last executing test programs: 11.815921088s ago: executing program 2 (id=3032): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000100070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd00028008000340000001", @ANYRESDEC], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x20050800) 11.72810121s ago: executing program 2 (id=3033): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000001e00438b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000000027312e9ceb21d306759b39199a49251ce1e471f2a8713b0fae68a53d2ad1c4b5415601368978e96d08fb566ecc08635dba1dd593b5ba671fddb7835e8b4793ddcf18c1c40dfb90e4ef"], 0x5c}}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r1, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={r4, 0xff}, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4c050) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000280)={0x3, &(0x7f0000000100)=[{0x28, 0x0, 0xf9, 0xfffff030}, {0x4d, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) 11.619203592s ago: executing program 2 (id=3035): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x40}, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='gretap0\x00') sendto$inet6(r0, &(0x7f0000000500)="05", 0x1, 0x4004044, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 11.538495598s ago: executing program 2 (id=3036): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x6, 0xf5, &(0x7f0000000080)=""/245, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x5, 0x5, 0x7f}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x4, 0x5, 0x4, 0x7}, {0x5, 0x3, 0x1, 0x7}, {0x3, 0x5, 0x0, 0x6}, {0x5, 0x1, 0x2, 0xb}, {0x3, 0x4, 0xb, 0xc}, {0x0, 0x3, 0x10, 0x8}], 0x10, 0x8001}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=0x1, 0x20, 0x1, 0xe, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@cgroup=r3, r0, 0x20, 0x2018, 0x0, @value=r4, @void, @void, @void, r2}, 0x20) r5 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000580), &(0x7f00000005c0)=0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000840)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000ac0)={0x3, 0x0}, 0x8) (async, rerun: 32) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, r3, 0x0, 0x2, 0x3}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x9, 0x10, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='syzkaller\x00', 0x3ff, 0x20, &(0x7f0000000740)=""/32, 0x40f00, 0x20, '\x00', r7, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x4, 0x10, 0xeb84, 0x81}, 0x10, r9, 0xffffffffffffffff, 0x2, &(0x7f0000000b80)=[r10, r1], &(0x7f0000000bc0)=[{0x2, 0x2, 0xd, 0xd9db005ab38edf86}, {0x1, 0x3, 0xf}], 0x10, 0x66}, 0x94) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)=@getsa={0xa4, 0x12, 0x100, 0xd3a2, 0x25dfdbff, {@in=@broadcast, 0x4d2, 0x2, 0xff}, [@lifetime_val={0x24, 0x9, {0x4, 0x400, 0x6, 0x4}}, @proto={0x5, 0x19, 0x6c}, @migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, @in6=@private1, @in=@remote, @in=@private=0xa010102, 0x6c, 0x1, 0x0, 0x3503, 0xa, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000000f80)={'gretap0\x00', r7, 0x0, 0x1, 0x1, 0x4, {{0x21, 0x4, 0x2, 0x6, 0x84, 0x65, 0x0, 0x7f, 0x2f, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x17, 0xef, [@private=0xa010100, @remote, @remote, @broadcast, @empty]}, @lsrr={0x83, 0x7, 0x10, [@local]}, @end, @rr={0x7, 0x7, 0x35, [@local]}, @lsrr={0x83, 0xb, 0xd0, [@broadcast, @dev={0xac, 0x14, 0x14, 0x29}]}, @cipso={0x86, 0x3f, 0x3, [{0x0, 0x4, "e30f"}, {0x7, 0x11, "389182057f5eb8af03310648a76357"}, {0x0, 0x7, "99705b33a0"}, {0x7, 0xc, "016c762d1aec09af5551"}, {0x5, 0x5, "1a9e43"}, {0x0, 0xc, "4a4a860e3d57276a04bc"}]}]}}}}}) (async, rerun: 32) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001080)=r8, 0x4) (async, rerun: 32) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001140)={0x0, 0x3, 0x8}, 0xc) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001180)={0x1b, 0x0, 0x0, 0x0, 0x0, r10, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) r17 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1e, 0x4, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xbf}]}, &(0x7f0000000e80)='GPL\x00', 0x4, 0x99, &(0x7f0000000ec0)=""/153, 0x40f00, 0x51, '\x00', r13, @sk_lookup=0x24, r14, 0x8, &(0x7f00000010c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001100)={0x1, 0x4, 0x1, 0x9076}, 0x10, 0xffffffffffffffff, r11, 0x7, &(0x7f0000001200)=[r15, r10, r6, r6, r10, r16], &(0x7f0000001240)=[{0x3, 0x1, 0xa, 0x5}, {0x0, 0x4, 0xf, 0x7}, {0x5, 0x1, 0xe, 0x1}, {0x2, 0x2, 0x3, 0x1}, {0x0, 0x1, 0x6, 0x4}, {0x4, 0x3, 0x8}, {0x0, 0x5}], 0x10, 0x40}, 0x94) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000001380)) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f00000013c0)={'syztnl2\x00', r7, 0x4, 0x2, 0x1, 0x8, 0x30, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x20, 0x5, 0x8}}) (async, rerun: 32) r19 = getuid() (rerun: 32) setsockopt$inet6_IPV6_IPSEC_POLICY(r16, 0x29, 0x22, &(0x7f0000001480)={{{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x7, 0x4e24, 0x7, 0xa, 0xa0, 0x20, 0x8, r18, r19}, {0x7, 0x8, 0x3ff, 0x10, 0x374, 0x200, 0x4, 0xc6}, {0x3, 0x3, 0x4, 0x4}, 0x200, 0x6e6bb0, 0x2}, {{@in=@multicast1, 0xbbe, 0x3c}, 0x2, @in=@empty, 0x3504, 0x1, 0x3, 0x7, 0x1, 0x5, 0x7}}, 0xe8) (async) sendmsg$sock(r5, &(0x7f0000002a80)={&(0x7f0000001580)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x800}, 0x80, &(0x7f0000002940)=[{&(0x7f0000001600)="c22da612e038b65389b3d481588e68cd998cdddce08a64113ba6149494efb4bfa3515545194c19b90d0005f2e7117c60acc73e1db13caf74a222c25dbb5fecb69137927000ece5f1aaae473a451f105e0c65ce615f8e2dcbd74d9fd9beae95e3a5c52a7a03e98b6a1a93388413b7bf62e41e69d84a81e999c94f473b868713d29da6c4d6b1c5cfc6080b7d144c2c8cbbdf8976c30b28ce05ba851030798ad17708513e8f13b38a313365745220ab2306fa621ba5668700cd9af72583bff890f90cc7fd54e4c5b0053d88adb273", 0xcd}, {&(0x7f0000001700)="8ac71c3b0c747293d225d30e1a678425dfe3bf40e8fe3821a245ac3c259d6808dabce022e8feedf79c9c88730c3ecf2b5992bd3ca730270501815e7583fc4ee3c232cb59add3a6fc2175702540c5f5d4401ee1dd911ac6f2eac8adfb663185dbbec717c417454c935e98d71f9a95a504163465353fb6d525fa2701aa47ba2f6cf2a393b713250c5ad0caf67128a19fbd694df826e7ed8f5c19600d14179447c00da7de1c23cb007da0af53c4b7150353ae9b058a4d0dff4a0c1221416d2f1f707a39f0ec89cabb3ad53e104247f30ce8a5e3b9b19df2b775ac77180a65e1591a969a83609e8a6b7839a2b961c4d90de9e983465dedb112", 0xf7}, {&(0x7f0000001800)="150536114eb95ca71b8fa7b7cd0fe664104126252619de3cd8", 0x19}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="b821cdf97251de790f9cf974fc3eeaa2844ccc485eaa1dbc91dfaaf1cc8ee79db07b6327f5b6db7f812d18702a01c1872e3c3953046311eda8ce7aa3075f64db180e4a86b3507e5cf30d3271ea583bb845818e1e5cf6fdeaf648f514b4040054ae584bb91b47ecc65468c21f16d99b9d68c715bc7edf81486a7edd19f779b4361aaa40a84cd1f2c7219458625543e035b7acc658208810149bf961a69d02e6638c525b5750a74ab26514c885c60076231e49f90d25944e98b41080628924dc472f6556d97528dd3b5fc646374d456705a67bf2348aa7f36b64f8b2cf", 0xdc}], 0x5, &(0x7f00000029c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x126d}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7d33c9c6}}, @txtime={{0x18, 0x1, 0x3d, 0x179}}], 0x90}, 0x4008000) ioctl$F2FS_IOC_MOVE_RANGE(r14, 0xc020f509, &(0x7f0000002ac0)={r17, 0x0, 0xf9, 0x6}) ioctl$TUNSETVNETBE(r20, 0x400454de, &(0x7f0000002b00)) (async) r21 = syz_genetlink_get_family_id$team(&(0x7f0000002b80), r20) sendmsg$TEAM_CMD_OPTIONS_SET(r20, &(0x7f0000003240)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003200)={&(0x7f0000002bc0)={0x630, r21, 0x70c, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r18}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x85c}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r13}, {0x184, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5d}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x0, 0x9, 0x9}, {0x954, 0x3, 0x1, 0x10000}, {0xd, 0x0, 0xcc, 0xff}, {0x7, 0x4, 0xef, 0x7}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x88d, 0x7, 0x9, 0x6}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r13}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}, {{0x8, 0x1, r13}, {0x4}}, {{0x8, 0x1, r18}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff, 0x9, 0x9, 0x3}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r13}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfe63}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}]}, 0x630}, 0x1, 0x0, 0x0, 0x48804}, 0x20048841) (async) writev(r16, &(0x7f0000003440)=[{&(0x7f0000003280)}, {&(0x7f00000032c0)="1a64e5f7c9b995966de57b914229d87b4379f46c449f6237b244a43c56d37e3c581240dea67cdd31782502908eed6927fdb341fcd22efb82d49d6528484522ef15a6d3d209eb74cdc8dcad4fbfe2ecb07cfe8b75e3487ef01830c1dce7fc747fdcc8b1f068444e918c47f2b4ef79ff3bf0aa59127258af852b60e1f94cf62db5f2c0264b10bce06ac3099a1d9115a4b5f911a497bc0b23c4049cdcbba2d58912c92604a5cf21aaba9fc4f928e1c992f0d65d24de325e4a77c6ad6dd88ff30bb0b863063b3544a3aa6f91fc7831d4b1ce7c343882b120e506de4535b008134331e27ae7a1a943b6c6", 0xe8}, {&(0x7f00000033c0)="05e176039c09fecfda53dafc46db6ee07aa7dfe1368a45eda5c191160db769ec0da42d67c564bc1fa7a91bf3e76e3935e4f605ce8f4d8939e07885a0d78bd8cfbc31aab41d0af802e0823aadb3b24126904530d7012dd39b06c1755bf6ef8752", 0x60}], 0x3) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000003480)={r20, r17, 0x301ff4ba0a325c55, r4}, 0x10) 10.919005786s ago: executing program 2 (id=3040): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x4008010, r0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0xfffffcebfff, 0x1000, 0x800}, 0x20) 10.779813976s ago: executing program 2 (id=3043): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}], 0x140) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1000000000000000"], 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) getsockname$packet(r1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000400)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000000008002000076b77962f9e5f76edbcc7102063a38252c3f99ce6e5250fbd026ab97268a0366425f49996f7ce5435f15e7a69c0241d78321094003201bfca2e502c3380afd5622cb02acdccffc37236f9f8c0bf3"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x438, 0x0, "45ce2da34e8b174ab0a75a2a9dd3346e8d4d210aed43312688e05565e7b42a870604b55907b7d9f5cc440a9461ae68370c0bbcf5149af3682dcbc74f89e9b0787d764ffa8a37ebd0a7e367bdbea738b3b79284c36dc342aebcfeec094805402a912ca6471c4cd604307fdd628ee60c85d749598ac313fecd1e4ec6e8dd1995db3286855f34db39"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) getsockopt$bt_hci(r6, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020603000000000000000010000000040500010007000000050005000a0000000c00078008001300000000000500050002000000050004000300000016000300686173683a6e65742c706f72742c6e6574000000"], 0x58}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r10, 0x1, 0x3e, &(0x7f00000003c0), &(0x7f0000000140)=0x32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x8847, r11, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x14) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_COOKIE(r12, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000300)=0x8) ioctl$int_in(r13, 0x5421, &(0x7f0000001080)=0xc71800) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0x6, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x400c0d0) 3.898315268s ago: executing program 0 (id=3109): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4094) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c007138380dcdd0c17e0a2400001000010426bd700000007dd9f5ba00108c585b1d5efb33d25bc56418c6f189b4860666b40ac60617987fda0786d8f23e5103fc45eed029b980cefbd85405c57576c938a3eda13d3e30c6ba26d1a3e4f03ea8c172cf557bc81a33e8b5af6347521d36c87c97253adacb842ba242fcee7bc25190a03e250d49c4601edd9fcf27066f1c208bed521d3bbd8d86ffb91b", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001c0002000000"], 0x3c}}, 0x4008000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000140)={0x3, [0x0, 0x0, 0x0]}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000000002fe00"], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffa, '\x00', 0x0, r2, 0x5, 0x1, 0x2}, 0x50) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendto$packet(r6, &(0x7f00000000c0)="3e04", 0x2, 0x0, &(0x7f0000000080)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)=ANY=[@ANYBLOB="147310a97b17000000410705000000000000000031591e2d601139e36887c96d9a49ae4a8cecb82ab148b35c545fd6164b924f2b4bea47af22915dfe07fb2336c22d824a12dcc5f694de3446c019291c553d2e9f2090121a51ad1d0548b3268286a9c466b270ccc97ee5a440bcb12c3ec9f73a44372d97f1f79dc499c6137d6acaebd9c5c164478d2c654c788b2c0fdac42c4063edca2837625bae788266470405acb4e9c1fce917e37de902e08afa9f5c02c4838713c1fa5f"], 0x14}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0xfffffffb, '\x00', r7, r2, 0x0, 0x0, 0x2}, 0x50) 3.656556932s ago: executing program 0 (id=3113): r0 = socket$inet(0x2, 0x5, 0x284) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x8000000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x100}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r3, 0x3}, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x20000000, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffc}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0xfffffffffffffffd, &(0x7f00000002c0)=0x4) socket$inet(0x2, 0x5, 0x284) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) unshare(0x8000000) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x100}, &(0x7f0000000100)=0x8) (async) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r3, 0x3}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x20000000, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffc}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0xfffffffffffffffd, &(0x7f00000002c0)=0x4) (async) 2.808930251s ago: executing program 4 (id=3117): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) (async, rerun: 32) r1 = socket$inet6(0xa, 0x5, 0x0) (rerun: 32) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000d}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)="0817b984558c9db4d1c1e379ce093a756f", 0x11) 2.137219104s ago: executing program 0 (id=3120): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000005000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a00007f0000000073797a31000000000900020073797a3100000000140000001100010000000000000000000100000a"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, &(0x7f0000000080)}, 0x20) write$ppp(r3, &(0x7f00000001c0)="38d5", 0x2) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 1.85550976s ago: executing program 4 (id=3121): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dvmrp1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dvmrp1\x00'}) 1.815729351s ago: executing program 1 (id=3122): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b0300009e0603001c00148086e9638a19d2acd0000000000c000207000046c46d00121597eb026a934a3001ce9ad7d174b840178c09d8425072d6f11a2d71afd126b72aa5cc188b31"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4004010) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4000001b00060a0b0400000000000000000200000014000480100001800a00010072256469720000000900010073797a30000007000000000000007a7200000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000140012800900010076657468000000000400008008000300000000000500110001"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x8004) (async) close(r1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.53346917s ago: executing program 4 (id=3124): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x88}, 0x1, 0x7}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x38, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x89, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [@srh]}}}}}}}, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000440)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000340)="e9436d200a16b6ffa2b02bf66eff0dfdb01dcbaf41ae4964ff9ee4d83a7c4f76d78464cbf1bd61e5472a1cc73549d3fe77defba843c992cd9902c2d532b46d4110d12d662810190e0de9763fcb8f3805a648f40795a145a1040a29fc678cef94485cf8b6d4bdfa09d668ca33f55a1920cd0323eedd65e8d5f54525b9fad04422518347474903eadb24ef9da7275737c7cb0af6765ab7c56b5fccef1a32cb49a036e8de24d040a22ea0e4d831b78ec358b31e1d4f38171b688f52733acf8d772a5b09ac8d447400ee4a9b1d86d86e1995a7ca14b8c51afc8534294b9e8710112632556d729c016b4cfa6a59e7049f2880d04cfe", 0xfffffc5d}, {&(0x7f00000040c0)="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", 0x1000}, {&(0x7f0000003180)="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", 0xf0e}], 0x3, 0x0, 0x0, 0x40000000}}], 0x2, 0x48080) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) (async) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r3, 0x2) (async, rerun: 32) accept4(r3, 0x0, 0x0, 0x80800) (rerun: 32) poll(0x0, 0x0, 0xffffffffffbffff8) 1.490304945s ago: executing program 1 (id=3125): r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000020000000000000000c0000008520000009000000182e0000", @ANYRES32=r1, @ANYBLOB="00007c7ca8f2c600000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$key(r0, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100020e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000020000000000000000c0000008520000009000000182e0000", @ANYRES32=r1, @ANYBLOB="00007c7ca8f2c600000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) sendmsg$key(r0, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100020e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) (async) 1.421465858s ago: executing program 0 (id=3127): r0 = socket(0x10, 0x5, 0x4ff) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x20004086) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x66, &(0x7f0000000880)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="00020000", @ANYRES16=r4, @ANYBLOB="010029bd7000fddbdf250800000008000c0002000000140006000000000000000000000000000000000008000c000300000008000400030000000800020007000000080002000000000008000c000100000014000500fc01000000000000000000000000000008000800ac1414aa"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090b000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000fb0200000000030005000000000002000000ac1414aa0000000000000000010008000029"], 0x58}, 0x1, 0x7}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x5a, 0x601, 0x0, 0x0, "", [@nested={0x5, 0x0, 0x0, 0x1, [@generic='j']}]}, 0x18}], 0x1}, 0x0) ioctl$sock_bt_hci(r5, 0x800448d5, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES64=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000864}, 0x4c000) 1.271164838s ago: executing program 1 (id=3128): socket$kcm(0xa, 0x3, 0x87) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r3, 0x1, 0x4, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100008093b1af75621bfbaf139000000", @ANYRES32=0x0, @ANYBLOB="20000000100000001400030076657468305f766c616e000000000000"], 0x34}}, 0x2404c080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0xfdef) 1.22460981s ago: executing program 3 (id=3129): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x5541183ae3c6c804) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="029d8806c831c1", @ANYRES32=0x0, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) 1.103858573s ago: executing program 0 (id=3130): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@mcast1, @mcast2, @mcast1, 0x1, 0xd24, 0x5, 0x0, 0x0, 0x100}) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 1.00090349s ago: executing program 3 (id=3131): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000240)) r1 = socket$unix(0x1, 0x2, 0x0) listen(r1, 0x0) 876.219075ms ago: executing program 0 (id=3132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0xfff, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffc, 0x200000000000, 0x101}, 0x0, 0x0, 0x1, 0x0, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0x7, 0xe9, [@multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x10, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000340)='^'}, 0x20) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000380)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @rand_addr=0x5}, {0x2, 0x4e23, @broadcast}, 0x202, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa, 0x35}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x28, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) r12 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="180000006a007f00b1c465d0d8c535f55c0102cf57fa9e7f", 0x18}], 0x1}, 0x0) recvfrom(r2, &(0x7f0000000580)=""/40, 0x28, 0x40000102, &(0x7f00000005c0)=@qipcrtr={0x2a, 0xffffffff00000003, 0x7ffe}, 0x80) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf251000000008000300", @ANYRES32=r13, @ANYBLOB="596998912d75de3316d1a04614e21e1ca7789fa8e5a13ffecf62d0ac575fc22a0a6b09cf6a2ab9703af90ddd59486f5aeffd353e725f305e7778ca5831fe38a6c2ace2"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x8000004) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_extract_tcp_res(&(0x7f0000000180), 0xffffffff, 0x80) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r5, 0x1, 0x0, 0xfffffffd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0xd8, 0x7, 0x7}]}, 0x34}}, 0x0) 778.60558ms ago: executing program 3 (id=3133): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (rerun: 32) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x24, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) ioctl$sock_proto_private(r5, 0x89e0, &(0x7f0000000380)="2c0450f15679a65f2ad37456bc72bc598e1db8fd15185dc6400ce3e9216e9953be369bdacebd44497498dc26bbb1d09b71f44d7b8f3940db4b1adfc89351ceeab25cfe17b69494db721f62cd9db8ec082c402b9e9bbd66d7e40161f53bdd4f1610727f6084c25241eb82a030220e8fe2765b79c6afd35df5300d7a01a8c9165352f3bbd91ca502adc70ede088d29ecb62afe183228486064dcf6bb224307dff083992a936965872c2f3480d7b059d99a3d22fc6e46b4676c") (async) listen(r6, 0x8) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r7, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x12) (rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x5, 0x100, 0x8}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40804) 661.5974ms ago: executing program 1 (id=3134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0xffffffffffffff9f}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x10, 0x2}, {0x8, 0x6}, {0x1, 0x5}, {0x2, 0x5}, {0x7f, 0x3}, {0x2, 0x3}, {0x3, 0x3}, {0x3, 0x3}, {0x8, 0x5}, {0x7, 0x1}, {0x8, 0x4}], "ed0cccbb072d5e31"}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4009000}, 0x20008040) 350.075485ms ago: executing program 4 (id=3135): r0 = socket(0x2a, 0x5, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @remote, 0x1feffff00, 0xff000000, 'veth1_to_team\x00', 'bridge0\x00', {0xff}, {}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0xff, 'bridge0\x00', 'netpci0\x00', {}, {0xff}, 0x5e, 0x0, 0x22}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 0x4, 0x1, [0x32, 0x22, 0xa, 0x1b, 0x2d, 0x2b, 0x1c, 0x38, 0x1c, 0x9, 0x23, 0x11, 0xd, 0x2, 0x2, 0x2030], 0x2, 0xfffffff8, 0x49cf}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12141, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) (async) recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000131e00000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fe80000000000000000000000000003f00000000000000000000000000000000020000000000000000000000000000000000001000000000ad0000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200740000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000a347e35acedd001b00000000000000000000ffff0a010102ffff293fd81c831baff863426fece7289b00000000000000000000020000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b40000000000000200000000000000000000007ffffffe0000000000000000000000000000000000000000000000000000000000000000000100000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x4cc00) (async) ppoll(&(0x7f0000000240)=[{r0, 0x8}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$alg(r4, &(0x7f0000002c40)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)='[', 0x1}], 0x1, &(0x7f0000000680)=[@assoc={0x18}, @assoc={0x18}], 0x30}], 0x1, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000080000000100010009000000ba000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000001080)={0xa, 0x4e20, 0x4000000, @empty, 0xfffffffe}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200"/24, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x10) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000200000c5e12f1ef3afaecf47b8d87aa652000000000000006d08279febec4517bfe115c4cc39980f0000050000000700001c0000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 347.25783ms ago: executing program 3 (id=3136): socketpair(0x9, 0x1, 0x1, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800a76aff83a9ffd9d3388c58e2c599a3343ea9264d49c9aa9a0000000000001819afe5732960951e3ab08543", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800a76aff83a9ffd9d3388c58e2c599a3343ea9264d49c9aa9a0000000000001819afe5732960951e3ab08543", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x90) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000080)="6437ba", 0x3}, {&(0x7f0000000280)="fef34de64021996d66f3d87870843403842bcbc243ddd0b31a27a1f713716c262af2c554be219bf389275f59f7c6039fd436c1a9a2577397e8aff8b48321a9ae0deed235e0c80c5bd7c0f2700dc32f67159d3dfc2a495a9495adaabdab13e775863c4659ff6aaa169135e008d999986a1c8986686379c93beda9760538d507bcdc00cf69770f5b3098b2838d5a45ac3bfe9c46ec0a577be389ce795b55e54870db8fca5150d07cea33267c40d6c1e3a3bf8fee11a128b87e06e35a1aec35141cb7c594afcff209b6ed", 0xc9}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb6}]}) (async) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb6}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r6, 0xa17, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) write$ppp(r4, &(0x7f0000000580)="4ef5d281051726ceebd755e5c06fb6f7d0e6e475bd8c05ec65e7217c9d9e44534f6fb62b69d0ebce2995c604383e47042ff93255c28e4f995cddb0668f78b9eba9c160e3bd9ce5e71fb2120a32ac06227e5d3c41ac28257f7a8945bb1585681fcd29f25221925280c0c6ba375a8bbf90a3f12896086515daf22755bfad8085b9186d6c43c2dfada2b3fcf2919439a67f6809be8fb2335436dfbe79373330c9162f66a7c46b2b6a6c6eb6682b982bee21db27ef06d593d9a37876136ee53b0dac6acb332b78fe4bec69012e3ab8c94f90b9d516095df795bb", 0xd8) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) (async) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x18, &(0x7f0000000240)=0xc, 0x3) 346.682651ms ago: executing program 1 (id=3137): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000000c0)={0x7, 'veth0_virt_wifi\x00', {0x2}, 0x4}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xb, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x1}]}]}]}}]}, 0xb8}}, 0x0) 345.918179ms ago: executing program 4 (id=3138): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}}}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r2, 0x0, 0x7fffffff}, 0x18) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), 0x4) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x10}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) pipe(&(0x7f0000000340)) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x38}}, 0x40000c4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r5) syz_open_procfs$namespace(0x0, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f0000000000)={0x5e38b282e414372c, @default, @bpq0, 0x4, 'syz0\x00', @bcast, 0x5, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0x100ad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 197.556211ms ago: executing program 1 (id=3139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030300000000000000010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000002000000000000000000100800010001000000"], 0x1c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000000000000000000000000000fe8000000000000000000000000000aa00000000000790"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 75.879918ms ago: executing program 3 (id=3140): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r1 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x2260}}], 0x1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket$inet(0x2, 0x3, 0x102) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0xb, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @jmp={0x5, 0x0, 0xa, 0x1, 0x7, 0x4, 0xffffffffffffffff}, @alu={0x7, 0x1, 0x5, 0xa, 0x8, 0x0, 0xfffffffffffffff0}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3f51, 0x0, 0x0, 0x0, 0x3}, @ldst={0xdfc22a3e56f80745, 0x1, 0x2, 0x3, 0xa, 0x18, 0x3}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'veth1_to_hsr\x00', {0x2, 0x0, @private}}) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r2, 0x0) 63.850465ms ago: executing program 4 (id=3141): syz_emit_ethernet(0xffffffffffffff20, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x6, 0x4, 0x8, {0x7, 0x0, 0x6, 0x80, 0x2}, {0x0, 0x2, 0x1, 0xc05, 0x77}, 0x2, 0x5, 0xffffffff}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x80, 0x7, 0xecf, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xd81, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="d1fc29644459e96ecfb4d220de16f5eb9fa10b1c12b1a09cc5f9aa60fb90ef59b3d071d97043a6736419ae9aae66d9694015ff7524ae48c359bf9e962186177c47c722dafd5cab24d70c002d654ef08be29f3a05247f5540003ce1d578534f3944221c064c09b50348500ec49735894f4538d8049d72faab935e6fb633662d404f5f2fcc7492648e200f6725f438ba275373dd4abea0e0bb3511c3e8349176e56ed8d3d4185c146de5982e2f875af2476de7eaefa957d7137f54", @ANYRES32, @ANYRES32=0x0, @ANYRESHEX, @ANYRES8=0x0], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) 0s ago: executing program 3 (id=3142): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0xa763ee47795d484f, @default, @bpq0, 0x1, 'syz0\x00', @default, 0x1, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1ac, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x170, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c07f9d1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2843171}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2eb6e2b4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32aa8d6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e25bbab}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46cb8b59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x413342ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5072d94c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d0c7f9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f112866}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x124ed666}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4459948e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2525b550}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x565bdd88}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2feac4c4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cf4790a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc9bd54f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10409614}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43fa7b0d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10da2416}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe3c9bc3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6871255b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x159e8c36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10721b1f}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019340)={0x54, r4, 0x1, 0x70bd2a, 0xfffffffe, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2001}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0x794}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x448d5}, 0x24008004) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'dh\x00', 0x20, 0xfffffffe, 0x8000007f}, 0x2c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000004c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000380)={0x8a, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0xa763ee47795d484f, @default, @bpq0, 0x1, 'syz0\x00', @default, 0x1, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r2) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1ac, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x170, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c07f9d1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2843171}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2eb6e2b4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32aa8d6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e25bbab}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46cb8b59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x413342ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5072d94c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d0c7f9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f112866}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x124ed666}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4459948e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2525b550}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x565bdd88}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2feac4c4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cf4790a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc9bd54f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10409614}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43fa7b0d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10da2416}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe3c9bc3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6871255b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x159e8c36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10721b1f}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019340)={0x54, r4, 0x1, 0x70bd2a, 0xfffffffe, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2001}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0x794}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x448d5}, 0x24008004) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'dh\x00', 0x20, 0xfffffffe, 0x8000007f}, 0x2c) (async) pipe(&(0x7f00000000c0)) (async) openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000004c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) (async) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000380)={0x8a, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) (async) kernel console output (not intermixed with test programs): z.4.820'. [ 131.219785][ T8750] openvswitch: netlink: Key type 123 is out of range max 32 [ 131.231940][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'. [ 131.295039][ T8750] !: entered promiscuous mode [ 131.431686][ T8761] netlink: 'syz.1.832': attribute type 83 has an invalid length. [ 131.586585][ T8769] netlink: 'syz.0.838': attribute type 10 has an invalid length. [ 131.652180][ T8769] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 131.721902][ T8775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.841'. [ 131.741001][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.843'. [ 131.750899][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.843'. [ 131.760329][ T8780] netlink: 'syz.3.843': attribute type 3 has an invalid length. [ 131.877425][ T8793] netlink: 'syz.3.845': attribute type 2 has an invalid length. [ 131.885293][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.845'. [ 131.886315][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'. [ 132.041218][ T8799] bond1 (unregistering): Released all slaves [ 132.088704][ T8805] bond1 (unregistering): Released all slaves [ 132.176780][ T8810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.178289][ T8808] syzkaller0: entered promiscuous mode [ 132.193405][ T8808] syzkaller0: entered allmulticast mode [ 132.512765][ T8819] netlink: 'syz.2.852': attribute type 1 has an invalid length. [ 132.545394][ T8818] gretap1: entered promiscuous mode [ 132.831102][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 132.842847][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.855103][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.874413][ T8836] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 133.037918][ T8844] blkio.reset_stats is deprecated [ 133.133682][ T8848] tc_dump_action: action bad kind [ 133.186451][ T8856] IPVS: length: 239 != 24 [ 133.470408][ T8875] tipc: Enabled bearer , priority 0 [ 133.479025][ T8875] syzkaller0: entered promiscuous mode [ 133.484621][ T8875] syzkaller0: entered allmulticast mode [ 133.496775][ T8875] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 133.536040][ T8880] netlink: 'syz.0.874': attribute type 29 has an invalid length. [ 133.568313][ T8875] tipc: Resetting bearer [ 133.578724][ T8872] tipc: Resetting bearer [ 133.593694][ T8872] tipc: Disabling bearer [ 133.656978][ T8884] netlink: 'syz.2.876': attribute type 1 has an invalid length. [ 133.664662][ T8884] netlink: 'syz.2.876': attribute type 2 has an invalid length. [ 133.760809][ T8890] bridge_slave_1: left allmulticast mode [ 133.767316][ T8890] bridge_slave_1: left promiscuous mode [ 133.773244][ T8890] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.792586][ T8890] bridge_slave_0: left allmulticast mode [ 133.800749][ T8890] bridge_slave_0: left promiscuous mode [ 133.803623][ T65] tipc: Subscription rejected, illegal request [ 133.808187][ T8890] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.153847][ T8912] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 134.154169][ T8914] netlink: 'syz.2.886': attribute type 1 has an invalid length. [ 134.237745][ T8914] 8021q: adding VLAN 0 to HW filter on device bond4 [ 134.267991][ T8923] bond4: (slave geneve2): making interface the new active one [ 134.278693][ T8923] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 134.462253][ T8934] team0: Device ip6gre2 is of different type [ 134.669310][ T8943] netlink: 'syz.0.898': attribute type 10 has an invalid length. [ 134.697968][ T8945] netlink: 'syz.3.899': attribute type 11 has an invalid length. [ 134.706035][ T8943] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 134.748879][ T1329] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.769083][ T1329] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.804573][ T1329] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.816978][ T8951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.827980][ T1329] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.947277][ T8954] can: request_module (can-proto-4) failed. [ 134.948009][ T8962] Bluetooth: MGMT ver 1.23 [ 134.964723][ T8956] 8021q: adding VLAN 0 to HW filter on device bond6 [ 135.001914][ T8963] vlan2: entered promiscuous mode [ 135.015773][ T8963] bond6: entered promiscuous mode [ 135.021024][ T8963] vlan2: entered allmulticast mode [ 135.066508][ T8963] bond6: entered allmulticast mode [ 135.120358][ T8956] bond6: (slave gretap1): making interface the new active one [ 135.131485][ T8956] gretap1: entered promiscuous mode [ 135.138221][ T8956] gretap1: entered allmulticast mode [ 135.147823][ T8956] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 135.172538][ T8956] syz.0.901 (8956) used greatest stack depth: 18632 bytes left [ 135.299577][ T8979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.482358][ T8981] bond1 (unregistering): Released all slaves [ 135.569277][ T8993] pim6reg1: entered promiscuous mode [ 135.574728][ T8993] pim6reg1: entered allmulticast mode [ 135.597317][ T8979] netdevsim netdevsim4: Direct firmware load for . [ 135.597317][ T8979] failed with error -2 [ 135.609948][ T8979] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 135.609948][ T8979] [ 135.751835][ T9008] __nla_validate_parse: 29 callbacks suppressed [ 135.751854][ T9008] netlink: 9 bytes leftover after parsing attributes in process `syz.1.917'. [ 135.881709][ T9020] netlink: 148 bytes leftover after parsing attributes in process `syz.3.920'. [ 136.275389][ T1329] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.292200][ T1329] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.334192][ T1329] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.356585][ T1329] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.392477][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.928'. [ 136.848912][ T9074] netlink: 44 bytes leftover after parsing attributes in process `syz.3.940'. [ 137.303362][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 137.330921][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.949'. [ 137.331980][ T9115] netlink: 20328 bytes leftover after parsing attributes in process `syz.2.948'. [ 137.353479][ T9122] validate_nla: 7 callbacks suppressed [ 137.353494][ T9122] netlink: 'syz.3.949': attribute type 20 has an invalid length. [ 137.374519][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 137.394304][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 137.406717][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.949'. [ 137.427933][ T9122] netlink: 'syz.3.949': attribute type 20 has an invalid length. [ 138.436451][ T9178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.216099][ T9230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.259784][ T9230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.285065][ T9230] netlink: 'syz.3.990': attribute type 3 has an invalid length. [ 139.294677][ T9230] netlink: 'syz.3.990': attribute type 30 has an invalid length. [ 139.305553][ T9230] netlink: 'syz.3.990': attribute type 21 has an invalid length. [ 139.337499][ T9230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.343052][ T9236] wg1: entered promiscuous mode [ 139.352650][ T9236] wg1: entered allmulticast mode [ 139.813357][ T9256] netlink: 'syz.0.1003': attribute type 1 has an invalid length. [ 139.850198][ T9256] 8021q: adding VLAN 0 to HW filter on device bond8 [ 139.950468][ T9260] bond8: (slave veth7): Enslaving as an active interface with a down link [ 140.044481][ T9231] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 140.056661][ T9256] veth9: entered promiscuous mode [ 140.560345][ T9296] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 140.674902][ T9304] tipc: Invalid UDP bearer configuration [ 140.674958][ T9304] tipc: Enabling of bearer rejected, failed to enable media [ 140.861829][ T9318] __nla_validate_parse: 17 callbacks suppressed [ 140.861847][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1021'. [ 140.896697][ T9318] netlink: 'syz.3.1021': attribute type 8 has an invalid length. [ 141.055661][ T9326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.550689][ T9356] tipc: Enabled bearer , priority 0 [ 141.566290][ T9356] syzkaller0: entered promiscuous mode [ 141.582059][ T9356] syzkaller0: entered allmulticast mode [ 141.608548][ T9356] tipc: Resetting bearer [ 141.682176][ T9356] tipc: Disabling bearer [ 141.716285][ T9364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1040'. [ 141.721495][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'. [ 141.783540][ T9364] 8021q: adding VLAN 0 to HW filter on device bond9 [ 141.806101][ T9371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'. [ 141.880091][ T65] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.895613][ T65] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.956854][ T65] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.014232][ T65] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.111856][ T9397] netlink: 'syz.4.1047': attribute type 10 has an invalid length. [ 142.157594][ T9406] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1048'. [ 142.185285][ T9406] bridge0: port 1(syz_tun) entered blocking state [ 142.197141][ T9406] bridge0: port 1(syz_tun) entered disabled state [ 142.205319][ T9406] syz_tun: entered allmulticast mode [ 142.247085][ T9415] netlink: 'syz.2.1048': attribute type 10 has an invalid length. [ 142.248587][ T9406] syz_tun: entered promiscuous mode [ 142.472087][ T9427] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.512036][ T9433] netlink: 'syz.0.1057': attribute type 1 has an invalid length. [ 142.532153][ T9433] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1057'. [ 142.549970][ T9433] xt_l2tp: v2 sid > 0xffff: 1114112 [ 142.591317][ T9436] veth7: entered allmulticast mode [ 142.769568][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'. [ 142.782336][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1060'. [ 142.858041][ T9459] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1066'. [ 142.875078][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1066'. [ 142.944401][ T9463] pim6reg: entered allmulticast mode [ 143.096371][ T9471] tipc: Started in network mode [ 143.101287][ T9471] tipc: Node identity 96add317c168, cluster identity 4711 [ 143.109014][ T9471] tipc: Enabled bearer , priority 0 [ 143.126726][ T9471] syzkaller0: entered promiscuous mode [ 143.132228][ T9471] syzkaller0: entered allmulticast mode [ 143.157933][ T9469] nbd: must specify at least one socket [ 143.946466][ T9470] tipc: Resetting bearer [ 144.116916][ T9] tipc: Node number set to 1472582423 [ 144.134285][ T9470] tipc: Disabling bearer [ 144.203141][ T9508] tc_dump_action: action bad kind [ 144.460782][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880555ecc00: rx timeout, send abort [ 144.850482][ T9546] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 144.857228][ T9546] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 144.960960][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888031830000: rx timeout, send abort [ 144.970180][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880555ecc00: abort rx timeout. Force session deactivation [ 145.058846][ T9552] tipc: Enabling of bearer rejected, failed to enable media [ 145.434837][ T9574] netlink: 'syz.2.1097': attribute type 10 has an invalid length. [ 145.469337][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888031830000: abort rx timeout. Force session deactivation [ 145.503713][ T9576] netlink: 'syz.4.1100': attribute type 11 has an invalid length. [ 145.984052][ T9614] __nla_validate_parse: 7 callbacks suppressed [ 145.984069][ T9614] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1109'. [ 146.019147][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1109'. [ 146.047935][ T9614] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1109'. [ 146.089875][ T9614] netlink: 'syz.4.1109': attribute type 3 has an invalid length. [ 146.098253][ T9614] netlink: 'syz.4.1109': attribute type 2 has an invalid length. [ 146.109635][ T9614] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1109'. [ 146.203561][ T9621] netlink: 'syz.3.1112': attribute type 1 has an invalid length. [ 146.218942][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 146.344848][ T9631] netlink: 'syz.2.1116': attribute type 1 has an invalid length. [ 146.364085][ T9631] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1116'. [ 146.434555][ T9633] netlink: 'syz.3.1117': attribute type 10 has an invalid length. [ 146.437549][ T9643] tunl0: entered promiscuous mode [ 146.450169][ T9643] netlink: 'syz.2.1120': attribute type 3 has an invalid length. [ 146.477531][ T9643] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1120'. [ 146.496841][ T9633] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 146.511498][ T9633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.527395][ T9643] netlink: 'syz.2.1120': attribute type 3 has an invalid length. [ 146.535193][ T9643] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1120'. [ 146.748815][ T9656] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1127'. [ 147.057609][ T9677] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 147.122406][ T5935] IPVS: starting estimator thread 0... [ 147.138544][ T9686] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1135'. [ 147.139153][ T9683] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 147.218749][ T9685] IPVS: using max 28 ests per chain, 67200 per kthread [ 147.289330][ T9690] x_tables: duplicate underflow at hook 1 [ 147.554639][ T9714] validate_nla: 2 callbacks suppressed [ 147.554658][ T9714] netlink: 'syz.4.1144': attribute type 23 has an invalid length. [ 147.701734][ T9723] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 147.718174][ T9723] 0ªî{X¹¦: entered allmulticast mode [ 147.724151][ T9723] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 148.143972][ T9736] tipc: Enabled bearer , priority 0 [ 148.169621][ T9735] tipc: Disabling bearer [ 148.680573][ T9768] sch_fq: defrate 0 ignored. [ 148.843660][ T9768] syzkaller0: entered promiscuous mode [ 148.850130][ T9768] syzkaller0: entered allmulticast mode [ 150.565527][ T9807] netlink: 'syz.2.1172': attribute type 1 has an invalid length. [ 150.583587][ T9808] netlink: 'syz.2.1172': attribute type 1 has an invalid length. [ 150.680177][ T9815] netlink: 'syz.1.1174': attribute type 4 has an invalid length. [ 150.807742][ T9826] netlink: 'syz.4.1179': attribute type 11 has an invalid length. [ 151.034342][ T5935] lo speed is unknown, defaulting to 1000 [ 151.167525][ T9849] __nla_validate_parse: 10 callbacks suppressed [ 151.167541][ T9849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1186'. [ 151.187050][ T9853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.205913][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.223444][ T9849] batadv_slave_1: entered promiscuous mode [ 151.239198][ T9849] batadv_slave_1: entered allmulticast mode [ 151.357745][ T9861] syzkaller0: entered promiscuous mode [ 151.382148][ T9861] syzkaller0: entered allmulticast mode [ 151.604588][ T9878] netlink: 'syz.1.1195': attribute type 1 has an invalid length. [ 151.612932][ T9878] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1195'. [ 151.711446][ T9886] bond4: entered promiscuous mode [ 151.716899][ T9886] bond4: entered allmulticast mode [ 151.722592][ T9886] 8021q: adding VLAN 0 to HW filter on device bond4 [ 151.733539][ T9889] netlink: 'syz.0.1200': attribute type 1 has an invalid length. [ 151.741741][ T9890] netlink: 'syz.0.1200': attribute type 1 has an invalid length. [ 152.022498][ T9907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1207'. [ 152.051367][ T9907] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 152.060293][ T864] IPVS: starting estimator thread 0... [ 152.162285][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1208'. [ 152.175716][ T9908] IPVS: using max 29 ests per chain, 69600 per kthread [ 152.210056][ T9915] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1209'. [ 152.241074][ T9915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.254231][ T9915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.289645][ T9915] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 152.312223][ T9915] bond0 (unregistering): Released all slaves [ 152.334866][ T9922] 8021q: VLANs not supported on ip_vti0 [ 152.341924][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 152.562863][ T9939] _ÐZ`Ô€@Y: entered promiscuous mode [ 152.784354][ T9956] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1216'. [ 152.837176][ T9956] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1216'. [ 153.137086][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1223'. [ 153.385394][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1229'. [ 153.555327][T10018] netlink: 'syz.3.1233': attribute type 21 has an invalid length. [ 154.112309][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a62ac00: rx timeout, send abort [ 154.121064][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a62ac00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 154.376186][T10069] tipc: Enabled bearer , priority 0 [ 154.424514][T10069] syzkaller0: entered promiscuous mode [ 154.443410][T10069] syzkaller0: entered allmulticast mode [ 154.459331][T10071] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 154.517528][T10069] tipc: Resetting bearer [ 154.535398][T10068] tipc: Resetting bearer [ 154.552126][T10068] tipc: Disabling bearer [ 154.738450][T10083] veth1_macvtap: left promiscuous mode [ 154.744096][T10083] macsec0: entered promiscuous mode [ 155.195185][T10145] x_tables: duplicate underflow at hook 1 [ 155.606380][T10166] nbd1: detected capacity change from 0 to 127 [ 155.641925][ T5144] block nbd1: Receive control failed (result -104) [ 155.644008][T10169] netlink: 'syz.1.1272': attribute type 16 has an invalid length. [ 155.656681][T10169] netlink: 'syz.1.1272': attribute type 3 has an invalid length. [ 155.766218][T10182] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 156.370686][T10231] vlan2: entered promiscuous mode [ 156.378006][T10231] vlan2: entered allmulticast mode [ 156.385950][T10231] hsr_slave_1: entered allmulticast mode [ 156.398043][T10231] __nla_validate_parse: 12 callbacks suppressed [ 156.398059][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 156.685638][T10250] netlink: 'syz.0.1295': attribute type 6 has an invalid length. [ 156.792377][T10257] tipc: Enabled bearer , priority 0 [ 156.864809][T10255] syzkaller0: entered promiscuous mode [ 156.871078][T10255] syzkaller0: entered allmulticast mode [ 156.881806][T10255] tipc: Resetting bearer [ 156.965130][T10263] tipc: Enabled bearer , priority 10 [ 156.990888][T10257] tipc: Resetting bearer [ 157.290792][T10295] netlink: 'syz.4.1304': attribute type 1 has an invalid length. [ 157.300987][T10295] netlink: 'syz.4.1304': attribute type 1 has an invalid length. [ 157.314046][T10295] netlink: 'syz.4.1304': attribute type 1 has an invalid length. [ 157.324113][T10295] netlink: 'syz.4.1304': attribute type 2 has an invalid length. [ 157.846735][ T979] tipc: Node number set to 941196512 [ 158.075770][ T864] tipc: Node number set to 1291758813 [ 158.267311][T10257] tipc: Disabling bearer [ 158.523999][T10313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1308'. [ 158.538472][T10316] nbd: device at index 2 is going down [ 158.900642][ T5839] udevd[5839]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 158.915815][ T5144] Bluetooth: hci1: command tx timeout [ 158.999776][T10346] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1318'. [ 159.023202][T10346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1318'. [ 159.090730][T10346] netlink: 'syz.2.1318': attribute type 1 has an invalid length. [ 159.271130][T10358] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1321'. [ 159.300999][T10360] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1321'. [ 159.318160][T10358] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 159.441487][T10367] tipc: Enabled bearer , priority 0 [ 159.485172][T10376] nftables ruleset with unbound set [ 159.517688][T10367] tipc: Disabling bearer [ 159.637646][T10387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1327'. [ 160.305975][T10430] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1341'. [ 160.338621][T10430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1341'. [ 160.492783][T10441] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1345'. [ 160.803830][T10458] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 160.906409][T10452] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 160.921390][T10452] bond1 (unregistering): Released all slaves [ 161.132208][T10479] gtp0: entered promiscuous mode [ 161.148624][T10479] gtp0: entered allmulticast mode [ 161.421468][T10501] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 161.566443][T10508] __nla_validate_parse: 2 callbacks suppressed [ 161.566460][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1369'. [ 161.661163][T10510] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1371'. [ 161.674364][T10510] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1371'. [ 161.841928][T10517] IPv4: Oversized IP packet from 127.202.26.0 [ 161.863820][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1377'. [ 161.998556][T10526] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1379'. [ 162.030440][T10524] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 162.417366][T10542] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1382'. [ 162.462421][T10542] batadv1: entered allmulticast mode [ 162.532546][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'. [ 162.659603][T10552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1386'. [ 162.946666][T10574] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1389'. [ 163.232196][T10591] netlink: 'syz.1.1395': attribute type 26 has an invalid length. [ 163.435322][T10607] netlink: 'syz.1.1399': attribute type 1 has an invalid length. [ 163.523864][T10607] 8021q: adding VLAN 0 to HW filter on device bond5 [ 163.581688][T10611] veth3: entered promiscuous mode [ 163.610036][T10611] bond5: (slave veth3): Enslaving as an active interface with a down link [ 163.636311][T10618] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1403'. [ 163.639793][T10607] bond5: entered allmulticast mode [ 163.667547][T10622] netlink: 'syz.0.1405': attribute type 4 has an invalid length. [ 164.079868][ T979] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 164.098012][ T979] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 164.179544][ T979] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 164.294162][T10662] netlink: 'syz.0.1419': attribute type 32 has an invalid length. [ 164.424640][T10662] bond10: Setting coupled_control to off (0) [ 165.251474][T10719] IPv6: sit2: Disabled Multicast RS [ 165.259849][T10719] sit2: entered allmulticast mode [ 165.584683][T10126] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.602953][T10126] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.614782][T10126] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.636688][T10126] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.112310][T10786] netlink: 'syz.1.1457': attribute type 12 has an invalid length. [ 166.152120][T10786] bond6: option primary_reselect: invalid value (255) [ 166.170453][T10786] bond6 (unregistering): Released all slaves [ 166.219393][T10794] netlink: 'syz.3.1459': attribute type 29 has an invalid length. [ 166.608249][T10814] netlink: 'syz.4.1466': attribute type 10 has an invalid length. [ 166.988017][T10841] __nla_validate_parse: 17 callbacks suppressed [ 166.988035][T10841] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1476'. [ 167.046679][T10849] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1476'. [ 167.091290][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1476'. [ 167.263303][T10858] ªªªªªª: renamed from vlan0 [ 167.286346][T10860] tipc: New replicast peer: 255.255.255.255 [ 167.293144][T10860] tipc: Enabled bearer , priority 10 [ 167.514725][T10876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1486'. [ 167.551779][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'. [ 167.575756][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'. [ 167.588415][T10881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1487'. [ 167.678978][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1490'. [ 167.759933][T10896] xt_CT: You must specify a L4 protocol and not use inversions on it [ 167.891099][T10896] syz.2.1492 (10896) used greatest stack depth: 18008 bytes left [ 167.968420][T10897] syz.2.1492 (10897) used greatest stack depth: 17864 bytes left [ 167.987160][T10905] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1493'. [ 168.114748][T10918] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1497'. [ 168.172629][T10915] tipc: Enabled bearer , priority 0 [ 168.196615][T10922] tipc: Enabling of bearer rejected, already enabled [ 168.237752][T10915] syzkaller0: entered promiscuous mode [ 168.243309][T10915] syzkaller0: entered allmulticast mode [ 168.296564][T10922] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 168.349895][T10915] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 168.412814][T10933] tipc: Resetting bearer [ 168.462612][T10933] tipc: Disabling bearer [ 168.490070][T10938] tipc: Enabling of bearer rejected, failed to enable media [ 168.514437][T10938] netlink: 'syz.3.1506': attribute type 5 has an invalid length. [ 168.557911][T10938] geneve2: entered promiscuous mode [ 168.576940][T10938] geneve2: entered allmulticast mode [ 168.592228][T10135] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 168.623557][T10135] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 168.646276][T10135] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 168.670938][T10944] syzkaller1: entered promiscuous mode [ 168.679655][T10944] syzkaller1: entered allmulticast mode [ 168.690178][T10135] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 168.724973][T10944] pim6reg: entered allmulticast mode [ 168.802407][T10956] netlink: 'syz.3.1512': attribute type 33 has an invalid length. [ 168.846092][T10956] netlink: 'syz.3.1512': attribute type 33 has an invalid length. [ 168.854860][T10956] netlink: 'syz.3.1512': attribute type 33 has an invalid length. [ 169.053395][T10968] tipc: Enabled bearer , priority 0 [ 169.081618][T10968] syzkaller0: entered promiscuous mode [ 169.101694][T10968] syzkaller0: entered allmulticast mode [ 169.123411][T10969] tipc: Resetting bearer [ 169.143779][T10967] tipc: Resetting bearer [ 169.160056][T10967] tipc: Disabling bearer [ 169.949502][T11030] netlink: 'syz.3.1534': attribute type 2 has an invalid length. [ 170.277904][T11051] x_tables: duplicate underflow at hook 2 [ 170.583380][T11075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.603796][T11071] vlan2: entered promiscuous mode [ 170.628967][T11071] bridge0: entered promiscuous mode [ 170.914468][T11088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.930998][T11088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.967547][T11088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.977497][T11088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.125554][T11107] netlink: 'syz.4.1563': attribute type 1 has an invalid length. [ 171.388664][T11128] pimreg: entered allmulticast mode [ 171.442559][T11132] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 171.452172][T11132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.850583][T11164] syzkaller0: entered promiscuous mode [ 171.856582][T11164] syzkaller0: entered allmulticast mode [ 172.457826][T11172] IPVS: set_ctl: invalid protocol: 2 172.20.20.11:21 [ 172.558401][T11180] lo speed is unknown, defaulting to 1000 [ 172.571006][T11181] __nla_validate_parse: 11 callbacks suppressed [ 172.571023][T11181] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1581'. [ 172.589525][T11181] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1581'. [ 172.606837][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'. [ 172.626690][T11185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1584'. [ 172.647630][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1584'. [ 172.653328][T11186] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1585'. [ 172.731080][T11191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1584'. [ 172.866828][T11204] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1589'. [ 172.879888][T11199] netlink: 'syz.1.1588': attribute type 11 has an invalid length. [ 173.116541][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1591'. [ 173.150244][T11180] hsr0 speed is unknown, defaulting to 1000 [ 173.596350][T11227] tipc: Enabled bearer , priority 0 [ 173.623126][T11227] syzkaller0: entered promiscuous mode [ 173.637397][T11227] syzkaller0: entered allmulticast mode [ 173.734061][T11232] 8021q: VLANs not supported on vxcan1 [ 173.740203][ C0] syzkaller0: tun_net_xmit 90 [ 173.740288][ C0] syzkaller0: tun_net_xmit 90 [ 173.763249][T11243] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1601'. [ 173.769573][T11227] tipc: Resetting bearer [ 173.822661][T11227] syzkaller0: tun_net_xmit 90 [ 173.827621][T11227] syzkaller0: tun_net_xmit 90 [ 173.936031][T11226] tipc: Resetting bearer [ 174.029859][T11226] tipc: Disabling bearer [ 174.348988][T11280] gre0: entered promiscuous mode [ 174.530218][T11286] netlink: 'syz.1.1611': attribute type 10 has an invalid length. [ 174.682360][T11297] netlink: 'syz.2.1613': attribute type 14 has an invalid length. [ 174.788868][T11303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.797475][T11303] batadv_slave_1: entered promiscuous mode [ 174.803453][T11303] batadv_slave_1: entered allmulticast mode [ 175.080937][T11327] syzkaller0: entered promiscuous mode [ 175.086631][T11327] syzkaller0: entered allmulticast mode [ 175.094407][T11326] tipc: Enabled bearer , priority 0 [ 175.129289][T11328] tipc: Resetting bearer [ 175.144974][T11328] tipc: Disabling bearer [ 175.841037][T11351] netlink: 'syz.0.1632': attribute type 1 has an invalid length. [ 175.851203][T11351] netlink: 'syz.0.1632': attribute type 1 has an invalid length. [ 176.125363][T11358] netlink: 'syz.1.1635': attribute type 1 has an invalid length. [ 176.166617][T11358] bond6: entered promiscuous mode [ 176.172170][T11358] 8021q: adding VLAN 0 to HW filter on device bond6 [ 176.199865][T11358] 8021q: adding VLAN 0 to HW filter on device bond6 [ 176.207270][T11358] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 176.218247][T11358] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 176.231866][T11358] bond6: (slave wireguard0): making interface the new active one [ 176.240010][T11358] wireguard0: entered promiscuous mode [ 176.247735][T11358] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 176.432855][T11358] bond6 (unregistering): (slave wireguard0): Releasing backup interface [ 176.442139][T11358] wireguard0: left promiscuous mode [ 176.459402][T11358] bond6 (unregistering): Released all slaves [ 176.487511][T11370] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 176.504810][T11371] veth0_to_bond: entered allmulticast mode [ 176.953615][T11404] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 176.964536][T11401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.086818][T11414] netlink: 'syz.4.1656': attribute type 3 has an invalid length. [ 177.691989][T11454] __nla_validate_parse: 10 callbacks suppressed [ 177.692007][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1668'. [ 177.743638][T11461] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1668'. [ 178.134139][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'. [ 178.183449][T11487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.202621][T11488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.310995][T11488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.314620][T11509] netlink: 'syz.4.1680': attribute type 1 has an invalid length. [ 178.424727][T11509] netlink: 'syz.4.1680': attribute type 1 has an invalid length. [ 178.442746][T11506] bond1: (slave gretap1): making interface the new active one [ 178.452963][T11506] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 178.472301][T11509] netlink: 'syz.4.1680': attribute type 1 has an invalid length. [ 178.522158][T11509] netlink: 'syz.4.1680': attribute type 1 has an invalid length. [ 178.579094][T11509] netlink: 'syz.4.1680': attribute type 1 has an invalid length. [ 178.609164][T11521] netlink: 'syz.2.1682': attribute type 10 has an invalid length. [ 178.672196][T11521] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 178.808558][T11531] xt_HMARK: spi-set and port-set can't be combined [ 178.816929][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'. [ 179.012344][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1689'. [ 179.373515][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1697'. [ 179.457366][T11581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1698'. [ 179.546287][T11588] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1700'. [ 179.680467][T11599] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1704'. [ 179.866127][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1709'. [ 180.652909][T11660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.043768][T11682] syz.1.1734 uses old SIOCAX25GETINFO [ 181.330820][T11692] nbd: nbd64 already in use [ 181.706487][ T5839] udevd[5839]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 181.851440][T11725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.412995][T11763] validate_nla: 60 callbacks suppressed [ 182.413011][T11763] netlink: 'syz.0.1758': attribute type 15 has an invalid length. [ 182.568439][T11780] netlink: 'syz.1.1760': attribute type 1 has an invalid length. [ 183.647045][T11852] netlink: 'syz.2.1785': attribute type 4 has an invalid length. [ 183.688887][T11854] tipc: Enabling of bearer rejected, failed to enable media [ 183.723603][T11858] tipc: Enabling of bearer rejected, failed to enable media [ 183.754397][T11851] netlink: 'syz.0.1786': attribute type 8 has an invalid length. [ 183.816398][T11866] sctp: [Deprecated]: syz.4.1789 (pid 11866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.816398][T11866] Use struct sctp_sack_info instead [ 183.846356][T11866] __nla_validate_parse: 8 callbacks suppressed [ 183.846376][T11866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1789'. [ 183.862406][T11866] netlink: 'syz.4.1789': attribute type 7 has an invalid length. [ 183.871727][T11866] netlink: 'syz.4.1789': attribute type 8 has an invalid length. [ 183.880222][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1789'. [ 184.297860][T11892] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1798'. [ 184.369903][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1798'. [ 184.502731][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1799'. [ 184.571889][T11901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1801'. [ 184.581458][T11901] netlink: 'syz.0.1801': attribute type 7 has an invalid length. [ 184.590034][T11901] netlink: 'syz.0.1801': attribute type 8 has an invalid length. [ 184.599819][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1801'. [ 184.677108][T11901] gretap0: entered promiscuous mode [ 184.718513][T11901] gretap0: left promiscuous mode [ 184.839470][T11918] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 184.908652][T11926] openvswitch: netlink: Duplicate key (type 6). [ 185.176608][T11944] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1811'. [ 185.367260][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1813'. [ 185.616542][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'. [ 185.912830][T11993] sctp: [Deprecated]: syz.1.1824 (pid 11993) Use of int in maxseg socket option. [ 185.912830][T11993] Use struct sctp_assoc_value instead [ 185.949718][ T96] block nbd1: Possible stuck request ffff8880252b0000: control (read@0,1024B). Runtime 30 seconds [ 185.962068][ T96] block nbd1: Possible stuck request ffff8880252b01c0: control (read@1024,1024B). Runtime 30 seconds [ 185.973149][ T96] block nbd1: Possible stuck request ffff8880252b0380: control (read@2048,1024B). Runtime 30 seconds [ 185.984993][ T96] block nbd1: Possible stuck request ffff8880252b0540: control (read@3072,1024B). Runtime 30 seconds [ 186.864804][T12051] xt_l2tp: invalid flags combination: 8 [ 187.025225][T12059] netlink: 'syz.2.1843': attribute type 23 has an invalid length. [ 187.080889][T12063] netlink: 'syz.0.1845': attribute type 10 has an invalid length. [ 187.254471][T12075] bond11: entered promiscuous mode [ 187.260308][T12075] 8021q: adding VLAN 0 to HW filter on device bond11 [ 187.284280][T12078] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.299584][T12079] bond2: (slave gretap2): making interface the new active one [ 187.311676][T12079] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 187.373740][T12082] veth5: entered promiscuous mode [ 187.394989][T12082] veth5: entered allmulticast mode [ 187.427403][T12075] 8021q: adding VLAN 0 to HW filter on device bond11 [ 187.434834][T12075] bond11: (slave wireguard0): The slave device specified does not support setting the MAC address [ 187.450591][T12075] bond11: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 187.467545][T12075] bond11: (slave wireguard0): making interface the new active one [ 187.476854][T12075] wireguard0: entered promiscuous mode [ 187.483960][T12075] bond11: (slave wireguard0): Enslaving as an active interface with an up link [ 187.521601][T12084] syzkaller1: entered promiscuous mode [ 187.531334][T12084] syzkaller1: entered allmulticast mode [ 187.804663][T12108] SET target dimension over the limit! [ 188.142774][T12122] validate_nla: 2 callbacks suppressed [ 188.142790][T12122] netlink: 'syz.3.1863': attribute type 1 has an invalid length. [ 188.439081][T12141] tipc: Enabled bearer , priority 0 [ 188.504602][T12141] syzkaller0: entered promiscuous mode [ 188.545594][T12141] syzkaller0: entered allmulticast mode [ 188.645172][T12141] tipc: Resetting bearer [ 188.666000][ T5144] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 188.692083][T12140] tipc: Resetting bearer [ 188.784027][T12140] tipc: Disabling bearer [ 188.844518][T12164] bridge_slave_1: left allmulticast mode [ 188.850894][T12164] bridge_slave_1: left promiscuous mode [ 188.859446][T12164] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.894644][T12164] bridge_slave_0: left allmulticast mode [ 188.917575][T12164] bridge_slave_0: left promiscuous mode [ 188.934988][T12164] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.243369][T12184] syzkaller1: entered promiscuous mode [ 189.253492][T12184] syzkaller1: entered allmulticast mode [ 189.270218][T12184] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 189.634514][T12204] __nla_validate_parse: 18 callbacks suppressed [ 189.634532][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'. [ 189.757888][T12210] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 189.772630][T12210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1889'. [ 189.929245][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1892'. [ 189.957968][T12216] netlink: zone id is out of range [ 189.963172][T12216] netlink: zone id is out of range [ 189.968915][T12216] netlink: zone id is out of range [ 189.974063][T12216] netlink: zone id is out of range [ 189.980213][T12216] netlink: zone id is out of range [ 189.985342][T12216] netlink: zone id is out of range [ 190.000591][T12216] netlink: zone id is out of range [ 190.006048][T12216] netlink: zone id is out of range [ 190.011244][T12216] netlink: zone id is out of range [ 190.017319][T12216] netlink: zone id is out of range [ 190.099890][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1895'. [ 190.223103][T12229] : renamed from bridge_slave_0 (while UP) [ 190.541589][T12258] netlink: 'syz.4.1906': attribute type 7 has an invalid length. [ 190.568934][T12258] netlink: 'syz.4.1906': attribute type 7 has an invalid length. [ 190.893563][T12281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1912'. [ 190.973338][T12292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.017804][T12294] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1914'. [ 191.070442][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1916'. [ 191.088694][T12292] veth0_macvtap: left promiscuous mode [ 191.138183][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1917'. [ 191.344128][T12322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1924'. [ 191.398692][T12318] delete_channel: no stack [ 191.833280][T12352] veth1_to_bond: entered allmulticast mode [ 191.854845][T12349] tipc: Enabled bearer , priority 0 [ 191.863231][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1931'. [ 191.902225][T12352] bond0: (slave bond_slave_1): Releasing backup interface [ 191.910569][ T30] audit: type=1107 audit(1759934745.579:3): pid=12353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­Nñ*ý¸€S%Šíܽw‡é­àTºÏ·¿8áñ$â>¹ŸLË!ÎBÛ=µÊ¹²Úy‡aGrW\ºŠ:5 êÙs÷' [ 191.931300][ T30] audit: type=1107 audit(1759934745.579:4): pid=12353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­Nñ*ý¸€S%Šíܽw‡é­àTºÏ·¿8áñ$â>¹ŸLË!ÎBÛ=µÊ¹²Úy‡aGrW\ºŠ:5 êÙs÷' [ 191.949841][ T30] audit: type=1107 audit(1759934745.579:5): pid=12353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­Nñ*ý¸€S%Šíܽw‡é­àTºÏ·¿8áñ$â>¹ŸLË!ÎBÛ=µÊ¹²Úy‡aGrW\ºŠ:5 êÙs÷' [ 191.951536][T12352] veth1_to_bond (unregistering): left allmulticast mode [ 191.976303][ T30] audit: type=1107 audit(1759934745.579:6): pid=12353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­Nñ*ý¸€S%Šíܽw‡é­àTºÏ·¿8áñ$â>¹ŸLË!ÎBÛ=µÊ¹²Úy‡aGrW\ºŠ:5 êÙs÷' [ 191.994516][ T30] audit: type=1107 audit(1759934745.579:7): pid=12353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­Nñ*ý¸€S%Šíܽw‡é­àTºÏ·¿8áñ$â>¹ŸLË!ÎBÛ=µÊ¹²Úy‡aGrW\ºŠ:5 êÙs÷' [ 192.012775][T12350] syzkaller0: entered promiscuous mode [ 192.012797][T12350] syzkaller0: entered allmulticast mode [ 192.024974][ T30] audit: type=1107 audit(1759934745.579:8): pid=12353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­Nñ*ý¸€S%Šíܽw‡é­àTºÏ·¿8áñ$â>¹ŸLË!ÎBÛ=µÊ¹²Úy‡aGrW\ºŠ:5 êÙs÷' [ 192.046142][ T30] audit: type=1107 audit(1759934745.579:9): pid=12353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­Nñ*ý¸€S%Šíܽw‡é­àTºÏ·¿8áñ$â>¹ŸLË!ÎBÛ=µÊ¹²Úy‡aGrW\ºŠ:5 êÙs÷' [ 192.069235][ T30] audit: type=1107 audit(1759934745.579:10): pid=12353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­Nñ*ý¸€S%Šíܽw‡é­àTºÏ·¿8áñ$â>¹ŸLË!ÎBÛ=µÊ¹²Úy‡aGrW\ºŠ:5 êÙs÷' [ 192.088125][ T30] audit: type=1107 audit(1759934745.579:11): pid=12353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­Nñ*ý¸€S%Šíܽw‡é­àTºÏ·¿8áñ$â>¹ŸLË!ÎBÛ=µÊ¹²Úy‡aGrW\ºŠ:5 êÙs÷' [ 192.107402][ T30] audit: type=1107 audit(1759934745.579:12): pid=12353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­Nñ*ý¸€S%Šíܽw‡é­àTºÏ·¿8áñ$â>¹ŸLË!ÎBÛ=µÊ¹²Úy‡aGrW\ºŠ:5 êÙs÷' [ 192.127313][T12359] tipc: Resetting bearer [ 192.160394][T12359] tipc: Disabling bearer [ 192.603011][T12388] syzkaller0: entered promiscuous mode [ 192.603331][T12398] netlink: 'syz.3.1944': attribute type 39 has an invalid length. [ 192.608901][T12388] syzkaller0: entered allmulticast mode [ 192.793186][T12409] sctp: [Deprecated]: syz.0.1949 (pid 12409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.793186][T12409] Use struct sctp_sack_info instead [ 192.813034][T12409] sctp: [Deprecated]: syz.0.1949 (pid 12409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.813034][T12409] Use struct sctp_sack_info instead [ 192.837283][T12409] sctp: [Deprecated]: syz.0.1949 (pid 12409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.837283][T12409] Use struct sctp_sack_info instead [ 192.992245][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 193.348589][T12438] netlink: 'syz.3.1954': attribute type 64 has an invalid length. [ 194.273791][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.472343][T12453] lo speed is unknown, defaulting to 1000 [ 194.562142][T12463] syzkaller1: entered promiscuous mode [ 194.573243][T12463] syzkaller1: entered allmulticast mode [ 194.613402][T12462] vxcan1: entered promiscuous mode [ 194.627155][T12462] vxcan1: entered allmulticast mode [ 194.976422][T12453] hsr0 speed is unknown, defaulting to 1000 [ 195.509218][T12519] __nla_validate_parse: 5 callbacks suppressed [ 195.509246][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1976'. [ 195.568871][T12519] net_ratelimit: 388 callbacks suppressed [ 195.568889][T12519] openvswitch: netlink: Flow key attr not present in new flow. [ 195.624486][T12524] xt_socket: unknown flags 0x50 [ 195.674890][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1978'. [ 195.780977][T12535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1980'. [ 195.921457][T12544] geneve3: entered promiscuous mode [ 196.333251][T12570] netlink: 'syz.0.1991': attribute type 10 has an invalid length. [ 196.348557][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 196.351482][T12570] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.354799][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 196.365262][T12570] bond0: (slave team0): Enslaving as an active interface with an up link [ 196.368466][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 196.383163][T12570] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 196.384910][T12521] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 196.495097][T12576] netlink: 'syz.0.1993': attribute type 1 has an invalid length. [ 196.505946][T12576] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1993'. [ 196.672670][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1995'. [ 196.890586][T12605] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2001'. [ 196.932332][T12604] netlink: 'syz.4.1998': attribute type 1 has an invalid length. [ 197.042626][T12604] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.108295][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1998'. [ 197.149683][T12627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2004'. [ 197.415306][T12641] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2010'. [ 197.432782][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'. [ 197.614858][T12664] netlink: 'syz.1.2016': attribute type 1 has an invalid length. [ 197.701698][T12667] dvmrp1: entered allmulticast mode [ 197.915809][T12687] dvmrp0: entered allmulticast mode [ 197.987683][ T5935] hid (null): nested delimiters [ 198.002234][ T5935] hid (null): nested delimiters [ 198.004563][T12699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.014892][T12699] IPv6: NLM_F_CREATE should be set when creating new route [ 198.020291][ T5935] hid (null): invalid report_size 29797 [ 198.022146][T12699] IPv6: NLM_F_CREATE should be set when creating new route [ 198.040132][ T5935] hid (null): invalid report_size 29797 [ 198.068429][T12700] netlink: 'syz.1.2028': attribute type 1 has an invalid length. [ 198.135683][T12699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.964043][T12752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.976110][T12739] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 199.155358][T12757] netlink: zone id is out of range [ 199.158655][T12761] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 199.240135][T12757] netlink: set zone limit has 4 unknown bytes [ 199.543532][T12785] veth0_to_bond: left allmulticast mode [ 199.601731][T12792] netlink: 'syz.1.2055': attribute type 2 has an invalid length. [ 199.816917][T12799] netlink: 'syz.0.2057': attribute type 1 has an invalid length. [ 199.900219][T12799] 8021q: adding VLAN 0 to HW filter on device bond12 [ 199.963464][ T5935] hid-generic 0005:0D45:1012.0002: unknown main item tag 0x0 [ 199.977677][ T5935] hid-generic 0005:0D45:1012.0002: unknown main item tag 0x0 [ 199.985787][ T5935] hid-generic 0005:0D45:1012.0002: unknown main item tag 0x2 [ 199.993316][ T5935] hid-generic 0005:0D45:1012.0002: unknown main item tag 0x0 [ 200.001064][ T5935] hid-generic 0005:0D45:1012.0002: unknown main item tag 0x0 [ 200.008899][ T5935] hid-generic 0005:0D45:1012.0002: unknown main item tag 0x0 [ 200.026532][ T5935] hid-generic 0005:0D45:1012.0002: unknown main item tag 0x0 [ 200.038829][ T5935] hid-generic 0005:0D45:1012.0002: unknown main item tag 0x0 [ 200.056468][ T5935] hid-generic 0005:0D45:1012.0002: unknown main item tag 0x0 [ 200.098271][ T5935] hid-generic 0005:0D45:1012.0002: unknown main item tag 0x0 [ 200.122032][ T5935] hid-generic 0005:0D45:1012.0002: nested delimiters [ 200.164349][ T5935] hid-generic 0005:0D45:1012.0002: item 0 2 2 10 parsing failed [ 200.186523][ T5935] hid-generic 0005:0D45:1012.0002: probe with driver hid-generic failed with error -22 [ 200.244522][T12827] Unsupported ieee802154 address type: 0 [ 200.443788][T12841] tap0: tun_chr_ioctl cmd 1074025678 [ 200.460843][T12841] tap0: group set to 0 [ 200.464331][T12844] block nbd2: NBD_DISCONNECT [ 200.803196][ T5839] udevd[5839]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 200.856213][T12868] __nla_validate_parse: 23 callbacks suppressed [ 200.856230][T12868] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2080'. [ 200.969496][T12872] wg1 speed is unknown, defaulting to 1000 [ 200.989937][T12872] wg1 speed is unknown, defaulting to 1000 [ 201.015177][T12872] wg1 speed is unknown, defaulting to 1000 [ 201.100347][T12872] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 201.234501][T12872] wg1 speed is unknown, defaulting to 1000 [ 201.276129][T12872] wg1 speed is unknown, defaulting to 1000 [ 201.298774][T12872] wg1 speed is unknown, defaulting to 1000 [ 201.314760][T12872] wg1 speed is unknown, defaulting to 1000 [ 201.341786][T12872] wg1 speed is unknown, defaulting to 1000 [ 201.469906][T12914] netlink: 'syz.4.2094': attribute type 12 has an invalid length. [ 201.478896][T12914] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2094'. [ 201.523440][T12920] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 201.566268][T12922] netlink: 'syz.2.2096': attribute type 1 has an invalid length. [ 201.613175][T12922] 8021q: adding VLAN 0 to HW filter on device bond7 [ 201.642180][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2096'. [ 201.842258][T12929] bond7 (unregistering): Released all slaves [ 201.876701][T12934] batadv1: entered allmulticast mode [ 202.039605][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2107'. [ 202.053833][T12957] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2108'. [ 202.075907][T12956] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.147233][T12962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2109'. [ 202.180467][T12959] IPVS: persistence engine module ip_vs_pe_À not found [ 202.209182][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2111'. [ 202.229496][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2111'. [ 202.282282][T12958] delete_channel: no stack [ 202.337284][T12978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2115'. [ 202.353980][T12981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2114'. [ 202.430084][T12974] netlink: 'syz.0.2113': attribute type 16 has an invalid length. [ 202.597567][T12996] netlink: 'syz.1.2120': attribute type 29 has an invalid length. [ 202.627285][T12996] netlink: 'syz.1.2120': attribute type 29 has an invalid length. [ 202.639369][T12996] netlink: 'syz.1.2120': attribute type 29 has an invalid length. [ 202.649916][T12996] netlink: 'syz.1.2120': attribute type 29 has an invalid length. [ 202.732520][T13001] lo speed is unknown, defaulting to 1000 [ 203.035339][T13001] hsr0 speed is unknown, defaulting to 1000 [ 203.044643][T13001] wg1 speed is unknown, defaulting to 1000 [ 203.085838][T13013] netlink: 'syz.2.2123': attribute type 33 has an invalid length. [ 203.825042][T13057] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 203.839929][T13044] syzkaller0: entered promiscuous mode [ 203.865939][T13057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.874128][T13044] syzkaller0: entered allmulticast mode [ 203.936824][T13062] xt_l2tp: missing protocol rule (udp|l2tpip) [ 205.534741][T13079] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 205.914660][T13101] __nla_validate_parse: 6 callbacks suppressed [ 205.914678][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2150'. [ 206.378663][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'. [ 206.420629][T13133] !: entered promiscuous mode [ 206.437798][T13141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2158'. [ 206.438779][T13131] lo speed is unknown, defaulting to 1000 [ 206.491226][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2158'. [ 206.566007][T13154] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2158'. [ 206.934392][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2163'. [ 206.997312][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2162'. [ 207.109772][T13131] hsr0 speed is unknown, defaulting to 1000 [ 207.141742][T13131] wg1 speed is unknown, defaulting to 1000 [ 207.397990][T13180] netlink: 'syz.4.2167': attribute type 1 has an invalid length. [ 207.409323][T13180] netlink: 'syz.4.2167': attribute type 1 has an invalid length. [ 207.540409][T13184] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2168'. [ 207.925789][T13210] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2177'. [ 208.026381][T13214] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2177'. [ 208.074614][T13213] Cannot find add_set index 1 as target [ 208.095547][T13216] Cannot find add_set index 1 as target [ 208.549540][ T5935] hid_parser_main: 113 callbacks suppressed [ 208.549561][ T5935] hid-generic 0005:046D:5505.0003: unknown main item tag 0x0 [ 208.597699][ T5935] hid-generic 0005:046D:5505.0003: unknown main item tag 0x0 [ 208.690337][ T5935] hid-generic 0005:046D:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 208.826814][T13249] hsr_slave_1 (unregistering): left promiscuous mode [ 209.270187][T13299] netlink: 'syz.0.2201': attribute type 1 has an invalid length. [ 209.529100][T13322] openvswitch: netlink: ct_state flags 000010b8 unsupported [ 210.431412][T13373] x_tables: duplicate underflow at hook 2 [ 210.734540][T13388] netlink: 'syz.3.2225': attribute type 4 has an invalid length. [ 210.823557][T13394] pimreg: entered allmulticast mode [ 210.860801][ T979] hsr0 speed is unknown, defaulting to 1000 [ 211.377694][T13427] Bluetooth: MGMT ver 1.23 [ 211.674601][T13437] __nla_validate_parse: 12 callbacks suppressed [ 211.674620][T13437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2239'. [ 211.896189][T13447] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2242'. [ 211.905340][T13447] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2242'. [ 211.918624][T13451] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2245'. [ 211.970174][T13451] netlink: 'syz.4.2245': attribute type 1 has an invalid length. [ 212.195051][T13465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2250'. [ 212.246288][T13465] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 212.321844][T13479] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2253'. [ 212.357561][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2254'. [ 212.776876][T13511] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 212.843513][T13511] bond3 (unregistering): Released all slaves [ 213.059809][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2269'. [ 213.343122][T13552] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2276'. [ 213.388153][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 213.394287][ T5144] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 213.588171][T13565] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 213.672027][T13571] Cannot find del_set index 1 as target [ 213.830826][T13582] delete_channel: no stack [ 213.859542][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2286'. [ 213.890815][T13582] tipc: Enabled bearer , priority 0 [ 213.913111][T13588] netlink: 'syz.0.2287': attribute type 8 has an invalid length. [ 213.991139][T13591] macvlan0: mtu less than device minimum [ 214.021415][T13582] tipc: Disabling bearer [ 214.537926][T13629] tipc: Enabled bearer , priority 0 [ 214.576425][T13634] team1: entered promiscuous mode [ 214.581612][T13634] team1: entered allmulticast mode [ 214.588242][T13629] syzkaller0: entered promiscuous mode [ 214.593755][T13629] syzkaller0: entered allmulticast mode [ 214.638149][T13629] syzkaller1: entered promiscuous mode [ 214.643660][T13629] syzkaller1: entered allmulticast mode [ 214.791840][T13628] tipc: Resetting bearer [ 214.880911][T13628] tipc: Disabling bearer [ 215.388067][T13680] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 215.413921][T13682] batadv_slave_1: left promiscuous mode [ 215.453516][T13682] macsec0: left promiscuous mode [ 215.477639][T13682] gretap1: left promiscuous mode [ 215.492001][T13682] veth5: left promiscuous mode [ 215.499701][T13682] gtp0: left promiscuous mode [ 215.504813][T13682] geneve2: left promiscuous mode [ 215.529558][T13689] tipc: Enabled bearer , priority 0 [ 215.545308][T13689] syzkaller0: entered promiscuous mode [ 215.571892][T13689] syzkaller0: entered allmulticast mode [ 215.644130][T13689] tipc: Resetting bearer [ 215.661539][T13689] netlink: 'syz.4.2323': attribute type 1 has an invalid length. [ 215.707380][T13687] tipc: Resetting bearer [ 215.729756][T13687] tipc: Disabling bearer [ 215.787315][T13706] syz.3.2329: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 215.816663][T13700] netlink: 'syz.1.2326': attribute type 9 has an invalid length. [ 215.824936][T13700] netlink: 'syz.1.2326': attribute type 6 has an invalid length. [ 215.943728][T13706] CPU: 0 UID: 0 PID: 13706 Comm: syz.3.2329 Not tainted syzkaller #0 PREEMPT(full) [ 215.943755][T13706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.943765][T13706] Call Trace: [ 215.943772][T13706] [ 215.943781][T13706] dump_stack_lvl+0x189/0x250 [ 215.943808][T13706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.943826][T13706] ? __pfx__printk+0x10/0x10 [ 215.943844][T13706] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 215.943864][T13706] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 215.943884][T13706] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 215.943908][T13706] warn_alloc+0x214/0x310 [ 215.943934][T13706] ? __pfx_warn_alloc+0x10/0x10 [ 215.943964][T13706] ? __get_vm_area_node+0x28f/0x300 [ 215.943984][T13706] ? packet_set_ring+0x6f3/0x2120 [ 215.944007][T13706] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 215.944059][T13706] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 215.944081][T13706] ? alloc_pages_mpol+0x3cd/0x4a0 [ 215.944103][T13706] ? packet_set_ring+0x6f3/0x2120 [ 215.944122][T13706] vzalloc_noprof+0xb2/0xf0 [ 215.944141][T13706] ? packet_set_ring+0x6f3/0x2120 [ 215.944161][T13706] packet_set_ring+0x6f3/0x2120 [ 215.944204][T13706] ? __pfx_packet_set_ring+0x10/0x10 [ 215.944243][T13706] ? _copy_from_user+0x94/0xb0 [ 215.944269][T13706] packet_setsockopt+0xc5a/0x12c0 [ 215.944291][T13706] ? __pfx_packet_setsockopt+0x10/0x10 [ 215.944328][T13706] ? aa_sk_perm+0x81e/0x950 [ 215.944354][T13706] ? __pfx_aa_sk_perm+0x10/0x10 [ 215.944377][T13706] ? aa_sock_opt_perm+0xff/0x1b0 [ 215.944401][T13706] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 215.944423][T13706] ? __pfx_packet_setsockopt+0x10/0x10 [ 215.944448][T13706] do_sock_setsockopt+0x179/0x1b0 [ 215.944476][T13706] __x64_sys_setsockopt+0x13f/0x1b0 [ 215.944505][T13706] do_syscall_64+0xfa/0xfa0 [ 215.944533][T13706] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.944556][T13706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.944573][T13706] ? clear_bhb_loop+0x60/0xb0 [ 215.944594][T13706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.944610][T13706] RIP: 0033:0x7f692cb8eec9 [ 215.944627][T13706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.944642][T13706] RSP: 002b:00007f692daa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 215.944661][T13706] RAX: ffffffffffffffda RBX: 00007f692cde5fa0 RCX: 00007f692cb8eec9 [ 215.944674][T13706] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000003 [ 215.944684][T13706] RBP: 00007f692cc11f91 R08: 000000000000001c R09: 0000000000000000 [ 215.944695][T13706] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 215.944705][T13706] R13: 00007f692cde6038 R14: 00007f692cde5fa0 R15: 00007ffefde7ed98 [ 215.944737][T13706] [ 215.944756][T13706] Mem-Info: [ 216.234374][ T96] block nbd1: Possible stuck request ffff8880252b0000: control (read@0,1024B). Runtime 60 seconds [ 216.236041][T13706] active_anon:6083 inactive_anon:0 isolated_anon:0 [ 216.236041][T13706] active_file:3092 inactive_file:39956 isolated_file:0 [ 216.236041][T13706] unevictable:768 dirty:76 writeback:0 [ 216.236041][T13706] slab_reclaimable:11667 slab_unreclaimable:105581 [ 216.236041][T13706] mapped:29340 shmem:1364 pagetables:1277 [ 216.236041][T13706] sec_pagetables:0 bounce:0 [ 216.236041][T13706] kernel_misc_reclaimable:0 [ 216.236041][T13706] free:1317739 free_pcp:15511 free_cma:0 [ 216.245807][ T96] block nbd1: Possible stuck request ffff8880252b01c0: control (read@1024,1024B). Runtime 60 seconds [ 216.303209][ T96] block nbd1: Possible stuck request ffff8880252b0380: control (read@2048,1024B). Runtime 60 seconds [ 216.314238][ T96] block nbd1: Possible stuck request ffff8880252b0540: control (read@3072,1024B). Runtime 60 seconds [ 216.323332][T13706] Node 0 active_anon:24332kB inactive_anon:0kB active_file:12368kB inactive_file:159624kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117360kB dirty:304kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13624kB pagetables:4960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 216.363040][T13706] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 216.396389][T13706] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.450269][T13706] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 216.456243][T13706] Node 0 DMA32 free:1357496kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24388kB inactive_anon:0kB active_file:12368kB inactive_file:157804kB unevictable:1536kB writepending:304kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:44428kB local_pcp:23716kB free_cma:0kB [ 216.506555][T13706] lowmem_reserve[]: 0 0 1 1 1 [ 216.516648][T13706] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 216.546506][T13706] lowmem_reserve[]: 0 0 0 0 0 [ 216.553537][T13746] netlink: 'syz.2.2337': attribute type 6 has an invalid length. [ 216.562003][T13706] Node 1 Normal free:3898072kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17456kB local_pcp:11136kB free_cma:0kB [ 216.596874][T13706] lowmem_reserve[]: 0 0 0 0 0 [ 216.601952][T13706] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 216.614900][T13706] Node 0 DMA32: 495*4kB (UM) 176*8kB (UME) 143*16kB (UME) 221*32kB (UME) 55*64kB (UME) 80*128kB (UME) 69*256kB (UME) 29*512kB (UM) 12*1024kB (U) 2*2048kB (UM) 313*4096kB (UM) = 1357452kB [ 216.663538][T13706] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 216.678151][T13706] Node 1 Normal: 186*4kB (UME) 52*8kB (UME) 41*16kB (UME) 116*32kB (UME) 33*64kB (UME) 10*128kB (UME) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3898072kB [ 216.700365][T13706] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.710796][T13706] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.720265][T13706] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.731012][T13706] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.740782][T13706] 44410 total pagecache pages [ 216.745827][T13706] 0 pages in swap cache [ 216.754111][T13706] Free swap = 124996kB [ 216.758982][T13706] Total swap = 124996kB [ 216.763220][T13706] 2097051 pages RAM [ 216.771713][T13706] 0 pages HighMem/MovableOnly [ 216.776535][T13706] 424452 pages reserved [ 216.780744][T13706] 0 pages cma reserved [ 217.039298][T13782] __nla_validate_parse: 11 callbacks suppressed [ 217.039314][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 217.124776][T13788] netlink: 'syz.4.2347': attribute type 10 has an invalid length. [ 217.137620][T13788] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2347'. [ 217.166772][T13788] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 217.299507][T13794] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2349'. [ 217.474822][T13812] netlink: 'syz.1.2356': attribute type 10 has an invalid length. [ 217.528691][T13799] bond0: (slave team0): Releasing backup interface [ 217.547189][T13799] team0 (unregistering): Port device team_slave_0 removed [ 217.557873][T13799] team0 (unregistering): Port device team_slave_1 removed [ 217.574679][T13801] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2353'. [ 217.586139][T13801] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2353'. [ 217.775379][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2361'. [ 217.806763][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2358'. [ 217.859211][T13823] syz_tun (unregistering): left allmulticast mode [ 217.866277][T13823] syz_tun (unregistering): left promiscuous mode [ 217.872804][T13823] bridge0: port 1(syz_tun) entered disabled state [ 217.896510][T13828] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2362'. [ 217.914926][T13832] netlink: 'syz.3.2364': attribute type 1 has an invalid length. [ 217.993355][T13839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2366'. [ 217.998920][T13832] bond3: entered promiscuous mode [ 218.008019][T13832] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.149392][T13851] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2368'. [ 218.230340][T13852] bridge_slave_0: entered promiscuous mode [ 218.457423][T13870] syz_tun: entered allmulticast mode [ 218.478080][T13879] netlink: 'syz.3.2375': attribute type 72 has an invalid length. [ 218.594702][T13884] netlink: del zone limit has 4 unknown bytes [ 219.160280][T13912] netlink: 'syz.1.2386': attribute type 72 has an invalid length. [ 219.426999][T13933] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 219.706231][T13949] netlink: 'syz.3.2397': attribute type 29 has an invalid length. [ 220.473052][T14005] unsupported nlmsg_type 40 [ 220.783272][T14024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.270626][T14058] Cannot find set identified by id 65534 to match [ 221.406283][T14061] vlan0: entered promiscuous mode [ 221.426405][T14061] bridge0: entered promiscuous mode [ 223.614739][ T5194] udevd[5194]: worker [5827] /devices/virtual/block/nbd1 is taking a long time [ 223.858242][T14106] __nla_validate_parse: 72 callbacks suppressed [ 223.858261][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2439'. [ 223.934890][T14110] lo speed is unknown, defaulting to 1000 [ 223.969303][T14115] netlink: 'syz.4.2440': attribute type 1 has an invalid length. [ 224.034805][T14122] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2444'. [ 224.399946][T14110] hsr0 speed is unknown, defaulting to 1000 [ 224.425112][T14110] wg1 speed is unknown, defaulting to 1000 [ 224.436031][T14142] tipc: Enabled bearer , priority 0 [ 224.461396][T14147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2453'. [ 224.482856][T14142] syzkaller0: entered promiscuous mode [ 224.488887][T14142] syzkaller0: entered allmulticast mode [ 224.495117][T14142] tipc: Resetting bearer [ 224.550261][T14141] tipc: Resetting bearer [ 224.565323][T14152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2454'. [ 224.869689][T14162] openvswitch: netlink: Message has 16 unknown bytes. [ 225.931187][T14141] tipc: Disabling bearer [ 225.953560][T14147] macvlan2: entered promiscuous mode [ 225.959177][T14147] macvlan2: entered allmulticast mode [ 225.966139][T14147] bond14: entered promiscuous mode [ 225.971897][T14147] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 225.983937][T14147] bond14: left promiscuous mode [ 226.259150][T14177] veth1_macvtap: left promiscuous mode [ 226.264673][T14177] macsec0: entered promiscuous mode [ 226.287113][T14177] macsec0: entered allmulticast mode [ 226.311608][T14181] veth1_macvtap: entered promiscuous mode [ 226.332263][T14181] veth1_macvtap: entered allmulticast mode [ 226.352003][T14181] macsec0: left promiscuous mode [ 226.358322][T14181] macsec0: left allmulticast mode [ 226.363503][T14181] veth1_macvtap: left allmulticast mode [ 226.562308][T14194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2465'. [ 226.774675][T14208] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.853395][T14213] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2471'. [ 226.967614][T14213] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.970394][T14223] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2471'. [ 226.981377][T14227] sctp: [Deprecated]: syz.1.2474 (pid 14227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.981377][T14227] Use struct sctp_sack_info instead [ 227.050206][T14226] 8021q: adding VLAN 0 to HW filter on device bond5 [ 227.129069][T14232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2477'. [ 227.144126][T14235] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 227.477548][T14257] xt_l2tp: invalid flags combination: 8 [ 227.506972][ T5935] lo speed is unknown, defaulting to 1000 [ 227.514919][ T5935] syz0: Port: 1 Link DOWN [ 227.540192][ T979] lo speed is unknown, defaulting to 1000 [ 227.647255][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2485'. [ 227.670965][T14266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2485'. [ 227.769549][T14274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.888825][T14282] C: renamed from team_slave_0 (while UP) [ 227.905803][T14282] netlink: 'syz.3.2490': attribute type 1 has an invalid length. [ 227.926388][T14282] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 228.096541][T14292] netlink: 'syz.0.2493': attribute type 7 has an invalid length. [ 228.100050][T14294] x_tables: duplicate underflow at hook 1 [ 228.115244][T14291] netlink: 'syz.1.2495': attribute type 1 has an invalid length. [ 228.144345][T14291] sock: sock_set_timeout: `syz.1.2495' (pid 14291) tries to set negative timeout [ 228.167725][T14296] sock: sock_timestamping_bind_phc: sock not bind to device [ 228.519385][T14320] netlink: 'syz.2.2503': attribute type 1 has an invalid length. [ 228.729684][T14335] lo: entered allmulticast mode [ 228.772793][T14335] tunl0: entered allmulticast mode [ 228.787334][T14340] sctp: [Deprecated]: syz.1.2506 (pid 14340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.787334][T14340] Use struct sctp_sack_info instead [ 228.789832][T14335] gre0: entered allmulticast mode [ 228.866225][T14335] gretap0: entered allmulticast mode [ 228.887682][T14335] erspan0: entered allmulticast mode [ 228.931521][T14335] ip_vti0: entered allmulticast mode [ 228.943767][T14335] ip6_vti0: entered allmulticast mode [ 228.963940][T14335] sit0: entered allmulticast mode [ 228.981598][T14335] ip6tnl0: entered allmulticast mode [ 229.005657][T14335] ip6gre0: entered allmulticast mode [ 229.023241][T14335] syz_tun: entered allmulticast mode [ 229.071723][T14335] ip6gretap0: entered allmulticast mode [ 229.101765][T14335] vcan0: entered allmulticast mode [ 229.174900][T14335] bond0: entered allmulticast mode [ 229.180415][T14335] bond_slave_0: entered allmulticast mode [ 229.186818][T14335] bond_slave_1: entered allmulticast mode [ 229.192562][T14335] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 229.207730][T14335] dummy0: entered allmulticast mode [ 229.217358][T14368] __nla_validate_parse: 9 callbacks suppressed [ 229.217374][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'. [ 229.232765][T14335] nlmon0: entered allmulticast mode [ 229.240470][T14368] openvswitch: netlink: Unknown nsh attribute 0 [ 229.247786][T14368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.271544][T14335] batadv0: entered allmulticast mode [ 229.291902][T14335] vxcan0: entered allmulticast mode [ 229.300268][T14335] vxcan1: entered allmulticast mode [ 229.309429][T14335] veth0: entered allmulticast mode [ 229.319699][T14335] veth1: entered allmulticast mode [ 229.328370][T14335] wg0: entered allmulticast mode [ 229.337506][T14335] wg1: left promiscuous mode [ 229.347525][T14335] wg2: entered allmulticast mode [ 229.354370][T14335] veth0_to_bridge: entered allmulticast mode [ 229.368614][T14335] : entered allmulticast mode [ 229.379521][T14335] veth1_to_bridge: entered allmulticast mode [ 229.388894][T14335] bridge_slave_1: entered allmulticast mode [ 229.398730][T14335] veth0_to_bond: entered allmulticast mode [ 229.414375][T14335] veth1_to_bond: entered allmulticast mode [ 229.427219][T14335] veth0_to_team: entered allmulticast mode [ 229.477823][T14335] team_slave_0: entered allmulticast mode [ 229.485147][T14335] veth1_to_team: entered allmulticast mode [ 229.496212][T14335] team_slave_1: entered allmulticast mode [ 229.502340][T14335] veth0_to_batadv: entered allmulticast mode [ 229.512098][T14335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.520689][T14335] batadv_slave_0: entered allmulticast mode [ 229.533493][T14335] xfrm0: entered allmulticast mode [ 229.539111][T14335] veth0_to_hsr: entered allmulticast mode [ 229.551957][T14335] hsr_slave_0: entered allmulticast mode [ 229.570388][T14335] veth1_to_hsr: entered allmulticast mode [ 229.593687][T14335] hsr_slave_1: entered allmulticast mode [ 229.602537][T14335] hsr0: entered allmulticast mode [ 229.613384][T14335] veth1_virt_wifi: entered allmulticast mode [ 229.633331][T14335] veth0_virt_wifi: entered allmulticast mode [ 229.646033][T14335] net veth1_virt_wifi .: entered allmulticast mode [ 229.653439][T14335] veth1_vlan: entered allmulticast mode [ 229.670297][T14335] vlan1: entered allmulticast mode [ 229.677336][T14335] macvlan0: entered allmulticast mode [ 229.690755][T14335] macvlan1: entered allmulticast mode [ 229.707419][T14335] ipvlan0: entered allmulticast mode [ 229.713505][T14335] ipvlan1: entered allmulticast mode [ 229.719777][T14335] veth1_macvtap: entered allmulticast mode [ 229.733859][T14335] veth0_macvtap: entered allmulticast mode [ 229.747557][T14335] macsec0: entered allmulticast mode [ 229.759861][T14335] geneve0: entered allmulticast mode [ 229.771280][T14335] geneve1: entered allmulticast mode [ 229.783873][T14335] netdevsim netdevsim1 ÿÿÿÿÿÿ: left promiscuous mode [ 229.791123][T14335] netdevsim netdevsim1 ÿÿÿÿÿÿ: entered allmulticast mode [ 229.800083][T14335] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 229.817498][T14335] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 229.836764][T14335] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 229.853528][T14335] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 229.864545][T14335] bond1: left promiscuous mode [ 229.880528][T14335] bond2: entered allmulticast mode [ 229.885989][T14335] geneve2: entered allmulticast mode [ 229.892205][T14335] bridge1: entered allmulticast mode [ 229.902085][T14335] macsec1: entered allmulticast mode [ 229.908638][T14335] sit1: entered allmulticast mode [ 229.940396][T14335] bond3: entered allmulticast mode [ 229.948007][T14335] bridge2: entered allmulticast mode [ 229.957199][T14335] ªªªªªª: left promiscuous mode [ 229.962871][T14335] macvtap1: left promiscuous mode [ 229.987315][T14335] bridge0: entered allmulticast mode [ 229.998448][T14335] ip6erspan0: entered allmulticast mode [ 230.004236][T14335] ieee802154 phy1 wpan1: entered allmulticast mode [ 230.012329][T14335] bond4: left promiscuous mode [ 230.021790][T14335] bridge3: entered allmulticast mode [ 230.036564][T14335] syztnl1: entered allmulticast mode [ 230.074353][T14335] ipvlan2: entered allmulticast mode [ 230.081867][T14335] veth2: entered allmulticast mode [ 230.088124][T14335] veth3: left promiscuous mode [ 230.092924][T14335] veth3: entered allmulticast mode [ 230.100572][T14335] : entered allmulticast mode [ 230.116931][T14335] wireguard0: entered allmulticast mode [ 230.122724][T14335] ip6tnl1: entered allmulticast mode [ 230.128924][T14335] veth4: entered allmulticast mode [ 230.134635][T14335] veth5: left promiscuous mode [ 230.143485][T14335] bond6: entered allmulticast mode [ 230.149358][T14335] ip6tnl2: entered allmulticast mode [ 230.157781][T14335] sit2: entered allmulticast mode [ 230.181531][T14335] veth6: entered allmulticast mode [ 230.193705][T14335] veth7: entered allmulticast mode [ 230.200624][T14335] ipip0: entered allmulticast mode [ 230.207859][T14335] bridge4: entered allmulticast mode [ 230.227214][T14335] sit3: entered allmulticast mode [ 230.232569][T14335] mac80211_hwsim hwsim22 wlan2: entered allmulticast mode [ 230.243104][T14335] mac80211_hwsim hwsim5 pim6reg0: entered allmulticast mode [ 230.253106][T14335] bridge5: entered allmulticast mode [ 230.259586][T14335] bond7: entered allmulticast mode [ 230.265132][T14335] vcan1: entered allmulticast mode [ 230.274797][T14335] vlan0: left promiscuous mode [ 230.280142][T14335] bridge0: left promiscuous mode [ 230.285310][T14335] vlan0: entered allmulticast mode [ 230.346845][T10127] netdevsim netdevsim1 ÿÿÿÿÿÿ: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.404668][T10127] netdevsim netdevsim1 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.436467][ T9990] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.482869][ T9990] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.492106][ T9990] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.507238][ T9990] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.525851][ T9990] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.536350][ T9990] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.674596][T14392] netlink: 'syz.2.2517': attribute type 6 has an invalid length. [ 230.712413][T14392] netlink: 'syz.2.2517': attribute type 83 has an invalid length. [ 230.830639][T14407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2519'. [ 231.174016][T14429] netlink: 'syz.1.2527': attribute type 1 has an invalid length. [ 231.182209][T14429] netlink: 888 bytes leftover after parsing attributes in process `syz.1.2527'. [ 231.589705][T14441] : renamed from hsr0 (while UP) [ 231.818171][T14456] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2537'. [ 231.938262][T14467] x_tables: ip_tables: udp match: only valid for protocol 17 [ 232.113020][T14477] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2541'. [ 232.393436][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2548'. [ 232.660661][T14519] netlink: 'syz.2.2553': attribute type 10 has an invalid length. [ 234.159393][T14521] syzkaller0: entered promiscuous mode [ 234.164891][T14521] syzkaller0: entered allmulticast mode [ 234.176639][T14519] team0: Device ipvlan1 failed to register rx_handler [ 234.322997][T14544] xt_l2tp: missing protocol rule (udp|l2tpip) [ 234.347473][T14551] netlink: 'syz.2.2557': attribute type 1 has an invalid length. [ 234.471521][T14558] netlink: 'syz.2.2557': attribute type 8 has an invalid length. [ 235.693133][T14544] tc_dump_action: action bad kind [ 235.701290][T14551] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 235.703550][T14554] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 236.127080][T14592] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2568'. [ 236.136459][T14592] NCSI netlink: No device for ifindex 0 [ 237.000678][T14645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.016361][T14662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2583'. [ 237.046964][T14662] tipc: New replicast peer: 255.255.255.255 [ 237.053606][T14662] tipc: Enabled bearer , priority 10 [ 237.101705][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2583'. [ 237.343917][T14685] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2585'. [ 237.349921][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2588'. [ 237.532100][T14702] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2591'. [ 237.861985][T14720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.926099][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2600'. [ 237.937253][T14732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2600'. [ 238.176113][T14356] tipc: Node number set to 189855254 [ 238.237494][T14749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2607'. [ 238.252501][T14746] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 238.416337][T14759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.718563][T14771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2614'. [ 239.028306][T14793] openvswitch: netlink: Flow key attr not present in new flow. [ 239.266828][T14811] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 239.669440][T14850] sctp: [Deprecated]: syz.4.2640 (pid 14850) Use of int in max_burst socket option. [ 239.669440][T14850] Use struct sctp_assoc_value instead [ 241.025626][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.033838][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.043167][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.051638][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.061053][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.087905][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.109899][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.136989][T14943] __nla_validate_parse: 19 callbacks suppressed [ 241.137007][T14943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2664'. [ 241.164587][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.180878][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2666'. [ 241.210186][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.259866][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.297649][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.332235][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.358815][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.368068][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.389603][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.410669][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.421516][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.456122][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.486674][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.505748][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.523575][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.570757][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.584014][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.595776][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.603768][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.612739][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.624139][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.632697][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.642192][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.655806][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.672943][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.691932][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.702448][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.711716][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.722798][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.731855][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.740738][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.750549][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.761010][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.770259][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.780293][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.789890][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.805742][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.814074][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.834387][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.837897][T14980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2677'. [ 241.844138][T14937] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.882995][T14980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2677'. [ 241.919523][T14987] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 241.998628][T14988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2679'. [ 242.132402][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2681'. [ 242.205287][T15002] netlink: 'syz.0.2682': attribute type 8 has an invalid length. [ 242.218860][T15007] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.219381][T15002] Cannot find del_set index 1 as target [ 242.226358][T15007] IPv6: NLM_F_CREATE should be set when creating new route [ 242.226628][T15007] IPv6: NLM_F_CREATE should be set when creating new route [ 242.241470][T15002] netlink: 'syz.0.2682': attribute type 62 has an invalid length. [ 242.246711][T15007] IPv6: NLM_F_CREATE should be set when creating new route [ 242.262845][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2682'. [ 242.308923][T15007] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.397411][T15013] tipc: Enabled bearer , priority 0 [ 242.410086][T15013] syzkaller0: entered promiscuous mode [ 242.416751][T15013] syzkaller0: entered allmulticast mode [ 242.427340][T15013] tipc: Resetting bearer [ 242.458562][T15012] tipc: Resetting bearer [ 242.504809][T15012] tipc: Disabling bearer [ 242.732109][T15040] IPv6: NLM_F_REPLACE set, but no existing node found! [ 242.898201][T15051] netlink: 'syz.4.2698': attribute type 11 has an invalid length. [ 242.911494][T15051] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2698'. [ 243.294445][T15073] netlink: 'syz.1.2704': attribute type 58 has an invalid length. [ 243.303608][T15073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2704'. [ 243.415863][T15080] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.2707'. [ 243.442954][T15080] vxcan1: tx address claim with different name [ 243.518040][T15086] tipc: Enabled bearer , priority 0 [ 243.525937][T15086] syzkaller0: entered promiscuous mode [ 243.535128][T15086] syzkaller0: entered allmulticast mode [ 243.591306][T15086] tipc: Resetting bearer [ 243.597783][T15093] tipc: Enabled bearer , priority 0 [ 243.607493][T15093] syzkaller0: entered promiscuous mode [ 243.613224][T15093] syzkaller0: entered allmulticast mode [ 243.644372][T15093] tipc: Resetting bearer [ 243.659132][T15084] tipc: Resetting bearer [ 243.684215][T15084] tipc: Disabling bearer [ 243.691515][T15095] netlink: 'syz.2.2711': attribute type 1 has an invalid length. [ 243.702266][T15095] netlink: 'syz.2.2711': attribute type 3 has an invalid length. [ 243.710833][T15093] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 243.724086][T15092] tipc: Resetting bearer [ 243.745801][T15092] tipc: Disabling bearer [ 243.861626][T15103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.868927][T15103] IPv6: NLM_F_CREATE should be set when creating new route [ 243.876254][T15103] IPv6: NLM_F_CREATE should be set when creating new route [ 243.883487][T15103] IPv6: NLM_F_CREATE should be set when creating new route [ 243.886453][T15110] sctp: [Deprecated]: syz.1.2715 (pid 15110) Use of int in maxseg socket option. [ 243.886453][T15110] Use struct sctp_assoc_value instead [ 243.910816][T15103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.657391][T15163] netlink: 'syz.0.2729': attribute type 1 has an invalid length. [ 244.665175][T15163] netlink: 'syz.0.2729': attribute type 2 has an invalid length. [ 244.673090][T15163] netlink: 'syz.0.2729': attribute type 1 has an invalid length. [ 244.680653][T15156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.700896][T15156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.855183][T15156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.869302][T15156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.888594][T15183] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 244.933762][T15181] gtp0: entered promiscuous mode [ 244.939645][T15181] gtp0: entered allmulticast mode [ 245.031361][T15156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.042916][T15156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.067326][T15190] netlink: 'syz.3.2739': attribute type 2 has an invalid length. [ 245.169726][T15156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.212704][T15156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.460938][ T9990] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.476714][ T9990] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.596536][T10133] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.615139][T10133] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.627530][T15220] netlink: 'syz.4.2744': attribute type 33 has an invalid length. [ 245.684354][T15220] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 245.702840][T15220] bond5 (unregistering): Released all slaves [ 245.777417][T10128] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.794886][T10128] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.827697][T10133] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.842221][T10133] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.164721][T15243] veth3: entered promiscuous mode [ 246.173535][T15259] __nla_validate_parse: 23 callbacks suppressed [ 246.173554][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2756'. [ 246.224114][T15243] bond7: (slave veth3): Enslaving as a backup interface with a down link [ 246.327039][T15254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2755'. [ 246.349753][T15266] openvswitch: netlink: Message has -2 unknown bytes. [ 246.552050][T15278] geneve1: left allmulticast mode [ 246.604054][T15278] geneve1: entered allmulticast mode [ 246.646774][T15278] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 246.694937][T10127] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.730364][T10127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.751496][ T96] block nbd1: Possible stuck request ffff8880252b0000: control (read@0,1024B). Runtime 90 seconds [ 246.762380][ T96] block nbd1: Possible stuck request ffff8880252b01c0: control (read@1024,1024B). Runtime 90 seconds [ 246.774081][ T96] block nbd1: Possible stuck request ffff8880252b0380: control (read@2048,1024B). Runtime 90 seconds [ 246.785154][ T96] block nbd1: Possible stuck request ffff8880252b0540: control (read@3072,1024B). Runtime 90 seconds [ 246.799230][T10127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.859791][T10127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.999714][T15307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2765'. [ 247.093766][T15302] 8021q: adding VLAN 0 to HW filter on device bond5 [ 247.488458][T15333] veth0: entered promiscuous mode [ 247.507397][T15332] veth0: left promiscuous mode [ 247.583118][T15338] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2774'. [ 247.638721][T15347] validate_nla: 6 callbacks suppressed [ 247.638741][T15347] netlink: 'syz.1.2779': attribute type 8 has an invalid length. [ 247.690505][T15347] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 247.699208][T15347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.755270][T15352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2783'. [ 248.173104][T15385] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2791'. [ 248.344167][T15396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2792'. [ 248.370843][T15400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2794'. [ 248.954537][T15425] 8021q: adding VLAN 0 to HW filter on device bond8 [ 249.201074][T15434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2800'. [ 249.351263][T15437] netlink: set zone limit has 4 unknown bytes [ 249.653095][T15463] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2808'. [ 250.423061][T15507] tipc: Enabled bearer , priority 0 [ 250.431045][T15507] syzkaller0: entered promiscuous mode [ 250.440568][T15507] syzkaller0: entered allmulticast mode [ 250.459713][T15507] tipc: Resetting bearer [ 250.541784][T15506] tipc: Resetting bearer [ 250.572223][T15524] netlink: 'syz.2.2821': attribute type 1 has an invalid length. [ 250.595373][T15524] netlink: 'syz.2.2821': attribute type 1 has an invalid length. [ 250.616364][T15506] tipc: Disabling bearer [ 250.651637][T15521] lo speed is unknown, defaulting to 1000 [ 250.833617][T15539] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:0 [ 250.867492][T15521]  speed is unknown, defaulting to 1000 [ 250.887496][T15521] wg1 speed is unknown, defaulting to 1000 [ 250.990958][T15544] netlink: 'syz.1.2827': attribute type 2 has an invalid length. [ 251.008171][T15544] netlink: 'syz.1.2827': attribute type 1 has an invalid length. [ 251.328633][T15564] __nla_validate_parse: 6 callbacks suppressed [ 251.328652][T15564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2830'. [ 251.358585][T15564] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2830'. [ 251.424642][T15571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.507437][T15568] netlink: 'syz.3.2831': attribute type 1 has an invalid length. [ 251.680617][T15577] netlink: 'syz.0.2834': attribute type 1 has an invalid length. [ 251.714151][T15583] erspan0: entered allmulticast mode [ 251.798087][T15586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2834'. [ 251.863268][T15580] bond15: (slave gretap2): making interface the new active one [ 251.873368][T15580] bond15: (slave gretap2): Enslaving as an active interface with an up link [ 251.908614][T15586] 8021q: adding VLAN 0 to HW filter on device bond15 [ 252.175253][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2843'. [ 252.212690][T15608] lo speed is unknown, defaulting to 1000 [ 252.262936][T15606] No such timeout policy "syz1" [ 252.440262][T15618] bond9: entered promiscuous mode [ 252.458941][T15618] bond9: entered allmulticast mode [ 252.470672][T15618] 8021q: adding VLAN 0 to HW filter on device bond9 [ 252.568657][T15608]  speed is unknown, defaulting to 1000 [ 252.588131][T15608] wg1 speed is unknown, defaulting to 1000 [ 252.639575][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2849'. [ 252.967866][T15643] netlink: 'syz.4.2853': attribute type 1 has an invalid length. [ 252.974570][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2857'. [ 252.976372][T15643] netlink: 'syz.4.2853': attribute type 3 has an invalid length. [ 253.024142][T15643] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2853'. [ 253.113438][T15661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2856'. [ 253.431621][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2862'. [ 253.487912][T15677] netlink: 'syz.1.2862': attribute type 1 has an invalid length. [ 253.563123][T15677] netlink: 'syz.1.2862': attribute type 1 has an invalid length. [ 254.119215][T15721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2875'. [ 254.236268][T15730] netlink: 'syz.2.2877': attribute type 15 has an invalid length. [ 254.274984][T15730] netlink: 'syz.2.2877': attribute type 1 has an invalid length. [ 254.295736][T15730] netlink: 'syz.2.2877': attribute type 2 has an invalid length. [ 254.326541][T15730] netlink: 'syz.2.2877': attribute type 15 has an invalid length. [ 254.964092][T15774] _ÐZ`Ô€@Y: entered promiscuous mode [ 255.328553][T15804] netlink: 'syz.3.2898': attribute type 1 has an invalid length. [ 255.812085][T15838] sctp: [Deprecated]: syz.4.2907 (pid 15838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.812085][T15838] Use struct sctp_sack_info instead [ 256.531433][T15868] __nla_validate_parse: 4 callbacks suppressed [ 256.531453][T15868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2916'. [ 256.591599][T15871] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 257.384971][T15915] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_0, syncid = 0, id = 0 [ 257.495032][T15919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2933'. [ 257.721099][T15936] veth0: entered promiscuous mode [ 257.730637][T15933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2936'. [ 257.763891][T15935] veth0: left promiscuous mode [ 257.776638][T15930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2935'. [ 257.909461][T15944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2941'. [ 258.471005][T15970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2948'. [ 258.479301][T15931] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 258.505874][T15970] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2948'. [ 258.551050][T15970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2948'. [ 258.748753][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 258.758448][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 258.770146][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 258.789298][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 258.798707][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 258.809590][T15980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2951'. [ 258.866813][T15985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2952'. [ 258.925969][T15980] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 258.937171][T15980] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 259.024632][T15977] lo speed is unknown, defaulting to 1000 [ 259.199433][T16000] netlink: 'syz.2.2959': attribute type 1 has an invalid length. [ 259.345625][T16006] netlink: 'syz.1.2961': attribute type 5 has an invalid length. [ 259.463652][T15977]  speed is unknown, defaulting to 1000 [ 259.471265][T15977] wg1 speed is unknown, defaulting to 1000 [ 259.642364][T10128] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.655322][T10128] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.790955][T10128] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.847094][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.968329][T15977] chnl_net:caif_netlink_parms(): no params data found [ 260.092222][T16055] netlink: 'syz.3.2974': attribute type 1 has an invalid length. [ 260.219190][T16070] netlink: 'syz.4.2976': attribute type 1 has an invalid length. [ 260.269838][T15977] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.279204][T15977] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.296588][T15977] bridge_slave_0: entered allmulticast mode [ 260.314687][T15977] bridge_slave_0: entered promiscuous mode [ 260.336555][T15977] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.356215][T15977] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.369043][T15977] bridge_slave_1: entered allmulticast mode [ 260.378609][T15977] bridge_slave_1: entered promiscuous mode [ 260.494234][T15977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.527365][T15977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.786865][T15977] team0: Port device team_slave_0 added [ 260.817601][T15977] team0: Port device team_slave_1 added [ 260.908468][ T5144] Bluetooth: hci0: command tx timeout [ 260.920555][T16109] openvswitch: netlink: Message has 4 unknown bytes. [ 261.031048][T15977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.043427][T15977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.082413][T15977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.113086][T15977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.121045][T15977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.148938][T15977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.161335][T16119] netlink: 'syz.3.2991': attribute type 3 has an invalid length. [ 261.291760][T15977] hsr_slave_0: entered promiscuous mode [ 261.303601][T15977] hsr_slave_1: entered promiscuous mode [ 261.312432][T15977] debugfs: 'hsr0' already exists in 'hsr' [ 261.318945][T15977] Cannot create hsr debugfs directory [ 261.545326][T16139] netlink: 'syz.4.2996': attribute type 1 has an invalid length. [ 261.697084][T16149] __nla_validate_parse: 19 callbacks suppressed [ 261.697102][T16149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2997'. [ 261.788873][T16157] netlink: 'syz.2.2999': attribute type 11 has an invalid length. [ 261.800021][T16157] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2999'. [ 261.829570][T16155] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3000'. [ 261.894900][T15977] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.923492][T15977] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.940763][T16164] netlink: 'syz.4.3002': attribute type 11 has an invalid length. [ 262.160970][T15977] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.196087][T15977] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.339294][T15977] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.386108][T15977] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.614350][T16199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3009'. [ 262.617363][T16204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3010'. [ 262.625338][T15977] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.634231][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3010'. [ 262.646216][T15977] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.792219][T16210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3012'. [ 262.879920][T16210] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3012'. [ 262.910999][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3012'. [ 262.996713][ T5144] Bluetooth: hci0: command tx timeout [ 263.129534][T16237] lo speed is unknown, defaulting to 1000 [ 263.272585][T16244] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 263.357343][T16237]  speed is unknown, defaulting to 1000 [ 263.364005][T16237] wg1 speed is unknown, defaulting to 1000 [ 263.546111][T16255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.562484][T15977] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 263.609046][T15977] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 263.684256][T15977] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 263.714131][T15977] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 263.719865][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3023'. [ 264.034665][T16288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.220990][T15977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.273516][T15977] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.276465][T16293] netlink: 'syz.3.3030': attribute type 1 has an invalid length. [ 264.301861][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.309089][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.372605][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.379901][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.392723][T16301] delete_channel: no stack [ 264.745201][T15977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.810507][T15977] veth0_vlan: entered promiscuous mode [ 264.832190][T15977] veth1_vlan: entered promiscuous mode [ 264.873194][T15977] veth0_macvtap: entered promiscuous mode [ 264.886426][T15977] veth1_macvtap: entered promiscuous mode [ 264.914387][T15977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.932561][T15977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.947101][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.959262][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.968993][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.981771][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.065697][ T5144] Bluetooth: hci0: command tx timeout [ 265.157570][T10128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.175093][T10128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.283101][T10126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.302675][T10126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.278059][T16376] lo speed is unknown, defaulting to 1000 [ 266.316328][T16377] Timeout policy `syz1' can only be used by L3 protocol number 12 [ 266.368410][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 266.388195][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 266.396837][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 266.419933][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 266.432568][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.691500][T16387] sctp: [Deprecated]: syz.1.3057 (pid 16387) Use of int in maxseg socket option. [ 266.691500][T16387] Use struct sctp_assoc_value instead [ 266.701204][T10126] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.735161][T10126] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.783699][T16394] __nla_validate_parse: 9 callbacks suppressed [ 266.783718][T16394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3059'. [ 266.881072][T10126] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.917455][T10126] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.929910][T16397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3059'. [ 266.954314][T16376]  speed is unknown, defaulting to 1000 [ 266.973522][T16376] wg1 speed is unknown, defaulting to 1000 [ 266.998383][T16380] lo speed is unknown, defaulting to 1000 [ 267.008991][T10126] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.020123][T10126] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.039917][T16397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3059'. [ 267.145867][ T5825] Bluetooth: hci0: command tx timeout [ 267.213205][T10126] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.253068][T10126] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.498123][T16380]  speed is unknown, defaulting to 1000 [ 267.521562][T16380] wg1 speed is unknown, defaulting to 1000 [ 267.669109][T16427] netlink: 'syz.1.3066': attribute type 1 has an invalid length. [ 267.696481][T16427] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3066'. [ 267.820191][T16436] netlink: 'syz.0.3071': attribute type 3 has an invalid length. [ 267.828146][T16436] netlink: 'syz.0.3071': attribute type 3 has an invalid length. [ 267.836243][T16436] netlink: 'syz.0.3071': attribute type 3 has an invalid length. [ 267.844073][T16436] netlink: 'syz.0.3071': attribute type 3 has an invalid length. [ 267.852556][T16436] netlink: 'syz.0.3071': attribute type 3 has an invalid length. [ 267.860468][T16436] netlink: 'syz.0.3071': attribute type 3 has an invalid length. [ 267.868740][T16436] netlink: 'syz.0.3071': attribute type 3 has an invalid length. [ 267.877233][T16436] netlink: 'syz.0.3071': attribute type 3 has an invalid length. [ 268.407994][T10126] dvmrp0 (unregistering): left allmulticast mode [ 268.429504][T16461] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3076'. [ 268.452341][T10126] bond4 (unregistering): (slave geneve2): Releasing active interface [ 268.472761][T10126] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 268.506309][ T5825] Bluetooth: hci5: command tx timeout [ 268.864607][T10126] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 268.875365][T10126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.886115][T10126] bond0 (unregistering): Released all slaves [ 268.899881][T10126] bond1 (unregistering): Released all slaves [ 268.916753][T10126] bond2 (unregistering): Released all slaves [ 268.935649][T10126] bond3 (unregistering): Released all slaves [ 269.038468][T10126] bond4 (unregistering): Released all slaves [ 269.052156][T10126] bond5 (unregistering): Released all slaves [ 269.065044][T10126] bond6 (unregistering): Released all slaves [ 269.081319][T10126] bond7 (unregistering): (slave veth3): Releasing backup interface [ 269.091688][T10126] bond7 (unregistering): Released all slaves [ 269.108671][T10126] bond8 (unregistering): Released all slaves [ 269.265873][T10126] : left promiscuous mode [ 269.296014][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'. [ 269.310840][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'. [ 269.323122][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'. [ 269.347104][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3077'. [ 269.367380][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'. [ 269.377191][T16467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.402477][T16467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.440837][T16467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.466914][T16467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.546287][T10126] !: left promiscuous mode [ 269.768845][T10126] tipc: Left network mode [ 270.062537][T16380] chnl_net:caif_netlink_parms(): no params data found [ 270.510150][T16380] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.547395][T16380] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.587732][T16380] bridge_slave_0: entered allmulticast mode [ 270.590429][ T5825] Bluetooth: hci5: command tx timeout [ 270.625814][T16380] bridge_slave_0: entered promiscuous mode [ 270.675389][T16380] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.748135][T16380] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.786106][T16380] bridge_slave_1: entered allmulticast mode [ 270.794783][T16380] bridge_slave_1: entered promiscuous mode [ 271.431794][T16380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.910134][T16380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.009717][T16380] team0: Port device team_slave_0 added [ 272.043786][T16380] team0: Port device team_slave_1 added [ 272.121251][T16608] validate_nla: 46 callbacks suppressed [ 272.121270][T16608] netlink: 'syz.1.3105': attribute type 1 has an invalid length. [ 272.144767][T16608] netlink: 'syz.1.3105': attribute type 1 has an invalid length. [ 272.260470][T16607] __nla_validate_parse: 37 callbacks suppressed [ 272.260486][T16607] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3106'. [ 272.291203][T16380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.306089][T16380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.372274][T16380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.399881][T10126] hsr_slave_1: left promiscuous mode [ 272.492846][T10126] veth1_macvtap: left promiscuous mode [ 272.501854][T10126] veth0_macvtap: left promiscuous mode [ 272.522195][T10126] veth1_vlan: left promiscuous mode [ 272.530211][T10126] veth0_vlan: left promiscuous mode [ 272.595379][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3114'. [ 272.666022][ T5825] Bluetooth: hci5: command tx timeout [ 273.441518][T10126] team0 (unregistering): Port device team_slave_1 removed [ 273.488882][T10126] team0 (unregistering): Port device team_slave_0 removed [ 273.812987][T16380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.820435][T16380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.847785][T16380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.044739][T16380] hsr_slave_0: entered promiscuous mode [ 274.064452][T16380] hsr_slave_1: entered promiscuous mode [ 274.077305][T16380] debugfs: 'hsr0' already exists in 'hsr' [ 274.100900][T16380] Cannot create hsr debugfs directory [ 274.117483][T16675] macsec0: entered promiscuous mode [ 274.126717][T16675] macsec0: left allmulticast mode [ 274.258470][T16684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3120'. [ 274.746621][ T5825] Bluetooth: hci5: command tx timeout [ 274.762770][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3126'. [ 274.782471][T16715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3126'. [ 274.800319][T16715] tc_dump_action: action bad kind [ 274.820819][T16724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3127'. [ 275.459957][T16747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3132'. [ 275.720454][T16380] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 275.763388][T16380] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 275.819408][T16380] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 275.851644][T16380] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 276.029720][T16782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3139'. [ 276.069872][T16782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3139'. [ 276.160856][T16782] 8021q: adding VLAN 0 to HW filter on device bond10 [ 276.186465][ C0] ------------[ cut here ]------------ [ 276.192312][ C0] ODEBUG: free active (active state 0) object: ffff88802917e490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 276.205861][ C0] WARNING: CPU: 0 PID: 16788 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 276.215482][ C0] Modules linked in: [ 276.219717][ C0] CPU: 0 UID: 0 PID: 16788 Comm: syz.4.3141 Not tainted syzkaller #0 PREEMPT(full) [ 276.229143][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 276.239267][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 276.245110][ C0] Code: 4c 89 ff e8 87 9e 8d fd 4d 8b 0f 48 c7 c7 00 45 c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 0a 11 ec fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 56 07 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 276.264773][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010292 [ 276.270996][ C0] RAX: 143296231796f900 RBX: dffffc0000000000 RCX: ffff888030703c80 [ 276.279033][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 276.287059][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 276.295085][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa138 R12: ffffffff8a37aee0 [ 276.303607][ C0] R13: ffffffff8bc04680 R14: ffff88802917e490 R15: ffffffff8b6ce100 [ 276.311644][ C0] FS: 0000000000000000(0000) GS:ffff888125d3b000(0000) knlGS:0000000000000000 [ 276.320641][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.327283][ C0] CR2: 0000200000019340 CR3: 0000000077a44000 CR4: 00000000003526f0 [ 276.335288][ C0] Call Trace: [ 276.338614][ C0] [ 276.341478][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 276.347087][ C0] ? do_raw_spin_lock+0x121/0x290 [ 276.352165][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 276.357336][ C0] kfree+0x112/0x440 [ 276.361264][ C0] rose_timer_expiry+0x4cb/0x600 [ 276.366272][ C0] ? call_timer_fn+0x155/0x5f0 [ 276.371069][ C0] call_timer_fn+0x17e/0x5f0 [ 276.375720][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 276.381209][ C0] ? call_timer_fn+0xbe/0x5f0 [ 276.385955][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 276.391106][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.396371][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.401599][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 276.407224][ C0] __run_timer_base+0x61a/0x860 [ 276.412126][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 276.417566][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 276.423853][ C0] run_timer_softirq+0xb7/0x180 [ 276.428759][ C0] handle_softirqs+0x283/0x870 [ 276.433560][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 276.438396][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 276.443809][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 276.449091][ C0] __irq_exit_rcu+0xca/0x1f0 [ 276.453836][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 276.459109][ C0] irq_exit_rcu+0x9/0x30 [ 276.463393][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 276.469098][ C0] [ 276.472059][ C0] [ 276.475007][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 276.481055][ C0] RIP: 0010:rcu_is_watching+0x44/0xb0 [ 276.486480][ C0] Code: 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 ed 9f 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 1c 5c 7e 00 <48> c7 c3 d8 7f 8f 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 [ 276.506166][ C0] RSP: 0018:ffffc9000213f2f8 EFLAGS: 00000246 [ 276.512262][ C0] RAX: 1ffffffff1b3fdba RBX: 0000000000000000 RCX: 143296231796f900 [ 276.520269][ C0] RDX: ffff888030703c80 RSI: ffffffff8bc03b40 RDI: ffffffff8bc03b00 [ 276.528279][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff822f0dfa [ 276.536282][ C0] R10: dffffc0000000000 R11: fffff940003443e1 R12: dffffc0000000000 [ 276.544271][ C0] R13: 0000000000000008 R14: ffffffff8d9fedd0 R15: dffffc0000000000 [ 276.552293][ C0] ? pfn_valid+0xba/0x490 [ 276.556667][ C0] ? rcu_is_watching+0x15/0xb0 [ 276.561420][ C0] ? pfn_valid+0xba/0x490 [ 276.565780][ C0] pfn_valid+0x340/0x490 [ 276.570041][ C0] page_table_check_clear+0x21/0x700 [ 276.575326][ C0] ? vm_normal_page+0xb7/0x210 [ 276.580223][ C0] unmap_page_range+0x3445/0x4370 [ 276.585298][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 276.590727][ C0] ? mas_find+0xb0e/0xd30 [ 276.595081][ C0] ? unmap_vmas+0x144/0x580 [ 276.599661][ C0] unmap_vmas+0x399/0x580 [ 276.604107][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 276.609027][ C0] exit_mmap+0x248/0xb50 [ 276.613373][ C0] ? uprobe_clear_state+0x20f/0x290 [ 276.618617][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 276.623393][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 276.629086][ C0] ? __pfx_exit_aio+0x10/0x10 [ 276.633799][ C0] ? uprobe_clear_state+0x27c/0x290 [ 276.639135][ C0] __mmput+0x118/0x430 [ 276.643226][ C0] exit_mm+0x1da/0x2c0 [ 276.647355][ C0] ? __pfx_exit_mm+0x10/0x10 [ 276.651970][ C0] ? rcu_is_watching+0x15/0xb0 [ 276.656770][ C0] do_exit+0x648/0x2300 [ 276.660943][ C0] ? do_raw_spin_lock+0x121/0x290 [ 276.666016][ C0] ? __pfx_do_exit+0x10/0x10 [ 276.670647][ C0] do_group_exit+0x21c/0x2d0 [ 276.675252][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.680491][ C0] get_signal+0x1285/0x1340 [ 276.685024][ C0] arch_do_signal_or_restart+0xa0/0x790 [ 276.690605][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 276.696794][ C0] ? __se_sys_futex+0x36f/0x400 [ 276.701646][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 276.707144][ C0] exit_to_user_mode_loop+0x72/0x110 [ 276.712447][ C0] do_syscall_64+0x2bd/0xfa0 [ 276.717073][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.722643][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.728916][ C0] ? clear_bhb_loop+0x60/0xb0 [ 276.733610][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.739538][ C0] RIP: 0033:0x7f4e0918eec9 [ 276.743966][ C0] Code: Unable to access opcode bytes at 0x7f4e0918ee9f. [ 276.751015][ C0] RSP: 002b:00007f4e09f7c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 276.759486][ C0] RAX: fffffffffffffe00 RBX: 00007f4e093e5fa8 RCX: 00007f4e0918eec9 [ 276.767499][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4e093e5fa8 [ 276.775517][ C0] RBP: 00007f4e093e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 276.783486][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.791506][ C0] R13: 00007f4e093e6038 R14: 00007ffc27525720 R15: 00007ffc27525808 [ 276.799544][ C0] [ 276.802594][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 276.809881][ C0] CPU: 0 UID: 0 PID: 16788 Comm: syz.4.3141 Not tainted syzkaller #0 PREEMPT(full) [ 276.819263][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 276.829319][ C0] Call Trace: [ 276.832613][ C0] [ 276.835455][ C0] dump_stack_lvl+0x99/0x250 [ 276.840053][ C0] ? __asan_memcpy+0x40/0x70 [ 276.844645][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.849871][ C0] ? __pfx__printk+0x10/0x10 [ 276.854464][ C0] vpanic+0x281/0x750 [ 276.858442][ C0] ? __pfx__printk+0x10/0x10 [ 276.863025][ C0] ? __pfx_vpanic+0x10/0x10 [ 276.867523][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 276.872817][ C0] panic+0xb9/0xc0 [ 276.876531][ C0] ? __pfx_panic+0x10/0x10 [ 276.880947][ C0] __warn+0x31b/0x4b0 [ 276.884922][ C0] ? debug_print_object+0x16b/0x1e0 [ 276.890116][ C0] ? debug_print_object+0x16b/0x1e0 [ 276.895304][ C0] report_bug+0x2be/0x4f0 [ 276.899623][ C0] ? debug_print_object+0x16b/0x1e0 [ 276.904814][ C0] ? debug_print_object+0x16b/0x1e0 [ 276.910000][ C0] ? debug_print_object+0x16d/0x1e0 [ 276.915200][ C0] handle_bug+0x84/0x160 [ 276.919442][ C0] exc_invalid_op+0x1a/0x50 [ 276.923936][ C0] asm_exc_invalid_op+0x1a/0x20 [ 276.928810][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 276.934613][ C0] Code: 4c 89 ff e8 87 9e 8d fd 4d 8b 0f 48 c7 c7 00 45 c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 0a 11 ec fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 56 07 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 276.954210][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010292 [ 276.960271][ C0] RAX: 143296231796f900 RBX: dffffc0000000000 RCX: ffff888030703c80 [ 276.968249][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 276.976231][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 276.984193][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa138 R12: ffffffff8a37aee0 [ 276.992164][ C0] R13: ffffffff8bc04680 R14: ffff88802917e490 R15: ffffffff8b6ce100 [ 277.000148][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 277.005790][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 277.011334][ C0] ? do_raw_spin_lock+0x121/0x290 [ 277.016355][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 277.021461][ C0] kfree+0x112/0x440 [ 277.025349][ C0] rose_timer_expiry+0x4cb/0x600 [ 277.030289][ C0] ? call_timer_fn+0x155/0x5f0 [ 277.035067][ C0] call_timer_fn+0x17e/0x5f0 [ 277.039683][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 277.045142][ C0] ? call_timer_fn+0xbe/0x5f0 [ 277.049830][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 277.054941][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 277.060139][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.065335][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 277.070794][ C0] __run_timer_base+0x61a/0x860 [ 277.075668][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 277.081054][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 277.087306][ C0] run_timer_softirq+0xb7/0x180 [ 277.092153][ C0] handle_softirqs+0x283/0x870 [ 277.096915][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 277.101674][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 277.106957][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 277.112148][ C0] __irq_exit_rcu+0xca/0x1f0 [ 277.116732][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 277.121940][ C0] irq_exit_rcu+0x9/0x30 [ 277.126196][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 277.131827][ C0] [ 277.134751][ C0] [ 277.137669][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 277.143636][ C0] RIP: 0010:rcu_is_watching+0x44/0xb0 [ 277.148999][ C0] Code: 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 ed 9f 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 1c 5c 7e 00 <48> c7 c3 d8 7f 8f 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 [ 277.168608][ C0] RSP: 0018:ffffc9000213f2f8 EFLAGS: 00000246 [ 277.174683][ C0] RAX: 1ffffffff1b3fdba RBX: 0000000000000000 RCX: 143296231796f900 [ 277.182647][ C0] RDX: ffff888030703c80 RSI: ffffffff8bc03b40 RDI: ffffffff8bc03b00 [ 277.190618][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff822f0dfa [ 277.198582][ C0] R10: dffffc0000000000 R11: fffff940003443e1 R12: dffffc0000000000 [ 277.206545][ C0] R13: 0000000000000008 R14: ffffffff8d9fedd0 R15: dffffc0000000000 [ 277.214512][ C0] ? pfn_valid+0xba/0x490 [ 277.218846][ C0] ? rcu_is_watching+0x15/0xb0 [ 277.223601][ C0] ? pfn_valid+0xba/0x490 [ 277.227923][ C0] pfn_valid+0x340/0x490 [ 277.232168][ C0] page_table_check_clear+0x21/0x700 [ 277.237452][ C0] ? vm_normal_page+0xb7/0x210 [ 277.242210][ C0] unmap_page_range+0x3445/0x4370 [ 277.247253][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 277.252633][ C0] ? mas_find+0xb0e/0xd30 [ 277.256976][ C0] ? unmap_vmas+0x144/0x580 [ 277.261488][ C0] unmap_vmas+0x399/0x580 [ 277.265833][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 277.270716][ C0] exit_mmap+0x248/0xb50 [ 277.274952][ C0] ? uprobe_clear_state+0x20f/0x290 [ 277.280146][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 277.284973][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 277.290647][ C0] ? __pfx_exit_aio+0x10/0x10 [ 277.295328][ C0] ? uprobe_clear_state+0x27c/0x290 [ 277.300526][ C0] __mmput+0x118/0x430 [ 277.304598][ C0] exit_mm+0x1da/0x2c0 [ 277.308661][ C0] ? __pfx_exit_mm+0x10/0x10 [ 277.313246][ C0] ? rcu_is_watching+0x15/0xb0 [ 277.318435][ C0] do_exit+0x648/0x2300 [ 277.322593][ C0] ? do_raw_spin_lock+0x121/0x290 [ 277.327612][ C0] ? __pfx_do_exit+0x10/0x10 [ 277.332204][ C0] do_group_exit+0x21c/0x2d0 [ 277.336794][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.341982][ C0] get_signal+0x1285/0x1340 [ 277.346488][ C0] arch_do_signal_or_restart+0xa0/0x790 [ 277.352032][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 277.358190][ C0] ? __se_sys_futex+0x36f/0x400 [ 277.363048][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 277.368504][ C0] exit_to_user_mode_loop+0x72/0x110 [ 277.373804][ C0] do_syscall_64+0x2bd/0xfa0 [ 277.378395][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.383584][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.389639][ C0] ? clear_bhb_loop+0x60/0xb0 [ 277.394305][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.400191][ C0] RIP: 0033:0x7f4e0918eec9 [ 277.404598][ C0] Code: Unable to access opcode bytes at 0x7f4e0918ee9f. [ 277.411605][ C0] RSP: 002b:00007f4e09f7c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 277.420017][ C0] RAX: fffffffffffffe00 RBX: 00007f4e093e5fa8 RCX: 00007f4e0918eec9 [ 277.428017][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4e093e5fa8 [ 277.435989][ C0] RBP: 00007f4e093e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 277.443971][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.451934][ C0] R13: 00007f4e093e6038 R14: 00007ffc27525720 R15: 00007ffc27525808 [ 277.459907][ C0] [ 277.463185][ C0] Kernel Offset: disabled [ 277.467505][ C0] Rebooting in 86400 seconds..