929] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 301.322403][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 301.442544][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 301.625066][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 301.809749][T11950] x_tables: duplicate underflow at hook 1 [ 301.862298][T11951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1448'. [ 302.631947][T11959] netlink: 'syz.4.1451': attribute type 62 has an invalid length. [ 302.644947][T11959] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1451'. [ 302.720739][T11965] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1454'. [ 303.101765][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1457'. [ 303.103047][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1457'. [ 303.378879][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 303.666652][T11990] bond15: entered promiscuous mode [ 303.677963][T11990] 8021q: adding VLAN 0 to HW filter on device bond15 [ 303.804509][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1461'. [ 304.175596][T12015] netlink: 'syz.1.1463': attribute type 1 has an invalid length. [ 304.175883][T12016] netlink: 'syz.1.1463': attribute type 1 has an invalid length. [ 304.922862][ T6526] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 304.922928][ T6526] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 304.922966][ T6526] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 304.923003][ T6526] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 305.479756][T12055] Cannot find del_set index 4 as target [ 305.498107][T12050] vlan0: entered promiscuous mode [ 305.530669][ T6526] net_ratelimit: 28 callbacks suppressed [ 305.530692][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 305.813187][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 305.891543][T12063] __nla_validate_parse: 11 callbacks suppressed [ 305.891567][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1474'. [ 305.898244][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802599b800: rx timeout, send abort [ 305.903196][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025998400: rx timeout, send abort [ 305.904247][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802599b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 305.904387][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025998400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 306.011279][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 306.050228][T12073] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1476'. [ 306.121494][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 306.231909][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 306.350257][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 306.467841][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 306.569501][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 306.702941][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 306.704114][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1479'. [ 306.704195][T12089] bridge_slave_1: left allmulticast mode [ 306.704216][T12089] bridge_slave_1: left promiscuous mode [ 306.704471][T12089] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.706299][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1479'. [ 306.772344][T12089] bridge_slave_0: left promiscuous mode [ 306.773830][T12089] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.071018][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 307.218227][T12111] ipt_ah: unknown flags FF [ 307.631028][T12126] tipc: Enabling of bearer rejected, failed to enable media [ 308.178879][T12159] caif0: tun_chr_ioctl cmd 2147767507 [ 308.283980][T12168] netlink: 'syz.2.1493': attribute type 4 has an invalid length. [ 308.285295][T12171] netlink: 'syz.2.1493': attribute type 4 has an invalid length. [ 308.381392][T12166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1492'. [ 308.401654][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'. [ 308.401694][T12169] netlink: 'syz.2.1493': attribute type 5 has an invalid length. [ 308.401725][T12169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'. [ 308.453026][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'. [ 308.453063][T12168] netlink: 'syz.2.1493': attribute type 5 has an invalid length. [ 308.453078][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'. [ 308.575279][T12177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1494'. [ 309.048400][T12205] Cannot find add_set index 0 as target [ 309.613521][T12223] macsec1: entered promiscuous mode [ 310.579858][T12263] netlink: 'syz.0.1510': attribute type 10 has an invalid length. [ 310.621837][T12263] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 310.642628][ T1102] net_ratelimit: 28 callbacks suppressed [ 310.642688][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 310.751788][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 310.826901][T12277] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 310.842746][T12277] sctp: [Deprecated]: syz.4.1514 (pid 12277) Use of int in max_burst socket option. [ 310.842746][T12277] Use struct sctp_assoc_value instead [ 310.866321][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 310.937052][T12279] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 310.968603][T12279] bond8 (unregistering): Released all slaves [ 311.170724][T12280] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 311.454994][T12280] bond8 (unregistering): Released all slaves [ 311.578936][T12290] tipc: Started in network mode [ 311.578971][T12290] tipc: Node identity 0aba3c583e4a, cluster identity 4711 [ 311.579253][T12290] tipc: Enabled bearer , priority 0 [ 311.617871][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 311.651942][T12287] tipc: Resetting bearer [ 311.652850][T12293] syzkaller0: entered promiscuous mode [ 311.652872][T12293] syzkaller0: entered allmulticast mode [ 311.721649][ T6524] bond9: (slave bridge3): failed to get link speed/duplex [ 311.831937][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 311.848657][T12286] tipc: Resetting bearer [ 311.907131][T12286] tipc: Disabling bearer [ 311.918683][T12315] netlink: 'syz.1.1519': attribute type 1 has an invalid length. [ 311.941168][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 312.050996][ T6524] bond9: (slave bridge3): failed to get link speed/duplex [ 312.160730][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 312.658940][T12349] __nla_validate_parse: 5 callbacks suppressed [ 312.658963][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1530'. [ 312.687796][ T32] audit: type=1800 audit(1789329851.657:7): pid=12351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1531" name="memory.events" dev="tmpfs" ino=1639 res=0 errno=0 [ 312.717189][ T32] audit: type=1804 audit(1789329851.687:8): pid=12352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1531" name="/newroot/317/memory.events" dev="tmpfs" ino=1639 res=1 errno=0 [ 312.996985][T12367] ipt_REJECT: TCP_RESET invalid for non-tcp [ 313.031071][T12370] x_tables: unsorted entry at hook 2 [ 313.045921][T12369] syzkaller0: entered promiscuous mode [ 313.045942][T12369] syzkaller0: entered allmulticast mode [ 313.048461][T12367] netlink: 'syz.0.1534': attribute type 1 has an invalid length. [ 313.479668][T12388] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1541'. [ 313.967506][T12414] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1550'. [ 313.981188][T12412] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1550'. [ 314.003714][T12412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1550'. [ 314.003752][T12412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1550'. [ 314.003972][T12412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1550'. [ 314.215630][T12427] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 314.215690][T12427] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 314.215734][T12427] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 314.283704][T12427] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 314.355231][T12427] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 315.057336][T12444] netlink: 'syz.1.1558': attribute type 1 has an invalid length. [ 315.184646][T12450] netlink: 'syz.1.1558': attribute type 11 has an invalid length. [ 315.224692][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1559'. [ 315.624905][T12472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 315.627696][T12472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 315.690468][ T1315] net_ratelimit: 22 callbacks suppressed [ 315.690491][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 315.800324][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 315.923526][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 316.031109][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 316.160654][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 316.224230][T12499] x_tables: duplicate underflow at hook 2 [ 316.291941][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 316.312515][T12465] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 316.400572][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 316.449151][T12510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.512403][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 316.660569][ T6526] bond9: (slave bridge3): failed to get link speed/duplex [ 316.798897][T12524] macvlan0: entered promiscuous mode [ 316.799129][T12524] macvlan0: entered allmulticast mode [ 316.964486][T12519] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 316.978993][T12519] virtio_blk virtio5: [vdb] 262144 512-byte logical blocks (134 MB/128 MiB) [ 317.118906][T12536] xt_hashlimit: invalid rate [ 317.153818][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.446795][T12545] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.550208][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 317.675513][T12554] __nla_validate_parse: 5 callbacks suppressed [ 317.675536][T12554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1587'. [ 317.694417][T12553] netlink: 564 bytes leftover after parsing attributes in process `syz.3.1588'. [ 317.773003][T12553] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 317.869086][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1589'. [ 318.225425][T12572] veth0_virt_wifi: entered promiscuous mode [ 318.228716][T12572] veth0_virt_wifi: left promiscuous mode [ 318.376043][T12551] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 318.454473][T12575] netlink: 'syz.4.1593': attribute type 16 has an invalid length. [ 318.454498][T12575] netlink: 'syz.4.1593': attribute type 17 has an invalid length. [ 318.529572][T12575] bridge1: port 1(erspan0) entered blocking state [ 318.529697][T12575] bridge1: port 1(erspan0) entered forwarding state [ 318.572982][T12575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.593612][T12575] bridge0: port 3(veth0) entered blocking state [ 318.593732][T12575] bridge0: port 3(veth0) entered forwarding state [ 318.635394][T12575] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.635547][T12575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.656083][T12575] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.656218][T12575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.706738][T12575] vlan0: left promiscuous mode [ 318.740551][T12575] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 318.740583][T12575] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 318.878025][T12582] syzkaller0: entered promiscuous mode [ 318.878054][T12582] syzkaller0: entered allmulticast mode [ 318.898417][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 319.100416][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'. [ 321.017080][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1599'. [ 321.589811][ T1315] net_ratelimit: 20 callbacks suppressed [ 321.589843][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 321.701256][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 321.762599][T12612] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1600'. [ 321.763513][T12612] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 321.815976][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 321.930243][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 321.958329][T12627] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 322.041536][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 322.047624][T12633] netlink: 'syz.4.1604': attribute type 10 has an invalid length. [ 322.154608][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 322.273985][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 322.381122][ T6524] bond9: (slave bridge3): failed to get link speed/duplex [ 322.490438][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 322.694365][T12642] bond8: option mode: invalid value (7) [ 322.708462][T12642] bond8 (unregistering): Released all slaves [ 322.814468][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1611'. [ 322.921851][T12648] syzkaller0: entered promiscuous mode [ 322.921879][T12648] syzkaller0: entered allmulticast mode [ 322.927660][T12669] netlink: 2136 bytes leftover after parsing attributes in process `syz.1.1613'. [ 323.002827][T12648] dvmrp8: left allmulticast mode [ 323.497198][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1619'. [ 323.552662][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1619'. [ 326.168895][T12724] netlink: 'syz.0.1624': attribute type 10 has an invalid length. [ 326.218175][T12719] netlink: 'syz.4.1627': attribute type 7 has an invalid length. [ 326.218200][T12719] netlink: 'syz.4.1627': attribute type 8 has an invalid length. [ 326.447258][T12746] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1629'. [ 326.447289][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 326.652084][ T7581] net_ratelimit: 7 callbacks suppressed [ 326.652135][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 326.881322][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 327.024579][T12777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1635'. [ 327.065672][T12776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1636'. [ 327.092957][T12776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1636'. [ 327.285106][T12777] bridge1: port 1(erspan0) entered disabled state [ 327.378225][T12793] netlink: 'syz.0.1639': attribute type 10 has an invalid length. [ 327.532579][T12777] bridge0: port 3(veth0) entered disabled state [ 327.533292][T12777] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.533869][T12777] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.139458][T12806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1640'. [ 328.222232][T12777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.249826][T12777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.540640][ T59] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.540682][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.540754][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 328.541297][ T59] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.541329][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.541371][ T59] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.541399][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.541438][ T59] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.541466][ T59] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.646861][T12817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1642'. [ 328.673559][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 328.780638][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 328.891011][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 329.060487][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 329.175334][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 329.281155][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 329.435005][T12847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1651'. [ 329.630766][ T6524] bond9: (slave bridge3): failed to get link speed/duplex [ 329.665397][T12856] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 329.665428][T12856] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 329.934462][ T32] audit: type=1804 audit(1789329868.907:9): pid=12865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1655" name="/newroot/342/cgroup.controllers" dev="tmpfs" ino=1768 res=1 errno=0 [ 329.936723][ T32] audit: type=1800 audit(1789329868.907:10): pid=12865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1655" name="cgroup.controllers" dev="tmpfs" ino=1768 res=0 errno=0 [ 329.943997][T12862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1654'. [ 330.008509][T12865] unsupported nlmsg_type 40 [ 330.081774][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 330.122327][T12872] syzkaller0: entered promiscuous mode [ 330.122353][T12872] syzkaller0: entered allmulticast mode [ 330.218568][T12872] batman_adv: batadv0: Adding interface: syzkaller0 [ 330.218587][T12872] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.218621][T12872] batman_adv: batadv0: Interface activated: syzkaller0 [ 330.382273][T12869] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 330.495972][T12869] batman_adv: batadv0: Removing interface: syzkaller0 [ 330.546673][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.546697][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.662617][T12893] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 330.685667][T12888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1662'. [ 331.006133][T12907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1665'. [ 331.392804][T12918] sock: sock_timestamping_bind_phc: sock not bind to device [ 331.392878][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'. [ 331.660431][ T6522] net_ratelimit: 14 callbacks suppressed [ 331.660463][ T6522] bond9: (slave bridge3): failed to get link speed/duplex [ 331.711402][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 331.714488][T12939] ip_tables: iptables: counters copy to user failed while replacing table [ 331.773053][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 332.100364][ T12] bond9: (slave bridge3): failed to get link speed/duplex [ 332.210642][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 332.320113][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 332.489860][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 332.604684][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 332.666608][T12973] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1682'. [ 332.860904][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 335.190201][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 335.670779][T13027] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 335.670812][T13027] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 335.673305][T13032] syz.0.1698: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 335.673379][T13032] CPU: 0 UID: 0 PID: 13032 Comm: syz.0.1698 Not tainted syzkaller #0 PREEMPT(full) [ 335.673405][T13032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 335.673419][T13032] Call Trace: [ 335.673428][T13032] [ 335.673438][T13032] dump_stack_lvl+0xe8/0x150 [ 335.673477][T13032] warn_alloc+0x24d/0x270 [ 335.673501][T13032] ? kasan_save_track+0x4f/0x80 [ 335.673524][T13032] ? kasan_save_track+0x3e/0x80 [ 335.673552][T13032] ? __pfx_warn_alloc+0x10/0x10 [ 335.673571][T13032] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 335.673601][T13032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.673652][T13032] __vmalloc_node_range_noprof+0x127/0x1540 [ 335.673712][T13032] ? rcu_is_watching+0x16/0xb0 [ 335.673747][T13032] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 335.673786][T13032] ? __kmalloc_cache_noprof+0x321/0x600 [ 335.673809][T13032] ? __kmalloc_cache_noprof+0x14d/0x600 [ 335.673831][T13032] ? xskq_create+0x56/0x220 [ 335.673859][T13032] xskq_create+0x148/0x220 [ 335.673880][T13032] ? xsk_init_queue+0x8a/0xe0 [ 335.673918][T13032] xsk_init_queue+0x8a/0xe0 [ 335.673961][T13032] xsk_setsockopt+0x52a/0x960 [ 335.673999][T13032] ? __pfx_xsk_setsockopt+0x10/0x10 [ 335.674039][T13032] ? __pfx_aa_sk_perm+0x10/0x10 [ 335.674077][T13032] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 335.674106][T13032] ? __pfx_xsk_setsockopt+0x10/0x10 [ 335.674168][T13032] do_sock_setsockopt+0x17c/0x1b0 [ 335.674202][T13032] __x64_sys_setsockopt+0x13d/0x1b0 [ 335.674237][T13032] do_syscall_64+0x166/0x520 [ 335.674262][T13032] ? trace_irq_disable+0x3b/0x140 [ 335.674285][T13032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.674308][T13032] ? clear_bhb_loop+0x70/0xc0 [ 335.674338][T13032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.674362][T13032] RIP: 0033:0x7faa05d9e159 [ 335.674383][T13032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.674408][T13032] RSP: 002b:00007faa06ccb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 335.674432][T13032] RAX: ffffffffffffffda RBX: 00007faa06025fa0 RCX: 00007faa05d9e159 [ 335.674449][T13032] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000042 [ 335.674463][T13032] RBP: 00007faa05e3503b R08: 0000000000000004 R09: 0000000000000000 [ 335.674477][T13032] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.674492][T13032] R13: 00007faa06026038 R14: 00007faa06025fa0 R15: 00007fff330510c8 [ 335.674529][T13032] [ 335.674567][T13032] Mem-Info: [ 335.674578][T13032] active_anon:5933 inactive_anon:0 isolated_anon:0 [ 335.674578][T13032] active_file:0 inactive_file:43321 isolated_file:0 [ 335.674578][T13032] unevictable:0 dirty:42 writeback:0 [ 335.674578][T13032] slab_reclaimable:10925 slab_unreclaimable:104916 [ 335.674578][T13032] mapped:29552 shmem:526 pagetables:1264 [ 335.674578][T13032] sec_pagetables:0 bounce:0 [ 335.674578][T13032] kernel_misc_reclaimable:0 [ 335.674578][T13032] free:1222997 free_pcp:9453 free_cma:0 [ 335.674637][T13032] Node 0 active_anon:23732kB inactive_anon:0kB active_file:0kB inactive_file:173080kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118208kB dirty:168kB writeback:0kB shmem:2104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13944kB pagetables:4928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 335.674699][T13032] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 335.674759][T13032] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.674823][T13032] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 335.696716][T13032] Node 0 DMA32 free:932824kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23632kB inactive_anon:0kB active_file:0kB inactive_file:173080kB unevictable:0kB writepending:168kB zspages:0kB present:3129332kB managed:2546620kB mlocked:0kB bounce:0kB free_pcp:37924kB local_pcp:22024kB free_cma:0kB [ 335.696893][T13032] lowmem_reserve[]: 0 0 0 0 0 [ 335.696998][T13032] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.697236][T13032] lowmem_reserve[]: 0 0 0 0 0 [ 335.697352][T13032] Node 1 Normal free:3943804kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.697511][T13032] lowmem_reserve[]: 0 0 0 0 0 [ 335.697621][T13032] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 335.698002][T13032] Node 0 DMA32: 1176*4kB (UM) 695*8kB (UME) 246*16kB (UM) 219*32kB (UME) 128*64kB (UME) 52*128kB (UM) 13*256kB (UME) 5*512kB (UME) 12*1024kB (UME) 5*2048kB (ME) 212*4096kB (UM) = 932824kB [ 335.751874][T13032] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 335.751987][T13032] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 8*16kB (UM) 9*32kB (UM) 5*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943804kB [ 335.752441][T13032] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.752493][T13032] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 335.752543][T13032] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.752588][T13032] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 335.752636][T13032] 43843 total pagecache pages [ 335.752658][T13032] 0 pages in swap cache [ 335.752679][T13032] Free swap = 124996kB [ 335.752701][T13032] Total swap = 124996kB [ 335.752730][T13032] 2097051 pages RAM [ 335.752783][T13032] 0 pages HighMem/MovableOnly [ 335.752805][T13032] 428780 pages reserved [ 335.752826][T13032] 0 pages cma reserved [ 336.385848][T13049] __nla_validate_parse: 62 callbacks suppressed [ 336.385871][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1699'. [ 336.385942][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1699'. [ 336.671268][ T7581] net_ratelimit: 7 callbacks suppressed [ 336.671293][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 336.780197][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 336.827372][T13071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1707'. [ 336.828039][T13072] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1707'. [ 336.943979][ T13] bond9: (slave bridge3): failed to get link speed/duplex [ 337.050082][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 337.171262][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 337.280480][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 337.379276][T13096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1714'. [ 337.380255][T13095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1714'. [ 337.470513][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 337.685716][T13112] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1717'. [ 337.742262][ T6522] bond9: (slave bridge3): failed to get link speed/duplex [ 337.861638][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 337.974216][T13106] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.034207][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 338.342794][T13134] veth0: entered promiscuous mode [ 338.344260][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'. [ 338.365557][T13133] veth0: left promiscuous mode [ 338.415746][T13135] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 338.417208][T13135] netlink: 'syz.4.1719': attribute type 39 has an invalid length. [ 338.417566][T13140] netlink: 'syz.4.1719': attribute type 39 has an invalid length. [ 338.605998][T13150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1722'. [ 338.632233][T13152] netlink: 'syz.1.1723': attribute type 9 has an invalid length. [ 338.879088][T13154] bond0: entered promiscuous mode [ 338.879116][T13154] bond_slave_0: entered promiscuous mode [ 338.892489][T13154] bond_slave_1: entered promiscuous mode [ 338.892708][T13154] veth0_to_bond: entered promiscuous mode [ 338.898771][T13154] batadv0: entered promiscuous mode [ 338.929596][T13156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1724'. [ 338.934622][T13154] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 338.958638][T13154] bond0: left promiscuous mode [ 338.958665][T13154] bond_slave_0: left promiscuous mode [ 338.958851][T13154] bond_slave_1: left promiscuous mode [ 338.958994][T13154] veth0_to_bond: left promiscuous mode [ 338.991228][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 338.992088][T13154] batadv0: left promiscuous mode [ 339.170155][T13165] Bluetooth: MGMT ver 1.23 [ 340.378964][T13213] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 340.680411][T13213] bond11 (unregistering): Released all slaves [ 340.986393][T13234] dvmrp0: left allmulticast mode [ 341.443998][T13257] __nla_validate_parse: 4 callbacks suppressed [ 341.444021][T13257] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1746'. [ 341.444292][T13256] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1746'. [ 341.717100][T13265] syzkaller0: entered promiscuous mode [ 341.717125][T13265] syzkaller0: entered allmulticast mode [ 341.736698][T13265] net_ratelimit: 25 callbacks suppressed [ 341.736718][T13265] IPVS: lc: FWM 3 0x00000003 - no destination available [ 341.751769][ T12] IPVS: starting estimator thread 0... [ 341.760191][ T12] bond9: (slave bridge3): failed to get link speed/duplex [ 341.840131][T13270] IPVS: using max 24 ests per chain, 57600 per kthread [ 341.869587][ T6522] bond9: (slave bridge3): failed to get link speed/duplex [ 341.977376][T13274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1749'. [ 342.131686][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 342.399611][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 342.454158][T13278] netlink: 'syz.2.1750': attribute type 1 has an invalid length. [ 342.616443][T13278] bond11: option mode: invalid value (7) [ 342.641887][T13278] bond11 (unregistering): Released all slaves [ 342.696834][T13287] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1752'. [ 342.838270][T13292] : renamed from dummy0 [ 343.040569][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 343.152838][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 343.226392][T13309] nbd: must specify a size in bytes for the device [ 343.273895][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 343.380548][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 343.490300][ T6522] bond9: (slave bridge3): failed to get link speed/duplex [ 343.520934][T13316] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1759'. [ 343.595677][T13317] macvlan0: left promiscuous mode [ 343.674691][T13317] vti0: left promiscuous mode [ 343.685327][T13317] 8021q: adding VLAN 0 to HW filter on device bond7 [ 343.687409][T13317] 8021q: adding VLAN 0 to HW filter on device bond8 [ 343.713441][T13317] 8021q: adding VLAN 0 to HW filter on device bond9 [ 343.715298][T13317] 8021q: adding VLAN 0 to HW filter on device bond10 [ 344.117221][T13334] xt_TCPMSS: Only works on TCP SYN packets [ 344.401311][T13343] netlink: 'syz.4.1764': attribute type 1 has an invalid length. [ 345.244861][T13343] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 345.376460][T13348] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1765'. [ 345.542983][T13350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1765'. [ 345.546198][T13348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1765'. [ 345.685509][T13359] netlink: 'syz.2.1770': attribute type 6 has an invalid length. [ 345.685530][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1770'. [ 345.720676][T13359] netlink: 'syz.2.1770': attribute type 6 has an invalid length. [ 345.720698][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1770'. [ 345.953472][T13366] pim6reg1: entered promiscuous mode [ 345.953497][T13366] pim6reg1: entered allmulticast mode [ 346.020992][T13370] netlink: 'syz.2.1772': attribute type 22 has an invalid length. [ 346.085755][T13370] bridge3: entered allmulticast mode [ 346.722602][T13400] __nla_validate_parse: 3 callbacks suppressed [ 346.722624][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1781'. [ 346.819274][T13397] smbdirect: ib_dev[s`z1] removed [ 346.901152][ T50] net_ratelimit: 13 callbacks suppressed [ 346.901174][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 346.998609][T13409] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1782'. [ 347.063396][T13409] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1782'. [ 347.093403][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 347.200045][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 347.317028][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 347.419603][ T13] bond9: (slave bridge3): failed to get link speed/duplex [ 347.490717][T13434] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1787'. [ 347.492154][T13434] syzkaller0: entered promiscuous mode [ 347.492175][T13434] syzkaller0: entered allmulticast mode [ 347.494720][T13434] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1787'. [ 347.779808][T13445] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 347.841053][ T12] bond9: (slave bridge3): failed to get link speed/duplex [ 347.952812][ T12] bond9: (slave bridge3): failed to get link speed/duplex [ 348.060963][ T12] bond9: (slave bridge3): failed to get link speed/duplex [ 348.092224][T13445] xt_CT: No such helper "netbios-ns" [ 348.170794][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 348.280526][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 348.296795][T13456] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1790'. [ 348.311232][T13456] netlink: 'syz.0.1790': attribute type 2 has an invalid length. [ 348.311254][T13456] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1790'. [ 348.352427][T13456] : entered promiscuous mode [ 348.628740][T13464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1793'. [ 348.628800][T13464] tipc: Enabling of bearer rejected, failed to enable media [ 348.655858][T13464] netlink: 'syz.4.1793': attribute type 1 has an invalid length. [ 348.732768][T13464] bond2: entered promiscuous mode [ 348.736264][T13464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.826275][T13464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.826713][T13464] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 348.826736][T13464] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 348.863994][T13464] bond2: (slave gre1): making interface the new active one [ 348.864041][T13464] gre1: entered promiscuous mode [ 348.865786][T13464] bond2: (slave gre1): Enslaving as an active interface with an up link [ 349.160060][T13471] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1794'. [ 349.422731][T13487] netlink: 'syz.3.1797': attribute type 11 has an invalid length. [ 349.422758][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1797'. [ 349.515943][T13487] vxcan1: entered promiscuous mode [ 350.845873][T13529] sctp: [Deprecated]: syz.3.1807 (pid 13529) Use of int in max_burst socket option. [ 350.845873][T13529] Use struct sctp_assoc_value instead [ 351.474753][T13553] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 351.474805][T13553] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 351.821060][T13573] ipvlan4: entered allmulticast mode [ 351.823698][T13573] batman_adv: batadv0: Adding interface: ipvlan4 [ 351.823717][T13573] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.823749][T13573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: ipvlan2 [ 351.823789][T13573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.823804][T13573] batman_adv: batadv0: Interface activated: ipvlan4 [ 351.928553][T13573] ipvlan5: entered allmulticast mode [ 351.937096][T13573] batman_adv: batadv0: Adding interface: ipvlan5 [ 351.937117][T13573] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.937152][T13573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: ipvlan2 [ 351.937171][T13573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.937183][T13573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: ipvlan4 [ 351.937197][T13573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.937213][T13573] batman_adv: batadv0: Interface activated: ipvlan5 [ 351.983966][ T50] net_ratelimit: 27 callbacks suppressed [ 351.984020][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 352.060914][T13574] IPVS: persistence engine module ip_vs_pe_ not found [ 352.132329][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 352.241718][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 352.341760][T13595] __nla_validate_parse: 4 callbacks suppressed [ 352.342264][T13595] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1826'. [ 352.365457][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 352.470150][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 352.580967][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 352.663572][T13606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1828'. [ 352.691035][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 352.694566][T13607] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1828'. [ 352.812079][ T12] bond9: (slave bridge3): failed to get link speed/duplex [ 352.930129][ T12] bond9: (slave bridge3): failed to get link speed/duplex [ 353.025798][T13624] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 353.041315][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 353.921364][T13651] netlink: 'syz.0.1838': attribute type 11 has an invalid length. [ 353.924173][T13651] netlink: 'syz.0.1838': attribute type 11 has an invalid length. [ 353.924196][T13651] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1838'. [ 354.223587][T13665] sctp: [Deprecated]: syz.0.1841 (pid 13665) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.223587][T13665] Use struct sctp_sack_info instead [ 354.227559][T13661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1840'. [ 354.227615][T13661] bridge_slave_0: entered promiscuous mode [ 354.228072][T13661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1840'. [ 355.388062][T13686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1847'. [ 355.797069][ T52] block nbd1: Receive control failed (result -32) [ 355.797138][ T4931] block nbd1: Receive control failed (result -32) [ 355.955860][T13703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1852'. [ 356.065488][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 356.243210][T13718] netlink: 'syz.2.1856': attribute type 22 has an invalid length. [ 356.243236][T13718] netlink: 'syz.2.1856': attribute type 9 has an invalid length. [ 356.301343][T13721] netlink: 'syz.4.1857': attribute type 1 has an invalid length. [ 356.307581][T13723] netlink: 'syz.2.1856': attribute type 22 has an invalid length. [ 356.307604][T13723] netlink: 'syz.2.1856': attribute type 9 has an invalid length. [ 356.545435][T13729] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1858'. [ 356.659686][T13736] netlink: 'syz.0.1860': attribute type 2 has an invalid length. [ 356.991603][ T50] net_ratelimit: 34 callbacks suppressed [ 356.991627][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 357.100158][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 357.211326][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 357.319792][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 357.441303][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 359.687473][T13751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.802791][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 359.910628][ T12] bond9: (slave bridge3): failed to get link speed/duplex [ 360.020763][ T12] bond9: (slave bridge3): failed to get link speed/duplex [ 360.191014][T13784] __nla_validate_parse: 1 callbacks suppressed [ 360.191042][T13784] netlink: 89 bytes leftover after parsing attributes in process `syz.0.1874'. [ 360.279528][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 360.372552][T13785] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1873'. [ 360.452452][T13785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1873'. [ 360.452541][T13785] vlan2: left allmulticast mode [ 360.452558][T13785] geneve0: left allmulticast mode [ 360.452579][T13785] vlan2: left promiscuous mode [ 360.453024][T13785] bridge0: port 3(vlan2) entered disabled state [ 360.475566][T13785] bridge_slave_1: left allmulticast mode [ 360.475639][T13785] bridge_slave_1: left promiscuous mode [ 360.477246][T13785] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.514905][T13785] bridge_slave_0: left allmulticast mode [ 360.514935][T13785] bridge_slave_0: left promiscuous mode [ 360.518049][T13785] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.160921][T13805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1880'. [ 361.160964][T13805] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1880'. [ 361.255664][T13809] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1882'. [ 361.411226][T13817] geneve1: left promiscuous mode [ 361.411475][T13817] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 361.411507][T13817] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 361.485911][T13817] macsec1: left promiscuous mode [ 361.518972][T13817] vxcan1: left promiscuous mode [ 362.090932][ T12] net_ratelimit: 13 callbacks suppressed [ 362.090982][ T12] bond9: (slave bridge3): failed to get link speed/duplex [ 362.155871][T13844] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.203668][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 362.311762][ T12] bond9: (slave bridge3): failed to get link speed/duplex [ 362.422077][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 362.530704][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 362.640282][ T12] bond9: (slave bridge3): failed to get link speed/duplex [ 362.761002][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 362.881860][ T12] bond9: (slave bridge3): failed to get link speed/duplex [ 363.003761][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 363.120571][ T12] bond9: (slave bridge3): failed to get link speed/duplex [ 363.250214][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1895'. [ 363.360802][T13865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1896'. [ 363.857450][T13878] syzkaller1: entered promiscuous mode [ 363.857476][T13878] syzkaller1: entered allmulticast mode [ 364.283508][T13900] syzkaller0: entered promiscuous mode [ 364.283535][T13900] syzkaller0: entered allmulticast mode [ 364.460759][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1905'. [ 364.484063][T13914] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20004 [ 364.513943][T13914] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 364.553770][T13911] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 364.574872][T13917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.777315][T13926] bond11: option resend_igmp: invalid value (2878) [ 364.777343][T13926] bond11: option resend_igmp: allowed values 0 - 255 [ 364.793444][T13926] bond11 (unregistering): Released all slaves [ 364.806244][ T7581] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 364.828381][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1909'. [ 367.159488][ T1315] net_ratelimit: 186 callbacks suppressed [ 367.159514][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 367.269799][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 367.379936][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 367.490039][ T13] bond9: (slave bridge3): failed to get link speed/duplex [ 367.562956][T13919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.602278][ T13] bond9: (slave bridge3): failed to get link speed/duplex [ 367.830901][T13977] ip6t_srh: unknown srh invflags BA61 [ 367.850499][T13977] __nla_validate_parse: 1 callbacks suppressed [ 367.850520][T13977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1920'. [ 367.878543][T13973] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 367.878571][T13973] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 367.880680][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 367.930624][T13973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.990290][ T12] bond9: (slave bridge3): failed to get link speed/duplex [ 368.015384][T13990] ip6t_srh: unknown srh invflags BA61 [ 368.100089][ T12] bond9: (slave bridge3): failed to get link speed/duplex [ 368.210053][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 368.268682][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1920'. [ 368.285019][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1923'. [ 368.417533][T14006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1924'. [ 368.828238][T14017] syzkaller1: entered promiscuous mode [ 368.828262][T14017] syzkaller1: entered allmulticast mode [ 368.914255][T14032] netlink: 'syz.0.1928': attribute type 16 has an invalid length. [ 368.914279][T14032] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1928'. [ 368.989604][T14038] sctp: [Deprecated]: syz.2.1929 (pid 14038) Use of int in maxseg socket option. [ 368.989604][T14038] Use struct sctp_assoc_value instead [ 369.181066][T14044] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1931'. [ 369.214659][T14042] pim6reg1: entered promiscuous mode [ 369.214684][T14042] pim6reg1: entered allmulticast mode [ 369.654824][T14054] netlink: 'syz.0.1935': attribute type 21 has an invalid length. [ 369.786545][T14056] netlink: 'syz.3.1936': attribute type 1 has an invalid length. [ 369.786571][T14056] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1936'. [ 369.819402][T14056] bridge_slave_1: invalid flags given to default FDB implementation [ 369.873740][T14056] macsec2: entered allmulticast mode [ 369.873766][T14056] ip6gretap0: entered allmulticast mode [ 369.895627][T14056] ip6gretap0: left allmulticast mode [ 370.014104][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1937'. [ 370.214559][T14074] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1940'. [ 370.253874][T14071] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1937'. [ 370.301814][T14069] netlink: 'syz.4.1938': attribute type 1 has an invalid length. [ 370.368576][T14069] bond3: entered promiscuous mode [ 370.369067][T14069] 8021q: adding VLAN 0 to HW filter on device bond3 [ 371.210704][T14104] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 371.218569][T14104] batman_adv: batadv0: Adding interface: veth0 [ 371.218588][T14104] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 371.218631][T14104] batman_adv: batadv0: Interface activated: veth0 [ 371.258118][T14105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.271718][T14105] batman_adv: batadv0: Interface deactivated: veth0 [ 371.271853][T14105] batman_adv: batadv0: Removing interface: veth0 [ 371.566667][T14121] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 372.191049][ T1102] net_ratelimit: 28 callbacks suppressed [ 372.191071][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 372.299034][T14146] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 372.405279][T14147] syzkaller0: entered promiscuous mode [ 372.405304][T14147] syzkaller0: entered allmulticast mode [ 372.639223][T14131] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 372.639571][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 372.773589][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 372.880115][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 372.998214][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 373.099560][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 373.215034][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 373.326304][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 373.516423][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 373.620192][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 373.974911][T14229] __nla_validate_parse: 4 callbacks suppressed [ 373.974930][T14229] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1966'. [ 374.090329][T14238] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1968'. [ 374.148897][T14233] 8021q: adding VLAN 0 to HW filter on device bond11 [ 374.957671][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'. [ 374.957698][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1976'. [ 375.133450][T14281] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20004 [ 375.356353][T14286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1978'. [ 375.372543][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1978'. [ 375.854649][T14298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1981'. [ 375.875078][T14300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1981'. [ 375.875285][T14297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1981'. [ 376.188321][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1983'. [ 376.824011][T14330] netlink: 'syz.3.1986': attribute type 1 has an invalid length. [ 377.058493][T14330] bond5: entered promiscuous mode [ 377.065548][T14330] 8021q: adding VLAN 0 to HW filter on device bond5 [ 377.154013][T14333] 8021q: adding VLAN 0 to HW filter on device bond5 [ 377.155075][T14333] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 377.155132][T14333] bond5: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 377.250982][T14333] bond5: (slave gre1): making interface the new active one [ 377.251049][T14333] gre1: entered promiscuous mode [ 377.287888][T14333] bond5: (slave gre1): Enslaving as an active interface with an up link [ 377.416921][T14336] bond5 (unregistering): (slave gre1): Releasing backup interface [ 377.416988][T14336] gre1: left promiscuous mode [ 377.461853][T14336] bond5 (unregistering): Released all slaves [ 377.580185][ T59] net_ratelimit: 19 callbacks suppressed [ 377.580207][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 377.587454][T14333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.618047][T14354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.829183][T14354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.929078][T14360] nbd: socks must be embedded in a SOCK_ITEM attr [ 377.937027][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 378.041311][ T13] bond9: (slave bridge3): failed to get link speed/duplex [ 378.154594][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 378.260351][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 378.370240][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 378.480327][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 378.595077][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.620398][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 378.731383][ T13] bond9: (slave bridge3): failed to get link speed/duplex [ 378.839630][ T13] bond9: (slave bridge3): failed to get link speed/duplex [ 379.178192][T14394] __nla_validate_parse: 6 callbacks suppressed [ 379.178244][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2000'. [ 379.625866][T14410] sch_fq: defrate 0 ignored. [ 380.171578][ T4931] Bluetooth: hci4: connection err: -111 [ 380.297945][T14429] netlink: 'syz.3.2007': attribute type 6 has an invalid length. [ 380.692705][T14443] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2011'. [ 380.762079][T14443] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2011'. [ 380.762345][T14443] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2011'. [ 380.946924][T14458] sctp: [Deprecated]: syz.3.2014 (pid 14458) Use of int in max_burst socket option. [ 380.946924][T14458] Use struct sctp_assoc_value instead [ 381.064622][T14464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2016'. [ 381.868906][T14476] tipc: Resetting bearer [ 382.340111][T14487] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2020'. [ 382.771166][T10253] net_ratelimit: 30 callbacks suppressed [ 382.771191][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 382.881294][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 382.993620][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 383.074521][T14519] tc_dump_action: action bad kind [ 383.078658][T14530] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2028'. [ 383.099683][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 383.124477][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2028'. [ 383.214507][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 383.329659][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 383.440108][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 383.551006][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 383.787127][T14557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2034'. [ 383.956593][T14554] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2030'. [ 385.086062][T14561] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 385.219850][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 385.331877][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 385.637519][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.637545][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.747241][T14602] __nla_validate_parse: 1 callbacks suppressed [ 385.747285][T14602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2037'. [ 386.097797][T14620] ovs-s!: entered promiscuous mode [ 386.856729][T14644] tls_set_device_offload: netdev not found [ 387.118922][T14652] syzkaller1: entered promiscuous mode [ 387.118946][T14652] syzkaller1: entered allmulticast mode [ 387.847848][T14668] macvlan0: entered promiscuous mode [ 387.870406][ T150] net_ratelimit: 14 callbacks suppressed [ 387.870457][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 387.981711][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 388.091430][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 388.200712][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 388.310871][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 388.421534][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 388.530275][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 388.610266][T14694] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2058'. [ 388.639675][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 388.731734][T14698] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2058'. [ 388.762004][ T1315] bond9: (slave bridge3): failed to get link speed/duplex [ 388.870090][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 389.286645][T14717] netlink: 'syz.1.2059': attribute type 16 has an invalid length. [ 389.286669][T14717] netlink: 'syz.1.2059': attribute type 17 has an invalid length. [ 389.722797][T14715] tipc: Resetting bearer [ 389.736924][T14715] tipc: Resetting bearer [ 390.066546][ T4931] Bluetooth: hci4: link tx timeout [ 390.066571][ T4931] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 390.165335][T14734] tipc: Resetting bearer [ 390.265478][T14734] tipc: Enabling of bearer rejected, already enabled [ 390.381425][T14734] tipc: Resetting bearer [ 390.462002][T14760] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20001 [ 390.924475][T14779] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2074'. [ 391.012553][T14787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.038279][T14782] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2076'. [ 391.335789][T14787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.605487][T14808] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2082'. [ 391.606480][T14808] syzkaller1: entered promiscuous mode [ 391.606500][T14808] syzkaller1: entered allmulticast mode [ 391.675997][T14805] ±ÿ)”ëfl: renamed from lo (while UP) [ 391.694230][T14781] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 391.694262][T14781] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 391.753057][T14809] syzkaller1: entered promiscuous mode [ 391.753088][T14809] syzkaller1: entered allmulticast mode [ 391.773278][T14781] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 391.773320][T14781] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 391.805555][T14781] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 391.805596][T14781] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 391.974975][T14815] netlink: 'syz.0.2084': attribute type 3 has an invalid length. [ 391.974999][T14815] netlink: 646 bytes leftover after parsing attributes in process `syz.0.2084'. [ 392.110262][ T4931] Bluetooth: hci4: command 0x0405 tx timeout [ 392.156221][T14781] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 392.156283][T14781] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 392.325956][T14781] tipc: Resetting bearer [ 392.837797][T14839] netlink: 'syz.1.2089': attribute type 1 has an invalid length. [ 392.883251][T14839] 8021q: adding VLAN 0 to HW filter on device bond17 [ 392.901094][ T6057] net_ratelimit: 34 callbacks suppressed [ 392.901153][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 392.933433][T14839] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 392.956461][T14839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2089'. [ 392.987634][T14839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2089'. [ 393.026036][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 393.131095][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 393.241926][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 393.349631][ T13] bond9: (slave bridge3): failed to get link speed/duplex [ 393.391087][T14860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2095'. [ 393.463499][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 393.574038][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 393.670895][T14864] netlink: 'syz.4.2092': attribute type 1 has an invalid length. [ 393.741222][T14873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2092'. [ 393.804132][T14864] 8021q: adding VLAN 0 to HW filter on device bond4 [ 393.809869][T14880] xt_TPROXY: Can be used only with -p tcp or -p udp [ 393.817567][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 393.835728][T14879] xt_TPROXY: Can be used only with -p tcp or -p udp [ 393.838534][T14879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.852942][T14880] IPVS: set_ctl: invalid protocol: 50 172.20.20.11:20003 [ 393.866291][T14873] bond4: entered promiscuous mode [ 393.866313][T14873] bond4: entered allmulticast mode [ 394.001523][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 394.375438][T14891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2102'. [ 394.568883][T14897] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2103'. [ 395.574410][T14943] xt_hashlimit: size too large, truncated to 1048576 [ 396.054131][T14960] Cannot find del_set index 2 as target [ 396.115317][T14960] nbd3: detected capacity change from 0 to 127 [ 397.102597][T14960] __nla_validate_parse: 2 callbacks suppressed [ 397.102623][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2116'. [ 397.174454][T14997] IPVS: Error connecting to the multicast addr [ 397.305006][ T52] block nbd3: Receive control failed (result -104) [ 397.922576][T15012] netlink: 'syz.1.2125': attribute type 1 has an invalid length. [ 398.115462][T15012] bond18: entered promiscuous mode [ 398.118692][T15012] 8021q: adding VLAN 0 to HW filter on device bond18 [ 398.134734][ T27] net_ratelimit: 28 callbacks suppressed [ 398.134753][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 398.237391][T15025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2127'. [ 398.237451][T15025] nbd: must specify a size in bytes for the device [ 398.241230][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 398.351987][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 398.962320][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 399.088169][T15048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2132'. [ 399.219710][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 399.350193][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 399.461001][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 399.482302][ T2619] block nbd3: Connection timed out, retrying (0/1 alive) [ 399.482902][ T2619] block nbd3: Connection timed out, retrying (0/1 alive) [ 399.482980][ T2619] block nbd3: Connection timed out, retrying (0/1 alive) [ 399.483027][ T2619] block nbd3: Connection timed out, retrying (0/1 alive) [ 399.483465][ T2619] block nbd3: Dead connection, failed to find a fallback [ 399.483486][ T2619] block nbd3: shutting down sockets [ 399.483566][ T2619] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.483662][ T2619] Buffer I/O error on dev nbd3, logical block 3, async page read [ 399.483867][ T2619] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.483894][ T2619] Buffer I/O error on dev nbd3, logical block 2, async page read [ 399.483919][ T2619] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.483944][ T2619] Buffer I/O error on dev nbd3, logical block 1, async page read [ 399.483976][ T2619] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.484002][ T2619] Buffer I/O error on dev nbd3, logical block 0, async page read [ 399.487823][ T1695] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.487890][ T1695] Buffer I/O error on dev nbd3, logical block 0, async page read [ 399.488417][ T1695] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.488512][ T1695] Buffer I/O error on dev nbd3, logical block 1, async page read [ 399.488800][ T1695] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.488869][ T1695] Buffer I/O error on dev nbd3, logical block 2, async page read [ 399.489127][ T1695] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.489194][ T1695] Buffer I/O error on dev nbd3, logical block 3, async page read [ 399.497216][ T1695] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.497262][ T1695] Buffer I/O error on dev nbd3, logical block 0, async page read [ 399.498682][ T1695] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 399.498768][ T1695] Buffer I/O error on dev nbd3, logical block 1, async page read [ 399.556323][T14646] ldm_validate_partition_table(): Disk read failed. [ 399.570735][T14646] Dev nbd3: unable to read RDB block 0 [ 399.571731][ T13] bond9: (slave bridge3): failed to get link speed/duplex [ 399.681351][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 399.682061][T14646] nbd3: unable to read partition table [ 399.790311][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 399.809065][T14646] ldm_validate_partition_table(): Disk read failed. [ 399.849161][T14646] Dev nbd3: unable to read RDB block 0 [ 399.865362][T14646] nbd3: unable to read partition table [ 400.026463][T15061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2137'. [ 400.026490][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2137'. [ 400.173961][T15065] syzkaller0: entered promiscuous mode [ 400.173986][T15065] syzkaller0: entered allmulticast mode [ 400.455002][T15067] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2135'. [ 400.483862][T15080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2139'. [ 400.544233][T15084] netlink: 'syz.4.2142': attribute type 11 has an invalid length. [ 400.594392][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'. [ 400.967012][T15096] syzkaller0: entered promiscuous mode [ 400.967038][T15096] syzkaller0: entered allmulticast mode [ 400.987038][T15085] syzkaller1: entered promiscuous mode [ 400.987063][T15085] syzkaller1: entered allmulticast mode [ 402.105567][T15132] xt_hashlimit: size too large, truncated to 1048576 [ 404.424505][T15136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2151'. [ 404.473114][T10253] net_ratelimit: 10 callbacks suppressed [ 404.473158][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 404.566493][T15148] syzkaller0: left promiscuous mode [ 404.566519][T15148] syzkaller0: left allmulticast mode [ 404.680855][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 404.784204][T15155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2154'. [ 404.826187][T15158] syzkaller1: entered promiscuous mode [ 404.826215][T15158] syzkaller1: entered allmulticast mode [ 404.849713][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 404.905356][T15158] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2158'. [ 404.905421][T15158] openvswitch: netlink: Message has 512 unknown bytes. [ 404.964176][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 404.969749][T15158] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 404.969811][T15158] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 405.033845][T15159] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2154'. [ 405.073660][ T13] bond9: (slave bridge3): failed to get link speed/duplex [ 405.426029][T15179] macsec1: entered promiscuous mode [ 405.436876][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 405.541331][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 405.650220][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 405.657540][T15187] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2157'. [ 405.765249][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 407.103750][T15222] No such timeout policy "syz1" [ 408.122683][T15254] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2170'. [ 408.122867][T15251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2171'. [ 408.122910][T15251] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2171'. [ 408.122967][T15251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2171'. [ 408.313661][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2172'. [ 408.783905][T15277] netlink: 'syz.3.2180': attribute type 1 has an invalid length. [ 408.827307][T15277] veth5: entered allmulticast mode [ 408.942095][T15284] bond0: (slave veth0_to_bond): Releasing backup interface [ 409.509823][ T27] net_ratelimit: 29 callbacks suppressed [ 409.509886][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 409.632021][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 409.739829][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 409.744610][T15309] __nla_validate_parse: 6 callbacks suppressed [ 409.744651][T15309] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2185'. [ 409.850802][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 409.933224][T15313] ip_tables: iptables: counters copy to user failed while replacing table [ 409.981204][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 410.090945][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 410.202598][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 410.387346][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2191'. [ 410.387409][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2191'. [ 410.958560][T15348] xt_IDLETIMER: timeout value is too big [ 411.209203][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2196'. [ 411.243931][T15358] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2197'. [ 411.245462][T15358] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2197'. [ 411.249517][T15358] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2197'. [ 411.249621][T15358] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2197'. [ 411.557083][T15332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.245695][T15350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2195'. [ 412.456284][T15355] 8021q: adding VLAN 0 to HW filter on device bond12 [ 412.491287][T15356] ipvlan0: entered promiscuous mode [ 412.492878][T15356] ipvlan0: left promiscuous mode [ 412.525437][ T6057] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.525480][ T6057] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.525549][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 412.526328][ T27] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.526361][ T27] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.526404][ T27] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.526434][ T27] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.526475][ T27] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.526505][ T27] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.597961][T15371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2200'. [ 412.630637][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 412.852096][T15375] syzkaller0: entered promiscuous mode [ 412.852124][T15375] syzkaller0: entered allmulticast mode [ 414.600457][ T6057] net_ratelimit: 14 callbacks suppressed [ 414.600515][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 414.710117][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 414.778028][T15447] __nla_validate_parse: 3 callbacks suppressed [ 414.778086][T15447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2213'. [ 414.778126][T15447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2213'. [ 414.778162][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2213'. [ 414.942400][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 415.031216][T15458] netlink: 1335 bytes leftover after parsing attributes in process `syz.3.2215'. [ 415.061559][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 415.171425][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 415.281288][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 415.392750][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 415.500463][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 415.610256][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 415.672105][T15473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2219'. [ 415.672234][T15473] openvswitch: netlink: Message has 4 unknown bytes. [ 415.985476][T15478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2221'. [ 416.277642][T15490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2222'. [ 416.614380][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2229'. [ 416.635617][T15516] netlink: 'syz.2.2229': attribute type 34 has an invalid length. [ 416.635641][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2229'. [ 416.663936][T15512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2230'. [ 416.782324][T15516] bond13: option lacp_strict: invalid value (16) [ 416.784256][T15516] bond13 (unregistering): Released all slaves [ 417.178022][T15532] netlink: 'syz.3.2233': attribute type 1 has an invalid length. [ 417.313232][T15539] netlink: 'syz.1.2235': attribute type 1 has an invalid length. [ 417.426253][T15539] bond19: entered promiscuous mode [ 417.427395][T15539] 8021q: adding VLAN 0 to HW filter on device bond19 [ 417.465019][T15551] netlink: 'syz.3.2238': attribute type 21 has an invalid length. [ 417.811420][T15563] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 417.817676][T15551] netlink: 'syz.3.2238': attribute type 4 has an invalid length. [ 417.817697][T15551] netlink: 'syz.3.2238': attribute type 5 has an invalid length. [ 417.852646][T15565] netlink: 'syz.2.2239': attribute type 4 has an invalid length. [ 417.905600][T15570] netlink: 'syz.2.2239': attribute type 4 has an invalid length. [ 417.928211][T15545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.937967][T15545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.992643][T15545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.995431][T15545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.021262][T15545] veth1_vlan: left promiscuous mode [ 418.022946][T15545] veth0_vlan: left promiscuous mode [ 418.025212][T15545] veth0_vlan: entered promiscuous mode [ 418.029029][T15545] veth1_vlan: entered promiscuous mode [ 418.080306][T15545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 418.082795][T15545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 418.084244][T15545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 418.085898][T15545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 418.087778][T15545] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 418.181611][T15539] 8021q: adding VLAN 0 to HW filter on device bond19 [ 418.182696][T15539] bond19: (slave xfrm1): The slave device specified does not support setting the MAC address [ 418.182755][T15539] bond19: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 418.197334][T15539] bond19: (slave xfrm1): making interface the new active one [ 418.197377][T15539] xfrm1: entered promiscuous mode [ 418.243774][T15539] bond19: (slave xfrm1): Enslaving as an active interface with an up link [ 418.394883][ T150] bridge0: port 3(veth0) entered blocking state [ 418.395008][ T150] bridge0: port 3(veth0) entered forwarding state [ 418.417888][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.418019][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.436435][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.436548][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.827871][T15577] bond5: entered promiscuous mode [ 418.827897][T15577] bond5: entered allmulticast mode [ 418.843555][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.962085][ T27] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.962168][ T6057] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.979670][ T6057] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.710470][ T27] net_ratelimit: 21 callbacks suppressed [ 419.710492][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 419.721244][T15608] syzkaller0: entered promiscuous mode [ 419.721266][T15608] syzkaller0: entered allmulticast mode [ 419.840558][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 420.070817][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 420.190366][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 420.309894][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 420.422060][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 420.422280][T15619] netlink: 'syz.0.2253': attribute type 16 has an invalid length. [ 420.422300][T15619] __nla_validate_parse: 12 callbacks suppressed [ 420.422315][T15619] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2253'. [ 420.531022][T15623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2254'. [ 420.574902][T15619] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2253'. [ 420.670156][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 420.780394][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 420.886271][T15629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2252'. [ 420.895573][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 420.938163][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033f9c800: rx timeout, send abort [ 421.001306][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 421.115886][T15641] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2258'. [ 421.368645][T15648] netlink: 'syz.3.2259': attribute type 1 has an invalid length. [ 421.368668][T15648] netlink: 756 bytes leftover after parsing attributes in process `syz.3.2259'. [ 421.438220][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033f9c800: abort rx timeout. Force session deactivation [ 421.440383][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c143c00: rx timeout, send abort [ 421.695957][T15644] udevd[15644]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 421.699878][T15660] netlink: 'syz.1.2261': attribute type 4 has an invalid length. [ 421.746117][T15642] udevd[15642]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 421.777567][T15664] netlink: 'syz.1.2261': attribute type 4 has an invalid length. [ 421.903209][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2261'. [ 421.905384][T15655] netlink: 'syz.2.2260': attribute type 1 has an invalid length. [ 421.906879][T15657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2261'. [ 421.938744][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2261'. [ 421.948261][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c143c00: abort rx timeout. Force session deactivation [ 421.962089][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2261'. [ 422.194172][T15681] ip6tnl2: entered allmulticast mode [ 422.197741][ T27] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 422.198092][ T27] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 422.226005][ T7133] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 422.514363][T15687] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 422.530244][T15690] syzkaller0: left promiscuous mode [ 422.530289][T15690] syzkaller0: left allmulticast mode [ 422.683223][T15694] tun0: tun_chr_ioctl cmd 2148553947 [ 423.002436][ T5911] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 423.070298][ T5911] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 423.317014][T15710] netlink: 'syz.3.2276': attribute type 4 has an invalid length. [ 423.533873][T15715] tun0: tun_chr_ioctl cmd 2148553947 [ 423.565778][T15715] bond17: (slave veth0_to_bond): Releasing backup interface [ 424.769915][ T59] net_ratelimit: 27 callbacks suppressed [ 424.769975][ T59] bond9: (slave bridge3): failed to get link speed/duplex [ 424.884052][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 424.999698][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 425.111121][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 425.220787][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 425.329934][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 425.440658][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 425.495330][T15766] __nla_validate_parse: 14 callbacks suppressed [ 425.495378][T15766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2290'. [ 425.495418][T15766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2290'. [ 425.557358][T15766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.597986][T15766] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 425.684661][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 425.711336][T15768] xt_l2tp: invalid flags combination: 8 [ 425.794570][ T50] bond9: (slave bridge3): failed to get link speed/duplex [ 426.109464][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 426.334487][T15790] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2294'. [ 426.628643][T15796] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 426.640611][T15796] tipc: Enabled bearer , priority 5 [ 426.867550][T15801] netlink: 'syz.3.2296': attribute type 2 has an invalid length. [ 426.944636][T15803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2297'. [ 427.554747][T15816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.766706][T15816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.971218][T15823] netlink: 'syz.0.2302': attribute type 8 has an invalid length. [ 427.971245][T15823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'. [ 428.575135][T15840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2306'. [ 428.575165][T15840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2306'. [ 428.575185][T15840] netlink: 'syz.2.2306': attribute type 4 has an invalid length. [ 428.637040][ T150] tipc: Subscription rejected, illegal request [ 428.858668][T15846] netlink: 'syz.4.2309': attribute type 11 has an invalid length. [ 429.536618][T15863] xt_l2tp: missing protocol rule (udp|l2tpip) [ 429.720549][T15865] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2315'. [ 429.986049][ T5911] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 430.007661][T15869] macsec0: entered allmulticast mode [ 430.007690][T15869] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 430.025437][T15869] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 430.062211][T15869] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 430.105837][ T5911] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 430.120764][ T27] net_ratelimit: 30 callbacks suppressed [ 430.120852][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 430.232799][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 430.341922][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 430.453163][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 430.561565][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 430.671515][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 430.782107][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 430.890770][ T12] bond9: (slave bridge3): failed to get link speed/duplex [ 430.962517][T15885] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2323'. [ 431.106595][T15896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'. [ 431.108444][T15896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'. [ 431.140767][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 431.257618][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 431.586587][T15913] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2328'. [ 432.307628][T15937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2334'. [ 432.984898][T15959] netlink: 'syz.3.2339': attribute type 3 has an invalid length. [ 433.118308][T15949] syzkaller0: entered promiscuous mode [ 433.118370][T15949] syzkaller0: entered allmulticast mode [ 434.279490][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 435.770428][ T6057] net_ratelimit: 10 callbacks suppressed [ 435.770488][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 435.812991][T15957] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.2338'. [ 435.813032][T15957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2338'. [ 435.813061][T15957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2338'. [ 435.813086][T15957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2338'. [ 436.060314][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 436.067675][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 436.173648][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 436.280283][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 436.418263][T15988] ip6tnl3: entered allmulticast mode [ 436.426477][ T27] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 436.426704][ T27] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 436.442063][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 436.474273][ T5911] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 436.508409][T15995] netlink: 'syz.3.2347': attribute type 62 has an invalid length. [ 436.540158][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 436.661852][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 436.761475][ T5911] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 436.775011][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 436.881689][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 436.944373][T16018] bridge0: port 3(veth0) entered disabled state [ 436.944920][T16018] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.945332][T16018] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.952727][T16018] bridge0: entered allmulticast mode [ 437.015601][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 437.015650][T16017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2350'. [ 437.053879][T16018] veth0: left allmulticast mode [ 437.053932][T16018] veth0: left promiscuous mode [ 437.055289][T16018] bridge0: port 3(veth0) entered disabled state [ 437.058102][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 437.058134][T16017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2350'. [ 437.135854][T16018] bridge_slave_1: left allmulticast mode [ 437.135884][T16018] bridge_slave_1: left promiscuous mode [ 437.136909][T16018] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.178896][T16018] bridge_slave_0: left allmulticast mode [ 437.178928][T16018] bridge_slave_0: left promiscuous mode [ 437.179176][T16018] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.412217][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 437.470457][ T7133] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 437.505936][T16027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2354'. [ 437.641944][T16034] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2356'. [ 437.667134][T16036] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2354'. [ 437.667653][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 438.656951][T16079] netlink: 'syz.1.2365': attribute type 1 has an invalid length. [ 438.693008][T16076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2362'. [ 438.817552][T16079] 8021q: adding VLAN 0 to HW filter on device bond20 [ 438.882659][T16079] netlink: 'syz.1.2365': attribute type 8 has an invalid length. [ 438.904472][T16076] geneve4: entered promiscuous mode [ 438.904495][T16076] geneve4: entered allmulticast mode [ 439.033629][T16092] netlink: 'syz.1.2365': attribute type 8 has an invalid length. [ 439.141224][T16086] bond20: (slave geneve5): making interface the new active one [ 439.185486][T16086] bond20: (slave geneve5): Enslaving as an active interface with an up link [ 439.901939][T16096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.945627][T16096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.207708][T16096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.241495][T16096] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 440.445945][T16107] macvlan0: left promiscuous mode [ 440.750372][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 440.799652][ T27] net_ratelimit: 23 callbacks suppressed [ 440.799711][ T27] bond9: (slave bridge3): failed to get link speed/duplex [ 441.451421][T16145] __nla_validate_parse: 8 callbacks suppressed [ 441.451463][T16145] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2375'. [ 441.603337][ T150] bond9: (slave bridge3): failed to get link speed/duplex [ 441.831770][ T1102] bond9: (slave bridge3): failed to get link speed/duplex [ 441.940154][ T6057] bond9: (slave bridge3): failed to get link speed/duplex [ 442.057259][ T12] bond9: (slave bridge3): failed to get link speed/duplex [ 442.160184][ T7581] bond9: (slave bridge3): failed to get link speed/duplex [ 442.278001][ T6524] bond9: (slave bridge3): failed to get link speed/duplex [ 442.380708][T16161] bond9: (slave bridge3): failed to get link speed/duplex [ 442.497906][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 442.606688][T10253] bond9: (slave bridge3): failed to get link speed/duplex [ 443.159608][T16172] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2381'. [ 443.190672][T16168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.420448][T16178] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2382'. [ 443.998055][T16203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2387'. [ 443.998081][T16203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2387'. [ 444.167716][ T32] audit: type=1107 audit(1789329983.137:11): pid=16209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 444.237447][T16202] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 444.275412][T16202] bond6 (unregistering): Released all slaves [ 444.307322][T16216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2390'. [ 444.569098][T16210] tipc: Enabling of bearer rejected, already enabled [ 444.957375][T16223] bond0: (slave bond_slave_0): Releasing backup interface [ 445.075026][T16223] bond0: (slave bond_slave_1): Releasing backup interface [ 445.254104][T16237] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.2395'. [ 445.254166][T16237] netlink: 'syz.4.2395': attribute type 1 has an invalid length. [ 445.577432][T16244] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2397'. [ 445.605423][T16246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2398'. [ 445.822940][T16254] tipc: Enabled bearer , priority 0 [ 445.889141][T16256] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2403'. [ 449.429291][ C0] sched: DL replenish lagged too much [ 449.632723][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 449.726128][ T1102] net_ratelimit: 19 callbacks suppressed [ 449.726155][ T1102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.277393][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 468.196583][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 482.276804][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 483.710598][ T6057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.678050][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 547.556399][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 572.316802][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.276375][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 607.569208][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 607.576249][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16263/1:b..l P16161/1:b..l P1326/1:b..l [ 607.586670][ C0] rcu: (detected by 0, t=10503 jiffies, g=80213, q=792 ncpus=2) [ 607.594440][ C0] task:kworker/u8:9 state:R running task stack:22568 pid:1326 tgid:1326 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 607.608116][ C0] Workqueue: 0x0 (bond2) [ 607.612526][ C0] Call Trace: [ 607.615839][ C0] [ 607.618809][ C0] __schedule+0x17db/0x58f0 [ 607.623371][ C0] ? __lock_acquire+0x747/0x2de0 [ 607.628515][ C0] ? __lock_acquire+0x747/0x2de0 [ 607.633754][ C0] ? __pfx___schedule+0x10/0x10 [ 607.638735][ C0] ? __lock_acquire+0x747/0x2de0 [ 607.643702][ C0] preempt_schedule_irq+0x4b/0x90 [ 607.648762][ C0] irqentry_exit+0x14f/0x910 [ 607.653372][ C0] ? trace_irq_disable+0x3b/0x140 [ 607.658417][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 607.664405][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 607.669700][ C0] Code: ff ff ff e8 f0 09 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 42 c5 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d c7 3f da [ 607.689318][ C0] RSP: 0018:ffffc900058c7600 EFLAGS: 00000296 [ 607.695413][ C0] RAX: 2ebcc7348d678400 RBX: 0000000000000000 RCX: 0000000000000046 [ 607.703411][ C0] RDX: 000000005acdab19 RSI: ffffffff8e6fe025 RDI: ffffffff8c6d9c80 [ 607.711398][ C0] RBP: ffff8880290eddc0 R08: ffffffff8177f1df R09: 0000000000000000 [ 607.719384][ C0] R10: ffffc900058c7738 R11: ffffffff81b285f0 R12: ffffffff8ed5c8a0 [ 607.727368][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 607.735353][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 607.741523][ C0] ? unwind_next_frame+0x8f/0x2550 [ 607.746658][ C0] ? qlist_free_all+0x99/0x100 [ 607.751427][ C0] ? unwind_next_frame+0x8f/0x2550 [ 607.756545][ C0] unwind_next_frame+0xac/0x2550 [ 607.761509][ C0] ? unwind_next_frame+0x8f/0x2550 [ 607.766669][ C0] ? __slab_free+0x274/0x2c0 [ 607.771264][ C0] ? unwind_next_frame+0x8f/0x2550 [ 607.776383][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 607.782545][ C0] arch_stack_walk+0x11b/0x150 [ 607.787344][ C0] ? qlist_free_all+0x99/0x100 [ 607.792293][ C0] stack_trace_save+0xa9/0x100 [ 607.797085][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 607.802513][ C0] save_stack+0x122/0x230 [ 607.806906][ C0] ? __pfx_save_stack+0x10/0x10 [ 607.811777][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 607.817113][ C0] ? __slab_free+0x274/0x2c0 [ 607.821730][ C0] ? qlist_free_all+0x99/0x100 [ 607.826510][ C0] ? lock_release+0x2e1/0x3c0 [ 607.831227][ C0] __reset_page_owner+0x71/0x1f0 [ 607.836181][ C0] __free_frozen_pages+0xc93/0xd90 [ 607.841320][ C0] __slab_free+0x274/0x2c0 [ 607.845751][ C0] ? qlist_free_all+0x8e/0x100 [ 607.850543][ C0] qlist_free_all+0x99/0x100 [ 607.855142][ C0] kasan_quarantine_reduce+0x148/0x160 [ 607.860614][ C0] __kasan_slab_alloc+0x22/0x80 [ 607.865478][ C0] __kmalloc_cache_node_noprof+0x357/0x620 [ 607.871296][ C0] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 607.877279][ C0] ? create_worker+0x112/0x7c0 [ 607.882049][ C0] ? create_worker+0x112/0x7c0 [ 607.886829][ C0] create_worker+0x112/0x7c0 [ 607.891434][ C0] ? __pfx_create_worker+0x10/0x10 [ 607.896549][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 607.902371][ C0] ? __mod_timer+0xb53/0xed0 [ 607.906992][ C0] worker_thread+0x4c9/0xfb0 [ 607.911618][ C0] kthread+0x38b/0x480 [ 607.915714][ C0] ? __pfx_worker_thread+0x10/0x10 [ 607.920838][ C0] ? __pfx_kthread+0x10/0x10 [ 607.925435][ C0] ret_from_fork+0x514/0xb70 [ 607.930031][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 607.935182][ C0] ? __switch_to+0xc89/0x1420 [ 607.939881][ C0] ? __pfx_kthread+0x10/0x10 [ 607.944659][ C0] ret_from_fork_asm+0x1a/0x30 [ 607.949450][ C0] [ 607.952475][ C0] task:kworker/u8:17 state:R running task stack:25192 pid:16161 tgid:16161 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 607.966056][ C0] Workqueue: krds_cp_wq#9/0 rds_connect_worker [ 607.972223][ C0] Call Trace: [ 607.975509][ C0] [ 607.978447][ C0] __schedule+0x17db/0x58f0 [ 607.982990][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 607.988308][ C0] ? ret_from_fork+0x514/0xb70 [ 607.993103][ C0] ? __lock_acquire+0x747/0x2de0 [ 607.998954][ C0] ? __pfx___schedule+0x10/0x10 [ 608.003855][ C0] ? __lock_acquire+0x747/0x2de0 [ 608.008808][ C0] preempt_schedule_irq+0x4b/0x90 [ 608.013848][ C0] irqentry_exit+0x14f/0x910 [ 608.018447][ C0] ? trace_irq_disable+0x3b/0x140 [ 608.023497][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 608.029501][ C0] RIP: 0010:page_ext_get+0x2c5/0x2e0 [ 608.034805][ C0] Code: 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 44 9b a4 09 cc e8 8e 2c 84 ff e9 d4 fe ff ff e8 84 2c 84 ff 90 0f 0b 90 e9 03 ff ff ff 76 2c 84 ff 41 bc 00 10 00 00 e9 31 fe ff ff e8 66 2c 84 ff e9 [ 608.054432][ C0] RSP: 0018:ffffc9000207f3f0 EFLAGS: 00000246 [ 608.060517][ C0] RAX: 1ffffffff1ce7fe2 RBX: ffffffff82439b92 RCX: ffff888035b49f40 [ 608.068497][ C0] RDX: 0000000000000000 RSI: ffffffff8c6d9c60 RDI: ffffffff8c6d9c20 [ 608.076520][ C0] RBP: 0000000000000001 R08: ffffffff82439b92 R09: 0000000000000000 [ 608.084509][ C0] R10: dffffc0000000000 R11: fffff94000213447 R12: ffffea000109a200 [ 608.092519][ C0] R13: dffffc0000000000 R14: 0000000000042688 R15: 0000000000000000 [ 608.100513][ C0] ? page_ext_get+0x22/0x2e0 [ 608.105140][ C0] ? page_ext_get+0x22/0x2e0 [ 608.109757][ C0] __reset_page_owner+0x28/0x1f0 [ 608.114712][ C0] __free_frozen_pages+0xc93/0xd90 [ 608.119854][ C0] __slab_free+0x274/0x2c0 [ 608.124287][ C0] qlist_free_all+0x99/0x100 [ 608.128892][ C0] kasan_quarantine_reduce+0x148/0x160 [ 608.134358][ C0] __kasan_slab_alloc+0x22/0x80 [ 608.139231][ C0] __kmalloc_cache_noprof+0x29f/0x600 [ 608.144640][ C0] ? __kmalloc_cache_noprof+0x14d/0x600 [ 608.150189][ C0] ? ref_tracker_alloc+0x15b/0x4b0 [ 608.155329][ C0] ? ref_tracker_alloc+0x15b/0x4b0 [ 608.160474][ C0] ref_tracker_alloc+0x15b/0x4b0 [ 608.165435][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 608.170923][ C0] ? ref_tracker_free+0x518/0x830 [ 608.175974][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 608.181362][ C0] ? sk_net_refcnt_upgrade+0x8c/0x130 [ 608.186774][ C0] ? rds_tcp_tune+0x44e/0x920 [ 608.191485][ C0] ? rds_tcp_conn_path_connect+0x2fa/0x920 [ 608.197318][ C0] ? rds_connect_worker+0x1d8/0x290 [ 608.202527][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 608.208265][ C0] ? net_passive_dec+0x108/0x2b0 [ 608.213205][ C0] ? __pfx_net_passive_dec+0x10/0x10 [ 608.218517][ C0] get_net_track+0x16e/0x230 [ 608.223135][ C0] sk_net_refcnt_upgrade+0xb2/0x130 [ 608.228346][ C0] rds_tcp_tune+0x44e/0x920 [ 608.232865][ C0] ? __pfx_rds_tcp_tune+0x10/0x10 [ 608.238072][ C0] ? __sock_create+0x86f/0x9d0 [ 608.242873][ C0] rds_tcp_conn_path_connect+0x2fa/0x920 [ 608.248537][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 608.254706][ C0] ? lock_acquire+0x115/0x350 [ 608.259400][ C0] rds_connect_worker+0x1d8/0x290 [ 608.264430][ C0] ? process_scheduled_works+0x97a/0x1630 [ 608.270178][ C0] process_scheduled_works+0xc3d/0x1630 [ 608.275829][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 608.281827][ C0] ? assign_work+0x3cf/0x5d0 [ 608.286432][ C0] worker_thread+0xa47/0xfb0 [ 608.291041][ C0] ? __kthread_parkme+0x71/0x1f0 [ 608.296181][ C0] kthread+0x38b/0x480 [ 608.300283][ C0] ? __pfx_worker_thread+0x10/0x10 [ 608.305420][ C0] ? __pfx_kthread+0x10/0x10 [ 608.310042][ C0] ret_from_fork+0x514/0xb70 [ 608.314645][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 608.319772][ C0] ? __switch_to+0xc89/0x1420 [ 608.324463][ C0] ? __pfx_kthread+0x10/0x10 [ 608.329056][ C0] ret_from_fork_asm+0x1a/0x30 [ 608.333865][ C0] [ 608.336888][ C0] task:syz.1.2398 state:R running task stack:26920 pid:16263 tgid:16245 ppid:5626 task_flags:0x40044c flags:0x00080000 [ 608.350393][ C0] Call Trace: [ 608.353675][ C0] [ 608.356606][ C0] __schedule+0x17db/0x58f0 [ 608.361150][ C0] ? __pfx___schedule+0x10/0x10 [ 608.366015][ C0] ? lock_acquire+0x115/0x350 [ 608.370693][ C0] ? folio_mark_accessed+0x439/0x8b0 [ 608.375987][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 608.381365][ C0] preempt_schedule_common+0x7f/0xd0 [ 608.386657][ C0] preempt_schedule_thunk+0x16/0x40 [ 608.391866][ C0] _raw_spin_unlock+0x41/0x50 [ 608.396553][ C0] __zap_vma_range+0x40e1/0x4f80 [ 608.401534][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 608.406916][ C0] ? lock_acquire+0x115/0x350 [ 608.411607][ C0] ? unmap_vmas+0x1b9/0x550 [ 608.416119][ C0] unmap_vmas+0x390/0x550 [ 608.420465][ C0] ? irqentry_exit+0x218/0x910 [ 608.425266][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 608.430142][ C0] exit_mmap+0x293/0x9f0 [ 608.434398][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 608.439207][ C0] ? irqentry_exit+0x218/0x910 [ 608.443994][ C0] ? __pfx_exit_aio+0x10/0x10 [ 608.448693][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 608.453922][ C0] __mmput+0x118/0x420 [ 608.457999][ C0] exit_mm+0x221/0x2d0 [ 608.462096][ C0] do_exit+0x6cd/0x2360 [ 608.466276][ C0] ? __pfx_do_exit+0x10/0x10 [ 608.470871][ C0] ? cgroup1_freezing+0x20/0x350 [ 608.475818][ C0] ? cgroup1_freezing+0x20/0x350 [ 608.480773][ C0] do_group_exit+0x22d/0x2f0 [ 608.485366][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 608.490581][ C0] get_signal+0x121b/0x12c0 [ 608.495118][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 608.500693][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 608.506871][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 608.512249][ C0] ? rcu_is_watching+0x16/0xb0 [ 608.517025][ C0] do_syscall_64+0x328/0x520 [ 608.521637][ C0] ? trace_irq_disable+0x3b/0x140 [ 608.526663][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.532757][ C0] ? clear_bhb_loop+0x70/0xc0 [ 608.537440][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.543336][ C0] RIP: 0033:0x7f0c16b9e159 [ 608.547754][ C0] RSP: 002b:00007f0c17a420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 608.556256][ C0] RAX: fffffffffffffe00 RBX: 00007f0c16e26278 RCX: 00007f0c16b9e159 [ 608.564232][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0c16e26278 [ 608.572200][ C0] RBP: 00007f0c16e26270 R08: 0000000000000000 R09: 0000000000000000 [ 608.580262][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.588232][ C0] R13: 00007f0c16e26308 R14: 00007ffc063db0f0 R15: 00007ffc063db1d8 [ 608.596224][ C0] [ 608.599303][ C0] rcu: rcu_preempt kthread starved for 9971 jiffies! g80213 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 608.610256][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 608.620254][ C0] rcu: RCU grace-period kthread stack dump: [ 608.626170][ C0] task:rcu_preempt state:R running task stack:28064 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 608.639797][ C0] Call Trace: [ 608.643362][ C0] [ 608.646328][ C0] __schedule+0x17db/0x58f0 [ 608.650885][ C0] ? __lock_acquire+0x747/0x2de0 [ 608.655877][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 608.661052][ C0] ? __pfx___schedule+0x10/0x10 [ 608.665973][ C0] ? lock_acquire+0x115/0x350 [ 608.670697][ C0] ? schedule+0x90/0x2b0 [ 608.674975][ C0] schedule+0x164/0x2b0 [ 608.679169][ C0] schedule_timeout+0x152/0x2c0 [ 608.684060][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 608.689477][ C0] ? __pfx_process_timeout+0x10/0x10 [ 608.694815][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 608.700665][ C0] ? prepare_to_swait_event+0x322/0x350 [ 608.706396][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 608.711322][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 608.717525][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 608.722854][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 608.728107][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 608.733968][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 608.738618][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 608.744049][ C0] ? __kthread_parkme+0x71/0x1f0 [ 608.749038][ C0] ? __kthread_parkme+0x199/0x1f0 [ 608.754116][ C0] kthread+0x38b/0x480 [ 608.758225][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 608.763454][ C0] ? __pfx_kthread+0x10/0x10 [ 608.768078][ C0] ret_from_fork+0x514/0xb70 [ 608.772713][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 608.777869][ C0] ? __switch_to+0xc89/0x1420 [ 608.782600][ C0] ? __pfx_kthread+0x10/0x10 [ 608.787225][ C0] ret_from_fork_asm+0x1a/0x30 [ 608.792054][ C0] [ 608.795106][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 608.801488][ C0] Sending NMI from CPU 0 to CPUs 1: [ 608.806795][ C1] NMI backtrace for cpu 1 [ 608.806818][ C1] CPU: 1 UID: 0 PID: 16080 Comm: kworker/R-bond2 Not tainted syzkaller #0 PREEMPT(full) [ 608.806841][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.806855][ C1] Workqueue: bond20 bond_alb_monitor [ 608.806887][ C1] RIP: 0010:timerqueue_linked_add+0x24a/0x2e0 [ 608.806931][ C1] Code: 00 74 08 4c 89 ef e8 95 c3 56 f6 4d 89 75 00 49 8d 7d 08 ba 10 00 00 00 31 f6 e8 61 c5 56 f6 4c 89 f8 48 c1 e8 03 80 3c 28 00 <74> 08 4c 89 ff e8 6c c3 56 f6 4d 89 2f 4c 89 ef 48 89 de e8 8e 64 [ 608.806948][ C1] RSP: 0018:ffffc90000a18d40 EFLAGS: 00000046 [ 608.806964][ C1] RAX: 1ffff110170e5093 RBX: ffff8880b8728498 RCX: 0000000000000000 [ 608.806978][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880551f0318 [ 608.806990][ C1] RBP: dffffc0000000000 R08: ffff8880551f0317 R09: 0000000000000000 [ 608.807004][ C1] R10: ffff8880551f0308 R11: ffffed100aa3e063 R12: 1ffff110170e5088 [ 608.807018][ C1] R13: ffff8880551f0300 R14: 0000000000000000 R15: ffff8880b8728498 [ 608.807032][ C1] FS: 0000000000000000(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 608.807048][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 608.807061][ C1] CR2: 00007fc5d04abd58 CR3: 000000007f7ca000 CR4: 00000000003526f0 [ 608.807089][ C1] Call Trace: [ 608.807099][ C1] [ 608.807106][ C1] ? trace_hrtimer_start+0x82/0x200 [ 608.807139][ C1] enqueue_hrtimer+0x18e/0x2c0 [ 608.807169][ C1] __hrtimer_run_queues+0x4ce/0xa10 [ 608.807206][ C1] hrtimer_interrupt+0x4cd/0xaa0 [ 608.807250][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 608.807274][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 608.807295][ C1] [ 608.807301][ C1] [ 608.807308][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 608.807329][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 608.807379][ C1] Code: f7 e8 8d e3 bb f5 f7 c3 00 02 00 00 74 05 e8 50 27 e8 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 94 f2 ac f5 65 48 8b 05 0c 01 ad 07 48 85 c0 74 18 5b 41 5e e9 [ 608.807395][ C1] RSP: 0018:ffffc900049ef9c8 EFLAGS: 00000206 [ 608.807411][ C1] RAX: 0000000000000002 RBX: 0000000000000293 RCX: 8000000000000001 [ 608.807424][ C1] RDX: 0000000000000000 RSI: ffffffff8e4776a5 RDI: 0000000000000001 [ 608.807437][ C1] RBP: ffffffff8ed62500 R08: ffffffff907a317f R09: 1ffffffff20f462f [ 608.807451][ C1] R10: dffffc0000000000 R11: fffffbfff20f4630 R12: ffffffff8ed625d8 [ 608.807466][ C1] R13: 0000000000000293 R14: ffffffff8ed62500 R15: ffffffff8ed62500 [ 608.807492][ C1] rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 608.807531][ C1] ? process_scheduled_works+0x97a/0x1630 [ 608.807557][ C1] __rcu_read_unlock+0x83/0xe0 [ 608.807586][ C1] ? process_scheduled_works+0x97a/0x1630 [ 608.807610][ C1] process_scheduled_works+0xad6/0x1630 [ 608.807654][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 608.807678][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 608.807709][ C1] ? assign_work+0x3af/0x5d0 [ 608.807736][ C1] rescuer_thread+0x7c5/0x10e0 [ 608.807767][ C1] ? rescuer_thread+0xb8/0x10e0 [ 608.807806][ C1] kthread+0x38b/0x480 [ 608.807824][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 608.807850][ C1] ? __pfx_kthread+0x10/0x10 [ 608.807869][ C1] ret_from_fork+0x514/0xb70 [ 608.807888][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 608.807918][ C1] ? __switch_to+0xc89/0x1420 [ 608.807945][ C1] ? __pfx_kthread+0x10/0x10 [ 608.807964][ C1] ret_from_fork_asm+0x1a/0x30 [ 608.808002][ C1]