last executing test programs: 2.385145717s ago: executing program 2 (id=2524): socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000140)={0x1, 0x3, 0xbd3e}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r6, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0xa}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xff000000, 0xffffff00, 0xff, 0xffffff00]}, @TCA_FLOWER_INDEV={0x14, 0x2, 'vlan1\x00'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast2}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r13 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r8, &(0x7f00000017c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 1.668102693s ago: executing program 2 (id=2532): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x164, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x150, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x34, 0x1001, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffff9, 0xb7, 0x10000000, 0x34e, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x164}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x20}}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_key={0x2, 0x8, 0x8, 0x0, "7f"}, @sadb_x_sec_ctx={0x1, 0x18, 0x10, 0xc3}]}, 0x88}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) (async) sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5", 0xc2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x1ff, 0x0, 0x9, 0x1, 0x4, 0x2, 0x3, {0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0xfffffffb}}, 0x7fff, 0xc, 0x0, 0x6, 0x2817c26c}}, &(0x7f00000000c0)=0xb0) (async) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x1ff, 0x0, 0x9, 0x1, 0x4, 0x2, 0x3, {0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0xfffffffb}}, 0x7fff, 0xc, 0x0, 0x6, 0x2817c26c}}, &(0x7f00000000c0)=0xb0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef010000140012800b0001006d616373656300000400028008000500", @ANYRES32=r7, @ANYBLOB="0a0003"], 0x48}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef010000140012800b0001006d616373656300000400028008000500", @ANYRES32=r7, @ANYBLOB="0a0003"], 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'erspan0\x00', r7, 0x80, 0x1, 0x10, 0x10000, {{0x26, 0x4, 0x1, 0x4, 0x98, 0x68, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @broadcast, {[@cipso={0x86, 0x18, 0x2, [{0x0, 0xb, "cf9abc75ac7b3daec6"}, {0x0, 0x7, "92a520040e"}]}, @rr={0x7, 0x7, 0xf1, [@local]}, @timestamp={0x44, 0x10, 0x5f, 0x0, 0x3, [0x10001, 0x1, 0xf]}, @end, @timestamp={0x44, 0x18, 0x74, 0x0, 0xc, [0x0, 0x8000, 0x1, 0x5aa9, 0x10001]}, @timestamp_prespec={0x44, 0xc, 0xa9, 0x3, 0x7, [{@empty, 0x2}]}, @rr={0x7, 0x7, 0x56, [@local]}, @generic={0x9fbed97e25cf0bf2, 0x11, "c10a5958617f0fec0f3d572586cbfc"}, @ssrr={0x89, 0xb, 0x81, [@remote, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x31, 0x3, 0x0, [{@local, 0x3}]}]}}}}}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x851) 1.667425353s ago: executing program 1 (id=2533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffffc, @remote}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair(0x21, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r5, &(0x7f0000000240)={&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/1, 0x1}], 0x1}, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1412ff00040801040000000000000000550000004c534c82404ad0b57afae955455a39464f0dc504be853b"], 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x25dfdbfd, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x2}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0) 1.411520372s ago: executing program 1 (id=2535): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x84}, [@algo_auth_trunc={0x4c, 0x14, {{'xxhash64-generic\x00'}}}, @encap={0x1c}]}, 0x158}}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xd4}, &(0x7f0000000080)=0x8) 1.250383543s ago: executing program 2 (id=2537): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x20, 0x2, 0x70bd28, 0x25dfdbfd, {0x3}, [@typed={0x8, 0x10e, 0x0, 0x0, @u32=0x2cb}, @typed={0xc, 0x3f, 0x0, 0x0, @u64=0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000000)="7f21547c", 0x4}], 0x1}}], 0x1, 0x0) listen(r2, 0xfff) accept(r2, 0xfffffffffffffffd, &(0x7f0000000440)) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000000040)=0x18) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010427bd70000000000002004000", @ANYRES32=0x0, @ANYBLOB="000004000a0001000180c20000000000"], 0x28}}, 0x0) 1.121498685s ago: executing program 1 (id=2541): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYBLOB="3000000003010102000000e318946c000a0000000c0019800800010094fb"], 0x30}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x7f, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r4, &(0x7f0000000280), 0x0}, 0x20) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x30, 0x26, 0x800, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xa, 0xe}, {0xffe0, 0x2}, {0xffff, 0x7}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=@newtfilter={0xffffffffffffffd2, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xfffb, 0x4}, {0x3}, {0x1b, 0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x80004b}]}}]}, 0x3c}}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x1900, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x4}]}}, @filter_kind_options=@f_basic={{0xa}, {0x1820, 0x2, [@TCA_BASIC_EMATCHES={0x20c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xfcf0, 0x2, 0x2}, {0x9, 0x3, 0x0, "5bde2d"}}}]}, @TCA_EMATCH_TREE_LIST={0x1c8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x28}, {{0x2, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x60, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x9}, "46be282a8f07e8ddde299fb2d4c1971dd867e1644996a3bc468a31cf119eaab1d6f6ffc57ed3ad8099f2700298cc7e77f0266e2b120380cbcfa16f601d424ebaf3564bc929fe032a37f7794573cb6b9854"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xfffb, 0x1, 0x77dc}, {0xd, 0x2, 0x7f2, 0x2, 0xe, 0x2, 0x1}}}, @TCF_EM_META={0x2c, 0x3, 0x0, 0x0, {{0xfffe, 0x4, 0xfffe}, [@TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x9}, {0x1000, 0x85}}}]}}, @TCF_EM_META={0x90, 0x3, 0x0, 0x0, {{0xff, 0x4, 0x10}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x5, 0x1}, {0x3, 0xf0, 0x1}}}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="efef92d8220577f63e", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x3a, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="969c6497", @TCF_META_TYPE_VAR="ef5b43aba96349", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="799321a11b53e879", @TCF_META_TYPE_VAR="d4be3604ac", @TCF_META_TYPE_VAR="fe11431b57eb", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="994d866318556a3c"]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="48b1975893", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x11, 0x2, 0x2}, {0x8, 0x4}}}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2}, {0x0, 0x80, 0x0, 0x5}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x7}, {0xff, 0x8000, 0x1000, 0x1, 0x5, 0xee1f2e7775a130cf, 0x2}}}, @TCF_EM_CONTAINER={0x48, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x400}, "ffd88cf6e193188a35db325aa3bb675f6eec03a4804f41128691a4b41f66f143abbd98e6c1b6d07c2337170d415ffe0fad372b7e0acb42fb269a6bf6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff9}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x1}, {0x7f, 0x7, 0x6, 0x3}}}]}]}, @TCA_BASIC_POLICE={0x410, 0x4, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x80000000, 0xe0, 0x42, 0x1, 0xb4, 0x2, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x0, 0x7fff, 0x3, 0x19, 0xb67, 0x401, 0x3, 0x3, 0x3, 0x400, 0xa, 0x0, 0x6, 0x4f, 0x100, 0x1ff, 0x800, 0x7, 0x9, 0x6, 0x7, 0x2, 0xc, 0x8, 0xffffffff, 0x1, 0x10000, 0x6, 0x2, 0xf, 0x10, 0xfffffcb5, 0x4, 0x100, 0x9, 0xff, 0xfffffffe, 0x2, 0x30e, 0x3, 0x8, 0x81, 0x2852, 0x3, 0x7, 0x8, 0xfc, 0x5, 0xe, 0x80, 0x5, 0x9, 0x80, 0x7, 0x4, 0x168e, 0xf85, 0x7ff, 0x1ff, 0xfffffff8, 0x5, 0x5, 0x8, 0x8, 0x9, 0x2, 0x9, 0x6, 0x1, 0x4a63947a, 0x1, 0x4, 0x7, 0x6, 0x2, 0x62, 0x2, 0x7, 0x6, 0x7f8, 0x73d0, 0x3, 0x77, 0x0, 0x2, 0x1, 0x5, 0x3, 0x2, 0xe12, 0xff, 0x71b, 0xfffffff7, 0x2, 0x6eb, 0xd, 0x0, 0x59, 0x3, 0x5, 0x7fff, 0xffff0001, 0x0, 0x0, 0xb, 0x2dd9, 0x5, 0x1, 0xc, 0x7, 0x93, 0x3, 0x500000, 0xfffffff0, 0x7fff, 0x5, 0x7fff, 0x9, 0x2, 0x0, 0xff, 0x7, 0x7ff, 0x7, 0x310, 0x9, 0x5, 0x9, 0xb47, 0x9, 0x7, 0x6, 0x3c1, 0x8, 0x2, 0x7, 0xd1, 0x5, 0x42f5fb38, 0x6, 0xfffffff9, 0xe000, 0x1000, 0x5, 0x1, 0xb799, 0x5, 0x1, 0x8, 0xd, 0x8001, 0x0, 0x4, 0x6, 0x5, 0x6, 0x101, 0x1, 0xa8, 0x3d5, 0x4, 0x4, 0x7, 0x1a, 0x5, 0x6, 0x2, 0x2, 0x3, 0x7, 0xe, 0x4, 0x4, 0x6, 0x0, 0x2576, 0x0, 0x7, 0x0, 0x1, 0x9, 0x4, 0x1, 0xff, 0xc0000, 0x7, 0x0, 0x1, 0x1, 0x8000, 0x8, 0x9, 0x311, 0x6, 0x4, 0x7fff, 0x200, 0x80000001, 0x1, 0x6, 0x9, 0x8000, 0x3, 0x0, 0x7fffffff, 0x8001, 0x3ddd, 0x5, 0x0, 0xb7a, 0x2, 0x4, 0x3, 0x7, 0x101, 0x8000, 0xae, 0x3, 0x6, 0x0, 0x8, 0xf8be, 0xc0, 0x5, 0x3, 0xffff8000, 0x7, 0x401, 0xfffffff8, 0x9, 0x4, 0xbe8, 0x7, 0xff, 0x7, 0x10000, 0x9, 0x8, 0x7, 0x1, 0x8, 0x2, 0x3]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xf}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff3}}, @TCA_BASIC_ACT={0x11f0, 0x3, [@m_mpls={0x14c, 0x18, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_LABEL={0x8, 0x5, 0x93102}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfe0e5}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0xed, 0x6, "bd3923cb025368d274fafdfd2d75801661903b88fcef071ee54378fba4d96b637b8184371dd4bda7fce97b0ccd78bbdad9c649ce6cd6e4808cff26e4a76b86c2e6e51c126197dd9b3d5b82ee5eccae5c1fb85f547f9e0a0f07613088fadb5bd4697d42e1a68f1c60b50ad4f19251739ee584a7b75c362d87078c49f9af25561875480370ff8d41319b0215f94db89dc8b5fe875eba10a942939292f316dd4ee863e4bf9c6ebb89eaf866c24b5be4c21531bc6574fc1600c8af5e37683906e2d446f631af75dc5a806c099e0c209f5f082c7af675a83beadfb1402593a0abc56bbdaf728c73bdd97524"}, {0xc}, {0xc, 0x8, {0x4}}}}, @m_xt={0x140, 0x7, 0x0, 0x0, {{0x7}, {0xec, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd0, 0x6, {0x3, 'mangle\x00', 0x3, 0x5, "4fe84eaf6c7c5127bcdbf0f374956c2032996b5542ffd9655cfe821b2772e3a6aa43e173c9b49323a9043c327d94456f373169bfadc3e16f88d98448d7c6e8a60c324cda58d7851c39a61f595ba2151c45b48ce2045c65208e1dbaa35ee36513a88814f094229c5c7f61829304f717e20b568db2abc76f368c074c5168582838302030630f1e0ebdc7f7d57678b4b6ece24b0b4c2c59dc6f4d791fa605847f8d11d92cf0c249"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x401}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x2f, 0x6, "ded5c3272150d189a89ea38c78358617f61d33925ac741671d3df2824ff0b1913f089b8bffa4d5ea6ee10b"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xa8, 0xf, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x61, 0x6, "aadb50100125efb7b711728a993c33a7c0df9dfe5a9baa670171a3fc396abf9c5081c1131282d4dd264c391a7234deeed871ee07d9957d252d347f7f6c957d93498103ebe7447ae9132943a23429f0064a5e9559b5a87020b87db8cf2a"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_police={0x170, 0xb, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x0, 0x4, 0x0, 0xc, {0x2, 0x2, 0x1, 0x3, 0xfffb, 0xffffffff}, {0x17, 0x1, 0xfe00, 0x14, 0x100, 0x1}, 0x0, 0x5, 0x100}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd66}]]}, {0xe2, 0x6, "b056a51399800e1192b298d21b58660e505af2aca5e611c30d5cb107861841fd59e5a46fb534b85334707022010760cbd77761f3354a10b7f3863f1d64d8bf584a5aad62e1ecd176d23719a28d6f59c7c4af04a98317f08d883dd7fcaf4cf5123d4c1f556cc96757bdebbd424ca1f29cd5bffe399bd694aa128672295498a776a29450b1ebc6e8c3794b5908161ee0e6a0387e72e9cadafcc7fd17329c6141f2f2b903b054e8624f464b9182e5cd43a53f8f9024ff045dee981354603603a0b947822b28c662ee6e36b98c0b2fa86b4437f64771a68e5f61790a2c5ac5ca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x130, 0x11, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x7, 0x4, 0x6}, 0x904a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x1, 0x101, 0x1}, 0x5}}]}, {0xc5, 0x6, "e96e691f67714e9c4f59d08d73424c57be54345ba1d846c4c452bf71ce261b542c93b62e2016adfd6eb6a33dacd0b945c879a2f2104758d200027937d65d9e6f63bedd5a1971b46a51c1139258d885652270b28b162f51e5394f0f6ef97a8e8796441c4e9782de2e63f6f0ca9adf7d46c22aa1534f337ced6752c3dc17839346d0f43ce58e66a2352ed9e5ccdaf4540ba519eefb10a1d13944279812eeec616e2e7b12b66d9cf8a7ab579ed6d327938a590e09aad0b4f257b956243408936d15ba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x138, 0x19, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x10, 0xa120, 0x3, 0x3}}, @TCA_DEF_DATA={0x8, 0x3, 'drr\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x5, 0x7, 0x9, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x7, 0x20000000, 0xa16, 0xba}}, @TCA_DEF_DATA={0x8, 0x3, 'drr\x00'}]}, {0xb4, 0x6, "f8aa095058b78e98403d74cef8aef08a17c97ed5f67e70a3c2b7bc11b8babe16e25664ba68ca3a26becdad58bbf901504a56ed63bb29f5dcb72d7cf1922e8070a505af4c08e25a3f901aaabfb22071f819066d7e62e8fe90793f89b4866047ee9e22626b27db07c7244c0a4b73dbc02d941b75afb4bdab5eb54ae0605aa94459bf301ddca0d9bd57ac4a68fb60b96fddf1c7486068d3e4aff8d600c0b2f19c8d7934b1243b9854b88b31ddec725ae51e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x140, 0x19, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xae, 0x10000000, 0x2, 0xfffffc00}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0x8, 0x6, 0x3f}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7, 0x6, 0x3ff, 0x9f92}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xeb7, 0x9, 0x5, 0x5, 0x3ff}, 0x4, r9}}]}, {0x92, 0x6, "98f5698c2e02741f4a5fd39b11ad63f22286befa6364545c3fe4c8c432eb2eb77ecc72981b7d6be500e870b4afbb458c7712ef79d0ffef28e88a4b31053cf8c5dfbdbab772e4c187f8c03a39751751bc98b6a86fe10b6aeb990100e8eed4898db9dc3f811583dc54537766ddedbceef249feb32be92f90894fbb54b567da9a6dd8e86b56cc315effae8416689173"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x9a0, 0x1c, 0x0, 0x0, {{0xb}, {0x96c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x8, 0x7, 0x3, {0x90, 0x2, 0xff, 0xe6c0, 0x5, 0x8f4b}, {0x2, 0x2, 0x9, 0xff01, 0x3, 0x3ff}, 0x7, 0x9, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffc01}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x1, 0x3, 0x4, 0x7, 0xfffff823, 0x7, 0xe6, 0x7f, 0xfffffff8, 0x0, 0x9, 0x8, 0x0, 0x80000000, 0x2, 0x3, 0xab7c, 0x80, 0x9, 0x10001, 0x1fffe00, 0x7, 0xc, 0xffffff3c, 0x8, 0x32, 0x6, 0x86, 0x3, 0xcc, 0x7, 0x3, 0x81, 0x10001, 0x0, 0x7fffffff, 0x8, 0x8, 0x10, 0xea, 0x9, 0xa, 0x1, 0x4, 0x6, 0xb2, 0x7, 0xa, 0xffffffff, 0xd2, 0x7, 0x3, 0x3, 0xfffffff0, 0xe6d, 0x10, 0x3, 0x4a52, 0x9, 0x4, 0x1000, 0x1, 0x8, 0x8, 0x8, 0x12a86fcc, 0x4, 0x80000000, 0x9, 0x8, 0x51b59235, 0xaa, 0x9, 0x3, 0x3bc7, 0x8, 0x2, 0x3, 0x8, 0x6, 0xe0a, 0x0, 0x9, 0x8, 0x800, 0x6, 0x1, 0x2, 0x80000001, 0x3, 0x74f, 0x2, 0x7, 0x8000000, 0x7, 0x4, 0x200, 0x401, 0xe, 0xd9, 0x3, 0x869c, 0x2, 0x9, 0xf, 0x10001, 0x47, 0x1, 0x0, 0x7, 0x3, 0x9742, 0xb6d4, 0xd65, 0x792, 0x8, 0x80, 0xc, 0x1000, 0x4, 0x7, 0x1, 0x6, 0xed2, 0x3, 0x8000, 0x2f00000, 0x6, 0xe, 0x1, 0x7f9c, 0x80000000, 0xb682, 0x5, 0xffffffff, 0xe, 0x8000, 0x7c37, 0xe, 0x2, 0x0, 0x1, 0x101, 0x2, 0x6, 0x4, 0x2, 0x4, 0x400, 0x0, 0xd, 0x3ff, 0x4, 0x35, 0x80000000, 0x2, 0x8, 0xbd98, 0x8a1, 0x0, 0x3, 0x8c, 0x4, 0x2, 0xe548, 0x1, 0xb, 0x0, 0x56e6, 0x80000000, 0x2, 0x0, 0xacde, 0x2, 0xfffffffb, 0x9, 0x6, 0x8, 0x1, 0xffffffff, 0xe, 0x1, 0x6d2, 0x1, 0xffff158d, 0x401, 0x3561, 0xc, 0x3, 0x531, 0x0, 0x3, 0xfffffff9, 0xfffffffe, 0xb34, 0x4, 0x9, 0xf78f, 0xfffffffe, 0xfffffff1, 0x4, 0x6, 0x38000000, 0x5, 0xf1, 0xfffff001, 0x6, 0xffffffff, 0x0, 0x40, 0x2, 0x7, 0x7f, 0x800, 0x2d7c, 0x1, 0x12, 0x10000, 0x6d4, 0x8, 0x4, 0x7f, 0x1, 0x40, 0x6, 0x0, 0x8, 0x4, 0x352, 0x6, 0x9932, 0x6, 0xd, 0x6e43, 0xffffffff, 0x80, 0x4, 0x4, 0xc8, 0x9, 0x7fff, 0x7, 0x4, 0x80000001, 0x4, 0x1ff, 0x10000, 0x4, 0x4, 0xe, 0x40, 0x1, 0x8, 0x0, 0x194]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x8, 0x5, 0xcc7, 0x6, {0x8, 0x1, 0x200, 0x6bf9, 0x800, 0x6a}, {0x0, 0x2, 0x8, 0x5, 0x401, 0xe}, 0x100, 0x8, 0x9}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0xfff, 0x8, 0x4, 0x9, 0x332, 0x3, 0x8, 0x6, 0x2, 0x1ff, 0xace, 0x5, 0x3, 0xe0b, 0x3, 0x1, 0x10000, 0x400, 0x5, 0x7fff, 0x5, 0xfff, 0x3c, 0x4, 0xffffda3c, 0x0, 0xdc, 0xa68, 0xd7, 0x0, 0x8, 0x1, 0x3, 0x600000, 0x4, 0x8000, 0x1, 0xfffffff5, 0x2, 0x5, 0x5, 0x1, 0xffff, 0x3, 0x7, 0x2, 0x59ff, 0x9, 0x2, 0x80, 0x6, 0x4, 0x15f, 0x3c, 0x3e, 0x8000, 0x4d3edeac, 0xefa8, 0x8000, 0xe907, 0x8, 0xfffffffe, 0x7, 0xfffffffc, 0xfffffffe, 0xc, 0xfffffffb, 0x7, 0x3, 0x75e8a7f8, 0x12c3f743, 0x39d8, 0x10, 0x7, 0x4, 0x2, 0xfff, 0x3, 0x9, 0x7, 0xffff, 0x6, 0x0, 0xaa, 0x5, 0x80000000, 0x3, 0x101, 0x8, 0x9, 0xc, 0x0, 0xd5d, 0x2, 0x710, 0x8, 0x60, 0x2, 0xffff, 0x3, 0xff, 0xc25, 0x3, 0x3e, 0x4, 0x1, 0x5, 0x800000, 0x2, 0x40, 0x8, 0x3, 0xc, 0x4, 0x7, 0x6, 0x8, 0x5968, 0xfffffff9, 0x1, 0x5, 0x5, 0x0, 0x2, 0x10, 0x1, 0x2, 0xfffffbff, 0xff, 0xfffffffc, 0xfffffff9, 0x917, 0x0, 0x101, 0x0, 0x0, 0xa5, 0xfffffeb5, 0xf, 0x0, 0x8, 0x4, 0x0, 0x3, 0x0, 0x1, 0x2, 0x3, 0x6, 0xc, 0x0, 0xc, 0x4, 0x8001, 0x1, 0xffffff9b, 0x5, 0x8, 0x7ff, 0x81, 0x4, 0x3, 0x7, 0xfa10, 0x0, 0xb5a, 0x9, 0x81, 0x5, 0x683, 0x0, 0xe8e, 0x0, 0x5, 0xfffffff5, 0x5, 0xfff, 0x0, 0x8, 0x4, 0xa, 0x4, 0x9, 0x1, 0x1, 0x81, 0x200, 0xffff0001, 0x3, 0xfffffffc, 0x8, 0x9, 0x3ff, 0x7, 0x5, 0x6, 0x4, 0xd, 0xe4d4, 0x6772ab3e, 0x4, 0x0, 0xfffffffc, 0x8, 0x1, 0x4, 0xfff, 0xcb, 0x8bb8, 0x38ca, 0x8, 0x4, 0x2, 0x7f, 0xd33, 0x3, 0x9, 0xb, 0x7fff, 0x5, 0x9, 0x7, 0x2, 0x8, 0x3, 0x0, 0x7fff, 0x1000, 0xfffffffb, 0x6, 0x6, 0x8e, 0x80000001, 0x0, 0x5, 0x81, 0xfff, 0xb, 0x2, 0x3, 0x6, 0x7800000, 0x18a000, 0x314, 0x4, 0x8, 0xfffffe00, 0x4, 0x800, 0x0, 0x6, 0x0, 0xfa66, 0x10000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x0, 0xffff7fff, 0x7, {0xad, 0x2, 0x2, 0x1, 0x1, 0x100}, {0xc, 0x2, 0x7, 0x8, 0x4, 0xfff}, 0x6, 0x7fffffff, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0x401, 0x9, 0x804, {0x3, 0x0, 0xffff, 0x2, 0x5, 0x60}, {0x4, 0x2, 0xc4, 0x100, 0x7, 0xfffffff9}, 0x6, 0xf57, 0xb2b}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff00000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x8, 0x2, 0x5, 0x80000001, {0x8, 0x0, 0xcf78, 0xf0b4, 0xffff, 0x8}, {0x4, 0x0, 0x3, 0x2f15, 0xb, 0x1}, 0xc, 0x4, 0x2}}]]}, {0xc, 0x6, "26a9dab98f335301"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0xd481202f4754eb3c, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xb}, @filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e23}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast2}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xd, 0x9}}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xd}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0xff, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xe1}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x2e}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xfff3}}, @TCA_FW_ACT={0x4}, @TCA_FW_MASK={0x8, 0x5, 0xa6f1}]}}]}, 0x1900}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$l2tp(0x2, 0x2, 0x73) 882.481314ms ago: executing program 1 (id=2544): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000004480)={&(0x7f0000004380), 0xc, &(0x7f0000004440)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000e7070001"], 0x20}, 0x1, 0x200000000000000}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async) getsockopt$packet_int(r2, 0x107, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x15, 0x3, 0x4, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000002c0)={0xe9, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e23, @remote}}}, 0x108) 880.794565ms ago: executing program 3 (id=2545): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) r0 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x634c, 0x4, 0x3, 0x0, r1}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x5, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r3, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r7, 0x80, 0xce, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x14) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) (async) writev(r9, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) 809.942998ms ago: executing program 4 (id=2546): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 793.327209ms ago: executing program 1 (id=2547): r0 = socket$inet6(0xa, 0x3, 0x5) socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) read(r0, &(0x7f0000000040)=""/244, 0xf4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00'}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="40f90eac1b01421f02ae3880fe03d44dd8000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100ffffffff1c0004800500030001000000050003000000000005000300070000000800020003000000"], 0x40}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x54, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee213459a7a00"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8084) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x38, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x44081) 710.494373ms ago: executing program 0 (id=2548): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a50a000008000b0000000000060001"], 0x34}}, 0x20) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 709.937059ms ago: executing program 3 (id=2549): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000000c0ff7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 662.32915ms ago: executing program 4 (id=2550): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x11}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x80, 0x4, 0x8000, 0x8, 0x3ff, 0x6]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) (async) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 652.001563ms ago: executing program 3 (id=2551): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)}], 0x1}}], 0x1, 0x48000) sendmmsg$inet(r0, &(0x7f0000002a80)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f00000002c0)="c09ef0faad91656d5e02187e6fb67164715d0578733e0443df155a4cfe7b5ee5ddf7dba04ceaa70fcb09981ae2c5aff54a2376e4dda8e9959eb3e996c493cd088f6edf3ecd812e92910a6e21a5bf920ce570bd7be713df14b9ef48796f14c11107407ec1e416455423bfb3dd1c37e896a26b73c0dd6890501bd1d5e2a10d73", 0x7f}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000340)="b304687572addeb56d6144fae5870ed23331c978e07025d9e87cea6231cbdc375064d0b0e7b76fe0071d9e3d87122ec3db1ceeb4b27d2301307d95e001cf4ea0efcb3278e07deb9ca602d7daeafd088edc66c0b3900b199a6359a2fb74a106d7c07df009db3de2f80cbef018f62d33af18d2604a5bc65b5043867d52ac333c090c9270f99d5e3d3d6849657a77", 0x8d}], 0x3, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @private=0xa010101}}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x7, 0x90, [@loopback]}, @timestamp_addr={0x44, 0x54, 0xa6, 0x1, 0x6, [{@empty, 0x121}, {@broadcast, 0xe8c7}, {@remote, 0x5}, {@multicast1, 0x5d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1f8}, {@rand_addr=0x64010101, 0x5}, {@private=0xa010100, 0x9}, {@private=0xa010100, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffc}, {@multicast1, 0x2}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xc1, 0x0, 0x4, [0x7a0a]}, @timestamp={0x44, 0x8, 0x55, 0x0, 0x4, [0x5]}, @cipso={0x86, 0x10, 0xfffffffffffffffd, [{0x2, 0x2}, {0x7, 0x8, "857e5914c50f"}]}, @generic={0x94, 0x6, "b1cb4068"}, @timestamp={0x44, 0x10, 0x89, 0x0, 0x3, [0x2, 0xd8, 0x5]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x148}}, {{&(0x7f0000000740)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001c80)=[{&(0x7f00000007c0)="71ca5420f803b23ca2744bef7cedd5e648fb2d20626dc15c2e1d3518190e8648dcd146b596025e86eae0ffa50087584fad14fc35601a590f16928c955fd34e43a95fa5a8d719746e08e9bad757a067e1303ce619fb6cd73b652385468151bebe2cde8c4d8b0158f868002e12b813ecd04b29867727d03cde551e6635f2f0f70019d791815af1415c5df8c76e0726412f14472abde81bb025e5f06dbaf1062625008dda545f1b5806fe499f31592b99cb96b8d7188920f43028c2116147727980d2b99af4", 0xc4}, {&(0x7f00000019c0)="013bd2f8b82b60df4c27d41c7a34f8c360134645bb120e5639b2a94040c18b44abc97c371335c21558811479f5f4af885c0f618b50c6d5edc830cb33d665f15a7cdab2594df77eb8fe828f2537fb256ab279eebed5f0986dd3a0a307e10b47d9fd1d9e2f31cc868f1e251444147195a2dadea064686460fb253619b52c521003b0b96093ae0a61c59869c7e8a8356344f92504e0ba2ac701c3f4ef4365418dfe3a72102e8b6f09a6f1c7af7705534d7616a4b3ef8bbe17e05c271fb006df3b6f24d2236f2c5d436be8412098527f271da499f02475c223aff35570c52e59623d046574cda6d60dfe155af76f52", 0xed}, {&(0x7f00000008c0)="69a6b9ac8b83742717326a1b8bab7bb0cf10c626504f3b531beabf8ed04d889f22a51e2600ae39122b1e41d8d9c881e6eb842dade16e1da3691446542ffde378d9e2d4aff5e872a54360604f478ea4f4c745f1df72a6586e582cd8c8f0189246be00f84aa05355417f1c34", 0x6b}, {&(0x7f0000001ac0)="286cc8bb32aea2d73aa402e4e18f684084bd68f78dc1e3e029a733a4855e6015f4dce215108dc171497f6a790303a921db174dff2f7399aca2263663bee8e0abe79fe76d71f45ca700ad4abf210fa5d302e92d57a7284799f65183c20d650d07b1d361f7a359f01317678e7024541120384b86b75fb8ceffac861548e7c96f6bf396258d54c77b162905df2f3b8ac09a309da228ebba4ff895cb2af3e745fb54eb3bd469d5cb649e70457241b9e2435ce85a06ee76fc1940463b6cf37b41e9c18fe5fc1a6c8d2d27f069277348fec0f478a6cbdcf2e79fe89543a4f7ef9bb34b55e9772282050921813e3bfc3878d86783d41c895652", 0xf6}, {&(0x7f0000000940)="d94112c6cc789c05948191f8b0750032a1685439ae6d6fb9897f0f01eec0b02d", 0x20}, {&(0x7f0000001bc0)="252150f4842f86e42fa0f6a6f58228471e7b53109e50eb43a16153975f12af35acda689b7c57f200597d6b1764a0a8c688f5e306169a19d62b46e5f515d34eeec6031aedad0007cb87d8f4ce291477970722d7a2aa8cb1015b0cbd510e3d9da82550a72123e905e64b0ec230c445f0dd318ffed2b0ecbc2a6d0ef24218edface72a1cb4e996b0fb356762a599e8793da6bec9948cb02e08859618a7b7fcc6d91f1bfc27fcb0c2d295da359", 0xab}], 0x6, &(0x7f0000001d00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}}, {{&(0x7f0000001d40)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000002280)=[{&(0x7f0000001d80)="98beace6ab9d9c67422ef6b6bf9030cf0d897e489871a618c424541753e5e3b0a7a262383cc301a1971a013b28399fb7f95faf135ec0a92c1277ef55a50eadbde25dde5497899dff551f336d5e125a942588694b39e28896650af7056595dd231408ab05b83e87fd9df3fbe13a58ea4af9d1c058e4bddc00ffec0b72df564c84ce1e209917b82f7d2f449eaa16f8958d6bb91e755cb9fcf66737cb7f8ca2c28e1c7d07d079b6a1abcf", 0xa9}, {&(0x7f0000001e40)="70e9345ae4ba6457fba8aec5123be672975a2d1fcab6f2f062ac1bdd1874ce38c6c2b6db9e0f20ab2149a03f78f44a1b2cfa83e14a74a2e30d", 0x39}, {&(0x7f0000001e80)="03dffbca51c48de22ca206e3c2786556fa39b4a704c1d3b4baf97956b613fa22f91188c0d4a5f7fbf9915478119e85e262961a318a2966fc33abf9c3bbd92a885b200cae1e425cdfc9e7e89ea52f3f428a59a9e63742a62de52050183ad108a7ec07f096218100955ccaf221f98e7838b3a0751de48194609d460aa786351b016ecc8ecc21efeb2f4af9288547cb05537639f98f63cb509ac0fa0462c038f68b6e6fa695f2ee573a457e4b94efc3dd51cd23c9ce31fb27358411aea09da4d7784a77d51b6ad04324e1b3dd197fae637b136beedb2b7042b2c5fb1f05ffc230a4a81852818b6e", 0xe6}, {&(0x7f0000001f80)="bfccc63e50", 0x5}, {&(0x7f0000001fc0)="0522ce3f924a8fd06c393522b950c3161b9ed7cd2d55909e9b83df80b563e28e2502e4cf380f9ba45d674bd39faaf555cdeaa1632f2fe1a7fc11665084869bee47aaf3cf87fb6e25532fdb0beb0a717baa611c121283c887af2bc6314dcbe94bdaeb19dc489fff392694181b32ba0d039b38dd652581897c36f733d7d20a7fff0f396da3622b985309b19dbf95f6ba66a95734ae1550a2e91b8fa3182d4ddf25c3e4e1b105a092d1ad316448486c9c6e777421c903824afa6f0d62226a6409035ec54ba39fac399724d3e21d8cc33370019128e08c8f4dbeed5ce883263a3c82427c3bb048f4582c8db9965807ac006e0f4d293315bb3b83", 0xf8}, {&(0x7f00000020c0)="c3dcc230", 0x4}, {&(0x7f0000002100)="31d7d8f354922558e37e6ecea26497b038c6d41fb549efe295ee1fb0b7fae29a2a798fbc720ea56bfc9621613355115e73ce0493f35609b463f38264bc313c4082fb914efa9899ed74126c629e10bc7f71b686639a7e46fe5125ac2b8266c5c68d1695f3cd3d29923904c233cfc846a43dde692acba13f0956918188b547b8433d9f38d93c82f58dad47d1", 0x8b}, {&(0x7f00000021c0)="87cf0e129b5d2529a882c23c4478595081dbe15e1411834de3df4a7d42b5a8ff327203230ee4697aba4bd793878af7f5175eac647030686a4a8848342b115111f4f4e7cda33409048946cc7196c476d3e51e75a975ec2d93c994e31e9e27a909100e9e2b9c773f51541300615d5a2239689eb0f484b07b3687e9153cba68309f36497e202e1238d3deba48a75bbf9cc5", 0x90}], 0x8, &(0x7f00000023c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x5a, 0x2, [{0x5, 0x3, "c4"}, {0x0, 0x5, "030016"}, {0x1, 0xc, "70429e049c93bb6c2691"}, {0x7, 0xb, "c2f4ca2b7476ed04ce"}, {0x5, 0xa, "59a66cce1a813994"}, {0x1, 0x12, "3b7a9f950e09837859848eae46b6f303"}, {0x6, 0x3, '3'}, {0x7, 0xa, "82eb4c4e4bc30d1e"}, {0x7, 0x2}, {0x5, 0xa, "faad9e627e5f1a3e"}]}, @timestamp_prespec={0x44, 0x44, 0x75, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast1, 0x6}, {@empty, 0x895}, {@multicast2, 0x2}, {@local, 0xfffffffb}, {@loopback, 0xfffff23f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @end, @cipso={0x86, 0x9, 0x2, [{0x5, 0x3, ','}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x2, [0x3f]}]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0x7, 0x9, [@remote]}, @lsrr={0x83, 0xb, 0xc8, [@empty, @private=0xa010100]}, @noop, @generic={0x83, 0xc, "162377de3437d3bc9e34"}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x198}}, {{&(0x7f0000002580)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000002740)=[{&(0x7f00000025c0)="35aa04375a4ce3d3c5efe0f95aedd8e3df39f5728c1e3791f2d560834c4f9053d56d33a372326e99e16216bcccffbc5af0cf922508feb0cd1d0c2b4b4b374bc52e67343fe0e3744d7a3474229b61a3501a82c2c759b68cf918f4ee0bdfd4c3b61caa77335bef3a592fec1e58379f419ec67e57b369862fd7b65d3b223e2ad3d7160420f5be6798d2", 0x88}, {&(0x7f0000002680)="c0dd210a2f61d1d0e79092a28667ce2bd78fa4d73e0f82177b51cdf3d6f010b02a8ab0313c2db03f4596b71fab1d6721565efb21a97916dacad9a016788d", 0x3e}, {&(0x7f00000026c0)="9b9e18bc44b7b9e7765aa05e70860da07dd762172c5a11ff0942929df28d7613d0ee833d2b96bfb52327aa01cdc5544ae9005abe34b1de643805321bc89767cc2d3cdadca6c5b9d79f649a7862591dd6be2cd3d2917e9b74d2a75ce1a25320c11c9648cbdbe7225ba9d59bbfc5018d318956f9", 0x73}], 0x3, &(0x7f0000002780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7c522f52}}], 0x90}}, {{&(0x7f0000002840)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000002a40)=[{&(0x7f0000002880)="57a237c50ffa32f2f30947d08c19e9b742e4a20db0bf92de4924abe07dc1576a40154aba217bf73e292fdf6c3388aed788956059eb601ac7e2661b7d1ed4e89b509a8cafd6734c1642a0506c8273ffdeb1ea97690ef1b0726160fd6c14a8fa171c942666d5b498", 0x67}, {&(0x7f0000002900)="c1f5b6922bca4781196d53d8fe1a91592443f6e72cc5f50c6a5f5e01741f868f94ff6de808d8f67790120bd14a100fbf90f7e5b1698b045e1e3c87f69e54a830886abbd7f54f34aaab", 0x49}, {&(0x7f0000002980)="9f1c3b847936503e66310d7c9bbff4af5c6172fd99aa6af37639eb6161e7c2df7fab9b68ec35da7738251452453a7efd765ef70e3deb6333b8abf17853cb0a6a4a25c62ba6c088517698941dc36b7bca3b2ba08910745a00524cfa7caa3676dc183e1d3e547f1c514850eb81c58581fd39c7526cc00c84cddbd92c086f00471b94ec2d340fb42feaa4594ebcf14f94458f07e53b9dbabebc9a66f2030312dfad2aa95265de7b40598904fea6a9ff01e0b6eab0213d1e", 0xb6}], 0x3}}], 0x5, 0x4880) 514.376955ms ago: executing program 0 (id=2552): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r2 = accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffffffffffc4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@can_newroute={0x264, 0x18, 0x4, 0x70bd2c, 0x25dfdbfb, {0x1d, 0x1, 0x4}, [@CGW_SRC_IF={0x8, 0x9, r6}, @CGW_CS_CRC8={0x11e, 0x6, {0x2b, 0x2, 0x71, 0x7, 0x75, "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", 0x0, "f6628e2fba20b97320aedd63edd2bc1f453dff84"}}, @CGW_CS_CRC8={0x11e, 0x6, {0x53, 0x71, 0x27, 0xe, 0x9, "fbbe4a51a1ee941659e2f8c5387cc73e7735f792dcfdef3d357a522a07a54b1fdff20084986c2658187235779b4816ce701e110972babcc6588e95b864f1d2a1d4f82cb385eff4292aec979826cabf44ac29fc90b0aad1f2177878e9ef70814dc7bff1935fd5e694ff61e0a193ee2eaa0ee84b8da49e534b1faa73f706c42b21ea691418f100edf3274381b135fbab40c2b04607a3ace9b3901ce94b6040b486ef74815149512f1d0fe73f8ecc647a799107d61f8aa273e8e0bd28d8c2d39da9f5bb8ebc718e68cb707f8abc6f26b6d1e6ae4f5c335f43ba18df59bc2b244352e271907b64b1dab32e240a6a9f6fefe6d70f0d22fb00267787b145bc66cac3a0", 0x0, "814fb4b091692c65053c9a1983c0358f7e7cbd4e"}}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x264}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffffffffffc4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@can_newroute={0x264, 0x18, 0x4, 0x70bd2c, 0x25dfdbfb, {0x1d, 0x1, 0x4}, [@CGW_SRC_IF={0x8, 0x9, r6}, @CGW_CS_CRC8={0x11e, 0x6, {0x2b, 0x2, 0x71, 0x7, 0x75, "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", 0x0, "f6628e2fba20b97320aedd63edd2bc1f453dff84"}}, @CGW_CS_CRC8={0x11e, 0x6, {0x53, 0x71, 0x27, 0xe, 0x9, "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", 0x0, "814fb4b091692c65053c9a1983c0358f7e7cbd4e"}}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x264}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) 498.506482ms ago: executing program 1 (id=2553): socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.stat\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x3, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0xc, 0x8, 0x3}, 0x48) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f00000005c0)={0x0, 0x33, "33355b67f3b62708a115b4e41f6a54e0fac7cce348f0c903f50863c60fd0b9db5268cfaa406fdc2f91bb1e7df1dd0681119a42"}, &(0x7f0000000600)=0x3b) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000640)={r9, 0x4, 0x99b, 0x81, 0x4}, 0x14) r10 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000000)=@udp6=r10}, 0x20) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xfff, 0x8}, 0xc) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000ff0000000008000000000000000000000000000000000000fe00"], 0x50) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r6}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r14, 0xffffffffffffffff}, 0x91feb212) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x10, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000140)='GPL\x00', 0x0, 0x7, &(0x7f0000000180)=""/7, 0x41000, 0x4, '\x00', 0x0, @fallback=0x10, r3, 0x8, &(0x7f0000000200)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x8, 0xfffffc01, 0x5}, 0x10, 0x0, r6, 0x0, &(0x7f0000000480)=[r7, r8, r11, 0xffffffffffffffff, r12, r13, 0x1, r15], 0x0, 0x10, 0x10}, 0x94) 456.283758ms ago: executing program 4 (id=2554): r0 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x44c, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x420, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x0, 0x7, 0x8, 0xe373, 0x6, 0xc, 0x0, 0x5, 0xfffffffd, 0x9, 0x0, 0x6, 0x9, 0x6000, 0x20, 0x7, 0x9, 0x8, 0x1, 0x3, 0x8, 0x0, 0x4, 0x3, 0x0, 0x6, 0x2, 0xa, 0x7, 0x6, 0x8, 0x5, 0x7, 0xfe86, 0x2, 0xc1, 0x7fff, 0xffffff7f, 0x0, 0x318, 0xe, 0xffff57af, 0x39, 0x80, 0x1, 0x9, 0x9, 0x62c1e3f0, 0x8, 0x4, 0xff, 0xffffffff, 0x0, 0x0, 0x8, 0x6, 0x6, 0x3, 0x8, 0x5, 0x4, 0xc, 0x40, 0x80000001, 0x2, 0x0, 0x101, 0x8, 0x7, 0x4, 0x4eba, 0x6, 0x6, 0x200, 0x1, 0x6, 0x8, 0x2, 0x9, 0x81, 0x283, 0xc01, 0x5, 0x144d, 0x5, 0x0, 0x9, 0x9, 0x869, 0xfffffffa, 0x7, 0x8, 0x4, 0xd, 0x5, 0x5, 0x3, 0x0, 0x8, 0x3, 0x4, 0x5, 0xe, 0x3, 0x9, 0xff, 0x6, 0x2, 0xa, 0x9, 0x1, 0x9, 0x81, 0x1, 0x3d53, 0x101, 0x0, 0x1, 0xdfa, 0x8, 0x10, 0x27892f68, 0x91a, 0x7fff, 0xe63, 0xbaa, 0x400, 0x6, 0x6, 0x200, 0xef, 0x3, 0x7, 0x0, 0x3, 0x10, 0x40, 0x6, 0x5, 0xe0, 0x1, 0x2, 0x2, 0x2, 0xb, 0x1, 0x9, 0x7db75af5, 0x6, 0x80000001, 0x6, 0x0, 0xfffffeff, 0x7, 0x9, 0x357, 0xfffffff8, 0x8001, 0x2, 0x7, 0x38, 0x80000001, 0x1, 0x60, 0xfffffffb, 0x80000001, 0x80000000, 0x5ab826f0, 0x2, 0x101, 0x9, 0x1, 0x675, 0xe, 0x5, 0x2, 0x291, 0xc, 0x5517, 0xb0, 0x327, 0x8, 0x5, 0x80000000, 0x7, 0x3, 0xfffffffe, 0x2, 0x6, 0x1, 0x189ce, 0xfffffffd, 0x401, 0xe4c5, 0x3, 0xfffffffb, 0x2, 0x10, 0x80, 0x4bea, 0x5e73, 0x5, 0xe8c, 0x10001, 0x0, 0x1, 0x7fffffff, 0x8, 0x2e, 0x5, 0x7, 0x6, 0x6, 0x7f97, 0x8a4, 0x6, 0xffffffff, 0x9be5, 0x3ff, 0x800, 0x1, 0xfffffff9, 0x5, 0x1, 0xfff, 0x5, 0x4, 0x4, 0xde6, 0x6, 0x7, 0x5, 0x7, 0x101, 0x0, 0xffffff81, 0x7, 0x6, 0x2, 0x7, 0x9, 0x10, 0x2, 0x5, 0xa, 0x1, 0x100, 0x2b7, 0x43b, 0x40, 0x0, 0x66d7, 0x45edf6c4, 0x1, 0x3]}]}, @TCA_FW_INDEV={0x14, 0x3, 'wlan1\x00'}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_HASH_LEN={0x8}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r7, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) 417.234163ms ago: executing program 3 (id=2555): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000180)=0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, &(0x7f0000000140)) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004800600030076657468315f6d61637674617000000008000140000000050b00070066696c746572"], 0xf4}}, 0x4091) 310.546029ms ago: executing program 0 (id=2556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000240)={0x0, 0x41, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20048095}, 0x20000040) 309.963329ms ago: executing program 2 (id=2557): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_IE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newlink={0x24, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x74, r4, 0x0, 0x11203}, [@IFLA_VF_PORTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000000000000000000ff7f000000000000", @ANYRES32, @ANYBLOB="ef060000007e2a21be108f3dc8ed01b40ff61106", @ANYRES32=r4, @ANYRES32, @ANYBLOB="04000000020000000500"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x1d, '\x00', r4}, 0x94) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x40, r9, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x8000, 0x7ff, 0x400, 0x8000, 0x24, 0x1, 0x9, 0xae00, 0x2]}]}, 0x40}}, 0x0) 303.611985ms ago: executing program 0 (id=2558): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe, 0x20}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) close(0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x2}}]}, 0x1c}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x18) 274.15194ms ago: executing program 4 (id=2559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000600000000000000000000d008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}]}, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x20e, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1d8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @loopback, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x33, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x1, 0x52, "08f1390b0c74cba47ed1dbe3290dbd16fe15f3802c8f12d8687cb72f6783172e63fafc0bc19fc7ea5e20fe65290cc5531784929dd4b5c8ff0df008542d00f6159b80595da8d72872864da820552af488c1ce"}]}]}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001a0001000000000000000000818000000003000000000000140001"], 0x30}}, 0x0) 202.362499ms ago: executing program 3 (id=2560): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000001177fbac141416e000030a89079f03b180004408050300845013f2325f009409050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 192.141831ms ago: executing program 0 (id=2561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x7, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'gretap0\x00', 0x1000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2280, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @broadcast, @val={@void, {0x8100, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) (async) r2 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r2, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00'}) (async) r3 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x2, [{}, {}]}, 0x48) (async) socket(0x10, 0x3, 0x0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r4, &(0x7f0000000040)="0d000000010001", 0x7) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) (async) write$cgroup_pid(r6, &(0x7f0000000140), 0x12) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'dvmrp0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}) (async) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000280)=[{{&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)="000d0000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000100)={0x2, 0x4e61, @loopback}, 0x10, 0x0}}], 0x2, 0x20004086) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x2a) 131.54628ms ago: executing program 2 (id=2562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c000580040001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000140)={'syzkaller0\x00', 0x10}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x14}, 0x94) 82.556698ms ago: executing program 0 (id=2563): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0) 81.261383ms ago: executing program 4 (id=2564): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0x2, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {0x1}, {0x1b, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x4c}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 79.706792ms ago: executing program 3 (id=2565): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = accept4$rose(r2, &(0x7f00000000c0)=@short={0xb, @remote, @default, 0x1, @null}, &(0x7f0000000100)=0x1c, 0x80000) bind$rose(r3, &(0x7f0000000340)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @default}, 0x1c) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x80fd, 0x3}) 10.186541ms ago: executing program 4 (id=2566): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817d0800000024001280110001006272696467655f736c617665000000000c00058008000300950d0100140003006272696e67655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044080}, 0x4040) r2 = accept$alg(r0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x400000, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000007}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x2}}}}]}]}, 0x70}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) sendmsg$alg(r2, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@assoc={0x18, 0x117, 0x4, 0x7e}], 0x18}, 0x80) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001640)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000001700)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ec67e809e68ca18f0241349dc535", 0x38}, {&(0x7f0000001880)="371f6caa2f6c27730337ec033b03285189", 0x11}], 0x4}], 0x1, 0x840) recvmsg(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000980)=""/124, 0x7c}, {&(0x7f0000000240)=""/156, 0x9c}], 0x2}, 0x10001) 0s ago: executing program 2 (id=2567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000ed884fb800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c0002800800030001000000"], 0x38}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x48, &(0x7f0000000040)=0x9, 0x4) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce) kernel console output (not intermixed with test programs): ulticast mode [ 160.494882][ T9110] macvlan0: left promiscuous mode [ 160.506771][ T9110] batadv0: left promiscuous mode [ 160.543215][ T9114] bridge1: entered allmulticast mode [ 160.569357][ T9116] macvlan0: entered promiscuous mode [ 160.578869][ T9116] batadv0: entered promiscuous mode [ 160.585000][ T9116] debugfs: 'hsr1' already exists in 'hsr' [ 160.592447][ T9116] Cannot create hsr debugfs directory [ 160.598475][ T9116] hsr1: entered allmulticast mode [ 160.605047][ T9116] macvlan0: left promiscuous mode [ 160.620187][ T9116] batadv0: left promiscuous mode [ 161.014708][ T9144] tipc: Can't bind to reserved service type 0 [ 161.256078][ T9164] netlink: 'syz.0.1030': attribute type 18 has an invalid length. [ 161.750194][ T9191] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.765386][ T9195] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 161.781322][ T9195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.808891][ T9195] netlink: 'syz.1.1042': attribute type 83 has an invalid length. [ 162.013065][ T9207] netlink: 'syz.4.1044': attribute type 1 has an invalid length. [ 162.220148][ T5902] IPVS: starting estimator thread 0... [ 162.306568][ T9224] IPVS: using max 36 ests per chain, 86400 per kthread [ 162.875262][ T9260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.040945][ T9269] netlink: 'syz.0.1066': attribute type 5 has an invalid length. [ 163.470795][ T9299] syzkaller0: entered promiscuous mode [ 163.476298][ T9299] syzkaller0: entered allmulticast mode [ 163.528741][ T9299] tipc: Enabled bearer , priority 0 [ 163.557480][ T9296] tipc: Resetting bearer [ 163.597849][ T9296] tipc: Disabling bearer [ 164.034610][ T9329] syzkaller0: entered promiscuous mode [ 164.051613][ T9329] syzkaller0: entered allmulticast mode [ 164.203438][ T9339] __nla_validate_parse: 15 callbacks suppressed [ 164.203455][ T9339] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1085'. [ 164.525682][ T9351] vlan2: entered promiscuous mode [ 164.557669][ T9351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1092'. [ 164.618096][ T9357] netlink: 'syz.1.1094': attribute type 1 has an invalid length. [ 164.737131][ T9365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1095'. [ 165.060917][ T9385] nbd: couldn't find device at index 61440 [ 165.380162][ T9402] netlink: 'syz.1.1106': attribute type 4 has an invalid length. [ 165.465606][ T9408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1107'. [ 165.509289][ T9408] netlink: 'syz.2.1107': attribute type 7 has an invalid length. [ 165.526578][ T9408] netlink: 'syz.2.1107': attribute type 8 has an invalid length. [ 165.554656][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1107'. [ 165.658649][ T9415] openvswitch: netlink: Duplicate or invalid key (type 0). [ 165.667559][ T9415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.804262][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 165.813417][ T9424] netlink: 'syz.4.1112': attribute type 30 has an invalid length. [ 165.821819][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1112'. [ 166.047674][ T9434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1115'. [ 166.200461][ T9440] netlink: 'syz.2.1118': attribute type 10 has an invalid length. [ 166.239604][ T9440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1118'. [ 166.330773][ T9440] team0: Port device geneve0 added [ 166.509581][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056c9ec00: rx timeout, send abort [ 166.518146][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056c9ec00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 166.652360][ T9459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1123'. [ 166.950370][ T9474] syzkaller0: entered promiscuous mode [ 166.963718][ T9474] syzkaller0: entered allmulticast mode [ 167.017652][ T9474] tipc: Enabled bearer , priority 0 [ 167.089780][ T9473] tipc: Resetting bearer [ 167.147908][ T9473] tipc: Disabling bearer [ 167.274392][ T9494] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 167.563781][ T9507] macsec0: entered promiscuous mode [ 167.570939][ T9507] macsec0: entered allmulticast mode [ 167.615587][ T9507] veth1_macvtap: entered promiscuous mode [ 167.622477][ T9507] veth1_macvtap: entered allmulticast mode [ 167.630484][ T9507] macsec0: left promiscuous mode [ 167.635703][ T9507] macsec0: left allmulticast mode [ 167.642070][ T9507] veth1_macvtap: left allmulticast mode [ 168.159980][ T9538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.180401][ T9538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.197214][ T9538] bond0 (unregistering): Released all slaves [ 168.260855][ T50] bond2: (slave veth0_to_bond): link status definitely down, disabling slave [ 168.281509][ T50] bond2: now running without any active interface! [ 168.413097][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807952bc00: rx timeout, send abort [ 168.421523][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807952bc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 168.978646][ T9580] netlink: 'syz.4.1157': attribute type 1 has an invalid length. [ 169.006622][ T9582] syzkaller1: entered promiscuous mode [ 169.012642][ T9582] syzkaller1: entered allmulticast mode [ 169.073215][ T9582] netlink: 'syz.2.1158': attribute type 6 has an invalid length. [ 169.386577][ T9597] __nla_validate_parse: 10 callbacks suppressed [ 169.386594][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1165'. [ 169.490333][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'. [ 169.505744][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1166'. [ 169.742441][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'. [ 169.821047][ T9614] netlink: 'syz.2.1171': attribute type 2 has an invalid length. [ 169.821452][ T9611] netlink: 'syz.2.1171': attribute type 2 has an invalid length. [ 169.857085][ T9610] bond0: (slave bond_slave_1): Releasing backup interface [ 170.128964][ T9623] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1175'. [ 170.478490][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057cd5c00: rx timeout, send abort [ 170.487281][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057cd5c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 170.850908][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1190'. [ 170.955993][ T9667] macsec2: entered promiscuous mode [ 170.974579][ T9668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1192'. [ 170.991214][ T9667] macsec2: entered allmulticast mode [ 170.997821][ T9667] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 171.032415][ T9668] xfrm1: entered promiscuous mode [ 171.037698][ T9668] xfrm1: entered allmulticast mode [ 171.043353][ T9665] tipc: Enabled bearer , priority 0 [ 171.050841][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1192'. [ 171.090294][ T9673] syzkaller0: entered promiscuous mode [ 171.120453][ T9673] syzkaller0: entered allmulticast mode [ 171.145062][ T9665] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 171.164851][ T9665] tipc: Resetting bearer [ 171.179726][ T9664] tipc: Resetting bearer [ 171.219082][ T9664] tipc: Disabling bearer [ 171.261743][ T9678] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1195'. [ 171.286582][ T9678] netlink: 'syz.3.1195': attribute type 2 has an invalid length. [ 171.559183][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1200'. [ 171.576673][ T9695] netlink: 'syz.4.1200': attribute type 5 has an invalid length. [ 171.625230][ T9695] geneve2: entered promiscuous mode [ 171.642445][ T9695] geneve2: entered allmulticast mode [ 171.660073][ T3463] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 171.688508][ T3463] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 171.719615][ T3463] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 171.763909][ T3463] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 172.348520][ T9730] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 172.468226][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057b66c00: rx timeout, send abort [ 172.476861][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057b66c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 172.583711][ T9738] syzkaller0: entered promiscuous mode [ 172.599836][ T9738] syzkaller0: entered allmulticast mode [ 172.630447][ T9748] netlink: 'syz.1.1214': attribute type 21 has an invalid length. [ 172.641753][ T9748] IPv6: NLM_F_CREATE should be specified when creating new route [ 172.685749][ T9738] tipc: Enabled bearer , priority 0 [ 172.780174][ T9735] tipc: Resetting bearer [ 172.832814][ T9735] tipc: Disabling bearer [ 172.985078][ T9771] Cannot find del_set index 49151 as target [ 173.068809][ T9779] netlink: 'syz.4.1223': attribute type 10 has an invalid length. [ 173.104148][ T9779] bridge0: port 3(syz_tun) entered disabled state [ 173.110980][ T9779] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.118902][ T9779] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.140204][ T9779] bridge0: port 3(syz_tun) entered blocking state [ 173.146856][ T9779] bridge0: port 3(syz_tun) entered forwarding state [ 173.154324][ T9779] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.161509][ T9779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.168944][ T9779] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.176036][ T9779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.190541][ T9779] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 173.200507][ T9779] netlink: 'syz.4.1223': attribute type 10 has an invalid length. [ 173.208741][ T9779] bridge0: port 3(syz_tun) entered disabled state [ 173.215382][ T9779] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.222617][ T9779] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.239886][ T9779] netlink: 'syz.4.1223': attribute type 10 has an invalid length. [ 173.248247][ T9779] netlink: 'syz.4.1223': attribute type 10 has an invalid length. [ 173.256233][ T9779] netlink: 'syz.4.1223': attribute type 10 has an invalid length. [ 173.265166][ T9779] netlink: 'syz.4.1223': attribute type 10 has an invalid length. [ 173.274470][ T9779] netlink: 'syz.4.1223': attribute type 10 has an invalid length. [ 173.503934][ T9796] syzkaller0: entered promiscuous mode [ 173.511580][ T9796] syzkaller0: entered allmulticast mode [ 173.538355][ T9796] tipc: Enabled bearer , priority 0 [ 173.547053][ T9795] tipc: Resetting bearer [ 173.575717][ T9795] tipc: Disabling bearer [ 174.084642][ T9820] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 174.369949][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027558c00: rx timeout, send abort [ 174.386977][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888027558c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 174.586705][ T9830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.779137][ T9845] syzkaller0: entered promiscuous mode [ 174.792665][ T9845] syzkaller0: entered allmulticast mode [ 174.864294][ T9845] tipc: Enabled bearer , priority 0 [ 174.879480][ T9850] __nla_validate_parse: 5 callbacks suppressed [ 174.879496][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 174.896868][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1249'. [ 174.936667][ T9842] tipc: Resetting bearer [ 174.963142][ T9842] tipc: Disabling bearer [ 174.991701][ T9854] sch_fq: defrate 0 ignored. [ 175.301546][ T9859] vlan0 (unregistering): left allmulticast mode [ 175.309845][ T9859] veth0_vlan (unregistering): left allmulticast mode [ 175.317114][ T9859] vlan0 (unregistering): left promiscuous mode [ 175.532251][ T9873] tipc: Enabled bearer , priority 0 [ 175.539686][ T9873] syzkaller0: entered promiscuous mode [ 175.545367][ T9873] syzkaller0: entered allmulticast mode [ 175.577792][ T9873] tipc: Resetting bearer [ 175.595961][ T9885] SET target dimension over the limit! [ 175.643062][ T9873] tipc: Disabling bearer [ 175.661499][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1260'. [ 175.690897][ T9888] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.705400][ T9885] vlan3: entered allmulticast mode [ 175.710609][ T9885] bond4: entered allmulticast mode [ 175.772335][ T9891] bond0: Error: Cannot enslave bond to itself. [ 176.013239][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b8d2c00: rx timeout, send abort [ 176.021735][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b8d2c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 176.111724][ T9911] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 176.249523][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805774a000: rx timeout, send abort [ 176.258327][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805774a000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 176.305821][ T9913] team0 (unregistering): Port device team_slave_0 removed [ 176.322314][ T9913] team0 (unregistering): Port device team_slave_1 removed [ 176.335964][ T9913] team0 (unregistering): Port device geneve0 removed [ 176.345209][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1272'. [ 176.382343][ T9924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.390797][ T9924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.402311][ T9924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.414453][ T9924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.498528][ T9931] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1275'. [ 176.602385][ T9933] delete_channel: no stack [ 177.029649][ T9957] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1285'. [ 177.324511][ T9980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.492194][ T9974] syzkaller1: entered promiscuous mode [ 177.500119][ T9974] syzkaller1: entered allmulticast mode [ 177.560009][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1297'. [ 177.675144][T10002] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1300'. [ 177.694820][T10005] IPVS: set_ctl: invalid protocol: 36 172.20.20.38:20000 [ 177.705887][T10008] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.722116][T10005] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 177.780912][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1301'. [ 177.849248][T10008] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.010831][T10013] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.018727][T10013] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.078352][T10013] bridge_slave_0: left allmulticast mode [ 178.084821][T10013] bridge_slave_0: left promiscuous mode [ 178.091674][T10013] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.108565][T10013] bridge_slave_1: left allmulticast mode [ 178.114215][T10013] bridge_slave_1: left promiscuous mode [ 178.121329][T10013] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.132204][T10013] bond2: (slave veth0_to_bond): Releasing active interface [ 178.151659][T10013] team0: Port device team_slave_0 removed [ 178.165282][T10013] team0: Port device team_slave_1 removed [ 178.175802][T10013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.187597][T10013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.199529][T10013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.212273][T10013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.227059][T10013] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.268787][T10008] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.407843][T10008] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.411862][T10040] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20003 [ 178.619876][ T60] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.658779][T10052] sctp: [Deprecated]: syz.4.1313 (pid 10052) Use of int in maxseg socket option. [ 178.658779][T10052] Use struct sctp_assoc_value instead [ 178.689591][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 178.704945][T10052] sctp: [Deprecated]: syz.4.1313 (pid 10052) Use of int in maxseg socket option. [ 178.704945][T10052] Use struct sctp_assoc_value instead [ 178.727555][ T60] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.735981][ T60] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.762196][T10056] geneve2: entered promiscuous mode [ 178.770887][T10056] geneve2: entered allmulticast mode [ 178.795528][ T60] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.455572][T10106] validate_nla: 60 callbacks suppressed [ 179.455590][T10106] netlink: 'syz.1.1330': attribute type 1 has an invalid length. [ 179.655265][T10106] 8021q: adding VLAN 0 to HW filter on device bond4 [ 179.751027][T10111] veth7: entered promiscuous mode [ 179.760345][T10111] bond4: (slave veth7): Enslaving as an active interface with an up link [ 180.061420][T10130] __nla_validate_parse: 4 callbacks suppressed [ 180.061436][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1338'. [ 180.085091][T10130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1338'. [ 180.138173][T10130] netlink: 'syz.0.1338': attribute type 58 has an invalid length. [ 180.169892][T10130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1338'. [ 180.325242][T10139] netlink: 'syz.4.1342': attribute type 2 has an invalid length. [ 180.392983][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1342'. [ 180.455078][T10142] veth1_vlan: left allmulticast mode [ 180.501578][T10142] netlink: 'syz.4.1342': attribute type 1 has an invalid length. [ 180.556320][T10142] netlink: 'syz.4.1342': attribute type 2 has an invalid length. [ 180.601210][T10150] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 180.685815][T10148] netlink: 'syz.1.1343': attribute type 5 has an invalid length. [ 181.291980][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'. [ 181.308088][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 181.478863][T10204] veth1_macvtap: left promiscuous mode [ 181.528734][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'. [ 181.669800][T10218] ipt_REJECT: TCP_RESET invalid for non-tcp [ 181.722636][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'. [ 181.755632][T10227] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1371'. [ 181.794880][T10227] unsupported nlmsg_type 40 [ 182.046565][T10238] veth0: entered promiscuous mode [ 182.075272][T10238] netlink: 'syz.4.1374': attribute type 83 has an invalid length. [ 182.150866][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1374'. [ 182.197604][T10244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.223701][T10247] TCP: TCP_TX_DELAY enabled [ 182.373057][T10246] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 182.405916][T10246] bond2 (unregistering): Released all slaves [ 182.569586][T10247] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 182.571104][T10262] netlink: 'syz.2.1383': attribute type 33 has an invalid length. [ 182.606781][T10267] netlink: 'syz.4.1384': attribute type 4 has an invalid length. [ 182.970643][T10294] x_tables: duplicate underflow at hook 1 [ 183.524548][T10331] netlink: 'syz.0.1406': attribute type 8 has an invalid length. [ 183.963834][T10360] syzkaller0: entered promiscuous mode [ 183.970416][T10360] syzkaller0: entered allmulticast mode [ 184.009743][T10360] tipc: Enabled bearer , priority 0 [ 184.046307][T10359] tipc: Resetting bearer [ 184.094320][T10359] tipc: Disabling bearer [ 184.222404][T10373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.701685][T10410] validate_nla: 2 callbacks suppressed [ 184.701702][T10410] netlink: 'syz.3.1434': attribute type 10 has an invalid length. [ 184.746497][T10410] geneve0: entered promiscuous mode [ 184.774420][T10410] geneve0: entered allmulticast mode [ 184.787545][T10410] team0: Port device geneve0 added [ 185.447996][T10463] bridge3: entered promiscuous mode [ 185.463383][ T5151] Bluetooth: hci4: command 0x0405 tx timeout [ 185.476682][T10463] bridge3: entered allmulticast mode [ 185.681722][T10474] vlan0: entered allmulticast mode [ 185.700619][T10474] bridge_slave_0: entered allmulticast mode [ 185.785274][T10484] netlink: 'syz.3.1454': attribute type 5 has an invalid length. [ 185.793602][T10481] : renamed from hsr0 (while UP) [ 185.827502][T10484] netlink: 'syz.3.1454': attribute type 11 has an invalid length. [ 186.097864][ T5837] Bluetooth: hci4: link tx timeout [ 186.103277][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 186.114460][T10502] __nla_validate_parse: 7 callbacks suppressed [ 186.114475][T10502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1462'. [ 186.209103][ T5151] Bluetooth: hci4: link tx timeout [ 186.213811][T10506] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 186.214247][ T5151] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 186.237892][ T5151] Bluetooth: hci4: link tx timeout [ 186.243792][ T5151] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 186.245184][T10504] FAULT_INJECTION: forcing a failure. [ 186.245184][T10504] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 186.322939][T10504] CPU: 1 UID: 0 PID: 10504 Comm: syz.4.1461 Not tainted syzkaller #0 PREEMPT(full) [ 186.323002][T10504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 186.323012][T10504] Call Trace: [ 186.323026][T10504] [ 186.323034][T10504] dump_stack_lvl+0x189/0x250 [ 186.323073][T10504] ? __pfx____ratelimit+0x10/0x10 [ 186.323097][T10504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.323119][T10504] ? __pfx__printk+0x10/0x10 [ 186.323137][T10504] ? __might_fault+0xb0/0x130 [ 186.323172][T10504] should_fail_ex+0x414/0x560 [ 186.323201][T10504] _copy_from_user+0x2d/0xb0 [ 186.323224][T10504] ___sys_sendmsg+0x158/0x2a0 [ 186.323245][T10504] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.323299][T10504] ? __fget_files+0x2a/0x420 [ 186.323315][T10504] ? __fget_files+0x3a0/0x420 [ 186.323342][T10504] __x64_sys_sendmsg+0x19b/0x260 [ 186.323364][T10504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.323393][T10504] ? __pfx_ksys_write+0x10/0x10 [ 186.323420][T10504] ? do_syscall_64+0xbe/0xfa0 [ 186.323447][T10504] do_syscall_64+0xfa/0xfa0 [ 186.323469][T10504] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.323492][T10504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.323509][T10504] ? clear_bhb_loop+0x60/0xb0 [ 186.323530][T10504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.323547][T10504] RIP: 0033:0x7ff19bb8f6c9 [ 186.323570][T10504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.323584][T10504] RSP: 002b:00007ff19cae1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.323609][T10504] RAX: ffffffffffffffda RBX: 00007ff19bde5fa0 RCX: 00007ff19bb8f6c9 [ 186.323621][T10504] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003 [ 186.323632][T10504] RBP: 00007ff19cae1090 R08: 0000000000000000 R09: 0000000000000000 [ 186.323643][T10504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.323653][T10504] R13: 00007ff19bde6038 R14: 00007ff19bde5fa0 R15: 00007ffc99f34908 [ 186.323684][T10504] [ 186.682943][T10515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1463'. [ 186.693148][ T5151] Bluetooth: hci4: link tx timeout [ 186.706613][ T5151] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 186.844624][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'. [ 186.844702][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'. [ 186.950205][T10532] netlink: 'syz.2.1467': attribute type 11 has an invalid length. [ 186.975842][T10532] netlink: 'syz.2.1467': attribute type 11 has an invalid length. [ 187.014676][T10532] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1467'. [ 187.120504][ T5151] Bluetooth: hci4: link tx timeout [ 187.125660][ T5151] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.504671][T10573] FAULT_INJECTION: forcing a failure. [ 187.504671][T10573] name failslab, interval 1, probability 0, space 0, times 0 [ 187.573653][ T5151] Bluetooth: hci4: link tx timeout [ 187.578951][ T5151] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.620290][T10573] CPU: 1 UID: 0 PID: 10573 Comm: syz.4.1476 Not tainted syzkaller #0 PREEMPT(full) [ 187.620315][T10573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 187.620325][T10573] Call Trace: [ 187.620332][T10573] [ 187.620340][T10573] dump_stack_lvl+0x189/0x250 [ 187.620368][T10573] ? __pfx____ratelimit+0x10/0x10 [ 187.620392][T10573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.620414][T10573] ? __pfx__printk+0x10/0x10 [ 187.620437][T10573] ? __pfx___might_resched+0x10/0x10 [ 187.620455][T10573] ? fs_reclaim_acquire+0x7d/0x100 [ 187.620484][T10573] should_fail_ex+0x414/0x560 [ 187.620514][T10573] should_failslab+0xa8/0x100 [ 187.620533][T10573] kmem_cache_alloc_node_noprof+0x77/0x710 [ 187.620556][T10573] ? __alloc_skb+0x112/0x2d0 [ 187.620587][T10573] __alloc_skb+0x112/0x2d0 [ 187.620615][T10573] netlink_sendmsg+0x5c6/0xb30 [ 187.620643][T10573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.620664][T10573] ? aa_sock_msg_perm+0xf1/0x1d0 [ 187.620689][T10573] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.620705][T10573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.620722][T10573] __sock_sendmsg+0x21c/0x270 [ 187.620747][T10573] ____sys_sendmsg+0x505/0x830 [ 187.620770][T10573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.620796][T10573] ? import_iovec+0x74/0xa0 [ 187.620821][T10573] ___sys_sendmsg+0x21f/0x2a0 [ 187.620841][T10573] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.620892][T10573] ? __fget_files+0x2a/0x420 [ 187.620907][T10573] ? __fget_files+0x3a0/0x420 [ 187.620934][T10573] __x64_sys_sendmsg+0x19b/0x260 [ 187.620953][T10573] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.620981][T10573] ? __pfx_ksys_write+0x10/0x10 [ 187.621007][T10573] ? do_syscall_64+0xbe/0xfa0 [ 187.621033][T10573] do_syscall_64+0xfa/0xfa0 [ 187.621053][T10573] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.621075][T10573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.621093][T10573] ? clear_bhb_loop+0x60/0xb0 [ 187.621114][T10573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.621130][T10573] RIP: 0033:0x7ff19bb8f6c9 [ 187.621146][T10573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.621160][T10573] RSP: 002b:00007ff19cae1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.621179][T10573] RAX: ffffffffffffffda RBX: 00007ff19bde5fa0 RCX: 00007ff19bb8f6c9 [ 187.621200][T10573] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003 [ 187.621211][T10573] RBP: 00007ff19cae1090 R08: 0000000000000000 R09: 0000000000000000 [ 187.621222][T10573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.621232][T10573] R13: 00007ff19bde6038 R14: 00007ff19bde5fa0 R15: 00007ffc99f34908 [ 187.621264][T10573] [ 187.992606][ T5151] Bluetooth: hci4: link tx timeout [ 187.998107][ T5151] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.026304][T10591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.040814][ T9052] udevd[9052]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 188.160005][ T5151] Bluetooth: hci4: command 0x0405 tx timeout [ 188.233525][T10599] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 188.278481][T10599] bond2 (unregistering): Released all slaves [ 188.355165][T10614] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1487'. [ 188.558653][T10626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.549790][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'. [ 189.576615][T10669] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 189.650793][T10680] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1504'. [ 189.827820][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'. [ 189.946786][T10701] FAULT_INJECTION: forcing a failure. [ 189.946786][T10701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.997543][T10701] CPU: 0 UID: 0 PID: 10701 Comm: syz.4.1506 Not tainted syzkaller #0 PREEMPT(full) [ 189.997568][T10701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 189.997577][T10701] Call Trace: [ 189.997585][T10701] [ 189.997593][T10701] dump_stack_lvl+0x189/0x250 [ 189.997620][T10701] ? __pfx____ratelimit+0x10/0x10 [ 189.997642][T10701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.997664][T10701] ? __pfx__printk+0x10/0x10 [ 189.997682][T10701] ? __might_fault+0xb0/0x130 [ 189.997716][T10701] should_fail_ex+0x414/0x560 [ 189.997747][T10701] _copy_from_iter+0x1de/0x1790 [ 189.997772][T10701] ? rcu_is_watching+0x15/0xb0 [ 189.997795][T10701] ? kmalloc_reserve+0xbd/0x290 [ 189.997812][T10701] ? __pfx__copy_from_iter+0x10/0x10 [ 189.997833][T10701] ? __build_skb_around+0x262/0x3f0 [ 189.997861][T10701] ? netlink_sendmsg+0x642/0xb30 [ 189.997884][T10701] ? skb_put+0x11b/0x210 [ 189.997904][T10701] netlink_sendmsg+0x6b2/0xb30 [ 189.997931][T10701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.997951][T10701] ? aa_sock_msg_perm+0xf1/0x1d0 [ 189.997975][T10701] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 189.997992][T10701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.998009][T10701] __sock_sendmsg+0x21c/0x270 [ 189.998034][T10701] ____sys_sendmsg+0x505/0x830 [ 189.998058][T10701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.998086][T10701] ? import_iovec+0x74/0xa0 [ 189.998110][T10701] ___sys_sendmsg+0x21f/0x2a0 [ 189.998129][T10701] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.998183][T10701] ? __fget_files+0x2a/0x420 [ 189.998199][T10701] ? __fget_files+0x3a0/0x420 [ 189.998226][T10701] __x64_sys_sendmsg+0x19b/0x260 [ 189.998247][T10701] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.998275][T10701] ? __pfx_ksys_write+0x10/0x10 [ 189.998303][T10701] ? do_syscall_64+0xbe/0xfa0 [ 189.998328][T10701] do_syscall_64+0xfa/0xfa0 [ 189.998349][T10701] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.998372][T10701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.998389][T10701] ? clear_bhb_loop+0x60/0xb0 [ 189.998410][T10701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.998426][T10701] RIP: 0033:0x7ff19bb8f6c9 [ 189.998442][T10701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.998456][T10701] RSP: 002b:00007ff19cae1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.998475][T10701] RAX: ffffffffffffffda RBX: 00007ff19bde5fa0 RCX: 00007ff19bb8f6c9 [ 189.998487][T10701] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003 [ 189.998498][T10701] RBP: 00007ff19cae1090 R08: 0000000000000000 R09: 0000000000000000 [ 189.998509][T10701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.998519][T10701] R13: 00007ff19bde6038 R14: 00007ff19bde5fa0 R15: 00007ffc99f34908 [ 189.998553][T10701] [ 190.836594][T10740] netlink: 4620 bytes leftover after parsing attributes in process `syz.4.1513'. [ 190.940862][T10745] netlink: 'syz.1.1516': attribute type 1 has an invalid length. [ 191.028460][T10745] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.040506][T10753] FAULT_INJECTION: forcing a failure. [ 191.040506][T10753] name failslab, interval 1, probability 0, space 0, times 0 [ 191.054192][T10753] CPU: 0 UID: 0 PID: 10753 Comm: syz.3.1517 Not tainted syzkaller #0 PREEMPT(full) [ 191.054214][T10753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.054225][T10753] Call Trace: [ 191.054231][T10753] [ 191.054238][T10753] dump_stack_lvl+0x189/0x250 [ 191.054265][T10753] ? __pfx____ratelimit+0x10/0x10 [ 191.054286][T10753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.054308][T10753] ? __pfx__printk+0x10/0x10 [ 191.054332][T10753] ? __lock_acquire+0xab9/0xd20 [ 191.054353][T10753] should_fail_ex+0x414/0x560 [ 191.054381][T10753] should_failslab+0xa8/0x100 [ 191.054400][T10753] kmem_cache_alloc_noprof+0x74/0x6e0 [ 191.054423][T10753] ? skb_clone+0x212/0x3a0 [ 191.054448][T10753] skb_clone+0x212/0x3a0 [ 191.054470][T10753] __netlink_deliver_tap+0x404/0x850 [ 191.054499][T10753] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.054518][T10753] netlink_deliver_tap+0x19c/0x1b0 [ 191.054535][T10753] netlink_unicast+0x7fa/0x9e0 [ 191.054566][T10753] ? __pfx_netlink_unicast+0x10/0x10 [ 191.054591][T10753] ? netlink_sendmsg+0x642/0xb30 [ 191.054605][T10753] ? skb_put+0x11b/0x210 [ 191.054624][T10753] netlink_sendmsg+0x805/0xb30 [ 191.054648][T10753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.054669][T10753] ? aa_sock_msg_perm+0xf1/0x1d0 [ 191.054695][T10753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.054711][T10753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.054728][T10753] __sock_sendmsg+0x21c/0x270 [ 191.054763][T10753] ____sys_sendmsg+0x505/0x830 [ 191.054788][T10753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.054815][T10753] ? import_iovec+0x74/0xa0 [ 191.054840][T10753] ___sys_sendmsg+0x21f/0x2a0 [ 191.054862][T10753] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.054911][T10753] ? __fget_files+0x2a/0x420 [ 191.054926][T10753] ? __fget_files+0x3a0/0x420 [ 191.054950][T10753] __x64_sys_sendmsg+0x19b/0x260 [ 191.054970][T10753] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.054995][T10753] ? __pfx_ksys_write+0x10/0x10 [ 191.055019][T10753] ? do_syscall_64+0xbe/0xfa0 [ 191.055043][T10753] do_syscall_64+0xfa/0xfa0 [ 191.055063][T10753] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.055085][T10753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.055102][T10753] ? clear_bhb_loop+0x60/0xb0 [ 191.055123][T10753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.055138][T10753] RIP: 0033:0x7f2dbc38f6c9 [ 191.055154][T10753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.055167][T10753] RSP: 002b:00007f2dbd23e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.055186][T10753] RAX: ffffffffffffffda RBX: 00007f2dbc5e5fa0 RCX: 00007f2dbc38f6c9 [ 191.055199][T10753] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003 [ 191.055210][T10753] RBP: 00007f2dbd23e090 R08: 0000000000000000 R09: 0000000000000000 [ 191.055221][T10753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.055231][T10753] R13: 00007f2dbc5e6038 R14: 00007f2dbc5e5fa0 R15: 00007ffc6352a118 [ 191.055261][T10753] [ 191.388505][T10750] bond5: (slave veth9): Enslaving as an active interface with a down link [ 191.451871][T10745] veth11: entered promiscuous mode [ 191.484657][T10745] bond5: (slave veth11): Enslaving as an active interface with a down link [ 191.522356][T10745] vlan0: entered allmulticast mode [ 191.528320][T10745] bond5: entered allmulticast mode [ 191.535057][T10745] bond5: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 191.629910][T10762] __nla_validate_parse: 1 callbacks suppressed [ 191.629934][T10762] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1521'. [ 191.745226][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058981800: rx timeout, send abort [ 191.753752][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058981800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 191.890839][T10778] netlink: 'syz.1.1525': attribute type 1 has an invalid length. [ 192.252399][T10793] FAULT_INJECTION: forcing a failure. [ 192.252399][T10793] name failslab, interval 1, probability 0, space 0, times 0 [ 192.284034][T10793] CPU: 1 UID: 0 PID: 10793 Comm: syz.3.1529 Not tainted syzkaller #0 PREEMPT(full) [ 192.284059][T10793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 192.284069][T10793] Call Trace: [ 192.284076][T10793] [ 192.284084][T10793] dump_stack_lvl+0x189/0x250 [ 192.284132][T10793] ? __pfx____ratelimit+0x10/0x10 [ 192.284155][T10793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.284178][T10793] ? __pfx__printk+0x10/0x10 [ 192.284203][T10793] ? __pfx___might_resched+0x10/0x10 [ 192.284220][T10793] ? fs_reclaim_acquire+0x7d/0x100 [ 192.284250][T10793] should_fail_ex+0x414/0x560 [ 192.284281][T10793] should_failslab+0xa8/0x100 [ 192.284301][T10793] __kmalloc_noprof+0xcb/0x7f0 [ 192.284323][T10793] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 192.284345][T10793] ? __local_bh_enable_ip+0x12d/0x1c0 [ 192.284369][T10793] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 192.284399][T10793] genl_family_rcv_msg_doit+0xb8/0x300 [ 192.284428][T10793] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 192.284458][T10793] ? apparmor_capable+0x137/0x1b0 [ 192.284483][T10793] ? bpf_lsm_capable+0x9/0x20 [ 192.284502][T10793] ? security_capable+0x7e/0x2e0 [ 192.284530][T10793] genl_rcv_msg+0x60e/0x790 [ 192.284558][T10793] ? __pfx_genl_rcv_msg+0x10/0x10 [ 192.284577][T10793] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 192.284595][T10793] ? __pfx_nl80211_set_rekey_data+0x10/0x10 [ 192.284618][T10793] ? __pfx_nl80211_post_doit+0x10/0x10 [ 192.284638][T10793] ? __asan_memcpy+0x40/0x70 [ 192.284658][T10793] ? __pfx_ref_tracker_free+0x10/0x10 [ 192.284684][T10793] netlink_rcv_skb+0x208/0x470 [ 192.284707][T10793] ? __lock_acquire+0xab9/0xd20 [ 192.284725][T10793] ? __pfx_genl_rcv_msg+0x10/0x10 [ 192.284747][T10793] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 192.284793][T10793] ? down_read+0x1ad/0x2e0 [ 192.284812][T10793] genl_rcv+0x28/0x40 [ 192.284831][T10793] netlink_unicast+0x82f/0x9e0 [ 192.284864][T10793] ? __pfx_netlink_unicast+0x10/0x10 [ 192.284889][T10793] ? netlink_sendmsg+0x642/0xb30 [ 192.284910][T10793] ? skb_put+0x11b/0x210 [ 192.284931][T10793] netlink_sendmsg+0x805/0xb30 [ 192.284959][T10793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.284980][T10793] ? aa_sock_msg_perm+0xf1/0x1d0 [ 192.285006][T10793] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 192.285022][T10793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.285041][T10793] __sock_sendmsg+0x21c/0x270 [ 192.285067][T10793] ____sys_sendmsg+0x505/0x830 [ 192.285092][T10793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.285121][T10793] ? import_iovec+0x74/0xa0 [ 192.285146][T10793] ___sys_sendmsg+0x21f/0x2a0 [ 192.285168][T10793] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.285226][T10793] ? __fget_files+0x2a/0x420 [ 192.285242][T10793] ? __fget_files+0x3a0/0x420 [ 192.285270][T10793] __x64_sys_sendmsg+0x19b/0x260 [ 192.285293][T10793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.285322][T10793] ? __pfx_ksys_write+0x10/0x10 [ 192.285351][T10793] ? do_syscall_64+0xbe/0xfa0 [ 192.285378][T10793] do_syscall_64+0xfa/0xfa0 [ 192.285399][T10793] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.285421][T10793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.285439][T10793] ? clear_bhb_loop+0x60/0xb0 [ 192.285461][T10793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.285478][T10793] RIP: 0033:0x7f2dbc38f6c9 [ 192.285495][T10793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.285511][T10793] RSP: 002b:00007f2dbd23e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.285529][T10793] RAX: ffffffffffffffda RBX: 00007f2dbc5e5fa0 RCX: 00007f2dbc38f6c9 [ 192.285542][T10793] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003 [ 192.285554][T10793] RBP: 00007f2dbd23e090 R08: 0000000000000000 R09: 0000000000000000 [ 192.285565][T10793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.285576][T10793] R13: 00007f2dbc5e6038 R14: 00007f2dbc5e5fa0 R15: 00007ffc6352a118 [ 192.285609][T10793] [ 192.821894][T10810] xt_bpf: check failed: parse error [ 192.828273][T10810] xt_bpf: check failed: parse error [ 192.833974][T10810] xt_bpf: check failed: parse error [ 192.839831][T10810] xt_bpf: check failed: parse error [ 192.845475][T10810] xt_bpf: check failed: parse error [ 192.853274][T10810] xt_bpf: check failed: parse error [ 192.859040][T10810] xt_bpf: check failed: parse error [ 192.864827][T10810] xt_bpf: check failed: parse error [ 192.875813][T10810] xt_bpf: check failed: parse error [ 192.881548][T10810] xt_bpf: check failed: parse error [ 192.925683][T10811] netlink: 'syz.1.1536': attribute type 10 has an invalid length. [ 192.984867][T10811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1536'. [ 193.102169][T10823] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1538'. [ 193.469909][T10849] FAULT_INJECTION: forcing a failure. [ 193.469909][T10849] name failslab, interval 1, probability 0, space 0, times 0 [ 193.511120][T10849] CPU: 1 UID: 0 PID: 10849 Comm: syz.4.1545 Not tainted syzkaller #0 PREEMPT(full) [ 193.511147][T10849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.511158][T10849] Call Trace: [ 193.511165][T10849] [ 193.511173][T10849] dump_stack_lvl+0x189/0x250 [ 193.511201][T10849] ? __pfx____ratelimit+0x10/0x10 [ 193.511225][T10849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.511247][T10849] ? __pfx__printk+0x10/0x10 [ 193.511272][T10849] ? __pfx___might_resched+0x10/0x10 [ 193.511295][T10849] should_fail_ex+0x414/0x560 [ 193.511324][T10849] should_failslab+0xa8/0x100 [ 193.511344][T10849] kmem_cache_alloc_node_noprof+0x77/0x710 [ 193.511367][T10849] ? __alloc_skb+0x112/0x2d0 [ 193.511397][T10849] __alloc_skb+0x112/0x2d0 [ 193.511426][T10849] netlink_ack+0x146/0xa50 [ 193.511448][T10849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.511467][T10849] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 193.511485][T10849] ? __pfx_nl80211_post_doit+0x10/0x10 [ 193.511506][T10849] ? __asan_memcpy+0x40/0x70 [ 193.511526][T10849] ? __pfx_ref_tracker_free+0x10/0x10 [ 193.511551][T10849] netlink_rcv_skb+0x28c/0x470 [ 193.511573][T10849] ? __lock_acquire+0xab9/0xd20 [ 193.511589][T10849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.511612][T10849] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 193.511657][T10849] ? down_read+0x1ad/0x2e0 [ 193.511676][T10849] genl_rcv+0x28/0x40 [ 193.511694][T10849] netlink_unicast+0x82f/0x9e0 [ 193.511726][T10849] ? __pfx_netlink_unicast+0x10/0x10 [ 193.511751][T10849] ? netlink_sendmsg+0x642/0xb30 [ 193.511766][T10849] ? skb_put+0x11b/0x210 [ 193.511785][T10849] netlink_sendmsg+0x805/0xb30 [ 193.511811][T10849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.511832][T10849] ? aa_sock_msg_perm+0xf1/0x1d0 [ 193.511865][T10849] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 193.511882][T10849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.511900][T10849] __sock_sendmsg+0x21c/0x270 [ 193.511926][T10849] ____sys_sendmsg+0x505/0x830 [ 193.511950][T10849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.511978][T10849] ? import_iovec+0x74/0xa0 [ 193.512004][T10849] ___sys_sendmsg+0x21f/0x2a0 [ 193.512024][T10849] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.512082][T10849] ? __fget_files+0x2a/0x420 [ 193.512098][T10849] ? __fget_files+0x3a0/0x420 [ 193.512125][T10849] __x64_sys_sendmsg+0x19b/0x260 [ 193.512146][T10849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.512173][T10849] ? __pfx_ksys_write+0x10/0x10 [ 193.512201][T10849] ? do_syscall_64+0xbe/0xfa0 [ 193.512226][T10849] do_syscall_64+0xfa/0xfa0 [ 193.512247][T10849] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.512268][T10849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.512285][T10849] ? clear_bhb_loop+0x60/0xb0 [ 193.512307][T10849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.512324][T10849] RIP: 0033:0x7ff19bb8f6c9 [ 193.512340][T10849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.512355][T10849] RSP: 002b:00007ff19cae1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.512373][T10849] RAX: ffffffffffffffda RBX: 00007ff19bde5fa0 RCX: 00007ff19bb8f6c9 [ 193.512385][T10849] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003 [ 193.512396][T10849] RBP: 00007ff19cae1090 R08: 0000000000000000 R09: 0000000000000000 [ 193.512406][T10849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.512416][T10849] R13: 00007ff19bde6038 R14: 00007ff19bde5fa0 R15: 00007ffc99f34908 [ 193.512446][T10849] [ 193.990531][T10862] syzkaller0: entered promiscuous mode [ 193.996070][T10862] syzkaller0: entered allmulticast mode [ 194.030005][T10862] tipc: Enabled bearer , priority 0 [ 194.038985][T10861] tipc: Resetting bearer [ 194.054249][T10861] tipc: Disabling bearer [ 194.079748][T10866] batman_adv: batadv0: Adding interface: dummy0 [ 194.086094][T10866] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.112657][T10866] batman_adv: batadv0: Interface activated: dummy0 [ 194.120476][T10868] bond0: (slave rose0): Error: Device can not be enslaved while up [ 194.443618][T10884] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1556'. [ 194.482760][T10887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1557'. [ 194.509913][T10887] bond2 (unregistering): Released all slaves [ 194.786717][T10900] netlink: 'syz.0.1561': attribute type 39 has an invalid length. [ 194.844240][T10902] syzkaller0: entered promiscuous mode [ 194.849998][T10902] syzkaller0: entered allmulticast mode [ 194.899247][T10902] tipc: Enabled bearer , priority 0 [ 194.912430][T10901] tipc: Resetting bearer [ 194.965040][T10901] tipc: Disabling bearer [ 195.003969][T10911] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 195.196876][T10920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.299303][T10926] veth0_to_bridge: entered promiscuous mode [ 195.332515][T10926] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1570'. [ 195.342550][T10924] veth0_to_bridge: left promiscuous mode [ 195.377951][T10936] netlink: 'syz.2.1575': attribute type 12 has an invalid length. [ 195.636921][T10948] syzkaller0: entered promiscuous mode [ 195.641517][T10950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1579'. [ 195.642417][T10948] syzkaller0: entered allmulticast mode [ 195.689872][T10948] tipc: Enabled bearer , priority 0 [ 195.698755][T10947] tipc: Resetting bearer [ 195.723129][T10947] tipc: Disabling bearer [ 196.259218][T10982] netlink: 'syz.2.1587': attribute type 12 has an invalid length. [ 196.320187][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 196.326242][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 196.332683][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 196.511748][T10999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1593'. [ 197.001101][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 197.366692][T11063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1613'. [ 197.377833][T11063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1613'. [ 197.409769][T11066] syzkaller0: entered promiscuous mode [ 197.415407][T11066] syzkaller0: entered allmulticast mode [ 197.466061][T11066] tipc: Enabled bearer , priority 0 [ 197.477007][T11065] tipc: Resetting bearer [ 197.508168][T11065] tipc: Disabling bearer [ 197.606241][T11079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1619'. [ 197.875551][T11093] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1622'. [ 198.099174][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057867c00: rx timeout, send abort [ 198.107671][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057867c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 198.261025][T11110] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 198.421931][T11133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1631'. [ 198.478543][T11137] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1632'. [ 198.529602][T11135] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1632'. [ 199.732827][T11154] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 199.795795][T11163] netlink: 'syz.0.1638': attribute type 15 has an invalid length. [ 199.911788][T11172] netlink: 'syz.1.1640': attribute type 1 has an invalid length. [ 199.988018][T11172] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.062548][T11184] veth13: entered promiscuous mode [ 200.409883][T11207] IPVS: length: 153 != 8 [ 200.458211][T11211] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1650'. [ 200.534684][T11217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1651'. [ 200.764468][T11227] syzkaller0: entered promiscuous mode [ 200.770171][T11227] syzkaller0: entered allmulticast mode [ 201.771888][T11298] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 201.830648][T11298] team2: entered promiscuous mode [ 201.847065][T11298] team2: entered allmulticast mode [ 202.322282][T11332] tipc: Enabled bearer , priority 0 [ 202.341971][T11332] syzkaller0: entered promiscuous mode [ 202.352049][T11340] __nla_validate_parse: 8 callbacks suppressed [ 202.352065][T11340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1682'. [ 202.377107][T11332] syzkaller0: entered allmulticast mode [ 202.395387][T11340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1682'. [ 202.408687][T11332] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 202.565790][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1684'. [ 202.606893][T11355] tipc: Resetting bearer [ 202.639923][T11364] syzkaller0: entered promiscuous mode [ 202.655113][T11364] syzkaller0: entered allmulticast mode [ 202.818678][T11353] tipc: Enabled bearer , priority 0 [ 202.848138][T11352] tipc: Resetting bearer [ 202.875953][T11352] tipc: Disabling bearer [ 202.898515][T11331] tipc: Resetting bearer [ 203.025104][T11331] tipc: Disabling bearer [ 203.197415][T11375] bond0: (slave bond_slave_0): Releasing backup interface [ 203.221412][T11375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.241703][T11375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.252878][T11375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.271862][T11375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.302953][T11375] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.313083][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1691'. [ 203.435533][T11375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1689'. [ 203.480774][T11392] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1692'. [ 203.636139][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1692'. [ 203.645769][T11403] netlink: 'syz.4.1695': attribute type 1 has an invalid length. [ 203.806363][T11411] syzkaller0: entered promiscuous mode [ 203.814242][T11411] syzkaller0: entered allmulticast mode [ 203.835137][T11411] tipc: Enabled bearer , priority 0 [ 203.850941][T11409] tipc: Resetting bearer [ 203.885543][T11409] tipc: Disabling bearer [ 204.019589][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1706'. [ 204.359686][T11442] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1713'. [ 204.414922][T11443] netlink: 'syz.1.1713': attribute type 1 has an invalid length. [ 204.431486][T11443] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1713'. [ 204.607301][T11459] syzkaller0: entered promiscuous mode [ 204.623373][T11459] syzkaller0: entered allmulticast mode [ 204.653735][T11463] netlink: 'syz.4.1719': attribute type 11 has an invalid length. [ 204.852322][T11463] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 205.790921][T11528] syzkaller0: entered promiscuous mode [ 205.866516][T11528] syzkaller0: entered allmulticast mode [ 205.917601][T11528] tipc: Enabled bearer , priority 0 [ 205.936281][T11545] netlink: 'syz.4.1744': attribute type 2 has an invalid length. [ 205.966564][T11524] tipc: Resetting bearer [ 206.003745][T11524] tipc: Disabling bearer [ 206.328603][T11572] vcan0: tx address claim with dlc 0 [ 206.734491][T11581] netlink: 'syz.3.1754': attribute type 27 has an invalid length. [ 206.804590][ T1212] IPVS: starting estimator thread 0... [ 206.907596][T11584] IPVS: using max 29 ests per chain, 69600 per kthread [ 206.951553][T11588] macvlan2: entered promiscuous mode [ 206.959427][T11588] macvlan2: entered allmulticast mode [ 206.968178][T11595] tipc: Enabling of bearer rejected, failed to enable media [ 207.160288][T11605] syzkaller0: entered promiscuous mode [ 207.185288][T11605] syzkaller0: entered allmulticast mode [ 207.248210][T11605] tipc: Enabled bearer , priority 0 [ 207.260853][T11604] tipc: Resetting bearer [ 207.290593][T11604] tipc: Disabling bearer [ 207.414751][T11609] bridge: RTM_NEWNEIGH with invalid ether address [ 207.482581][T11622] netlink: 'syz.0.1768': attribute type 5 has an invalid length. [ 207.705426][T11640] wg1 speed is unknown, defaulting to 1000 [ 207.713746][T11640] wg1 speed is unknown, defaulting to 1000 [ 207.735964][T11640] wg1 speed is unknown, defaulting to 1000 [ 207.775606][T11640] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 207.820312][T11640] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 207.901369][T11640] wg1 speed is unknown, defaulting to 1000 [ 207.925352][T11640] wg1 speed is unknown, defaulting to 1000 [ 207.948691][T11640] wg1 speed is unknown, defaulting to 1000 [ 207.978792][T11640] wg1 speed is unknown, defaulting to 1000 [ 208.000568][T11640] wg1 speed is unknown, defaulting to 1000 [ 208.094109][T11663] syzkaller0: entered promiscuous mode [ 208.109377][T11663] syzkaller0: entered allmulticast mode [ 208.154479][T11663] tipc: Enabled bearer , priority 0 [ 208.172837][T11661] tipc: Resetting bearer [ 208.207695][T11668] __nla_validate_parse: 13 callbacks suppressed [ 208.207712][T11668] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1781'. [ 208.337804][T11661] tipc: Disabling bearer [ 208.444964][T11677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1783'. [ 208.686246][T11685] netlink: 'syz.2.1785': attribute type 10 has an invalid length. [ 208.815405][T11700] netlink: 'syz.2.1791': attribute type 1 has an invalid length. [ 208.869173][T11700] 8021q: adding VLAN 0 to HW filter on device bond5 [ 208.920570][T11700] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 208.968314][T11708] netlink: 'syz.0.1792': attribute type 83 has an invalid length. [ 208.993009][T11710] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1793'. [ 209.002445][T11710] block nbd0: not configured, cannot reconfigure [ 209.172921][T11725] syzkaller0: entered promiscuous mode [ 209.225864][T11725] syzkaller0: entered allmulticast mode [ 209.362686][T11735] tipc: Enabled bearer , priority 0 [ 209.372216][T11746] netlink: 'syz.3.1803': attribute type 12 has an invalid length. [ 209.391704][T11722] tipc: Resetting bearer [ 209.459108][T11753] netlink: 'syz.1.1805': attribute type 1 has an invalid length. [ 209.673044][T11722] tipc: Disabling bearer [ 209.689060][T11766] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1804'. [ 209.774028][T11747] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1804'. [ 209.796971][T11753] bond7: entered promiscuous mode [ 209.802476][T11753] 8021q: adding VLAN 0 to HW filter on device bond7 [ 209.809884][T11759] vcan0: entered allmulticast mode [ 209.837503][T11764] bond7: (slave bridge35): making interface the new active one [ 209.850875][T11764] bridge35: entered promiscuous mode [ 209.871838][T11764] bond7: (slave bridge35): Enslaving as an active interface with an up link [ 209.947551][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1810'. [ 210.006263][T11780] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1812'. [ 210.077849][T11771] bond6: option xmit_hash_policy: invalid value (64) [ 210.095419][ T5902] IPVS: starting estimator thread 0... [ 210.109205][T11771] bond6 (unregistering): Released all slaves [ 210.120785][T11782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1814'. [ 210.148749][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 210.187062][T11786] IPVS: using max 28 ests per chain, 67200 per kthread [ 210.351115][T11801] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1820'. [ 210.426112][T11804] syzkaller0: entered promiscuous mode [ 210.452534][T11804] syzkaller0: entered allmulticast mode [ 210.521671][T11804] tipc: Enabled bearer , priority 0 [ 210.537516][T11803] tipc: Resetting bearer [ 210.575881][T11803] tipc: Disabling bearer [ 210.591098][T11816] netlink: 'syz.3.1824': attribute type 9 has an invalid length. [ 210.607866][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.616083][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.625037][T11816] netlink: 'syz.3.1824': attribute type 9 has an invalid length. [ 210.631915][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.643042][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.986188][T11842] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 211.020736][T11842] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 211.029168][T11842] gretap1: entered promiscuous mode [ 211.034387][T11842] gretap1: entered allmulticast mode [ 211.198914][T11854] syzkaller0: entered promiscuous mode [ 211.204584][T11854] syzkaller0: entered allmulticast mode [ 211.235552][T11854] tipc: Enabled bearer , priority 0 [ 211.259115][T11856] tipc: Enabled bearer , priority 0 [ 211.277533][T11856] syzkaller0: entered promiscuous mode [ 211.283027][T11856] syzkaller0: entered allmulticast mode [ 211.290708][T11852] tipc: Resetting bearer [ 211.319729][T11852] tipc: Disabling bearer [ 211.346999][T11856] tipc: Resetting bearer [ 211.364666][T11855] tipc: Resetting bearer [ 211.387127][T11855] tipc: Disabling bearer [ 211.412320][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056814c00: rx timeout, send abort [ 211.420875][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056814c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 211.727491][T11894] netlink: 'syz.2.1853': attribute type 1 has an invalid length. [ 211.735412][T11878] bond0 (unregistering): left promiscuous mode [ 211.741913][T11878] bond_slave_0: left promiscuous mode [ 211.747603][T11878] bond_slave_1: left promiscuous mode [ 211.755169][T11878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.767871][T11878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.788469][T11878] bond0 (unregistering): Released all slaves [ 211.892581][T11894] bond6: entered promiscuous mode [ 211.910055][T11894] bond6: entered allmulticast mode [ 211.918136][T11894] 8021q: adding VLAN 0 to HW filter on device bond6 [ 212.015973][T11910] syzkaller0: entered promiscuous mode [ 212.025969][T11910] syzkaller0: entered allmulticast mode [ 212.097509][T11910] tipc: Enabled bearer , priority 0 [ 212.137420][T11906] tipc: Resetting bearer [ 212.173716][T11906] tipc: Disabling bearer [ 212.190340][T11917] netlink: 'syz.1.1859': attribute type 5 has an invalid length. [ 212.685921][T11952] netlink: 'syz.3.1870': attribute type 1 has an invalid length. [ 212.729960][T11952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.827457][T11952] veth3: entered promiscuous mode [ 213.314450][T11995] __nla_validate_parse: 14 callbacks suppressed [ 213.314468][T11995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1884'. [ 213.332394][T11995] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 213.413348][T11999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'. [ 213.434705][T11999] : entered promiscuous mode [ 213.565702][T12015] FAULT_INJECTION: forcing a failure. [ 213.565702][T12015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.581444][T12015] CPU: 0 UID: 0 PID: 12015 Comm: syz.1.1891 Not tainted syzkaller #0 PREEMPT(full) [ 213.581468][T12015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.581478][T12015] Call Trace: [ 213.581485][T12015] [ 213.581493][T12015] dump_stack_lvl+0x189/0x250 [ 213.581521][T12015] ? __pfx____ratelimit+0x10/0x10 [ 213.581544][T12015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.581566][T12015] ? __pfx__printk+0x10/0x10 [ 213.581583][T12015] ? __might_fault+0xb0/0x130 [ 213.581627][T12015] should_fail_ex+0x414/0x560 [ 213.581656][T12015] _copy_from_user+0x2d/0xb0 [ 213.581678][T12015] ___sys_sendmsg+0x158/0x2a0 [ 213.581701][T12015] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.581757][T12015] ? __fget_files+0x2a/0x420 [ 213.581781][T12015] ? __fget_files+0x3a0/0x420 [ 213.581810][T12015] __x64_sys_sendmsg+0x19b/0x260 [ 213.581832][T12015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 213.581859][T12015] ? __pfx_ksys_write+0x10/0x10 [ 213.581891][T12015] ? do_syscall_64+0xbe/0xfa0 [ 213.581916][T12015] do_syscall_64+0xfa/0xfa0 [ 213.581936][T12015] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.581960][T12015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.581976][T12015] ? clear_bhb_loop+0x60/0xb0 [ 213.581997][T12015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.582022][T12015] RIP: 0033:0x7f8164f8f6c9 [ 213.582038][T12015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.582060][T12015] RSP: 002b:00007f8165eb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.582078][T12015] RAX: ffffffffffffffda RBX: 00007f81651e5fa0 RCX: 00007f8164f8f6c9 [ 213.582091][T12015] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003 [ 213.582101][T12015] RBP: 00007f8165eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 213.582112][T12015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.582121][T12015] R13: 00007f81651e6038 R14: 00007f81651e5fa0 R15: 00007ffdbc267428 [ 213.582148][T12015] [ 213.646960][T12013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.858363][T12027] netlink: 'syz.0.1895': attribute type 1 has an invalid length. [ 214.186634][T12052] FAULT_INJECTION: forcing a failure. [ 214.186634][T12052] name failslab, interval 1, probability 0, space 0, times 0 [ 214.206611][T12052] CPU: 1 UID: 0 PID: 12052 Comm: syz.4.1904 Not tainted syzkaller #0 PREEMPT(full) [ 214.206636][T12052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 214.206647][T12052] Call Trace: [ 214.206655][T12052] [ 214.206663][T12052] dump_stack_lvl+0x189/0x250 [ 214.206688][T12052] ? __pfx____ratelimit+0x10/0x10 [ 214.206711][T12052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.206733][T12052] ? __pfx__printk+0x10/0x10 [ 214.206756][T12052] ? __pfx___might_resched+0x10/0x10 [ 214.206776][T12052] ? fs_reclaim_acquire+0x7d/0x100 [ 214.206806][T12052] should_fail_ex+0x414/0x560 [ 214.206835][T12052] should_failslab+0xa8/0x100 [ 214.206855][T12052] kmem_cache_alloc_node_noprof+0x77/0x710 [ 214.206878][T12052] ? __alloc_skb+0x112/0x2d0 [ 214.206909][T12052] __alloc_skb+0x112/0x2d0 [ 214.206936][T12052] netlink_sendmsg+0x5c6/0xb30 [ 214.206961][T12052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.206979][T12052] ? aa_sock_msg_perm+0xf1/0x1d0 [ 214.207002][T12052] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.207016][T12052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.207030][T12052] __sock_sendmsg+0x21c/0x270 [ 214.207051][T12052] ____sys_sendmsg+0x505/0x830 [ 214.207069][T12052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.207089][T12052] ? import_iovec+0x74/0xa0 [ 214.207108][T12052] ___sys_sendmsg+0x21f/0x2a0 [ 214.207128][T12052] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.207176][T12052] ? __fget_files+0x2a/0x420 [ 214.207192][T12052] ? __fget_files+0x3a0/0x420 [ 214.207217][T12052] __x64_sys_sendmsg+0x19b/0x260 [ 214.207238][T12052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.207265][T12052] ? __pfx_ksys_write+0x10/0x10 [ 214.207292][T12052] ? do_syscall_64+0xbe/0xfa0 [ 214.207318][T12052] do_syscall_64+0xfa/0xfa0 [ 214.207339][T12052] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.207361][T12052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.207379][T12052] ? clear_bhb_loop+0x60/0xb0 [ 214.207400][T12052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.207418][T12052] RIP: 0033:0x7ff19bb8f6c9 [ 214.207434][T12052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.207459][T12052] RSP: 002b:00007ff19cae1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.207478][T12052] RAX: ffffffffffffffda RBX: 00007ff19bde5fa0 RCX: 00007ff19bb8f6c9 [ 214.207492][T12052] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003 [ 214.207504][T12052] RBP: 00007ff19cae1090 R08: 0000000000000000 R09: 0000000000000000 [ 214.207515][T12052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.207526][T12052] R13: 00007ff19bde6038 R14: 00007ff19bde5fa0 R15: 00007ffc99f34908 [ 214.207557][T12052] [ 214.498508][T12050] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 214.566607][T12058] syzkaller0: entered promiscuous mode [ 214.572115][T12058] syzkaller0: entered allmulticast mode [ 214.605173][T12057] tipc: Enabled bearer , priority 0 [ 214.623675][T12055] tipc: Resetting bearer [ 214.655113][T12055] tipc: Disabling bearer [ 214.705582][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057460c00: rx timeout, send abort [ 214.714346][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057460c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 214.767909][T12067] Bluetooth: MGMT ver 1.23 [ 214.786888][T12069] sctp: [Deprecated]: syz.1.1909 (pid 12069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.786888][T12069] Use struct sctp_sack_info instead [ 214.887426][T12075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1911'. [ 214.917361][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1911'. [ 215.129611][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1915'. [ 215.393454][T12118] syz.4.1923: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 215.414728][T12118] CPU: 1 UID: 0 PID: 12118 Comm: syz.4.1923 Not tainted syzkaller #0 PREEMPT(full) [ 215.414750][T12118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.414761][T12118] Call Trace: [ 215.414768][T12118] [ 215.414775][T12118] dump_stack_lvl+0x189/0x250 [ 215.414803][T12118] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 215.414830][T12118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.414852][T12118] ? __pfx__printk+0x10/0x10 [ 215.414871][T12118] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 215.414894][T12118] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 215.414926][T12118] warn_alloc+0x214/0x310 [ 215.414951][T12118] ? stack_depot_save_flags+0x40/0x860 [ 215.414980][T12118] ? __pfx_warn_alloc+0x10/0x10 [ 215.415006][T12118] ? kasan_save_track+0x3e/0x80 [ 215.415028][T12118] ? __kasan_kmalloc+0x93/0xb0 [ 215.415052][T12118] ? xsk_setsockopt+0x4dc/0x8d0 [ 215.415070][T12118] ? do_sock_setsockopt+0x17c/0x1b0 [ 215.415086][T12118] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 215.415102][T12118] ? do_syscall_64+0xfa/0xfa0 [ 215.415122][T12118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.415151][T12118] __vmalloc_node_range_noprof+0x125/0x12d0 [ 215.415208][T12118] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 215.415236][T12118] ? __kasan_kmalloc+0x93/0xb0 [ 215.415266][T12118] vmalloc_user_noprof+0xad/0xf0 [ 215.415290][T12118] ? xskq_create+0xbf/0x170 [ 215.415322][T12118] xskq_create+0xbf/0x170 [ 215.415347][T12118] xsk_init_queue+0xb0/0x110 [ 215.415371][T12118] xsk_setsockopt+0x4dc/0x8d0 [ 215.415395][T12118] ? __pfx_xsk_setsockopt+0x10/0x10 [ 215.415423][T12118] ? __pfx_aa_sk_perm+0x10/0x10 [ 215.415449][T12118] ? aa_sock_opt_perm+0xff/0x1b0 [ 215.415477][T12118] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 215.415494][T12118] ? __pfx_xsk_setsockopt+0x10/0x10 [ 215.415516][T12118] do_sock_setsockopt+0x17c/0x1b0 [ 215.415539][T12118] __x64_sys_setsockopt+0x13f/0x1b0 [ 215.415563][T12118] do_syscall_64+0xfa/0xfa0 [ 215.415584][T12118] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.415606][T12118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.415624][T12118] ? clear_bhb_loop+0x60/0xb0 [ 215.415645][T12118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.415663][T12118] RIP: 0033:0x7ff19bb8f6c9 [ 215.415680][T12118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.415695][T12118] RSP: 002b:00007ff19cae1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 215.415714][T12118] RAX: ffffffffffffffda RBX: 00007ff19bde5fa0 RCX: 00007ff19bb8f6c9 [ 215.415727][T12118] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 215.415738][T12118] RBP: 00007ff19bc11f91 R08: 0000000000000004 R09: 0000000000000000 [ 215.415749][T12118] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.415761][T12118] R13: 00007ff19bde6038 R14: 00007ff19bde5fa0 R15: 00007ffc99f34908 [ 215.415794][T12118] [ 215.415884][T12118] Mem-Info: [ 215.712281][T12118] active_anon:5948 inactive_anon:0 isolated_anon:0 [ 215.712281][T12118] active_file:3594 inactive_file:39929 isolated_file:0 [ 215.712281][T12118] unevictable:768 dirty:146 writeback:0 [ 215.712281][T12118] slab_reclaimable:11289 slab_unreclaimable:99721 [ 215.712281][T12118] mapped:29533 shmem:1360 pagetables:1284 [ 215.712281][T12118] sec_pagetables:0 bounce:0 [ 215.712281][T12118] kernel_misc_reclaimable:0 [ 215.712281][T12118] free:1316055 free_pcp:24066 free_cma:0 [ 215.772195][T12118] Node 0 active_anon:23792kB inactive_anon:0kB active_file:14376kB inactive_file:159516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118132kB dirty:584kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12888kB pagetables:5012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 215.804213][T12118] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 215.834259][T12118] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.850729][T12129] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 215.864659][T12118] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 215.883897][T12118] Node 0 DMA32 free:1359236kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23860kB inactive_anon:0kB active_file:14376kB inactive_file:159524kB unevictable:1536kB writepending:664kB zspages:0kB present:3129332kB managed:2565168kB mlocked:0kB bounce:0kB free_pcp:74948kB local_pcp:48116kB free_cma:0kB [ 215.923252][T12118] lowmem_reserve[]: 0 0 0 0 0 [ 215.930952][T12129] bond3 (unregistering): Released all slaves [ 215.959244][T12118] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.998969][T12118] lowmem_reserve[]: 0 0 0 0 0 [ 216.003806][T12118] Node 1 Normal free:3889624kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22028kB local_pcp:12236kB free_cma:0kB [ 216.086335][T12138] FAULT_INJECTION: forcing a failure. [ 216.086335][T12138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.089663][T12118] lowmem_reserve[]: [ 216.109148][T12138] CPU: 1 UID: 0 PID: 12138 Comm: syz.2.1930 Not tainted syzkaller #0 PREEMPT(full) [ 216.109173][T12138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.109183][T12138] Call Trace: [ 216.109191][T12138] [ 216.109198][T12138] dump_stack_lvl+0x189/0x250 [ 216.109225][T12138] ? __pfx____ratelimit+0x10/0x10 [ 216.109248][T12138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.109269][T12138] ? __pfx__printk+0x10/0x10 [ 216.109288][T12138] ? __might_fault+0xb0/0x130 [ 216.109320][T12138] should_fail_ex+0x414/0x560 [ 216.109349][T12138] _copy_from_iter+0x1de/0x1790 [ 216.109373][T12138] ? rcu_is_watching+0x15/0xb0 [ 216.109395][T12138] ? kmalloc_reserve+0xbd/0x290 [ 216.109411][T12138] ? __pfx__copy_from_iter+0x10/0x10 [ 216.109432][T12138] ? __build_skb_around+0x262/0x3f0 [ 216.109460][T12138] ? netlink_sendmsg+0x642/0xb30 [ 216.109476][T12138] ? skb_put+0x11b/0x210 [ 216.109496][T12138] netlink_sendmsg+0x6b2/0xb30 [ 216.109523][T12138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.109543][T12138] ? aa_sock_msg_perm+0xf1/0x1d0 [ 216.109598][T12138] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 216.109616][T12138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.109635][T12138] __sock_sendmsg+0x21c/0x270 [ 216.109661][T12138] ____sys_sendmsg+0x505/0x830 [ 216.109685][T12138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.109713][T12138] ? import_iovec+0x74/0xa0 [ 216.109738][T12138] ___sys_sendmsg+0x21f/0x2a0 [ 216.109759][T12138] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.109813][T12138] ? __fget_files+0x2a/0x420 [ 216.109839][T12138] ? __fget_files+0x3a0/0x420 [ 216.109867][T12138] __x64_sys_sendmsg+0x19b/0x260 [ 216.109888][T12138] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 216.109917][T12138] ? __pfx_ksys_write+0x10/0x10 [ 216.109944][T12138] ? do_syscall_64+0xbe/0xfa0 [ 216.109971][T12138] do_syscall_64+0xfa/0xfa0 [ 216.109992][T12138] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.110015][T12138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.110033][T12138] ? clear_bhb_loop+0x60/0xb0 [ 216.110054][T12138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.110071][T12138] RIP: 0033:0x7f5d3f78f6c9 [ 216.110088][T12138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.110102][T12138] RSP: 002b:00007f5d406f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.110122][T12138] RAX: ffffffffffffffda RBX: 00007f5d3f9e5fa0 RCX: 00007f5d3f78f6c9 [ 216.110136][T12138] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003 [ 216.110147][T12138] RBP: 00007f5d406f1090 R08: 0000000000000000 R09: 0000000000000000 [ 216.110159][T12138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.110169][T12138] R13: 00007f5d3f9e6038 R14: 00007f5d3f9e5fa0 R15: 00007ffcafdc4f78 [ 216.110197][T12138] [ 216.462708][T12148] set match dimension is over the limit! [ 216.469420][T12118] 0 0 0 0 0 [ 216.472692][T12118] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 216.503577][T12118] Node 0 DMA32: 399*4kB (UME) 261*8kB (UME) 174*16kB (UM) 390*32kB (UM) 18*64kB (UME) 16*128kB (UME) 7*256kB (UME) 6*512kB (UME) 5*1024kB (UE) 4*2048kB (U) 322*4096kB (UM) = 1359236kB [ 216.524604][T12118] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 216.536739][T12118] Node 1 Normal: 216*4kB (UME) 47*8kB (UME) 44*16kB (UME) 90*32kB (UME) 28*64kB (UME) 8*128kB (UME) 4*256kB (UME) 4*512kB (UME) 4*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3889624kB [ 216.555853][T12118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.565891][T12118] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.575250][T12118] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.584829][T12118] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.590500][T12152] block nbd0: Unsupported socket: should be TCP or UNIX. [ 216.594162][T12118] 44881 total pagecache pages [ 216.594182][T12118] 0 pages in swap cache [ 216.610622][T12118] Free swap = 124996kB [ 216.614784][T12118] Total swap = 124996kB [ 216.618988][T12118] 2097051 pages RAM [ 216.622882][T12118] 0 pages HighMem/MovableOnly [ 216.627638][T12118] 424117 pages reserved [ 216.631793][T12118] 0 pages cma reserved [ 216.893001][T12166] syzkaller0: entered promiscuous mode [ 216.898931][T12166] syzkaller0: entered allmulticast mode [ 216.931317][T12166] tipc: Enabled bearer , priority 0 [ 216.943949][T12165] tipc: Resetting bearer [ 216.981129][T12165] tipc: Disabling bearer [ 217.048588][T12172] FAULT_INJECTION: forcing a failure. [ 217.048588][T12172] name failslab, interval 1, probability 0, space 0, times 0 [ 217.072936][T12172] CPU: 1 UID: 0 PID: 12172 Comm: syz.4.1942 Not tainted syzkaller #0 PREEMPT(full) [ 217.072961][T12172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 217.072972][T12172] Call Trace: [ 217.072980][T12172] [ 217.072988][T12172] dump_stack_lvl+0x189/0x250 [ 217.073015][T12172] ? __pfx____ratelimit+0x10/0x10 [ 217.073038][T12172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.073061][T12172] ? __pfx__printk+0x10/0x10 [ 217.073085][T12172] ? __lock_acquire+0xab9/0xd20 [ 217.073110][T12172] should_fail_ex+0x414/0x560 [ 217.073141][T12172] should_failslab+0xa8/0x100 [ 217.073161][T12172] kmem_cache_alloc_noprof+0x74/0x6e0 [ 217.073185][T12172] ? skb_clone+0x212/0x3a0 [ 217.073210][T12172] skb_clone+0x212/0x3a0 [ 217.073233][T12172] __netlink_deliver_tap+0x404/0x850 [ 217.073269][T12172] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.073288][T12172] netlink_deliver_tap+0x19c/0x1b0 [ 217.073305][T12172] netlink_unicast+0x7fa/0x9e0 [ 217.073337][T12172] ? __pfx_netlink_unicast+0x10/0x10 [ 217.073360][T12172] ? netlink_sendmsg+0x642/0xb30 [ 217.073374][T12172] ? skb_put+0x11b/0x210 [ 217.073392][T12172] netlink_sendmsg+0x805/0xb30 [ 217.073419][T12172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.073438][T12172] ? aa_sock_msg_perm+0xf1/0x1d0 [ 217.073463][T12172] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 217.073480][T12172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.073498][T12172] __sock_sendmsg+0x21c/0x270 [ 217.073524][T12172] ____sys_sendmsg+0x505/0x830 [ 217.073549][T12172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.073577][T12172] ? import_iovec+0x74/0xa0 [ 217.073603][T12172] ___sys_sendmsg+0x21f/0x2a0 [ 217.073626][T12172] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.073683][T12172] ? __fget_files+0x2a/0x420 [ 217.073699][T12172] ? __fget_files+0x3a0/0x420 [ 217.073728][T12172] __x64_sys_sendmsg+0x19b/0x260 [ 217.073749][T12172] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.073779][T12172] ? __pfx_ksys_write+0x10/0x10 [ 217.073807][T12172] ? do_syscall_64+0xbe/0xfa0 [ 217.073834][T12172] do_syscall_64+0xfa/0xfa0 [ 217.073856][T12172] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.073879][T12172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.073896][T12172] ? clear_bhb_loop+0x60/0xb0 [ 217.073918][T12172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.073936][T12172] RIP: 0033:0x7ff19bb8f6c9 [ 217.073953][T12172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.073971][T12172] RSP: 002b:00007ff19cae1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.073991][T12172] RAX: ffffffffffffffda RBX: 00007ff19bde5fa0 RCX: 00007ff19bb8f6c9 [ 217.074005][T12172] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003 [ 217.074017][T12172] RBP: 00007ff19cae1090 R08: 0000000000000000 R09: 0000000000000000 [ 217.074028][T12172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.074039][T12172] R13: 00007ff19bde6038 R14: 00007ff19bde5fa0 R15: 00007ffc99f34908 [ 217.074072][T12172] [ 217.517799][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'. [ 217.594885][T12189] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1946'. [ 217.680286][T12195] netlink: 'syz.4.1950': attribute type 10 has an invalid length. [ 217.690132][T12195] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1950'. [ 217.723750][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'. [ 217.734877][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'. [ 217.779482][T12195] team0: Port device geneve0 added [ 217.801950][T12196] geneve3: entered promiscuous mode [ 217.810824][T12196] geneve3: entered allmulticast mode [ 217.826484][ T60] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 217.839869][ T60] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 217.953502][ T60] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 217.976968][ T60] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 217.999303][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056902c00: rx timeout, send abort [ 218.007770][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056902c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 218.016354][T12214] tipc: Enabled bearer , priority 0 [ 218.031257][T12214] syzkaller0: entered promiscuous mode [ 218.049429][T12214] syzkaller0: entered allmulticast mode [ 218.082343][T12214] tipc: Resetting bearer [ 218.095679][T12212] tipc: Resetting bearer [ 218.119387][T12212] tipc: Disabling bearer [ 218.311753][T12239] netlink: 'syz.1.1965': attribute type 10 has an invalid length. [ 218.401885][T12243] __nla_validate_parse: 3 callbacks suppressed [ 218.401902][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1967'. [ 218.421937][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 218.523529][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1968'. [ 218.574528][T12245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1968'. [ 218.753388][T12265] netlink: 'syz.4.1972': attribute type 13 has an invalid length. [ 218.766760][T12265] netlink: 'syz.4.1972': attribute type 58 has an invalid length. [ 218.777984][T12265] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1972'. [ 218.978175][T12275] netlink: 'syz.2.1974': attribute type 1 has an invalid length. [ 218.989948][T12277] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1975'. [ 219.006082][T12279] FAULT_INJECTION: forcing a failure. [ 219.006082][T12279] name failslab, interval 1, probability 0, space 0, times 0 [ 219.019845][T12279] CPU: 0 UID: 0 PID: 12279 Comm: syz.0.1976 Not tainted syzkaller #0 PREEMPT(full) [ 219.019868][T12279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 219.019878][T12279] Call Trace: [ 219.019885][T12279] [ 219.019892][T12279] dump_stack_lvl+0x189/0x250 [ 219.019919][T12279] ? __pfx____ratelimit+0x10/0x10 [ 219.019941][T12279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.019962][T12279] ? __pfx__printk+0x10/0x10 [ 219.019987][T12279] ? __pfx___might_resched+0x10/0x10 [ 219.020010][T12279] should_fail_ex+0x414/0x560 [ 219.020036][T12279] should_failslab+0xa8/0x100 [ 219.020053][T12279] kmem_cache_alloc_node_noprof+0x77/0x710 [ 219.020073][T12279] ? __alloc_skb+0x112/0x2d0 [ 219.020098][T12279] __alloc_skb+0x112/0x2d0 [ 219.020120][T12279] netlink_ack+0x146/0xa50 [ 219.020139][T12279] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.020157][T12279] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 219.020175][T12279] ? __pfx_nl80211_post_doit+0x10/0x10 [ 219.020193][T12279] ? __asan_memcpy+0x40/0x70 [ 219.020225][T12279] ? __pfx_ref_tracker_free+0x10/0x10 [ 219.020249][T12279] netlink_rcv_skb+0x28c/0x470 [ 219.020270][T12279] ? __lock_acquire+0xab9/0xd20 [ 219.020287][T12279] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.020309][T12279] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.020358][T12279] ? down_read+0x1ad/0x2e0 [ 219.020377][T12279] genl_rcv+0x28/0x40 [ 219.020395][T12279] netlink_unicast+0x82f/0x9e0 [ 219.020427][T12279] ? __pfx_netlink_unicast+0x10/0x10 [ 219.020452][T12279] ? netlink_sendmsg+0x642/0xb30 [ 219.020467][T12279] ? skb_put+0x11b/0x210 [ 219.020488][T12279] netlink_sendmsg+0x805/0xb30 [ 219.020515][T12279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.020536][T12279] ? aa_sock_msg_perm+0xf1/0x1d0 [ 219.020562][T12279] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.020579][T12279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.020598][T12279] __sock_sendmsg+0x21c/0x270 [ 219.020623][T12279] ____sys_sendmsg+0x505/0x830 [ 219.020648][T12279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.020677][T12279] ? import_iovec+0x74/0xa0 [ 219.020703][T12279] ___sys_sendmsg+0x21f/0x2a0 [ 219.020724][T12279] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.020782][T12279] ? __fget_files+0x2a/0x420 [ 219.020797][T12279] ? __fget_files+0x3a0/0x420 [ 219.020823][T12279] __x64_sys_sendmsg+0x19b/0x260 [ 219.020845][T12279] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.020875][T12279] ? __pfx_ksys_write+0x10/0x10 [ 219.020902][T12279] ? do_syscall_64+0xbe/0xfa0 [ 219.020929][T12279] do_syscall_64+0xfa/0xfa0 [ 219.020950][T12279] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.020972][T12279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.020989][T12279] ? clear_bhb_loop+0x60/0xb0 [ 219.021011][T12279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.021028][T12279] RIP: 0033:0x7ff11ab8f6c9 [ 219.021045][T12279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.021060][T12279] RSP: 002b:00007ff11bae0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.021079][T12279] RAX: ffffffffffffffda RBX: 00007ff11ade5fa0 RCX: 00007ff11ab8f6c9 [ 219.021093][T12279] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003 [ 219.021122][T12279] RBP: 00007ff11bae0090 R08: 0000000000000000 R09: 0000000000000000 [ 219.021134][T12279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.021144][T12279] R13: 00007ff11ade6038 R14: 00007ff11ade5fa0 R15: 00007ffcfb78a388 [ 219.021177][T12279] [ 219.372418][T12275] 8021q: adding VLAN 0 to HW filter on device bond7 [ 219.425518][T12275] bond7: (slave veth7): Enslaving as an active interface with a down link [ 219.443369][T12275] bond5: (slave veth0_to_bond): Releasing active interface [ 219.459983][T12275] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 219.526237][T12293] netlink: 'syz.2.1974': attribute type 7 has an invalid length. [ 219.534679][T12293] netlink: 'syz.2.1974': attribute type 8 has an invalid length. [ 219.592817][T12295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1979'. [ 219.766939][T12307] __bpf_mt_check_bytecode: 55 callbacks suppressed [ 219.767057][T12307] xt_bpf: check failed: parse error [ 219.796276][T12307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1983'. [ 220.002001][T12317] tipc: Enabled bearer , priority 0 [ 220.073306][T12317] tipc: Resetting bearer [ 220.084813][T12321] FAULT_INJECTION: forcing a failure. [ 220.084813][T12321] name failslab, interval 1, probability 0, space 0, times 0 [ 220.117091][T12321] CPU: 1 UID: 0 PID: 12321 Comm: syz.4.1987 Not tainted syzkaller #0 PREEMPT(full) [ 220.117116][T12321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 220.117127][T12321] Call Trace: [ 220.117134][T12321] [ 220.117142][T12321] dump_stack_lvl+0x189/0x250 [ 220.117169][T12321] ? __pfx____ratelimit+0x10/0x10 [ 220.117192][T12321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.117215][T12321] ? __pfx__printk+0x10/0x10 [ 220.117239][T12321] ? __pfx___might_resched+0x10/0x10 [ 220.117264][T12321] should_fail_ex+0x414/0x560 [ 220.117293][T12321] should_failslab+0xa8/0x100 [ 220.117314][T12321] kmem_cache_alloc_node_noprof+0x77/0x710 [ 220.117339][T12321] ? __alloc_skb+0x112/0x2d0 [ 220.117376][T12321] __alloc_skb+0x112/0x2d0 [ 220.117406][T12321] netlink_ack+0x146/0xa50 [ 220.117429][T12321] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.117448][T12321] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 220.117467][T12321] ? __pfx_nl80211_post_doit+0x10/0x10 [ 220.117500][T12321] netlink_rcv_skb+0x28c/0x470 [ 220.117523][T12321] ? __lock_acquire+0xab9/0xd20 [ 220.117541][T12321] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.117564][T12321] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 220.117609][T12321] ? down_read+0x1ad/0x2e0 [ 220.117629][T12321] genl_rcv+0x28/0x40 [ 220.117648][T12321] netlink_unicast+0x82f/0x9e0 [ 220.117681][T12321] ? __pfx_netlink_unicast+0x10/0x10 [ 220.117706][T12321] ? netlink_sendmsg+0x642/0xb30 [ 220.117724][T12321] ? skb_put+0x11b/0x210 [ 220.117746][T12321] netlink_sendmsg+0x805/0xb30 [ 220.117773][T12321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.117794][T12321] ? aa_sock_msg_perm+0xf1/0x1d0 [ 220.117821][T12321] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.117839][T12321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.117857][T12321] __sock_sendmsg+0x21c/0x270 [ 220.117883][T12321] ____sys_sendmsg+0x505/0x830 [ 220.117909][T12321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.117937][T12321] ? import_iovec+0x74/0xa0 [ 220.117962][T12321] ___sys_sendmsg+0x21f/0x2a0 [ 220.117983][T12321] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.118039][T12321] ? __fget_files+0x2a/0x420 [ 220.118055][T12321] ? __fget_files+0x3a0/0x420 [ 220.118083][T12321] __x64_sys_sendmsg+0x19b/0x260 [ 220.118105][T12321] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.118133][T12321] ? __pfx_ksys_write+0x10/0x10 [ 220.118160][T12321] ? do_syscall_64+0xbe/0xfa0 [ 220.118187][T12321] do_syscall_64+0xfa/0xfa0 [ 220.118208][T12321] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.118230][T12321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.118248][T12321] ? clear_bhb_loop+0x60/0xb0 [ 220.118270][T12321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.118287][T12321] RIP: 0033:0x7ff19bb8f6c9 [ 220.118303][T12321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.118318][T12321] RSP: 002b:00007ff19cae1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.118338][T12321] RAX: ffffffffffffffda RBX: 00007ff19bde5fa0 RCX: 00007ff19bb8f6c9 [ 220.118350][T12321] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003 [ 220.118368][T12321] RBP: 00007ff19cae1090 R08: 0000000000000000 R09: 0000000000000000 [ 220.118379][T12321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.118390][T12321] R13: 00007ff19bde6038 R14: 00007ff19bde5fa0 R15: 00007ffc99f34908 [ 220.118422][T12321] [ 220.449749][T12317] tipc: Disabling bearer [ 220.559203][ T5841] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 220.565176][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1991'. [ 220.636114][T12340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1992'. [ 220.760967][T12348] netlink: 'syz.1.1994': attribute type 10 has an invalid length. [ 220.781213][T12340] bond8: Removing last arp target with arp_interval on [ 220.852797][T12357] sctp: [Deprecated]: syz.3.1996 (pid 12357) Use of int in maxseg socket option. [ 220.852797][T12357] Use struct sctp_assoc_value instead [ 220.937895][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056a97000: rx timeout, send abort [ 220.946475][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a97000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 221.103909][T12372] syzkaller0: entered promiscuous mode [ 221.120321][T12372] syzkaller0: entered allmulticast mode [ 221.281043][T12380] netlink: 'syz.2.2000': attribute type 1 has an invalid length. [ 221.448179][T12385] bond9: (slave gretap2): making interface the new active one [ 221.490535][T12385] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 222.383100][T12446] xt_time: unknown flags 0xf4 [ 222.418124][T12443] bond10: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 222.447410][T12443] bond10 (unregistering): Released all slaves [ 222.530066][T12450] tipc: Enabled bearer , priority 0 [ 222.551476][T12452] syzkaller0: entered promiscuous mode [ 222.566279][T12452] syzkaller0: entered allmulticast mode [ 222.608027][T12442] tipc: Resetting bearer [ 222.621230][T12429] tipc: Resetting bearer [ 222.684293][T12429] tipc: Disabling bearer [ 222.703591][T12465] netlink: 'syz.1.2016': attribute type 32 has an invalid length. [ 222.727544][T12465] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 223.920501][T12543] __nla_validate_parse: 3 callbacks suppressed [ 223.920522][T12543] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.2036'. [ 224.037791][T12549] netlink: 'syz.4.2038': attribute type 1 has an invalid length. [ 224.056539][T12549] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2038'. [ 224.092331][T12553] netlink: 'syz.1.2041': attribute type 3 has an invalid length. [ 224.102169][T12553] netlink: 'syz.1.2041': attribute type 3 has an invalid length. [ 224.112615][T12553] netlink: 'syz.1.2041': attribute type 3 has an invalid length. [ 224.121015][T12553] netlink: 'syz.1.2041': attribute type 3 has an invalid length. [ 224.131335][T12553] netlink: 'syz.1.2041': attribute type 3 has an invalid length. [ 224.149898][T12553] netlink: 'syz.1.2041': attribute type 3 has an invalid length. [ 224.169713][T12553] netlink: 'syz.1.2041': attribute type 3 has an invalid length. [ 224.187414][T12553] netlink: 'syz.1.2041': attribute type 3 has an invalid length. [ 224.205690][T12553] netlink: 'syz.1.2041': attribute type 3 has an invalid length. [ 224.433351][ T30] audit: type=1800 audit(1762297073.205:4): pid=12569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2045" name="blkio.bfq.io_queued" dev="tmpfs" ino=2148 res=0 errno=0 [ 224.470357][ T30] audit: type=1800 audit(1762297073.235:5): pid=12570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2045" name="blkio.bfq.io_queued" dev="tmpfs" ino=2148 res=0 errno=0 [ 224.492876][T12569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2045'. [ 224.759070][T12585] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2051'. [ 224.787521][T12585] netlink: get zone limit has 8 unknown bytes [ 224.799601][T12594] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 248.418877][ T5151] Bluetooth: hci4: link tx timeout [ 248.424009][ T5151] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 250.476605][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 277.397376][T12718] tipc: Enabled bearer , priority 0 [ 277.508401][T12718] syzkaller0: entered promiscuous mode [ 277.513321][T12721] validate_nla: 2 callbacks suppressed [ 277.513338][T12721] netlink: 'syz.2.2055': attribute type 13 has an invalid length. [ 277.530273][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 277.535137][T12718] syzkaller0: entered allmulticast mode [ 277.677579][T12732] : entered promiscuous mode [ 277.678685][T12729] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2058'. [ 277.697063][T12724] dvmrp0: entered allmulticast mode [ 277.835982][T12728] tipc: Resetting bearer [ 277.881384][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2061'. [ 277.892197][T12739] bond2 (unregistering): Released all slaves [ 277.912634][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2061'. [ 277.913388][T12746] netlink: 'syz.0.2062': attribute type 4 has an invalid length. [ 277.943067][T12715] tipc: Resetting bearer [ 278.150400][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2063'. [ 278.518881][ T5887] tipc: Node number set to 72285269 [ 279.228556][T12715] tipc: Disabling bearer [ 279.259542][T12740] syzkaller1: entered promiscuous mode [ 279.265051][T12740] syzkaller1: entered allmulticast mode [ 279.274409][T12759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2063'. [ 279.284831][T12759] tc_dump_action: action bad kind [ 279.406228][T12770] ip6gre3: entered allmulticast mode [ 279.458152][T12775] netlink: 'syz.0.2068': attribute type 4 has an invalid length. [ 279.509985][T12780] netlink: 'syz.0.2068': attribute type 4 has an invalid length. [ 279.542403][T12782] netlink: 'syz.4.2069': attribute type 1 has an invalid length. [ 279.679463][T12779] syzkaller0: entered promiscuous mode [ 279.683277][T12791] netlink: 'syz.0.2068': attribute type 18 has an invalid length. [ 279.729043][T12779] syzkaller0: entered allmulticast mode [ 279.755592][T12791] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2068'. [ 279.776914][T12794] netlink: 'syz.4.2072': attribute type 1 has an invalid length. [ 279.907648][T12794] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.929893][T12801] vlan0: entered promiscuous mode [ 279.940276][T12801] bond2: entered promiscuous mode [ 279.947477][T12794] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96 [ 279.958431][T12801] vlan0: entered allmulticast mode [ 279.963625][T12801] bond2: entered allmulticast mode [ 280.427865][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2080'. [ 280.439703][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2080'. [ 282.157980][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2089'. [ 282.658963][T12874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.928432][T12902] SET target dimension over the limit! [ 283.056246][T12913] syzkaller0: entered promiscuous mode [ 283.073252][T12913] syzkaller0: entered allmulticast mode [ 283.221990][T12916] wg1 speed is unknown, defaulting to 1000 [ 283.495778][T12930] netlink: 'syz.2.2113': attribute type 1 has an invalid length. [ 283.626301][T12938] bond10: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 283.639763][T12938] bond10: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 283.650731][T12938] bond10: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 283.732258][T12930] bond10: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 283.790587][T12930] bond10: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 284.482424][T12975] __nla_validate_parse: 5 callbacks suppressed [ 284.482443][T12975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2124'. [ 284.609843][T12987] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 [ 284.692740][T12996] xt_l2tp: unknown flags: 10 [ 284.835113][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2130'. [ 284.854705][T13001] syzkaller0: entered promiscuous mode [ 284.860594][T13001] syzkaller0: entered allmulticast mode [ 284.867908][T13004] netlink: 'syz.2.2134': attribute type 1 has an invalid length. [ 284.948644][T13010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2136'. [ 284.951605][T13001] tipc: Enabled bearer , priority 0 [ 284.980132][T13007] netlink: 'syz.0.2135': attribute type 12 has an invalid length. [ 285.009833][T13008] bond11: (slave geneve2): making interface the new active one [ 285.018759][T13008] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 285.030427][T13000] tipc: Resetting bearer [ 285.057193][T13000] tipc: Disabling bearer [ 285.072798][ T36] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 285.090957][ T36] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 285.144625][T13014] netlink: 'syz.2.2138': attribute type 1 has an invalid length. [ 285.153166][ T36] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 285.175151][ T36] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 285.323432][T13014] veth9: entered promiscuous mode [ 285.443591][T13018] veth9: entered promiscuous mode [ 285.635940][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2148'. [ 285.789027][T13052] syzkaller0: entered promiscuous mode [ 285.808295][T13052] syzkaller0: entered allmulticast mode [ 285.832610][T13055] bridge0: port 4(batadv0) entered blocking state [ 285.845079][T13055] bridge0: port 4(batadv0) entered disabled state [ 285.856814][T13055] batadv0: entered allmulticast mode [ 285.890100][T13055] batadv0: entered promiscuous mode [ 285.991184][T13061] tipc: Enabled bearer , priority 0 [ 286.018135][T13066] lo: left allmulticast mode [ 286.025803][T13066] netlink: 'syz.2.2154': attribute type 2 has an invalid length. [ 286.041015][T13066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.059246][T13050] tipc: Resetting bearer [ 286.060736][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'. [ 286.108035][T13050] tipc: Disabling bearer [ 286.120787][T13068] veth1_to_hsr: default FDB implementation only supports local addresses [ 286.148540][T13068] tipc: Enabled bearer , priority 0 [ 286.156164][T13068] syzkaller0: entered promiscuous mode [ 286.162190][T13068] syzkaller0: entered allmulticast mode [ 286.225138][T13068] tipc: Resetting bearer [ 286.267415][T13067] tipc: Resetting bearer [ 286.320795][T13067] tipc: Disabling bearer [ 286.326932][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 286.336702][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 286.358953][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2162'. [ 286.425703][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 286.436299][T13100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2160'. [ 286.464269][T13100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2160'. [ 287.900563][T13175] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 288.273610][T13204] netlink: 'syz.3.2198': attribute type 8 has an invalid length. [ 288.408700][T13215] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2200'. [ 288.928458][T13252] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 289.218053][T13269] bond3: entered promiscuous mode [ 289.223989][T13269] 8021q: adding VLAN 0 to HW filter on device bond3 [ 289.504086][T13291] __nla_validate_parse: 4 callbacks suppressed [ 289.504103][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2226'. [ 289.555512][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2226'. [ 289.563787][T13292] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 289.575216][T13292] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 289.583491][T13291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2226'. [ 290.111207][T13325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2238'. [ 290.125469][T13325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2238'. [ 290.149562][T13325] netlink: 'syz.2.2238': attribute type 1 has an invalid length. [ 290.187668][T13325] 8021q: adding VLAN 0 to HW filter on device bond13 [ 290.210547][T13325] bond7: (slave veth0_to_bond): Releasing active interface [ 290.318541][T13333] tipc: Enabled bearer , priority 0 [ 290.447070][T13345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2244'. [ 290.535293][T13350] netlink: 'syz.0.2247': attribute type 1 has an invalid length. [ 290.556055][T13351] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2246'. [ 290.658206][T13362] macsec2: entered promiscuous mode [ 291.089679][T13329] tipc: Disabling bearer [ 291.294928][T13406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2264'. [ 291.322843][T13408] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2265'. [ 291.430668][T13413] netlink: 'syz.4.2267': attribute type 1 has an invalid length. [ 291.449690][T13413] 8021q: VLANs not supported on ip6tnl0 [ 291.630756][T13423] nbd: must specify at least one socket [ 291.987129][T13452] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2274'. [ 292.091510][T13458] macvtap2: entered allmulticast mode [ 292.112637][T13458] veth0_macvtap: entered allmulticast mode [ 292.121688][T13460] 8021q: VLANs not supported on ip6tnl0 [ 292.269186][T13475] netlink: 'syz.2.2280': attribute type 6 has an invalid length. [ 292.285601][T13479] x_tables: duplicate underflow at hook 2 [ 292.314328][T13479] sit3: entered promiscuous mode [ 292.321870][T13479] sit3: entered allmulticast mode [ 292.427657][T13487] netlink: 'syz.4.2285': attribute type 2 has an invalid length. [ 292.444650][T13492] netlink: 'syz.2.2286': attribute type 10 has an invalid length. [ 292.464062][T13486] ipt_ECN: cannot use operation on non-tcp rule [ 292.464149][T13492] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 292.495039][T13492] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 292.544453][T13492] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 292.702248][T13511] netlink: 'syz.4.2291': attribute type 1 has an invalid length. [ 292.845047][T13511] 8021q: adding VLAN 0 to HW filter on device bond5 [ 292.886143][T13512] vlan1: entered promiscuous mode [ 292.915412][T13512] bond5: entered promiscuous mode [ 292.938118][T13512] vlan1: entered allmulticast mode [ 292.943282][T13512] bond5: entered allmulticast mode [ 293.030077][T13524] syzkaller0: entered promiscuous mode [ 293.042297][T13524] syzkaller0: entered allmulticast mode [ 293.532736][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 293.552199][T13566] netlink: 'syz.1.2308': attribute type 33 has an invalid length. [ 293.707084][T13578] macvtap3: entered promiscuous mode [ 293.712420][T13578] macvtap3: entered allmulticast mode [ 293.765202][T13576] netlink: 'syz.2.2311': attribute type 19 has an invalid length. [ 293.849204][ T50] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.849237][T13576] netlink: 'syz.2.2311': attribute type 19 has an invalid length. [ 293.870488][ T50] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.880740][ T50] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.897411][ T50] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.115124][T13611] sctp: [Deprecated]: syz.0.2318 (pid 13611) Use of int in max_burst socket option deprecated. [ 294.115124][T13611] Use struct sctp_assoc_value instead [ 294.156629][T13601] bond14: entered promiscuous mode [ 294.165851][T13601] 8021q: adding VLAN 0 to HW filter on device bond14 [ 296.049257][T13668] veth1_to_bond: entered allmulticast mode [ 296.083379][T13668] __nla_validate_parse: 14 callbacks suppressed [ 296.083398][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2333'. [ 296.127234][T13668] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2333'. [ 296.204443][T13666] veth1_to_bond: left allmulticast mode [ 296.449591][T13693] bridge8: entered promiscuous mode [ 296.474172][T13693] bridge8: entered allmulticast mode [ 296.571143][T13695] 0ªî{X¹¦: left allmulticast mode [ 296.592637][T13708] raw_sendmsg: syz.2.2343 forgot to set AF_INET. Fix it! [ 296.618586][T13706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2344'. [ 296.628176][T13695] sit0: left promiscuous mode [ 296.663714][T13695] bridge0: port 3(team0) entered disabled state [ 296.670461][T13695] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.678153][T13695] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.937956][T13695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.956273][T13695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.207723][T13695] ip6gre1: left allmulticast mode [ 297.283181][T13695] vlan0: left allmulticast mode [ 297.289433][T13695] veth0_vlan: left allmulticast mode [ 297.294886][T13695] vlan0: left promiscuous mode [ 297.301055][T13695] macvtap1: left promiscuous mode [ 297.306264][T13695] macvtap1: left allmulticast mode [ 297.318796][T13695] xfrm1: left promiscuous mode [ 297.327335][T13695] xfrm1: left allmulticast mode [ 297.348029][T13695] veth3: left promiscuous mode [ 297.388369][T13695] ip6gre3: left allmulticast mode [ 297.406416][T13705] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2344'. [ 297.495950][ T60] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.534493][ T60] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.557863][ T60] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.585782][ T60] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.615292][ T60] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.634177][ T60] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.649307][ T60] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.659364][ T60] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.676814][T13728] syzkaller1: entered promiscuous mode [ 297.692206][T13728] syzkaller1: entered allmulticast mode [ 297.804263][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2353'. [ 297.844549][T13746] Bluetooth: hci1: too big key_count value 32778 [ 298.036762][T13763] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 298.037205][T13764] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 298.086737][T13763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2355'. [ 298.208911][T13773] IPVS: set_ctl: invalid protocol: 33 172.30.0.3:20003 [ 298.315926][T13779] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2361'. [ 298.459135][T13788] validate_nla: 4 callbacks suppressed [ 298.459154][T13788] netlink: 'syz.2.2363': attribute type 13 has an invalid length. [ 298.503404][T13788] netlink: 'syz.2.2363': attribute type 27 has an invalid length. [ 298.645467][T13799] syzkaller0: entered promiscuous mode [ 298.655086][T13799] syzkaller0: entered allmulticast mode [ 298.685162][T13799] tipc: Enabled bearer , priority 0 [ 298.727025][T13797] tipc: Resetting bearer [ 298.783345][T13797] tipc: Disabling bearer [ 298.815114][T13814] xt_l2tp: invalid flags combination: 0 [ 298.822160][T13813] xt_l2tp: invalid flags combination: 0 [ 298.944573][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2371'. [ 298.963344][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2371'. [ 299.218463][T13837] lo: entered allmulticast mode [ 299.237459][T13838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2378'. [ 299.452188][T13849] erspan0: entered allmulticast mode [ 299.461651][T13851] syzkaller0: entered promiscuous mode [ 299.469391][T13852] netlink: 'syz.4.2383': attribute type 21 has an invalid length. [ 299.476414][T13851] syzkaller0: entered allmulticast mode [ 299.496753][T13852] IPv6: NLM_F_CREATE should be specified when creating new route [ 299.539551][T13851] tipc: Enabled bearer , priority 0 [ 299.564086][T13848] tipc: Resetting bearer [ 299.613136][T13848] tipc: Disabling bearer [ 299.821433][T13875] tipc: Enabled bearer , priority 0 [ 299.829904][T13875] syzkaller0: entered promiscuous mode [ 299.837098][T13875] syzkaller0: entered allmulticast mode [ 299.883531][T13875] tipc: Resetting bearer [ 299.905859][T13872] tipc: Resetting bearer [ 299.938002][T13872] tipc: Disabling bearer [ 300.366940][T13914] syzkaller0: entered promiscuous mode [ 300.417877][T13914] syzkaller0: entered allmulticast mode [ 300.468559][T13921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.552777][T13921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.809207][T13945] IPVS: Error connecting to the multicast addr [ 300.887385][T13949] veth0: entered promiscuous mode [ 300.965146][T13948] veth0: left promiscuous mode [ 300.973137][T13954] netlink: 'syz.0.2414': attribute type 1 has an invalid length. [ 301.090827][T13954] 8021q: adding VLAN 0 to HW filter on device bond3 [ 301.119436][T13960] bond3: (slave ip6gretap1): making interface the new active one [ 301.128923][T13960] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 301.398683][T13987] __nla_validate_parse: 9 callbacks suppressed [ 301.398700][T13987] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2421'. [ 301.410320][T13980] tipc: Enabled bearer , priority 0 [ 301.421283][T13980] syzkaller0: entered promiscuous mode [ 301.427296][T13980] syzkaller0: entered allmulticast mode [ 301.512467][T13976] tipc: Resetting bearer [ 301.555400][T13976] tipc: Disabling bearer [ 301.631836][T14003] netlink: 1200 bytes leftover after parsing attributes in process `syz.4.2426'. [ 301.642224][T14003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2426'. [ 301.848577][T14020] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2431'. [ 301.859614][T14014] syzkaller0: entered promiscuous mode [ 301.865170][T14014] syzkaller0: entered allmulticast mode [ 301.951034][T14023] hsr0 speed is unknown, defaulting to 1000 [ 301.994305][T14022] tipc: Enabled bearer , priority 0 [ 302.015508][T14008] tipc: Resetting bearer [ 302.058616][T14008] tipc: Disabling bearer [ 302.080586][T14023] hsr0 speed is unknown, defaulting to 1000 [ 302.136759][T14023] hsr0 speed is unknown, defaulting to 1000 [ 302.172108][T14023] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 302.217210][T14043] tipc: Enabled bearer , priority 0 [ 302.225127][T14023] hsr0 speed is unknown, defaulting to 1000 [ 302.231909][T14043] syzkaller0: entered promiscuous mode [ 302.240055][T14043] syzkaller0: entered allmulticast mode [ 302.246950][T14023] hsr0 speed is unknown, defaulting to 1000 [ 302.268211][T14023] hsr0 speed is unknown, defaulting to 1000 [ 302.283338][T14043] tipc: Resetting bearer [ 302.291702][T14023] hsr0 speed is unknown, defaulting to 1000 [ 302.300422][T14041] tipc: Resetting bearer [ 302.333099][T14041] tipc: Disabling bearer [ 302.359606][T14023] hsr0 speed is unknown, defaulting to 1000 [ 302.374169][T14049] netlink: 'syz.1.2438': attribute type 4 has an invalid length. [ 302.383200][T14049] netlink: 'syz.1.2438': attribute type 4 has an invalid length. [ 302.496855][T14056] veth0: entered promiscuous mode [ 302.580848][T14056] veth0: left promiscuous mode [ 302.629669][T14068] netlink: 'syz.4.2444': attribute type 2 has an invalid length. [ 302.707011][T14074] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 302.716526][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2446'. [ 302.733652][T14074] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 302.750105][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2446'. [ 302.872852][T14085] syzkaller0: entered promiscuous mode [ 302.886532][T14085] syzkaller0: entered allmulticast mode [ 302.947607][T14088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2450'. [ 302.978952][T14090] tipc: Enabled bearer , priority 0 [ 303.026595][T14084] tipc: Resetting bearer [ 303.105690][T14084] tipc: Disabling bearer [ 303.138734][T14105] netlink: 'syz.2.2455': attribute type 3 has an invalid length. [ 303.160716][T14103] netlink: 'syz.2.2455': attribute type 3 has an invalid length. [ 303.189369][T14109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2456'. [ 303.213319][T14105] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2455'. [ 303.214809][T14103] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2455'. [ 303.444567][T14121] netlink: 'syz.0.2457': attribute type 1 has an invalid length. [ 303.999565][T14182] sctp: [Deprecated]: syz.4.2467 (pid 14182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.999565][T14182] Use struct sctp_sack_info instead [ 304.021435][T14184] syzkaller0: entered promiscuous mode [ 304.027156][T14184] syzkaller0: entered allmulticast mode [ 304.071748][T14186] tipc: Enabled bearer , priority 0 [ 304.084627][T14184] tipc: Enabled bearer , priority 0 [ 304.092462][T14186] syzkaller0: entered promiscuous mode [ 304.098274][T14186] syzkaller0: entered allmulticast mode [ 304.115105][T14183] tipc: Resetting bearer [ 304.146056][T14183] tipc: Disabling bearer [ 304.156664][T14185] tipc: Resetting bearer [ 304.249921][T14185] tipc: Disabling bearer [ 304.746306][T14228] sctp: [Deprecated]: syz.1.2483 (pid 14228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.746306][T14228] Use struct sctp_sack_info instead [ 346.029087][T14235] tipc: Enabling not permitted [ 346.059913][T14235] tipc: Enabling of bearer rejected, failed to enable media [ 346.104712][T14240] syzkaller0: entered promiscuous mode [ 346.119112][T14240] syzkaller0: entered allmulticast mode [ 346.202467][T14245] tipc: Enabled bearer , priority 0 [ 346.226674][T14239] tipc: Resetting bearer [ 346.270081][T14239] tipc: Disabling bearer [ 346.293487][T14252] xt_hashlimit: size too large, truncated to 1048576 [ 347.543827][T14303] syzkaller0: entered promiscuous mode [ 347.552582][T14303] syzkaller0: entered allmulticast mode [ 347.585786][T14306] netlink: 'syz.0.2506': attribute type 39 has an invalid length. [ 347.608086][T14303] tipc: Enabled bearer , priority 0 [ 347.618745][T14302] tipc: Resetting bearer [ 347.660586][T14302] tipc: Disabling bearer [ 347.851430][T14332] ipt_REJECT: TCP_RESET invalid for non-tcp [ 348.025642][T14324] bond6: option resend_igmp: invalid value (32767) [ 348.050375][T14324] bond6: option resend_igmp: allowed values 0 - 255 [ 348.075954][T14324] bond6 (unregistering): Released all slaves [ 348.100919][ T3463] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 348.126706][T14334] __nla_validate_parse: 8 callbacks suppressed [ 348.126733][T14334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2514'. [ 348.485139][T14373] syzkaller0: entered promiscuous mode [ 348.490862][T14373] syzkaller0: entered allmulticast mode [ 348.961771][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'. [ 349.241772][T14402] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2531'. [ 349.247851][T14404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.285006][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2531'. [ 349.428298][T14413] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 349.717720][T14429] syzkaller0: entered promiscuous mode [ 349.723247][T14429] syzkaller0: entered allmulticast mode [ 349.754984][T14431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2540'. [ 349.781906][T14429] tipc: Enabled bearer , priority 0 [ 349.793686][T14434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2541'. [ 349.808719][T14428] tipc: Resetting bearer [ 349.857906][T14428] tipc: Disabling bearer [ 349.888803][T14436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2542'. [ 349.908197][T14436] batman_adv: batadv0: Interface deactivated: dummy0 [ 349.951123][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2544'. [ 349.981429][T14444] netlink: 'syz.1.2544': attribute type 1 has an invalid length. [ 349.998663][T14436] batman_adv: batadv0: Removing interface: dummy0 [ 350.271414][T14465] smc: net device gre0 applied user defined pnetid SYZ1 [ 350.305262][T14470] smc: net device gre0 erased user defined pnetid SYZ1 [ 350.391448][T14475] netlink: 'syz.0.2552': attribute type 1 has an invalid length. [ 350.513648][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2554'. [ 350.598171][T14489] bridge0: left allmulticast mode [ 350.940999][ T1091] [ 350.943354][ T1091] ============================================ [ 350.949519][ T1091] WARNING: possible recursive locking detected [ 350.955747][ T1091] syzkaller #0 Not tainted [ 350.960137][ T1091] -------------------------------------------- [ 350.966265][ T1091] kworker/u8:5/1091 is trying to acquire lock: [ 350.972398][ T1091] ffffe8ffffd9ca38 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x707/0xb80 [ 350.981600][ T1091] [ 350.981600][ T1091] but task is already holding lock: [ 350.989041][ T1091] ffffe8ffffd9ca88 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 350.998254][ T1091] [ 350.998254][ T1091] other info that might help us debug this: [ 351.006286][ T1091] Possible unsafe locking scenario: [ 351.006286][ T1091] [ 351.013713][ T1091] CPU0 [ 351.016971][ T1091] ---- [ 351.020229][ T1091] lock(&pd_list->lock); [ 351.024534][ T1091] lock(&pd_list->lock); [ 351.028844][ T1091] [ 351.028844][ T1091] *** DEADLOCK *** [ 351.028844][ T1091] [ 351.036961][ T1091] May be due to missing lock nesting notation [ 351.036961][ T1091] [ 351.045270][ T1091] 3 locks held by kworker/u8:5/1091: [ 351.050527][ T1091] #0: ffff8881462f3148 ((wq_completion)pdecrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 351.062501][ T1091] #1: ffffc90003c9fba0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 351.074332][ T1091] #2: ffffe8ffffd9ca88 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 351.083974][ T1091] [ 351.083974][ T1091] stack backtrace: [ 351.089853][ T1091] CPU: 0 UID: 0 PID: 1091 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 351.089876][ T1091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 351.089884][ T1091] Workqueue: pdecrypt_parallel padata_parallel_worker [ 351.089912][ T1091] Call Trace: [ 351.089919][ T1091] [ 351.089926][ T1091] dump_stack_lvl+0x189/0x250 [ 351.089942][ T1091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.089954][ T1091] ? __pfx__printk+0x10/0x10 [ 351.089964][ T1091] ? print_lock_name+0xde/0x100 [ 351.089974][ T1091] print_deadlock_bug+0x28b/0x2a0 [ 351.089986][ T1091] validate_chain+0x1a3f/0x2140 [ 351.089998][ T1091] ? __queue_work+0x102/0xfb0 [ 351.090010][ T1091] ? look_up_lock_class+0x74/0x170 [ 351.090023][ T1091] ? register_lock_class+0x51/0x320 [ 351.090033][ T1091] __lock_acquire+0xab9/0xd20 [ 351.090043][ T1091] ? padata_do_serial+0x707/0xb80 [ 351.090054][ T1091] lock_acquire+0x120/0x360 [ 351.090063][ T1091] ? padata_do_serial+0x707/0xb80 [ 351.090076][ T1091] _raw_spin_lock+0x2e/0x40 [ 351.090088][ T1091] ? padata_do_serial+0x707/0xb80 [ 351.090099][ T1091] padata_do_serial+0x707/0xb80 [ 351.090113][ T1091] ? padata_parallel_worker+0x44/0x1d0 [ 351.090124][ T1091] padata_parallel_worker+0x75/0x1d0 [ 351.090135][ T1091] ? process_scheduled_works+0x9ef/0x17b0 [ 351.090145][ T1091] process_scheduled_works+0xae1/0x17b0 [ 351.090161][ T1091] ? __pfx_process_scheduled_works+0x10/0x10 [ 351.090173][ T1091] worker_thread+0x8a0/0xda0 [ 351.090188][ T1091] kthread+0x711/0x8a0 [ 351.090202][ T1091] ? __pfx_worker_thread+0x10/0x10 [ 351.090211][ T1091] ? __pfx_kthread+0x10/0x10 [ 351.090223][ T1091] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.090234][ T1091] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.090245][ T1091] ? __pfx_kthread+0x10/0x10 [ 351.090257][ T1091] ret_from_fork+0x4bc/0x870 [ 351.090267][ T1091] ? __pfx_ret_from_fork+0x10/0x10 [ 351.090278][ T1091] ? __switch_to_asm+0x39/0x70 [ 351.090285][ T1091] ? __switch_to_asm+0x33/0x70 [ 351.090292][ T1091] ? __pfx_kthread+0x10/0x10 [ 351.090304][ T1091] ret_from_fork_asm+0x1a/0x30 [ 351.090316][ T1091]