last executing test programs: 27.6485273s ago: executing program 1 (id=3282): socket$netlink(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xfffffffe) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000080)=0x4e) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x4, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d68d0", 0x13}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000000)={0x2d, 0x1}) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bind$can_j1939(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) splice(r4, 0x0, r7, 0x0, 0x4, 0x4) write(r5, &(0x7f0000000240)="94", 0x1) tee(r4, r8, 0x8f5, 0x100000000000000) write(r6, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.527731198s ago: executing program 1 (id=3289): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0xe8a5204a0af21563, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x1420, 0x19028}}, 0x20}, 0x1, 0x0, 0x0, 0x2000040}, 0x4004000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000648000000180a0101000b000000000000010000000900010073797a30000000001c000380180003000400010069703665727370616e300000000000000900020073797a30"], 0xd0}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x10}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) pipe(&(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0xe8a5204a0af21563, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x1420, 0x19028}}, 0x20}, 0x1, 0x0, 0x0, 0x2000040}, 0x4004000) (async) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) (async) close(r2) (async) write(r0, 0x0, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000648000000180a0101000b000000000000010000000900010073797a30000000001c000380180003000400010069703665727370616e300000000000000900020073797a30"], 0xd0}}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x10}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) (async) 25.641264577s ago: executing program 1 (id=3293): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000003d00)={0x3, 'vlan1\x00', {0xb}, 0x5}) 25.436932732s ago: executing program 1 (id=3296): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r3, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r3, 0x4) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/53, 0x35}], 0x1}, 0x7fff}], 0x1, 0x10000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r5, @ANYRES16], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r13, {0x9}, {0xffff}, {0x13, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r13, {0x9}, {0xffff}, {0x13, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) r14 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r14, &(0x7f0000000140), 0x4924b68, 0x0) (async) sendmmsg$alg(r14, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x54, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0x537c1f47}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4850}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x54, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0x537c1f47}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4850}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1e4, r6, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x1e4}}, 0xc0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) 24.742382803s ago: executing program 1 (id=3298): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x20050800) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x383800, &(0x7f0000000140)={@align=0x6, {0x4, 0x9, 0x744d, 0x4}}, 0x10, &(0x7f0000000180), &(0x7f00000001c0)}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001600)={&(0x7f00000003c0)={0x121c, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf28b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "e79f428f55db7ad1c1e7b30203ba32dcd69e050e688644169e35ec56a032d5c2351164"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "02b7be8278be5c448e8c08c053c641f61b55ce7d3732a9"}}, @TIPC_NLA_NODE_ID={0x47, 0x3, "e2de508b8921e8311f3801d15b90c468f58e39fbdce1c76300064b4e5723181a8722c71ac048976dca24de53a3c8900144edf86b4c727782739a96d058c8ac5912bc1b"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x87}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_NODE={0x100c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "65e42b9ccef0fa6622ad5e4dbef24d5ae58cf7a92e4f770c4b3fddd388c3839795e9e9bd6e04726b5371a540e332025901ad1fc78c22016176319a407cc71229602000a269dd6f62cb389c794a95bf25ba02506a2d51b635938f28a4e903305173157cafee744f80857dba6818f2ce39cb42c13951b18ec8df87de1e9641a00af30804d66e7e6aed64d06e8a9095765725bec95c36e1ac0af797a9d29a61edda70d4653fa5bc9e3e9841ab905811897b39681698349ae05660f16314980dc2f6a4bfb2576ea634e29cde004e7ff5498bf95482d4d36fb3a67bac7f7ce42148dd22f373708091debb56681b65c22802acda6238a711dcad028c4ffe1363b2a7c52e900cafaadc79d5b9cfbf74320c2386d49e0724a47254e18d058452a7c195086b6add86c52ee2d5fcbcc80e2932f1fd83a3ad1d76f52929526043b40ac5d0090dbddfa13afaf4277fbe7c0e36e9ae349831218891c30eb9ca217e466f879ea787ff6d33f6e7a08c11b328e7491d89b75de0791c0b4157ec5afd63dbbc10c923a4823542d58f116eacf8ee9a2e74cbde3ad1ec31ee8bad63e642f4d1683406b2e90c5d0ceb8bbd27dbb87f5cd49e1b1fb646726b4e0e42e255367797e6f9445e3e6f797b05def6677a9c79ba2795ded6c2b9f3b40e2c28aca0f8228eda88b69d513a4b9d29a1edebd8254aac8b25298cc00044fefaa17910db8f6aedc152ed6ba1699b3484f3a31003929b4d6a86cac24c5058276ff273e79fdead1218fb9c25cbc297737017ead755289b55ab706dee1b288665d87d695846e87e2d96f54fcb0891376d4d8d830f1f594bb640491fed19d3725e663503392ebfeacf85527d1318c4ceef798b2a3066296e3d39bce284347ea89c836ef3ebcbee86b0aaccb41fa0469ee7207dacaa5d003e470ebf69cbd1c449c265d6f1879f47386b62409d2bff3b74550e5ded789c82bb3e672759c1b53a778b5ea1c050b7045c685f05f08f3533f661df9e8fc85f109e8f89b4320fa100a8cb2d94a7d6ee58bb0ffbc79fd2dec790623379198d7d0e83b22351dfdb5b1b96817fd6ace48281f7e50d78ff99602640e9bb98e012528620c3fe4bce26d3b802d0ce6549040266a7335a2d7d6e81ffa8c6cda4d40fc59f2c2d076186957a4e966ae224bd6583d4a48077f44d90e28e9806f7b738c0c1614e405699a12a2d4139494afb90105f1e6caf68e80e4e7e26831d3ae00abd08ee341ddba8d951b120e87262cd6db735ea7c16fecec54eef12056dca6543f0a894fdafe39cc938c24e6314dd4aa6ff0ba1b5480cdfc87688b06583bd59fe70461b566f551074365d21c405181d16b8991ac92ac505cfe1c0226d6d72fe2ed204dfeba686e8bc4d6faf4f01a2378aeac5c3eb5ba053d8d792d7427e5a3e0353cedcf3ea84c6a6d9a3caf87eede0dc00cf71e0ebe72a04c8e8b827810d3dfd889d02decc842998b6e0d3918ff8fd7b3549c91e06bc43aa0c954d3408afc5ccc3a17b20cec83904402875b3b6f2f6517508e82d07b5bdfed8d0c5ebc00cd00f958bce8130a5a0800d91268d92a871c814502c4e109343054394c976bd3cee0c93a2fb6bd73533ab5b9fd64df30faec7a99bb6014c1878cea414499359894ca5c3dfd13f28866cbde0767577deeb34be89d926c193a53267d2cafabcb1a26159c6585758f6922ccce24afb0ecbb8c0932d3031ebdbc2d2248dfa2c113d91424d7ce2085703e7a88a046068bef0db66eafac08a8f96723a075d930d97707f4fe2e8ea040afa1a0a1ea99bdb99a8544cc6a29b0748552a21f2a515172007dbdb5878838aaf471341ebba025f448523ce8eb58df96a3dd174b8cee9d734712d87c6da46e859a8baef524b0c3e18619c569cba1c5d8b1b96680be207b8d8e7300c83ce848b9b5058949959f367476b96b8b4921783b48ea8a53ae034d210482b88841a9b70ef4d5c6169d8fb9699452386f20efa492ec504b3a22c5a479c1a98e4be8d49c7e308ae9f0e48f2aab3767d46b228988452b61cd3fda06e0f7c6f9524f57feb2867172d475d9414034406ac3271b9e4c406c1dea17a4a08cd1849abc37d9c1b644ec7849b24d6aee39e730bfffa83675f1e56d2acf6791666d689561f56928ebe3973323c73caacf72274ba264eed8aa04d17d9e280a75a015f570253bd0cbef1779e669f584fc6d91c3824f294f2934db5754ce222acdc70ccb78351a09294799ff1268ec1287d39d8d7a8b8718c9e3143fafb93c6e5234fbc73a09faa6b970f470fe13c42aeadff36c6c70d0c53406476827b5d5d81121be955a994415194f54f38b7415c1bb3c5610846a6becde4b976ab90066dff26309e480aef4a94891b18f7fe09f3caa20efd8e11e95ac67676ce99c6ad77df0ede6bbf468ddc3df719b4f7579ce18ec7fba224e05d3846ab3a38fa5a328af15e8ac181f5b9c614b44f9b3bf48afc192056c128f8736c18521cb1673f5240381f413d28c0b0c2da54a787a4c3908c6def8e44c2bd14a830b84f51dea69a0f3dc568a9c4d614eca744e296df43a6c5cba268cc18179580ed3daacc39708b2c537cd816ae7b726f77faeb509c1dd7e683159b61a81d6e4b611c240f122b2eec553614aa58268ba05c90a82b5e041a3c62c1bcf811c066424572e0647131d4e257c6cd0712a1208690ddefab89c3661760e056a00c23384ace4bff3221ac701046f2e7378f900c8104b63e61319ae3517a3e3e913b9fa7aa66f11537ae5f0aebfa837af62e9a95b8de5212c7272d5f076b46554a0278fb1ff3c1aba85d9d927d1560d744cead6478d3b69a87945cc40b8688f7cfe407e8c7c05ee315a0ef97b65760bd71590db600b5e036255f074e9a33e3d2b8ba6e73d85b5fa75ea378c030fb7d6bfddae6b394945820677f26032f2340096f56f748ced06b4aa47580bef0ce99bbb278dc95329b528c7150d59561db361a4b21ad76f5d7d7184222491450fde9ec24b7c77400d91f5698424f9ef9984d5889657e75782bfcddbf054185c196632114fa647d730136e97ecb108a24a830e2062b05361219dd9365f86ce613f4d0ad0d245dc4cade47ebf059b06e988d80cbbee04702981f36fa385dc461c875cafab231da49124175392519eaa1b898faba40bd3ba7e8f842c89442848be119872fabf496b94cb3e810e3609ff9ad30dbc2e08a746b325d8c2d46189acac431b62640dad4527c51dc76db14a9e26259665e4b8243677c772caecfeb0d7f2da8124e92ff484ab0cf74149eb640594ff7f71f90de381ef93fce901ac1b1b0f58dae028b640fbd5c8320078698ff7cd811245ae4aaec48ae84b703f4b0a215cd811c73420cd170504a7e5ebd05b2d681408b2daee2cb70a4b92971353edc5edcbe00f71d5f7a6a1cbd0d93bc03ab065064ff30392b90e46ab0ab0323ee563ddda0814791829d75ae0c052d3082cf5369289031552b93a926e70356fe1c879cc4cfa22a23e56be85e29c762583c7701c38931c20c72981d8f8522daaa57edccf97e6601cde2ddc137c6e8ee5258a99cebc170273bcf2ce18798b31b3290d0af40a01813517097f670e89bee5fe1fbec44026f4861e0827eb96e6713243b1e95dce5d35c8ce617fb46ce89f3d6fd4b14eb73fe5d500afa673e727b1c713c48bd6fb0cf3bed3d42b0f1b0da56257786bc377d857ee6934cd77eba6635a87530b6d439ce96b4f160ecfe8ebbdc63fbfe3c49b154d52eb17faacbaff1dd0236c6e2d2feac880894956004fcd990f05b420c821cc8704d14a7483b8808b1083dc19cd5e920b2a815c1c280bd3d1c53f884b81813bacc683ef8924c85254750799720505314b4e91c9f9383453d9b994dbb803411282b8fa25be4135b0687679ac1399827aa46bc71ef0b1ec56ea0a6bbe1117529616d2dd319f0da14594de6bf3fbc90bc6e7e4c9994f7c0ce83a374e2fe693dc06bd7f399722f16a7e3d44c2443c4620efd22793c2a94c02fa78c2c0fdcd62ed69f141ac78d00f488971e365a892d2d72a2a951e7c3471b26825e7c1135f6ed4b72afc662a9750e7edd216ec0414aeeeda4c658bae5c9285a31414a5257920f3b981a18f759dd642a3d8bc8707a2be55b00e6d476fc307a3fc38f93429015dac91e3c6740b28f9fd28df452a20c3899301e53d45dd204cc5b908e4a08ba9aadf944045c945e6f4738c031cdf60e51393587fdd93aae49ddcbe3e34c02501861db81c297b58d434dacb773da76ac973f3508458b0a0c78a121eec38a13a1129e9757e4714d555abbcac9928ffcf9beb1f670f2efca48c7fcdf4289d0b612a9e420edc4a9e043badec32582c0fb7ec238e0ea8ebd5f82d159de093b11c425064e93d10994115ab919e20952e31adcd65595d86df6f889c4c6dd77ea76dff674ee9e9ade787dc84adfce41b5ee4dc17596065ec41f5d591a5eaa6d3d026aad864d5d3505a6da399e378f6e557c68e73477e398240030f29faced1e14891484659fe3b950f0cede3aa2f55c35ccdcffffc6a9040c7aaaf1a43f7a29b36bd95f43b51eae05e6213450bf329138047bbe8ed37c90f8f6bd815dfe0314242ccb3357038d0bb5ae58e579f8cea9e61913e522170d6489562d159140263da8ce1c822eb408a5565a33534801a9d3f7004caf76fcbe49fffa330fd618f9e61c8a13b512d26cc3d931e85d954c2127920367d762fcf8d5d7e14974c6001c5fbfcf7b7cb2d4600b7a301943962c5f6571d6d2fdbe2df9d98d7a841c787f8883af0dc52b5200b70205400fe863d9202a5ea9b69c87315d1ce7780c7588196372b597edb6ff3501dd525d928d6fc1417eb961462e0f954a80af42d06ffacdde1c9b65593e160b17f7b2ec8e31e728440b556e1241b2d7418d0a38b316f9602554d84701d3ed4b3859ca6e241fff231d9c9773ac244d315ae407c0cceb5dabf074db8a5c0dcec96b97a9ef509be6883c8edd94a7f718b30374df2bab885fb8bc5e3d28a929c0eb364acbc909bcb464ce1b904bda551b5fd35c7ab32c371fa491381effbae65c7040c3a69459a3570ed82ab3139865ee4859699c13df313a61300574945480383e7dbb6d8c6e8dc173b78f3a357c12bbe8dda697843d91e4b71b23f08477e59c5585de4bdbd0dfd842481a12ac0784dc4871aaf1d088d6e5431ba9fa14bc5f81a71e22c6c7bcc7534c3fe532b115b0eedf20909bb1df63e64dcb7d8f7d874c7da3665414c19c8989dcd73000b5413094abe384eeab7552f7c49f2e8234658730517120058800fef5c8a2da432608776af3a9fc7828c83e7da9915a9e01213271ab67608be2fa6b22ec1946f144729084b1629098d9e2f047d3a65017f2190d96fc6c5364ae09e52a5515f22a1928a9ef69f042c475baadfc2f8d818669aa1d0b3a0ed8439ce87df75136ca3d99bd49bad90039ba6416b6a25a23fd567f46f0687c530e18f5f9582a090a161e877a769845a306119aa1ffcde8b1605e56b7aac6c48e3301cad785938e8b12243c33ede15b9f84d87feaa6f7d12965a526611957480c4adbd92e1d23076aadad62ec1f5c7a7df5030f3b82c770acfeb5ad2dc8854feb9bc1b4f5758f46b33c53627b457a767df3cf99de15081160873ec5e194304cade9c4fe94d92c17effdd838d1edb88e6e589912fd8918593a587131dc08ad6bd1fc5a0bb537ffbf284abbe53031c7bc2b16a25c52f4380108b4ab4b83889c9ca9147d260aca188cdefcbf2a34cce5d889778c18c503464faaee392ced15f427c2bbb1e895b9d119cb24f5328ef84f651f"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x121c}}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c"], 0x92fc}}, 0x0) 24.267950285s ago: executing program 1 (id=3301): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x20000810) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r1, 0x100000000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001) r4 = socket(0x400000000010, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000d80)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB, @ANYBLOB="050053000100000008000500f1b9e300"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r7, 0xffffe000) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000580)={0x0, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, @rc={0x1f, @none}, @hci={0x1f, 0x2, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x10001, 0xbed, 0x8}) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) writev(r8, 0x0, 0x0) epoll_create1(0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) 7.015065607s ago: executing program 2 (id=3376): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) listen(r1, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001cc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001840)=ANY=[@ANYBLOB="1c040000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="9801028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003c00010024000174730bca1b1c58d46e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004002a0b00006c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000000dc4026ee0000080002050900000008002304ffffffff00000909ff7f00008d000902ec0b0000000002027c0f0000b608cb057f0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="01000100", @ANYRES32=r3, @ANYBLOB="b00002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000008000100", @ANYRES32=0x0, @ANYBLOB="a801028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004001f00000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f759ea769fd440592fc5f786e7400000000000000000000000000000500030003000000080004000100010040000100240001006c625f706f72745f73746174730000008b5c4b00b1843982dadd2e00"/116, @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x41c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b4040000000002", "bb6710bc8150e4a1a117d7b27caf00", "b292287d", "18919f33fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x100, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) recvfrom$inet6(r4, &(0x7f0000000080)=""/26, 0x1a, 0x10160, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x68, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000000108000240000000092800018008000100667764001c0002800800024000000017080003400000000a08000140000000090900010073797a3000"], 0xec}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRES32=r0, @ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x2000009, 0x1005, &(0x7f0000000700)=""/4101, 0x41100, 0x24, '\x00', r10}, 0x94) 6.516936922s ago: executing program 2 (id=3379): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_ethernet(0x26, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newtfilter={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {0x0, 0xfff2}, {0xffff, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r9) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2000000016000d002cbd7000bedbdf252e7c00000c00018008000100", @ANYRES32=r13], 0x20}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 5.450547977s ago: executing program 2 (id=3385): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) unshare(0x6a040000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040884) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r3, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r4, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003f00070113a769d500000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 5.148362627s ago: executing program 0 (id=3388): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000400"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x18, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYBLOB="6cc1bf473eee37c2a60885f3912114fd902f6a8d660084fd971bd3c7e4dce201fc754125b405f057e10d54db8f45a0c1726248765b63471fb7432d8492f4591c4ad8a2c8eaf1f965c1ea388df1c296afaf8c63ed39a257ffa1475585495270bcd620b6099b867bb3a2ff981fd4efbefb0044a6a7df4bea8c6056efaa090916f1822646a90009aa63ea29c6d1d3fb19bcc377731fa47b32a966f8def6fe", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x4008001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000340)="ee", &(0x7f0000000000)=""/6, 0x2}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73229c", 0x30}], 0x1}, 0x20048020) 4.342366265s ago: executing program 0 (id=3391): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b0110"], 0x28}, 0x4004004) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 3.97967095s ago: executing program 3 (id=3394): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) unshare(0x20000400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x110000014}) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf252b0000000c0005000200aaaaaaaac2aa0a0001007770616e31000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2404c004}, 0x4000080) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500030000120800040043000000a8001600a400014020000700ffffff00004dcf5c0461c1d67f6f94005834cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb79164", 0x85}], 0x1}, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) (rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) 3.457249604s ago: executing program 3 (id=3395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000800030000000000140000004500005c00660000000190780a010100ac1414aa05009078e0000002400b0f6c0068d41105574af4854a62605d010101442caf63ac1e010100000005ffffffff000007ff00000000000000000a010101000000030a01010200000005"], 0xfdef) 3.330490844s ago: executing program 4 (id=3396): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600080001fe80000000000000000000000000001200000000000000efffffff0000d00b000000000000000000"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000210"], 0x18}, 0x1, 0x0, 0x0, 0x4048014}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}], 0x18}}], 0x1, 0x60cc887) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$unix(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/117, 0x75}], 0x1}, 0x10001) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000680)={{r1, &(0x7f00000001c0)='cbc-twofish-3way\x00', 0x101200, &(0x7f0000000200)={@align=0x5, {0x2, 0x9, 0x2, 0xb5}}, 0x3, &(0x7f0000000340), &(0x7f0000000540)=0x8}, {[0x6, 0x3, 0x6, 0x2]}, 0xd, 0x69, &(0x7f0000000580)=""/105}) setsockopt$inet_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000000700)=@gcm_128={{0x303}, "079a915467fd5a2e", "8e78452e91204ff11b68db998e3eb74e", "e42a6187", "cab7f412cc0aa6af"}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRES8=r2, @ANYRES64=r5, @ANYRES64=r5, @ANYRES16=r4, @ANYRES32=r4, @ANYRES8=0x0, @ANYRES64=r5, @ANYRESOCT=r5], 0x44}, 0x1, 0x2000, 0x0, 0xc5}, 0x4000841) 2.755695209s ago: executing program 0 (id=3397): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4800c710}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f5, 0x400, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10000051}, 0x4c050) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r1], 0x7c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', 0x0}) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xecf, 0x0, 0x18e, 0x3ff}, 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000003d00)={0x3, 'vlan1\x00', {0xb}, 0x5}) 2.506191663s ago: executing program 3 (id=3398): r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000003140)=[{0x0}, {&(0x7f00000002c0)="ca7bfc8312c9237bffa562dc1d03c723970f07a1078c261ec3fdfed5f81f4f5fe80bb3ebaa7484bfa3214d", 0x2b}, {0x0}, {&(0x7f0000001000)="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", 0x463}], 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="01002bbd7000fddbdf25070000000c00018006000100020000"], 0x20}, 0x1, 0x0, 0x0, 0xc8d1}, 0x8000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000940)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000281c96c98cc3103834b899f26bd7038fe2fdbdf252fffffec08000300", @ANYRES32=0x0, @ANYBLOB="0c009900f0502a7f31000000060036003f000000060036003e000000060036003c00000006003600410000000600360033000000060036003300000006003600090000000600360028000000060036000a000000"], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c001980080002002e"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x15) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100", 0x1b) sendmmsg$inet(r5, &(0x7f0000005900)=[{{&(0x7f0000000c40)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000002780)=[{0x0}, {&(0x7f0000001480)="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", 0xffe}, {&(0x7f0000002480)="ac47a41c1d9726dc8afd9fdcd47d0fa47d3861c59d57c1ecd454f3464498586f1847b3a27ee39b1f399c2409e9896c091b88e207a6a9051ad4170a01719e96b54a45703d5f7cb165a0574be27627e2c220f0d2d6a6dc28bffa7596074f76d424d9ab2802d5cd977a11a434f818c8ab4688f145905bcd095f4d88f11d3e40c49d8bb6030c80c9db406dddd3f0003dbeaf16334dc807d5c0b23512b6ce8da3fff783b7c6050d9bca3e3ea5c763dc098a87f67a722526642cc6130bc30a366e0ebfaa5f8854c77b48c513adf3a7aff1bbde7d1e950cf0b097e2f61e8d864f8f588f5c1b206715f435a5aa", 0xe9}, {&(0x7f0000002580)="cecd00c5c698a1ba2140a9f00d554db371afe72b0425abad0124163cee4d02db05fe4735e6ec44e718481a24b6ce7dccb12150881f4c82e394459544815c438fc757fd611ee16228cb7f15118ad60aee47963f30910896354b7db74c3db05ea44cee4f7a8602", 0x66}, {&(0x7f0000002600)="59e4d3d93019194ea1a9a9fb9b1d9c978bda90d1f3b2cef576446115c3d78c0f64cddeeebfd1641504fed9d71df484459e478b794725412cc89c1b5b7ccd35a10e8a", 0x42}, {&(0x7f0000002680)="31bdc23c9e8a9acb06dbafc37f90642a18c303679666a426416d2374dd6d13fb74fe2daffd1d19314953939cd7f73c9d333300b6d5", 0x35}, {&(0x7f0000000d80)="bf50033c7c821bfd40a47a79829c39ef221aec1da875676dca53f3f0294b687c31f7e7c843df75c9e8adc31b6330fd794f78b005573a4241909b9c5941006c192c8327d1ebc6df4d55afabcdae7811f46e36e176a98b5005b7dcff8e3e5ffbbca3d33ccff24f1a185746e0c8649db92ed93085b420a589046fa982abdec4da28ec1510a589ac9725cbe602e76b8f29f8c45c69257ce0fcbc28647f790ca8a7025b478581d7ecef565a7f8aebbf9128987788db0623f59cef40b9836f33b9b545c208cd664de55ca9c8655670aa83077a13c8bbee820eaba1a06e1134859146640e0a275d69064b41349d51418d5d2013f40ddf6190b08f80827f387c1cd2d42931eddf89ed4e6aaf7cf3ebc9e17a6cf43a4dd8b699350f2cb3657ceadbada7ecd13d705a87555805b4f4a6b9736630ac9fd773f791e7fde4207c7a8fd33c554c6aefc8e70c732291b5ebb4b9e22c86ec034d933db7fe5ae20172f6ebb53b1b0db8a1e79b160000000000000000000000000000000025", 0x176}], 0x7, &(0x7f0000002800)=ANY=[@ANYBLOB="14000000000000000000000002000000060000000000000060000000000000000000000062b87dc20f9c5d06d307000000444c3671e000000200000003e000000100000001ac1e010100000006e0000001000000037f000001000000047f00000100003e6764010100000000087f0000010000000364010102000000088303dc0014000000000000000000000002000000050000000000000014000000000000000000000001000000ff7f000000000000380000000000000000000000070000000711be1e01261c34bfb3e2e4fbbc310601071385ac1e01010a010101640101006401010244043851180000000000000000000000020000"], 0xf8}}, {{&(0x7f0000002940)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002a80)=[{&(0x7f0000000640)="71234ec805773b128951cf2564af043d0bf131d585bb0ede940210512db2a022f8ef7118e696f6cb01289585303d04e9db13fc8696254d7afdcf1adab6e2225ee38b948b0d2cee55d754871f2d289fc6237a3696cf6bfc8c0102963b474bb99d547af41be8f15f8a5b9decd159d002ddc3af96e1c23d64eaea764cd0a8144426cde1b8b0461b86fedd32383cc3229f6134fe1535c8278acbe967821c39ec0c57e4343beeeb35699e1b359f1586b1f87d6e046298b6dab023897536b3a23b859d44f292939767b0eca8b0eb1929e1d94e0b6f7e377f1d60357bc8b28eedfb4d8c72deaf0adb539dcd00fcae0b57f3e825", 0xf0}], 0x1, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}}}}], 0x20}}, {{&(0x7f0000002b80)={0x2, 0x2cd5, @local}, 0x10, &(0x7f0000004340)=[{&(0x7f0000005a80)="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", 0x1000}, {&(0x7f0000004180)="76554fba22303b4bc732f39391530e1ea9508a529209ae12619d025fe0ae9760056b895d8f6f841595cace87db050422e86b64961d8f824d684e175dbb5952e6c3a2243174914eb83172274e83ee68565675651cc50511bfc464e956e6bd5e12658a63fcaf72652b8ede5dc5d2b118defeeb7f76cadf6624a2aaf0689b17339ff3f16ae2572c1c43874b1c9da4f49d0ba4aae4b01d4ee82c096b3abaf3d17439fbcc4c4d622474f84e89a89151a7c212c8624e93e123700e74111801fcf7d20ad2d2d57530ea12bd9330b946b60648237036cd45", 0xd4}, {&(0x7f0000004280)="fcb0268503c55008c836325423760ea2179154344a85efd7f257a41caf3c16593767e587fa", 0x25}, {&(0x7f00000042c0)="4c4a058db506f38e", 0x8}, {&(0x7f0000004300)}], 0x5, &(0x7f00000043c0)}}, {{&(0x7f0000004540)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000004600)=[{&(0x7f0000004580)="2f7de529282174a9e0dbe167a0e20ef7c44477122ca73d55976c1c62e99195c302dc23eb28f9b30a81bffe4d293cfac91af838e19c3ca409d72c73d0ca38f9dee2cf2c", 0x43}], 0x1, &(0x7f0000000600)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3c}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}], 0x30}}, {{&(0x7f0000004680)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000004840)=[{&(0x7f00000046c0)="a3ac25ec0d0b0ff7ba908db043a6f7def94e69f3a949188b10fa18f60c7c39002bb851d39a1e", 0x26}, {&(0x7f0000000540)="c94158b83897b7285e7706eb4f364163125be0a10271c0a97ad8fe6fc54ab265288781b23d9ceca9eb0458789f628b3ea8149acdd6416d5f3e0d145624bf35e68e0a779e98107668afc64acc6ae0acb126e319e296191520fe7d7fa659ab39179be4aa44fd2c8a9b117d21fb1125492dbda01b55add74471e6f6c9d8b0d13b8815dd", 0x82}, {&(0x7f00000047c0)="4348266df9da7313ff24ea854e2def96440d971f1fb1ced6b4a0f5cbe5ec2a8d3b9b30f2c37a651a08d89d1521caa0abfa1d4518f33bb5fa9ae695f21d9cc454b45ccc07a4d9d89f1f87042e32208bfeaa9e9302585ff25777cb7bf3aa", 0x5d}], 0x3}}, {{0x0, 0x0, &(0x7f00000058c0)=[{&(0x7f0000004880)="0d2e50c30b1eb2fe90131cc5fe1bc891d59e3a5053178ad6a663c878974d0868ceddf09878", 0x25}, {&(0x7f00000048c0)="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", 0x1000}], 0x2}}], 0x6, 0x40040) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000ac0)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, [0x8ee, 0xfffffffffffff42d, 0x2, 0x8000000000000001, 0x100000001, 0x80, 0x9, 0x5, 0x80, 0xaba, 0x2, 0x7, 0x5, 0xb, 0x100]}, &(0x7f0000000bc0)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000c00)={r8, 0x4}, 0x8) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00']) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x90, 0x43, 0xa0, 0x90, 0x98, 0x988, 0x178, 0x178, 0x988, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0x7f}, 0x0, 0x1}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'\x00', {0xff}, 'veth0_macvtap\x00', {}, 0x8, 0x15}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340)="8e6b373c083a4aa28e5588524a41399bf5fbb0f58b843bb2980b248235f47fbd138ca6f66ab492d8720f7d", &(0x7f0000000380)="e1c265e436668d5b10d71843fca2a234a96c4ba30436f6", 0x80, r3}, 0x38) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000608b157ccddd5b3c00980a000063a16800000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r10, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001e00010025bd70220400000002000000", @ANYRES32=0x0, @ANYBLOB="0000080014000100fe88000000000000000000000000000108000800", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025b57000fddbdf25110000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2.092937246s ago: executing program 4 (id=3399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, 0x0, 0x4004840) 1.85748959s ago: executing program 0 (id=3400): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) sendfile(r0, r1, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0xfffffffffffffffe, 0x10) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) 1.730094236s ago: executing program 4 (id=3401): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="a03f030100008005d25a806c8c6394f90324fc60100000000a0002", 0x1b}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x2, {0x0, 0xf0, 0x2}, {0x1, 0x1}, 0xfd}], 0x20) r3 = socket(0x10, 0x803, 0x0) getsockopt(r3, 0x1, 0x13, &(0x7f0000000140)=""/63, &(0x7f00000001c0)=0x3f) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r5, 0x700, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x2b}, @GTPA_FAMILY={0x5, 0xd, 0x2c}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x1e}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000804) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, 0x0, 0x0, 0x41) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r7, 0xe09, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={&(0x7f0000f4dff4), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x54, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@migrate={0x4}]}, 0x54}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x81133573713dfe30}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) 1.72960487s ago: executing program 3 (id=3402): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x1) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0xc9, @mcast1, 0x8, 0x1}, 0x20) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000000000000000000080008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000200)=""/76}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000140)={0x8, 0x20, '\x00', 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0x67, 0xc7, &(0x7f0000000380)="3ade073fb864aaf39fe3b58ebd3b6ee512b6787151bb6bff2460a12ab99411ffde27e699a843547cb68dc0a21ae15680697f29787f289c39c5ae0687a68659d8bd570571fca1cfde3cb0b0adcab715ff6785251c20cf6b2be06d1e8175b5e8c71cc0c6563dfafc", &(0x7f0000000400)=""/199, 0x100, 0x0, 0x1c, 0x4f, &(0x7f0000000500)="8a522c8f61fe0de02bde40153d5fe9dbd193d94b60eeb43c73a1f7ca", &(0x7f0000000540)="6a437085b74a9a0d7272cf5e6704ac5cb8d104a8b35c19ef35e6c91c701de6dba1bb3486bf81a94a7396579df1a24061349fd4570c0c04c53044ca614c9dde1c692600d89fa47175b8132705bf4f6b", 0x4, 0x0, 0x2}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) listen(r0, 0x5) getsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) 1.404212582s ago: executing program 0 (id=3403): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68c1}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x3d, 0x301, 0x70bd25, 0x25dfdbfd, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x80) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f0000000140)="5df9b2aca868163b6fbc2abadafe627ba38014e7a4c261157f38caec97fbe45a57068366860a9f86511eebd9255bf9210135512a17e9ad6b66debe118c2e25", 0x3f}], 0x2}, 0x8084) 1.227559521s ago: executing program 3 (id=3404): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f00000002c0), &(0x7f0000000240)=r3}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8864}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3, r3}, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', r5, 0x10, 0x0, 0x5, 0xb36, {{0x1b, 0x4, 0x0, 0x5, 0x6c, 0x68, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0xc5, 0x3, 0xf, [{@empty, 0xc}, {@remote, 0x40}, {@broadcast, 0x4}, {@private=0xa010100, 0x7}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xe0, 0x1, 0x4, [{@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0xaa1}, {@multicast2, 0x8}]}, @rr={0x7, 0xb, 0x95, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="8803000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08001f0006000000"], 0x388}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.158585583s ago: executing program 4 (id=3405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000000000090702000000000000800705", @ANYRES32=r3, @ANYBLOB="0c000180060002000f000000"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0x415034f1892c1116}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r4, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r5, 0x29, 0x1e, 0x0, 0x15) close(r1) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000000000090702000000000000800705", @ANYRES32=r3, @ANYBLOB="0c000180060002000f000000"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0x415034f1892c1116}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bind$inet(r4, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) (async) socket(0x2b, 0x80801, 0x1) (async) setsockopt$inet6_mtu(r5, 0x29, 0x1e, 0x0, 0x15) (async) close(r1) (async) 791.857352ms ago: executing program 4 (id=3406): r0 = socket(0x2a, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000200)=""/254, 0xffffbffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d04000000040000000400"/67], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0x0, 0x1}}], 0x30}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="02ffffffffff"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x2070bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$XFS_IOC_FSINUMBERS(r4, 0xc0205867, &(0x7f0000000100)={&(0x7f0000000280)=0x311, 0xfffffffe, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000800)}) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-'], 0xfe33) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 746.953524ms ago: executing program 0 (id=3407): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x1, @empty, 0x400}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000080)="c3c2337ff820853bbf86b2a80c4e190b3ada86b64ec4ff7758a05d2e13ddc8252429d56af3bd", 0x26}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804) shutdown(r1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0x0, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000200)={0x4, 0x2}, 0x10}, 0x94) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0x0) connect$x25(r4, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x0, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@ip={@rand_addr=0x64010101, @private=0xa010102, 0xffffff00, 0xff000000, 'vlan1\x00', 'gretap0\x00', {0xff}, {}, 0x2e, 0x0, 0x20}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="15a24a833c2a", 0x4, 0x4, [0x4, 0x28, 0x38, 0x2c, 0x3f, 0x15, 0x7, 0x13, 0x1d, 0x2b, 0x5, 0x1, 0x3, 0x8, 0x18, 0x27], 0x2, 0x4, 0x1}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffffff, 'veth1_to_batadv\x00', 'bridge_slave_1\x00', {}, {}, 0x2e, 0x0, 0x1}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0x80, 0x1}}, @common=@ttl={{0x28}, {0x2, 0x8}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@broadcast, @empty, 0x0, 0xff, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {0xff}, 0x0, 0x2, 0x61}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r5, 0x0, 0x40c01) socket$igmp6(0xa, 0x3, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000e00)={@in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x0, 0x0, 0x17, 0x0, "e541053d3aa600000000671e8abcb31c134f3a9300000000000000039f35ac6318267244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, 0x0, 0x0, 0x4d, 0x0, "e8eb94e33628290046228c8db144b8974951c8357aa975414eacd02afb6c0bd70e1d2b12f90e4aed00ac34713c534c814626d9fafd1e198c36aa24ecc1595e19bf9ebf5e34227a0655e74e27e1c35eea"}, 0xd8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r7) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 647.020012ms ago: executing program 2 (id=3408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000340)='%+9llu \x00'}, 0x20) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, r3, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x84, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "08342d80348e44e40357112fcf8439d0623a1916051a0b8c0cf3f53eea516f98"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f127be5086aab0a9097e95a19fdd84b81c84118b0a3256bee6fa4c01867d7d3f"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4010}, 0x2000080) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000070000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES64=r2, @ANYRES16=r2], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x97, 0x1, 0x400000, 0xd1f}, {{@in=@private=0xa010102, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x3, 0x0, 0x0, 0x100, 0x0, 0x80}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@rand_addr=' \x01\x00'}, {{@in=@multicast2, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x10000000}, {{@in6=@private2, 0x0, 0xff}, 0xa, @in6=@private1, 0x0, 0x5}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0xc001004}, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x4) 458.248976ms ago: executing program 3 (id=3409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) write$tun(r0, &(0x7f00000001c0)={@void, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x1}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x3, 0x12, 0x34, 0x64, 0x6000, 0x6, 0x6, 0x0, @private=0xa010102, @remote}, @payload_direct={{{{0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, 0x2, 0x40, 0x0, 0x3, 0x4, 0x3, 0x3, 0x3bac, 0x8, 0x4, 0x4e22, 0x4e23}, 0x1, 0x3}}}}}}}}, 0x4a) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001002dbd700000fff40002100000fe00ff0900200000060015000400000014001680100008800c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {}, {0xc, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 313.565029ms ago: executing program 2 (id=3410): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)={0x89}, 0x8) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8, r4}, 0x18) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000400)=r6, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@local, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) sendmmsg$inet6(r5, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) sendmmsg(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)=';', 0x1}], 0x1}}], 0x1, 0x2400c890) r8 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r8, &(0x7f00000002c0)=""/76, 0x4c, 0x40, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000800)="62053c005902002f26116642c47a5f8786ee603e65ab3c06d4b8bf4a81cb3e45af215542f41ddf8271f49a20db51c8a35d2fbdceac762b", 0x37}, {&(0x7f0000000380)="afa108d527911b4de0f924a458721f", 0xf}], 0x2}, 0x0) r9 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x0, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x84, 0x0, 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x7f}}}, {{@ipv6={@mcast2, @empty, [0xffffffff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xff, 0xff000000], 'team_slave_0\x00', 'ip6erspan0\x00', {}, {0xff}, 0x87, 0x1, 0x3, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x1, 0xfff9}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xff, 0x0, 0x11373fce58bfd62], [0xff0000ff, 0x0, 0xffffff00, 0xffffff00], 'ipvlan0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x4, 0xf1, 0x1, 0x40}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@ipv6header={{0x28}, {0x4, 0x4a}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x7, 0x1}, {0x3, 0x3, 0x5}, {0xffffffffffffffff, 0x3, 0x3}, 0x5, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 177.470713ms ago: executing program 4 (id=3411): r0 = socket(0x2, 0xa, 0x300) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/175, 0xaf}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x7}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r2, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000400)='J{', 0x2}], 0x1}, 0x2000c8c0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40c0851}, 0x8010) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) r8 = accept4(r1, &(0x7f00000000c0)=@rc={0x1f, @fixed}, &(0x7f0000000140)=0x80, 0x100000) r9 = socket$inet_sctp(0x2, 0x5, 0x84) close(r9) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x24, 0x200000b, r11}}], 0x20, 0x2400e044}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000240)={r11, 0x1}, 0x8) ioctl$SIOCX25GCAUSEDIAG(r8, 0x89e6, &(0x7f0000000180)={0x5, 0x2}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000880)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaa64aaaabb86dd60122d9204103afffe8000000000000000000000000000bbff0200000000000000000000000000018600907800ff00000000000006000000"], 0x0) 0s ago: executing program 2 (id=3412): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 64) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) r6 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000100)={r7, @in6={{0xa, 0x4e23, 0xdcf5, @empty, 0x9}}, 0x3, 0x6}, &(0x7f00000002c0)=0x90) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r7, 0x81}, 0x8) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00&\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00', @ANYRES32=r10], 0x24}], 0x1, 0x0, 0x0, 0x20040880}, 0x0) (async) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r9, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8001, 0x112}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r12, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) (async) bind$inet(r12, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="d990fe9596b6000000200000000000119000000000c9180000004e20000c907881400001"], 0x0) (async) recvfrom$inet(r12, 0x0, 0x0, 0x20, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd2a, 0x25dfdbff, {0x7, r13}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20028001}, 0x8000) kernel console output (not intermixed with test programs): ies to fit new maximum fragment MTU (-320) [ 486.299530][T15441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.311854][T15441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.324676][T15441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.337745][T15441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.350139][T15441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.384839][T15441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.455532][T15441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.501125][T15441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.525253][T15468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2291'. [ 486.544056][T15441] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 486.555251][T15441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.572053][T15441] veth1_vlan: left promiscuous mode [ 486.579344][T15441] veth0_vlan: left promiscuous mode [ 486.587065][T15441] veth0_vlan: entered promiscuous mode [ 486.595634][T15441] veth1_vlan: entered promiscuous mode [ 486.613237][T15441] veth1_macvtap: left promiscuous mode [ 486.620694][T15441] veth0_macvtap: left promiscuous mode [ 486.629802][T15441] veth0_macvtap: entered promiscuous mode [ 486.638080][T15441] veth1_macvtap: entered promiscuous mode [ 486.650169][T15441] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.660191][T15441] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 486.669386][T15441] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 486.679223][T15441] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 486.815241][ T9410] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.850802][ T9410] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.869488][ T9410] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.017304][ T9410] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.028942][T15482] netlink: 880 bytes leftover after parsing attributes in process `syz.2.2295'. [ 487.051422][T15482] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2295'. [ 487.075786][T15489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2294'. [ 487.106518][T15489] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2294'. [ 487.129583][T15489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2294'. [ 487.165475][T15489] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2294'. [ 487.809494][T15500] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.830003][T15500] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.975123][T15526] xfrm0: Caught tx_queue_len zero misconfig [ 488.197842][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 488.283723][T15500] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.305810][T15500] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.475112][T15500] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.522592][T15500] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.594828][T15536] lo speed is unknown, defaulting to 1000 [ 488.602472][T15536] lo speed is unknown, defaulting to 1000 [ 488.648960][T15536] lo speed is unknown, defaulting to 1000 [ 488.727347][T15536] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 488.824203][T15536] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 488.864700][T15500] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.878993][T15536] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 488.925308][T15500] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.972600][T15536] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 489.102995][T15556] batadv_slave_0: Caught tx_queue_len zero misconfig [ 489.185968][T15536] lo speed is unknown, defaulting to 1000 [ 489.213926][T15536] lo speed is unknown, defaulting to 1000 [ 489.253715][T15536] lo speed is unknown, defaulting to 1000 [ 489.288857][T15536] lo speed is unknown, defaulting to 1000 [ 489.304931][T15536] lo speed is unknown, defaulting to 1000 [ 489.341698][T15569] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 489.406141][T15569] bond5: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 489.437310][T15569] bond5 (unregistering): Released all slaves [ 489.694291][ T57] netdevsim netdevsim2 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.719920][ T57] netdevsim netdevsim2 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.750351][ T57] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.784891][ T57] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.817698][ T57] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.841730][ T57] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.853801][ T3380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.885293][ T3380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.067715][ T9410] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.112039][ T9410] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.141454][ T9410] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.160517][ T9410] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.244544][ T57] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.302897][ T57] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.410283][T15618] netlink: 'syz.4.2325': attribute type 2 has an invalid length. [ 490.420218][T11308] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.429597][T11308] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.453934][T15618] : entered promiscuous mode [ 490.523691][ T57] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.544936][ T57] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.650324][T15625] netlink: 'syz.4.2326': attribute type 2 has an invalid length. [ 490.881440][T15646] __nla_validate_parse: 5 callbacks suppressed [ 490.881461][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2330'. [ 490.903238][T15646] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 490.970256][T15651] netlink: 'syz.3.2332': attribute type 1 has an invalid length. [ 491.009119][T15651] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2332'. [ 491.040558][T15651] netlink: 'syz.3.2332': attribute type 1 has an invalid length. [ 491.162017][T15660] netlink: 'syz.4.2334': attribute type 1 has an invalid length. [ 491.273381][T15667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2334'. [ 491.311785][T15667] bond15: entered promiscuous mode [ 491.327845][ T6606] net_ratelimit: 68 callbacks suppressed [ 491.327866][ T6606] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 491.339111][T15667] bond15: entered allmulticast mode [ 491.348770][ T6606] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 491.354556][T15667] 8021q: adding VLAN 0 to HW filter on device bond15 [ 491.524136][T15664] bond15: (slave bridge3): Enslaving as an active interface with a down link [ 491.625832][T15678] netlink: 'syz.3.2338': attribute type 1 has an invalid length. [ 491.639542][T15668] bond16: entered promiscuous mode [ 491.778674][T15678] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 491.783091][T15686] tipc: Enabled bearer , priority 0 [ 491.927776][ T57] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 491.943001][ T57] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 492.002040][T15648] infiniband syz0: set active [ 492.011923][T15648] infiniband syz0: added bond_slave_0 [ 492.041526][T15683] syzkaller0: entered promiscuous mode [ 492.052915][T15648] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 492.056129][T15683] syzkaller0: entered allmulticast mode [ 492.068836][T15648] infiniband syz0: Couldn't open port 1 [ 492.087915][T15683] tipc: Resetting bearer [ 492.094788][T15648] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 492.131158][T15648] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 492.154803][T15683] tipc: Resetting bearer [ 492.162340][T15648] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 492.238288][T15648] RDS/IB: syz0: added [ 492.260028][T15648] smc: adding ib device syz0 with port count 1 [ 492.278076][T15648] smc: ib device syz0 port 1 has no pnetid [ 492.533445][ T3380] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 492.548098][ T3380] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 493.088558][T11308] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 493.103585][T11308] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 493.415228][T15728] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2349'. [ 493.647197][ T57] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 493.663595][ T57] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 495.696002][T15683] tipc: Disabling bearer [ 495.707611][T12407] tipc: Node number set to 4051050280 [ 495.876135][T15745] netlink: 'syz.4.2351': attribute type 23 has an invalid length. [ 496.360213][T15769] netlink: 'syz.2.2358': attribute type 11 has an invalid length. [ 496.398124][T15769] netlink: 'syz.2.2358': attribute type 4 has an invalid length. [ 496.430788][T15769] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2358'. [ 496.485035][T15769] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2358'. [ 496.625689][T15780] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2361'. [ 496.738055][T11735] net_ratelimit: 10 callbacks suppressed [ 496.738078][T11735] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 496.749284][T15787] tipc: Enabling of bearer rejected, failed to enable media [ 496.759612][T11735] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 496.768399][T15786] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2363'. [ 497.438238][ T6606] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 497.453401][ T6606] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 498.006865][ T48] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 498.021542][ T48] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 498.618833][ T9410] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 498.634030][ T9410] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 498.868201][T15856] syzkaller0: entered promiscuous mode [ 498.874733][T15856] syzkaller0: entered allmulticast mode [ 499.167873][ T9410] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 499.182672][ T9410] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 501.640488][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.651657][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.747060][ T48] net_ratelimit: 8 callbacks suppressed [ 501.747082][ T48] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 501.767742][ T48] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 502.161457][T15895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2382'. [ 502.193077][T15895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2382'. [ 502.287454][ T48] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 502.302125][ T48] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 502.510694][T15909] netlink: 203 bytes leftover after parsing attributes in process `syz.4.2385'. [ 502.894850][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2390'. [ 502.913606][ T9410] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 502.930964][ T9410] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 503.013310][T15931] lo speed is unknown, defaulting to 1000 [ 503.185041][T15942] netlink: 'syz.4.2394': attribute type 1 has an invalid length. [ 503.374164][T15953] netlink: 'syz.4.2397': attribute type 1 has an invalid length. [ 503.444130][T15953] 8021q: adding VLAN 0 to HW filter on device bond17 [ 503.467108][T11736] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 503.481915][T11736] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 503.526905][T15917] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 503.640250][T15953] veth13: entered allmulticast mode [ 503.663852][T15953] bond17: (slave veth13): Enslaving as an active interface with an up link [ 504.129937][T11735] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 504.145582][T11735] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 504.317621][T15987] SET target dimension over the limit! [ 504.549160][T15972] No such timeout policy "syz1" [ 505.083709][T16002] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 505.449969][T16017] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2413'. [ 505.783282][T16032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2417'. [ 506.279209][T16059] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.768848][ T9410] net_ratelimit: 10 callbacks suppressed [ 506.768870][ T9410] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 506.789152][ T9410] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 507.032178][T16088] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2431'. [ 507.098058][T16095] netlink: 'syz.4.2433': attribute type 1 has an invalid length. [ 507.372531][T16095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2433'. [ 507.389527][T16049] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 507.405129][T16049] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 507.498547][T16097] bond18: (slave veth15): Enslaving as an active interface with a down link [ 507.563388][T16119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2438'. [ 507.573892][T16119] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2438'. [ 507.584072][T16119] netlink: 580 bytes leftover after parsing attributes in process `syz.1.2438'. [ 507.603474][T16100] bond18: (slave veth17): Enslaving as an active interface with a down link [ 507.614177][T16120] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 507.638383][T16095] 8021q: adding VLAN 0 to HW filter on device bond18 [ 507.771401][T16123] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2439'. [ 507.791584][T16123] veth1_to_bond: entered promiscuous mode [ 507.808350][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'. [ 507.834510][T16123] veth1_to_bond (unregistering): left promiscuous mode [ 507.978652][T16049] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 507.995586][T16049] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 508.134478][T16141] xt_CT: You must specify a L4 protocol and not use inversions on it [ 508.511679][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2450'. [ 508.538443][ T9410] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 508.553583][ T9410] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 508.954732][T16186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2456'. [ 509.138253][T11735] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 509.152680][T11735] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 509.173623][T16196] gtp0: entered promiscuous mode [ 509.205369][T16196] gtp0: entered allmulticast mode [ 509.214775][T16196] team0: Device gtp0 is of different type [ 509.312692][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2463'. [ 509.377317][T16206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2463'. [ 509.458726][T16214] xt_connbytes: Forcing CT accounting to be enabled [ 509.463358][T16207] xt_connbytes: Forcing CT accounting to be enabled [ 509.820677][T16189] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 510.808575][T16281] xt_CT: No such helper "syz1" [ 511.777155][T16050] net_ratelimit: 8 callbacks suppressed [ 511.777177][T16050] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 511.798241][T16050] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 512.377884][ T9410] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 512.392522][ T9410] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 512.500171][T16358] __nla_validate_parse: 13 callbacks suppressed [ 512.500193][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2507'. [ 512.569553][T16355] xt_hashlimit: max too large, truncated to 1048576 [ 512.590663][T16355] xt_hashlimit: overflow, try lower: 2/0 [ 512.700805][T16355] lo speed is unknown, defaulting to 1000 [ 512.745517][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2508'. [ 512.947830][T16045] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 512.962598][T16045] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 513.001514][T16367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2511'. [ 513.038769][T16367] block nbd0: reconnected socket [ 513.039241][ T5624] block nbd0: Receive control failed (result -32) [ 513.052012][T16368] lo speed is unknown, defaulting to 1000 [ 513.529690][T16045] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 513.544442][T16045] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 513.566990][T16379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2513'. [ 513.603479][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2514'. [ 513.975226][T16393] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.2516'. [ 514.134674][T16049] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 514.150222][T16049] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 514.335624][T16401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2518'. [ 514.352587][T16400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2518'. [ 515.502817][T16434] tipc: Enabled bearer , priority 0 [ 515.527905][T16434] syzkaller0: entered promiscuous mode [ 515.544939][T16434] syzkaller0: entered allmulticast mode [ 515.752222][T16431] tipc: Resetting bearer [ 515.808366][T16431] tipc: Disabling bearer [ 515.950832][T16449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2532'. [ 516.212408][T16463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2538'. [ 516.467811][T16475] netlink: 'syz.1.2540': attribute type 10 has an invalid length. [ 516.489633][T16475] batman_adv: batadv0: Interface deactivated: dummy0 [ 516.514874][T16475] batman_adv: batadv0: Removing interface: dummy0 [ 516.528915][T16482] netlink: 'syz.1.2540': attribute type 10 has an invalid length. [ 516.588151][T16475] team0: Port device dummy0 added [ 516.691389][T16482] team0: Port device dummy0 removed [ 516.792199][T16482] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 517.792507][T16513] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2548'. [ 518.179947][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2551'. [ 518.198527][T16523] netlink: 'syz.3.2552': attribute type 1 has an invalid length. [ 518.224524][T16521] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2551'. [ 518.301893][T16530] netlink: 420 bytes leftover after parsing attributes in process `syz.1.2553'. [ 518.335785][T16523] 8021q: adding VLAN 0 to HW filter on device bond9 [ 518.405770][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2553'. [ 518.541784][T16526] bond9: (slave veth7): Enslaving as an active interface with a down link [ 518.598715][T16533] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 518.623893][T16533] bond9: (slave batadv1): making interface the new active one [ 518.651022][T16533] batadv1: entered promiscuous mode [ 518.674612][T16533] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 518.914886][T16560] netlink: 'syz.3.2559': attribute type 16 has an invalid length. [ 518.922710][T16563] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2561'. [ 518.934728][T16563] net_ratelimit: 9 callbacks suppressed [ 518.934749][T16563] openvswitch: netlink: Message has 512 unknown bytes. [ 518.935607][T16548] macvtap1: entered promiscuous mode [ 518.949968][T16560] netlink: 'syz.3.2559': attribute type 17 has an invalid length. [ 518.958963][T16548] vlan0: entered promiscuous mode [ 518.970959][T16548] vlan0: left promiscuous mode [ 519.004353][T16560] lo: left promiscuous mode [ 519.020595][T16565] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2561'. [ 519.106158][T16560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.117750][T16560] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.132103][T16560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.176499][T16560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.189883][T16560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.209773][T16560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 519.223982][T16560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.244050][T16560] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 519.532024][T16579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2563'. [ 519.572776][T16579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2563'. [ 519.649484][T16578] lo speed is unknown, defaulting to 1000 [ 519.929248][T16596] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2570'. [ 520.050686][T16602] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 520.118132][T16601] syzkaller0: entered promiscuous mode [ 520.133741][T16601] syzkaller0: entered allmulticast mode [ 520.168958][T16601] tipc: Enabled bearer , priority 0 [ 520.221099][T16600] tipc: Resetting bearer [ 520.318828][T16600] tipc: Disabling bearer [ 520.516236][T16612] macvtap0: entered promiscuous mode [ 520.773457][T16607] lo speed is unknown, defaulting to 1000 [ 521.330142][T16631] netlink: 'syz.2.2579': attribute type 12 has an invalid length. [ 522.587199][T16668] lo: entered allmulticast mode [ 522.598558][T16668] tunl0: entered allmulticast mode [ 522.614013][T16668] gre0: entered allmulticast mode [ 522.630844][T16668] gretap0: entered allmulticast mode [ 522.650071][T16668] erspan0: entered allmulticast mode [ 522.669605][T16668] ip_vti0: entered allmulticast mode [ 522.688809][T16668] ip6_vti0: entered allmulticast mode [ 522.707601][T16668] sit0: entered allmulticast mode [ 522.721138][T16668] ip6tnl0: entered allmulticast mode [ 522.740914][T16668] ip6gre0: entered allmulticast mode [ 522.765651][T16668] syz_tun: entered allmulticast mode [ 522.788453][T16668] vcan0: entered allmulticast mode [ 522.797564][T16668] nlmon0: entered allmulticast mode [ 522.803156][T16668] batadv0: entered allmulticast mode [ 522.811538][T16668] vxcan0: entered allmulticast mode [ 522.818098][T16668] vxcan1: entered allmulticast mode [ 522.823792][T16668] veth0: entered allmulticast mode [ 522.830217][T16668] veth1: entered allmulticast mode [ 522.837016][T16668] wg0: entered allmulticast mode [ 522.842809][T16668] wg1: entered allmulticast mode [ 522.849317][T16668] wg2: entered allmulticast mode [ 522.854679][T16668] veth0_to_bridge: entered allmulticast mode [ 522.877952][T16668] veth1_to_bridge: entered allmulticast mode [ 522.892041][T16668] : entered allmulticast mode [ 522.898291][T16668] bond_slave_0: entered allmulticast mode [ 522.904473][T16668] veth1_to_bond: entered allmulticast mode [ 522.911625][T16668] bond_slave_1: entered allmulticast mode [ 522.919673][T16668] veth0_to_team: entered allmulticast mode [ 522.926153][T16668] team_slave_0: entered allmulticast mode [ 522.938380][T16668] veth1_to_team: entered allmulticast mode [ 522.945314][T16668] team_slave_1: entered allmulticast mode [ 522.954159][T16668] xfrm0: entered allmulticast mode [ 522.961677][T16686] netlink: 'syz.4.2593': attribute type 9 has an invalid length. [ 522.972185][T16668] veth0_to_hsr: entered allmulticast mode [ 522.980630][T16668] hsr_slave_0: entered allmulticast mode [ 522.991828][T16668] veth1_to_hsr: entered allmulticast mode [ 523.000596][T16668] hsr_slave_1: entered allmulticast mode [ 523.008372][T16668] hsr0: entered allmulticast mode [ 523.014318][T16668] veth1_virt_wifi: entered allmulticast mode [ 523.022601][T16668] veth0_virt_wifi: entered allmulticast mode [ 523.031046][T16668] veth1_vlan: entered allmulticast mode [ 523.039154][T16668] veth0_vlan: entered allmulticast mode [ 523.045810][T16668] vlan0: entered allmulticast mode [ 523.052182][T16668] vlan1: entered allmulticast mode [ 523.058744][T16668] macvlan0: entered allmulticast mode [ 523.066151][T16668] macvlan1: entered allmulticast mode [ 523.073936][T16668] ipvlan0: entered allmulticast mode [ 523.083677][T16668] ipvlan1: entered allmulticast mode [ 523.090470][T16668] geneve1: entered allmulticast mode [ 523.098322][T16668] netdevsim netdevsim2 €Â: entered allmulticast mode [ 523.105429][T16668] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 523.114268][T16668] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 523.122803][T16668] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 523.132943][T16668] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 523.145233][T16668] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 523.165074][T16668] : entered allmulticast mode [ 523.176794][T16668] bridge0.257: entered allmulticast mode [ 523.196597][T16668] bond1: entered allmulticast mode [ 523.217579][T16668] vxlan0: entered allmulticast mode [ 523.228353][T16668] gtp0: entered allmulticast mode [ 523.247047][T16668] veth2: entered allmulticast mode [ 523.253986][T16668] veth3: entered allmulticast mode [ 523.267625][T16668] veth0_vlan.2: entered allmulticast mode [ 523.274026][T16668] bond0: entered allmulticast mode [ 523.280999][T16668] sit1: entered allmulticast mode [ 523.290201][T16668] syztnl0: entered allmulticast mode [ 523.296054][T16668] bridge1: entered allmulticast mode [ 523.302512][T16668] bond2: entered allmulticast mode [ 523.308988][T16668] veth4: entered allmulticast mode [ 523.314606][T16668] veth5: entered allmulticast mode [ 523.321993][T16668] bond3: entered allmulticast mode [ 523.331026][T16668] ip6tnl1: entered allmulticast mode [ 523.337898][T16668] macvlan2: entered allmulticast mode [ 523.343633][T16668] hsr1: entered allmulticast mode [ 523.350057][T16668] bridge2: entered allmulticast mode [ 523.356273][T16668] vxlan1: entered allmulticast mode [ 523.364739][T16668] sit2: entered allmulticast mode [ 523.372532][T16668] vti0: entered allmulticast mode [ 523.390693][T16668] batadv1: entered allmulticast mode [ 523.401254][T16668] veth6: entered allmulticast mode [ 523.409229][T16668] veth7: entered allmulticast mode [ 523.414572][T16668] veth8: entered allmulticast mode [ 523.420484][T16668] veth9: entered allmulticast mode [ 523.425909][T16668] sit3: entered allmulticast mode [ 523.433010][T16668] tun0: entered allmulticast mode [ 523.441428][T16668] gretap1: entered allmulticast mode [ 523.448036][T16668] ip6erspan0: entered allmulticast mode [ 523.453784][T16668] bond4: entered allmulticast mode [ 523.460068][T16668] gtp1: entered allmulticast mode [ 523.465818][T16668] ip6tnl3: entered allmulticast mode [ 523.473479][T16668] ip6tnl4: entered allmulticast mode [ 523.480815][T16668] veth10: entered allmulticast mode [ 523.499929][T16668] veth11: entered allmulticast mode [ 523.505444][T16668] mac80211_hwsim hwsim24 wlan2: entered allmulticast mode [ 523.513762][T16668] macvlan3: entered allmulticast mode [ 523.521386][T16668] sit4: entered allmulticast mode [ 523.530140][T16668] bridge4: entered allmulticast mode [ 523.719686][T16668] bridge0: left promiscuous mode [ 523.730848][T16668] macvtap0: left promiscuous mode [ 523.735972][T16668] macvtap0: entered allmulticast mode [ 523.901331][T16699] syz.3.2597: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 523.917477][T16699] CPU: 1 UID: 0 PID: 16699 Comm: syz.3.2597 Not tainted syzkaller #0 PREEMPT(full) [ 523.917507][T16699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 523.917521][T16699] Call Trace: [ 523.917530][T16699] [ 523.917539][T16699] dump_stack_lvl+0xe8/0x150 [ 523.917578][T16699] warn_alloc+0x24c/0x270 [ 523.917617][T16699] ? stack_depot_save_flags+0x33/0x800 [ 523.917646][T16699] ? __pfx_warn_alloc+0x10/0x10 [ 523.917676][T16699] ? kasan_save_track+0x3e/0x80 [ 523.917701][T16699] ? __kasan_kmalloc+0x93/0xb0 [ 523.917731][T16699] ? xsk_setsockopt+0x52a/0x960 [ 523.917756][T16699] ? do_sock_setsockopt+0x17c/0x1b0 [ 523.917783][T16699] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 523.917811][T16699] ? do_syscall_64+0x174/0x580 [ 523.917839][T16699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.917872][T16699] __vmalloc_node_range_noprof+0x12c/0x1730 [ 523.917934][T16699] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 523.917964][T16699] ? __kasan_kmalloc+0x93/0xb0 [ 523.917993][T16699] ? __kmalloc_cache_noprof+0x32d/0x660 [ 523.918021][T16699] ? __kmalloc_cache_noprof+0x150/0x660 [ 523.918049][T16699] vmalloc_user_noprof+0xad/0xe0 [ 523.918074][T16699] ? xskq_create+0xbf/0x170 [ 523.918103][T16699] xskq_create+0xbf/0x170 [ 523.918136][T16699] xsk_init_queue+0x8a/0xe0 [ 523.918167][T16699] xsk_setsockopt+0x52a/0x960 [ 523.918198][T16699] ? __pfx_xsk_setsockopt+0x10/0x10 [ 523.918225][T16699] ? __pfx_aa_sk_perm+0x10/0x10 [ 523.918263][T16699] ? aa_sock_opt_perm+0xff/0x1a0 [ 523.918288][T16699] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 523.918309][T16699] ? __pfx_xsk_setsockopt+0x10/0x10 [ 523.918338][T16699] do_sock_setsockopt+0x17c/0x1b0 [ 523.918375][T16699] __x64_sys_setsockopt+0x13d/0x1b0 [ 523.918410][T16699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.918433][T16699] do_syscall_64+0x174/0x580 [ 523.918462][T16699] ? trace_irq_disable+0x3b/0x140 [ 523.918488][T16699] ? clear_bhb_loop+0x40/0x90 [ 523.918515][T16699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.918535][T16699] RIP: 0033:0x7fc795d9de59 [ 523.918555][T16699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.918572][T16699] RSP: 002b:00007fc796d4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 523.918595][T16699] RAX: ffffffffffffffda RBX: 00007fc796025fa0 RCX: 00007fc795d9de59 [ 523.918620][T16699] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 523.918632][T16699] RBP: 00007fc795e33e6f R08: 0000000000000004 R09: 0000000000000000 [ 523.918646][T16699] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.918658][T16699] R13: 00007fc796026038 R14: 00007fc796025fa0 R15: 00007ffea659a1a8 [ 523.918690][T16699] [ 523.918711][T16699] Mem-Info: [ 524.196052][T16696] syzkaller0: entered promiscuous mode [ 524.211876][T16696] syzkaller0: entered allmulticast mode [ 524.230332][T16699] active_anon:10505 inactive_anon:0 isolated_anon:0 [ 524.230332][T16699] active_file:0 inactive_file:43328 isolated_file:0 [ 524.230332][T16699] unevictable:768 dirty:121 writeback:0 [ 524.230332][T16699] slab_reclaimable:11529 slab_unreclaimable:159445 [ 524.230332][T16699] mapped:29485 shmem:1294 pagetables:1452 [ 524.230332][T16699] sec_pagetables:0 bounce:0 [ 524.230332][T16699] kernel_misc_reclaimable:0 [ 524.230332][T16699] free:1250650 free_pcp:10361 free_cma:0 [ 524.293516][T16699] Node 0 active_anon:42020kB inactive_anon:0kB active_file:0kB inactive_file:173108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117940kB dirty:484kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15512kB pagetables:5652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 524.397327][T16699] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 524.443843][T16699] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 524.482446][T16699] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 524.489029][T16699] Node 0 DMA32 free:1040656kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41920kB inactive_anon:0kB active_file:0kB inactive_file:173108kB unevictable:1536kB writepending:484kB zspages:0kB present:3129332kB managed:2548764kB mlocked:0kB bounce:0kB free_pcp:41744kB local_pcp:20072kB free_cma:0kB [ 524.552509][T16699] lowmem_reserve[]: 0 0 0 0 0 [ 524.566995][T16699] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:268kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 524.645357][T16699] lowmem_reserve[]: 0 0 0 0 0 [ 524.655501][T16699] Node 1 Normal free:3946452kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 524.682851][T16715] lo speed is unknown, defaulting to 1000 [ 524.728249][T16699] lowmem_reserve[]: 0 0 0 0 0 [ 524.742613][T16699] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 524.772690][T16699] Node 0 DMA32: 699*4kB (UME) 525*8kB (UM) 202*16kB (M) 702*32kB (UME) 162*64kB (UM) 51*128kB (UME) 18*256kB (UME) 8*512kB (UME) 1*1024kB (E) 3*2048kB (UM) 238*4096kB (UM) = 1040308kB [ 524.837339][T16699] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 524.903185][T16699] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 9*16kB (UM) 7*32kB (UM) 9*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3946452kB [ 524.950195][T16699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 524.998508][T16699] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 525.033472][T16699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.079718][T16699] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 525.112577][T16699] 46469 total pagecache pages [ 525.144062][T16699] 0 pages in swap cache [ 525.165921][T16699] Free swap = 124996kB [ 525.192072][T16699] Total swap = 124996kB [ 525.206005][T16699] 2097051 pages RAM [ 525.224870][T16699] 0 pages HighMem/MovableOnly [ 525.235753][T16742] __nla_validate_parse: 8 callbacks suppressed [ 525.235775][T16742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2606'. [ 525.259915][T16699] 428178 pages reserved [ 525.271219][T16699] 0 pages cma reserved [ 525.307576][T16742] xt_TCPMSS: Only works on TCP SYN packets [ 525.463492][T16746] syzkaller0: entered promiscuous mode [ 525.490710][T16746] syzkaller0: entered allmulticast mode [ 525.514468][T16745] tipc: Enabled bearer , priority 0 [ 525.544106][T16719] xt_bpf: check failed: parse error [ 525.575332][T16719] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2601'. [ 525.595585][T16742] vlan2: left promiscuous mode [ 525.610777][T16742] geneve0: left promiscuous mode [ 525.628006][T16742] bridge0: port 3(vlan2) entered disabled state [ 525.628211][T16719] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2601'. [ 525.656271][T16742] bridge_slave_1: left promiscuous mode [ 525.670932][T16742] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.687723][T16742] bridge_slave_0: left promiscuous mode [ 525.689274][T16757] x_tables: duplicate underflow at hook 1 [ 525.697490][T16742] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.865578][T16745] tipc: Resetting bearer [ 525.899005][T16745] tipc: Disabling bearer [ 526.159328][T16773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2615'. [ 526.190191][T16773] openvswitch: netlink: Missing key (keys=40, expected=80) [ 526.340628][T16773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2615'. [ 526.379414][T16773] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2615'. [ 526.402842][T16790] tipc: Enabled bearer , priority 0 [ 526.418585][T16782] syzkaller0: entered promiscuous mode [ 526.432718][T16782] syzkaller0: entered allmulticast mode [ 526.547363][T16782] tipc: Resetting bearer [ 526.569279][T16790] tipc: Enabling of bearer rejected, already enabled [ 526.664005][T16805] netlink: 'syz.2.2622': attribute type 10 has an invalid length. [ 526.703267][T16790] tipc: Resetting bearer [ 526.748904][T16807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2622'. [ 526.795041][T16790] tipc: Disabling bearer [ 526.830918][T16805] vlan0: left allmulticast mode [ 527.005775][T16811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2623'. [ 527.232834][T16823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2627'. [ 527.263304][T16823] xt_TCPMSS: Only works on TCP SYN packets [ 527.433625][T16829] netlink: 'syz.1.2631': attribute type 3 has an invalid length. [ 527.969837][T16851] netlink: 'syz.3.2634': attribute type 1 has an invalid length. [ 528.130910][T16851] 8021q: adding VLAN 0 to HW filter on device bond10 [ 528.217006][T16859] vlan3: entered promiscuous mode [ 528.232388][T16859] bond10: entered promiscuous mode [ 528.246722][T16859] vlan3: entered allmulticast mode [ 528.265878][T16859] bond10: entered allmulticast mode [ 528.339895][T16863] bond10: (slave bridge8): making interface the new active one [ 528.366282][T16863] bridge8: entered promiscuous mode [ 528.389363][T16863] bridge8: entered allmulticast mode [ 528.405253][T16863] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 529.019351][T16894] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.2645'. [ 529.486832][T16918] team0: Refused to change device type [ 529.895995][T16929] syzkaller1: entered promiscuous mode [ 529.910308][T16929] syzkaller1: entered allmulticast mode [ 530.067651][T16942] netlink: 'syz.4.2660': attribute type 26 has an invalid length. [ 530.079089][T16931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.090654][ T9410] batadv1: left promiscuous mode [ 530.313437][T16953] __nla_validate_parse: 3 callbacks suppressed [ 530.313458][T16953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2663'. [ 530.330868][T16953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2663'. [ 530.343055][T16956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2664'. [ 530.523742][T16968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2666'. [ 530.599786][T16972] 8021q: adding VLAN 0 to HW filter on device bond5 [ 530.656173][T16977] bond0: entered promiscuous mode [ 530.665038][T16977] bond0: left promiscuous mode [ 530.997480][T16991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2673'. [ 531.091802][T16996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.135871][T17000] syzkaller1: entered promiscuous mode [ 531.141719][T17000] syzkaller1: entered allmulticast mode [ 531.163736][T16996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.203655][T17002] netlink: 'syz.0.2678': attribute type 2 has an invalid length. [ 531.310256][T17004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.591977][ T29] audit: type=1804 audit(1783882634.815:12): pid=17019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2683" name="/newroot/552/cgroup.controllers" dev="tmpfs" ino=2852 res=1 errno=0 [ 531.672929][ T29] audit: type=1800 audit(1783882634.815:13): pid=17019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2683" name="cgroup.controllers" dev="tmpfs" ino=2852 res=0 errno=0 [ 531.695878][ T29] audit: type=1800 audit(1783882634.835:14): pid=17019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2683" name="cgroup.controllers" dev="tmpfs" ino=2852 res=0 errno=0 [ 531.713932][T17021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2684'. [ 531.752955][T17030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2686'. [ 531.993504][T11735] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.025267][T11735] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.053139][T11735] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.079469][T11735] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.332739][T17063] netlink: 'syz.1.2694': attribute type 1 has an invalid length. [ 532.502957][T17070] netlink: 'syz.1.2694': attribute type 10 has an invalid length. [ 532.536447][T17070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2694'. [ 532.556270][T17063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2694'. [ 532.640660][T17067] bond0: (slave dummy0): Releasing backup interface [ 532.660977][T17070] dummy0: entered promiscuous mode [ 533.284800][T17092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2704'. [ 533.385158][T17104] netlink: 'syz.2.2703': attribute type 1 has an invalid length. [ 533.438141][T17096] 8021q: adding VLAN 0 to HW filter on device bond18 [ 533.518364][T17097] 8021q: adding VLAN 0 to HW filter on device bond18 [ 533.537571][T17097] bond18: (slave vti0): The slave device specified does not support setting the MAC address [ 533.557786][T17097] bond18: (slave vti0): Error -95 calling set_mac_address [ 533.648170][T17098] bond18: (slave dummy0): Error -99 calling set_mac_address [ 534.101721][T17131] lo speed is unknown, defaulting to 1000 [ 534.244364][T17145] sit3: entered promiscuous mode [ 534.882621][T17160] syzkaller0: entered promiscuous mode [ 534.905923][T17160] syzkaller0: entered allmulticast mode [ 535.592094][T17193] netlink: 'syz.0.2728': attribute type 11 has an invalid length. [ 535.645219][T17195] netlink: 'syz.0.2728': attribute type 11 has an invalid length. [ 535.883034][T17193] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.970568][T17205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.982085][T17193] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 536.009778][ T9106] lo speed is unknown, defaulting to 1000 [ 536.100102][T17211] openvswitch: netlink: ct_state flags ffffffff unsupported [ 536.349436][T17219] __nla_validate_parse: 3 callbacks suppressed [ 536.349458][T17219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2736'. [ 536.432785][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2736'. [ 536.594235][T17224] syzkaller0: entered promiscuous mode [ 536.601545][T17224] syzkaller0: entered allmulticast mode [ 537.074793][T17239] geneve1: entered allmulticast mode [ 537.172087][T17243] bridge0: entered allmulticast mode [ 537.485961][T17253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 537.708635][T17260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2749'. [ 537.714492][T17263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2750'. [ 537.760933][T17265] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 537.835044][T17265] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2751'. [ 537.860351][T17265] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2751'. [ 537.951363][T17273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2753'. [ 538.475707][T17294] sctp: [Deprecated]: syz.3.2758 (pid 17294) Use of struct sctp_assoc_value in delayed_ack socket option. [ 538.475707][T17294] Use struct sctp_sack_info instead [ 538.503253][T17296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2759'. [ 538.980822][T17303] can: request_module (can-proto-0) failed. [ 539.109386][T17311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2763'. [ 539.172272][T17311] bridge0: entered allmulticast mode [ 539.285693][T17324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2768'. [ 539.367641][T17327] netlink: 'syz.2.2764': attribute type 1 has an invalid length. [ 540.024650][T17327] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 540.066167][T17352] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 540.626030][T17360] 8021q: adding VLAN 0 to HW filter on device bond19 [ 540.706520][T17374] x_tables: duplicate entry at hook 1 [ 541.152951][T17392] netlink: 'syz.0.2779': attribute type 1 has an invalid length. [ 541.172783][T17391] tipc: New replicast peer: 255.255.255.255 [ 541.180602][T17391] tipc: Enabled bearer , priority 10 [ 541.197907][T17392] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR [ 541.373254][T17407] __nla_validate_parse: 8 callbacks suppressed [ 541.373279][T17407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2784'. [ 541.432814][T17411] syzkaller1: entered promiscuous mode [ 541.459796][T17411] syzkaller1: entered allmulticast mode [ 541.504350][T17407] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2784'. [ 541.524861][T17418] netlink: 420 bytes leftover after parsing attributes in process `syz.3.2787'. [ 541.702113][T17415] dummy0: left promiscuous mode [ 541.984521][T17415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.052899][T17415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.304117][T17415] geneve1: left allmulticast mode [ 542.335878][T17415] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 542.351218][T17415] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 542.383180][T16046] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.392039][T16046] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.400991][T16046] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.446383][T16046] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.464606][T12408] tipc: Node number set to 2660140875 [ 542.794798][T16046] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.826402][T16046] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.874550][T16046] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.908351][T16046] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.285427][T17469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2799'. [ 543.334499][T17477] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2800'. [ 543.519374][T17480] tipc: Enabled bearer , priority 0 [ 543.554966][T17484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2804'. [ 543.567577][T17480] syzkaller0: entered promiscuous mode [ 543.586119][T17480] syzkaller0: entered allmulticast mode [ 543.616036][T17480] tipc: Resetting bearer [ 543.634244][T17484] bridge9: port 1(dummy0) entered blocking state [ 543.641694][T17484] bridge9: port 1(dummy0) entered disabled state [ 543.650735][T17484] dummy0: entered allmulticast mode [ 543.659227][T17484] dummy0: entered promiscuous mode [ 543.669747][T17484] netlink: 'syz.3.2804': attribute type 10 has an invalid length. [ 543.670695][T17479] tipc: Resetting bearer [ 543.684845][T17484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2804'. [ 543.721936][T17479] tipc: Disabling bearer [ 543.738497][T17484] dummy0: left allmulticast mode [ 543.743833][T17484] bridge9: port 1(dummy0) entered disabled state [ 543.911255][T17494] tipc: New replicast peer: 255.255.255.255 [ 543.957779][T17494] tipc: Enabled bearer , priority 10 [ 544.152973][T17501] team0: Device ipvlan2 failed to register rx_handler [ 544.510441][T17516] sch_fq: defrate 0 ignored. [ 544.516122][T17515] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2813'. [ 544.792668][T17529] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2817'. [ 544.814694][T17527] tipc: Enabled bearer , priority 0 [ 544.828163][T17536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2819'. [ 544.871416][T17526] tipc: Disabling bearer [ 545.070376][T17545] IPv6: sit3: Disabled Multicast RS [ 545.093630][T12408] tipc: Node number set to 470483072 [ 545.100317][T17546] sock: sock_timestamping_bind_phc: sock not bind to device [ 545.575345][T17561] netlink: 'syz.2.2824': attribute type 30 has an invalid length. [ 545.748358][T17561] bond6: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 545.770843][T17561] bond6 (unregistering): Released all slaves [ 545.922671][T17574] bridge0: port 1(macvlan0) entered blocking state [ 545.948428][T17574] bridge0: port 1(macvlan0) entered disabled state [ 545.974318][T17574] macvlan0: entered allmulticast mode [ 546.006827][T17574] macvlan0: entered promiscuous mode [ 546.243387][T17585] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 546.420134][T17593] sctp: [Deprecated]: syz.2.2833 (pid 17593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 546.420134][T17593] Use struct sctp_sack_info instead [ 546.467947][T17598] netlink: 'syz.0.2834': attribute type 1 has an invalid length. [ 546.492211][T17598] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR [ 546.740696][T17609] macsec0: entered allmulticast mode [ 546.781667][T17609] bridge0: entered allmulticast mode [ 546.791931][T17609] macsec0: left allmulticast mode [ 546.803389][T17609] bridge0: left allmulticast mode [ 547.091266][T17621] __nla_validate_parse: 6 callbacks suppressed [ 547.091287][T17621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2839'. [ 547.319534][T17632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2841'. [ 548.554271][T17675] netlink: 34 bytes leftover after parsing attributes in process `syz.1.2851'. [ 548.906624][T17686] netlink: 'syz.2.2853': attribute type 4 has an invalid length. [ 548.925778][T17685] netlink: 'syz.2.2853': attribute type 4 has an invalid length. [ 550.545565][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 550.570051][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 550.594036][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 550.624361][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 550.646001][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 550.690307][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 550.704234][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 550.719029][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 550.729750][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 550.742313][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 551.852063][T17655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2846'. [ 552.454051][T17722] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2862'. [ 552.522912][T17722] vlan5: entered allmulticast mode [ 552.542266][T17722] erspan0: entered allmulticast mode [ 552.751949][T17733] SET target dimension over the limit! [ 552.757623][ T5624] Bluetooth: hci5: command tx timeout [ 552.778384][T17733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2865'. [ 552.905146][T17691] lo speed is unknown, defaulting to 1000 [ 552.908531][T17741] netlink: 'syz.2.2868': attribute type 1 has an invalid length. [ 552.961713][T17741] bond6: entered promiscuous mode [ 552.968030][T17741] 8021q: adding VLAN 0 to HW filter on device bond6 [ 553.056123][T17741] netlink: 'syz.2.2868': attribute type 5 has an invalid length. [ 553.082402][T17741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2868'. [ 553.106960][T17741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2868'. [ 553.144936][T17741] bond6: (slave bridge5): making interface the new active one [ 553.152806][T17741] bridge5: entered promiscuous mode [ 553.159692][T17741] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 553.591258][T17762] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2873'. [ 553.994656][T17777] netlink: 'syz.3.2878': attribute type 24 has an invalid length. [ 554.525767][T17801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2883'. [ 554.593283][T17803] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2884'. [ 554.606588][T17803] openvswitch: netlink: Message has 512 unknown bytes. [ 554.642977][T17691] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.662537][T17691] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.690143][T17691] bridge_slave_0: entered allmulticast mode [ 554.709927][T17691] bridge_slave_0: entered promiscuous mode [ 554.733912][T17691] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.753688][T17691] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.782316][T17691] bridge_slave_1: entered allmulticast mode [ 554.790783][T17808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2886'. [ 554.800138][T17691] bridge_slave_1: entered promiscuous mode [ 554.811992][T17796] syzkaller0: entered promiscuous mode [ 554.818815][T17796] syzkaller0: entered allmulticast mode [ 554.985366][T16049] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 555.039540][T17691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.071969][T17691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.227724][T17827] netlink: 'syz.3.2890': attribute type 1 has an invalid length. [ 555.242984][T17827] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2890'. [ 555.260947][T17825] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 555.350922][T17691] team0: Port device team_slave_0 added [ 555.386856][T11735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.403185][T17691] team0: Port device team_slave_1 added [ 555.433890][T11735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.870990][T17691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.891029][T17691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.940812][T17691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.991032][T17691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.018023][T17691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.074784][T17691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.207955][T17847] lo speed is unknown, defaulting to 1000 [ 556.273890][T17691] hsr_slave_0: entered promiscuous mode [ 556.275555][T17865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2900'. [ 556.287751][T17691] hsr_slave_1: entered promiscuous mode [ 556.295320][T17691] debugfs: 'hsr0' already exists in 'hsr' [ 556.302009][T17691] Cannot create hsr debugfs directory [ 556.334460][T17865] geneve2: entered promiscuous mode [ 556.395839][T17863] netlink: 'syz.4.2899': attribute type 1 has an invalid length. [ 556.584618][T17873] netlink: 'syz.1.2902': attribute type 1 has an invalid length. [ 556.665730][T17873] 8021q: adding VLAN 0 to HW filter on device bond11 [ 556.761830][T17873] netlink: 'syz.1.2902': attribute type 10 has an invalid length. [ 556.773008][T17876] bond11: (slave veth9): Enslaving as an active interface with a down link [ 556.799120][T17877] bond11: (slave dummy0): making interface the new active one [ 556.808837][T17877] dummy0: entered promiscuous mode [ 556.827795][T17877] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 556.894027][T17873] bond11: (slave dummy0): Releasing active interface [ 557.261908][T17903] netlink: 'syz.4.2908': attribute type 1 has an invalid length. [ 557.280236][T17899] 8021q: adding VLAN 0 to HW filter on device bond12 [ 557.405194][T17904] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.434691][T17904] bond12: (slave team0): Enslaving as an active interface with an up link [ 557.573025][T17903] 8021q: adding VLAN 0 to HW filter on device bond19 [ 557.615470][T17893] bond12: entered promiscuous mode [ 557.621530][T17893] team0: entered promiscuous mode [ 557.627365][T17893] team_slave_0: entered promiscuous mode [ 557.633371][T17893] team_slave_1: entered promiscuous mode [ 557.640503][T17893] bond12: entered allmulticast mode [ 557.645840][T17893] team0: entered allmulticast mode [ 557.651488][T17893] team_slave_0: entered allmulticast mode [ 557.657397][T17893] team_slave_1: entered allmulticast mode [ 557.972824][T17895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 557.992931][T17915] __nla_validate_parse: 3 callbacks suppressed [ 557.992951][T17915] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2910'. [ 558.039700][T17691] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.092429][T17691] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.683875][T17691] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.710627][T17691] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.851402][T17945] : option downdelay: invalid value (18446744073709547007) [ 558.869834][T17945] : option downdelay: allowed values 0 - 2147483647 [ 558.877571][ T29] audit: type=1800 audit(1783882662.105:15): pid=17953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2917" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3044 res=0 errno=0 [ 558.902406][T17945]  (unregistering): Released all slaves [ 559.179678][T17691] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.195633][T17691] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.227260][T17961] xt_hashlimit: size too large, truncated to 1048576 [ 559.247451][T17965] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2920'. [ 559.753349][T17977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2923'. [ 559.783000][T17980] netlink: 'syz.4.2924': attribute type 1 has an invalid length. [ 559.842215][T17980] 8021q: adding VLAN 0 to HW filter on device bond20 [ 559.889676][T17691] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 559.929867][T17691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 559.950706][T17691] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 559.987422][T17691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 560.004119][T17691] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 560.061262][T17691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 560.107303][T17691] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 560.114665][T17999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2927'. [ 560.262411][T17691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 560.269955][T17991] lo speed is unknown, defaulting to 1000 [ 560.281586][T17999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.289892][T17999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.556866][T17691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.619574][T17691] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.655259][T16046] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.662525][T16046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.727487][T11735] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.734726][T11735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.475347][T18049] netlink: 'syz.4.2939': attribute type 2 has an invalid length. [ 561.696074][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2940'. [ 561.822441][T18060] netlink: 'syz.4.2940': attribute type 9 has an invalid length. [ 561.853439][T18053] bond21: option ad_actor_sys_prio: invalid value (0) [ 561.879007][T18053] bond21: option ad_actor_sys_prio: allowed values 1 - 65535 [ 561.973891][T18053] bond21 (unregistering): Released all slaves [ 562.161052][T17691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.244054][T17691] veth0_vlan: entered promiscuous mode [ 562.270347][T17691] veth1_vlan: entered promiscuous mode [ 562.425351][T17691] veth0_macvtap: entered promiscuous mode [ 562.472469][T17691] veth1_macvtap: entered promiscuous mode [ 562.513273][T18077] netlink: 'syz.2.2946': attribute type 4 has an invalid length. [ 562.535029][T18078] netlink: 'syz.2.2946': attribute type 4 has an invalid length. [ 562.548244][T17691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.563972][T18077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2946'. [ 562.583380][T17691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.632355][T16044] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.643230][T16044] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.681262][T16049] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.690939][T16049] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.091823][T16050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.094237][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.114142][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.122683][T18100] netlink: 'syz.3.2951': attribute type 2 has an invalid length. [ 563.126040][T16050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.285550][T18093] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 563.359385][T18111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2954'. [ 563.376525][T18111] netlink: 'syz.4.2954': attribute type 30 has an invalid length. [ 563.430698][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2954'. [ 563.446932][T18114] netlink: 'syz.4.2954': attribute type 30 has an invalid length. [ 563.493443][T18116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2954'. [ 563.531239][T16046] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.541109][T18098] lo speed is unknown, defaulting to 1000 [ 563.553932][T11735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.564825][T16046] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.579910][T11735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.588039][T16046] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.671092][T16046] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.791792][T18119] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2956'. [ 564.262418][T18134] netlink: 'syz.3.2960': attribute type 1 has an invalid length. [ 564.405243][T18134] 8021q: adding VLAN 0 to HW filter on device bond11 [ 564.419158][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 564.433329][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 564.444780][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 564.461315][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 564.471186][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 564.609193][T18138] bond11: (slave veth9): Enslaving as a backup interface with a down link [ 564.667895][T18138] netlink: 'syz.3.2960': attribute type 10 has an invalid length. [ 564.684488][T18138] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2960'. [ 564.715244][T18134] dummy0: left promiscuous mode [ 564.758451][T18134] bond11: (slave dummy0): Enslaving as a backup interface with an up link [ 564.830118][T18138] dummy0: entered promiscuous mode [ 564.839061][T11735] bond11: (slave dummy0): link status up again after 0 ms [ 564.873918][T18138] bond11: (slave dummy0): Releasing backup interface [ 565.479886][T18157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2963'. [ 565.642278][T16045] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.955579][T16045] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.114836][T18141] lo speed is unknown, defaulting to 1000 [ 567.047723][T18182] syzkaller1: entered promiscuous mode [ 567.053958][T18182] syzkaller1: entered allmulticast mode [ 567.158384][T16045] team0: Port device netdevsim1 removed [ 567.181217][T16045] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.408226][T16045] vlan2 (unregistering): left allmulticast mode [ 567.414579][T16045] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 567.424386][T16045] vlan2 (unregistering): left promiscuous mode [ 567.441680][T16045] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 567.460562][T16045] bridge0: port 3(vlan2) entered disabled state [ 567.493557][T16045] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.612309][T18203] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2973'. [ 567.895895][T18215] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2976'. [ 571.163180][T18232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2980'. [ 571.227285][T18236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2981'. [ 571.260550][T18237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2981'. [ 571.311520][T18232] 8021q: adding VLAN 0 to HW filter on device bond12 [ 572.021479][T18235] tipc: Failed to remove unknown binding: 66,0,0/0:2486112233/2486112235 [ 572.047884][T16045] macvlan0: left allmulticast mode [ 572.070785][T16045] macvlan0: left promiscuous mode [ 572.079790][T18235] tipc: Failed to remove unknown binding: 66,0,0/0:2486112233/2486112234 [ 572.105628][T16045] bridge0: port 1(macvlan0) entered disabled state [ 572.133252][T18235] tipc: Failed to remove unknown binding: 66,0,0/0:2486112233/2486112235 [ 572.168748][T18235] tipc: Failed to remove unknown binding: 66,0,0/0:2486112233/2486112234 [ 572.250339][T16045] bridge0: left allmulticast mode [ 572.265894][T16045] lo: left allmulticast mode [ 572.275142][T18270] netlink: 'syz.2.2985': attribute type 1 has an invalid length. [ 572.310587][T18269] netlink: 'syz.3.2983': attribute type 1 has an invalid length. [ 572.650502][T16045] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 573.033863][T16045] bond14 (unregistering): (slave gretap1): Releasing active interface [ 573.130680][T16045] bond4 (unregistering): (slave geneve2): Releasing active interface [ 573.215295][T16045] bond6 (unregistering): (slave bridge1): Releasing active interface [ 573.325493][T16045] bond15 (unregistering): (slave bridge3): Releasing active interface [ 573.361537][T16045] bond0 (unregistering): Released all slaves [ 573.384272][T16045] bond1 (unregistering): Released all slaves [ 573.403349][T18294] ip6t_srh: unknown srh invflags 4000 [ 573.409645][T16045] bond2 (unregistering): Released all slaves [ 573.435054][T16045] bond3 (unregistering): Released all slaves [ 573.471270][T16045] bond4 (unregistering): Released all slaves [ 573.500672][T16045] bond5 (unregistering): Released all slaves [ 573.526128][T16045] bond6 (unregistering): Released all slaves [ 573.551498][T16045] bond7 (unregistering): Released all slaves [ 573.587928][T16045] bond8 (unregistering): Released all slaves [ 573.612588][T16045] bond9 (unregistering): Released all slaves [ 573.631130][T16045] bond10 (unregistering): Released all slaves [ 573.650780][T16045] bond11 (unregistering): Released all slaves [ 573.669021][T16045] bond12 (unregistering): Released all slaves [ 573.689534][T16045] bond13 (unregistering): Released all slaves [ 573.709402][T16045] bond14 (unregistering): Released all slaves [ 573.729184][T16045] bond15 (unregistering): Released all slaves [ 573.746921][T16045] bond16 (unregistering): Released all slaves [ 573.767325][T16045] bond17 (unregistering): (slave veth13): Releasing backup interface [ 573.779830][T16045] bond17 (unregistering): Released all slaves [ 573.796061][T16045] bond18 (unregistering): (slave veth15): Releasing active interface [ 573.811945][T16045] bond18 (unregistering): (slave veth17): Releasing active interface [ 573.821576][T16045] bond18 (unregistering): Released all slaves [ 573.842654][T16045] bond19 (unregistering): Released all slaves [ 573.858476][T16045] bond20 (unregistering): Released all slaves [ 573.911997][T18262] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2983'. [ 573.921413][T18262] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2983'. [ 573.941738][T18262] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2983'. [ 573.953810][T18270] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 573.984618][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 574.043114][T18272] gretap4: entered allmulticast mode [ 574.170276][T18297] gre0: entered promiscuous mode [ 574.182098][T18297] gre0: entered allmulticast mode [ 574.252719][T16045] : left promiscuous mode [ 574.421017][T18309] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2993'. [ 574.637870][T18318] Unsupported ieee802154 address type: 0 [ 574.731839][T16045] tipc: Left network mode [ 575.917135][T18141] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.944686][T18141] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.978657][T18141] bridge_slave_0: entered allmulticast mode [ 576.012704][T18141] bridge_slave_0: entered promiscuous mode [ 576.264675][T18141] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.302341][T18141] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.317984][T18372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3006'. [ 576.323077][T18141] bridge_slave_1: entered allmulticast mode [ 576.357791][T18141] bridge_slave_1: entered promiscuous mode [ 576.572362][T18373] team0: Device ipvlan2 failed to register rx_handler [ 576.701029][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 576.962234][T18403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3013'. [ 577.024377][T18141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.052520][T18141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.164412][T16045] hsr_slave_0: left promiscuous mode [ 577.175125][T18405] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3014'. [ 577.187192][T16045] hsr_slave_1: left promiscuous mode [ 578.012999][T18421] batadv0: entered promiscuous mode [ 578.046001][T18421] batadv0: left allmulticast mode [ 578.051994][T18421] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 578.169115][T18141] team0: Port device team_slave_0 added [ 578.178718][T18141] team0: Port device team_slave_1 added [ 578.333831][T18141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.351425][T18141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.400086][T18433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3021'. [ 578.420635][T18141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.488747][T18141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.536755][T18141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.580888][T18141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.652858][T18435] batadv0: entered promiscuous mode [ 578.662057][T18435] macvlan0: entered promiscuous mode [ 578.680141][T18435] macvlan0: entered allmulticast mode [ 578.688200][T18435] batadv0: entered allmulticast mode [ 578.703855][T18435] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 578.715773][T18435] batadv0: left allmulticast mode [ 578.732393][T18435] batadv0: left promiscuous mode [ 579.042225][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3026'. [ 579.064676][T18141] hsr_slave_0: entered promiscuous mode [ 579.092835][T18141] hsr_slave_1: entered promiscuous mode [ 579.131215][T18141] debugfs: 'hsr0' already exists in 'hsr' [ 579.159542][T18141] Cannot create hsr debugfs directory [ 579.402728][T16045] IPVS: stop unused estimator thread 0... [ 579.423696][T18450] veth1_macvtap: left promiscuous mode [ 579.471607][T18450] macsec0: entered allmulticast mode [ 579.668896][T18462] veth1_macvtap: entered promiscuous mode [ 579.680755][T18462] veth1_macvtap: entered allmulticast mode [ 579.687527][T18462] macsec0: left allmulticast mode [ 579.692697][T18462] veth1_macvtap: left allmulticast mode [ 580.001788][T18486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3033'. [ 580.512594][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 580.661248][T18503] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3037'. [ 580.674504][T18503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3037'. [ 580.687554][T18503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3037'. [ 580.910590][T18512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.017226][T18515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3042'. [ 581.032597][T18518] netlink: 'syz.0.3043': attribute type 9 has an invalid length. [ 581.043202][T18518] netlink: 'syz.0.3043': attribute type 5 has an invalid length. [ 581.851919][ T5642] block nbd5: Receive control failed (result -32) [ 581.853351][ T5624] block nbd5: Receive control failed (result -32) [ 581.873049][T18528] block nbd5: Receive control failed (result -32) [ 582.669475][T18141] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 582.698771][T18141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 582.718288][T18141] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 582.831258][T18141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 582.942359][T18562] bridge_slave_0: left allmulticast mode [ 582.972356][T18566] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3051'. [ 583.005621][T18562] bridge_slave_0: left promiscuous mode [ 583.060258][T18562] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.150815][T18562] bridge_slave_1: left allmulticast mode [ 583.189644][T18562] bridge_slave_1: left promiscuous mode [ 583.205116][T18562] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.280332][T18562] bond0: (slave bond_slave_0): Releasing backup interface [ 583.303260][T18582] SET target dimension over the limit! [ 583.354542][T18562] bond0: (slave bond_slave_1): Releasing backup interface [ 583.411498][T18562] team0: Port device team_slave_0 removed [ 583.461247][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3055'. [ 583.484048][T18562] team0: Port device team_slave_1 removed [ 583.504302][T18562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.528348][T18562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.551689][T18562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.581615][T18562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.621088][T18562] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 583.719873][T18564] team0: Mode changed to "loadbalance" [ 583.734959][T18141] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 583.751337][T18141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 583.765567][T18141] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 583.780546][T18141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 584.057499][ T29] audit: type=1804 audit(1783882687.275:16): pid=18600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3056" name="/newroot/631/cgroup.controllers" dev="tmpfs" ino=3255 res=1 errno=0 [ 584.202218][ T29] audit: type=1800 audit(1783882687.275:17): pid=18600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3056" name="cgroup.controllers" dev="tmpfs" ino=3255 res=0 errno=0 [ 584.292307][ T29] audit: type=1800 audit(1783882687.305:18): pid=18600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3056" name="cgroup.controllers" dev="tmpfs" ino=3255 res=0 errno=0 [ 584.626037][T18141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.673524][T18141] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.718784][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.727182][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.786836][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.795361][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.331363][T18627] bond5: (slave veth0_to_bond): Releasing backup interface [ 585.463168][T18627] bond0: (slave bond_slave_0): Releasing backup interface [ 585.565492][T18627] bond0: (slave bond_slave_1): Releasing backup interface [ 585.612722][T18627] team0: Port device team_slave_0 removed [ 585.636262][T18627] team0: Port device team_slave_1 removed [ 585.643577][T18627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.652004][T18627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.664645][T18627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.674011][T18627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.685486][T18627] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 586.004735][T18636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3062'. [ 586.204626][T18636] bond8: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 586.224607][T18636] bond8 (unregistering): Released all slaves [ 586.750702][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3066'. [ 587.247280][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3068'. [ 587.299082][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3068'. [ 588.118318][T18692] bond13: option arp_interval: invalid value (18446744073709551615) [ 588.140907][T18692] bond13: option arp_interval: allowed values 0 - 2147483647 [ 588.166099][T18692] bond13 (unregistering): Released all slaves [ 588.248493][T18141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.344514][T18721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3076'. [ 589.407375][T18721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3076'. [ 589.555887][T18728] netlink: 'syz.0.3078': attribute type 12 has an invalid length. [ 590.162169][T18749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3081'. [ 590.432023][T18141] veth0_vlan: entered promiscuous mode [ 590.455103][T18141] veth1_vlan: entered promiscuous mode [ 590.571753][T18756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3083'. [ 590.605163][T18141] veth0_macvtap: entered promiscuous mode [ 590.636905][T18756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3083'. [ 590.677516][T18141] veth1_macvtap: entered promiscuous mode [ 590.683743][T18763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3083'. [ 590.842998][T18756] bridge8: port 1(vlan5) entered blocking state [ 590.849939][T18756] bridge8: port 1(vlan5) entered disabled state [ 590.857418][T18756] vlan5: entered allmulticast mode [ 590.862757][T18756] bridge8: entered allmulticast mode [ 590.873062][T18756] vlan5: left allmulticast mode [ 590.881672][T18756] bridge8: left allmulticast mode [ 590.942534][T18141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.042513][T18141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.124637][T16046] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.170443][T16046] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.251611][T16046] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.303718][T16046] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.871425][T16045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.922518][T16045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.113985][T16042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.148000][T16042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.523677][T16042] netdevsim netdevsim2 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.560207][T16042] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.605721][T16042] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.640142][T16042] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.028818][T18816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3098'. [ 593.069773][T18816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3098'. [ 593.692802][T18825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3101'. [ 593.776393][T18827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2959'. [ 593.923889][T18842] netlink: 'syz.0.3102': attribute type 26 has an invalid length. [ 594.668401][T18862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3107'. [ 594.812591][T18862] pimreg1: renamed from bridge0 (while UP) [ 594.865657][T18862] pimreg1: entered allmulticast mode [ 594.929801][T18862] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 595.364650][T18528] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 595.383324][T18528] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 595.394924][T18528] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 595.411637][T18528] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 595.421317][T18528] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 595.605238][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3114'. [ 595.676976][T18895] netlink: 'syz.3.3115': attribute type 13 has an invalid length. [ 595.750071][T18895] netlink: 'syz.3.3115': attribute type 17 has an invalid length. [ 596.046195][T18911] netlink: 'syz.0.3119': attribute type 1 has an invalid length. [ 596.067020][T18895] dummy0: left promiscuous mode [ 596.144885][T18895] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 596.157056][T18915] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3119'. [ 596.186119][T18895] veth1_vlan: left promiscuous mode [ 596.224421][T18895] veth0_vlan: left promiscuous mode [ 596.261937][T18895] veth0_vlan: entered promiscuous mode [ 596.291610][T18895] veth1_vlan: entered promiscuous mode [ 596.335954][T18895] veth1_macvtap: left promiscuous mode [ 596.351028][T18895] veth0_macvtap: left promiscuous mode [ 596.375245][T18895] veth0_macvtap: entered promiscuous mode [ 596.413922][T18895] veth1_macvtap: entered promiscuous mode [ 596.454751][T18895] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 596.490159][T18895] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 596.561713][T18895] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 596.617844][T18895] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 596.674748][T18895] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 596.718152][T18895] batman_adv: batadv0: Interface activated: gretap1 [ 596.738820][T18895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 596.755306][T18895] 8021q: adding VLAN 0 to HW filter on device bond2 [ 596.773087][T18895] 8021q: adding VLAN 0 to HW filter on device bond3 [ 596.902390][T18895] 8021q: adding VLAN 0 to HW filter on device bond4 [ 596.950859][T18895] geneve0: entered promiscuous mode [ 596.957952][T18895] macvlan2: left promiscuous mode [ 596.978120][T18895] 8021q: adding VLAN 0 to HW filter on device bond5 [ 597.017703][T18895] batman_adv: batadv0: Interface activated: gretap3 [ 597.084917][T18895] bond6: left promiscuous mode [ 597.093543][T18895] bridge0: left promiscuous mode [ 597.101968][T18895] 8021q: adding VLAN 0 to HW filter on device bond6 [ 597.110660][T18895] bond6: entered allmulticast mode [ 597.119410][T18895] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 597.127651][T18895] macvtap1: left allmulticast mode [ 597.132818][T18895] bond6: left allmulticast mode [ 597.139280][T18895] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 597.149579][T18895] bond6: entered allmulticast mode [ 597.159266][T18895] macvtap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 597.167504][T18895] macvtap2: left allmulticast mode [ 597.172677][T18895] bond6: left allmulticast mode [ 597.179068][T18895] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 597.188071][T18895] bridge0: left allmulticast mode [ 597.194428][T18895] bridge0: entered promiscuous mode [ 597.207857][T18895] bond7: left promiscuous mode [ 597.212741][T18895] bridge5: left promiscuous mode [ 597.219968][T18895] 8021q: adding VLAN 0 to HW filter on device bond7 [ 597.233890][T18895] 8021q: adding VLAN 0 to HW filter on device bond8 [ 597.259282][T18895] vlan3: left promiscuous mode [ 597.264288][T18895] bond10: left promiscuous mode [ 597.269671][T18895] bridge8: left promiscuous mode [ 597.275685][T18895] vlan3: left allmulticast mode [ 597.280819][T18895] bond10: left allmulticast mode [ 597.285923][T18895] bridge8: left allmulticast mode [ 597.294267][T18895] sit3: left promiscuous mode [ 597.319607][T18902] C: renamed from veth1_to_team (while UP) [ 597.342842][T18902] netlink: 'syz.4.3117': attribute type 1 has an invalid length. [ 597.354940][T18902] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3117'. [ 597.377870][T18902] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 597.424326][T18911] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 597.438223][T16049] bond9: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 597.558529][T18528] Bluetooth: hci3: command tx timeout [ 597.848708][T18943] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3122'. [ 597.873693][T16046] bond11: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 597.911734][T16046] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 597.975583][T16046] bond11: active interface up! [ 598.273484][T18950] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3124'. [ 598.322378][T18950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3124'. [ 598.339186][T18950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3124'. [ 598.555590][T18884] lo speed is unknown, defaulting to 1000 [ 598.774688][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3128'. [ 598.806127][T18966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3128'. [ 598.849336][T18966] netlink: 'syz.3.3128': attribute type 12 has an invalid length. [ 598.887054][T18966] netlink: 'syz.3.3128': attribute type 13 has an invalid length. [ 599.637890][T18528] Bluetooth: hci3: command tx timeout [ 599.885074][T18994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3137'. [ 600.110250][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3140'. [ 600.134704][T18884] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.144355][T18884] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.144532][T18884] bridge_slave_0: entered allmulticast mode [ 600.168228][T18884] bridge_slave_0: entered promiscuous mode [ 600.180757][T18884] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.188559][T18884] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.195824][T18884] bridge_slave_1: entered allmulticast mode [ 600.203830][T18884] bridge_slave_1: entered promiscuous mode [ 600.301985][T18884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.349400][T18884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.415846][T18884] team0: Port device team_slave_0 added [ 600.425791][T18884] team0: Port device team_slave_1 added [ 600.473269][T18884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.480649][T18884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.508847][T18884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.525272][T18884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.535383][T18884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.562394][T18884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.713923][T18884] hsr_slave_0: entered promiscuous mode [ 600.726215][T18884] hsr_slave_1: entered promiscuous mode [ 600.734947][T18884] debugfs: 'hsr0' already exists in 'hsr' [ 600.755339][T18884] Cannot create hsr debugfs directory [ 601.670332][T18884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.718394][T18528] Bluetooth: hci3: command tx timeout [ 601.744019][T19043] ieee802154 phy0 wpan0: encryption failed: -22 [ 601.780122][T19043] xt_l2tp: v2 sid > 0xffff: 262144 [ 602.097689][T18884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.143045][T19052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3152'. [ 602.411424][T18884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.477684][T19059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3153'. [ 602.515518][T19059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3153'. [ 602.695719][T18884] netdevsim netdevsim2 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.171196][T19077] netlink: 'syz.0.3158': attribute type 30 has an invalid length. [ 603.209439][T19078] netlink: 'syz.0.3158': attribute type 30 has an invalid length. [ 603.291626][T19077] bond1: option arp_missed_max: invalid value (0) [ 603.302786][T19077] bond1: option arp_missed_max: allowed values 1 - 255 [ 603.313584][T19077] bond1 (unregistering): Released all slaves [ 603.374473][T19078] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 603.797684][T18528] Bluetooth: hci3: command tx timeout [ 603.861483][T18884] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 603.906474][T18884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 603.935943][T18884] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 603.991741][T18884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 604.019524][T19108] sch_fq: defrate 8 ignored. [ 604.052936][T18884] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 604.123143][T18884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 604.163379][T19114] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 604.164284][T18884] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 604.234506][T18884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 604.647685][T18884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.775156][T18884] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.864678][T16050] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.872106][T16050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.998341][ T9410] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.005773][ T9410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.362040][T19161] tipc: Enabling of bearer rejected, failed to enable media [ 605.817893][T19172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3175'. [ 606.186150][T19172] 8021q: adding VLAN 0 to HW filter on device bond13 [ 607.404675][T18884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.548255][T19204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 607.691821][T19207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3185'. [ 607.791986][T18884] veth0_vlan: entered promiscuous mode [ 607.972457][T19218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3188'. [ 607.979024][T19220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3189'. [ 607.995623][T19218] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3188'. [ 608.008403][T19218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3188'. [ 608.041990][T19214] bond13: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 608.093652][T19214] bond13 (unregistering): Released all slaves [ 608.163283][T19227] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3190'. [ 608.413578][T18884] veth1_vlan: entered promiscuous mode [ 608.627155][T18884] veth0_macvtap: entered promiscuous mode [ 608.698201][T18884] veth1_macvtap: entered promiscuous mode [ 608.769887][T18884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.778956][T19239] xt_hashlimit: size too large, truncated to 1048576 [ 608.975198][T18884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.149708][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.193635][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.274470][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.318056][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.780404][T16045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.805314][T19260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3196'. [ 609.839329][T16045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.941542][T19263] netlink: 'syz.3.3198': attribute type 1 has an invalid length. [ 609.981918][T16044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.999417][T16044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.097334][T19270] Cannot find add_set index 0 as target [ 610.321072][T19279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3103'. [ 611.192858][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 611.209183][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 611.232564][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 611.246962][T19306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3209'. [ 611.259929][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 611.274353][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 611.734897][T19316] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 611.965350][T19322] netlink: 'syz.2.3213': attribute type 23 has an invalid length. [ 611.972277][T19320] team0: Port device syz_tun added [ 613.398364][T18528] Bluetooth: hci1: command tx timeout [ 613.484753][T19303] lo speed is unknown, defaulting to 1000 [ 614.021887][T19357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3220'. [ 614.073710][T19360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3221'. [ 614.263053][T19357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3220'. [ 614.421128][T19366] netlink: 'syz.0.3222': attribute type 1 has an invalid length. [ 614.466149][T19365] netlink: 'syz.0.3222': attribute type 1 has an invalid length. [ 615.150459][T19375] lo speed is unknown, defaulting to 1000 [ 615.194210][T19374] lo speed is unknown, defaulting to 1000 [ 615.298158][T19383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3227'. [ 615.440924][T19387] bridge_slave_0: left allmulticast mode [ 615.465453][T19387] bridge_slave_0: left promiscuous mode [ 615.477823][T18528] Bluetooth: hci1: command tx timeout [ 615.490093][T19387] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.573127][T19387] bridge_slave_1: left allmulticast mode [ 615.612423][T19387] bridge_slave_1: left promiscuous mode [ 615.645646][T19387] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.210558][T19387] bond0: (slave bond_slave_0): Releasing backup interface [ 616.234223][T19387] bond0: (slave bond_slave_1): Releasing backup interface [ 616.283225][T19387] team0: Port device team_slave_0 removed [ 616.306049][T19387] team0: Port device team_slave_1 removed [ 616.319475][T19387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.337065][T19387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.350038][T19387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.358606][T19387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.373068][T19387] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 616.608994][ T9110] IPVS: starting estimator thread 0... [ 616.716492][T19399] IPVS: using max 27 ests per chain, 64800 per kthread [ 616.888788][T19403] netlink: 'syz.4.3232': attribute type 8 has an invalid length. [ 617.110505][T19303] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.138447][T19303] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.166074][T19303] bridge_slave_0: entered allmulticast mode [ 617.204071][T19303] bridge_slave_0: entered promiscuous mode [ 617.250216][T19303] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.283818][T19303] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.322742][T19303] bridge_slave_1: entered allmulticast mode [ 617.364300][T19303] bridge_slave_1: entered promiscuous mode [ 617.515240][T19417] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3235'. [ 617.541061][T19420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3235'. [ 617.571297][T18528] Bluetooth: hci1: command tx timeout [ 618.047868][T19303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.262336][T19303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.507446][T19303] team0: Port device team_slave_0 added [ 618.581792][T19303] team0: Port device team_slave_1 added [ 618.905926][T19303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.938949][T19303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.025393][T19303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.223265][T19303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.254270][T19303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.327962][T19303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.414273][T19457] syzkaller0: entered promiscuous mode [ 619.423196][T19457] syzkaller0: entered allmulticast mode [ 619.543716][T19303] hsr_slave_0: entered promiscuous mode [ 619.582823][T19303] hsr_slave_1: entered promiscuous mode [ 619.598225][T19303] debugfs: 'hsr0' already exists in 'hsr' [ 619.613034][T19303] Cannot create hsr debugfs directory [ 619.637745][T18528] Bluetooth: hci1: command tx timeout [ 619.730357][T16042] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.749527][T19460] nbd: nbd1 already in use [ 619.755056][T16042] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.764234][T19460] block nbd1: NBD_DISCONNECT [ 619.769646][T19460] block nbd1: Send disconnect failed -32 [ 619.807919][T19460] block nbd1: Send disconnect failed -32 [ 619.829903][T19460] block nbd1: Send disconnect failed -32 [ 619.850529][T16042] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.876425][T16042] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.877482][T19460] block nbd1: shutting down sockets [ 620.228878][T19475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3251'. [ 620.638900][T19480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3253'. [ 620.763825][T19490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3256'. [ 621.029085][T19498] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3258'. [ 621.044281][T19498] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3258'. [ 621.066015][T19482] 8021q: adding VLAN 0 to HW filter on device bond13 [ 621.124389][T19486] gre0: entered promiscuous mode [ 621.132171][T19486] gre0: entered allmulticast mode [ 621.341690][T19506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3259'. [ 621.355550][T19303] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.370118][T19506] xt_TCPMSS: Only works on TCP SYN packets [ 621.605078][T19303] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.751550][T19510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3261'. [ 621.810634][T19303] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.899690][T19510] tipc: Invalid UDP bearer configuration [ 621.899861][T19510] tipc: Enabling of bearer rejected, failed to enable media [ 621.903002][T19515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3263'. [ 622.072059][T19303] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.084694][T19505] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 622.970376][T19534] geneve4: entered promiscuous mode [ 622.983017][T19534] geneve4: entered allmulticast mode [ 623.110378][T19543] veth3: entered allmulticast mode [ 623.462625][T19554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3272'. [ 623.644114][T19303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 623.715882][T19303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 623.765686][T19303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 623.880383][T19303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 623.912883][T19303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 624.008650][T19303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 624.175518][T19303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 624.264410][T19303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 624.530711][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.542153][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.815644][T19303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.939679][T19303] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.971062][T16051] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.978447][T16051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.028611][T16049] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.035865][T16049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.186541][T19604] xt_hashlimit: size too large, truncated to 1048576 [ 626.302251][T19303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.491122][T19303] veth0_vlan: entered promiscuous mode [ 626.636056][T19635] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3291'. [ 626.653066][T19303] veth1_vlan: entered promiscuous mode [ 626.678168][T19635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3291'. [ 626.935968][T19645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.054845][T19303] veth0_macvtap: entered promiscuous mode [ 627.104104][T19303] veth1_macvtap: entered promiscuous mode [ 627.110623][T19649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3296'. [ 627.245950][T19647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.297697][T19303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.364884][T19303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.408792][T16049] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.445936][T16049] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.472325][T16049] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.549509][T16049] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.838549][T19663] netlink: 'syz.1.3298': attribute type 2 has an invalid length. [ 627.885114][T19642] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 627.943146][T19665] Bluetooth: MGMT ver 1.23 [ 627.962221][T16049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.008354][T16049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.098481][T16051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.119722][T16051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.248371][T19670] Bluetooth: MGMT ver 1.23 [ 629.107983][T19688] syzkaller0: entered promiscuous mode [ 629.115954][T19688] syzkaller0: entered allmulticast mode [ 629.139743][T19691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3309'. [ 629.989851][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 630.017653][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 630.032467][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 630.049709][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 630.062114][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 630.151556][ T5619] syz_tun (unregistering): left allmulticast mode [ 630.487884][T19732] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3316'. [ 630.681136][T19732] veth1_macvtap: left promiscuous mode [ 630.714273][T19732] macsec0: entered allmulticast mode [ 630.912666][T19741] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 630.922893][T19741] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 630.931121][T19741] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 630.939122][T19741] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 630.947208][T19741] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 630.955234][T19741] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 630.963251][T19741] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 630.971355][T19741] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 630.979462][T19741] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 631.135935][T19741] xt_TCPMSS: Only works on TCP SYN packets [ 631.502092][T19751] netlink: 'syz.0.3323': attribute type 1 has an invalid length. [ 632.031935][T19712] lo speed is unknown, defaulting to 1000 [ 632.191824][T19774] bond2: invalid ARP target 0.0.0.0 specified for addition [ 632.199217][T18528] Bluetooth: hci2: command tx timeout [ 632.238591][T19774] bond2: option arp_ip_target: invalid value (0) [ 632.258425][T19753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 632.314567][T19774] bond2 (unregistering): Released all slaves [ 633.658800][T19812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3335'. [ 634.297641][T18528] Bluetooth: hci2: command tx timeout [ 634.542772][T19826] syzkaller0: entered promiscuous mode [ 634.551609][T19826] syzkaller0: entered allmulticast mode [ 635.258357][T19850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3343'. [ 636.491156][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3345'. [ 636.506852][T19860] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3345'. [ 636.518774][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3345'. [ 636.529777][T19860] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3345'. [ 640.151479][T19870] netlink: 'syz.4.3347': attribute type 1 has an invalid length. [ 640.535170][T19871] 8021q: adding VLAN 0 to HW filter on device bond2 [ 640.594104][T19871] bond1: (slave bond2): making interface the new active one [ 640.652640][T19871] bond1: (slave bond2): Enslaving as an active interface with an up link [ 640.798834][T19878] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 641.197985][T19900] netlink: 'syz.3.3353': attribute type 4 has an invalid length. [ 641.384220][T19900] netlink: 'syz.3.3353': attribute type 4 has an invalid length. [ 642.019985][T19712] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.078430][T19712] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.134165][T19712] bridge_slave_0: entered allmulticast mode [ 642.180402][T19923] sctp: [Deprecated]: syz.0.3357 (pid 19923) Use of int in max_burst socket option deprecated. [ 642.180402][T19923] Use struct sctp_assoc_value instead [ 642.200827][T19712] bridge_slave_0: entered promiscuous mode [ 642.244714][T19712] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.275213][T19712] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.304871][T19712] bridge_slave_1: entered allmulticast mode [ 642.394284][T19712] bridge_slave_1: entered promiscuous mode [ 642.419300][T19923] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3357'. [ 642.564040][T19933] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3359'. [ 642.635909][T19712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.716676][T19712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.988323][T19712] team0: Port device team_slave_0 added [ 642.994099][T19951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3362'. [ 643.042883][T19712] team0: Port device team_slave_1 added [ 643.121497][T19955] netlink: 'syz.2.3363': attribute type 1 has an invalid length. [ 643.421606][T19712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.444283][T19712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.533042][T19712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.610080][T19712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.625825][T19963] netlink: 'syz.0.3365': attribute type 4 has an invalid length. [ 643.634766][T19712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.634804][T19712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.722391][T19966] netlink: 'syz.0.3365': attribute type 4 has an invalid length. [ 644.019276][T19712] hsr_slave_0: entered promiscuous mode [ 644.040430][T19712] hsr_slave_1: entered promiscuous mode [ 644.071185][T19712] debugfs: 'hsr0' already exists in 'hsr' [ 644.101649][T19712] Cannot create hsr debugfs directory [ 645.060127][T19712] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.305383][T19712] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.612831][T19712] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.743039][ T29] audit: type=1800 audit(1783882748.965:19): pid=19991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3372" name="memory.events" dev="tmpfs" ino=377 res=0 errno=0 [ 645.788364][T19712] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.908159][T20019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3379'. [ 645.961896][T20021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3379'. [ 646.022166][T20019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3379'. [ 646.117712][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3381'. [ 646.497736][T20026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 646.559661][T20027] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3381'. [ 646.604608][T20031] geneve0: entered promiscuous mode [ 647.069619][T20044] lo speed is unknown, defaulting to 1000 [ 647.101962][T19712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 647.188243][T19712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 647.214869][T19712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 647.259470][T19712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 647.278449][T19712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 647.322890][T19712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 647.356050][T19712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 647.875302][T19712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 648.171669][T20073] netlink: 'syz.0.3391': attribute type 1 has an invalid length. [ 648.543274][T20073] bond2: entered promiscuous mode [ 648.571094][T20073] 8021q: adding VLAN 0 to HW filter on device bond2 [ 648.595691][T20083] netlink: 'syz.3.3394': attribute type 6 has an invalid length. [ 648.620346][T20070] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 648.662803][T20070] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 648.702317][T20070] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 648.745102][T20070] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 648.952699][T20077] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 649.009309][T20077] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 649.031377][T20077] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 649.468175][T20086] syzkaller1: entered promiscuous mode [ 649.474658][T20086] syzkaller1: entered allmulticast mode [ 650.503380][T19712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.640213][T20112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3401'. [ 650.793976][T19712] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.909886][ T9410] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.917481][ T9410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.045645][T16044] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.052966][T16044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.064385][T20118] netlink: 'syz.0.3403': attribute type 10 has an invalid length. [ 651.181304][T20121] x_tables: ip_tables: osf match: only valid for protocol 6 [ 651.223616][T20118] team0: Port device dummy0 added [ 651.245465][T20123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3405'. [ 651.247609][T20118] netlink: 'syz.0.3403': attribute type 10 has an invalid length. [ 651.295915][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3404'. [ 651.341618][T20118] team0: Port device dummy0 removed [ 651.360896][T20118] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 651.849852][T20138] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.3406'. [ 651.904063][T20140] netlink: 'syz.4.3406': attribute type 2 has an invalid length. [ 651.915919][T20137] x_tables: duplicate underflow at hook 2 [ 652.089630][T20143] syzkaller1: entered promiscuous mode [ 652.108873][T20143] syzkaller1: entered allmulticast mode [ 652.853750][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3412'. [ 682.414195][ C1] sched: DL replenish lagged too much [ 699.445365][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 702.242214][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 703.461318][ T5624] Bluetooth: hci5: command 0x040f tx timeout [ 706.780397][ T5624] Bluetooth: hci5: command 0x040f tx timeout [ 710.251123][ T5624] Bluetooth: hci5: command 0x040f tx timeout [ 714.308153][ T5624] Bluetooth: hci5: command 0x040f tx timeout [ 728.728787][ T5624] Bluetooth: hci4: command 0x041b tx timeout [ 747.971592][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.016138][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.032922][ T5624] Bluetooth: hci3: command 0x0405 tx timeout [ 787.626209][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 787.633205][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20151/1:b..l [ 787.641828][ C1] rcu: (detected by 1, t=10503 jiffies, g=116105, q=1278 ncpus=2) [ 787.649751][ C1] task:syz.4.3411 state:R running task stack:25568 pid:20151 tgid:20147 ppid:18141 task_flags:0x400140 flags:0x00080002 [ 787.664841][ C1] Call Trace: [ 787.668163][ C1] [ 787.671151][ C1] __schedule+0x17d9/0x56c0 [ 787.675772][ C1] ? __lock_acquire+0x683/0x2cf0 [ 787.680888][ C1] ? __css_rstat_updated+0x235/0x540 [ 787.686340][ C1] ? __pfx___schedule+0x10/0x10 [ 787.694054][ C1] ? __lock_acquire+0x683/0x2cf0 [ 787.699156][ C1] preempt_schedule_irq+0x4d/0xa0 [ 787.704316][ C1] irqentry_exit+0x14f/0x8f0 [ 787.708944][ C1] ? trace_irq_disable+0x3b/0x140 [ 787.714128][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 787.720145][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 787.725481][ C1] Code: ff ff ff e8 61 cf 2c 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b fa c9 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d d8 83 b8 [ 787.746512][ C1] RSP: 0000:ffffc900053e6c48 EFLAGS: 00000286 [ 787.752713][ C1] RAX: 592333c233941000 RBX: 0000000000000000 RCX: 0000000000000046 [ 787.760716][ C1] RDX: 00000000ce1df5ab RSI: ffffffff8e4b068c RDI: ffffffff8c4bd380 [ 787.768805][ C1] RBP: ffffffff8176f27f R08: ffffffff8176f27f R09: 0000000000000000 [ 787.776804][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000002 [ 787.784998][ C1] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000246 [ 787.793102][ C1] ? unwind_next_frame+0x8f/0x2550 [ 787.798308][ C1] ? unwind_next_frame+0x8f/0x2550 [ 787.803745][ C1] ? __unwind_start+0xed/0x660 [ 787.808832][ C1] ? unwind_next_frame+0x8f/0x2550 [ 787.814084][ C1] unwind_next_frame+0xac/0x2550 [ 787.819323][ C1] ? unwind_next_frame+0x8f/0x2550 [ 787.824923][ C1] ? get_stack_info_noinstr+0x19/0x130 [ 787.830467][ C1] __unwind_start+0x514/0x660 [ 787.835221][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 787.841803][ C1] arch_stack_walk+0xe3/0x150 [ 787.846556][ C1] ? __unwind_start+0xed/0x660 [ 787.851374][ C1] stack_trace_save+0xa9/0x100 [ 787.856187][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 787.861674][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 787.867014][ C1] kasan_save_stack+0x3e/0x60 [ 787.871803][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 787.877153][ C1] ? __pfx_qdisc_free_cb+0x10/0x10 [ 787.882571][ C1] call_rcu+0xee/0x8b0 [ 787.886778][ C1] ? rcu_is_watching+0x15/0xb0 [ 787.891592][ C1] ? __qdisc_destroy+0x2c6/0x470 [ 787.896625][ C1] taprio_attach+0x253/0x380 [ 787.901297][ C1] ? __pfx_taprio_attach+0x10/0x10 [ 787.906543][ C1] qdisc_graft+0x11d2/0x1600 [ 787.911248][ C1] ? __pfx_qdisc_graft+0x10/0x10 [ 787.916237][ C1] ? trace_qdisc_create+0x83/0x200 [ 787.921573][ C1] ? qdisc_create+0xa62/0xf00 [ 787.926482][ C1] ? lockdep_rtnl_is_held+0x26/0x40 [ 787.932021][ C1] tc_modify_qdisc+0x1968/0x2390 [ 787.937034][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 787.942357][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 787.947770][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 787.953188][ C1] rtnetlink_rcv_msg+0x7b9/0xc00 [ 787.958425][ C1] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 787.963582][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 787.969195][ C1] ? ref_tracker_free+0x689/0x830 [ 787.974648][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 787.980159][ C1] netlink_rcv_skb+0x226/0x4a0 [ 787.985039][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 787.990540][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 787.995966][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 788.001292][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 788.006537][ C1] netlink_unicast+0x7bb/0x940 [ 788.011363][ C1] netlink_sendmsg+0x813/0xb40 [ 788.016170][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.021586][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 788.026558][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.031869][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 788.036945][ C1] ____sys_sendmsg+0x54e/0x850 [ 788.041760][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 788.047265][ C1] ? import_iovec+0x73/0xa0 [ 788.051983][ C1] ___sys_sendmsg+0x2a5/0x360 [ 788.056871][ C1] ? __lock_acquire+0x683/0x2cf0 [ 788.061858][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.067278][ C1] ? futex_wake+0x51b/0x5f0 [ 788.071927][ C1] ? __fget_files+0x2a/0x420 [ 788.076724][ C1] ? __fget_files+0x3a2/0x420 [ 788.081536][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 788.086517][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 788.092122][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.098337][ C1] do_syscall_64+0x174/0x580 [ 788.103092][ C1] ? trace_irq_disable+0x3b/0x140 [ 788.108232][ C1] ? clear_bhb_loop+0x40/0x90 [ 788.113003][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.119130][ C1] RIP: 0033:0x7fe158f9de59 [ 788.123578][ C1] RSP: 002b:00007fe159e69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 788.132216][ C1] RAX: ffffffffffffffda RBX: 00007fe159226180 RCX: 00007fe158f9de59 [ 788.140231][ C1] RDX: 0000000000008010 RSI: 00002000000012c0 RDI: 0000000000000009 [ 788.148231][ C1] RBP: 00007fe159033e6f R08: 0000000000000000 R09: 0000000000000000 [ 788.156404][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.164529][ C1] R13: 00007fe159226218 R14: 00007fe159226180 R15: 00007ffe5d732be8 [ 788.172563][ C1] [ 788.175702][ C1] rcu: rcu_preempt kthread starved for 2781 jiffies! g116105 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 788.187099][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 788.197181][ C1] rcu: RCU grace-period kthread stack dump: [ 788.203180][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 788.216900][ C1] Call Trace: [ 788.220215][ C1] [ 788.223087][ C1] sched_show_task+0x4aa/0x5f0 [ 788.228101][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 788.233621][ C1] rcu_check_gp_kthread_starvation+0x1a7/0x310 [ 788.239827][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 788.245150][ C1] print_other_cpu_stall+0x11cd/0x1310 [ 788.250829][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 788.256865][ C1] ? tmigr_requires_handle_remote+0x3f0/0x480 [ 788.262997][ C1] rcu_sched_clock_irq+0x93d/0x1050 [ 788.268239][ C1] update_process_times+0x23b/0x2f0 [ 788.273471][ C1] tick_nohz_handler+0x38f/0x6b0 [ 788.278464][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 788.284060][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 788.289562][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 788.294709][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 788.300203][ C1] __hrtimer_run_queues+0x371/0xa10 [ 788.305449][ C1] hrtimer_interrupt+0x448/0x910 [ 788.310455][ C1] ? sched_clock+0x3f/0x60 [ 788.315022][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 788.321178][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 788.326852][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 788.333554][ C1] RIP: 0010:stack_trace_consume_entry+0x2c/0x280 [ 788.340530][ C1] Code: 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 ba 00 00 00 00 00 fc ff df 4c 8d 47 10 4c 89 c5 48 c1 ed 03 0f b6 44 15 00 <84> c0 0f 85 09 01 00 00 44 8b 4f 10 4c 8d 77 08 4d 89 f5 49 c1 ed [ 788.360591][ C1] RSP: 0018:ffffc90000a07ef8 EFLAGS: 00000a02 [ 788.367169][ C1] RAX: 0000000000000000 RBX: ffffc90000a08000 RCX: 0000000080000100 [ 788.375803][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0a86da RDI: ffffc90000a08000 [ 788.384516][ C1] RBP: 1ffff92000141002 R08: ffffc90000a08010 R09: 0000000000000000 [ 788.392534][ C1] R10: ffffc90000a07f98 R11: ffffffff81b16a10 R12: ffff88801dee0000 [ 788.400540][ C1] R13: 0000000000000000 R14: ffffffff81b16a10 R15: ffffc90000a07f48 [ 788.408545][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 788.415004][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 788.421398][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 788.426909][ C1] ? unwind_next_frame+0x8f/0x2550 [ 788.432229][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 788.437729][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 788.444228][ C1] arch_stack_walk+0x10f/0x150 [ 788.449039][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 788.454453][ C1] stack_trace_save+0xa9/0x100 [ 788.459248][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 788.464745][ C1] ? __lock_acquire+0x683/0x2cf0 [ 788.469731][ C1] kasan_save_track+0x3e/0x80 [ 788.474530][ C1] ? kasan_save_track+0x3e/0x80 [ 788.479411][ C1] ? kasan_save_free_info+0x40/0x50 [ 788.484647][ C1] ? __kasan_slab_free+0x5c/0x80 [ 788.489606][ C1] ? kfree+0x1c5/0x640 [ 788.493699][ C1] ? skb_release_data+0x85e/0xab0 [ 788.498930][ C1] ? __kfree_skb+0x5d/0x210 [ 788.503601][ C1] kasan_save_free_info+0x40/0x50 [ 788.508647][ C1] __kasan_slab_free+0x5c/0x80 [ 788.513447][ C1] kfree+0x1c5/0x640 [ 788.517378][ C1] ? skb_release_data+0x85e/0xab0 [ 788.522526][ C1] skb_release_data+0x85e/0xab0 [ 788.527597][ C1] __kfree_skb+0x5d/0x210 [ 788.531960][ C1] nft_synproxy_eval_v4+0x36a/0x4e0 [ 788.537197][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 788.542960][ C1] ? nf_ip_checksum+0x13c/0x510 [ 788.547990][ C1] nft_synproxy_do_eval+0x335/0x550 [ 788.553487][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 788.559420][ C1] ? __lock_acquire+0x683/0x2cf0 [ 788.564498][ C1] nft_do_chain+0x48d/0x1b10 [ 788.569807][ C1] ? ktime_get_update_offsets_now+0x5d/0x3e0 [ 788.575872][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 788.580941][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 788.585894][ C1] nft_do_chain_inet+0x360/0x4b0 [ 788.590925][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 788.596417][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 788.601216][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 788.606631][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 788.612126][ C1] nf_hook_slow+0xc5/0x220 [ 788.616578][ C1] NF_HOOK+0x21f/0x3c0 [ 788.620747][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 788.627016][ C1] ? NF_HOOK+0x9e/0x3c0 [ 788.631404][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 788.636024][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 788.642073][ C1] ? ip_local_deliver+0x113/0x190 [ 788.647139][ C1] NF_HOOK+0x336/0x3c0 [ 788.651265][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 788.656536][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 788.661774][ C1] ? NF_HOOK+0x9e/0x3c0 [ 788.665958][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 788.670572][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 788.675802][ C1] ? ip_rcv_core+0x88d/0xd50 [ 788.680434][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 788.685245][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 788.689783][ C1] process_backlog+0xa34/0x1860 [ 788.694776][ C1] ? process_backlog+0x3c3/0x1860 [ 788.699870][ C1] __napi_poll+0xaa/0x330 [ 788.704248][ C1] net_rx_action+0x61d/0xf50 [ 788.708882][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 788.714121][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 788.719297][ C1] ? net_tx_action+0xbff/0xc30 [ 788.724297][ C1] handle_softirqs+0x225/0x840 [ 788.729133][ C1] ? __irq_exit_rcu+0xca/0x220 [ 788.733966][ C1] __irq_exit_rcu+0xca/0x220 [ 788.738605][ C1] irq_exit_rcu+0x9/0x30 [ 788.742980][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 788.748657][ C1] [ 788.751968][ C1] [ 788.754927][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 788.760939][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x30/0x70 [ 788.767329][ C1] Code: 04 24 65 48 8b 0d b8 ad a5 11 65 8b 15 d9 ad a5 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 24 17 00 00 00 74 2c <8b> 91 f8 16 00 00 83 fa 02 75 21 48 8b 91 00 17 00 00 48 8b 32 48 [ 788.787055][ C1] RSP: 0018:ffffc90000157a90 EFLAGS: 00000246 [ 788.793249][ C1] RAX: ffffffff81b25863 RBX: 0000000000000000 RCX: ffff88801dee0000 [ 788.801879][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 788.810328][ C1] RBP: ffffc90000157bd0 R08: ffffffff905775f7 R09: 1ffffffff20aeebe [ 788.818675][ C1] R10: dffffc0000000000 R11: fffffbfff20aeebf R12: ffffc90000157b00 [ 788.827164][ C1] R13: ffffc90000157b00 R14: 0000000000000000 R15: dffffc0000000000 [ 788.835449][ C1] ? __timer_delete_sync+0x163/0x520 [ 788.841211][ C1] __timer_delete_sync+0x163/0x520 [ 788.846366][ C1] schedule_timeout+0x15a/0x2c0 [ 788.851421][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 788.857010][ C1] ? __pfx_process_timeout+0x10/0x10 [ 788.862353][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 788.868208][ C1] ? prepare_to_swait_event+0x322/0x350 [ 788.873974][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 788.878903][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 788.884240][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 788.890190][ C1] ? trace_irq_disable+0x3b/0x140 [ 788.895599][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 788.901931][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 788.907646][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 788.912472][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 788.917736][ C1] ? __kthread_parkme+0x71/0x1f0 [ 788.922918][ C1] ? __kthread_parkme+0x196/0x1f0 [ 788.928533][ C1] kthread+0x388/0x470 [ 788.932660][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 788.938081][ C1] ? __pfx_kthread+0x10/0x10 [ 788.942737][ C1] ret_from_fork+0x514/0xb70 [ 788.947485][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 788.952742][ C1] ? __switch_to+0xc89/0x1420 [ 788.958166][ C1] ? __pfx_kthread+0x10/0x10 [ 788.962877][ C1] ret_from_fork_asm+0x1a/0x30 [ 788.967773][ C1] [ 788.970816][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 788.977237][ C1] CPU: 1 UID: 0 PID: 16 Comm: rcu_preempt Not tainted syzkaller #0 PREEMPT(full) [ 788.986920][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 788.997278][ C1] RIP: 0010:stack_trace_consume_entry+0x2c/0x280 [ 789.003936][ C1] Code: 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 ba 00 00 00 00 00 fc ff df 4c 8d 47 10 4c 89 c5 48 c1 ed 03 0f b6 44 15 00 <84> c0 0f 85 09 01 00 00 44 8b 4f 10 4c 8d 77 08 4d 89 f5 49 c1 ed [ 789.024113][ C1] RSP: 0018:ffffc90000a07ef8 EFLAGS: 00000a02 [ 789.030230][ C1] RAX: 0000000000000000 RBX: ffffc90000a08000 RCX: 0000000080000100 [ 789.038758][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0a86da RDI: ffffc90000a08000 [ 789.046865][ C1] RBP: 1ffff92000141002 R08: ffffc90000a08010 R09: 0000000000000000 [ 789.054879][ C1] R10: ffffc90000a07f98 R11: ffffffff81b16a10 R12: ffff88801dee0000 [ 789.063140][ C1] R13: 0000000000000000 R14: ffffffff81b16a10 R15: ffffc90000a07f48 [ 789.071316][ C1] FS: 0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000 [ 789.080935][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 789.089040][ C1] CR2: 0000556811fd4a38 CR3: 0000000012272000 CR4: 00000000003526f0 [ 789.097070][ C1] Call Trace: [ 789.100731][ C1] [ 789.103738][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 789.109152][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 789.115346][ C1] arch_stack_walk+0x10f/0x150 [ 789.120164][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 789.125574][ C1] stack_trace_save+0xa9/0x100 [ 789.130385][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 789.135881][ C1] ? __lock_acquire+0x683/0x2cf0 [ 789.141043][ C1] kasan_save_track+0x3e/0x80 [ 789.145843][ C1] ? kasan_save_track+0x3e/0x80 [ 789.150726][ C1] ? kasan_save_free_info+0x40/0x50 [ 789.155969][ C1] ? __kasan_slab_free+0x5c/0x80 [ 789.161032][ C1] ? kfree+0x1c5/0x640 [ 789.165225][ C1] ? skb_release_data+0x85e/0xab0 [ 789.170287][ C1] ? __kfree_skb+0x5d/0x210 [ 789.174992][ C1] kasan_save_free_info+0x40/0x50 [ 789.180314][ C1] __kasan_slab_free+0x5c/0x80 [ 789.185124][ C1] kfree+0x1c5/0x640 [ 789.189045][ C1] ? skb_release_data+0x85e/0xab0 [ 789.194110][ C1] skb_release_data+0x85e/0xab0 [ 789.199096][ C1] __kfree_skb+0x5d/0x210 [ 789.203641][ C1] nft_synproxy_eval_v4+0x36a/0x4e0 [ 789.208932][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 789.214783][ C1] ? nf_ip_checksum+0x13c/0x510 [ 789.219764][ C1] nft_synproxy_do_eval+0x335/0x550 [ 789.225034][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 789.230820][ C1] ? __lock_acquire+0x683/0x2cf0 [ 789.235931][ C1] nft_do_chain+0x48d/0x1b10 [ 789.240653][ C1] ? ktime_get_update_offsets_now+0x5d/0x3e0 [ 789.246690][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 789.251860][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 789.256741][ C1] nft_do_chain_inet+0x360/0x4b0 [ 789.262178][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 789.267716][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 789.272790][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 789.278333][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 789.283970][ C1] nf_hook_slow+0xc5/0x220 [ 789.288426][ C1] NF_HOOK+0x21f/0x3c0 [ 789.292625][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 789.298918][ C1] ? NF_HOOK+0x9e/0x3c0 [ 789.303144][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 789.307855][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 789.313976][ C1] ? ip_local_deliver+0x113/0x190 [ 789.319066][ C1] NF_HOOK+0x336/0x3c0 [ 789.323181][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 789.328646][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 789.333893][ C1] ? NF_HOOK+0x9e/0x3c0 [ 789.338100][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 789.342929][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 789.348462][ C1] ? ip_rcv_core+0x88d/0xd50 [ 789.353375][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 789.357929][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 789.362592][ C1] process_backlog+0xa34/0x1860 [ 789.367499][ C1] ? process_backlog+0x3c3/0x1860 [ 789.372622][ C1] __napi_poll+0xaa/0x330 [ 789.377126][ C1] net_rx_action+0x61d/0xf50 [ 789.382017][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 789.387460][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 789.392555][ C1] ? net_tx_action+0xbff/0xc30 [ 789.397463][ C1] handle_softirqs+0x225/0x840 [ 789.402343][ C1] ? __irq_exit_rcu+0xca/0x220 [ 789.407350][ C1] __irq_exit_rcu+0xca/0x220 [ 789.411980][ C1] irq_exit_rcu+0x9/0x30 [ 789.416264][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 789.422485][ C1] [ 789.425453][ C1] [ 789.428496][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 789.434528][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x30/0x70 [ 789.440714][ C1] Code: 04 24 65 48 8b 0d b8 ad a5 11 65 8b 15 d9 ad a5 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 24 17 00 00 00 74 2c <8b> 91 f8 16 00 00 83 fa 02 75 21 48 8b 91 00 17 00 00 48 8b 32 48 [ 789.460357][ C1] RSP: 0018:ffffc90000157a90 EFLAGS: 00000246 [ 789.466986][ C1] RAX: ffffffff81b25863 RBX: 0000000000000000 RCX: ffff88801dee0000 [ 789.475073][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 789.483163][ C1] RBP: ffffc90000157bd0 R08: ffffffff905775f7 R09: 1ffffffff20aeebe [ 789.491481][ C1] R10: dffffc0000000000 R11: fffffbfff20aeebf R12: ffffc90000157b00 [ 789.499847][ C1] R13: ffffc90000157b00 R14: 0000000000000000 R15: dffffc0000000000 [ 789.507968][ C1] ? __timer_delete_sync+0x163/0x520 [ 789.513394][ C1] __timer_delete_sync+0x163/0x520 [ 789.518727][ C1] schedule_timeout+0x15a/0x2c0 [ 789.523636][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 789.529043][ C1] ? __pfx_process_timeout+0x10/0x10 [ 789.534571][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 789.540758][ C1] ? prepare_to_swait_event+0x322/0x350 [ 789.546432][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 789.551518][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 789.556769][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 789.562789][ C1] ? trace_irq_disable+0x3b/0x140 [ 789.567868][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 789.574153][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 789.579587][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 789.584299][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 789.589736][ C1] ? __kthread_parkme+0x71/0x1f0 [ 789.594810][ C1] ? __kthread_parkme+0x196/0x1f0 [ 789.599881][ C1] kthread+0x388/0x470 [ 789.604075][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 789.609566][ C1] ? __pfx_kthread+0x10/0x10 [ 789.614203][ C1] ret_from_fork+0x514/0xb70 [ 789.618954][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 789.624446][ C1] ? __switch_to+0xc89/0x1420 [ 789.629331][ C1] ? __pfx_kthread+0x10/0x10 [ 789.634134][ C1] ret_from_fork_asm+0x1a/0x30 [ 789.638978][ C1]