last executing test programs: 3.334996989s ago: executing program 4 (id=1723): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x20c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc6, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_EMATCHES={0x110, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x7}, {0x7, 0x10001, 0x7, 0xfffffff7}}}, @TCF_EM_IPT={0x34, 0x3, 0x0, 0x0, {{0x359f, 0x9, 0x3ff}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x15, 0x5, "d128be47491207a500026fa0e16dde76bb"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x3, 0x0, 0x0, {{0x2, 0x0, 0x3}, "e445ef8ddba2d24479a52789b4cb566a0ce5a32ddb92e89c66cf45c59a8b2422e80ecab561f72357741710446bf02abca4a6f51e129d3ff769246a03ea53ccae7aa51b758eb1eea382eabc55faa8101a1dfc84cf99e9555ed54f918ebb67d441ee3dfb1741c2e32f5d6d52d5a1ec45b4a4c5f7cebce0465ae68ee70f3dad8331dd8e39e52be1f9"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x2c}, {0x2, 0x2, 0x3}}}]}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0xfffffee9, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x4}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x3}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x20c}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.960107298s ago: executing program 4 (id=1725): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x833, '\x00', 0x0, 0x0}, 0x50) close(r2) 2.798739341s ago: executing program 4 (id=1726): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newpolicy={0x300, 0x13, 0x8, 0x70bd2d, 0x25dfdbfb, {{@in6=@mcast1, @in=@multicast2, 0x4e20, 0x0, 0x4e22, 0xf6, 0xa, 0x80, 0x20, 0x2b}, {0x7f, 0x4, 0xa16, 0x8000000000000000, 0x8, 0xbba, 0x0, 0x8}, {0x4, 0x4, 0x1d0, 0x5}, 0xd44, 0x0, 0x0, 0x1}, [@extra_flags={0x8, 0x18, 0x9}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd28, 0xc}}, @offload={0xc}, @tmpl={0x184, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d4, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3503, 0x0, 0x3, 0x9, 0x6, 0x1000, 0x54}, {{@in=@loopback, 0x4d6, 0x33}, 0x2, @in=@empty, 0x3504, 0x4, 0x0, 0x5, 0x6, 0xa, 0x9a53}, {{@in=@remote, 0x4d5, 0x6c}, 0x2, @in=@multicast2, 0x34ff, 0x4, 0x0, 0x1, 0x81f, 0xfffffff8, 0x1}, {{@in6=@mcast1, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3503, 0x1, 0x3, 0x2, 0x9, 0xd, 0xfcd0}, {{@in6=@loopback, 0x4d4}, 0xa, @in6=@mcast1, 0x3502, 0x0, 0x2, 0x2, 0x4, 0x6cb, 0x6}, {{@in=@local, 0x4d2, 0x3c}, 0xa, @in=@broadcast, 0x3501, 0x2, 0x1, 0xff, 0x4, 0xb0, 0x9}]}, @algo_crypt={0x9d, 0x2, {{'xchacha20-arm\x00'}, 0x2a8, "aa894efe279f935aaf5c46c8a8b8ffc365bc6ef21e5125424ec1ee2633237ab2518d4c2cc4d2ef7cb22d73aeed79fbcaff792a7683b6ab17b593ce8ed196a1cd218df6c4b3a6a66c968f088fa2a292431e8c4da7da"}}]}, 0x300}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) 2.643894648s ago: executing program 1 (id=1730): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 2.586739087s ago: executing program 3 (id=1731): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x80, 0x200}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.339841363s ago: executing program 3 (id=1735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x188, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x158, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x108, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x63, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x800) 2.198774448s ago: executing program 1 (id=1738): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xa, 0xffe0}, {0xc, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x34}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008814}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.135429939s ago: executing program 3 (id=1739): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0xfffffffffffffd57, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000018c0)=""/132, 0x84}, {0x0}], 0x2}, 0x10}], 0x1, 0x10000, 0x0) 1.884726974s ago: executing program 4 (id=1742): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000033, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) 1.530874158s ago: executing program 1 (id=1743): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {{@in=@local, @in=@multicast1=0xac1414bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in=@broadcast, 0x4000000, 0x33}, @in6=@remote, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x1000000000000, 0x7}, {0x7b, 0x0, 0x4}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x6b}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.281575181s ago: executing program 3 (id=1744): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x15, 0x3, 'nq\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3, 0xcd}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 912.936755ms ago: executing program 2 (id=1747): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) close(0x4) close(0x3) 912.071128ms ago: executing program 0 (id=1748): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) unshare(0x2c020400) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}], 0x1, 0x40800) 911.595806ms ago: executing program 3 (id=1749): syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x80, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x7ffffffe, 0x20000006}]}}}}}}}, 0x0) 852.899048ms ago: executing program 4 (id=1750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 795.45416ms ago: executing program 2 (id=1751): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x5000) 772.385743ms ago: executing program 0 (id=1752): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 771.304591ms ago: executing program 3 (id=1753): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) 645.521898ms ago: executing program 2 (id=1754): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f00000010c0)="9c", 0x1}], 0x1, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, r1, 0xec1b3000) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 534.876368ms ago: executing program 0 (id=1755): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x9e2}], 0x1, 0x1832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 486.003147ms ago: executing program 1 (id=1756): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="00050037d7ac"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x5}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 484.88132ms ago: executing program 2 (id=1757): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0x6, 0x401}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0x0, 0x14, 0x5}, @ipv4=@tcp={{0x7, 0x4, 0x0, 0x28, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@end, @timestamp={0x44, 0x4, 0xb9, 0x0, 0x2}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x8, 0x0, 0x8, {[@mss={0x2, 0x4, 0x7}]}}, {"ff09eb92334ce7a7bce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61bdc158a6194b1fd1d6380bb7300a70b1d36c1a76ca97d8aec866053ca0d0d4830f966f48a3461bc25fba4dec31acaa7571527df4164e4f6a96c48ac714f8a8e0a4cd14617b52de88f0bee1cffccc96655f4fc658b5a0510e050f6f40aa3d28453590c3af7a4460719f9106f81797c856d60ec8528cc0c9487e69aa50cea9f374fa68593421c48bae1999c875cb205cc55f3c991416ff38e4f093a4c86ad36f19d1b3578242eedcfafd2c931fd2806000000892f790ed560f40a848dd0670f0f611a61640053a2641ddc8ea149145bc5669b176bf12f40d9e0664760a3e476a93a362dd7dfcc3fd9f8be8ee2cd7a0a5fe189031bacbc1ed8e7c15a2bae104b7650c38ed42128a21ad834bac63ed73159e680f90d41475f28567eef33b4c21860ea1cd7a3f56ca286f87608ed49b72d36a1e6b04e4e0ba9ba7f76bece6426a6cad503c8ab33f28772edee91ab52fa29ff4da3893fa0629d1084b2a87f00a468feed92e5fe5aef33ae040aeb89098033fa81bec4535683391297f750f184f06ccb58dfa50ae2d6c159a0208481450bf38bca83f26c50fffe1449895cb8c990aa1cc0dd4cd2d0b4b3cc0006626898fdf274ecfaa1650c61e17f303f41559d75d470da40196aa5dff545903db275a12166b1692f334c70e4c5cf2ca2410989b429e3bc6e2e630adc5d6a039ad7872c4b4754cceeec43a3323d4594fcc28623e65f3067444e098c8817c9eb3f6dc06b6ec407438c09f2c137009c06505d88e0337c765f6c3b16f53bb0d1b235dbdc509ea3fd0996c8cad5bce70eea4d8852e7adfc222b06552d250e70211228251bfb5b95dd3b09bc30fc52337505a6f0689bfca144db622dead3525fbb73056d1b7fa7b08535af3952a8d77a1f34655eb69616c963f4e8b34e88b8405e0e3cd5130c4f98c4e180bfe76ec6cd6ac5e8ccf5d1cf99fdd79bca0a227ee78d2037a55c8593f7ff10bd42d82cd6c4931df7fa6c0c6a8246cef83599095269fb7841aec2cf1afb41d1c7c54136b2737d2c2ae2be604058b657eec27669b99fa669c92a9ebc8e817ed6860070d2fe6bad743ee65d35633de56f026710729102ed175e2ec0af8cc2840af173c71862e90bd370cd3d277a7d2622a5f00946649c1d7894f2a69c3cf8e21276d72c4536149038f9967ec0c748de34376da7971495e0cd783056cdf20cddab2e2201ea43e657e36c54d42c47d1e6a1c9dede599e6c0baac06c2e3fcc5687c5d4706f32337ab639633822dd98089ba20c532fbe4a5e72963d53a86ec34d6a4aa536015a3272c0d4cc0a3a3ab2196ec7a92bf2daf638ba5957941ff0facfe6a161da6a6cbf8e6b40c8b6a601ee91e592f6bb9dc85f84c99e088004ed3f650404934c8b1d436500f3c83333b33be5532076d1a718f80c139db1ac28c953cc23394a5a137567cde82fc681f32e66aa415c2358d02486cb6cb4d6a77e5b27d729e0116773725410332c58b4cc3683fc9dc5235b19a60ea8794986e56e5e8e2ce65655f261ee0c33c8c0b99e7b5bc61fb55040d9e109a3a1182a0f81c2ca081b14cc207b11dad4592add90ff543d2d237421f938af8a010cd197502dbf42f14f1572aabc9f16593a735c07484d61bc43b5f300eb66abe2052cec153f89c1819512316ad728eca65949bf1f903a556ae67871a0d35b0fcb5485e8fae70695cf90547784da27450d6c3e6049bf2f1b923fab49cf4caebccc7a0171aee4364db173c795cc486475427fb92efdbf161ab7a35aecb8e1d5435ea2733cc8dc3f824b00c6d3e05e406de563d1fc6aa77ef76351a3be04557d915df5ed1fd52207872666bbff9ffb84a6e91ae863af42b3e9dd6da62115ab71c6db508875db1a83e631c4cd658a6492cb1a8bd4a42b4546afb74484d519cb5b1a8db29d91ea575a09dc45f63b51b0ace075511556116db62507ed8b163430eea2dcc171890c51afe0ffb22d6595c15112730ce041648d543abf1871bb62b40303b277b2084eaee4895a9e552bcb2d319cbf733d2682940050095fc9499f116e3c828727c2f0755e2c624891a794a1bd9ff52237f13ccf144e67b5311e556333c5b11816fecd78fffb72190480b93e7fe13682b465aad1c2cf564c16d3e8fb07aed4b415f7819f2dda6822ed0023b93c07b61e7740470216f29cb9c770ffd33837a6a0bc2990899778c74af304996ec13c1fc935b6d67b23f5190bf8b1bb3cc4e42bb2b9f1e3b330f24fe172396da0c8b52cdb4351a80fcebfcc85e54436327d8ad72d288551540f9a7bda7ecf2f2c41c3e775e26313de86c1b41ea1199321d533abe105ebfd90c9defd30ce9c7ea7a342b310eeca3dd88732dd9d7751c0ae685fbaed556727d2ece266a66ec7adc3a20f377b386ca7c909aba90fef9605ac37d43dd89e4da8455f086c1d2ce9c5b0eb4296ac64b7c244b28b4fd66a8be0442cbeacc7ba871efb11069d7c28dcdaf5798d0025741e461adabb3f270d056b1fe961e6626fc9a533924364687e80aa10e8ae081d743487bcfa97c0e1938dd47fc9075c3b0772284d98e683f0314c4a261845a3e50106e9c0a529b77293c251472a8eb6213ae49b0cc9d569e0a0c4fa1fb10663e4e0b6b0f9cee796aace2a1b42e42758a0180c2ee89119bf9359c6a277a062eda92a932ccf4b72ec1f998224acbe9eb8d594b8861b65ac276f1d401418c7be4d9344b52eb07aa74ba352e347f06e7e923b86cae5c0beb9f7aa0201b6537a82ea8f9281ac6e82a327ea7b879209dd30c1d40c22c402d3e6f09f4b4146b28cac26532eafbb5f6a67f6f734601ab352c804083570087124b23d7d3bff4d31569fcb8c091f157336d11e0e388a91ddf82b05b22dc3cc2ba4355a9453d9329cbca9d52489f15da5849ba32eb11d91184c6a352fe064aae6e85de05288282f911ebf2a932d43413c9bff9cb50f86af7eecca5eb9e3ce7fe9bc1743bcf24d01d02961116a87e4b55ddc1f217fb488c002cd85bb79db625bdeabf1e4574a9a46cfe05f0e45da2dd28703599adbae4703aad3ba1cc44813bcdf2432f0e5e9dd67ee8c6b34a9107fb81f21d87dd8fdf270068528685ea3c989beddc08410a5090000002fd9b37f8b3fddef393433de51b01314e3d6bb08fd7ea5b9abb4d4ccc5a5a43820004ac3870491b8df621be5388e2c3e2c40843d6798c493b308bef505d9f2d2734990a30150b4cefcaeb590118d21f331f201569c778cd5e54e34ec30a73d1fd48cd5d64d444a2a58856a71fa8173713136bdaef1b9cf1776cd7d5be3179ae7a2a95d7138334add686c5b50ca87e41b4c3f5343387cc491e97c280becefd3d72ae959a4fb3e51c15d6dea3210c480342c1748a040879f005f98a8b0d6a32fad631f557694179d117f71ae5fa6d54d4208aca72c5d1e03d34e80b221522c04b1bc7bc1ee008550a1757a1b74a0fea1d22778fd7e7a5f58e41cf72edf60d751bc35223646397457e8f9036838fd3b72e2bc176acc3e1e99a392b1d496cbfbdaa641b2212ef41c1728dd587272849b3a5cbe3b66f7eaf622d2cdf72ada32ccd3e16dddba2c890beaa8dba3773c88415fbcb733084a9bac52b6844f28377ba01fa3a09f74a57d87f31468ee2c64ae05b35fe3d660bcc6ed908b710a1216974db0232d90a124a4e8ee30322a20455feb4d0bef13ce0fafb56f492a99c3fb1c57900330bf75246147b44f23c77554119f1d96a4558d8fff90922af4f9299407344d7292d29ce3446e39bd9277e513e6068394584a08b356e6a0c641108f6e89390290844548a6c8122d8a83cc6c7d7f0c10d34ba537d832bc779ea245a37c850b85858885541da0f914e1a41ec5b49ad9b3b41814f66c50bd1f49cd514d027ecd1bd2f002f1989fc621f23d6d5f1b9976ce95c305fa34ebd3404919c3414fd97227a590684ce5aff318fb4fa6f41d4a3951fb49cc8184b547e9aa2ceb4912975ecf8e956bb29389789b8ceab72e7ae88fb402795ba7712323409fc83cbaf10a523dd4602d9ae7c158a56fee8df04ba4c48cdd63b1ce09bc697ca138f01f261f51bdc05480b7cf5f64836bf8e029d4883d4bc2f53115129cee1d9a9e57b4a5fb4ebef2237a2bdad349baeab05e6b24167ba67ea94f808d9d1386b08b0fd3c92a80ed253db5bb40e6a0c308339c615af56e554ed0d78881228da41706acd8596c52e33abc8a4a3317847dd50b8d77b341063fb29dd02594a540fa737a4dcf9c57ca8717d36e8a8a84eecf9ebb7bb0f4d8cb0f247f982e4fb7a29a7072f08eb1479e278b1084f4faba3c75b6c33438e24e7b454f1e8ee7c64507ef34f37e8655f49cf6871e8012bbf80d2fe2ad9424464d0a408ca50037f1b1221c2d3dbe4dfa75c236f6b59b8a9c8e3a4b1ef73bae3f8d44affc10c72485dee42b73671867221778a6f9ba1ddd5715a6115845af2da8687e0e75f35cca527cb21a07bb2018a574a7e1eb626ad6939990038588cabc63aaafada2c88336f2c764d52cf5c3740371c79ed30f4b7325768c43b9daab5532b4778bdc380bc56bf656eaeea1f7987db28672850e46fce9c9d7dcc7df7b01e9f98ae98890491949c3a9af72cf35227fe88e79d1853ab46903dffd8ceb6060b5a2da5ee061db21e07124b510af4be93a2eda5c9469c73ef661e52d1d3ddf6d0dbd58715730485d26b731da17fb67b1bdedd400cdd472ab88c059e99452b932202fa8500e9b14ec63791857fc33fb97a21469dc318e9799d6b8d3155a9b9ddae7704457f9fbafd0756fcf8464e2398a88b2b4ea3f655cacd390f6df7b195b35b25c6873f0c53ba2939efe513e448ec1c406380ca4e0a6ef53cb183f05bfe99b003429aa5a4709dbf9b6da2fcbc243bcc6b6e8840ed0636af84b6dd3c3b9e50f19c7fda40185dd542f8ff32e7ca9fad274847238e05cf0db24cf7ac1e2cecbcb20bbfe4868b6245899d8e6717a1f9321fd38b87c0c02bb24ed937e9460d03a5a38fa8e0d222105c8527d898f889bbe298b368fff9b951d1b0780352ce8ad10a5dea883292d6cf149618406fc33ca1539da60a1922ee27b7b74aa3507e6a5731bf2c42c879e9efa0750c8bacc63e2225589eab7bf237c259f715248b61278e4ef6f6d238d5bc9bde650795243874b294f228597cf687df0aa8ab1e58548991a1bd903f70408cd4c23f2db7f2ad3f9a0b12a4e52f09270d8f79aa0cde1ffd268d50fcf47c5b2a41898a076e8467cc40de311c26a1f5ff5d1a6693402f927077083490b65e594d5f4e848dc76e03adb210826926ef65e1f63346ad6a14b732cd7a23bf393e72b3c264258d7ea827d03e67140c89ceaaad28ce24dda7b"}}}}, 0xfce) 416.763605ms ago: executing program 0 (id=1758): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r2, 0x4) 276.619843ms ago: executing program 0 (id=1759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 276.227623ms ago: executing program 1 (id=1760): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) 228.525249ms ago: executing program 1 (id=1761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/250, 0xfa}, {0x0}, {0x0}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) 139.497292ms ago: executing program 0 (id=1762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) close(0x3) 106.579075ms ago: executing program 4 (id=1763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x401}, {0x9, 0x8, 0x8, 0x40}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x800}, '1'}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) 67.653568ms ago: executing program 2 (id=1764): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000240)=""/272, 0x37, 0x62, 0x0, 0x0) 0s ago: executing program 2 (id=1765): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x7a04e413bcb59324, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r2}, 0x18) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.202' (ED25519) to the list of known hosts. [ 93.090405][ T5849] cgroup: Unknown subsys name 'net' [ 93.201659][ T5849] cgroup: Unknown subsys name 'cpuset' [ 93.211553][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.687687][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.071360][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.098869][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.118904][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.128396][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.148716][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.218996][ T5182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.231770][ T5182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.245629][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.255922][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.264835][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.275513][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.287093][ T5868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.296040][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.305827][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.315621][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.382977][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.395873][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.407795][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.428787][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.438743][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.464671][ T5182] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.478601][ T5182] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.487439][ T5182] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.496137][ T5182] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.504845][ T5182] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.900055][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 98.100741][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 98.125827][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.136548][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.145869][ T5859] bridge_slave_0: entered allmulticast mode [ 98.154582][ T5859] bridge_slave_0: entered promiscuous mode [ 98.168173][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.176505][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.185413][ T5859] bridge_slave_1: entered allmulticast mode [ 98.193730][ T5859] bridge_slave_1: entered promiscuous mode [ 98.426036][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.442708][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.454058][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 98.465314][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 98.554938][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 98.574052][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.583958][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.592317][ T5865] bridge_slave_0: entered allmulticast mode [ 98.600386][ T5865] bridge_slave_0: entered promiscuous mode [ 98.611697][ T5859] team0: Port device team_slave_0 added [ 98.659757][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.668120][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.680934][ T5865] bridge_slave_1: entered allmulticast mode [ 98.689711][ T5865] bridge_slave_1: entered promiscuous mode [ 98.723416][ T5859] team0: Port device team_slave_1 added [ 98.894231][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.913491][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.927448][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.940040][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.971372][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.047804][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.056209][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.090853][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.131992][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.140989][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.148733][ T5871] bridge_slave_0: entered allmulticast mode [ 99.157073][ T5871] bridge_slave_0: entered promiscuous mode [ 99.180101][ T5865] team0: Port device team_slave_0 added [ 99.204663][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.213384][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.221493][ T5871] bridge_slave_1: entered allmulticast mode [ 99.229826][ T5182] Bluetooth: hci0: command tx timeout [ 99.233044][ T5871] bridge_slave_1: entered promiscuous mode [ 99.247110][ T5865] team0: Port device team_slave_1 added [ 99.266838][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.275117][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.283560][ T5867] bridge_slave_0: entered allmulticast mode [ 99.291294][ T5867] bridge_slave_0: entered promiscuous mode [ 99.364192][ T5859] hsr_slave_0: entered promiscuous mode [ 99.372132][ T5859] hsr_slave_1: entered promiscuous mode [ 99.379697][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.387535][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.395445][ T5867] bridge_slave_1: entered allmulticast mode [ 99.399110][ T5182] Bluetooth: hci2: command tx timeout [ 99.402075][ T5868] Bluetooth: hci1: command tx timeout [ 99.414738][ T5867] bridge_slave_1: entered promiscuous mode [ 99.468501][ T5868] Bluetooth: hci3: command tx timeout [ 99.482348][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.490502][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.499136][ T5873] bridge_slave_0: entered allmulticast mode [ 99.506986][ T5873] bridge_slave_0: entered promiscuous mode [ 99.515433][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.526466][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.538982][ T5873] bridge_slave_1: entered allmulticast mode [ 99.547382][ T5873] bridge_slave_1: entered promiscuous mode [ 99.555145][ T5868] Bluetooth: hci4: command tx timeout [ 99.559235][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.577528][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.600637][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.608106][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.639581][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.715293][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.724158][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.757219][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.775381][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.812822][ T5871] team0: Port device team_slave_0 added [ 99.823413][ T5871] team0: Port device team_slave_1 added [ 99.843903][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.858898][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.958208][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.006424][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.016665][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.047912][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.062861][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.072201][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.102458][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.121198][ T5865] hsr_slave_0: entered promiscuous mode [ 100.128767][ T5865] hsr_slave_1: entered promiscuous mode [ 100.135330][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 100.142031][ T5865] Cannot create hsr debugfs directory [ 100.150604][ T5867] team0: Port device team_slave_0 added [ 100.194327][ T5867] team0: Port device team_slave_1 added [ 100.219690][ T5873] team0: Port device team_slave_0 added [ 100.230173][ T5873] team0: Port device team_slave_1 added [ 100.323323][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.332224][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.363494][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.390495][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.399367][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.431985][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.448003][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.455981][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.486085][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.530202][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.537990][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.569719][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.607536][ T5871] hsr_slave_0: entered promiscuous mode [ 100.621081][ T5871] hsr_slave_1: entered promiscuous mode [ 100.632788][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 100.641000][ T5871] Cannot create hsr debugfs directory [ 100.772649][ T5873] hsr_slave_0: entered promiscuous mode [ 100.780708][ T5873] hsr_slave_1: entered promiscuous mode [ 100.787621][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 100.794658][ T5873] Cannot create hsr debugfs directory [ 100.864323][ T5867] hsr_slave_0: entered promiscuous mode [ 100.872724][ T5867] hsr_slave_1: entered promiscuous mode [ 100.880480][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 100.886803][ T5867] Cannot create hsr debugfs directory [ 101.067359][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.084006][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.142413][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.191842][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.308697][ T5868] Bluetooth: hci0: command tx timeout [ 101.397198][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.412327][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.444401][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.467112][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.475453][ T5868] Bluetooth: hci1: command tx timeout [ 101.483105][ T5182] Bluetooth: hci2: command tx timeout [ 101.551630][ T5868] Bluetooth: hci3: command tx timeout [ 101.561612][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.582572][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.605430][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.617711][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.628517][ T5868] Bluetooth: hci4: command tx timeout [ 101.713219][ T5873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.736879][ T5873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.775879][ T5873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.794802][ T5873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.887387][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.936191][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.960199][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.994154][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.005113][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.022601][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.045333][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.093880][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.102249][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.130960][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.161171][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.170012][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.212343][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.220203][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.233713][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.242799][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.328121][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.441675][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.471399][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.526055][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.534926][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.575775][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.583377][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.602326][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.632337][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.673920][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.681926][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.717070][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.725329][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.756644][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.821289][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.846091][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.854348][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.904547][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.912257][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.016849][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.137567][ T5865] veth0_vlan: entered promiscuous mode [ 103.252474][ T5865] veth1_vlan: entered promiscuous mode [ 103.361338][ T5859] veth0_vlan: entered promiscuous mode [ 103.385868][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.394610][ T5868] Bluetooth: hci0: command tx timeout [ 103.405854][ T5865] veth0_macvtap: entered promiscuous mode [ 103.423046][ T5865] veth1_macvtap: entered promiscuous mode [ 103.465270][ T5859] veth1_vlan: entered promiscuous mode [ 103.516684][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.548702][ T5868] Bluetooth: hci1: command tx timeout [ 103.548778][ T5182] Bluetooth: hci2: command tx timeout [ 103.555066][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.581514][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.624077][ T3573] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.639541][ T5182] Bluetooth: hci3: command tx timeout [ 103.672092][ T3573] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.684798][ T3573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.708856][ T5182] Bluetooth: hci4: command tx timeout [ 103.730261][ T3573] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.785875][ T5871] veth0_vlan: entered promiscuous mode [ 103.806432][ T9] cfg80211: failed to load regulatory.db [ 103.834744][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.870487][ T5859] veth0_macvtap: entered promiscuous mode [ 103.893113][ T5871] veth1_vlan: entered promiscuous mode [ 103.927808][ T5859] veth1_macvtap: entered promiscuous mode [ 103.996407][ T3573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.021767][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.029700][ T3573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.094450][ T5871] veth0_macvtap: entered promiscuous mode [ 104.105585][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.106513][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.128890][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.142048][ T5871] veth1_macvtap: entered promiscuous mode [ 104.185969][ T3521] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.201304][ T3521] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.247732][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.260625][ T3521] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.267879][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 104.273446][ T5867] veth0_vlan: entered promiscuous mode [ 104.308985][ T3521] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.345078][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.380823][ T5867] veth1_vlan: entered promiscuous mode [ 104.494044][ T5873] veth0_vlan: entered promiscuous mode [ 104.509532][ T3521] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.525741][ T3521] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.562885][ T3521] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.593149][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.612312][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.624164][ T3521] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.699311][ T5873] veth1_vlan: entered promiscuous mode [ 104.765655][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.782563][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.812552][ T5867] veth0_macvtap: entered promiscuous mode [ 104.863259][ T5867] veth1_macvtap: entered promiscuous mode [ 104.941795][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.982523][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.013194][ T5873] veth0_macvtap: entered promiscuous mode [ 105.079477][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.102462][ T5994] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 105.110101][ T5873] veth1_macvtap: entered promiscuous mode [ 105.133047][ T3573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.138046][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.153883][ T3573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.203947][ T3521] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.240386][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.285836][ T3521] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.304511][ T3521] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.324618][ T3521] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.358964][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.396001][ T3521] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.451058][ T3521] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.465793][ T3521] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.484568][ T5182] Bluetooth: hci0: command tx timeout [ 105.535498][ T3521] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.630524][ T5182] Bluetooth: hci2: command tx timeout [ 105.632572][ T5868] Bluetooth: hci1: command tx timeout [ 105.666708][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 105.681204][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.690034][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.710163][ T5868] Bluetooth: hci3: command tx timeout [ 105.791688][ T5868] Bluetooth: hci4: command tx timeout [ 105.827031][ T3573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.842217][ T3573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.371605][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.400876][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.507222][ T6024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.563502][ T6024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.726190][ T6050] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4'. [ 108.505191][ T6117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.007735][ T6138] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.036606][ T6141] netlink: 'syz.2.55': attribute type 12 has an invalid length. [ 109.050611][ T6141] netlink: 'syz.2.55': attribute type 29 has an invalid length. [ 109.063146][ T6141] netlink: 148 bytes leftover after parsing attributes in process `syz.2.55'. [ 109.083083][ T6141] netlink: 43 bytes leftover after parsing attributes in process `syz.2.55'. [ 109.095900][ T6138] Zero length message leads to an empty skb [ 109.109833][ T6143] netlink: 'syz.2.55': attribute type 12 has an invalid length. [ 109.121597][ T6143] netlink: 'syz.2.55': attribute type 29 has an invalid length. [ 109.155596][ T6143] netlink: 148 bytes leftover after parsing attributes in process `syz.2.55'. [ 109.180758][ T6143] netlink: 43 bytes leftover after parsing attributes in process `syz.2.55'. [ 110.112848][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 110.140212][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 110.204183][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 110.228344][ T3573] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.250182][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 110.275180][ T3573] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.399272][ T3573] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.452794][ T3573] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.214385][ T6253] netlink: 'syz.1.97': attribute type 1 has an invalid length. [ 111.230693][ T6253] netlink: 128 bytes leftover after parsing attributes in process `syz.1.97'. [ 111.258711][ T6253] netlink: 'syz.1.97': attribute type 2 has an invalid length. [ 111.314905][ T6253] netlink: 'syz.1.97': attribute type 1 has an invalid length. [ 111.340234][ T6255] netlink: 'syz.2.98': attribute type 1 has an invalid length. [ 111.407221][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.100'. [ 111.915494][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.114'. [ 111.931910][ T6289] netlink: 'syz.0.114': attribute type 19 has an invalid length. [ 111.943930][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 112.014584][ T3573] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.014693][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.114'. [ 112.060813][ T3573] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.067349][ T6289] netlink: 'syz.0.114': attribute type 19 has an invalid length. [ 112.078019][ T3573] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.099892][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 112.132521][ T3573] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.226134][ T6304] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.687115][ T6322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.727981][ T6322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.002654][ T6339] Driver unsupported XDP return value 0 on prog (id 35) dev N/A, expect packet loss! [ 113.028052][ T6341] trusted_key: syz.2.137 sent an empty control message without MSG_MORE. [ 113.072188][ T6322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.160002][ T6322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.284097][ T6322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.311795][ T6322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.481263][ T6322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.508824][ T6322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.810451][ T3521] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.858710][ T3521] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.868908][ T6029] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.878082][ T6029] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.929970][ T6369] netlink: 96 bytes leftover after parsing attributes in process `syz.1.147'. [ 113.998704][ T6029] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.018503][ T6029] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.081342][ T6022] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.096510][ T6022] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.952029][ T6398] Bluetooth: MGMT ver 1.23 [ 115.557090][ T6430] warning: `syz.0.173' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 116.241902][ T6459] netlink: 96 bytes leftover after parsing attributes in process `syz.0.186'. [ 116.430953][ T6473] netlink: 'syz.1.192': attribute type 21 has an invalid length. [ 116.445240][ T6473] netlink: 'syz.1.192': attribute type 22 has an invalid length. [ 116.475795][ T6473] netlink: 'syz.1.192': attribute type 23 has an invalid length. [ 116.494639][ T6473] netlink: 'syz.1.192': attribute type 25 has an invalid length. [ 116.516855][ T6473] netlink: 'syz.1.192': attribute type 26 has an invalid length. [ 116.536232][ T6473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.192'. [ 116.544708][ T6478] netlink: 'syz.0.194': attribute type 2 has an invalid length. [ 116.557771][ T6478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.194'. [ 116.813503][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 116.877540][ T3573] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.902899][ T3573] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.916855][ T3573] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.958340][ T3573] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.451375][ T6524] ip6gre1: entered allmulticast mode [ 117.514991][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 117.553929][ T6528] vlan2: entered promiscuous mode [ 117.565948][ T6528] hsr0: entered promiscuous mode [ 117.686978][ T6537] netlink: 'syz.4.220': attribute type 13 has an invalid length. [ 117.698446][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.220'. [ 117.704595][ T6539] batadv_slave_1: entered promiscuous mode [ 117.720896][ T6540] netlink: 'syz.2.222': attribute type 21 has an invalid length. [ 117.741733][ T6540] netlink: 156 bytes leftover after parsing attributes in process `syz.2.222'. [ 117.753890][ T6537] netlink: 'syz.4.220': attribute type 13 has an invalid length. [ 117.763823][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.220'. [ 117.774551][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.806387][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.834458][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.863007][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.899411][ T6538] batadv_slave_1: left promiscuous mode [ 118.279682][ T6565] ip6tnl1: entered promiscuous mode [ 118.360470][ T6571] netlink: 52 bytes leftover after parsing attributes in process `syz.0.234'. [ 118.435737][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 118.947251][ T6597] syzkaller1: entered promiscuous mode [ 118.976441][ T6597] syzkaller1: entered allmulticast mode [ 118.999559][ T6584] pim6reg1: entered promiscuous mode [ 119.023278][ T6584] pim6reg1: entered allmulticast mode [ 119.494573][ T6627] IPv4: Oversized IP packet from 127.202.26.0 [ 120.344211][ T6675] veth0: entered promiscuous mode [ 120.647658][ T6685] netlink: 'syz.0.281': attribute type 39 has an invalid length. [ 121.108012][ T6022] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 121.565745][ T6724] validate_nla: 2 callbacks suppressed [ 121.565762][ T6724] netlink: 'syz.1.295': attribute type 5 has an invalid length. [ 121.777198][ T6728] netlink: 'syz.3.297': attribute type 16 has an invalid length. [ 121.785970][ T6728] __nla_validate_parse: 4 callbacks suppressed [ 121.785986][ T6728] netlink: 20 bytes leftover after parsing attributes in process `syz.3.297'. [ 122.408799][ T6740] macvlan2: entered promiscuous mode [ 122.414544][ T6740] macvlan2: entered allmulticast mode [ 122.438957][ T6740] syz_tun: entered promiscuous mode [ 122.471169][ T6740] syz_tun: entered allmulticast mode [ 122.491531][ T6740] team0: Port device macvlan2 added [ 123.345348][ T6771] vlan3: entered promiscuous mode [ 123.369845][ T6771] gretap0: entered promiscuous mode [ 123.401382][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.317'. [ 123.586907][ T6779] netlink: 'syz.4.319': attribute type 12 has an invalid length. [ 123.621036][ T6779] netlink: 'syz.4.319': attribute type 29 has an invalid length. [ 123.659532][ T6779] netlink: 148 bytes leftover after parsing attributes in process `syz.4.319'. [ 125.022703][ T6826] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 125.870174][ T6838] netlink: 96 bytes leftover after parsing attributes in process `syz.1.345'. [ 126.257864][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880571d5c00: rx timeout, send abort [ 126.271926][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880571d5c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 126.469168][ T6854] netlink: 96 bytes leftover after parsing attributes in process `syz.1.351'. [ 127.832212][ T6883] netlink: 208128 bytes leftover after parsing attributes in process `syz.1.364'. [ 127.878315][ T6883] openvswitch: netlink: Message has 4 unknown bytes. [ 128.239470][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 128.520071][ T6910] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 128.968480][ T6931] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.382'. [ 129.502558][ T6949] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 129.539360][ T6949] macvtap1: entered allmulticast mode [ 129.567157][ T6949] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 129.587383][ T6949] batman_adv: batadv0: Adding interface: macvtap1 [ 129.607022][ T6949] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.656626][ T6949] batman_adv: batadv0: Interface activated: macvtap1 [ 129.965582][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'. [ 130.542220][ T6995] netlink: 'syz.4.407': attribute type 10 has an invalid length. [ 130.608060][ T6995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.671693][ T6995] team0: Port device bond0 added [ 130.820235][ T7000] geneve2: entered promiscuous mode [ 131.248056][ T7023] netlink: 40 bytes leftover after parsing attributes in process `syz.3.422'. [ 131.411125][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.423'. [ 131.461046][ T7033] netlink: 428 bytes leftover after parsing attributes in process `syz.1.424'. [ 131.510398][ T7038] netlink: 'syz.3.426': attribute type 6 has an invalid length. [ 131.517731][ T7033] netlink: 32 bytes leftover after parsing attributes in process `syz.1.424'. [ 132.013224][ T7058] netlink: 'syz.1.437': attribute type 13 has an invalid length. [ 132.321835][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.331263][ T7058] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.400033][ T7078] netlink: 'syz.0.444': attribute type 13 has an invalid length. [ 132.426611][ T3573] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 132.576129][ T7058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.600639][ T7058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.794914][ T7058] syz_tun: left allmulticast mode [ 132.980694][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.990568][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.120667][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.141093][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.385474][ T6022] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.409971][ T6022] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.444281][ T6022] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.479164][ T6022] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.529959][ T6022] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.554867][ T6022] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.658624][ T3573] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.689759][ T3573] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.713058][ T3573] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.739724][ T3573] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.767420][ T7119] vlan4: entered allmulticast mode [ 133.778931][ T7119] dummy0: entered allmulticast mode [ 133.833352][ T3573] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.857376][ T3573] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.879536][ T3573] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.901643][ T3573] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.920978][ T3573] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.958384][ T3573] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.337409][ T7148] netlink: 212264 bytes leftover after parsing attributes in process `syz.1.471'. [ 135.558675][ T7205] netlink: 'syz.1.492': attribute type 8 has an invalid length. [ 135.581673][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 135.645946][ T7205] bond0: entered promiscuous mode [ 135.659820][ T7205] bond_slave_0: entered promiscuous mode [ 135.688746][ T7205] bond_slave_1: entered promiscuous mode [ 135.736003][ T7205] bond0: left promiscuous mode [ 135.752461][ T7205] bond_slave_0: left promiscuous mode [ 135.773599][ T7205] bond_slave_1: left promiscuous mode [ 137.339022][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 137.351706][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 137.386751][ T59] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.396658][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 137.412335][ T59] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.427488][ T59] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.437855][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 137.457728][ T59] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.763727][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'. [ 139.183196][ T7306] IPVS: Scheduler module ip_vs_ not found [ 139.644065][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.652313][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.908213][ T7350] pimreg: entered allmulticast mode [ 141.179574][ T7358] sit0: entered promiscuous mode [ 141.208040][ T7358] netlink: 'syz.4.564': attribute type 1 has an invalid length. [ 141.245513][ T7358] netlink: 1 bytes leftover after parsing attributes in process `syz.4.564'. [ 141.282817][ T7362] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 141.453621][ T7366] vlan2: entered promiscuous mode [ 141.462570][ T7366] bridge0: entered promiscuous mode [ 141.496938][ T7366] netlink: 19 bytes leftover after parsing attributes in process `syz.2.567'. [ 142.280973][ T7376] dummy0: entered promiscuous mode [ 142.293228][ T7376] macsec1: entered allmulticast mode [ 142.313288][ T7376] dummy0: entered allmulticast mode [ 142.349773][ T7376] dummy0: left allmulticast mode [ 142.360828][ T7376] dummy0: left promiscuous mode [ 143.235090][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 143.415902][ T7212] Set syz1 is full, maxelem 65536 reached [ 144.217776][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 145.259204][ T30] audit: type=1800 audit(1756762234.732:2): pid=7493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.613" name="@" dev="tmpfs" ino=579 res=0 errno=0 [ 146.196390][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 147.214666][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 147.436399][ T7563] pimreg: entered allmulticast mode [ 147.483783][ T7563] dvmrp8: entered allmulticast mode [ 147.508130][ T7563] pimreg: left allmulticast mode [ 147.524771][ T7563] dvmrp8: left allmulticast mode [ 149.420239][ T7642] tls_set_device_offload_rx: netdev not found [ 150.063719][ T7673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.683'. [ 151.145785][ T7720] netlink: 428 bytes leftover after parsing attributes in process `syz.3.702'. [ 151.165596][ T7720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.702'. [ 151.324444][ T7724] syzkaller1: entered promiscuous mode [ 151.332541][ T7724] syzkaller1: entered allmulticast mode [ 151.889020][ T7750] netlink: 'syz.3.715': attribute type 6 has an invalid length. [ 152.240476][ T7759] ip6gre1: entered allmulticast mode [ 152.516132][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.723'. [ 152.532330][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'. [ 152.566217][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.723'. [ 152.580822][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'. [ 152.706659][ T7776] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.724'. [ 153.429187][ T7794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.732'. [ 153.689371][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 154.509103][ T5868] Bluetooth: hci4: command tx timeout [ 155.719379][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 156.790421][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 157.640576][ T7880] netlink: 32 bytes leftover after parsing attributes in process `syz.3.760'. [ 157.816324][ T7886] netlink: 96 bytes leftover after parsing attributes in process `syz.0.762'. [ 158.602905][ T7897] syzkaller1: entered promiscuous mode [ 158.621524][ T7897] syzkaller1: entered allmulticast mode [ 158.913758][ T7901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 158.928466][ T7901] netlink: 36 bytes leftover after parsing attributes in process `syz.2.770'. [ 158.954529][ T7901] bridge0: port 3(vlan0) entered blocking state [ 158.969722][ T7901] bridge0: port 3(vlan0) entered disabled state [ 158.981889][ T7901] vlan0: entered allmulticast mode [ 158.991793][ T7901] bridge0: entered allmulticast mode [ 159.010184][ T7901] vlan0: left allmulticast mode [ 159.023014][ T7901] bridge0: left allmulticast mode [ 159.548598][ T7915] nbd: device at index 1 is going down [ 159.981659][ T7937] netlink: 'syz.4.785': attribute type 1 has an invalid length. [ 159.998459][ T7937] netlink: 'syz.4.785': attribute type 6 has an invalid length. [ 160.019701][ T7937] netlink: 'syz.4.785': attribute type 3 has an invalid length. [ 160.143807][ T7943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.788'. [ 160.203195][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'. [ 161.255870][ T7989] nbd: socks must be embedded in a SOCK_ITEM attr [ 161.269219][ T7989] block nbd0: shutting down sockets [ 161.628498][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.815'. [ 163.958456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.920272][ T8115] Bluetooth: MGMT ver 1.23 [ 165.185325][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.866'. [ 165.265142][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'. [ 165.295056][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'. [ 166.988330][ T5868] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 166.988591][ T5182] Bluetooth: hci2: command 0x0401 tx timeout [ 167.064306][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 167.098047][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.889'. [ 167.123367][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 167.138569][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.889'. [ 169.523140][ T8265] netlink: 'syz.0.924': attribute type 3 has an invalid length. [ 169.544105][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'. [ 169.696429][ T8273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.928'. [ 169.719085][ T8273] netlink: 44 bytes leftover after parsing attributes in process `syz.2.928'. [ 169.747565][ T8273] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 169.878499][ T8279] ip6tnl2: entered promiscuous mode [ 171.562177][ T8326] netlink: 'syz.0.949': attribute type 10 has an invalid length. [ 171.677054][ T8326] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.690875][ T8326] bond0: (slave team0): Enslaving as an active interface with an up link [ 172.562725][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 173.662776][ T8409] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.987'. [ 177.205291][ T8509] veth1_to_bond: entered allmulticast mode [ 177.223932][ T8509] bond_slave_1: entered promiscuous mode [ 177.249750][ T8508] bond_slave_1: left promiscuous mode [ 177.256287][ T8508] veth1_to_bond: left allmulticast mode [ 177.389615][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1029'. [ 178.683841][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 178.789274][ T8550] ipvlan0: entered allmulticast mode [ 178.807731][ T8550] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 179.171189][ T8564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'. [ 179.218585][ T8564] netlink: 'syz.0.1049': attribute type 15 has an invalid length. [ 179.251286][ T8564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'. [ 179.254625][ T8568] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1048'. [ 179.294766][ T8564] netlink: 'syz.0.1049': attribute type 15 has an invalid length. [ 179.321590][ T8565] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1048'. [ 179.396707][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1052'. [ 179.713179][ T8584] netlink: 'syz.0.1058': attribute type 10 has an invalid length. [ 179.814883][ T8584] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 181.285257][ T8641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1080'. [ 181.788489][ T8643] syzkaller1: entered promiscuous mode [ 181.818585][ T8643] syzkaller1: entered allmulticast mode [ 182.332999][ T8664] syzkaller1: entered promiscuous mode [ 182.352685][ T8664] syzkaller1: entered allmulticast mode [ 182.837298][ T8675] netlink: 'syz.2.1094': attribute type 1 has an invalid length. [ 182.957050][ T8685] gretap1: entered allmulticast mode [ 182.970553][ T8685] bond1: (slave gretap1): making interface the new active one [ 182.986035][ T8685] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 183.288094][ T5944] IPVS: starting estimator thread 0... [ 183.378478][ T8701] IPVS: using max 38 ests per chain, 91200 per kthread [ 183.446238][ T8695] syzkaller1: entered promiscuous mode [ 183.462160][ T8695] syzkaller1: entered allmulticast mode [ 187.696500][ T8840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1162'. [ 187.963490][ T8851] netlink: 'syz.3.1167': attribute type 1 has an invalid length. [ 188.133650][ T8856] bond1: (slave gretap1): making interface the new active one [ 188.144374][ T8856] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 188.216108][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1170'. [ 188.251253][ T8861] team1: entered promiscuous mode [ 188.257334][ T8861] team1: entered allmulticast mode [ 188.348035][ T8865] netlink: 'syz.1.1172': attribute type 1 has an invalid length. [ 188.393305][ T8865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.510048][ T8865] bond1: (slave dummy0): making interface the new active one [ 188.535926][ T8865] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 189.003300][ T8907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1187'. [ 189.786198][ T8937] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1196'. [ 190.331462][ T8952] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1204'. [ 190.346510][ T8949] pim6reg1: entered promiscuous mode [ 190.354312][ T8949] pim6reg1: entered allmulticast mode [ 190.787543][ T8980] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1217'. [ 190.825124][ T8980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.000815][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'. [ 191.065728][ T8989] veth1_macvtap: left promiscuous mode [ 191.350487][ T9007] netlink: 'syz.4.1229': attribute type 1 has an invalid length. [ 191.376877][ T9007] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1229'. [ 191.406276][ T9007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1229'. [ 191.603358][ T9017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 193.133252][ T9069] vxcan1: entered allmulticast mode [ 194.801027][ T9115] syzkaller1: entered promiscuous mode [ 194.813130][ T9115] syzkaller1: entered allmulticast mode [ 194.974171][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 195.054105][ T6024] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.055769][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 195.085351][ T6024] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.108936][ T6024] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.135895][ T6024] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.733579][ T9155] syz_tun: entered allmulticast mode [ 196.804069][ T9154] syz_tun: left allmulticast mode [ 197.488968][ T9174] syzkaller1: entered promiscuous mode [ 197.502332][ T9174] syzkaller1: entered allmulticast mode [ 197.638617][ T9181] netlink: 'syz.3.1299': attribute type 7 has an invalid length. [ 197.671484][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'. [ 197.876975][ T9188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.385860][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1310'. [ 198.446579][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1310'. [ 198.905938][ T9228] netlink: 'syz.3.1318': attribute type 39 has an invalid length. [ 199.278696][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1322'. [ 199.476949][ T9250] netlink: 'syz.3.1327': attribute type 21 has an invalid length. [ 199.502296][ T9250] netlink: 'syz.3.1327': attribute type 22 has an invalid length. [ 199.514585][ T9250] netlink: 'syz.3.1327': attribute type 23 has an invalid length. [ 199.549956][ T9250] netlink: 'syz.3.1327': attribute type 25 has an invalid length. [ 199.598270][ T9250] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1327'. [ 200.506144][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'. [ 200.810474][ T9290] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1341'. [ 201.036194][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 201.073696][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.085933][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.136694][ T9300] veth1_macvtap: left promiscuous mode [ 202.523006][ T9331] geneve2: entered promiscuous mode [ 202.663893][ T9335] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1355'. [ 202.675591][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1355'. [ 203.179619][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1370'. [ 203.207292][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1370'. [ 203.583179][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1377'. [ 203.988073][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1382'. [ 204.497184][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'. [ 204.536732][ T9421] syzkaller1: entered promiscuous mode [ 204.563516][ T9421] syzkaller1: entered allmulticast mode [ 204.701575][ T9432] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 204.871532][ T9438] netlink: 'syz.0.1399': attribute type 1 has an invalid length. [ 205.096024][ T9454] netlink: 'syz.0.1407': attribute type 1 has an invalid length. [ 205.154252][ T9454] bond1: (slave gretap2): making interface the new active one [ 205.162970][ T9454] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 205.529053][ T9466] __nla_validate_parse: 1 callbacks suppressed [ 205.529068][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1409'. [ 205.563758][ T9466] veth1_macvtap: left promiscuous mode [ 206.477893][ T9510] netlink: 'syz.0.1429': attribute type 1 has an invalid length. [ 206.595495][ T9514] netlink: 212856 bytes leftover after parsing attributes in process `syz.0.1431'. [ 206.623996][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1432'. [ 206.634536][ T9517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1432'. [ 206.893841][ T9531] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1437'. [ 207.100694][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1445'. [ 208.299373][ T9554] batman_adv: batadv0: Adding interface: dummy0 [ 208.305753][ T9554] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.343195][ T9554] batman_adv: batadv0: Interface activated: dummy0 [ 208.372168][ T9555] batadv0: mtu less than device minimum [ 208.409185][ T9555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.423267][ T9555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.436479][ T9555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.449784][ T9555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.462334][ T9555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.475003][ T9555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.487558][ T9555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.500229][ T9555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.512711][ T9555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.354337][ T9614] sch_tbf: burst 2 is lower than device lo mtu (1550) ! [ 209.453062][ T9618] sch_tbf: burst 2 is lower than device lo mtu (1550) ! [ 209.463769][ T9618] sch_tbf: burst 2 is lower than device lo mtu (1550) ! [ 209.671603][ T9624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1476'. [ 211.615823][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1509'. [ 211.967455][ T9720] netlink: 'syz.4.1519': attribute type 21 has an invalid length. [ 211.987896][ T9720] netlink: 'syz.4.1519': attribute type 22 has an invalid length. [ 211.997290][ T9720] netlink: 'syz.4.1519': attribute type 23 has an invalid length. [ 212.013346][ T9720] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1519'. [ 212.578782][ T9754] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1535'. [ 213.463811][ T9795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1550'. [ 214.047566][ T9817] netlink: 'syz.4.1563': attribute type 1 has an invalid length. [ 214.077996][ T9821] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1565'. [ 214.098718][ T9823] netlink: 'syz.2.1564': attribute type 4 has an invalid length. [ 214.187332][ T9825] bond1: (slave bridge1): making interface the new active one [ 214.197831][ T9825] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 214.207980][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1566'. [ 214.916061][ T9862] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1581'. [ 217.988619][ T9929] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.088014][ T9940] ip6tnl1: entered promiscuous mode [ 218.282299][ T9949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1614'. [ 218.672535][ T9969] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.743041][T10000] lo: entered promiscuous mode [ 219.759518][ T9998] lo: left promiscuous mode [ 219.896711][T10016] syzkaller1: entered promiscuous mode [ 219.905221][T10016] syzkaller1: entered allmulticast mode [ 221.791360][ T30] audit: type=1800 audit(1756762311.272:3): pid=10047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1648" name="memory.events" dev="tmpfs" ino=1677 res=0 errno=0 [ 223.638864][T10045] Bluetooth: hci0: command 0x0406 tx timeout [ 223.645278][T10045] Bluetooth: hci2: command 0x0401 tx timeout [ 223.651791][T10045] Bluetooth: hci1: command 0x0406 tx timeout [ 223.658143][T10045] Bluetooth: hci3: command 0x0406 tx timeout [ 224.455524][T10147] net_ratelimit: 11 callbacks suppressed [ 224.455544][T10147] batadv0: mtu less than device minimum [ 224.486014][T10147] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 224.498018][T10147] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 224.509733][T10147] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 224.521852][T10147] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 224.534763][T10147] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 224.547312][T10147] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 224.559812][T10147] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 224.571853][T10147] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 224.583856][T10147] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 225.751824][T10195] nbd0: detected capacity change from 0 to 63 [ 225.784802][T10198] block nbd0: NBD_DISCONNECT [ 225.796227][T10198] block nbd0: Disconnected due to user request. [ 225.815846][T10198] block nbd0: shutting down sockets [ 226.818811][T10241] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1718'. [ 227.099043][T10256] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1723'. [ 227.113010][T10256] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1723'. [ 228.075811][T10284] netlink: 'syz.3.1735': attribute type 1 has an invalid length. [ 228.246548][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1738'. [ 228.278634][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1738'. [ 229.280805][ T5921] IPVS: starting estimator thread 0... [ 229.438864][T10315] IPVS: using max 32 ests per chain, 76800 per kthread [ 229.867617][T10336] netlink: 'syz.4.1750': attribute type 13 has an invalid length. [ 230.166822][T10347] syzkaller1: entered promiscuous mode [ 230.173403][T10347] syzkaller1: entered allmulticast mode [ 230.348233][ C0] [ 230.350615][ C0] ================================ [ 230.355729][ C0] WARNING: inconsistent lock state [ 230.360857][ C0] syzkaller #0 Not tainted [ 230.365329][ C0] -------------------------------- [ 230.370521][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 230.377450][ C0] syz.0.1762/10358 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 230.383854][ C0] ffff888056c2aca8 (&p->tcfa_lock){+.?.}-{3:3}, at: est_timer+0xd4/0x9f0 [ 230.392494][ C0] {SOFTIRQ-ON-W} state was registered at: [ 230.398465][ C0] lock_acquire+0x120/0x360 [ 230.403070][ C0] _raw_spin_lock+0x2e/0x40 [ 230.408007][ C0] tcf_ct_init+0x7cc/0x1950 [ 230.412777][ C0] tcf_action_init_1+0x460/0x6d0 [ 230.417983][ C0] tcf_action_init+0x2cf/0xab0 [ 230.422837][ C0] tcf_exts_validate_ex+0x223/0x530 [ 230.428477][ C0] tcf_exts_validate+0x42/0x60 [ 230.433658][ C0] cls_cgroup_change+0x395/0x540 [ 230.438736][ C0] tc_new_tfilter+0xdca/0x15b0 [ 230.443773][ C0] rtnetlink_rcv_msg+0x7cf/0xb70 [ 230.448787][ C0] netlink_rcv_skb+0x205/0x470 [ 230.453900][ C0] netlink_unicast+0x82c/0x9e0 [ 230.459129][ C0] netlink_sendmsg+0x805/0xb30 [ 230.463995][ C0] __sock_sendmsg+0x21c/0x270 [ 230.468935][ C0] ____sys_sendmsg+0x52d/0x830 [ 230.473787][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 230.478654][ C0] __sys_sendmmsg+0x227/0x430 [ 230.483534][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 230.488564][ C0] do_syscall_64+0xfa/0x3b0 [ 230.493152][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.499214][ C0] irq event stamp: 3860 [ 230.503605][ C0] hardirqs last enabled at (3860): [] _raw_spin_unlock_irq+0x23/0x50 [ 230.514199][ C0] hardirqs last disabled at (3859): [] _raw_spin_lock_irq+0x7d/0xf0 [ 230.524109][ C0] softirqs last enabled at (3726): [] __irq_exit_rcu+0xca/0x1f0 [ 230.533650][ C0] softirqs last disabled at (3857): [] __irq_exit_rcu+0xca/0x1f0 [ 230.543057][ C0] [ 230.543057][ C0] other info that might help us debug this: [ 230.551190][ C0] Possible unsafe locking scenario: [ 230.551190][ C0] [ 230.558743][ C0] CPU0 [ 230.562122][ C0] ---- [ 230.565391][ C0] lock(&p->tcfa_lock); [ 230.569644][ C0] [ 230.573086][ C0] lock(&p->tcfa_lock); [ 230.577507][ C0] [ 230.577507][ C0] *** DEADLOCK *** [ 230.577507][ C0] [ 230.585746][ C0] 2 locks held by syz.0.1762/10358: [ 230.591101][ C0] #0: ffff888029938ca0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 230.600497][ C0] #1: ffffc90000007be0 ((&est->timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 230.609886][ C0] [ 230.609886][ C0] stack backtrace: [ 230.615867][ C0] CPU: 0 UID: 0 PID: 10358 Comm: syz.0.1762 Not tainted syzkaller #0 PREEMPT(full) [ 230.615885][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.615900][ C0] Call Trace: [ 230.615907][ C0] [ 230.615914][ C0] dump_stack_lvl+0x189/0x250 [ 230.615934][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.615950][ C0] ? __pfx__printk+0x10/0x10 [ 230.615968][ C0] ? print_lock_name+0xde/0x100 [ 230.615987][ C0] print_usage_bug+0x297/0x2e0 [ 230.616001][ C0] valid_state+0xc3/0xf0 [ 230.616013][ C0] mark_lock_irq+0x36/0x390 [ 230.616033][ C0] mark_lock+0x11b/0x190 [ 230.616045][ C0] __lock_acquire+0x680/0xd20 [ 230.616067][ C0] ? est_timer+0xd4/0x9f0 [ 230.616085][ C0] lock_acquire+0x120/0x360 [ 230.616102][ C0] ? est_timer+0xd4/0x9f0 [ 230.616122][ C0] ? register_lock_class+0x51/0x320 [ 230.616142][ C0] _raw_spin_lock+0x2e/0x40 [ 230.616161][ C0] ? est_timer+0xd4/0x9f0 [ 230.616178][ C0] est_timer+0xd4/0x9f0 [ 230.616198][ C0] ? call_timer_fn+0xbe/0x5f0 [ 230.616217][ C0] ? call_timer_fn+0xbe/0x5f0 [ 230.616235][ C0] ? __pfx_est_timer+0x10/0x10 [ 230.616256][ C0] call_timer_fn+0x17e/0x5f0 [ 230.616274][ C0] ? __pfx_est_timer+0x10/0x10 [ 230.616292][ C0] ? call_timer_fn+0xbe/0x5f0 [ 230.616310][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 230.616330][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.616349][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.616362][ C0] ? __pfx_est_timer+0x10/0x10 [ 230.616380][ C0] __run_timer_base+0x61a/0x860 [ 230.616397][ C0] ? ktime_get+0x3e/0x1f0 [ 230.616415][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 230.616431][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 230.616451][ C0] run_timer_softirq+0xb7/0x180 [ 230.616469][ C0] handle_softirqs+0x283/0x870 [ 230.616485][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 230.616499][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 230.616515][ C0] __irq_exit_rcu+0xca/0x1f0 [ 230.616528][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 230.616544][ C0] irq_exit_rcu+0x9/0x30 [ 230.616555][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 230.616576][ C0] [ 230.616581][ C0] [ 230.616586][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 230.616602][ C0] RIP: 0010:stack_trace_consume_entry+0x3f/0x280 [ 230.616620][ C0] Code: 00 00 00 00 fc ff df 4c 8d 47 10 4c 89 c5 48 c1 ed 03 0f b6 44 15 00 84 c0 0f 85 09 01 00 00 44 8b 4f 10 4c 8d 77 08 4d 89 f5 <49> c1 ed 03 41 0f b6 44 15 00 84 c0 0f 85 22 01 00 00 45 3b 0e 73 [ 230.616632][ C0] RSP: 0018:ffffc9000b517158 EFLAGS: 00000246 [ 230.616645][ C0] RAX: 0000000000000000 RBX: ffffc9000b517260 RCX: d9c563d75d3fa100 [ 230.616655][ C0] RDX: dffffc0000000000 RSI: ffffffff81843988 RDI: ffffc9000b517260 [ 230.616665][ C0] RBP: 1ffff920016a2e4e R08: ffffc9000b517270 R09: 000000000000000a [ 230.616674][ C0] R10: ffffc9000b5171f8 R11: ffffffff81ac3820 R12: ffff888025e1bc00 [ 230.616684][ C0] R13: ffffc9000b517268 R14: ffffc9000b517268 R15: ffffc9000b5171a8 [ 230.616696][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 230.616713][ C0] ? do_exit+0x648/0x2300 [ 230.616731][ C0] ? do_exit+0x648/0x2300 [ 230.616747][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 230.616763][ C0] arch_stack_walk+0x110/0x150 [ 230.616782][ C0] ? do_exit+0x648/0x2300 [ 230.616798][ C0] stack_trace_save+0x9c/0xe0 [ 230.616813][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 230.616832][ C0] kasan_save_track+0x3e/0x80 [ 230.616848][ C0] ? kasan_save_track+0x3e/0x80 [ 230.616863][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 230.616879][ C0] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 230.616897][ C0] ? kmem_cache_free+0x166/0x400 [ 230.616913][ C0] ? __put_anon_vma+0x12b/0x2d0 [ 230.616932][ C0] ? unlink_anon_vmas+0x503/0x670 [ 230.616950][ C0] ? free_pgtables+0x72b/0x9c0 [ 230.616961][ C0] ? exit_mmap+0x444/0xb50 [ 230.616978][ C0] ? __mmput+0x118/0x420 [ 230.616989][ C0] ? exit_mm+0x1da/0x2c0 [ 230.617019][ C0] __kasan_kmalloc+0x93/0xb0 [ 230.617041][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 230.617058][ C0] ? kmem_cache_free+0x166/0x400 [ 230.617076][ C0] ? __put_anon_vma+0x12b/0x2d0 [ 230.617094][ C0] kmem_cache_free+0x166/0x400 [ 230.617113][ C0] __put_anon_vma+0x12b/0x2d0 [ 230.617132][ C0] unlink_anon_vmas+0x503/0x670 [ 230.617152][ C0] free_pgtables+0x72b/0x9c0 [ 230.617167][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 230.617182][ C0] ? __pfx_down_write+0x10/0x10 [ 230.617197][ C0] ? __mas_set_range+0x12f/0x3c0 [ 230.617217][ C0] exit_mmap+0x444/0xb50 [ 230.617234][ C0] ? uprobe_clear_state+0x20f/0x290 [ 230.617250][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 230.617267][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 230.617285][ C0] ? __pfx_exit_aio+0x10/0x10 [ 230.617308][ C0] ? uprobe_clear_state+0x274/0x290 [ 230.617324][ C0] __mmput+0x118/0x420 [ 230.617337][ C0] exit_mm+0x1da/0x2c0 [ 230.617354][ C0] ? __pfx_exit_mm+0x10/0x10 [ 230.617371][ C0] ? rcu_is_watching+0x15/0xb0 [ 230.617385][ C0] do_exit+0x648/0x2300 [ 230.617403][ C0] ? do_raw_spin_lock+0x121/0x290 [ 230.617420][ C0] ? __pfx_do_exit+0x10/0x10 [ 230.617440][ C0] do_group_exit+0x21c/0x2d0 [ 230.617457][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.617471][ C0] get_signal+0x1286/0x1340 [ 230.617490][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 230.617513][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 230.617538][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 230.617557][ C0] exit_to_user_mode_loop+0x75/0x110 [ 230.617576][ C0] do_syscall_64+0x2bd/0x3b0 [ 230.617589][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.617602][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.617615][ C0] ? clear_bhb_loop+0x60/0xb0 [ 230.617629][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.617642][ C0] RIP: 0033:0x7f4105f8ebe9 [ 230.617654][ C0] Code: Unable to access opcode bytes at 0x7f4105f8ebbf. [ 230.617661][ C0] RSP: 002b:00007f4106d510e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 230.617674][ C0] RAX: fffffffffffffe00 RBX: 00007f41061c5fa8 RCX: 00007f4105f8ebe9 [ 230.617684][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f41061c5fa8 [ 230.617692][ C0] RBP: 00007f41061c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 230.617700][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.617708][ C0] R13: 00007f41061c6038 R14: 00007ffff4914dc0 R15: 00007ffff4914ea8 [ 230.617722][ C0]