last executing test programs: 29.094340551s ago: executing program 2 (id=6700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$tipc(r1, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newsa={0x194, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0xffff}, {@in6=@local, 0x4d4, 0x32}, @in6=@private2, {0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x1000, 0xa, 0x4, 0x0, 0x50}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x59, 0x1, {{'xcbc(aes)\x00'}, 0x88, "8478b0098a3a72ec6b1baa7d25e76d6561"}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40}, 0x40082) (async) r3 = socket$pptp(0x18, 0x1, 0x2) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@ipv6_newroute={0x60, 0x18, 0x401, 0x70bd2b, 0x25dfdbfc, {0xa, 0x40, 0x14, 0x0, 0xfe, 0x2, 0x0, 0x1, 0x5700}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}}, @RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x2, 0x18, 0x1, 0x1, 0x0, [@private2]}}}]}, 0x60}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c0001000002"], 0x60}}, 0x0) (async) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) (async) close(r0) 28.882903501s ago: executing program 3 (id=6702): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x800}, &(0x7f00000000c0)=0xc) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000280), 0x4) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r8, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xd, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000d11d7110bf000000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bind$tipc(r9, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r9, &(0x7f0000000480)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r9, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x3, {{0x42, 0x20004006}}}, 0x10) bind$tipc(r9, &(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r9, &(0x7f0000000740)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000500)={r10, 0x2, 0xfffffff7, 0x1000, 0x0, 0x97e5, 0x0, 0x57a0, {0x0, @in={{0x2, 0x4e22, @loopback}}, 0x0, 0x4, 0x30c458e9, 0x1, 0xb}}, &(0x7f00000005c0)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000600)={r10, @in6={{0xa, 0x4e24, 0x2, @loopback, 0x2}}, 0x800, 0x6}, 0x90) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000b00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x4, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4041040}, 0x20040051) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="280000192b00", @ANYRES16=r4, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x9000700, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 28.815214024s ago: executing program 2 (id=6703): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, 0x0, 0x0) socket(0x2b, 0x1, 0x1) 28.629776111s ago: executing program 2 (id=6707): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{&(0x7f0000000500)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000580)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000005c0)={0x0, 0x964, 0x89f8}, 0x8) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbac0}, 0x1c) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2886}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x1cf94b1f273faa1b}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x2400c000) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000500), 0x800001d, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) 28.16425678s ago: executing program 2 (id=6711): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="d00000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="02080400000000008800128009000100766c616e0000000078000280400004800c00010003000000900300000c0001"], 0xd0}}, 0x400c020) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801000020000115053f88bafcdbdf2504"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000040)=""/222, &(0x7f0000000140)=0x61637876) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000008c0)='tasks\x00', 0x2, 0x0) (async) r4 = getpid() write$cgroup_pid(r3, &(0x7f0000000900)=r4, 0x12) (async) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000940)=r4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$packet(0x11, 0x3, 0x300) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0x5001}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000009c0)={'syzkaller1\x00', 0x1}) (async) write$tun(r6, &(0x7f0000000a00)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff00000000000000000000ffffac141419ff020000000000000000000000000001042022eb"], 0x76) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe4}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x174, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xdc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1c0}, 0x1, 0x0, 0x0, 0x4004891}, 0x20048000) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x110}}, 0x40000) 27.814604401s ago: executing program 2 (id=6712): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000780), 0x4) recvmsg$unix(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r4, 0xc040ff0b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', r2, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r7}, &(0x7f0000000480)=0x20000, &(0x7f00000004c0)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r7, &(0x7f0000000640)}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a"], 0x118}}, 0x0) 27.788195638s ago: executing program 3 (id=6714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="06000000040000000200000007"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) write$cgroup_pressure(r3, &(0x7f00000003c0)={'full'}, 0xfffffdef) close(r2) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2400c094) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x28, 0x140f, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}}, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r6) sendmsg$NFC_CMD_DEP_LINK_UP(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05042bbd7000fddbdf250400000008000400ffffffff08000100", @ANYRES32=0x0, @ANYBLOB="05000a001d"], 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000002400010026bd7000fcdadf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000040000000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000a00000085000000a5000000950000000000000004539b9711d69af22ce423986c132bd26ab81f2b42354ea30da4367ea24adf772d99c5bc3c1064192e727fb638ae6730b9b32e2a9508b1f1504e83f7506548f3f8832b96134fb1ee210c03388cfcdd6b0ea562d027763a6ddb7d7884c204aac1cd34dae1af647544ef858233f18ac9af1ba2e7"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27.290962897s ago: executing program 3 (id=6719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x8070bd2c, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xe13, 0x8, 0x40, 0x7, 0x3, 0x15, 0x7}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x6, 0xc, &(0x7f0000001440)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f00000014c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x4, 0x8, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001680)={r6, 0x0, 0x36, 0x0, &(0x7f0000001700)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x2b, 0x6, 0x2, 0x6, 0x2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x700, 0x9, 0x4}}) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001340)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@const={0x2}, @var={0xc, 0x0, 0x0, 0xe, 0x1}, @int={0xd, 0x0, 0x0, 0x1, 0x8, 0x5c, 0x0, 0x1, 0x1}, @struct={0x8, 0x8, 0x0, 0x4, 0x1, 0x75c0, [{0xc, 0x2, 0x6}, {0x8, 0x4}, {0x2, 0x3, 0x101}, {0x4, 0x0, 0x4}, {0x6, 0x11a8, 0x400}, {0xf, 0x1, 0x9}, {0x10, 0x0, 0x10}, {0x2, 0x2, 0x401}]}]}, {0x0, [0x61]}}, &(0x7f0000001240)=""/169, 0xb3, 0xa9, 0x1, 0x400, 0x10000, @value=r10}, 0x28) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa10, 0x20000}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}]}}}]}, 0x50}}, 0x40440d0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'ip_vti0\x00', &(0x7f0000000840)={'ip_vti0\x00', 0x0, 0x20, 0x7800, 0x3, 0x5, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x66, 0x0, 0x9a, 0x0, 0x0, @broadcast, @empty, {[@end, @end, @timestamp_prespec={0x44, 0x14, 0x23, 0x3, 0x0, [{@empty, 0x380}, {@private=0xa010102, 0x2}]}, @generic={0x44, 0x8, "502a202692bd"}, @generic={0x83, 0x8, "1dde657ed920"}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000940)=[0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xd4, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000f40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x234, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x88}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x40000}, 0x81) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r17, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r16, @ANYBLOB="000000001c00000000000000010000000200000059cf8377812da741f1"], 0x70, 0x44}}], 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000001080)={'bridge0\x00'}) 27.246638095s ago: executing program 1 (id=6720): unshare(0x20000400) r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r0, 0x6a, 0x4, 0x0, &(0x7f00000001c0)=0xffffffffffffff16) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff00000000000000020000000002000000000000080200000000005f"], 0x0, 0x44}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1400000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="03000000010000000000000000000000000000000000000000000080"], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10e) 26.834715084s ago: executing program 2 (id=6724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x62a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vxcan1\x00', 0x10}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00'}) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f0000000240)=""/4057, &(0x7f0000001240)=0xfd9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f"], 0x64}}, 0x0) (async) sendmsg(r5, &(0x7f0000001440)={0x0, 0x46, &(0x7f0000001480), 0x1}, 0x40000) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000014c0)={@cgroup, 0xffffffffffffffff, 0x2a}, 0x20) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0xc, &(0x7f00000015c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000477b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001680)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=@newlink={0x108, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0xd8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc8, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xb, 0x7}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xc}}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0x54, 0x1, {0x2, 0xce10}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x283, 0x13}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4bf4, 0x200}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xffffffffffffffd3, 0x1, {0x3, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0xffff7fff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x108}}, 0x0) (async) read(r6, &(0x7f0000001880)=""/4, 0x4) (async, rerun: 64) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x3, 0xc, &(0x7f0000001b80)=ANY=[@ANYBLOB="18020000000000010000000000000000850000009700000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000009b00000095"], &(0x7f0000001c00)='syzkaller\x00'}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c40)={r9, 0x0, 0xe, 0x0, &(0x7f0000001cc0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x16, 0xc, &(0x7f0000001980)=ANY=[], &(0x7f00000019c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000001a80)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x3, 0x8000}, 0x4) (async) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0800080006000500000014000000453a0fc0006512000d11"], 0xfce) (async, rerun: 64) r11 = socket$kcm(0x21, 0x2, 0xa) (rerun: 64) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x1, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/40], 0x28}, 0xfc40) 26.606505048s ago: executing program 1 (id=6725): write(0xca, &(0x7f0000000000)="040e0c0103100061cebdcbffdfffff", 0xf) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x31, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x120, 0x30, 0x1, 0x0, 0x0, {}, [{0x10c, 0x1, [@m_gact={0x108, 0x1, 0x0, 0x0, {{0x9}, {0xdc, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x1, 0xfffffffffffffffc, 0x5, 0x716c}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x9, 0x3, 0x9, 0x7ad}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0xa68, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x400, 0x7, 0xffff, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x5, 0x20000000, 0xfffffffa, 0x9927}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x253f, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xfffff723, 0x5, 0x8e08, 0x400}}, @TCA_GACT_PARMS={0x18, 0x2, {0xdda1, 0x3ceb, 0x10000000, 0x4, 0xde7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x1ff, 0xcd479737abc61d79, 0x4, 0x76}}, @TCA_GACT_PROB={0x0, 0x3, {0x2, 0x1a85, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x120}}, 0x0) 26.60401459s ago: executing program 3 (id=6726): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x3}, 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x73b9e957}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000001480)="7cf13307000000000008000081001a", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1d, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe2a5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000280)='GPL\x00', 0x80000000, 0x5d, &(0x7f00000002c0)=""/93, 0x41100, 0x2a, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000380)=[0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x5, 0x5, 0x10, 0x6}], 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r5}, 0xc) poll(&(0x7f00000004c0)=[{r3, 0x2000}], 0x1, 0x3) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000780)) setsockopt$sock_attach_bpf(r2, 0x107, 0x8, &(0x7f00000014c0), 0x8) recvmsg$kcm(r2, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x20) syz_emit_ethernet(0x76, &(0x7f0000000700)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x15, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4}, @cipso={0x86, 0x3c, 0x3, [{0x6, 0x6, "6c0e3a7f"}, {0x1, 0x7, "e964058f11"}, {0x7, 0x6, "aa653917"}, {0x6, 0x8, "1a629cb9d36c"}, {0x2, 0x2}, {0x7, 0x3, "a5"}, {0x2, 0x4, "8f5b"}, {0x5, 0x8, "010c379c90fc"}, {0x5, 0xa, "205eec748da52e2e"}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x9, 0x9, 0x6, 0x8, 0x1ff}}}}}, 0x0) 26.279825115s ago: executing program 3 (id=6728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010825bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="804001000000010008001b000000000008000d0006"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac"], 0x23c}}, 0x4080) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000200)=@ethtool_stats={0x11}}) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 26.193920155s ago: executing program 0 (id=6729): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x1a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) (rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0xffffff6a) sendfile(r1, r2, 0x0, 0x20000000002) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2}, {0x2, 0x3, 0x3, 0xa, 0x0, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {0x6, 0x0, 0xb, 0x9}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 26.067893319s ago: executing program 4 (id=6731): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, 0x0, 0x0) socket(0x2b, 0x1, 0x1) 26.066879645s ago: executing program 1 (id=6732): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000100180100002020782500000000cb0000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000100b703000000000040850000000c00000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000008c0), 0x10) recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001c80)={@ifindex, 0x16, 0x0, 0xa2, &(0x7f0000001b80)=[0x0], 0x1, 0x0, &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001cc0)={@cgroup, r1, 0x4, 0x20, 0x0, @void, @void, @void, @value=0xffffffffffffffff, r5}, 0x20) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000001d00)={&(0x7f0000001d40)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x3}}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000001dc0)="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", 0xd9d}], 0x1}, 0x40004) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000540)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x1}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1a, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000880)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x1c, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8ad4, r8, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r0, &(0x7f00000001c0)="62a66b20bea8b0427a66d13f3f64ef9679101c5cdfca3ac335cc0e571f85bda752360941398db0191d3757f02cea37fd7ac27016706157ff3e78b47e32aaf706a0883547ca68342d7342ad9c4b07db93586b8ac4410ec00f5e9b8b4d83cc4d58d3f755b69203a8d90ebc4337cae32ebde398068cd26527044853bd127fd85a691aadd46b0c500733bc24b2339f3f", &(0x7f0000000280)=""/69, 0x4}, 0x20) 25.594521924s ago: executing program 4 (id=6733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000680)=0x2, 0x4) bind$inet6(r2, &(0x7f00000006c0)={0xa, 0x4e23, 0x1, @loopback, 0xe0a}, 0x1c) close(r1) (async) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000080000000000000000000071103500000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000080000000000000000000071103500000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa, 0x26}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc050) r5 = socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r5], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) socket$kcm(0xa, 0x5, 0x0) (async) r7 = socket$kcm(0xa, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) unshare(0x20000400) vmsplice(r8, 0x0, 0x0, 0xa) (async) vmsplice(r8, 0x0, 0x0, 0xa) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r7}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6}) 25.369135207s ago: executing program 1 (id=6734): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x50) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="000000000097ff00b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000c00)=r3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x24, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) 25.163755285s ago: executing program 0 (id=6735): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x60, r1, 0x1, 0x300, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @mcast1}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x1c00, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f, 0x30]}}, 0x0, 0x29}, 0x28) socket(0x2, 0x80805, 0x0) (async, rerun: 32) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180200000400000000000000000000008500000007000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff0300610d6991ff9e14ff0200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f00000007c0)={{r2, &(0x7f0000000840)='#*(--,-\x00', 0xa00c0, &(0x7f0000000880)={@_ha_fsid={[0x2, 0x9]}, {0x2, 0x8ff, 0x8, 0x9}}, 0x6, &(0x7f00000008c0), &(0x7f0000000900)=0xa30}, 0x2, &(0x7f0000000940)=[{0x3, 0x1, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="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", 0x1000}, {0x1, 0x1, &(0x7f00000019c0)='(\x00', &(0x7f0000001a00)="ce283d07aace96712429b473f21021f65287a8dbb6186b6bee5f6cbc112fd1c24b340ac95cc3ffa93226bbe1585d2b3e915f34f4f345d4da5c1e3285e227397b33b5fda08beab649676ba6cb7e7db8f4412fba66b8fcf2ce5fc7f003141d42b3681996a92fc3a8fe637bbc0ae6b2fb9141e2a0c88b14064e5b9d88a68bb09797d67f96c04ec8ec3b8085a5ecc2ec94f816345c1631e4df46374dc6d7e187c47713e7815993ca8c667a1c7a43c4371cfcb3e4388340496b2155e5d6013b391549f32498c8536fc6c6f98d68a098b2a7832217c31febbb0c27e9508a8921f2114270bb73d7f43903cd01bb69e2a8234d6a7b1e34c8129cfc92", 0xf8}]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001b00)={'sit0\x00', &(0x7f0000001b40)={'syztnl2\x00', 0x0, 0x17, 0x8, 0x7, 0x800, {{0x38, 0x4, 0x0, 0x8, 0xe0, 0x66, 0x0, 0x97, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x27, 0x36, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010101, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x17}, @multicast2]}, @timestamp={0x44, 0x10, 0x36, 0x0, 0x7, [0x3, 0xe, 0x7]}, @end, @ssrr={0x89, 0x7, 0x9b, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x13, 0x4b, [@local, @multicast2, @multicast1, @multicast2]}, @timestamp_addr={0x44, 0xc, 0x98, 0x1, 0x7, [{@empty, 0x8}]}, @end, @timestamp_addr={0x44, 0x54, 0x58, 0x1, 0x1, [{@rand_addr=0x64010100, 0x7fff}, {@private=0xa010102, 0x7}, {@remote, 0x8}, {@multicast2, 0x392f}, {@private=0xa010102, 0x3}, {@multicast2, 0x400}, {@multicast2, 0x7}, {@multicast1, 0x5}, {@multicast1, 0xa}, {@rand_addr=0x64010102, 0xd}]}, @timestamp={0x44, 0x18, 0x38, 0x0, 0x6, [0x3, 0x4a08, 0xffff8001, 0x8, 0x5]}]}}}}}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', r5, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001cc0)=@o_path={&(0x7f0000001d00)='./file0\x00', 0x0, 0x8010, r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{r6, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001dc0)=r7}, 0x20) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000001e00)={r8, &(0x7f0000001e40)='(\x00', 0x210000, &(0x7f0000001e80)={@_ha_fsid={[0x1, 0xfffffffb]}, {0x2, 0x6, 0x0, 0x1e8c554d}}, 0xa7e, &(0x7f0000001ec0)={@_ha_fsid}, &(0x7f0000001f00)=0x10}) bind$vsock_stream(r9, &(0x7f0000001f40)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001fc0)={{}, 0x0, &(0x7f0000002000)}, 0x20) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x10, 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000002180)='GPL\x00', 0x2, 0xfd90, &(0x7f00000021c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000022c0)={{r11, 0xffffffffffffffff}, &(0x7f0000002300), &(0x7f0000002340)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002380)={{r12, 0xffffffffffffffff}, &(0x7f00000023c0), &(0x7f0000002400)=r10}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002440)={r13, &(0x7f0000002480)}, 0x20) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000024c0)={0x1, 0x0}, 0x8) (rerun: 64) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002500)=r14, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002540)=@bpf_lsm={0x1d, 0x3, &(0x7f0000002600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xc06}}, &(0x7f0000002640)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r15, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r14, 0x0, 0x1, 0x0, &(0x7f0000002680)=[{0x0, 0x6, 0xd, 0x2}], 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000026c0)={0x3, 0x26, &(0x7f0000002780)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x72}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc14a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x7, 0x1, 0x0, r9}], &(0x7f00000028c0)='GPL\x00', 0x1000, 0x5, &(0x7f0000002900)=""/5, 0x40f00, 0x20, '\x00', 0x0, @sched_cls=0x37, r9, 0x8, &(0x7f0000002940)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000002980)={0x2, 0x4, 0x4, 0x3}, 0x10, r14, r4, 0x5, 0x0, &(0x7f00000029c0)=[{0x4, 0x1, 0xd, 0x4}, {0x1, 0x3, 0x0, 0x3}, {0x2, 0x5, 0xa, 0x1}, {0x2, 0x3, 0xe, 0xa}, {0x2, 0x2, 0xa, 0x1}], 0x10, 0x8}, 0x94) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) pipe(&(0x7f0000002a40)) getsockopt$inet_tcp_buf(r16, 0x6, 0x1f, 0x0, 0x0) 24.872936764s ago: executing program 1 (id=6736): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000009, 0xc050, r1, 0x46e2a000) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) 24.872468699s ago: executing program 4 (id=6737): r0 = socket$inet6(0xa, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000180)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) write$nci(r1, &(0x7f0000000340)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0xcf, @f={0xfd, 0x3, 0x2, 0xfc, {0x81, 0x2f, "57df37d5b72197eb852253da296e0786e2c72817b6c6a53f5bad77bfe8a8280bf3fae1c5d4b412a750ab0eca15305b"}}}, 0x39) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) (async) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x4) (async) listen(0xffffffffffffffff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/8, 0x8}, 0x800}], 0x1, 0x10002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000185a00000a0000000000000000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7910e0008000000b7030000040000008500000006000000"], &(0x7f0000000600)='syzkaller\x00', 0x5, 0x8e, &(0x7f0000000640)=""/142, 0x0, 0xb, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x8, 0x9, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000780)=[0x1, 0x1], &(0x7f00000007c0)=[{0x1, 0x3, 0x6, 0xd}, {0x1, 0x4, 0x4, 0x6}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xf, 0x2}, {0x2, 0xffffffff, 0x3, 0xa}], 0x10, 0x6}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000185a00000a0000000000000000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7910e0008000000b7030000040000008500000006000000"], &(0x7f0000000600)='syzkaller\x00', 0x5, 0x8e, &(0x7f0000000640)=""/142, 0x0, 0xb, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x8, 0x9, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000780)=[0x1, 0x1], &(0x7f00000007c0)=[{0x1, 0x3, 0x6, 0xd}, {0x1, 0x4, 0x4, 0x6}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xf, 0x2}, {0x2, 0xffffffff, 0x3, 0xa}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r5, 0x0, 0x27, 0x0, &(0x7f00000008c0)="5eb62788ecd1fe7f42e4aef38559af2d395eb652c9f8b99a2dd70318b3f673a0903c71503aae9e9e010d095dd94bf0f8891180ce", &(0x7f0000000900), 0xa0, 0x0, 0xab, 0x4d, &(0x7f0000000380)="24f2319e8da38ac1031aa8085e052f2ac22afc13d8ba595fda24cd5ab55e73a13c964e2d5d896de90be54fb6255d25ee329a8e4b1607f29abd27b7adc2ed30bf69a3b0630fe2a39af9b74558c3311e55f8991854dc866615442574cad5dbff6ae003c970e14e58d1e1be7c61cba92a49d0110989a24ee4908c7ffd406faac66ace0a40a1a56d5c8c0acdf1931485671cae03467246f523393d92766c44ede51de998bb5500000000000000", 0x0, 0x3, 0x0, 0x8}, 0xffffff7b) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a00)={'geneve0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000a40)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000a80)=0x0) sendmsg$nl_route(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000867ccab6f32eefabdf2d97224acd162b46", @ANYRES64=r8, @ANYRES16=r11], 0x48}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000867ccab6f32eefabdf2d97224acd162b46", @ANYRES64=r8, @ANYRES16=r11], 0x48}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c0000001000010428bd70000100000000130000", @ANYRES32=0x0, @ANYBLOB="08000000000001002c00128009000100766c616e000000001c000280060001000200000006000100020000000600050088a8000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r12, 0x5452, &(0x7f0000000c80)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f0000000cc0)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) 24.59348929s ago: executing program 1 (id=6738): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x88d0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x30]}}, 0x0, 0x2b, 0x0, 0x1, 0x9}, 0x28) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000440)={'gretap0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000040)=0x9, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000540)=0xa6a, 0x4) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000480), &(0x7f00000004c0)=0x4) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) r5 = accept4$inet(r4, &(0x7f00000000c0), &(0x7f0000000380)=0x10, 0x80000) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000003c0)={0x0, @empty}, &(0x7f0000000400)=0xc) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x1f4, 0xe, 0x0, &(0x7f0000000340)="ffffffff7f833e9762a536c801d7", 0x0, 0x535d, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000500)=0x42) 24.455552893s ago: executing program 0 (id=6739): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="1c005e800800020001000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x4, 0x16, &(0x7f0000000b80)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee6ff80bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b8125690361eec3b181dcfd7c2fb2d1f8975b579a085bee32d414c1f3ab987a9de6385ae8021f4ca33b9b35fe817e98beb9cefe7f40fd6f0ea3affbdaaa897c70fb01d270a7b00d36fb5ab8fa92ac014a106e3e4decc68652503ca54fcef437d96c8a05d59ddcc8abf09cd77e93e940207b03189c5d4661e43df6f1f036c8d85a2ad7615a021f8cbe507ef94fb9f33315366e9ae080000001b532226b63b460d68808a67529637bf7f6731ad0cf1718bae3c8b9d2f89050cb496fe791381af6fab290900000000000000d640a5fde1f7d5eaa97cd25523fbd77300000000000000d67559b0c848aa3e7091f33e2dfc351e903ce85488fb25691249545bcf877011847df184bae6d3f5d0c016ec7d581d5b2fcb494d8c2df1929398ec5c3675ed16c27fff46a695eed7f50c531a612d5677b5e949ee4f16d10e41074702c4e89ee401ec2ec65f38f64189f1fa2cc0a42add3119025764759de2f093c26fe51d2f7635bb06bdf0b97d4a96cb0813e084232421c6026629fbf4c81954d11e154659b54fcf3468577295c700000000000000000000000000000000fe31e1e02dd54ac3c7af2b3d76a63b79ca6f9a20b26761254aee1352ad08118a58802cc8f107852b8f5382f0871255ce5c0b31e39637850330f520d03ed2aa076efa8401613537585d45bd27454beccdc32645cfe67921df3f2bbf88cacc83f82e916f0ee19ad20cdf5ce3b2ee147f78c1caf8b8024bac9809015b2210d7c2471dfd73f6eb"], &(0x7f0000000e80)='GPL\x00'}, 0x48) r5 = epoll_create1(0x0) poll(&(0x7f0000000000)=[{r5, 0x2021}], 0x1, 0xdb4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000140)) shutdown(r6, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r8, 0x0, 0x13, 0x0, &(0x7f0000000940)="cc9ff4088b00000000000000000000ef1b0ef8", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x40, r7, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6d}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 23.706316637s ago: executing program 4 (id=6740): r0 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r1, {0xc, 0xc}, {}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000700)={0x2, @in6={{0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}}, 0x3fdb, 0x7fff, 0x2, 0x8, 0x6}, &(0x7f00000007c0)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000800)={r2, 0x5}, 0x8) 23.333972749s ago: executing program 0 (id=6741): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x100}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x570e626}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f00100000f0101052abd7000ffdbdf2503000008f906e164cb58a9362386dd0dd3494dedf3db050c6b2a3df6b6ebf8e224cae2ace9e947e87f3ff2dd687253317cb1717e87bbd3dd14f6758d2b1a09e531b0bc41c119cc8e0722fa9fa998751c66b8f25d151982937cc8826c00214ad0aa6adab43b3187e9d7bb30ec40c72e5c3200fe146365662a760eea7ebbd920b2d61ef82ed3c825ad0db6a6a6ccc6e19defd3e04b6023833685d89e24d411d71952413ab9bd3801f2802ee5db0ab24a0d0acb4b58bd93d83170aafb42aba83005598bd12be832840c12f63a2b02965838b20be68135e4fd16523a01ff10134329565fc1d1764efbd366080077867c750bf9b7a029f6956f16a6fa9ab7fd72d09b21be82ca650474ae0adcf71da4cd003900b6bb06a62393f0c5016d83fd53cffa8fa7b928be1ae9493115d8d151e848f961e42a497276266550fc02048873acfd1bc78663f0909d7a898fc15fd55670349798ebc28888c246f343e6fa7f012bd10d65cf77c9c0bb978494acb5f450132a1bbc34172c627a69e40876b1607ac50ae91f6ab2c2f82034761237999e0e3b3e9eb0e9cef80850d68ba9be7d559e87b3aabc8bb7d480767d5f8adb43a6ce476d1be8c0bb32f44e2f1cc638ac7a2f6deb00ecc1dd96eb4c6be0c904b177e21015224c208e7321c7e107b7000000000000"], 0x1f0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 23.210058944s ago: executing program 4 (id=6742): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="180000008b00000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000000000095000000000000002d0a0600000000002500ffffdf070ae91801000020646c2500000010002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f00000008c0)='GPL\x00', 0xb, 0x1001, &(0x7f0000000900)=""/4097, 0x41000, 0x24}, 0x94) 22.802614583s ago: executing program 4 (id=6743): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x2, 0x44) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xcb07db51ec3c327b, 0x0, 0x7e92}, 0x50) sendmsg$key(0xffffffffffffffff, 0x0, 0x4048001) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000005c0)=[@window={0x3, 0x80, 0x7bf}, @window={0x3, 0x7, 0x2}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}], 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000600)='hybla', 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={r5, &(0x7f0000000700), &(0x7f0000000740)=@udp=r4}, 0x20) recvmsg(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/165, 0xa5}], 0x1}, 0x22) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r6, &(0x7f0000000900), 0x9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000008, 0x100010, 0xffffffffffffffff, 0x200000) connect$inet6(r4, &(0x7f0000000940)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000500)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r7, 0x84, 0x82, &(0x7f0000000640), 0x8) shutdown(r6, 0x1) sendto$inet6(r7, &(0x7f0000000680)="b8", 0x1, 0x2000c851, &(0x7f0000000700)={0xa, 0x4e23, 0x6, @loopback, 0xffffffff}, 0x1c) 22.802416902s ago: executing program 0 (id=6744): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@private1, 0x0}, &(0x7f0000000040)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0ff0000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b04000000000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d980000000000005608ffff000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.759124771s ago: executing program 0 (id=6745): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0xecdf, 0xfffc, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x54, 0xffffffff}, 0x70bd2a, 0x800003, 0x2, 0x2, 0x0, 0x57}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x0, 0x70bd2a}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x160}}, 0x4004004) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000f000000850000001500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a44, 0x1700) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000000000010000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x9, &(0x7f00000004c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000500)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000540)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000580), 0x4) close(r5) setsockopt$inet_buf(r4, 0x0, 0x2c, &(0x7f0000000080)="f6c8998e8107285d5816ee1e1fb75d1d53a1ca30d33c1f1ac0db87cd2ec2b538e9eaf8639d60d369ea3b149eb815e275e3879e0f6efaa4c6c56c209c298db57c22b9c1863aafc1436f3a2256447c5d485d809069a7f537ae9f6dffee60df6fcf746435527a1de329ea3325c67576c0395cc8f0e23bebc30ad2938ca8a5365c8b27c1c39c24c90bb0c19e0e2bc34ba7e463f60648246d96f0b49689f3dc596236fdda10219a5df91d", 0xa8) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000380)={@private2, 0x800, 0x0, 0x2, 0x9, 0x0, 0x80}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000003c0)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f0000000400)={&(0x7f0000000440)={0xa, 0x4e1f, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2400d52a4100473ec49d00000029000000c7c82f34c1ff433200100000001b0004cd399974d6850bada9856ef0e46ea7e69bfef4930fd5e3f379143546e19771374627c8bb54f84a69e12579", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000800)=@req3={0x1, 0x80, 0x747, 0xe, 0x3, 0xfffffffb, 0x7fff}, 0x1c) 12.719682316s ago: executing program 3 (id=6746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000090000fdffffff00"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x13, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f0000000540)="b800000500000000", &(0x7f0000000580)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000061110900000000001800000000002000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180), 0x171}}], 0x400000000000172, 0x4000000) sendto$inet6(r3, 0x0, 0xf5ff, 0x2404c804, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x80) 0s ago: executing program 32 (id=6724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x62a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vxcan1\x00', 0x10}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00'}) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f0000000240)=""/4057, &(0x7f0000001240)=0xfd9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f"], 0x64}}, 0x0) (async) sendmsg(r5, &(0x7f0000001440)={0x0, 0x46, &(0x7f0000001480), 0x1}, 0x40000) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000014c0)={@cgroup, 0xffffffffffffffff, 0x2a}, 0x20) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0xc, &(0x7f00000015c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000477b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001680)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=@newlink={0x108, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0xd8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc8, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xb, 0x7}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xc}}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0x54, 0x1, {0x2, 0xce10}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x283, 0x13}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4bf4, 0x200}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xffffffffffffffd3, 0x1, {0x3, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0xffff7fff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x108}}, 0x0) (async) read(r6, &(0x7f0000001880)=""/4, 0x4) (async, rerun: 64) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x3, 0xc, &(0x7f0000001b80)=ANY=[@ANYBLOB="18020000000000010000000000000000850000009700000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000009b00000095"], &(0x7f0000001c00)='syzkaller\x00'}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c40)={r9, 0x0, 0xe, 0x0, &(0x7f0000001cc0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x16, 0xc, &(0x7f0000001980)=ANY=[], &(0x7f00000019c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000001a80)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x3, 0x8000}, 0x4) (async) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0800080006000500000014000000453a0fc0006512000d11"], 0xfce) (async, rerun: 64) r11 = socket$kcm(0x21, 0x2, 0xa) (rerun: 64) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x1, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/40], 0x28}, 0xfc40) kernel console output (not intermixed with test programs): me changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 881.159172][T31215] __nla_validate_parse: 2 callbacks suppressed [ 881.159234][T31215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5523'. [ 881.416485][T31226] netlink: 'syz.0.5525': attribute type 11 has an invalid length. [ 881.416512][T31226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5525'. [ 881.462665][T31230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5528'. [ 881.804816][T31240] macvlan2: entered promiscuous mode [ 881.804859][T31240] macvlan2: entered allmulticast mode [ 881.821992][T31240] bond9: entered promiscuous mode [ 881.832882][T31240] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 881.871584][T31240] bond9: left promiscuous mode [ 881.944594][T31243] syzkaller0: left promiscuous mode [ 881.944618][T31243] syzkaller0: left allmulticast mode [ 881.966532][T31243] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 882.043256][T31253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5533'. [ 882.043595][T31253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5533'. [ 882.478660][T31280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5538'. [ 882.586348][T31288] ip_tables: iptables: counters copy to user failed while replacing table [ 882.631820][T31290] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 883.379373][T31319] veth1_to_team: entered promiscuous mode [ 883.420889][T31319] veth1_to_team: left promiscuous mode [ 884.410637][T31321] veth1_to_team: entered promiscuous mode [ 884.426969][T31321] veth1_to_team: left promiscuous mode [ 884.932280][T31353] ip_tables: iptables: counters copy to user failed while replacing table [ 888.533309][T31393] bridge_slave_0: left allmulticast mode [ 888.533339][T31393] bridge_slave_0: left promiscuous mode [ 888.533525][T31393] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.559465][T31394] bridge_slave_1: left allmulticast mode [ 888.559494][T31394] bridge_slave_1: left promiscuous mode [ 888.559697][T31394] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.615317][T31394] bond0: (slave bridge0): Releasing backup interface [ 888.922456][T31409] syzkaller0: entered promiscuous mode [ 888.922482][T31409] syzkaller0: entered allmulticast mode [ 889.095437][T31415] x_tables: duplicate underflow at hook 2 [ 889.103460][T31415] ip_tables: iptables: counters copy to user failed while replacing table [ 889.130943][T31420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5563'. [ 889.381536][T31420] virt_wifi0 speed is unknown, defaulting to 1000 [ 889.381606][T31420] virt_wifi0 speed is unknown, defaulting to 1000 [ 889.382399][T31420] virt_wifi0 speed is unknown, defaulting to 1000 [ 889.398670][T31420] smbdirect: ib_dev[ÿ]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 889.398783][T31420] smbdirect: ib_dev[ÿ]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 889.398904][T31420] smbdirect: ib_dev[ÿ]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 889.481280][T31428] sctp: [Deprecated]: syz.0.5565 (pid 31428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 889.481280][T31428] Use struct sctp_sack_info instead [ 889.545619][T31440] ip_tables: iptables: counters copy to user failed while replacing table [ 889.606036][T31420] virt_wifi0 speed is unknown, defaulting to 1000 [ 889.609318][T31434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5566'. [ 889.712722][T31420] virt_wifi0 speed is unknown, defaulting to 1000 [ 889.723773][T31420] virt_wifi0 speed is unknown, defaulting to 1000 [ 889.748827][T31420] virt_wifi0 speed is unknown, defaulting to 1000 [ 889.758077][T31420] virt_wifi0 speed is unknown, defaulting to 1000 [ 889.776076][T31420] virt_wifi0 speed is unknown, defaulting to 1000 [ 889.898338][T31453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5570'. [ 890.167919][T31467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5573'. [ 890.168005][T31467] bond2: left allmulticast mode [ 890.168100][T31467] bond2: left promiscuous mode [ 890.168412][T31467] bridge0: port 4(bond2) entered disabled state [ 890.213269][T31467] batadv0: left promiscuous mode [ 890.213550][T31467] bridge0: port 3(batadv0) entered disabled state [ 890.248480][T31467] bridge_slave_1: left promiscuous mode [ 890.248717][T31467] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.322615][T31467] bridge_slave_0: left allmulticast mode [ 890.322661][T31467] bridge_slave_0: left promiscuous mode [ 890.329113][T31467] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.591761][T31488] block nbd0: server does not support multiple connections per device. [ 890.592106][T31488] block nbd0: shutting down sockets [ 890.779270][T31492] ip6gre1: entered allmulticast mode [ 890.903086][T31494] ip_tables: iptables: counters copy to user failed while replacing table [ 890.958494][T31501] netlink: 'syz.3.5578': attribute type 3 has an invalid length. [ 890.958519][T31501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5578'. [ 891.281703][T31516] ip_tables: iptables: counters copy to user failed while replacing table [ 891.302455][T31513] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5582'. [ 891.907659][T31545] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5589'. [ 891.960929][T31552] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5589'. [ 892.146819][T31564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5591'. [ 892.222677][T31569] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5593'. [ 892.838509][T31601] netlink: 'syz.4.5601': attribute type 12 has an invalid length. [ 893.808070][T31622] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 893.909737][T31653] geneve1: entered promiscuous mode [ 893.930048][T31653] siw: device registration error -23 [ 894.596374][T31685] ip_tables: iptables: counters copy to user failed while replacing table [ 894.948232][T31704] syzkaller1: entered promiscuous mode [ 894.948260][T31704] syzkaller1: entered allmulticast mode [ 894.973362][T31704] tc_dump_action: action bad kind [ 894.997830][T31707] __nla_validate_parse: 4 callbacks suppressed [ 894.997852][T31707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5627'. [ 895.079513][T31710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5627'. [ 895.152486][T31707] veth1_macvtap: left promiscuous mode [ 895.351483][T31720] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5630'. [ 895.351731][T31720] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5630'. [ 895.351926][T31720] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5630'. [ 895.352117][T31720] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5630'. [ 895.352308][T31720] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5630'. [ 895.352501][T31720] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5630'. [ 895.358566][T31720] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5630'. [ 895.359155][T31720] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5630'. [ 895.583659][T31726] batadv_slave_1: entered promiscuous mode [ 895.840659][ T30] audit: type=1800 audit(1792844444.630:49): pid=31746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5636" name="memory.events" dev="tmpfs" ino=2412 res=0 errno=-22 [ 895.910583][ T30] audit: type=1804 audit(1792844444.700:50): pid=31746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5636" name="/newroot/466/memory.events" dev="tmpfs" ino=2412 res=1 errno=0 [ 896.499814][T31763] xt_CT: No such helper "snmp" [ 897.164088][T31809] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 897.168234][T31809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 897.397424][T31815] netlink: 'syz.0.5650': attribute type 10 has an invalid length. [ 897.422705][T31815] geneve2: entered promiscuous mode [ 897.422732][T31815] geneve2: entered allmulticast mode [ 897.510890][T31816] bond10: entered allmulticast mode [ 897.511466][T31816] 8021q: adding VLAN 0 to HW filter on device bond10 [ 897.753027][T31833] syzkaller1: entered promiscuous mode [ 897.753052][T31833] syzkaller1: entered allmulticast mode [ 898.101027][T31852] ip_tables: iptables: counters copy to user failed while replacing table [ 898.538329][T31881] netlink: 'syz.4.5663': attribute type 1 has an invalid length. [ 898.657570][T31887] bond10: (slave bridge7): Enslaving as a backup interface with an up link [ 899.061133][T31898] vti0: entered promiscuous mode [ 899.061163][T31898] vti0: entered allmulticast mode [ 899.078204][T31900] sch_tbf: burst 48 is lower than device ip6gre0 mtu (1448) ! [ 899.133257][T31894] tipc: Enabling of bearer rejected, failed to enable media [ 900.055018][T31962] __nla_validate_parse: 66 callbacks suppressed [ 900.055041][T31962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5681'. [ 900.135231][T31967] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5681'. [ 900.491468][T31980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5687'. [ 900.491720][T31980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5687'. [ 900.579241][T31982] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 900.677278][T31985] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5688'. [ 900.861736][T31996] netlink: 'syz.1.5688': attribute type 1 has an invalid length. [ 901.063277][T31998] Unknown options in mask 6 [ 901.239671][T32009] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5692'. [ 901.259226][T32009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5692'. [ 901.793763][T32016] bond11: entered allmulticast mode [ 901.870175][T32028] FAULT_INJECTION: forcing a failure. [ 901.870175][T32028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 901.870293][T32028] CPU: 1 UID: 0 PID: 32028 Comm: syz.2.5695 Not tainted syzkaller #0 PREEMPT(full) [ 901.870320][T32028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 901.870335][T32028] Call Trace: [ 901.870345][T32028] [ 901.870357][T32028] dump_stack_lvl+0xe8/0x150 [ 901.870396][T32028] should_fail_ex+0x410/0x560 [ 901.870436][T32028] _copy_from_user+0x2d/0xb0 [ 901.870471][T32028] ___sys_sendmsg+0x1c6/0x360 [ 901.870506][T32028] ? __lock_acquire+0x747/0x2de0 [ 901.870538][T32028] ? __pfx____sys_sendmsg+0x10/0x10 [ 901.870617][T32028] ? __fget_files+0x3a2/0x420 [ 901.870641][T32028] ? __fget_files+0x2a/0x420 [ 901.870677][T32028] __x64_sys_sendmsg+0x1b1/0x290 [ 901.870704][T32028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 901.870764][T32028] do_syscall_64+0x166/0x520 [ 901.870787][T32028] ? trace_irq_disable+0x3b/0x140 [ 901.870815][T32028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.870838][T32028] ? clear_bhb_loop+0x70/0xc0 [ 901.870867][T32028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.870890][T32028] RIP: 0033:0x7f7271f9f559 [ 901.870911][T32028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.870930][T32028] RSP: 002b:00007f7272e84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.870955][T32028] RAX: ffffffffffffffda RBX: 00007f7272225fa0 RCX: 00007f7271f9f559 [ 901.870972][T32028] RDX: 0000000000040000 RSI: 0000200000001b80 RDI: 0000000000000003 [ 901.870997][T32028] RBP: 00007f7272e84090 R08: 0000000000000000 R09: 0000000000000000 [ 901.871012][T32028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.871026][T32028] R13: 00007f7272226038 R14: 00007f7272225fa0 R15: 00007ffd86232388 [ 901.871063][T32028] [ 901.998670][T32018] macvlan0: entered promiscuous mode [ 901.998757][T32018] macvlan0: entered allmulticast mode [ 902.030448][T32018] bond11: entered promiscuous mode [ 902.056563][T32018] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 902.113307][T32018] bond11: left promiscuous mode [ 903.242835][T32090] FAULT_INJECTION: forcing a failure. [ 903.242835][T32090] name failslab, interval 1, probability 0, space 0, times 0 [ 903.242872][T32090] CPU: 1 UID: 0 PID: 32090 Comm: syz.1.5707 Not tainted syzkaller #0 PREEMPT(full) [ 903.242898][T32090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 903.242913][T32090] Call Trace: [ 903.242923][T32090] [ 903.242933][T32090] dump_stack_lvl+0xe8/0x150 [ 903.242973][T32090] should_fail_ex+0x410/0x560 [ 903.243011][T32090] ? __alloc_skb+0x1db/0x7a0 [ 903.243042][T32090] should_failslab+0xa8/0x100 [ 903.243079][T32090] ? __alloc_skb+0x1db/0x7a0 [ 903.243108][T32090] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 903.243137][T32090] ? __alloc_skb+0x18d/0x7a0 [ 903.243169][T32090] ? __alloc_skb+0x1db/0x7a0 [ 903.243208][T32090] __alloc_skb+0x1db/0x7a0 [ 903.243246][T32090] netlink_sendmsg+0x5cd/0xb20 [ 903.243288][T32090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 903.243323][T32090] ? aa_sock_msg_perm+0x144/0x210 [ 903.243365][T32090] ? apparmor_socket_sendmsg+0x98/0x360 [ 903.243394][T32090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 903.243422][T32090] sock_sendmsg_nosec+0x14e/0x190 [ 903.243454][T32090] ____sys_sendmsg+0x54e/0x850 [ 903.243496][T32090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 903.243543][T32090] ? import_iovec+0x73/0xa0 [ 903.243580][T32090] ___sys_sendmsg+0x2a5/0x360 [ 903.243613][T32090] ? __lock_acquire+0x747/0x2de0 [ 903.243644][T32090] ? __pfx____sys_sendmsg+0x10/0x10 [ 903.243723][T32090] ? __fget_files+0x3a2/0x420 [ 903.243748][T32090] ? __fget_files+0x2a/0x420 [ 903.243784][T32090] __x64_sys_sendmsg+0x1b1/0x290 [ 903.243810][T32090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 903.243870][T32090] do_syscall_64+0x166/0x520 [ 903.243893][T32090] ? trace_irq_disable+0x3b/0x140 [ 903.243920][T32090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.243944][T32090] ? clear_bhb_loop+0x70/0xc0 [ 903.243972][T32090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.243995][T32090] RIP: 0033:0x7fa28c99f559 [ 903.244017][T32090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.244036][T32090] RSP: 002b:00007fa28d7ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 903.244061][T32090] RAX: ffffffffffffffda RBX: 00007fa28cc25fa0 RCX: 00007fa28c99f559 [ 903.244078][T32090] RDX: 0000000000040000 RSI: 0000200000001b80 RDI: 0000000000000003 [ 903.244093][T32090] RBP: 00007fa28d7ed090 R08: 0000000000000000 R09: 0000000000000000 [ 903.244108][T32090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.244122][T32090] R13: 00007fa28cc26038 R14: 00007fa28cc25fa0 R15: 00007ffdf6fafee8 [ 903.244161][T32090] [ 903.711004][T32096] netlink: 'syz.2.5709': attribute type 1 has an invalid length. [ 903.711030][T32096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5709'. [ 903.991152][T32105] pim6reg: entered allmulticast mode [ 903.992438][T32105] pim6reg: left allmulticast mode [ 904.612054][T32101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5710'. [ 904.676293][T13976] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 904.677587][T30704] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 904.677631][T30704] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 904.677669][T30704] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 905.014669][T32139] netlink: 'syz.0.5720': attribute type 1 has an invalid length. [ 905.289454][T32143] bond4: (slave veth12): Enslaving as an active interface with a down link [ 905.921463][T32179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5730'. [ 906.300365][T32160] netlink: 'syz.1.5725': attribute type 4 has an invalid length. [ 906.676030][T32174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.230651][T32217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5738'. [ 907.691663][T32248] netlink: 'syz.3.5743': attribute type 16 has an invalid length. [ 907.691691][T32248] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5743'. [ 907.692525][T32248] Bluetooth: hci0: unsupported parameter 5161 [ 907.692547][T32248] Bluetooth: hci0: unsupported parameter 8192 [ 907.692563][T32248] Bluetooth: hci0: unsupported parameter 5161 [ 907.692578][T32248] Bluetooth: hci0: unsupported parameter 8192 [ 907.763510][T32248] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5743'. [ 908.266239][T32267] ip_tables: iptables: counters copy to user failed while replacing table [ 908.591287][T32243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 908.711318][T32284] x_tables: duplicate underflow at hook 1 [ 908.827953][T32298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5755'. [ 909.310671][T32332] netlink: 'syz.4.5759': attribute type 1 has an invalid length. [ 909.654625][T32284] workqueue: Failed to create a rescuer kthread for wq "nfc21_nci_tx_wq": -EINTR [ 910.469908][T32419] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5774'. [ 910.576271][T32423] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5774'. [ 910.622128][T27259] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 910.630743][T27259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 910.653040][T27259] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 910.667467][T27259] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 910.668150][T27259] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 910.753679][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 910.756344][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 910.759073][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 910.767750][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 910.771027][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 911.151395][T32442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5776'. [ 911.216925][T32442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5776'. [ 911.468419][T32453] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 911.468775][T32449] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5778'. [ 911.491870][T32453] xt_TPROXY: Can be used only with -p tcp or -p udp [ 911.701430][T32454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5779'. [ 911.830317][T32465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5780'. [ 911.997362][T32474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5780'. [ 911.997367][ T6723] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.997403][ T6723] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 912.592689][ T6723] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.609333][ T6723] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 912.647345][T32487] xt_TCPMSS: Only works on TCP SYN packets [ 912.802533][ T6723] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.802576][ T6723] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 912.897460][T32493] gtp1: entered allmulticast mode [ 912.934697][ T53] Bluetooth: hci3: command tx timeout [ 913.015029][ T6723] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.015070][ T6723] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 913.451452][T32513] netlink: 'syz.4.5789': attribute type 16 has an invalid length. [ 913.451478][T32513] netlink: 'syz.4.5789': attribute type 17 has an invalid length. [ 913.520585][T32518] tipc: Resetting bearer [ 913.523250][T32518] tipc: Resetting bearer [ 913.866943][T32527] ip_tables: iptables: counters copy to user failed while replacing table [ 914.001996][T32513] batadv0: left allmulticast mode [ 914.028018][T32513] tipc: Resetting bearer [ 914.146427][T32513] geneve1: left promiscuous mode [ 914.164899][T32513] mac80211_hwsim hwsim30 wlan1: left promiscuous mode [ 914.172718][T32513] vlan2: left allmulticast mode [ 914.172737][T32513] bond0: left allmulticast mode [ 914.187317][T32513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 914.201746][T32513] ip6gre1: left promiscuous mode [ 914.218485][T32513] bond2: left promiscuous mode [ 914.218509][T32513] bond2: left allmulticast mode [ 914.218912][T32513] 8021q: adding VLAN 0 to HW filter on device bond2 [ 914.234671][T32513] bridge0: port 4(vlan3) entered blocking state [ 914.234990][T32513] bridge0: port 4(vlan3) entered forwarding state [ 914.247732][T32513] vlan4: left promiscuous mode [ 914.247754][T32513] bridge0: left promiscuous mode [ 914.274894][T32513] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 914.422389][T32424] virt_wifi0 speed is unknown, defaulting to 1000 [ 914.577347][T32540] netlink: 'syz.0.5793': attribute type 1 has an invalid length. [ 914.697023][T32548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5793'. [ 915.014023][ T53] Bluetooth: hci3: command tx timeout [ 915.061638][ T6723] bond1 (unregistering): (slave geneve2): Releasing active interface [ 915.090238][ T6723] bond3 (unregistering): (slave bridge0): Releasing active interface [ 915.145561][ T6723] bond1 (unregistering): Released all slaves [ 915.165036][ T6723] bond2 (unregistering): Released all slaves [ 915.201538][ T6723] bond3 (unregistering): Released all slaves [ 915.221849][ T6723] bond4 (unregistering): Released all slaves [ 915.239569][ T6723] bond5 (unregistering): Released all slaves [ 915.305337][ T6723] bond6 (unregistering): Released all slaves [ 915.338454][ T6723] bond0 (unregistering): Released all slaves [ 915.365865][ T6723] bond7 (unregistering): Released all slaves [ 915.382293][ T6723] bond8 (unregistering): Released all slaves [ 915.398383][ T6723] bond9 (unregistering): Released all slaves [ 915.417638][ T6723] bond10 (unregistering): Released all slaves [ 915.436499][ T6723] bond11 (unregistering): Released all slaves [ 915.481502][T32540] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 915.643003][ T6723] tipc: Left network mode [ 916.268151][T32573] virtio_blk virtio6: 1/0/0 default/read/poll queues [ 916.300850][T32573] virtio_blk virtio6: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 916.949640][T32573] vda: unable to read partition table [ 916.982354][T32608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5806'. [ 917.050747][T32608] ip6tnl0: entered promiscuous mode [ 917.094483][ T53] Bluetooth: hci3: command tx timeout [ 917.096300][ T6723] hsr_slave_0: left promiscuous mode [ 917.101167][ T6723] hsr_slave_1: left promiscuous mode [ 917.227041][T32617] netlink: 'syz.3.5807': attribute type 32 has an invalid length. [ 918.199011][T32647] netlink: 'syz.4.5811': attribute type 2 has an invalid length. [ 918.317860][T32424] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.317993][T32424] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.318164][T32424] bridge_slave_0: entered allmulticast mode [ 918.320104][T32424] bridge_slave_0: entered promiscuous mode [ 918.351835][T32424] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.352761][T32424] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.352943][T32424] bridge_slave_1: entered allmulticast mode [ 918.382333][T32424] bridge_slave_1: entered promiscuous mode [ 918.518895][T32424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.543384][T32424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.622714][T32424] team0: Port device team_slave_0 added [ 918.635682][T32424] team0: Port device team_slave_1 added [ 918.708628][T32424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.708650][T32424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.708682][T32424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.710953][T32424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.710971][T32424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.711001][T32424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.790204][T32673] netlink: 'syz.3.5814': attribute type 10 has an invalid length. [ 918.790277][T32673] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5814'. [ 918.862013][ T6723] IPVS: stop unused estimator thread 0... [ 918.991766][T32679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5815'. [ 918.991937][T32680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5815'. [ 919.173914][ T53] Bluetooth: hci3: command tx timeout [ 919.448250][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 919.492345][T32424] hsr_slave_0: entered promiscuous mode [ 919.506409][T32424] hsr_slave_1: entered promiscuous mode [ 919.922260][T32722] Bluetooth: hci0: unsupported parameter 5135 [ 919.922287][T32722] Bluetooth: hci0: unsupported parameter 8192 [ 919.922304][T32722] Bluetooth: hci0: unsupported parameter 5135 [ 919.922320][T32722] Bluetooth: hci0: unsupported parameter 8192 [ 920.556273][T32746] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 920.561893][T32746] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5828'. [ 920.785893][T32759] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 921.045412][T32754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5830'. [ 921.161738][ T303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 921.239998][T32424] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 921.259022][T32424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 921.261599][T32424] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 921.288432][T32424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 921.307462][ T310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5834'. [ 921.331572][T32424] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 921.347354][T32424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 921.348831][T32424] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 921.374893][T32424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 921.549154][T32424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.576304][T32424] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.606500][ T6723] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.606615][ T6723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.636063][ T6723] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.636172][ T6723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.710920][ T334] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 921.880584][ T334] veth1_to_bond: Caught tx_queue_len zero misconfig [ 921.926015][ T335] netlink: 'syz.0.5839': attribute type 10 has an invalid length. [ 922.019104][ T335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.032393][ T335] batadv0: entered promiscuous mode [ 922.045578][ T335] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 922.602903][ T373] netlink: 'syz.2.5845': attribute type 1 has an invalid length. [ 922.632025][T30704] tipc: Subscription rejected, illegal request [ 922.868406][ T379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5845'. [ 922.916736][ T373] veth13: entered promiscuous mode [ 923.019706][ T395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5850'. [ 923.142666][T32424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 923.290011][T32424] veth0_vlan: entered promiscuous mode [ 923.318660][T32424] veth1_vlan: entered promiscuous mode [ 923.440224][T32424] veth0_macvtap: entered promiscuous mode [ 923.465968][T32424] veth1_macvtap: entered promiscuous mode [ 923.544467][T32424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.592091][T32424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.745651][ T6723] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.745744][ T6723] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.745786][ T6723] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.745826][ T6723] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.918565][ T6723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.918591][ T6723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.921730][ T422] netlink: 'syz.4.5856': attribute type 10 has an invalid length. [ 924.037421][T13978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.037444][T13978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.201565][ T432] sch_tbf: burst 0 is lower than device lo mtu (143) ! [ 924.851262][ T474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5865'. [ 924.851292][ T474] openvswitch: netlink: Message has 8 unknown bytes. [ 925.109874][ T489] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 925.466520][ T518] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5874'. [ 925.471786][ T30] audit: type=1804 audit(1792844474.260:51): pid=517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5877" name="/newroot/4/cgroup.controllers" dev="tmpfs" ino=38 res=1 errno=0 [ 925.471839][ T30] audit: type=1800 audit(1792844474.260:52): pid=517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5877" name="cgroup.controllers" dev="tmpfs" ino=38 res=0 errno=-22 [ 925.506806][ T517] netlink: 'syz.1.5877': attribute type 10 has an invalid length. [ 925.561972][ T516] netlink: 'syz.1.5877': attribute type 10 has an invalid length. [ 925.582693][ T517] team0: Port device dummy0 added [ 925.660948][ T516] team0: Port device dummy0 removed [ 925.714748][ T538] FAULT_INJECTION: forcing a failure. [ 925.714748][ T538] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 925.714795][ T538] CPU: 0 UID: 0 PID: 538 Comm: syz.2.5879 Not tainted syzkaller #0 PREEMPT(full) [ 925.714822][ T538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 925.714837][ T538] Call Trace: [ 925.714846][ T538] [ 925.714856][ T538] dump_stack_lvl+0xe8/0x150 [ 925.714897][ T538] should_fail_ex+0x410/0x560 [ 925.714937][ T538] prepare_alloc_pages+0x21e/0x5f0 [ 925.714976][ T538] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 925.715014][ T538] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 925.715052][ T538] ? __pfx_policy_nodemask+0x10/0x10 [ 925.715089][ T538] ? __get_vm_area_node+0x155/0x2f0 [ 925.715113][ T538] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 925.715139][ T538] ? __vmalloc_noprof+0xd2/0x120 [ 925.715164][ T538] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 925.715195][ T538] ? bpf_prog_alloc+0x3c/0x1a0 [ 925.715225][ T538] ? __sys_bpf+0xd0d/0xd90 [ 925.715253][ T538] ? __x64_sys_bpf+0xba/0xd0 [ 925.715278][ T538] ? do_syscall_64+0x166/0x520 [ 925.715300][ T538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.715330][ T538] alloc_pages_mpol+0x21e/0x390 [ 925.715372][ T538] alloc_pages_noprof+0xb1/0x2b0 [ 925.715397][ T538] get_free_pages_noprof+0xf/0x80 [ 925.715430][ T538] __kasan_populate_vmalloc+0x38/0x1c0 [ 925.715460][ T538] ? do_raw_spin_unlock+0xf5/0x200 [ 925.715500][ T538] alloc_vmap_area+0xd10/0x1410 [ 925.715543][ T538] ? __pfx_alloc_vmap_area+0x10/0x10 [ 925.715566][ T538] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 925.715598][ T538] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 925.715628][ T538] ? __get_vm_area_node+0x155/0x2f0 [ 925.715659][ T538] __get_vm_area_node+0x200/0x2f0 [ 925.715694][ T538] __vmalloc_node_range_noprof+0x343/0x1540 [ 925.715722][ T538] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 925.715754][ T538] ? __lock_acquire+0x747/0x2de0 [ 925.715823][ T538] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 925.715864][ T538] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 925.715894][ T538] __vmalloc_noprof+0xd2/0x120 [ 925.715921][ T538] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 925.715957][ T538] bpf_prog_alloc_no_stats+0x47/0x560 [ 925.715987][ T538] ? bpf_prog_alloc+0x2a/0x1a0 [ 925.716021][ T538] bpf_prog_alloc+0x3c/0x1a0 [ 925.716056][ T538] bpf_prog_load+0x7f8/0x1c20 [ 925.716102][ T538] ? __pfx_bpf_prog_load+0x10/0x10 [ 925.716164][ T538] __sys_bpf+0xd0d/0xd90 [ 925.716205][ T538] ? __pfx___sys_bpf+0x10/0x10 [ 925.716249][ T538] ? __fget_files+0x2a/0x420 [ 925.716296][ T538] ? ksys_write+0x242/0x270 [ 925.716326][ T538] ? __pfx_ksys_write+0x10/0x10 [ 925.716361][ T538] __x64_sys_bpf+0xba/0xd0 [ 925.716393][ T538] do_syscall_64+0x166/0x520 [ 925.716416][ T538] ? trace_irq_disable+0x3b/0x140 [ 925.716442][ T538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.716467][ T538] ? clear_bhb_loop+0x70/0xc0 [ 925.716496][ T538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.716520][ T538] RIP: 0033:0x7f7271f9f559 [ 925.716542][ T538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.716563][ T538] RSP: 002b:00007f7272e84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 925.716588][ T538] RAX: ffffffffffffffda RBX: 00007f7272225fa0 RCX: 00007f7271f9f559 [ 925.716605][ T538] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 925.716620][ T538] RBP: 00007f7272e84090 R08: 0000000000000000 R09: 0000000000000000 [ 925.716635][ T538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.716649][ T538] R13: 00007f7272226038 R14: 00007f7272225fa0 R15: 00007ffd86232388 [ 925.716698][ T538] [ 925.719284][ T538] warn_alloc: 1 callbacks suppressed [ 925.719301][ T538] syz.2.5879: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 925.719394][ T538] CPU: 0 UID: 0 PID: 538 Comm: syz.2.5879 Not tainted syzkaller #0 PREEMPT(full) [ 925.719421][ T538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 925.719435][ T538] Call Trace: [ 925.719445][ T538] [ 925.719455][ T538] dump_stack_lvl+0xe8/0x150 [ 925.719494][ T538] warn_alloc+0x24d/0x270 [ 925.719526][ T538] ? lockdep_hardirqs_on+0x7b/0x110 [ 925.719552][ T538] ? __pfx_warn_alloc+0x10/0x10 [ 925.719580][ T538] ? kfree+0x1c5/0x650 [ 925.719613][ T538] ? __get_vm_area_node+0x219/0x2f0 [ 925.719648][ T538] __vmalloc_node_range_noprof+0x36b/0x1540 [ 925.719677][ T538] ? __lock_acquire+0x747/0x2de0 [ 925.719733][ T538] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 925.719773][ T538] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 925.719812][ T538] __vmalloc_noprof+0xd2/0x120 [ 925.719838][ T538] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 925.719874][ T538] bpf_prog_alloc_no_stats+0x47/0x560 [ 925.719904][ T538] ? bpf_prog_alloc+0x2a/0x1a0 [ 925.719939][ T538] bpf_prog_alloc+0x3c/0x1a0 [ 925.719973][ T538] bpf_prog_load+0x7f8/0x1c20 [ 925.720019][ T538] ? __pfx_bpf_prog_load+0x10/0x10 [ 925.720081][ T538] __sys_bpf+0xd0d/0xd90 [ 925.720122][ T538] ? __pfx___sys_bpf+0x10/0x10 [ 925.720167][ T538] ? __fget_files+0x2a/0x420 [ 925.720212][ T538] ? ksys_write+0x242/0x270 [ 925.720243][ T538] ? __pfx_ksys_write+0x10/0x10 [ 925.720276][ T538] __x64_sys_bpf+0xba/0xd0 [ 925.720308][ T538] do_syscall_64+0x166/0x520 [ 925.720330][ T538] ? trace_irq_disable+0x3b/0x140 [ 925.720358][ T538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.720382][ T538] ? clear_bhb_loop+0x70/0xc0 [ 925.720415][ T538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.720438][ T538] RIP: 0033:0x7f7271f9f559 [ 925.720460][ T538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.720480][ T538] RSP: 002b:00007f7272e84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 925.720505][ T538] RAX: ffffffffffffffda RBX: 00007f7272225fa0 RCX: 00007f7271f9f559 [ 925.720523][ T538] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 925.720538][ T538] RBP: 00007f7272e84090 R08: 0000000000000000 R09: 0000000000000000 [ 925.720553][ T538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.720568][ T538] R13: 00007f7272226038 R14: 00007f7272225fa0 R15: 00007ffd86232388 [ 925.720605][ T538] [ 925.809371][ T538] Mem-Info: [ 925.809411][ T538] active_anon:6063 inactive_anon:0 isolated_anon:0 [ 925.809411][ T538] active_file:0 inactive_file:44042 isolated_file:0 [ 925.809411][ T538] unevictable:0 dirty:283 writeback:0 [ 925.809411][ T538] slab_reclaimable:12205 slab_unreclaimable:118887 [ 925.809411][ T538] mapped:29861 shmem:550 pagetables:3532 [ 925.809411][ T538] sec_pagetables:0 bounce:0 [ 925.809411][ T538] kernel_misc_reclaimable:0 [ 925.809411][ T538] free:1255720 free_pcp:10001 free_cma:0 [ 925.809580][ T538] Node 0 active_anon:24252kB inactive_anon:0kB active_file:0kB inactive_file:175964kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119444kB dirty:1128kB writeback:0kB shmem:2200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14812kB pagetables:13976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 925.809733][ T538] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 925.809909][ T538] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 925.810078][ T538] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 925.810305][ T538] Node 0 DMA32 free:1059628kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24252kB inactive_anon:0kB active_file:0kB inactive_file:175964kB unevictable:0kB writepending:1128kB zspages:0kB present:3129332kB managed:2526416kB mlocked:0kB bounce:0kB free_pcp:40004kB local_pcp:19544kB free_cma:0kB [ 925.810438][ T538] lowmem_reserve[]: 0 0 0 0 0 [ 925.810476][ T538] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 925.810535][ T538] lowmem_reserve[]: 0 0 0 0 0 [ 925.810658][ T538] Node 1 Normal free:3947892kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 925.810827][ T538] lowmem_reserve[]: 0 0 0 0 0 [ 925.810920][ T538] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 925.823396][ T538] Node 0 DMA32: 228*4kB (ME) 281*8kB (UME) 290*16kB (UME) 2082*32kB (UM) 788*64kB (UME) 249*128kB (UME) 283*256kB (UME) 206*512kB (UM) 98*1024kB (UM) 7*2048kB (UME) 149*4096kB (UM) = 1059640kB [ 925.833626][ T538] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 925.842233][ T538] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 6*16kB (UM) 6*32kB (UM) 7*64kB (UM) 5*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (UM) = 3947892kB [ 925.842718][ T538] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 925.842764][ T538] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 925.842808][ T538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 925.842868][ T538] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 925.842918][ T538] 44588 total pagecache pages [ 925.842940][ T538] 0 pages in swap cache [ 925.842962][ T538] Free swap = 124996kB [ 925.842984][ T538] Total swap = 124996kB [ 925.843013][ T538] 2097051 pages RAM [ 925.843034][ T538] 0 pages HighMem/MovableOnly [ 925.843163][ T538] 433831 pages reserved [ 925.843195][ T538] 0 pages cma reserved [ 927.056073][ T553] syzkaller1: entered allmulticast mode [ 927.180746][ T561] netlink: 480 bytes leftover after parsing attributes in process `syz.3.5885'. [ 927.180827][ T561] netlink: 480 bytes leftover after parsing attributes in process `syz.3.5885'. [ 927.435015][ T582] FAULT_INJECTION: forcing a failure. [ 927.435015][ T582] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 927.435051][ T582] CPU: 0 UID: 0 PID: 582 Comm: syz.3.5891 Not tainted syzkaller #0 PREEMPT(full) [ 927.435077][ T582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 927.435092][ T582] Call Trace: [ 927.435101][ T582] [ 927.435115][ T582] dump_stack_lvl+0xe8/0x150 [ 927.435163][ T582] should_fail_ex+0x410/0x560 [ 927.435201][ T582] prepare_alloc_pages+0x21e/0x5f0 [ 927.435240][ T582] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 927.435277][ T582] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 927.435309][ T582] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 927.435343][ T582] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 927.435379][ T582] ? __pfx_policy_nodemask+0x10/0x10 [ 927.435412][ T582] ? __get_vm_area_node+0x155/0x2f0 [ 927.435435][ T582] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 927.435460][ T582] ? __vmalloc_noprof+0xd2/0x120 [ 927.435490][ T582] __alloc_pages_noprof+0x10/0x100 [ 927.435521][ T582] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 927.435560][ T582] ? alloc_pages_noprof+0x140/0x2b0 [ 927.435587][ T582] __kasan_populate_vmalloc+0xb7/0x1c0 [ 927.435622][ T582] alloc_vmap_area+0xd10/0x1410 [ 927.435666][ T582] ? __pfx_alloc_vmap_area+0x10/0x10 [ 927.435688][ T582] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 927.435719][ T582] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 927.435748][ T582] ? __get_vm_area_node+0x155/0x2f0 [ 927.435778][ T582] __get_vm_area_node+0x200/0x2f0 [ 927.435811][ T582] __vmalloc_node_range_noprof+0x343/0x1540 [ 927.435840][ T582] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 927.435872][ T582] ? __lock_acquire+0x747/0x2de0 [ 927.435927][ T582] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 927.435966][ T582] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 927.435995][ T582] __vmalloc_noprof+0xd2/0x120 [ 927.436022][ T582] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 927.436057][ T582] bpf_prog_alloc_no_stats+0x47/0x560 [ 927.436088][ T582] ? bpf_prog_alloc+0x2a/0x1a0 [ 927.436128][ T582] bpf_prog_alloc+0x3c/0x1a0 [ 927.436162][ T582] bpf_prog_load+0x7f8/0x1c20 [ 927.436208][ T582] ? __pfx_bpf_prog_load+0x10/0x10 [ 927.436270][ T582] __sys_bpf+0xd0d/0xd90 [ 927.436310][ T582] ? __pfx___sys_bpf+0x10/0x10 [ 927.436353][ T582] ? __fget_files+0x2a/0x420 [ 927.436399][ T582] ? ksys_write+0x242/0x270 [ 927.436429][ T582] ? __pfx_ksys_write+0x10/0x10 [ 927.436462][ T582] __x64_sys_bpf+0xba/0xd0 [ 927.436494][ T582] do_syscall_64+0x166/0x520 [ 927.436516][ T582] ? trace_irq_disable+0x3b/0x140 [ 927.436543][ T582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.436566][ T582] ? clear_bhb_loop+0x70/0xc0 [ 927.436594][ T582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.436618][ T582] RIP: 0033:0x7f4917d9f559 [ 927.436640][ T582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.436660][ T582] RSP: 002b:00007f4918c1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 927.436686][ T582] RAX: ffffffffffffffda RBX: 00007f4918025fa0 RCX: 00007f4917d9f559 [ 927.436703][ T582] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 927.436718][ T582] RBP: 00007f4918c1b090 R08: 0000000000000000 R09: 0000000000000000 [ 927.436733][ T582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.436748][ T582] R13: 00007f4918026038 R14: 00007f4918025fa0 R15: 00007ffdc61ca998 [ 927.436786][ T582] [ 927.810852][ T584] ip_tables: iptables: counters copy to user failed while replacing table [ 927.812442][ T584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5892'. [ 927.812465][ T584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5892'. [ 927.908399][ T586] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 928.138185][ T601] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5896'. [ 928.230088][ T605] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5896'. [ 928.230426][ T605] ip_vti0: Master is either lo or non-ether device [ 928.350665][ T607] ip_tables: iptables: counters copy to user failed while replacing table [ 928.385854][ T607] netlink: 'syz.4.5897': attribute type 1 has an invalid length. [ 928.471473][ T607] 8021q: adding VLAN 0 to HW filter on device bond11 [ 928.595656][ T620] bond11: (slave gretap2): making interface the new active one [ 928.598688][ T620] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 928.649400][ T620] syz.4.5897 (620) used greatest stack depth: 17984 bytes left [ 928.671772][ T640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5903'. [ 928.770045][ T642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5904'. [ 929.775643][ T685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5917'. [ 929.803017][ T686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5916'. [ 929.940122][ T692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5919'. [ 929.940143][ T692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5919'. [ 930.548456][ T724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5926'. [ 930.598490][ T724] netlink: 'syz.4.5926': attribute type 1 has an invalid length. [ 930.826529][ T724] bridge0: port 4(vlan3) entered disabled state [ 930.847223][ T742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5929'. [ 931.129814][ T724] tipc: Resetting bearer [ 931.729603][ T724] gretap1: left promiscuous mode [ 931.748930][ T724] bond4: left promiscuous mode [ 931.748953][ T724] veth3: left promiscuous mode [ 931.749116][ T724] veth5: left promiscuous mode [ 931.771856][ T724] ip6gre3: left allmulticast mode [ 931.780227][ T724] vxcan0: left allmulticast mode [ 931.782648][ T724] bond6: left allmulticast mode [ 931.808667][ T724] bond8: left promiscuous mode [ 931.821018][ T724] gtp1: left allmulticast mode [ 931.836621][T16804] s`z1: Port: 1 Link DOWN [ 931.884449][T30712] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 931.884488][T30712] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 931.884517][T30712] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.884546][T30712] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 931.884574][T30712] netdevsim netdevsim4 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 931.884615][T30712] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 931.886210][T30712] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 931.886241][T30712] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.886268][T30712] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 931.886297][T30712] netdevsim netdevsim4 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 931.886335][T30712] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 931.886362][T30712] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 931.886390][T30712] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.886418][T30712] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 931.886445][T30712] netdevsim netdevsim4 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 931.886481][T30712] netdevsim netdevsim4 €Â: unset [0, 0] type 1 family 0 port 4352 - 0 [ 931.886508][T30712] netdevsim netdevsim4 €Â: unset [0, 1] type 1 family 0 port 8472 - 0 [ 931.886535][T30712] netdevsim netdevsim4 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.886562][T30712] netdevsim netdevsim4 €Â: unset [1, 1] type 2 family 0 port 20004 - 0 [ 931.886589][T30712] netdevsim netdevsim4 €Â: unset [1, 2] type 2 family 0 port 20000 - 0 [ 933.390565][ T856] __nla_validate_parse: 13 callbacks suppressed [ 933.390590][ T856] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5954'. [ 933.408219][ T854] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5953'. [ 933.498445][ T859] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 933.501113][ T854] IPVS: stopping backup sync thread 859 ... [ 933.971463][T27259] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 933.977936][T27259] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 933.979020][T27259] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 933.980125][T27259] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 933.980832][T27259] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 934.157056][ T882] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 934.506976][ T893] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5963'. [ 934.919015][ T917] ip_tables: iptables: counters copy to user failed while replacing table [ 935.212526][ T926] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5969'. [ 935.279427][ T922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5968'. [ 935.279704][ T925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5968'. [ 935.724850][ T495] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.857418][ T874] virt_wifi0 speed is unknown, defaulting to 1000 [ 936.047589][ T967] netlink: 'syz.0.5974': attribute type 1 has an invalid length. [ 936.054674][ T53] Bluetooth: hci5: command tx timeout [ 936.636988][ T989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5979'. [ 936.637014][ T989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5979'. [ 936.637041][ T989] netlink: 'syz.3.5979': attribute type 13 has an invalid length. [ 936.637056][ T989] netlink: 'syz.3.5979': attribute type 12 has an invalid length. [ 936.877776][ T874] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.877963][ T874] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.878191][ T874] bridge_slave_0: entered allmulticast mode [ 936.879811][ T874] bridge_slave_0: entered promiscuous mode [ 936.910121][ T874] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.910309][ T874] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.910454][ T874] bridge_slave_1: entered allmulticast mode [ 936.912388][ T874] bridge_slave_1: entered promiscuous mode [ 936.974140][ T874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.999350][ T874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.059172][ T874] team0: Port device team_slave_0 added [ 937.062290][ T874] team0: Port device team_slave_1 added [ 937.103588][ T874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.103608][ T874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.103637][ T874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.152537][ T874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.152557][ T874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.152589][ T874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.357247][ T1011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5982'. [ 937.357274][ T1011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5982'. [ 937.482884][ T874] hsr_slave_0: entered promiscuous mode [ 937.490375][ T874] hsr_slave_1: entered promiscuous mode [ 937.491162][ T874] debugfs: 'hsr0' already exists in 'hsr' [ 937.491190][ T874] Cannot create hsr debugfs directory [ 938.136495][ T53] Bluetooth: hci5: command tx timeout [ 938.287470][ T874] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.287511][ T874] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.287542][ T874] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 938.625791][ T874] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.625831][ T874] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.625860][ T874] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 938.740267][ T874] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.740308][ T874] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.740337][ T874] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 938.892742][ T874] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.892789][ T874] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.892824][ T874] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 939.114891][ T1071] __nla_validate_parse: 3 callbacks suppressed [ 939.114916][ T1071] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5993'. [ 939.162808][ T1071] ipvlan2: entered promiscuous mode [ 939.537789][ T1089] sctp: [Deprecated]: syz.4.5998 (pid 1089) Use of int in max_burst socket option. [ 939.537789][ T1089] Use struct sctp_assoc_value instead [ 939.609921][ T874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 939.630689][ T874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 939.632345][ T874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 939.665183][ T874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 939.668250][ T874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 939.707792][ T874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 939.720723][ T874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 939.763126][ T874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 939.977628][ T1109] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6002'. [ 940.052803][ T1109] hsr_slave_0 (unregistering): left promiscuous mode [ 940.107297][ T1109] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6002'. [ 940.107547][ T1109] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6002'. [ 940.107737][ T1109] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6002'. [ 940.107933][ T1109] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6002'. [ 940.108152][ T1109] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6002'. [ 940.108344][ T1109] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6002'. [ 940.108532][ T1109] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6002'. [ 940.108718][ T1109] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6002'. [ 940.213911][ T53] Bluetooth: hci5: command tx timeout [ 940.378781][ T874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.521672][ T874] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.536604][ T1118] bond_slave_0: left promiscuous mode [ 940.536638][ T1118] bond_slave_1: left promiscuous mode [ 940.536663][ T1118] batadv0: left promiscuous mode [ 940.678635][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.706187][T13977] smbdirect: ib_dev[syz1] removed [ 940.724433][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.785369][ T1118] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 940.821603][ T1118] bond0 (unregistering): Released all slaves [ 940.982706][T13977] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.982834][T13977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.999928][T13977] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.000050][T13977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.297085][ T1143] syzkaller0: left promiscuous mode [ 941.297110][ T1143] syzkaller0: left allmulticast mode [ 942.014124][ T1180] netlink: 'syz.4.6016': attribute type 83 has an invalid length. [ 942.152492][ T1203] IPv6: NLM_F_CREATE should be specified when creating new route [ 942.233382][ T1203] syzkaller1: entered promiscuous mode [ 942.233406][ T1203] syzkaller1: entered allmulticast mode [ 942.297324][ T53] Bluetooth: hci5: command tx timeout [ 942.403248][ T1234] netlink: 'syz.4.6019': attribute type 2 has an invalid length. [ 942.403273][ T1234] netlink: 'syz.4.6019': attribute type 1 has an invalid length. [ 942.403288][ T1234] netlink: 'syz.4.6019': attribute type 2 has an invalid length. [ 942.403303][ T1234] netlink: 'syz.4.6019': attribute type 1 has an invalid length. [ 942.403318][ T1234] netlink: 'syz.4.6019': attribute type 2 has an invalid length. [ 942.403332][ T1234] netlink: 'syz.4.6019': attribute type 2 has an invalid length. [ 942.512813][ T1247] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 942.688109][ T1257] syzkaller1: left promiscuous mode [ 942.688137][ T1257] syzkaller1: left allmulticast mode [ 943.082186][ T874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.310883][ T874] veth0_vlan: entered promiscuous mode [ 943.383770][ T874] veth1_vlan: entered promiscuous mode [ 943.548013][ T874] veth0_macvtap: entered promiscuous mode [ 943.603619][ T874] veth1_macvtap: entered promiscuous mode [ 943.715664][ T874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.755828][ T874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.818878][ T495] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.864845][ T497] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.864892][ T497] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.864925][ T497] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.123221][ T1493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.123246][ T1493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.341060][ T1358] tipc: Enabling of bearer rejected, failed to enable media [ 944.382890][ T495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.382914][ T495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.640226][ T1374] Bluetooth: MGMT ver 1.23 [ 944.810809][ T1386] nbd: socks must be embedded in a SOCK_ITEM attr [ 944.882601][ T1386] block nbd0: shutting down sockets [ 945.120204][ T30] audit: type=1800 audit(1792844493.900:53): pid=1401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5955" name="blkio.bfq.time_recursive" dev="tmpfs" ino=18 res=0 errno=-22 [ 945.149893][ T1397] syzkaller0: entered promiscuous mode [ 945.149917][ T1397] syzkaller0: entered allmulticast mode [ 945.320576][ T1398] __nla_validate_parse: 102 callbacks suppressed [ 945.320599][ T1398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6031'. [ 945.608979][ T1410] syzkaller0: entered promiscuous mode [ 945.609008][ T1410] syzkaller0: entered allmulticast mode [ 945.629239][ T1412] tipc: Enabled bearer , priority 0 [ 945.742213][ T1410] tipc: Resetting bearer [ 945.837183][ T1427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6039'. [ 945.987156][ T1438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6038'. [ 945.997926][ T1437] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6039'. [ 946.000816][ T1438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6038'. [ 946.348047][ T1425] bond12: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 946.365890][ T1425] bond12 (unregistering): Released all slaves [ 946.597542][ T1431] netlink: 'syz.3.6038': attribute type 13 has an invalid length. [ 946.617940][ T1429] syzkaller1: entered allmulticast mode [ 947.031766][ T1462] tipc: Failed to remove unknown binding: 66,0,0/1:3286501089/3286501091 [ 947.031809][ T1462] tipc: Failed to remove unknown binding: 66,0,0/1:3286501089/3286501090 [ 947.070464][ T1462] tipc: Failed to remove unknown binding: 66,0,0/1:3286501089/3286501091 [ 947.070500][ T1462] tipc: Failed to remove unknown binding: 66,0,0/1:3286501089/3286501090 [ 947.138910][ T1470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6044'. [ 947.222728][ T1470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6044'. [ 947.222758][ T1470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6044'. [ 947.432268][ T1483] netlink: 'syz.0.6046': attribute type 3 has an invalid length. [ 947.532429][ T1488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6048'. [ 948.062403][ T1502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6052'. [ 948.071582][ T1507] netlink: 'syz.0.6052': attribute type 1 has an invalid length. [ 948.177088][ T1507] bond0: entered promiscuous mode [ 948.177597][ T1507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.368291][ T1502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.369930][ T1502] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 948.369954][ T1502] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 948.445138][ T1502] bond0: (slave wireguard0): making interface the new active one [ 948.445166][ T1502] wireguard0: entered promiscuous mode [ 948.475309][ T1502] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 948.937341][ T1536] bridge: RTM_NEWNEIGH with invalid ether address [ 949.111762][ T1542] ip6gre1: entered promiscuous mode [ 949.111792][ T1542] ip6gre1: entered allmulticast mode [ 949.974349][ T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 950.010598][ T1610] sctp: [Deprecated]: syz.4.6068 (pid 1610) Use of int in maxseg socket option. [ 950.010598][ T1610] Use struct sctp_assoc_value instead [ 950.406233][ T1617] ip6gretap1: entered allmulticast mode [ 950.421513][ T1617] batman_adv: batadv0: Adding interface: ip6gretap1 [ 950.421534][ T1617] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.421571][ T1617] batman_adv: batadv0: Interface activated: ip6gretap1 [ 950.493527][ T1619] IPv6: NLM_F_CREATE should be specified when creating new route [ 950.624557][ T1619] syzkaller1: entered promiscuous mode [ 950.624583][ T1619] syzkaller1: entered allmulticast mode [ 951.853677][ T1695] __nla_validate_parse: 3 callbacks suppressed [ 951.853703][ T1695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6083'. [ 951.919896][ T1695] xfrm1: entered promiscuous mode [ 951.919925][ T1695] xfrm1: entered allmulticast mode [ 951.921550][ T1695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6083'. [ 952.358434][ T1712] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6085'. [ 953.925310][ T1638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 954.158546][ T1720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6087'. [ 954.187518][ T1727] x_tables: duplicate underflow at hook 1 [ 954.188158][ T1727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6090'. [ 954.188286][ T1727] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6090'. [ 954.215663][ T1721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6086'. [ 954.673100][ T1750] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6092'. [ 955.463712][T27259] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 955.478236][T27259] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 955.482465][T27259] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 955.484567][T27259] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 955.499745][T27259] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 955.741178][ T30] audit: type=1804 audit(1792844504.530:54): pid=1781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6098" name="/newroot/50/cgroup.controllers" dev="tmpfs" ino=278 res=1 errno=0 [ 955.741241][ T30] audit: type=1800 audit(1792844504.530:55): pid=1781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6098" name="cgroup.controllers" dev="tmpfs" ino=278 res=0 errno=-22 [ 955.921408][ T495] smbdirect: ib_dev[s`z1] removed [ 955.940651][ T1781] netlink: 'syz.1.6098': attribute type 10 has an invalid length. [ 955.952463][ T1781] netlink: 'syz.1.6098': attribute type 10 has an invalid length. [ 956.975204][ T1775] rxe_eth0 speed is unknown, defaulting to 1000 [ 956.992207][ T1775] rxe_eth0 speed is unknown, defaulting to 1000 [ 957.003344][ T1775] rxe_eth0 speed is unknown, defaulting to 1000 [ 957.173142][ T1792] xt_TPROXY: Can be used only with -p tcp or -p udp [ 957.574506][ T53] Bluetooth: hci1: command tx timeout [ 957.830917][ T1775] infiniband rxe0: set active [ 957.830974][ T193] rxe_eth0 speed is unknown, defaulting to 1000 [ 957.831037][ T1775] infiniband rxe0: added rxe_eth0 [ 957.891710][ T1775] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 957.891752][ T1775] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 957.891797][ T1775] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 957.991115][ T1857] ip_tables: iptables: counters copy to user failed while replacing table [ 958.030045][ T1775] RDS/IB: rxe0: added [ 958.030103][ T1775] smc: adding ib device rxe0 with port count 1 [ 958.030126][ T1775] smc: ib device rxe0 port 1 has no pnetid [ 958.030208][ T193] rxe_eth0 speed is unknown, defaulting to 1000 [ 958.049476][ T1775] rxe_eth0 speed is unknown, defaulting to 1000 [ 958.607834][ T1882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6119'. [ 958.717397][ T1775] rxe_eth0 speed is unknown, defaulting to 1000 [ 958.968852][ T1894] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6122'. [ 959.238248][ T1902] netlink: 'syz.1.6123': attribute type 10 has an invalid length. [ 959.238274][ T1902] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6123'. [ 959.238722][ T1904] netlink: 'syz.1.6123': attribute type 10 has an invalid length. [ 959.238742][ T1904] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6123'. [ 959.310817][ T1775] rxe_eth0 speed is unknown, defaulting to 1000 [ 959.461417][ T1910] netlink: 'syz.3.6125': attribute type 4 has an invalid length. [ 959.481799][ T1910] ip_tables: iptables: counters copy to user failed while replacing table [ 959.514991][ T1910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6125'. [ 959.654415][ T53] Bluetooth: hci1: command tx timeout [ 959.817107][ T1775] rxe_eth0 speed is unknown, defaulting to 1000 [ 960.415357][ T1775] rxe_eth0 speed is unknown, defaulting to 1000 [ 960.843067][ T1775] rxe_eth0 speed is unknown, defaulting to 1000 [ 961.122959][ T1964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6135'. [ 961.123001][ T1964] erspan0: default FDB implementation only supports local addresses [ 961.127085][ T1964] syzkaller0: entered promiscuous mode [ 961.127396][ T1964] syzkaller0: entered allmulticast mode [ 961.350094][ T1775] rxe_eth0 speed is unknown, defaulting to 1000 [ 961.501227][ T1973] netlink: 964 bytes leftover after parsing attributes in process `syz.3.6136'. [ 961.501251][ T1973] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 961.562988][ T1983] netlink: 964 bytes leftover after parsing attributes in process `syz.3.6136'. [ 961.563014][ T1983] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 961.735096][ T53] Bluetooth: hci1: command tx timeout [ 961.786136][ T1994] netlink: set zone limit has 8 unknown bytes [ 962.503731][ T1775] virt_wifi0 speed is unknown, defaulting to 1000 [ 962.535167][ T1775] rxe_eth0 speed is unknown, defaulting to 1000 [ 962.617001][ T2022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6144'. [ 962.658304][ T2022] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 962.974404][ T2036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 963.816088][ T53] Bluetooth: hci1: command tx timeout [ 964.329622][ T1775] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.329810][ T1775] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.329980][ T1775] bridge_slave_0: entered allmulticast mode [ 964.332103][ T1775] bridge_slave_0: entered promiscuous mode [ 964.364629][ T1775] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.364873][ T1775] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.365030][ T1775] bridge_slave_1: entered allmulticast mode [ 964.367083][ T1775] bridge_slave_1: entered promiscuous mode [ 964.435775][ T1775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.441706][ T1775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.500425][ T1775] team0: Port device team_slave_0 added [ 964.514378][ T1775] team0: Port device team_slave_1 added [ 964.606257][ T1775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.606276][ T1775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.606304][ T1775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.608966][ T2104] Bluetooth: MGMT ver 1.23 [ 964.611691][ T1775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.611707][ T1775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.611737][ T1775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.873091][ T1775] hsr_slave_0: entered promiscuous mode [ 964.880391][ T1775] hsr_slave_1: entered promiscuous mode [ 964.882234][ T1775] debugfs: 'hsr0' already exists in 'hsr' [ 964.882260][ T1775] Cannot create hsr debugfs directory [ 965.563460][ T2135] bond1: entered promiscuous mode [ 965.775112][ T1775] team0: Port device netdevsim1 removed [ 965.914863][ T2154] syzkaller1: entered promiscuous mode [ 965.914888][ T2154] syzkaller1: entered allmulticast mode [ 967.310750][ T2198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6181'. [ 967.342728][ T2198] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6181'. [ 968.498875][ T2223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6183'. [ 969.996615][ T2179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 970.006316][ T1775] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 970.039046][ T1775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 970.041566][ T1775] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 970.064146][ T1775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 970.072471][ T1775] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 970.129241][ T1775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 970.133252][ T1775] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 970.165156][ T1775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 970.488675][ T1775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.556084][ T1775] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.616401][ T1493] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.616551][ T1493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.649727][ T2269] ip_tables: iptables: counters copy to user failed while replacing table [ 970.650238][ T2269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6190'. [ 970.676815][ T1493] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.676943][ T1493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.362594][ T2300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6196'. [ 971.362752][ T2300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6196'. [ 971.362906][ T2300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6196'. [ 971.363068][ T2300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6196'. [ 971.363222][ T2300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6196'. [ 971.372174][ T2294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6196'. [ 972.422369][ T1775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.511165][ T2351] SET target dimension over the limit! [ 972.521997][ T2351] __nla_validate_parse: 66 callbacks suppressed [ 972.522019][ T2351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6209'. [ 973.236743][ T2377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6214'. [ 973.341046][ T2377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6214'. [ 973.450437][ T1775] veth0_vlan: entered promiscuous mode [ 973.520953][ T1775] veth1_vlan: entered promiscuous mode [ 973.695001][ T1775] veth0_macvtap: entered promiscuous mode [ 973.748234][ T1775] veth1_macvtap: entered promiscuous mode [ 973.861432][ T1775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.978970][ T1775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.286168][T30705] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.286889][T30712] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.287041][T30712] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.287086][T30712] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.468010][T30712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.468035][T30712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.660119][ T495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.660142][ T495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.730757][ T2415] xt_hashlimit: size too large, truncated to 1048576 [ 975.154465][ T2445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6225'. [ 975.173498][ T2445] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 975.309897][ T2450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6096'. [ 975.434464][ T2457] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 975.708968][ T2477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6231'. [ 975.708992][ T2477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6231'. [ 975.788458][ T2480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6231'. [ 975.810996][ T2480] xt_hashlimit: size too large, truncated to 1048576 [ 975.905444][ T2488] ip_tables: iptables: counters copy to user failed while replacing table [ 975.919561][ T2488] netlink: 'syz.2.6233': attribute type 61 has an invalid length. [ 976.230135][ T2504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6236'. [ 976.455613][ T2521] netlink: 'syz.2.6237': attribute type 1 has an invalid length. [ 976.455641][ T2521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6237'. [ 976.993707][ T2555] netlink: 'syz.4.6244': attribute type 1 has an invalid length. [ 977.548316][ T2575] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 977.601289][ T2575] __nla_validate_parse: 4 callbacks suppressed [ 977.601312][ T2575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6248'. [ 977.642217][ T2583] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6247'. [ 977.642252][ T2583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6247'. [ 977.664196][ T2585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6250'. [ 978.073892][ T2605] netlink: 'syz.1.6255': attribute type 61 has an invalid length. [ 978.108723][ T2616] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:0 [ 978.208273][ T2624] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6259'. [ 978.230468][ T2624] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6259'. [ 978.803095][ T2648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6264'. [ 979.241972][T27259] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 979.257751][T27259] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 979.259702][T27259] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 979.260920][T27259] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 979.281979][T27259] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 979.337437][ T2665] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6268'. [ 979.643105][ T2671] pim6reg: entered allmulticast mode [ 979.748910][ T2671] xt_nfacct: accounting object `syz0' does not exist [ 979.753436][ T2669] pim6reg: left allmulticast mode [ 979.834417][ T2679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6271'. [ 980.076793][ T2695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6275'. [ 980.368791][ T2705] syzkaller0: left promiscuous mode [ 980.368818][ T2705] syzkaller0: left allmulticast mode [ 981.113327][ T2659] virt_wifi0 speed is unknown, defaulting to 1000 [ 981.125360][ T2659] rxe_eth0 speed is unknown, defaulting to 1000 [ 981.334802][ T53] Bluetooth: hci4: command tx timeout [ 981.819632][ T2764] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.098957][ T2764] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.371329][ T2796] 0·: renamed from hsr0 (while UP) [ 982.395784][ T2796] 0·: entered allmulticast mode [ 982.395811][ T2796] hsr_slave_0: entered allmulticast mode [ 982.395832][ T2796] hsr_slave_1: entered allmulticast mode [ 982.416796][ T2796] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 982.591499][ T2764] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.717085][ T2764] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.070345][ T2659] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.072436][ T2659] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.072611][ T2659] bridge_slave_0: entered allmulticast mode [ 983.106197][ T2659] bridge_slave_0: entered promiscuous mode [ 983.120665][ T2659] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.120809][ T2659] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.120998][ T2659] bridge_slave_1: entered allmulticast mode [ 983.139310][ T2659] bridge_slave_1: entered promiscuous mode [ 983.223098][ T2659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.254892][ T2659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.332040][ T2659] team0: Port device team_slave_0 added [ 983.345718][ T2659] team0: Port device team_slave_1 added [ 983.400714][ T2659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.400737][ T2659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.400771][ T2659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.414794][ T53] Bluetooth: hci4: command tx timeout [ 983.415450][T13976] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.426179][ T1493] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.426606][ T1493] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.426732][ T1493] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.492482][ T2659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 983.492503][ T2659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.492538][ T2659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.737604][ T2659] hsr_slave_0: entered promiscuous mode [ 983.740362][ T2659] hsr_slave_1: entered promiscuous mode [ 983.742810][ T2659] debugfs: 'hsr0' already exists in 'hsr' [ 983.742834][ T2659] Cannot create hsr debugfs directory [ 983.846033][ T2846] netlink: 'syz.0.6301': attribute type 1 has an invalid length. [ 983.846058][ T2846] __nla_validate_parse: 71 callbacks suppressed [ 983.846073][ T2846] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6301'. [ 983.846092][ T2846] nbd: must specify at least one socket [ 984.377675][ T2865] ip6gre1: entered promiscuous mode [ 984.377704][ T2865] ip6gre1: entered allmulticast mode [ 984.689655][ T2887] netlink: 'syz.1.6309': attribute type 1 has an invalid length. [ 984.817793][ T2887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 984.890203][ T2886] bond2: (slave gretap1): making interface the new active one [ 984.908677][ T2886] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 985.356174][ T2659] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 985.360519][ T2659] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 985.361487][ T2659] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 985.387735][ T2659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 985.388842][ T2659] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 985.410360][ T2659] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 985.411591][ T2659] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 985.431581][ T2659] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 985.496715][ T53] Bluetooth: hci4: command tx timeout [ 985.559253][ T2659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.600412][ T2659] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.617781][T30712] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.617894][T30712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.642159][T30712] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.642272][T30712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.288068][ T2956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6319'. [ 986.537486][ T2972] Cannot find set identified by id 1 to match [ 986.798329][ T2659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.996395][ T2659] veth0_vlan: entered promiscuous mode [ 987.038382][ T2659] veth1_vlan: entered promiscuous mode [ 987.186518][ T2659] veth0_macvtap: entered promiscuous mode [ 987.211839][ T2659] veth1_macvtap: entered promiscuous mode [ 987.398464][ T2659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.448438][ T2659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.558824][T30712] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.558878][T30712] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.558919][T30712] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.558959][T30712] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.575204][T27259] Bluetooth: hci4: command tx timeout [ 987.770634][T13977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.770658][T13977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.857874][T30712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.857898][T30712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.208124][ T3049] syzkaller0: entered promiscuous mode [ 988.208149][ T3049] syzkaller0: entered allmulticast mode [ 988.443031][ T3059] netlink: 'syz.2.6340': attribute type 1 has an invalid length. [ 988.863338][ T3059] bond2: entered promiscuous mode [ 988.873615][ T3059] 8021q: adding VLAN 0 to HW filter on device bond2 [ 988.884915][ T3059] netlink: 'syz.2.6340': attribute type 1 has an invalid length. [ 988.888661][ T3059] netlink: 'syz.2.6340': attribute type 1 has an invalid length. [ 989.019844][ T3062] 8021q: adding VLAN 0 to HW filter on device bond2 [ 989.032493][ T3062] bond2: (slave gtp0): The slave device specified does not support setting the MAC address [ 989.032519][ T3062] bond2: (slave gtp0): Setting fail_over_mac to active for active-backup mode [ 989.116123][ T3062] bond2: (slave gtp0): making interface the new active one [ 989.116152][ T3062] gtp0: entered promiscuous mode [ 989.149326][ T3062] bond2: (slave gtp0): Enslaving as an active interface with an up link [ 989.168756][ T3059] netlink: 'syz.2.6340': attribute type 1 has an invalid length. [ 989.168991][ T3059] netlink: 'syz.2.6340': attribute type 1 has an invalid length. [ 989.169222][ T3059] netlink: 'syz.2.6340': attribute type 1 has an invalid length. [ 989.200366][ T3059] netlink: 'syz.2.6340': attribute type 1 has an invalid length. [ 989.452411][ T30] audit: type=1804 audit(1792844538.240:56): pid=3084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6343" name="/newroot/2/cgroup.controllers" dev="tmpfs" ino=28 res=1 errno=0 [ 989.452558][ T30] audit: type=1800 audit(1792844538.240:57): pid=3084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6343" name="cgroup.controllers" dev="tmpfs" ino=28 res=0 errno=-22 [ 989.607288][ T3086] ip_tables: iptables: counters copy to user failed while replacing table [ 989.672761][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 989.686291][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 989.689534][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 989.693082][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 989.695671][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 989.787112][ T3086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6344'. [ 990.063357][T20238] syz_tun (unregistering): left allmulticast mode [ 990.432272][ T3099] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.723593][ T3133] x_tables: eb_tables: redirect target: used from hooks OUTPUT, but only usable from PREROUTING/BROUTING [ 990.756916][ T3134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6356'. [ 990.757871][ T3099] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.762499][ T3137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6356'. [ 990.910803][ T3127] veth2: entered allmulticast mode [ 991.052763][ T3099] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.143152][ T3099] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.623946][ T1493] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.623999][ T1493] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.678737][ T1493] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.678787][ T1493] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.816130][T27259] Bluetooth: hci0: command tx timeout [ 992.012156][ T3160] sctp: [Deprecated]: syz.1.6360 (pid 3160) Use of int in max_burst socket option. [ 992.012156][ T3160] Use struct sctp_assoc_value instead [ 992.195098][ T3088] virt_wifi0 speed is unknown, defaulting to 1000 [ 992.200062][ T3088] rxe_eth0 speed is unknown, defaulting to 1000 [ 993.573078][ T3088] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.587867][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.588052][ T3088] bridge_slave_0: entered allmulticast mode [ 993.608150][ T3088] bridge_slave_0: entered promiscuous mode [ 993.623023][ T3088] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.623140][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.623286][ T3088] bridge_slave_1: entered allmulticast mode [ 993.649632][ T3088] bridge_slave_1: entered promiscuous mode [ 993.712971][ T3239] ip_tables: iptables: counters copy to user failed while replacing table [ 993.734478][ T3088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.741696][ T3088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.894789][T27259] Bluetooth: hci0: command tx timeout [ 993.916554][ T3251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6376'. [ 993.959957][ T3251] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 993.962218][ T3251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6376'. [ 993.990132][ T3088] team0: Port device team_slave_0 added [ 994.005615][ T3088] team0: Port device team_slave_1 added [ 994.008673][ T3251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6376'. [ 994.152697][ T3254] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6375'. [ 994.301262][ T3088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.301284][ T3088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.301318][ T3088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.380328][ T3088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.380350][ T3088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.380384][ T3088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.449620][ T3268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6379'. [ 994.491750][ T3268] netlink: 'syz.1.6379': attribute type 2 has an invalid length. [ 994.506193][ T3268] netlink: 'syz.1.6379': attribute type 2 has an invalid length. [ 994.592485][ T3088] hsr_slave_0: entered promiscuous mode [ 994.599936][ T3088] hsr_slave_1: entered promiscuous mode [ 994.600732][ T3088] debugfs: 'hsr0' already exists in 'hsr' [ 994.600754][ T3088] Cannot create hsr debugfs directory [ 994.655908][ T3275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6380'. [ 994.889014][ T3281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6383'. [ 994.921475][ T3284] netlink: 'syz.2.6383': attribute type 1 has an invalid length. [ 994.961504][ T3088] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.961545][ T3088] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.022504][ T3287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6384'. [ 995.091919][ T3088] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.100949][ T3088] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.218836][ T3088] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.218876][ T3088] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.296002][ T3088] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.296042][ T3088] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.679402][ T497] bridge_slave_1: left allmulticast mode [ 995.679430][ T497] bridge_slave_1: left promiscuous mode [ 995.679664][ T497] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.688499][ T3306] ip_tables: iptables: counters copy to user failed while replacing table [ 995.717084][ T497] bridge_slave_0: left allmulticast mode [ 995.717111][ T497] bridge_slave_0: left promiscuous mode [ 995.717335][ T497] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.781004][ T497] tipc: Resetting bearer [ 995.974929][T27259] Bluetooth: hci0: command tx timeout [ 996.410576][ T497] tipc: Disabling bearer [ 996.559363][ T497] bond1 (unregistering): (slave veth8): Releasing active interface [ 996.563032][ T497] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 996.582977][ T497] bond1 (unregistering): Released all slaves [ 996.617361][ T497] bond2 (unregistering): Released all slaves [ 996.651159][ T497] bond3 (unregistering): Released all slaves [ 996.673442][ T497] bond4 (unregistering): (slave veth12): Releasing active interface [ 996.691514][ T497] bond4 (unregistering): Released all slaves [ 996.739658][ T497] bond0 (unregistering): (slave wireguard0): Releasing backup interface [ 996.739690][ T497] wireguard0: left promiscuous mode [ 996.742701][ T497] bond0 (unregistering): Released all slaves [ 996.941337][ T3088] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 996.971525][ T3088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 996.982678][ T3088] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 997.036812][ T3088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 997.037739][ T3088] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 997.098147][ T3088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 997.099815][ T497] tipc: Disabling bearer [ 997.099970][ T497] tipc: Left network mode [ 997.110758][ T3088] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 997.160208][ T3088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 997.267983][ T497] IPVS: stopping master sync thread 489 ... [ 997.281203][ T497] IPVS: stopping backup sync thread 29642 ... [ 997.340735][ T3352] netlink: 'syz.2.6398': attribute type 3 has an invalid length. [ 998.033331][ T3359] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.034314][ T3359] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.058086][T27259] Bluetooth: hci0: command tx timeout [ 998.218729][ T3373] Cannot find add_set index 0 as target [ 998.330007][ T3359] bridge_slave_0: left allmulticast mode [ 998.330035][ T3359] bridge_slave_0: left promiscuous mode [ 998.330326][ T3359] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.396918][ T3359] bridge_slave_1: left allmulticast mode [ 998.396945][ T3359] bridge_slave_1: left promiscuous mode [ 998.397161][ T3359] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.425678][ T3387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6402'. [ 998.461354][ T3359] bond0: (slave bond_slave_0): Releasing backup interface [ 998.462010][ T3382] Set syz1 is full, maxelem 2076 reached [ 998.496952][ T3359] bond0: (slave bond_slave_1): Releasing backup interface [ 998.525732][ T3359] team0: Port device team_slave_0 removed [ 998.561526][ T3359] team0: Port device team_slave_1 removed [ 998.574210][ T3359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 998.576993][ T3359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 998.611036][ T3359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 998.627534][ T3359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 998.656467][ T3359] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 998.980012][ T3088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.183482][ T3088] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.213847][T13977] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.213960][T13977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.325872][ T1493] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.326019][ T1493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.449589][ T3416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6411'. [ 999.449625][ T3416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6411'. [ 999.556690][ T3416] bridge2: entered promiscuous mode [ 999.556713][ T3416] bridge2: entered allmulticast mode [ 999.869965][ T3443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6415'. [ 999.870008][ T3443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6415'. [ 1000.332843][T30705] IPVS: starting estimator thread 0... [ 1000.426912][ T3455] IPVS: using max 25 ests per chain, 60000 per kthread [ 1000.666933][ T3468] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6420'. [ 1000.921150][ T497] hsr_slave_0: left promiscuous mode [ 1000.931743][ T497] hsr_slave_1: left promiscuous mode [ 1000.932866][ T497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.932898][ T497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.988666][ T497] batadv_slave_1: left promiscuous mode [ 1000.991316][ T497] veth1_vlan: left promiscuous mode [ 1001.019835][ T3480] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6425'. [ 1001.020179][ T3480] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6425'. [ 1002.578787][ T497] team0 (unregistering): Port device team_slave_1 removed [ 1002.594974][ T497] team0 (unregistering): Port device team_slave_0 removed [ 1003.120048][ T3515] syzkaller1: entered promiscuous mode [ 1003.120075][ T3515] syzkaller1: entered allmulticast mode [ 1003.470673][ T3088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1003.584916][ T3088] veth0_vlan: entered promiscuous mode [ 1003.609853][ T497] IPVS: stop unused estimator thread 0... [ 1003.611356][ T3088] veth1_vlan: entered promiscuous mode [ 1003.640539][ T3535] netlink: 'syz.4.6436': attribute type 1 has an invalid length. [ 1003.700852][ T3535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1003.793835][ T3537] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1003.835953][ T3539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6437'. [ 1003.914734][ T3088] veth0_macvtap: entered promiscuous mode [ 1003.938266][ T3541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6438'. [ 1003.965463][ T3088] veth1_macvtap: entered promiscuous mode [ 1003.970765][ T3541] syzkaller1: entered promiscuous mode [ 1003.970788][ T3541] syzkaller1: entered allmulticast mode [ 1004.041377][ T3088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.053507][ T3088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.105964][T13976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.110332][ T6723] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.110564][ T6723] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.110679][ T6723] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.220081][ T3546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6440'. [ 1004.315271][ T3550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6442'. [ 1004.321460][ T3551] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6442'. [ 1005.788426][ T3510] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1005.887674][T30705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.887698][T30705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.973688][T30705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.973712][T30705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.085368][T27259] Bluetooth: unknown link type 128 [ 1006.276998][ T3584] netlink: 'syz.3.6447': attribute type 8 has an invalid length. [ 1006.281648][ T3583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6448'. [ 1006.684643][ T3594] vti0: entered promiscuous mode [ 1006.684668][ T3594] vti0: entered allmulticast mode [ 1007.937599][ T3635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1008.099504][ T3646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6461'. [ 1008.099557][ T3646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6461'. [ 1008.134906][T27259] Bluetooth: hci3: command tx timeout [ 1008.198171][ T3644] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6459'. [ 1008.455911][ T3654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6463'. [ 1008.455937][ T3654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6463'. [ 1008.509446][ T3654] erspan0: entered promiscuous mode [ 1008.509727][ T3654] macvtap1: entered allmulticast mode [ 1008.509746][ T3654] erspan0: entered allmulticast mode [ 1008.570159][ T3662] netlink: 'syz.3.6466': attribute type 8 has an invalid length. [ 1008.852560][ T3677] syzkaller0: entered promiscuous mode [ 1008.852584][ T3677] syzkaller0: entered allmulticast mode [ 1009.182766][ T3693] netlink: 'syz.3.6471': attribute type 1 has an invalid length. [ 1009.182811][ T3693] netlink: 'syz.3.6471': attribute type 8 has an invalid length. [ 1009.412768][ T3706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6474'. [ 1009.427974][ T3705] tipc: Started in network mode [ 1009.428006][ T3705] tipc: Node identity aa0e98ff7534, cluster identity 4711 [ 1009.428247][ T3705] tipc: Enabled bearer , priority 0 [ 1009.503676][ T3702] tipc: Disabling bearer [ 1009.937567][ T3723] syzkaller0: entered promiscuous mode [ 1009.937594][ T3723] syzkaller0: entered allmulticast mode [ 1010.020066][ T3725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6480'. [ 1010.062036][ T3725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6480'. [ 1010.062072][ T3725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6480'. [ 1010.091375][ T3731] xt_ipcomp: unknown flags 1D [ 1010.669653][ T3765] x_tables: duplicate underflow at hook 3 [ 1011.978113][ T3809] __nla_validate_parse: 8 callbacks suppressed [ 1011.978133][ T3809] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6495'. [ 1012.008682][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.008798][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.008899][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.008998][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.009096][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.009247][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.009345][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.009453][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.009553][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.009652][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.009768][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.009867][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.009965][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.010064][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.010196][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.010294][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.010392][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.010495][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.010591][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.010694][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.010791][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.011540][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.017792][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.018081][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.018322][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.018573][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.018822][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.019095][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.019437][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.019681][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.019952][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.020209][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.020477][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.020809][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.021054][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.021298][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.021496][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.021763][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.022046][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.022374][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.022628][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.022885][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.023203][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.023446][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.023694][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.024050][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.024322][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.024589][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.024832][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.025067][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.032753][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.059638][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.059947][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.060191][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.060452][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.060752][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.061021][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.061325][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.061555][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.061792][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.062022][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.062321][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.062570][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.062883][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.063186][T27259] Bluetooth: hci4: unexpected cc 0x1005 length: 1 < 8 [ 1012.223438][ T3801] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1012.761042][ T3826] netlink: 'syz.1.6497': attribute type 1 has an invalid length. [ 1012.881356][ T3834] netlink: 'syz.0.6499': attribute type 1 has an invalid length. [ 1012.882428][ T3826] bond3: entered promiscuous mode [ 1012.902889][ T3826] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1012.921375][ T3847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6501'. [ 1012.939523][ T3848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6501'. [ 1013.627746][ T3877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6507'. [ 1013.696656][ T3877] bond4: entered promiscuous mode [ 1013.697129][ T3877] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1013.907956][ T3890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6509'. [ 1014.135903][ T3908] x_tables: duplicate underflow at hook 3 [ 1014.152334][ T3908] netlink: 'syz.1.6514': attribute type 41 has an invalid length. [ 1014.500161][ T3926] netlink: 'syz.4.6521': attribute type 3 has an invalid length. [ 1014.500187][ T3926] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6521'. [ 1014.535570][ T3926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6521'. [ 1014.550012][ T3930] netlink: 'syz.4.6521': attribute type 3 has an invalid length. [ 1014.550047][ T3930] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6521'. [ 1014.573602][ T3933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6521'. [ 1015.107763][ T3900] IPVS: starting estimator thread 0... [ 1015.193887][ T3970] IPVS: using max 26 ests per chain, 62400 per kthread [ 1015.400709][ T3978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1015.446256][ T3987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6533'. [ 1015.464909][ T3986] netlink: 'syz.0.6533': attribute type 1 has an invalid length. [ 1015.641398][ T3996] xt_hashlimit: size too large, truncated to 1048576 [ 1015.641421][ T3996] xt_hashlimit: max too large, truncated to 1048576 [ 1015.847893][ T3996] netlink: 'syz.1.6535': attribute type 4 has an invalid length. [ 1016.097063][ T4020] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1016.605500][ T4040] tun0: tun_chr_ioctl cmd 1074025675 [ 1016.605527][ T4040] tun0: persist enabled [ 1016.605834][ T4040] tun0: tun_chr_ioctl cmd 1074025675 [ 1016.605855][ T4040] tun0: persist enabled [ 1016.982607][ T3898] IPVS: starting estimator thread 0... [ 1016.983988][ T4051] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1017.074626][ T4057] IPVS: using max 24 ests per chain, 57600 per kthread [ 1017.226840][ T4066] __nla_validate_parse: 5 callbacks suppressed [ 1017.226862][ T4066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6553'. [ 1017.226890][ T4066] bond0: option lp_interval: invalid value (0) [ 1017.226909][ T4066] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1018.171864][ T4117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6569'. [ 1018.171889][ T4117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6569'. [ 1018.225460][ T4119] netlink: 'syz.3.6569': attribute type 4 has an invalid length. [ 1018.225484][ T4119] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6569'. [ 1018.268288][ T4116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1018.350698][ T4117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.353368][ T4117] bond1: (slave bond0): making interface the new active one [ 1018.369509][ T4117] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1018.395610][ T4127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6571'. [ 1018.404673][ T4119] .`: renamed from bond0 (while UP) [ 1018.529679][ T4136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6572'. [ 1018.802534][ T4139] xt_hashlimit: size too large, truncated to 1048576 [ 1018.802559][ T4139] xt_hashlimit: max too large, truncated to 1048576 [ 1018.897111][ T4149] ip_tables: iptables: counters copy to user failed while replacing table [ 1019.290213][ T4160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6578'. [ 1019.290249][ T4160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6578'. [ 1019.290267][ T4160] netlink: 'syz.0.6578': attribute type 1 has an invalid length. [ 1019.322495][ T4161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6579'. [ 1019.433902][ T4160] bond2: entered promiscuous mode [ 1019.617374][ T4173] tipc: Enabling of bearer rejected, failed to enable media [ 1019.728658][ T4173] bond3: invalid NS target :: specified for addition [ 1019.728692][ T4173] bond3: option ns_ip6_target: invalid value (18446744073709551615) [ 1019.759506][ T4173] bond3 (unregistering): Released all slaves [ 1020.053553][ T4198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6587'. [ 1020.053594][ T4198] netlink: 'syz.2.6587': attribute type 30 has an invalid length. [ 1020.093229][ T4198] vxlan0: entered promiscuous mode [ 1020.093254][ T4198] vxlan0: entered allmulticast mode [ 1020.124153][T30708] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.124203][T30708] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.124241][T30708] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.124278][T30708] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.232442][ T4198] netlink: 'syz.2.6587': attribute type 30 has an invalid length. [ 1020.256311][ T4198] vxlan1: entered promiscuous mode [ 1020.256336][ T4198] vxlan1: entered allmulticast mode [ 1021.140620][ T4247] syzkaller0: entered promiscuous mode [ 1021.140667][ T4247] syzkaller0: entered allmulticast mode [ 1022.408914][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bcc8000: rx timeout, send abort [ 1022.410864][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802bcc8000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1024.832070][ T4329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1024.832941][ T4329] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 1024.944976][ T30] audit: type=1804 audit(1792844573.740:58): pid=4340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6615" name="/newroot/34/cgroup.controllers" dev="tmpfs" ino=194 res=1 errno=0 [ 1024.945836][ T30] audit: type=1800 audit(1792844573.740:59): pid=4340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6615" name="cgroup.controllers" dev="tmpfs" ino=194 res=0 errno=-22 [ 1025.009117][ T4343] __nla_validate_parse: 5 callbacks suppressed [ 1025.009139][ T4343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6615'. [ 1025.524113][ T4367] tipc: Enabling of bearer rejected, media not registered [ 1025.659408][ T4372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6620'. [ 1025.709613][ T4372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6620'. [ 1025.743368][ T4376] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6621'. [ 1026.168498][ T4393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6625'. [ 1026.229681][ T4389] netlink: 'syz.1.6624': attribute type 28 has an invalid length. [ 1026.299245][ T4404] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6623'. [ 1026.515929][ T4404] bond3: entered promiscuous mode [ 1026.515982][ T4404] bond3: entered allmulticast mode [ 1026.516519][ T4404] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1027.335855][ T4446] netlink: 1404 bytes leftover after parsing attributes in process `syz.2.6634'. [ 1027.416638][ T4446] syzkaller0: entered promiscuous mode [ 1027.416666][ T4446] syzkaller0: entered allmulticast mode [ 1027.524739][ T4461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6635'. [ 1028.229946][ T4486] syzkaller1: entered promiscuous mode [ 1028.229972][ T4486] syzkaller1: entered allmulticast mode [ 1028.914924][ T4519] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6643'. [ 1028.915797][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6643'. [ 1030.228110][ T4571] __nla_validate_parse: 1 callbacks suppressed [ 1030.228134][ T4571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6654'. [ 1030.232065][ T4571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6654'. [ 1030.528632][ T4586] Bluetooth: MGMT ver 1.23 [ 1030.528697][ T4586] Bluetooth: hci0: unsupported parameter 5135 [ 1030.528713][ T4586] Bluetooth: hci0: unsupported parameter 8192 [ 1030.528727][ T4586] Bluetooth: hci0: unsupported parameter 5135 [ 1030.528741][ T4586] Bluetooth: hci0: unsupported parameter 8192 [ 1030.532118][ T4587] Bluetooth: hci0: unsupported parameter 5135 [ 1030.532138][ T4587] Bluetooth: hci0: unsupported parameter 8192 [ 1030.532151][ T4587] Bluetooth: hci0: unsupported parameter 5135 [ 1030.532164][ T4587] Bluetooth: hci0: unsupported parameter 8192 [ 1030.810135][ T4596] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6662'. [ 1030.826367][ T4596] bridge_slave_0: left allmulticast mode [ 1030.826396][ T4596] bridge_slave_0: left promiscuous mode [ 1030.826653][ T4596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.863392][ T4596] bridge_slave_1: left allmulticast mode [ 1030.863422][ T4596] bridge_slave_1: left promiscuous mode [ 1030.863669][ T4596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.131778][ T4609] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6666'. [ 1031.131809][ T4609] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6666'. [ 1031.131827][ T4609] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6666'. [ 1031.172366][ T4615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6668'. [ 1031.172396][ T4615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6668'. [ 1031.205284][ T4609] ip_tables: iptables: counters copy to user failed while replacing table [ 1031.691379][ T4638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6672'. [ 1031.793246][ T4624] pim6reg1: entered promiscuous mode [ 1031.793274][ T4624] pim6reg1: entered allmulticast mode [ 1031.852583][ T4638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6672'. [ 1032.369161][ T4649] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1032.369187][ T4649] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1032.634128][ T4649] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1032.634156][ T4649] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1032.810508][ T4649] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1032.810535][ T4649] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1033.076543][ T4649] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1033.076569][ T4649] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1033.239959][ T4696] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1033.259008][ T4693] IPVS: stopping backup sync thread 4696 ... [ 1033.375591][ T4697] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 1035.215248][ T4798] netlink: 'syz.2.6707': attribute type 1 has an invalid length. [ 1035.285688][ T4798] bond4: entered promiscuous mode [ 1035.287283][ T4798] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1035.319837][ T4798] __nla_validate_parse: 6 callbacks suppressed [ 1035.319859][ T4798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6707'. [ 1035.369976][ T4798] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1035.370435][ T4798] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1035.370461][ T4798] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1035.429011][ T4798] bond4: (slave wireguard0): making interface the new active one [ 1035.429038][ T4798] wireguard0: entered promiscuous mode [ 1035.432252][ T4798] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 1035.607942][ T4821] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6711'. [ 1036.203330][ T4835] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6712'. [ 1036.203374][ T4835] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6712'. [ 1036.203444][ T4835] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6712'. [ 1036.726793][ T4865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6721'. [ 1037.197377][ T4879] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6724'. [ 1037.197403][ T4879] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6724'. [ 1037.541200][ T4888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6725'. [ 1037.541227][ T4888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6725'. [ 1038.769551][ T4933] tipc: Enabling of bearer rejected, failed to enable media [ 1039.387142][ T4944] bridge0: port 3(vlan2) entered blocking state [ 1039.390888][ T4944] bridge0: port 3(vlan2) entered disabled state [ 1039.391062][ T4944] vlan2: entered allmulticast mode [ 1039.391081][ T4944] geneve0: entered allmulticast mode [ 1039.410106][ T4944] vlan2: entered promiscuous mode [ 1039.410128][ T4944] geneve0: entered promiscuous mode [ 1040.543437][ T4983] netlink: 'syz.0.6741': attribute type 1 has an invalid length. [ 1040.659848][ T4983] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1040.731597][ T4987] bond3: (slave erspan1): making interface the new active one [ 1040.740404][ T4987] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 1046.554743][ C0] sched: DL replenish lagged too much [ 1121.182325][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1126.301163][ C1] ip6_tunnel: ip6erspan2 xmit: Local address not yet configured! [ 1209.043720][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1209.050732][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4959/1:b..l.. [ 1209.060091][ C1] rcu: (detected by 1, t=10502 jiffies, g=201365, q=1034398 ncpus=2) [ 1209.068545][ C1] task:syz.1.6738 state:R running task stack:25000 pid:4959 tgid:4959 ppid:32424 task_flags:0x40044c flags:0x00080002 [ 1209.082101][ C1] Call Trace: [ 1209.085496][ C1] [ 1209.088472][ C1] __schedule+0x17dd/0x5820 [ 1209.093043][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1209.098383][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1209.103640][ C1] ? __lock_acquire+0x747/0x2de0 [ 1209.108634][ C1] ? __pfx___schedule+0x10/0x10 [ 1209.113541][ C1] ? __lock_acquire+0x747/0x2de0 [ 1209.118575][ C1] preempt_schedule_irq+0x4b/0x90 [ 1209.123651][ C1] irqentry_exit+0x14f/0x9b0 [ 1209.128288][ C1] ? trace_irq_disable+0x3b/0x140 [ 1209.133368][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1209.139394][ C1] RIP: 0010:lock_acquire+0x91/0x350 [ 1209.144629][ C1] Code: 0f 84 e9 00 00 00 48 8b b4 24 88 00 00 00 4c 89 e7 e8 c3 b9 95 00 83 3d 3c ca d8 0f 00 0f 84 e4 00 00 00 65 8b 05 07 1e f8 12 <85> c0 0f 85 d5 00 00 00 65 48 8b 2d 47 d6 f7 12 83 bd a4 0b 00 00 [ 1209.164277][ C1] RSP: 0018:ffffc90006a0f2a8 EFLAGS: 00000202 [ 1209.170385][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 8000000000000001 [ 1209.178389][ C1] RDX: 0000000000000000 RSI: ffffffff817869bc RDI: 1ffffffff1fab394 [ 1209.186409][ C1] RBP: 1ffff92000d41e84 R08: 0000000000000000 R09: 0000000000000000 [ 1209.194407][ C1] R10: ffffc90006a0f438 R11: ffffffff81b301f0 R12: ffffffff8fd59ca0 [ 1209.202405][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 1209.210419][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1209.216670][ C1] ? unwind_next_frame+0xac/0x2550 [ 1209.221826][ C1] ? lock_acquire+0x7d/0x350 [ 1209.226460][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1209.231617][ C1] ? get_signal+0x1216/0x12c0 [ 1209.236334][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1209.241481][ C1] unwind_next_frame+0xac/0x2550 [ 1209.246546][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1209.251799][ C1] ? do_group_exit+0x22d/0x2f0 [ 1209.256604][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1209.261771][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1209.267969][ C1] arch_stack_walk+0x11b/0x150 [ 1209.272779][ C1] ? get_signal+0x1216/0x12c0 [ 1209.277521][ C1] stack_trace_save+0xa9/0x100 [ 1209.282335][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1209.287742][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 1209.292548][ C1] ? exit_mmap+0x4ca/0x9f0 [ 1209.297003][ C1] ? __mmput+0x118/0x420 [ 1209.301285][ C1] ? exit_mm+0x18e/0x240 [ 1209.305579][ C1] ? do_exit+0x6a8/0x2360 [ 1209.309952][ C1] ? do_group_exit+0x22d/0x2f0 [ 1209.314749][ C1] ? get_signal+0x1216/0x12c0 [ 1209.319467][ C1] ? arch_do_signal_or_restart+0xbb/0x860 [ 1209.325419][ C1] ? exit_to_user_mode_loop+0x10e/0x770 [ 1209.331018][ C1] kasan_save_stack+0x3e/0x60 [ 1209.335751][ C1] ? kasan_save_stack+0x3e/0x60 [ 1209.340651][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 1209.346061][ C1] ? kmem_cache_free+0x45e/0x650 [ 1209.351061][ C1] ? tear_down_vmas+0x31f/0x530 [ 1209.355953][ C1] ? exit_mmap+0x4ca/0x9f0 [ 1209.360411][ C1] ? __mmput+0x118/0x420 [ 1209.364692][ C1] ? exit_mm+0x18e/0x240 [ 1209.368980][ C1] ? do_exit+0x6a8/0x2360 [ 1209.373354][ C1] ? do_group_exit+0x22d/0x2f0 [ 1209.378156][ C1] ? get_signal+0x1216/0x12c0 [ 1209.382933][ C1] ? tear_down_vmas+0x31f/0x530 [ 1209.387828][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 1209.393069][ C1] kmem_cache_free+0x45e/0x650 [ 1209.397898][ C1] tear_down_vmas+0x31f/0x530 [ 1209.402619][ C1] exit_mmap+0x4ca/0x9f0 [ 1209.406920][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1209.411848][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1209.416857][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 1209.422107][ C1] __mmput+0x118/0x420 [ 1209.426222][ C1] exit_mm+0x18e/0x240 [ 1209.430351][ C1] do_exit+0x6a8/0x2360 [ 1209.434573][ C1] ? lock_acquire+0x115/0x350 [ 1209.439293][ C1] ? __pfx_do_exit+0x10/0x10 [ 1209.443946][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1209.449061][ C1] do_group_exit+0x22d/0x2f0 [ 1209.453700][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1209.458955][ C1] get_signal+0x1216/0x12c0 [ 1209.463539][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 1209.469172][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1209.475415][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 1209.480827][ C1] ? rcu_is_watching+0x16/0xb0 [ 1209.485665][ C1] do_syscall_64+0x328/0x520 [ 1209.490298][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.496409][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1209.501140][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.507072][ C1] RIP: 0033:0x7f324f19f559 [ 1209.511526][ C1] RSP: 002b:00007ffdc057b0d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1209.520071][ C1] RAX: 0000000000000000 RBX: 00007f324f427da0 RCX: 00007f324f19f559 [ 1209.528079][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1209.536087][ C1] RBP: 00007f324f427da0 R08: 0000000000000006 R09: 0000000000000000 [ 1209.544089][ C1] R10: 00007f324f427cb0 R11: 0000000000000246 R12: 00000000000fdee2 [ 1209.552090][ C1] R13: 00007f324f425fac R14: 00000000000fdcac R15: 00007f324f425fa0 [ 1209.560128][ C1] [ 1209.563184][ C1] rcu: rcu_preempt kthread starved for 2954 jiffies! g201365 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 1209.574234][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1209.584231][ C1] rcu: RCU grace-period kthread stack dump: [ 1209.590138][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1209.603678][ C1] Call Trace: [ 1209.606987][ C1] [ 1209.609960][ C1] __schedule+0x17dd/0x5820 [ 1209.614517][ C1] ? __lock_acquire+0x747/0x2de0 [ 1209.619507][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1209.624694][ C1] ? __pfx___schedule+0x10/0x10 [ 1209.629584][ C1] ? lock_acquire+0x115/0x350 [ 1209.637616][ C1] ? schedule+0x90/0x2b0 [ 1209.641924][ C1] schedule+0x164/0x2b0 [ 1209.646137][ C1] schedule_timeout+0x152/0x2c0 [ 1209.651039][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1209.656567][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1209.661912][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1209.667776][ C1] ? prepare_to_swait_event+0x220/0x3e0 [ 1209.673362][ C1] ? prepare_to_swait_event+0x35e/0x3e0 [ 1209.678960][ C1] rcu_gp_fqs_loop+0x30c/0x1230 [ 1209.683867][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1209.690062][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1209.695385][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1209.700648][ C1] rcu_gp_kthread+0x9c/0x340 [ 1209.705282][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1209.710523][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1209.715511][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1209.720588][ C1] kthread+0x38b/0x480 [ 1209.724690][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1209.729916][ C1] ? __pfx_kthread+0x10/0x10 [ 1209.734535][ C1] ret_from_fork+0x514/0xb70 [ 1209.739179][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1209.744341][ C1] ? __switch_to+0xc78/0x1410 [ 1209.749073][ C1] ? __pfx_kthread+0x10/0x10 [ 1209.753713][ C1] ret_from_fork_asm+0x1a/0x30 [ 1209.758533][ C1] [ 1209.761581][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1209.767931][ C1] CPU: 1 UID: 0 PID: 30707 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 1209.777510][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1209.787609][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 1209.794586][ C1] RIP: 0010:debug_smp_processor_id+0xb/0x20 [ 1209.800519][ C1] Code: f9 e9 67 ff ff ff cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c7 20 17 6e 8c <48> c7 c6 60 17 6e 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 1209.820338][ C1] RSP: 0018:ffffc90000a07db8 EFLAGS: 00000202 [ 1209.826459][ C1] RAX: 0000000000000001 RBX: ffffffff8a26fb12 RCX: ffff88807fea8000 [ 1209.834474][ C1] RDX: 00000000071bee9f RSI: ffffffff8e70fdbb RDI: ffffffff8c6e1720 [ 1209.842544][ C1] RBP: 1ffff92000140fd8 R08: ffffffff8178699f R09: 0000000000000000 [ 1209.850562][ C1] R10: ffffc90000a07ed8 R11: ffffffff81b301f0 R12: dffffc0000000000 [ 1209.858594][ C1] R13: ffffffff8178699f R14: ffffc90000a07e88 R15: 1ffff92000140fd1 [ 1209.866614][ C1] FS: 0000000000000000(0000) GS:ffff888123b6b000(0000) knlGS:0000000000000000 [ 1209.875587][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1209.882213][ C1] CR2: 00007f20487f5c38 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 1209.890229][ C1] Call Trace: [ 1209.893546][ C1] [ 1209.896425][ C1] rcu_is_watching+0x16/0xb0 [ 1209.901071][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 1209.906513][ C1] unwind_next_frame+0xbe/0x2550 [ 1209.911515][ C1] ? synproxy_send_client_synack+0x175/0xde0 [ 1209.917545][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1209.922728][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1209.929022][ C1] arch_stack_walk+0x11b/0x150 [ 1209.933859][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 1209.939296][ C1] stack_trace_save+0xa9/0x100 [ 1209.944124][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1209.949554][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 1209.954908][ C1] kasan_save_track+0x3e/0x80 [ 1209.959640][ C1] ? kasan_save_track+0x3e/0x80 [ 1209.964548][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1209.969658][ C1] ? kmem_cache_alloc_node_noprof+0x34f/0x600 [ 1209.975777][ C1] ? __alloc_skb+0x1db/0x7a0 [ 1209.980432][ C1] ? synproxy_send_client_synack+0x175/0xde0 [ 1209.986455][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 1209.991951][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1209.996870][ C1] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 1210.002823][ C1] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 1210.008972][ C1] ? __alloc_skb+0x1db/0x7a0 [ 1210.013614][ C1] ? __alloc_skb+0x1db/0x7a0 [ 1210.018282][ C1] __alloc_skb+0x1db/0x7a0 [ 1210.022776][ C1] synproxy_send_client_synack+0x175/0xde0 [ 1210.028641][ C1] ? lock_acquire+0x115/0x350 [ 1210.033368][ C1] ? synproxy_pernet+0x45/0x270 [ 1210.040196][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1210.046565][ C1] ? nft_synproxy_eval_v6+0x360/0x4e0 [ 1210.052013][ C1] ? synproxy_pernet+0x45/0x270 [ 1210.056929][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 1210.062214][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1210.067983][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1210.072876][ C1] nft_synproxy_do_eval+0x389/0x5d0 [ 1210.078133][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1210.083915][ C1] nft_do_chain+0x48d/0x1b10 [ 1210.088571][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1210.093659][ C1] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 1210.099646][ C1] nft_do_chain_inet+0x360/0x4b0 [ 1210.104635][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1210.110149][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 1210.115582][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1210.121091][ C1] nf_hook_slow+0xc5/0x220 [ 1210.125561][ C1] NF_HOOK+0x21f/0x3c0 [ 1210.129680][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1210.135697][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1210.139900][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1210.144557][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1210.150592][ C1] ? ip_local_deliver+0x113/0x190 [ 1210.155682][ C1] NF_HOOK+0x336/0x3c0 [ 1210.159799][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1210.164946][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1210.169137][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1210.173777][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1210.178926][ C1] ? ip_rcv_core+0x88d/0xd50 [ 1210.183559][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1210.188113][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1210.192672][ C1] process_backlog+0xa6b/0x18b0 [ 1210.197572][ C1] ? process_backlog+0x3de/0x18b0 [ 1210.202677][ C1] __napi_poll+0xaa/0x330 [ 1210.207053][ C1] net_rx_action+0x61d/0xf50 [ 1210.211699][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1210.216894][ C1] handle_softirqs+0x265/0x8d0 [ 1210.221709][ C1] ? kernel_fpu_end+0x62/0x80 [ 1210.226432][ C1] do_softirq+0x77/0xd0 [ 1210.230631][ C1] [ 1210.233599][ C1] [ 1210.236561][ C1] __local_bh_enable_ip+0x100/0x140 [ 1210.241800][ C1] blake2s_compress+0xfa/0x1c00 [ 1210.246706][ C1] ? rcu_is_watching+0x16/0xb0 [ 1210.251540][ C1] ? __schedule+0x17f3/0x5820 [ 1210.256272][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 1210.261680][ C1] ? __asan_memset+0x22/0x50 [ 1210.266333][ C1] ? __asan_memset+0x22/0x50 [ 1210.270968][ C1] ? __pfx___schedule+0x10/0x10 [ 1210.275879][ C1] blake2s_update+0x140/0x450 [ 1210.280599][ C1] hmac+0x1f4/0x3b0 [ 1210.284453][ C1] ? __pfx_hmac+0x10/0x10 [ 1210.288815][ C1] ? kernel_fpu_end+0x62/0x80 [ 1210.293541][ C1] ? blake2s_compress+0x1b4d/0x1c00 [ 1210.298808][ C1] kdf+0xff/0x290 [ 1210.302479][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 1210.307889][ C1] ? __pfx_kdf+0x10/0x10 [ 1210.312186][ C1] ? __asan_memset+0x22/0x50 [ 1210.316814][ C1] wg_noise_handshake_create_initiation+0x460/0x810 [ 1210.323472][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 1210.330626][ C1] ? __lock_acquire+0x747/0x2de0 [ 1210.335644][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1210.340819][ C1] ? lock_acquire+0x115/0x350 [ 1210.345541][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 1210.351663][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1210.356905][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 1210.362940][ C1] ? ktime_get_coarse_with_offset+0x102/0x150 [ 1210.369052][ C1] wg_packet_handshake_send_worker+0x18c/0x370 [ 1210.375245][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1210.380314][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1210.387042][ C1] ? rcu_is_watching+0x16/0xb0 [ 1210.391859][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1210.397628][ C1] process_scheduled_works+0xc3d/0x1630 [ 1210.403268][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1210.409299][ C1] ? assign_work+0x3cf/0x5d0 [ 1210.413947][ C1] worker_thread+0xa47/0xfb0 [ 1210.418620][ C1] kthread+0x38b/0x480 [ 1210.422722][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1210.427877][ C1] ? __pfx_kthread+0x10/0x10 [ 1210.432516][ C1] ret_from_fork+0x514/0xb70 [ 1210.437158][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1210.442296][ C1] ? __switch_to+0xc78/0x1410 [ 1210.447021][ C1] ? __pfx_kthread+0x10/0x10 [ 1210.451648][ C1] ret_from_fork_asm+0x1a/0x30 [ 1210.456475][ C1]